A substantial feature and maintenance release adds operator capabilities including workflows, JWT authorization grants, organization invitations, OpenTelemetry export, and Windows services. It also updates Quarkus and fixes correctness issues, while changing supported database versions and addressing a vulnerability in brute force detection settings.
Check if affected (2)
securityBrute force detection settings vulnerability, corrected
Applies if you configure brute force detection settings.
A vulnerability in brute force detection settings is corrected in Keycloak 26.5.0.
breaking
PostgreSQL 13.support removalx Applies if you depend on
PostgreSQL 13..x Support for
PostgreSQL 13.is removed in Keycloak 26.5.0.x
Plan ahead (1)
deprecatedFine-Grained Admin Permissions v1, deprecated
Applies if you enable
admin/fine-grained-permissions.Fine-Grained Admin Permissions v1 is deprecated in Keycloak 26.5.0 under
admin/fine-grained-permissions.