Keycloak 26.0.2 — Release Notes & Engineering Impact

Source available — automated, not human-reviewed

Component: keycloak · Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified — check source notes

📄 .MD

⚡ Executive Summary (TL;DR)

Keycloak 26.0.2. Source highlight: Before upgrading refer to

Visit Keycloak Official Site ↗ Official Release Source ↗ All Keycloak Releases 📡 Keycloak RSS

Who Does This Impact? (Role-Based Analysis)

💻 Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

📊 Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

⚙️ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

📄 View Raw Release Notes (Original Developer Log)

<div> <h2>Upgrading</h2> <p>Before upgrading refer to <a href="file:/home/runner/work/keycloak-rel/keycloak-rel/target/web/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p> <h2>All resolved issues</h2> <h3>Enhancements</h3> <ul> <li><a href="https://github.com/keycloak/keycloak/issues/32110">#32110</a> [Documentation] - Configuring trusted certificates - Fully specify truststore path <code>dist/quarkus</code></li> </ul> <h3>Bugs</h3> <ul> <li><a href="https://github.com/keycloak/keycloak/issues/15635">#15635</a> oidc - JavaScript-Adapter LocalStorage#clearExpired does not clear all possible items <code>adapter/javascript</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/19101">#19101</a> Uncaught (in promise): QuotaExceededError <code>adapter/javascript</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/20287">#20287</a> When using `oidcProvider` config url (.well-known) it's not possible to use `silentCheckSsoRedirectUri` <code>adapter/javascript</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/28978">#28978</a> some GUI validation check missing <code>admin/ui</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/30832">#30832</a> Organization API not available from OpenAPI documentation <code>admin/api</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/31724">#31724</a> Logout not working after removing Identity Provider of user <code>identity-brokering</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/33072">#33072</a> Passkeys: Infinite (re-)loading loop on browsers with WebAuthn Conditional UI disabled <code>authentication/webauthn</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/33844">#33844</a> Wrong documentation link in keycloak-js readme <code>docs</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/33902">#33902</a> Not persisted config settings prevent server start <code>dist/quarkus</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/33948">#33948</a> [PERF] OpenTelemetry is initialized even when disabled </li> <li><a href="https://github.com/keycloak/keycloak/issues/33968">#33968</a> Not possible to close dialog boxes when clicking buttons or the close icon <code>admin/ui</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/33991">#33991</a> Doc CI - broken links error <code>docs</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/34009">#34009</a> grammatical error in "Managing Organizations" documentation <code>docs</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/34015">#34015</a> Home URL for security-admin-console is broken <code>admin/ui</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/34028">#34028</a> Custom keycloak login theme styles.css return error 404 <code>login/ui</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/34049">#34049</a> Org Invite: `linkExpiration` template variable represents 54 years in minutes <code>organizations</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/34063">#34063</a> Respect the locale set to a user when redering verify email pages <code>user-profile</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/34069">#34069</a> Do not show domain match message in the identity-first login when no login hint is provided <code>organizations</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/34075">#34075</a> Flaky test: org.keycloak.testsuite.broker.KcOidcBrokerTest#testPostBrokerLoginFlowWithOTP_bruteForceEnabled <code>ci</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/34095">#34095</a> Keycloak 26.0.0/26.0.1 Import Issue: Multiple Realms Not Imported, Duplicated Realm Imported Instead <code>import-export</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/34151">#34151</a> JS password validation doesn't work as intended with uppercase and lowercase minimum requirements <code>login/ui</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/34155">#34155</a> cli options starting or ending with ; or containing ;; mangle the cli handling <code>dist/quarkus</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/34224">#34224</a> Deleting a user leads to ISPN marshalling exception </li> </ul> </div>

← Older Version Keycloak 26.0.1 Newer Version → Keycloak 26.0.4