Keycloak 26.3.2 — Release Notes & Engineering Impact

<div> <h2>Upgrading</h2> <p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/#migration-changes">the migration guide</a> for a complete list of changes.</p> <h2>All resolved issues</h2> <h3>New features</h3> <ul> <li><a href="https://github.com/keycloak/keycloak/issues/40237">#40237</a> Add option "Requires short state parameter" to OIDC IDP <code>authentication</code></li> </ul> <h3>Enhancements</h3> <ul> <li><a href="https://github.com/keycloak/keycloak/issues/40970">#40970</a> Run clustering compatibility tests on release/x.y branches </li> <li><a href="https://github.com/keycloak/keycloak/issues/41034">#41034</a> Improve logging for client sessions load </li> <li><a href="https://github.com/keycloak/keycloak/issues/41257">#41257</a> Upgrade to Infinispan 15.0.18.Final <code>infinispan</code></li> </ul> <h3>Bugs</h3> <ul> <li><a href="https://github.com/keycloak/keycloak/issues/39091">#39091</a> Flaky test: org.keycloak.testsuite.cluster.JGroupsCertificateRotationClusterTest#testCoordinatorHasScheduleTask <code>ci</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/39634">#39634</a> Update MariaDB connector to 3.5.3 <code>dist/quarkus</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/39854">#39854</a> Flaky test: org.keycloak.testsuite.cluster.PermissionTicketInvalidationClusterTest#crudWithFailover <code>ci</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/40553">#40553</a> Upgrade org.postgresql:postgresql to version 42.7.7 to address CVE-2025-49146 <code>dependencies</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/40736">#40736</a> CVE-2025-49574 - Exposure of Resource to Wrong Sphere vulnerability in io.vertx:vertx-core <code>dependencies</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/40782">#40782</a> Flaky test: org.keycloak.testsuite.cluster.RealmInvalidationClusterTest#crudWithFailover <code>ci</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/40784">#40784</a> Default jdbc-ping cluster setup for distributed caches fails in Oracle <code>infinispan</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/40977">#40977</a> Loglevel recorded from build phase <code>dist/quarkus</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/40980">#40980</a> Can't update security-admin-console via admin UI with volatile sessions <code>infinispan</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/40995">#40995</a> LDAP / ModelException: At least one condition should be provided to OR query <code>core</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/41018">#41018</a> Flaky test: org.keycloak.testsuite.cluster.ClientInvalidationClusterTest#crudWithFailover <code>ci</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/41038">#41038</a> FIPS errors in CI </li> <li><a href="https://github.com/keycloak/keycloak/issues/41082">#41082</a> Multiple primary key defined when attempting to upgrade after 26.3.0 <code>core</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/41103">#41103</a> Service Account users now showing in the User List <code>admin/ui</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/41105">#41105</a> Unknown relation when removing realm role with --db-schema configured <code>storage</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/41152">#41152</a> Docs use em-dashes instead of double dashes for SPI options in regular text <code>docs</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/41204">#41204</a> UpdateTest CI failures <code>ci</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/41370">#41370</a> [26.3] MariaDB connector dependency is not properly overriden <code>dist/quarkus</code></li> </ul> </div>