Impact Score: 5/10
Keycloak 26.4.5 โ Release Notes & Engineering Impact
Source available โ automated, not human-reviewed
Component: keycloak ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
โก Executive Summary (TL;DR)
Keycloak 26.4.5. Source highlight: Before upgrading refer to
Who Does This Impact? (Role-Based Analysis)
๐ป Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
๐ Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
โ๏ธ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
๐ View Raw Release Notes (Original Developer Log)
<div>
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/#migration-changes">the migration guide</a> for a complete list of changes.</p>
<h2>All resolved issues</h2>
<h3>Bugs</h3>
<ul>
<li><a href="https://github.com/keycloak/keycloak/issues/42601">#42601</a> Flaky test: org.keycloak.testsuite.broker.KcOidcBrokerTest#testPostBrokerLoginFlowWithOTP <code>ci</code></li>
<li><a href="https://github.com/keycloak/keycloak/issues/43212">#43212</a> Document missing artifact dependency for UserStoragePrivateUtil <code>docs</code></li>
<li><a href="https://github.com/keycloak/keycloak/issues/43564">#43564</a> Invalid liquibase check sum for jpa-changelog-2.5.0.xml <code>core</code></li>
<li><a href="https://github.com/keycloak/keycloak/issues/43718">#43718</a> Email Not Persisted During Registration When "Email as Username" is Enabled and User Edit Permission is Disabled <code>user-profile</code></li>
<li><a href="https://github.com/keycloak/keycloak/issues/43793">#43793</a> import does not seem to run db migration <code>import-export</code></li>
<li><a href="https://github.com/keycloak/keycloak/issues/43883">#43883</a> Creating group policy on a client uses "manage-clients" role if FGAP V1 is disabled <code>authorization-services</code></li>
<li><a href="https://github.com/keycloak/keycloak/issues/44010">#44010</a> Ordering attributes will unset the unmanaged attribute policy <code>user-profile</code></li>
<li><a href="https://github.com/keycloak/keycloak/issues/44031">#44031</a> Can't build keycloak 26.4.4 with quarkus.launch.rebuild=true <code>dist/quarkus</code></li>
<li><a href="https://github.com/keycloak/keycloak/issues/44056">#44056</a> Allow only normalized URLs in requests caused a regression in view authz permission details in Admin Consol <code>admin/ui</code></li>
<li><a href="https://github.com/keycloak/keycloak/issues/44117">#44117</a> DockerClientTest failure <code>testsuite</code></li>
</ul>
</div>