release/22.0 by stianst · Pull Request #23125 · keycloak/keycloak

stianst · 2023-09-11T08:14:05Z

Enable 22 migration docs (Enable 22 migration docs #21635)
Fix links to quickstarts (Fix links to quickstarts #21639) (Fix links to quickstarts (#21639) #21641)
Switches the merging logic to using the override as the basis (Switches the merging logic to using the override as the basis #21711)
keycloakCRName and realm are no longer marked as required in KeycloakRealmImport CRD (keycloakCRName and realm are no longer marked as required in KeycloakRealmImport CRD #21634)
Revert emailVerified to false if email modified on force-sync non-trusted broker Closes https://github.com/keycloak/security/issues/48
Various fixes for localization of the Account Console (Various fixes for localization of the Account Console #21735)
Fixed a11y violations for clients (Fixed a11y violations for clients #21736)
Re-augmentation failing on windows (Re-augmentation failing on windows #21662)
Fix JSON syntax of translation files (Fix JSON syntax of translation files #21734) (Fix JSON syntax of translation files (#21734) #21742)
Check whether realm has store enabled for immediately sent events
Fall back to IdentityProvider component type if present (Fall back to IdentityProvider component type if present #21738)
Introduce delay in SessionTimeoutsTest to allow xsite replication to finish
Do not cache a session that is already expired in listener (SessionTimeoutsTest flaky test fix #21684)
Cleanup files that shouldn't have been committed (Cleanup files that shouldn't have been committed #21793)
switches the workaround to JsonNode, which produces a cleaner crd (switches the workaround to JsonNode, which produces a cleaner crd #21829)
Adds a pod list rbac (Adds a pod list rbac #21850)
Introduce re-try mechanism when deserializing during import for map store
Warnings about TLS properties on startup
Ensure that the flow tested to be deleted is a built in flow Closes Flaky test: org.keycloak.testsuite.admin.authentication.FlowTest#testAddRemoveFlow #20763
Check RDN attribute for DN membership Closes NullPointerException in GroupTreeResolver with LDAP #20718
Upgrade Infinispan to 14.0.13.Final (Upgrade Infinispan to 14.0.13.Final #21861)
[20455] Arquillian reflection bug -> using different setter to avoid overloading. ([20455] Arquillian reflection bug -> using different setter to avoid overloading. #21806)
Increase timeout for legacy tests (Increase timeout for legacy tests #21811)
Removing workaround for state transfer never completes
Update bcpkix and bcprov dependencies (Update bcpkix and bcprov dependencies #21543) (Update bcpkix and bcprov dependencies (#21543) #21845)
Keycloak forgets ui_locales parameter when using reset password closes Keycloak "forgets" ui_locales parameter when using Reset Password functionality #10981
Downgrade Jansi library to prevent kcadm exception on Windows (Downgrade Jansi library to prevent kcadm exception on Windows #21986)
Upgrade to Quarkus 3.2.2.Final (Upgrade to Quarkus 3.2.2.Final #21912)
Fix script tests on windows (Fix script tests on windows #21942) (Fix script tests on windows (#21942) #21988)
Profile activation for WF app server doesn't properly work for Windows
Add logout other sessions checkbox to TOTP, webauthn and recovery authn codes setup pages (Add logout other sessions checkbox to TOTP, webauthn and recovery authn codes setup pages #21897)
Fixed updated links for freeipa (Fixed updated links for freeipa #22040) (Fixed updated links for freeipa (#22040) #22054)
Hostname guide improvements (Hostname guide improvements #22117)
Fix authenticatorConfig for javascript providers Closes JavaScript Authenticator Providers not updated automatically on build and SQL error when removing/adding in flow #20005
Remove option Nerver Expires for tokens in Advanced OIDC client configuration Closes Client Session Max set never expires is not working anymore since 22.0.0 #21927
Fix Operator tests on OpenShift
Upgrade to Quarkus 3.2.3 (Upgrade to Quarkus 3.2.3 #22256)
Ignore new NodeJS redirect (Ignore new NodeJS redirect #22218)
Update OCP4 Social IdP example setup in the latest docs (Update OCP4 Social IdP example setup in the latest docs #22293)
Prevent concurrent session cleanup on different instances in the cluster (Prevent concurrent session cleanup on different instances in the cluster #22298)
Changes to the time offset should be visible in all threads instantly (Changes to the time offset should be visible in all threads instantly #22291)
Fixing how e-mail attribute permissions are set for both USER_API and ACCOUNT contexts
Remove JUnit dependencies from the distribution (Remove JUnit dependencies from the distribution #22458)
removes logging full resources to omit secret data (removes logging full resources to omit secret data #22440)
Remove Vert.x Dev UI dependency (Remove Vert.x Dev UI dependency #22466)
Upgrade to Infinispan 14.0.14 (Upgrade to Infinispan 14.0.14 #22485)
Upgrade to Quarkus 3.2.4.Final (Upgrade to Quarkus 3.2.4.Final #22420)
removing vertx-uri-template as a dependency (removing vertx-uri-template as a dependency #22502)
Remove Brotli dependencies from the distribution and operator (Remove Brotli dependencies from the distribution and operator #22510)
RedirectUtils needs to use KeycloakUriBuilder with no parameter parsing Closes Redirect URI with encoded curly brackets rejected #22424
Fix IDELauncher after removing Vert.x Dev UI dependency (Fix IDELauncher after removing Vert.x Dev UI dependency #22522)
removing build time dependencies from the runtime (removing build time dependencies from the runtime #22574)
removing the quarkus-minikube dependency (removing the quarkus-minikube dependency #22575)
Don't render fed link w/o view-realm access. (Don't render fed link w/o view-realm access. #22397)
Allow assign realm roles with query-users access. (Allow assign realm roles with query-users access. #22396)
Allow view creds tab if view fine-grained permission (Allow view creds tab if view fine-grained permission #22394)
Upgrade Prettier to the latest version (Upgrade Prettier to the latest version #22618)
Use Freemarker links between different guide pages (Use Freemarker links between different guide pages #22490)
Address Getting Started review (Address Getting Started review #22637)
LGPL license header in files incompatible with Apache v2.0 (LGPL license header in files incompatible with Apache v2.0 #21612) (LGPL license header in files incompatible with Apache v2.0 (#21612) #22636)
now uses save from edit user (now uses save from edit user #21809) (now uses save from edit user #22648)
keep config if it exists (keep config if it exists #22247) (keep config if it exists #22650)
added alias to view (added alias to view #22219) (added alias to view #22649)
fixes the details page (fixes the details page #21776) (fixes the details page #22651)
no longer use subgroup cache (no longer use subgroup cache #21783) (no longer use subgroup cache #22655)
fix for validators that don't have config (fix for validators that don't have config #21579) (fix for validators that don't have config #22653)
render components based on the annotations (render components based on the annotations #21180) (render components based on the annotations #22652)
made added groups browsable (made added groups browsable #21588) (made added groups browsable #22658)
lazy populate the treeview for groups (lazy populate the treeview for groups #21520) (lazy populate the treeview for groups #22656)
Remove Oracle Database JDBC driver from the Keycloak distribution (Remove Oracle Database JDBC driver from the Keycloak distribution #22598)
Make base theme hidden for admin and account UIs. (Make base theme hidden for admin and account UIs. #22672) (Make base theme hidden for admin and account UIs. #22728)
Fix cache option defaults in help (Fix cache option defaults in help #22708) (Fix cache option defaults in help (#22708) #22749)
Backports Unable to remove user attributes #22570 (Backports #22570 #22753)
Add missing translation for theme select placeholder text (Add missing translation for theme select placeholder text #22782)
Provide support for determining community/product guides (Provide support for determining community/product guides #22787)
Parsing response from user info rather than the access token
Backports Account Console: Remaining A11y Issues #22670 (Backports #22670 #22766)
Fallback to next LDAP/Kerberos provider when not able to find authenticated Kerberos principal (Fallback to next LDAP/Kerberos provider when not able to find authent… #22788)
Add a Maven profile to remove GELF support (Add a Maven profile to remove GELF support #22797)
Upgrade to Quarkus 3.2.5.Final (Upgrade to Quarkus 3.2.5.Final #22747)
Use an original domain name of Kerberos Principal in UserModel attribute instead of configured value of Kerberos realm in User federation closes Use an original domain name of Kerberos Principal in UserModel attribute instead of configured value of Kerberos realm in User federation #20045
removes direct operator installation for the product (removes direct operator installation for the product #22832)
Blank Java section in Securing Apps
fixed eventTypes mapping issue (Added missing eventType mapping #22817) (Backports #22709 #22850)
GH Actions -> archive surefire reports (GH Actions - Surefire reports artifact upload #21913). (GH Actions -> archive surefire reports (#21913). #21915) (GH Actions -> archive surefire reports (#21913). (#21915) #22858)
Removes the bundle generator from the runtime (Removes the bundle generator from the runtime #22860)
Use screenshot showing fast (Use screenshot showing fast #22883)
Remove log-level property for ClassTransformingBuildStep in Quarkus (Remove log-level property for ClassTransformingBuildStep in Quarkus #22822)
Fix conditional upload of surefire output for SSSD (Fix conditional upload of surefire output for SSSD #22899)
Upgrade to Infinispan 14.0.15.Final (Upgrade to Infinispan 14.0.15.Final #22887) (Upgrade to Infinispan 14.0.15.Final #22896)
Centralize user form to user representation conversion (Centralize user form to user representation conversion #22925)
Remove scheduled from individual workflows (Remove scheduled from individual workflows #21847)
Update schedule-nightly.yml (Update schedule-nightly.yml #21894)
Update schedule-nightly.yml (Update schedule-nightly.yml #21895)
Add correct translation key for temporary password reset help text (Add correct translation key for temporary password reset help text #22933)
Add Java Distribution IT for Windows (Add Java Distribution IT for Windows #21675)
Fix conditional checking for PR testing (Fix conditional checking for PR testing #21947)
Place Java setup in re-usable workflow file (Place Java setup in re-usable workflow file #17541)
Change concurrency for GH workflows to prevent conflicts between PRs (Change concurrency for GH workflows to prevent conflicts between PRs #22018)
Refactor conditional in GH workflows (Refactor conditional in GH workflows #22020)
Refactor conditional for sssd testing (Refactor conditional for sssd testing #22053)
Fix conditional for sssd (Fix conditional for sssd #22069)
Add wagon http retries to all maven options (Add wagon http retries to all maven options #22060)
Execute CI when some changes were made in scripts dir (Execute CI when some changes were made in scripts dir #22065)
Run store testing conditionally for PRs (Run store testing conditionally for PRs #22070)
Execute only FIPS Unit tests, not UT of dependent modules (Execute only FIPS Unit tests, not UT of dependent modules #22038)
Closes Store and SSSD tests are not running in GHA #22216. Fix conditional for ci-store and ci-sssd.
Fix not-reported flaky tests (Fix not-reported flaky tests #22639)
Error message when JDBC driver is missing is not helpful (Error message when JDBC driver is missing is not helpful #22934)
Temporarily disable WebAuthn Firefox testing (Temporarily disable WebAuthn Firefox testing #22071)
Closes Use "Chrome for Testing" in GHA #22028. Use new "Chrome for Testing" browser and driver.
Partially fix Arquillian not able to find the correct chrome browser binary #22251. Disable Chrome for testing.
Allow archive surefire reports for release branches also when test suite fail. (Allow archive surefire reports for release branches also when a test suite fails. #22891)
Upgrade to Infinispan 14.0.16 (Upgrade to Infinispan 14.0.16 #22975)
Bump github/codeql-action from 2.20.2 to 2.20.4 (Bump github/codeql-action from 2.20.2 to 2.20.4 #21722)
Bump github/codeql-action from 2.20.4 to 2.21.0 (Bump github/codeql-action from 2.20.4 to 2.21.0 #21833)
Bump github/codeql-action from 2.21.0 to 2.21.1 (Bump github/codeql-action from 2.21.0 to 2.21.1 #22015)
Bump github/codeql-action from 2.21.1 to 2.21.2
Bump cypress-io/github-action from 5 to 6 (Bump cypress-io/github-action from 5 to 6 #22595)
Bump github/codeql-action from 2.21.2 to 2.21.4 (Bump github/codeql-action from 2.21.2 to 2.21.4 #22444)
Bump github/codeql-action from 2.21.4 to 2.21.5 (Bump github/codeql-action from 2.21.4 to 2.21.5 #22773)
Status check should fail if "conditional" step fails (Status check should fail if "conditional" step fails (#22948) #22972)
Execute store tests if relevant tests have been updated
Update .github/actions/conditional/conditional.sh
Disable ZeroDowntimeTest
Clean LDAP between test method executions
Remove org.jetbrains:annotations:jar from server distribution. (Remove org.jetbrains:annotations:jar from server distribution #23015)
Decoupling legacy and dynamic user profiles and exposing metadata from admin api
SAML Adapter fix for EAP8 and WF29
Ensure the SAML Galleon feature pack generates an appropriate licenses file
Some more fixes for issue22623
Update the Keycloak SAML adapter subsystem to no longer use the AttributeDefinition#getAttributeMarshaller method
Tidy up SAML Adapter Galleon Feature Pack build
Set distinct wildfly-common versions for Quarkus and WildFly based modules
Add a new identity provider for LinkedIn based on OIDC Closes LinkedIn as Identity provider not working #22383
Remove MS SQL JDBC driver from the Keycloak product (Remove MS SQL JDBC driver from the Keycloak product #23060)
Registration flow fixed (Registration flow fixed #23064)
Add old LinkedIn provider to the deprecated profile Closes Add "LinkedIn (deprecated)" provider to the DEPRECATED profile #23067
Quarkus IT that use Oracle DB don't work with -Dproduct (Quarkus IT that use Oracle DB don't work with -Dproduct #23088)
Upgrade to Infinispan 14.0.17 (Upgrade to Infinispan 14.0.17 (#23097) #23099)
Attributes without a value set are not rendered in the account console (Attributes without a value set are not rendered in the account console #22968)
Broker claim mapper not recognizing claims from user info endpoint
Fix failure in identity_providers_test.spec.ts after old LinkedId provider was deprecated
Fix lint errorin identity_providers_test.spec.ts

…ak#21711) Ensures additionalProperties are the lowest precedence Also removes support for setting the image pull secrets via the unsupported podtemplate Closes keycloak#10503

…loakRealmImport CRD (keycloak#21634) Closes keycloak#21607 (cherry picked from commit 6a3ea1a)

…sted broker Closes keycloak/security#48

Backports keycloak#21657

Backports keycloak#17711 Co-authored-by: agagancarczyk <4890675+agagancarczyk@users.noreply.github.com>

Closes keycloak#21625

Closes keycloak#21733 (cherry picked from commit 7c50b10)

Closes keycloak#21698 Signed-off-by: Michal Hajas <mhajas@redhat.com> (cherry picked from commit 07c2733)

…1738) Backports keycloak#15344 Co-authored-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

…finish Fixes keycloak#20983 (cherry picked from commit 67b20df)

…21684) Fixes part of keycloak#20983 (cherry picked from commit de04684)

Closes keycloak#21792 (cherry picked from commit bab224d)

…ycloak#21829) Closes keycloak#21739

Closes keycloak#21814

…tore Closes keycloak#21824 (cherry picked from commit 2f5a963)

Fixes keycloak#21801

Closes keycloak#20763

Closes keycloak#20718

Closes keycloak#21564 (cherry picked from commit 7c9593f)

…overloading. (keycloak#21806)

Closes keycloak#21810

Closes keycloak#21256 (cherry picked from commit 6907134)

Closes keycloak#21360 (cherry picked from commit 776bcbc)

closes keycloak#10981 (cherry picked from commit 03716ed)

…ak#21986) Closes keycloak#21851 Signed-off-by: Peter Zaoral <pzaoral@redhat.com>

Closes keycloak#21907 (cherry picked from commit ecdf8e8)

Closes keycloak#21778 keycloak#21779 keycloak#21780 (cherry picked from commit bb8ba1a)

Fixes keycloak#21284

Closes keycloak#21514 Co-authored-by: Vilmos Nagy <vilmos.nagy@outlook.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Marek Posolda <mposolda@gmail.com> (cherry picked from commit 506e253)

Closes keycloak#23067

Fixes keycloak#23058

Closes keycloak#23046 (cherry picked from commit 93a80e9) Co-authored-by: Alexander Schwartz <aschwart@redhat.com>

keycloak#22968) Closes keycloak#22961

Closes keycloak#12137

…vider was deprecated Closes keycloak#23118

stianst and others added 30 commits July 12, 2023 14:03

Enable 22 migration docs (keycloak#21635)

9f4b5c6

Closes keycloak#21629

Fix links to quickstarts (keycloak#21639) (keycloak#21641)

a397190

Closes keycloak#21637

Switches the merging logic to using the override as the basis (keyclo…

c7920ee

…ak#21711) Ensures additionalProperties are the lowest precedence Also removes support for setting the image pull secrets via the unsupported podtemplate Closes keycloak#10503

keycloakCRName and realm are no longer marked as required in Keyc…

1c56f9e

…loakRealmImport CRD (keycloak#21634) Closes keycloak#21607 (cherry picked from commit 6a3ea1a)

Revert emailVerified to false if email modified on force-sync non-tru…

87a50d3

…sted broker Closes keycloak/security#48

Various fixes for localization of the Account Console (keycloak#21735)

32dfad4

Backports keycloak#21657

Fixed a11y violations for clients (keycloak#21736)

a85d6b2

Backports keycloak#17711 Co-authored-by: agagancarczyk <4890675+agagancarczyk@users.noreply.github.com>

Re-augmentation failing on windows (keycloak#21662)

de8887e

Closes keycloak#21625

Fix JSON syntax of translation files (keycloak#21734) (keycloak#21742)

5489ab8

Closes keycloak#21733 (cherry picked from commit 7c50b10)

Check whether realm has store enabled for immediately sent events

6d28c31

Closes keycloak#21698 Signed-off-by: Michal Hajas <mhajas@redhat.com> (cherry picked from commit 07c2733)

Fall back to IdentityProvider component type if present (keycloak#2…

558405d

…1738) Backports keycloak#15344 Co-authored-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

Introduce delay in SessionTimeoutsTest to allow xsite replication to …

9057e34

…finish Fixes keycloak#20983 (cherry picked from commit 67b20df)

Do not cache a session that is already expired in listener (keycloak#…

d7603f6

…21684) Fixes part of keycloak#20983 (cherry picked from commit de04684)

Cleanup files that shouldn't have been committed (keycloak#21793)

f291c48

Closes keycloak#21792 (cherry picked from commit bab224d)

switches the workaround to JsonNode, which produces a cleaner crd (ke…

be4eb60

…ycloak#21829) Closes keycloak#21739

Adds a pod list rbac (keycloak#21850)

d655876

Closes keycloak#21814

Introduce re-try mechanism when deserializing during import for map s…

bacc114

…tore Closes keycloak#21824 (cherry picked from commit 2f5a963)

Warnings about TLS properties on startup

7419dc4

Fixes keycloak#21801

Ensure that the flow tested to be deleted is a built in flow

7dea94b

Closes keycloak#20763

Check RDN attribute for DN membership

51a68c9

Closes keycloak#20718

Upgrade Infinispan to 14.0.13.Final (keycloak#21861)

4ddf782

Closes keycloak#21564 (cherry picked from commit 7c9593f)

[20455] Arquillian reflection bug -> using different setter to avoid …

6076108

…overloading. (keycloak#21806)

Increase timeout for legacy tests (keycloak#21811)

e90047f

Closes keycloak#21810

Removing workaround for state transfer never completes

f95091e

Closes keycloak#21256 (cherry picked from commit 6907134)

Update bcpkix and bcprov dependencies (keycloak#21543) (keycloak#21845)

13893cb

Closes keycloak#21360 (cherry picked from commit 776bcbc)

Keycloak forgets ui_locales parameter when using reset password

6b83b38

closes keycloak#10981 (cherry picked from commit 03716ed)

Downgrade Jansi library to prevent kcadm exception on Windows (keyclo…

0349caf

…ak#21986) Closes keycloak#21851 Signed-off-by: Peter Zaoral <pzaoral@redhat.com>

Upgrade to Quarkus 3.2.2.Final (keycloak#21912)

6161109

Closes keycloak#21907 (cherry picked from commit ecdf8e8)

Fix script tests on windows (keycloak#21942) (keycloak#21988)

3bdf16b

Closes keycloak#21778 keycloak#21779 keycloak#21780 (cherry picked from commit bb8ba1a)

Profile activation for WF app server doesn't properly work for Windows

34c941d

Fixes keycloak#21284

mposolda and others added 8 commits September 8, 2023 10:06

Registration flow fixed (keycloak#23064)

47b97b9

Closes keycloak#21514 Co-authored-by: Vilmos Nagy <vilmos.nagy@outlook.com> Co-authored-by: Alexander Schwartz <aschwart@redhat.com> Co-authored-by: Marek Posolda <mposolda@gmail.com> (cherry picked from commit 506e253)

Add old LinkedIn provider to the deprecated profile

f52af8d

Closes keycloak#23067

Quarkus IT that use Oracle DB don't work with -Dproduct (keycloak#23088)

1d15f1e

Fixes keycloak#23058

Upgrade to Infinispan 14.0.17 (keycloak#23099)

1743251

Closes keycloak#23046 (cherry picked from commit 93a80e9) Co-authored-by: Alexander Schwartz <aschwart@redhat.com>

Attributes without a value set are not rendered in the account console (

38522e4

keycloak#22968) Closes keycloak#22961

Broker claim mapper not recognizing claims from user info endpoint

ed339de

Closes keycloak#12137

Fix failure in identity_providers_test.spec.ts after old LinkedId pro…

ba58b51

…vider was deprecated Closes keycloak#23118

Fix lint errorin identity_providers_test.spec.ts

d15f9c7

stianst requested a review from a team as a code owner September 11, 2023 08:14

stianst requested a review from a team September 11, 2023 08:14

stianst requested review from a team as code owners September 11, 2023 08:14

ghost added team/ui team/cloud-native labels Sep 11, 2023

stianst closed this Sep 11, 2023

stianst deleted the release/22.0 branch September 11, 2023 08:26

Navigation Menu

Uh oh!

release/22.0 - #23125

release/22.0#23125
stianst wants to merge 144 commits into
keycloak:mainfrom
stianst:release/22.0

stianst commented Sep 11, 2023

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

Uh oh!

Conversation

stianst commented Sep 11, 2023

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants