Commits

Commit history

1. Commits on Oct 9, 2026

   • Organizations: Invitation link can be used by multiple users due to missing single-use check

     Show description for eb6d2dd
     

     martin-kanis

     authored and

     pedroigor

     committed
     eb6d2ddView commit details

     Copy full SHA for eb6d2dd

     Browse repository at this point

   • Reject workflow expressions with unrecognized characters (#53794)

     Show description for f38eea8
     erenkan

     authored
     f38eea8View commit details

     Copy full SHA for f38eea8

     Browse repository at this point

   • Avoid caching user data while external storage is unavailable (#51322)

     Show description for 057ab72
     hkwi

     authored
     057ab72View commit details

     Copy full SHA for 057ab72

     Browse repository at this point

   • Declare null, not undefined, for admin client lookups that tolerate a 404

     Show description for 27fd923
     

     ybai08

     authored and

     pedroigor

     committed
     27fd923View commit details

     Copy full SHA for 27fd923

     Browse repository at this point

   • Fix concurrent SAML schema validation

     Show description for f026b56
     

     atiqur-rahman-pro

     authored and

     mposolda

     committed
     f026b56View commit details

     Copy full SHA for f026b56

     Browse repository at this point

   • fixes CVE-2026-92358 by removing stale SUO proof (#53418)

     Show description for 351a4e9
     edewit

     authored
     351a4e9View commit details

     Copy full SHA for 351a4e9

     Browse repository at this point

   • Use deterministic ROUND time-claim strategy in OID4VCI conformance realm

     Show description for 6a4d53f
     

     2 peopleauthored and

     mposolda

     committed
     6a4d53fView commit details

     Copy full SHA for 6a4d53f

     Browse repository at this point

   • fixes CVE-2026-15943 by dropping when other values are changed (#53411)

     Show description for 17e1425
     edewit

     authored
     17e1425View commit details

     Copy full SHA for 17e1425

     Browse repository at this point

   • Resolve properties in the notify-user step subject

     Show description for 8539464
     

     ltronky

     authored and

     pedroigor

     committed
     8539464View commit details

     Copy full SHA for 8539464

     Browse repository at this point

   • Fix obsolete link (#53572)

     Show description for 7a4a00a
     andymunro

     authored
     7a4a00aView commit details

     Copy full SHA for 7a4a00a

     Browse repository at this point

   • Correct links that fail or are coded only for upstream

     Show description for 19e6f6e
     

     andymunro

     authored and

     mposolda

     committed
     19e6f6eView commit details

     Copy full SHA for 19e6f6e

     Browse repository at this point

   • Refer to YAML in the create workflow page subtitle (#53783)

     Show description for c0d9636
     erenkan

     authored
     c0d9636View commit details

     Copy full SHA for c0d9636

     Browse repository at this point
2. Commits on Oct 8, 2026

   • Filter role mappings by visibility in full group listings

     Show description for c7de391
     pedroigor

     authored
     c7de391View commit details

     Copy full SHA for c7de391

     Browse repository at this point

   • Restrict Twitter request token deserialization (#51750)

     Show description for 0c006ce
     Oluwatobi-Mustapha

     authored
     0c006ceView commit details

     Copy full SHA for 0c006ce

     Browse repository at this point

   • Fix EntityManager API documentation link

     Show description for dfdbeca
     

     3 peopleauthored and

     pedroigor

     committed
     dfdbecaView commit details

     Copy full SHA for dfdbeca

     Browse repository at this point

   • Let view-realm and manage-realm admins use the Authentication section

     Show description for 3c612ce
     

     ybai08

     authored and

     rmartinc

     committed
     3c612ceView commit details

     Copy full SHA for 3c612ce

     Browse repository at this point

   • non-imported federated users returned in search results for query-users-only delegated admins

     Show description for 85cb6f1
     

     vramik

     authored and

     pedroigor

     committed
     85cb6f1View commit details

     Copy full SHA for 85cb6f1

     Browse repository at this point

   • Move the note about mandatory signature validation for OIDC IdP backchannel logout into `changes-27_0_0.adoc`

     Show description for 8dc9412
     

     tkyjovsk

     authored and

     pedroigor

     committed
     8dc9412View commit details

     Copy full SHA for 8dc9412

     Browse repository at this point

   • Concurrent link and membership writes can create conflicting managed lifecycle owners

     Show description for 6bc3498
     

     vramik

     authored and

     pedroigor

     committed
     6bc3498View commit details

     Copy full SHA for 6bc3498

     Browse repository at this point

   • Decode binary LDAP attributes as UUID using mapped attribute name closes #53608

     Show description for 03a901e
     

     atiqur-rahman-pro

     authored and

     pedroigor

     committed
     03a901eView commit details

     Copy full SHA for 03a901e

     Browse repository at this point

   • Limit the size in CRL and OCSP http responses (#53697)

     Show description for 8d330a0
     rmartinc

     authored
     8d330a0View commit details

     Copy full SHA for 8d330a0

     Browse repository at this point

   • Username enumeration via empty-password timing

     Show description for 72baa36
     

     2 peopleauthored and

     rmartinc

     committed
     72baa36View commit details

     Copy full SHA for 72baa36

     Browse repository at this point

   • fix(broker): Allows cross session email validation (#52604) (#52626)

     Show description for ad732f9
     olivierboudet

     authored
     ad732f9View commit details

     Copy full SHA for ad732f9

     Browse repository at this point

   • chore(admin client): bump resteasy jackson provider to 1.0.0.Final (#53708)

     Show description for 9786fea
     michalvavrik

     authored
     9786feaView commit details

     Copy full SHA for 9786fea

     Browse repository at this point
3. Commits on Oct 7, 2026

   • SSF: Emit CAEP session-revoked SET when OAuth2 token revocation ends a session (#51376) (#51386)

     Show description for cf58f2e
     thomasdarimont

     authored
     cf58f2eView commit details

     Copy full SHA for cf58f2e

     Browse repository at this point

   • Organization API cannot restore an empty domain list from its GET representation

     Show description for f770cbb
     

     vramik

     authored and

     pedroigor

     committed
     f770cbbView commit details

     Copy full SHA for f770cbb

     Browse repository at this point

   • Require STARTTLS when SMTP starttls is enabled (#53675)

     Show description for a666b23
     edewit

     authored
     a666b23View commit details

     Copy full SHA for a666b23

     Browse repository at this point

   • Stabilize the pause Operator workflow

     Show description for 18443ea
     

     ahus1

     and

     shawkins

     authored
     18443eaView commit details

     Copy full SHA for 18443ea

     Browse repository at this point

   • Fix unstable handling for table rows

     Show description for 8474bd5
     

     ahus1

     and

     Copilot

     authored
     8474bd5View commit details

     Copy full SHA for 8474bd5

     Browse repository at this point

   • escape scim filter value in ipatuura user lookup (#53524)

     Show description for c99eacd
     naruto-lgtm

     authored
     c99eacdView commit details

     Copy full SHA for c99eacd

     Browse repository at this point

   • Don't swallow local storage failures in graceful degradation

     Show description for 597481c
     

     ssilvert

     authored and

     pedroigor

     committed
     597481cView commit details

     Copy full SHA for 597481c

     Browse repository at this point

   • Organization invitation redirectUrl is not validated against the account client allowlist, leaking a new user's authorization code

     Show description for 4c746a5
     

     vramik

     authored and

     pedroigor

     committed
     4c746a5View commit details

     Copy full SHA for 4c746a5

     Browse repository at this point

   • Fix unstable handling for tables

     Show description for 094213f
     ahus1

     authored
     094213fView commit details

     Copy full SHA for 094213f

     Browse repository at this point

   • Fix missing canView() filter in /role-mappings/realm endpoints

     Show description for 0a4c44b
     

     m3l4n0ff

     authored and

     pedroigor

     committed
     0a4c44bView commit details

     Copy full SHA for 0a4c44b

     Browse repository at this point

   • Fix unstable handling of the help

     Show description for 83f6e2a
     ahus1

     authored
     83f6e2aView commit details

     Copy full SHA for 83f6e2a

     Browse repository at this point