Commits

Commit history

1. Commits on Oct 13, 2026

   • Set version to 26.8.1

     github-actions[bot]

     committed
     24ed1daView commit details

     Copy full SHA for 24ed1da

     Browse repository at this point

   • Fix broken vault link for downstream (#53880)

     Show description for 371caae
     andymunro

     authored
     371caaeView commit details

     Copy full SHA for 371caae

     Browse repository at this point

   • Fix link to database documentation (#53884)

     Show description for 2c4311b
     andymunro

     authored
     2c4311bView commit details

     Copy full SHA for 2c4311b

     Browse repository at this point
2. Commits on Oct 12, 2026

   • Log JGroups certificate reload failures and reload off the view thread

     Show description for 925bfda
     

     ahus1

     and

     Copilot

     authored
     925bfdaView commit details

     Copy full SHA for 925bfda

     Browse repository at this point

   • Use per-destination JGroups bundler without virtual threads

     Show description for 68327a7
     

     ahus1

     and

     Copilot

     authored
     68327a7View commit details

     Copy full SHA for 68327a7

     Browse repository at this point

   • Update realm certificates

     Show description for a4c24f9
     ahus1

     authored
     a4c24f9View commit details

     Copy full SHA for a4c24f9

     Browse repository at this point

   • Organizations: Invitation link can be used by multiple users due to missing single-use check

     Show description for 8d35579
     martin-kanis

     authored
     8d35579View commit details

     Copy full SHA for 8d35579

     Browse repository at this point
3. Commits on Oct 9, 2026

   • fixes CVE-2026-15943 by dropping when other values are changed (#53411) (#53803)

     Show description for 8f29692
     edewit

     authored
     8f29692View commit details

     Copy full SHA for 8f29692

     Browse repository at this point

   • Fix obsolete link (#53799)

     Show description for 9f1529c
     andymunro

     authored
     9f1529cView commit details

     Copy full SHA for 9f1529c

     Browse repository at this point

   • Correct links that fail or are coded only for upstream (#53796)

     Show description for afb36ce
     andymunro

     authored
     afb36ceView commit details

     Copy full SHA for afb36ce

     Browse repository at this point

   • Fix EntityManager API documentation link (#53775)

     Show description for 8df1064
     

     3 peopleauthored
     8df1064View commit details

     Copy full SHA for 8df1064

     Browse repository at this point

   • non-imported federated users returned in search results for query-users-only delegated admins (#53777)

     Show description for 4caecf1
     vramik

     authored
     4caecf1View commit details

     Copy full SHA for 4caecf1

     Browse repository at this point

   • Remove duplicated section from changes-26_8_1.adoc (#53788)

     Show description for 2053126
     stianst

     authored
     2053126View commit details

     Copy full SHA for 2053126

     Browse repository at this point

   • Limit the size in CRL and OCSP http responses (#53697) (#53750)

     Show description for 12bd9e3
     rmartinc

     authored
     12bd9e3View commit details

     Copy full SHA for 12bd9e3

     Browse repository at this point

   • Require STARTTLS when SMTP starttls is enabled (#53675) (#53773)

     Show description for 4117e21
     edewit

     authored
     4117e21View commit details

     Copy full SHA for 4117e21

     Browse repository at this point

   • Enforce signature validation for back-channel logout tokens even when the IDP's signature validation is disabled. (#53690)

     Show description for 90ec187
     tkyjovsk

     authored
     90ec187View commit details

     Copy full SHA for 90ec187

     Browse repository at this point
4. Commits on Oct 8, 2026

   • Filter groups by view permission in getGroupsInRole (#53734)

     Show description for 4b4176f
     pedroigor

     authored
     4b4176fView commit details

     Copy full SHA for 4b4176f

     Browse repository at this point

   • Username enumeration via empty-password timing (#53732)

     Show description for 5d995ef
     

     mabartos

     and

     Tarantula471

     authored
     5d995efView commit details

     Copy full SHA for 5d995ef

     Browse repository at this point

   • (26.8) Enforce PAR single-use across all authentication paths (#53679)

     Show description for bfab889
     abstractj

     authored
     bfab889View commit details

     Copy full SHA for bfab889

     Browse repository at this point

   • Don't swallow local storage failures in graceful degradation (#53710)

     Show description for 71dd796
     ssilvert

     authored
     71dd796View commit details

     Copy full SHA for 71dd796

     Browse repository at this point

   • [26.8] Restrict CRL files to conf and omit CRL locations from responses (#53698)

     Show description for e9ae4a8
     michalvavrik

     authored
     e9ae4a8View commit details

     Copy full SHA for e9ae4a8

     Browse repository at this point

   • Reject standard token exchange when the client certificate is missing (#53673)

     Show description for 508c79c
     graziang

     authored
     508c79cView commit details

     Copy full SHA for 508c79c

     Browse repository at this point

   • Token introspection omits act claim for token-exchange delegation tokens (#53684)

     Show description for 48d1d17
     mabartos

     authored
     48d1d17View commit details

     Copy full SHA for 48d1d17

     Browse repository at this point

   • ConditionalOtpFormAuthenticator skip-header rule behind isProxyTrusted() (#53299) (#53606)

     Show description for 4519742
     msdaly200

     authored
     4519742View commit details

     Copy full SHA for 4519742

     Browse repository at this point

   • Reject SLO LogoutRequest for unauthorized SessionIndex and add test for session hijacking prevention (#53591)

     Show description for efdc0cf
     jimmychakkalakal

     authored
     efdc0cfView commit details

     Copy full SHA for efdc0cf

     Browse repository at this point

   • Backport 26.8 Fix DCR privilege escalation via ssf.* attributes and service-account toggle (#53590)

     Show description for f05d4dd
     jimmychakkalakal

     authored
     f05d4ddView commit details

     Copy full SHA for f05d4dd

     Browse repository at this point

   • Close HTTP responses with illegal charsets

     Show description for e3a0a45
     ahus1

     authored
     e3a0a45View commit details

     Copy full SHA for e3a0a45

     Browse repository at this point

   • Sign out user session logs out different session (#53543) (#53579)

     Show description for 05b396f
     mabartos

     authored
     05b396fView commit details

     Copy full SHA for 05b396f

     Browse repository at this point

   • Fix unstable handling for table rows (#53718)

     Show description for 37d6ca2
     

     ahus1

     and

     Copilot

     authored
     37d6ca2View commit details

     Copy full SHA for 37d6ca2

     Browse repository at this point

   • Fix unstable handling for tables

     Show description for 03f2731
     ahus1

     authored
     03f2731View commit details

     Copy full SHA for 03f2731

     Browse repository at this point

   • Fix unstable handling of the help

     Show description for f86d6b2
     ahus1

     authored
     f86d6b2View commit details

     Copy full SHA for f86d6b2

     Browse repository at this point

   • Revert "Skip GA workflows for tmp branches (#53666)" (#53727)

     Show description for 8c51785
     stianst

     authored
     8c51785View commit details

     Copy full SHA for 8c51785

     Browse repository at this point
5. Commits on Oct 7, 2026

   • Stabilize the pause Operator workflow

     Show description for 4667aa9
     

     ahus1

     and

     shawkins

     authored
     4667aa9View commit details

     Copy full SHA for 4667aa9

     Browse repository at this point

   • Enforce view permission on users and clients when resolving them during policy evaluation

     Show description for d10560f
     

     sguilhen

     authored and

     pedroigor

     committed
     d10560fView commit details

     Copy full SHA for d10560f

     Browse repository at this point

   • [26.8] Bind first broker login verification proof to the brokered identity id (#53577)

     Show description for d539eaa
     michalvavrik

     authored
     d539eaaView commit details

     Copy full SHA for d539eaa

     Browse repository at this point