Pull Request Explorer
| Title | Author | Size | AI | Cycle Time | Review | Merged |
|---|---|---|---|---|---|---|
| Incorrect authorization in admin role-composite deletion - delegated … | vramik | M | No | 82.5h | 0.0h | Jul 27, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [CVE-2026-16108] Realm default-group reads disclose hidden groups und… | martin-kanis | M | No | 127.6h | 0.0h | Jul 27, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Generate ES256 verifier key ready for HAIP rules | rmartinc | S | No | 1.9h | 0.1h | Jul 27, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [OID4VCI] Document SD-JWT credential signing key setup | forkimenjeckayang | S | No | 2.0h | 0.0h | Jul 27, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Parameterized UserPropertyMapper exposes target user attributes without permission check | mabartos | M | No | 147.1h | 0.0h | Jul 27, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix label workflow failing on fork PRs with actions/checkout v7 | copilot-swe-agent | XS | No | 0.4h | 0.2h | Jul 27, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Added a guide to deploy on bare-metal/VMs | ruchikajha95 | M | No | 122.0h | 0.2h | Jul 27, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix typo in MCP authorization server guide | ryotaro612 | XS | No | 187.3h | 0.0h | Jul 27, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Wait for AUTH_RESPONSE page in MultipleTabsLoginTest | rmartinc | XS | No | 100.5h | 0.0h | Jul 27, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Migrate ClientSecretRotationTest to the new CI | rmartinc | XL | No | 123.8h | 0.1h | Jul 27, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [OID4VCI] Reject mismatched signature algorithms during SD-JWT verification | forkimenjeckayang | M | No | 69.4h | 0.0h | Jul 27, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [OID4VCI] Fix unbounded OID4VCI credential offer expiration | forkimenjeckayang | XL | No | 259.4h | 0.1h | Jul 27, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Use text input instead of numeric for recovery codes | am9zZWY | XS | No | 283.0h | 0.0h | Jul 25, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Remove version override for `org.postgresql:postgresql` | copilot-swe-agent | XS | AI | 2.0h | 0.2h | Jul 24, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Mask vault password in show-config | AkashKumar7902 | XS | No | 138.8h | 0.1h | Jul 24, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Configure OTP policy as default but with code reusable to true in BrowserFlowTest | rmartinc | S | No | 5.1h | 0.0h | Jul 24, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Ensure consistent transaction rollback across all error response paths | mabartos | L | No | 190.9h | 94.9h | Jul 24, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| fix: moving waiting into the assertMessage method | shawkins | M | No | 22.8h | 1.7h | Jul 23, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Passkey icons use wrong color variant when realm disables dark mode | mabartos | XS | No | 24.6h | 0.1h | Jul 23, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Redesign identity provider buttons on the login page | mabartos | L | No | 143.1h | 76.0h | Jul 23, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Initialize Profiles for ClientAuthPostMethodTest | rmartinc | XS | No | 19.2h | 0.0h | Jul 23, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [OID4VP] Add support for direct_post.jwt response mode | dominikschlosser | XL | No | 183.0h | 1.0h | Jul 23, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| CVE-2026-45292: size-limiting baggage propagator wrapper | Pepo48 | L | No | 193.6h | 0.1h | Jul 22, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| fix: removing defaultBackend from Ingress | shawkins | S | No | 166.2h | 2.5h | Jul 21, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [quarkus-next] Disable Quarkus HTTP Host header validation filter | Pepo48 | XS | No | 28.3h | 26.4h | Jul 21, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| #50798 Apply protocol defaults when creating clients through Admin AP… | arnabnandy7 | M | No | 257.3h | 0.1h | Jul 21, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| SCIM: PATCH operations list has no size limit — missing maxOperations… | martin-kanis | M | No | 167.3h | 0.0h | Jul 21, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Deprecate introspection endpoint 'jwt' extension | mposolda | S | No | 27.1h | 0.0h | Jul 21, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Minor polishing of RefreshTokenProvider | mposolda | S | No | 19.6h | 0.3h | Jul 21, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| doc update for dpop and token exchange | graziang | XS | No | 19.9h | 0.3h | Jul 21, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Invalid redirect URI on logout from pages with sub-tab hash fragments | mabartos | XS | No | 0.5h | 0.0h | Jul 21, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Allow duplicates in the TokenManager map as before (26.7) | rmartinc | S | No | 14.0h | 14.0h | Jul 21, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix JWE request object signature bypass (26.4) | graziang | M | No | 4.2h | 4.2h | Jul 20, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Clarify error when multiple export targets are configured | AkashKumar7902 | XS | AI | 42.6h | 0.1h | Jul 20, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Allow duplicates in the TokenManager map as before | rmartinc | S | No | 2.8h | 0.0h | Jul 20, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Rotated client secret remains valid when the feature is disabled | mabartos | M | No | 120.4h | 2.2h | Jul 20, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Bump com.fasterxml.jackson.core:jackson-databind from 2.22.0 to 2.22.1 in /misc/test-stability | dependabot | XS | No | 1.4h | - | Jul 20, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix ConcurrentModificationException in client-registration policy reads | ahus1 | M | No | 82.1h | 0.8h | Jul 20, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Add section to verify a graceful shutdown to the docs | ahus1 | S | No | 82.1h | 20.1h | Jul 20, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Make sure admin role checks are based on the actual roles granted to … | sguilhen | XL | No | 44.6h | 24.8h | Jul 17, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Flaky Admin UI E2E test: initial-access.spec.ts | mabartos | XS | No | 25.0h | 4.8h | Jul 17, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Admin UI E2E test failures - SSF Stream | mabartos | XS | No | 0.5h | 0.5h | Jul 17, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix SAML artifact binding failing to validate signed nested samlp:Response | jimmychakkalakal | L | No | 73.3h | 0.1h | Jul 17, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| PR #50342: oid4vci-feat: Add provider ID detail to refresh token events and impl… | jimmychakkalakal | M | No | 209.7h | 14.3h | Jul 17, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| refactor cnf verification of refresh tokens | graziang | L | No | 42.7h | 0.1h | Jul 17, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| FGAP v2 parent group children endpoint bypasses per-child view permis… | vramik | M | No | 32.1h | 23.9h | Jul 16, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Keycloak Admin UI Extension brute-force-user User Disclosure via sear… | vramik | S | No | 55.0h | 9.6h | Jul 16, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.6] Fix BruteForceProtector failure counter not resetting when failures are spaced apart > maxDelta | shawkins | M | No | 48.0h | 47.9h | Jul 16, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Throw exception and rollback when token verification fails in reset credentials (26.7) | rmartinc | S | No | 26.6h | 18.2h | Jul 16, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Throw exception and rollback when token verification fails in reset credentials (26.6) | rmartinc | S | No | 26.1h | 17.7h | Jul 16, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||