Pull Request Explorer
| Title | Author | Size | AI | Cycle Time | Review | Merged |
|---|---|---|---|---|---|---|
| CertificateRepresentation stripping in StripSecretsUtils | vramik | M | No | 1.5h | 0.0h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Unverified broker email can satisfy an organization domain gate | martin-kanis | XL | No | 8.8h | 1.7h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.6] Add an IdP config option to control IdP admin role escalation. | vramik | XL | No | 8.2h | 1.8h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.8] Treat the admin-permissions client as an internal client | vramik | M | No | 30.2h | 0.0h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Check kc_locale param is among the allowed locales in the realm (26.6) | rmartinc | S | No | 3.9h | 0.1h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Check kc_locale param is among the allowed locales in the realm (26.8) | rmartinc | S | No | 4.0h | 0.2h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Set appVersion in the operator Helm chart (#53955) | shawkins | XS | No | 2.9h | 2.9h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Adjust links to upstream/downstream for the upcoming 26.8 release | ahus1 | S | No | 28.1h | 28.1h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix GroupLDAPStorageMapper.leaveGroup deleting same-named out-of-path… | sguilhen | M | No | 2.0h | 0.1h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Give the forwarded prompt=none precedence over the IDP-configured prompt | choksi2212 | M | No | 51.1h | 0.0h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| require https when dereferencing jwt vc issuer jwks_uri | naruto-lgtm | M | No | 163.4h | 0.0h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Set default Bearer token_type in broker token responses | atiqur-rahman-pro | S | No | 7.1h | 0.1h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| fix: LDAP pagination, when LDAP is returning NameNotFoundException | robson90 | M | No | 25.7h | 0.0h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Replace cached gzip theme resources atomically (26.6) | mabartos | L | No | 0.9h | 0.3h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Check kc_locale param is among the allowed locales in the realm | rmartinc | S | No | 2.2h | 0.0h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Replace cached gzip theme resources atomically (26.8) | mabartos | L | AI | 0.9h | 0.1h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.6] fixes CVE-2026-92358 by removing stale SUO proof | vramik | L | No | 2.1h | 0.0h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Require client signature for SAML SessionIndex back-channel SLO (#53658) | mposolda | L | No | 1.7h | 0.1h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [CVE-2026-105305] Enforce client minimum ACR in Device Authorization Grant (26.6) | rmartinc | M | No | 0.9h | 0.4h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [CVE-2026-105305] Enforce client minimum ACR in Device Authorization Grant (26.8) | rmartinc | M | No | 0.8h | 0.4h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| fix: addressing the copy paste error in DescriptionConverter (#53754) [26.6] | shawkins | S | No | 39.2h | 38.4h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix flaky OID4VC section visibility test in Admin UI E2E | ahus1 | M | No | 45.4h | 45.4h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Restore realm context after importing users from dir (#52892) [26.6] | shawkins | S | No | 12.5h | 12.5h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Restore realm context after importing users from dir (#52892) [26.8] | shawkins | M | No | 12.5h | 12.5h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.6] Make sure group claims referencing a name match only top-level groups | pedroigor | L | No | 42.0h | 42.0h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Conditionalize reference to github to only be upstream | andymunro | XS | No | 13.1h | 13.1h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| fix: addressing the copy paste error in DescriptionConverter (#53754) [26.8] | shawkins | S | No | 38.4h | 38.4h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Record the start of a periodic user-storage sync run as lastSync | pedroigor | L | No | 10.5h | 10.5h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Harden PathMatcher URI normalization for leading dot segments and authority-less schemes | tkyjovsk | M | No | 14.5h | 14.5h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Harden PathMatcher URI normalization for leading dot segments and authority-less schemes | tkyjovsk | M | No | 13.9h | 13.9h | Oct 15, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Set appVersion in the operator Helm chart | ChethankumarGS | XS | No | 9.3h | 0.0h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Authorize receiver-driven SSF subject adds per subject | ssilvert | XL | AI | 142.6h | 0.1h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Record the start of a periodic user-storage sync run as lastSync | choksi2212 | M | No | 22.6h | 0.0h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Throw original exception on Liquibase retry | ahus1 | XS | No | 5.9h | 5.9h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Throw original exception on Liquibase retry | ahus1 | XS | No | 5.9h | 5.9h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Remove download of yq to stabilize CI | ahus1 | XS | No | 4.1h | 3.9h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Conditionalize reference to github to only be upstream | andymunro | XS | No | 0.1h | 0.0h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Remove download of yq to stabilize CI | ahus1 | XS | No | 3.9h | 3.9h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.8] Rename internal Keycloak admin client based on Jackson 3 | michalvavrik | XS | No | 3.9h | 3.9h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Conditionalize reference to github to only be upstream | andymunro | XS | No | 236.6h | 0.0h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.8] Prevent kcSanitize bypass that reactivates URLs with JavaScript scheme on the login page | michalvavrik | M | No | 1.6h | 0.7h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.6] Prevent kcSanitize bypass that reactivates URLs with JavaScript scheme on the login page | michalvavrik | M | No | 1.1h | 0.6h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fully escape JSON string values in SCIM resource filters | atiqur-rahman-pro | M | No | 148.3h | 0.0h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Realm client-session stats disclose hidden clients under FGAP v2 | martin-kanis | M | No | 0.8h | 0.0h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Adjust links to upstream/downstream for the upcoming 26.8 release | ahus1 | M | No | 0.8h | 0.7h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Throw original exception on Liquibase retry | ahus1 | XS | No | 27.7h | 0.8h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Import all PEM certificates with BCFIPS (26.8) | rmartinc | M | No | 4.5h | 0.3h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Remove download of yq to stabilize CI | ahus1 | XS | No | 2.9h | 0.9h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Avoid firing duplicate events and responses with user provided content from IDP | ahus1 | M | No | 3.1h | 3.0h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Harden PathMatcher URI normalization for leading dot segments and authority-less schemes | tkyjovsk | M | No | 17.3h | 0.0h | Oct 14, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||