Pull Request Explorer
| Title | Author | Size | AI | Cycle Time | Review | Merged |
|---|---|---|---|---|---|---|
| [CVE-2026-105305] Enforce client minimum ACR in Device Authorization Grant | edewit | M | No | 76.9h | 0.0h | Oct 12, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Resolving flaky Admin UI Tests | ahus1 | S | No | 110.6h | 110.6h | Oct 12, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Resolving flaky Admin UI Tests | ahus1 | S | No | 110.6h | 110.6h | Oct 12, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix flaky OID4VC section visibility test in Admin UI E2E | ahus1 | S | No | 38.8h | 0.0h | Oct 12, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Organizations: Invitation link can be used by multiple users due to missing single-use check | martin-kanis | L | No | 5.1h | 4.3h | Oct 12, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Organizations: Invitation link can be used by multiple users due to missing single-use check | martin-kanis | L | No | 4.7h | 0.7h | Oct 12, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Use per-destination JGroups bundler without virtual threads | ahus1 | XS | No | 42.8h | 0.0h | Oct 12, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Reject standard token exchange when the client certificate is missing (26.6) | graziang | M | No | 115.7h | 115.7h | Oct 12, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Emit admin event when creating a UMA policy via the Protection API | JBoogieman | M | AI | 293.6h | 0.0h | Oct 12, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Translations update from Hosted Weblate | weblate | XL | No | 259.9h | 0.0h | Oct 11, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix session-limit denial wrongly triggering brute force | rmartinc | M | No | 28.3h | 0.1h | Oct 10, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Organizations: Invitation link can be used by multiple users due to m… | martin-kanis | L | No | 30.3h | - | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Reject workflow expressions with unrecognized characters | erenkan | S | No | 7.5h | 0.0h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| BACKPORT: fixes CVE-2026-15943 by dropping when other values are changed (#53411) | edewit | XL | No | 5.6h | 2.8h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Declare null, not undefined, for admin client lookups that tolerate a 404 | ybai08 | L | No | 143.4h | 0.1h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix concurrent SAML validation in JAXPValidationUtil | atiqur-rahman-pro | M | No | 17.2h | 0.0h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| BACKPORT: fixes CVE-2026-15943 by dropping when other values are changed (#53411) | edewit | XL | No | 0.9h | 0.7h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| fixes CVE-2026-92358 by removing stale SUO proof | edewit | L | No | 192.3h | 0.1h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| (26.6) Enforce PAR single-use across all authentication paths | abstractj | M | No | 48.3h | 32.5h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Correct links that fail or are coded only for upstream | andymunro | S | No | 1.3h | 1.1h | Oct 09, 2026 |
SummaryHealth AssessmentAI DetailsTech Stack |
||||||
| Use deterministic ROUND time-claim strategy in OID4VCI conformance realm | lhanusov | S | AI | 3.1h | 0.0h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix obsolete link | andymunro | XS | No | 0.3h | 0.3h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix obsolete link | andymunro | XS | No | 0.3h | 0.3h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Correct links that fail or are coded only for upstream | andymunro | S | No | 0.1h | 0.1h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| fixes CVE-2026-15943 by dropping when other values are changed | edewit | XL | No | 190.6h | 0.1h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.8] Fix EntityManager API documentation link | vmuzikar | XS | No | 3.8h | 0.5h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.6] Fix EntityManager API documentation link | vmuzikar | XS | No | 3.8h | 0.5h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Resolve properties in the notify-user step subject | ltronky | M | No | 228.9h | 0.0h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.8] non-imported federated users returned in search results for query-use… | vramik | M | No | 3.7h | 3.7h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.6] fix: LDAP password-policy control parser — warning/error tag dispatch… | vramik | S | No | 3.4h | 3.4h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix for CVE-2026-18569 (OIDC backchannel logout fix) - backport into release/26.6 | tkyjovsk | M | No | 44.0h | 43.2h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix obsolete link | andymunro | XS | No | 82.1h | 0.0h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Remove duplicated section from changes-26_8_1.adoc | stianst | S | No | 0.1h | 0.0h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Limit the size in CRL and OCSP http responses (26.6) | rmartinc | M | No | 17.8h | 17.8h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix links that fail or coded only for upstream | andymunro | S | No | 61.9h | 0.0h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Refer to YAML in the create workflow page subtitle | erenkan | XS | No | 1.1h | 0.0h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Limit the size in CRL and OCSP http responses (26.8) | rmartinc | M | No | 17.4h | 15.8h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Several SimpleHttp fixes to always close connections | ahus1 | L | No | 42.1h | 0.8h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| BACKPORT: Require STARTTLS when SMTP starttls is enabled (#53675) | edewit | S | No | 2.0h | 0.3h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Ignore audience for disabled and removed clients (26.6) | graziang | L | No | 335.3h | 124.6h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| BACKPORT: Require STARTTLS when SMTP starttls is enabled (#53675) | edewit | M | No | 0.8h | 0.2h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix for CVE-2026-18569 (OIDC backchannel logout fix) - backport into release/26.8 | tkyjovsk | M | No | 40.7h | 17.2h | Oct 09, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Filter role mappings by visibility in full group listings | pedroigor | M | No | 7.1h | 0.0h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.6] Don't swallow local storage failures in graceful degradation | ssilvert | M | AI | 25.7h | 25.7h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix EntityManager API documentation link | vmuzikar | XS | AI | 1.7h | 0.0h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Let view-realm and manage-realm admins use the Authentication section | ybai08 | M | No | 120.7h | 0.0h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Non-imported federated users returned in search results for query-use… | vramik | M | No | 19.2h | - | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix for CVE-2026-18569 (OIDC backchannel logout fix) - fix upgrade guide in upstream | tkyjovsk | S | No | 23.1h | 0.3h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [CVE-2026-97311] Filter groups by view permission in getGroupsInRole | pedroigor | M | No | 1.8h | 0.3h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Concurrent link and membership writes can create conflicting managed … | vramik | XS | No | 16.7h | - | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||