[Snyk] Upgrade keycloak-js from 24.0.2 to 24.0.4 #8
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade keycloak-js from 24.0.2 to 24.0.4. See this package in npm: keycloak-js See this project in Snyk: https://app.snyk.io/org/jookzie/project/653f8d9a-3fcf-46b3-a78e-34dbcbc9a4bb?utm_source=github&utm_medium=referral&page=upgrade-pr
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade keycloak-js from 24.0.2 to 24.0.4.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 2 versions ahead of your current version.
The recommended version was released on 2 months ago.
Release notes
Package name: keycloak-js
-
24.0.4 - 2024-05-08
- #27508 Use new remote-store options in HA guides
- #28429 Add details to error messages, especially around refresh tokens
- #28729 Emphasize the need for setting container limit
- #28880 Upgrade to Quarkus 3.8.4
- #29183 Minor corrections to High Availability Guide
- #16345 Unable to delete realm names with invalid URL characters
- #22617 kc export fails when using User Federation (LDAP) with file-based Vault enabled
- #24568 iframe for frontend logout gets blocked if a custom CSP header is used
- #24878 NoClassDefFoundError for Apache XML and EAP8
- #27021 Workflow failure: Fuse adapter tests
- #27080 Workflow failure: Operator CI - KeycloakTruststoresTests#testTrustroreExists
- #27514 Uncaught server error: java.lang.IllegalArgumentException: Path parameter not provided
- #28079 Group search does not work in user view
- #28187 Admin UI drag & drop in flow config seems to delete actions
- #28220 Admin API: User PUT operation clears firstname, lastname email fields
- #28303 WARN - Event object wasn't available in remote cache after event was received
- #28377 Broken lists in import/export server guide
- #28431 Dedicated client scopes always show up when searching
- #28514 Message for searchClientRegistration is missing
- #28666 Accessing a transient (lightweight) user through client session fails in admin-api/-ui
- #28684 "Extend to children" button in authorization group policies is wrongly disabled
- #28911 clients_saml_test.spec.ts fails in main
- #29072 Startup probe should check for existence of an Admin user before returning 200
- #29094 Fix the client name help grammatical error
- #29133 DuplicateEmailValidator causes two DB queries on every login if a user has an email address
- #29147 local user login not possible after LDAP connection problem
- #29154 Update docs to distinguish between product names and CR names
- #29233 Broken link in documentation
-
24.0.3 - 2024-04-16
- #26695 Keycloak and MSAD: enabling account in MSAD does not propagate to Keycloak
- #24201 Cannot disable LDAP-backed user if importEnabled=false
- #28100 Failed authentication: java.lang.NullPointerException: Cannot invoke "org.keycloak.models.UserModel.getFederationLink()" because "this.delegate" is null
- #28248 Update user makes User ID changes when federationLink and LDAP_ID is not set properly
- #28335 The false option of the pkceMethod init parameter for the JavaScript adapter is ignored
- #28638 Missing permission to read configmaps in `keycloak-operator-role`
-
24.0.2 - 2024-03-24
- #25057 Inconsistent behaviour on getting user permissions using authorization
- #27433 Clarify format of keys in `additionalOptions` field in the Keycloak CR
- #27481 Edit High Availability guide
- #27484 Edit 23.0 changes part of Upgrading Guide
- #27632 Integrate downstream Upgrading Guide changes into upstream
- #27696 Upgrade to Quarkus 3.8.2
- #27867 Corrections to Securing Apps Guide
- #27871 Upgrade to Infinispan 14.0.26
- #27953 Address feedback to Keycloak Server guide
- #27955 Address term Keycloak in Server Administration Guide
- #28009 Address edits to the Operator Guide
- #28033 Upgrade Infinispan to 14.0.27.Final
- #28084 Upgrade to Quarkus 3.8.3
- #14501 Getting failed to initialize js message if consent is rejected by user
- #15403 No email send on TOTP/Authenticator app removal
- #20637 Reset password flow fails with "Page has expired" error when Kerberos authentication is enabled in the browser flow
- #22644 Flaky test: org.keycloak.testsuite.forms.BrowserFlowTest#testAlternativeNonInteractiveExecutorInSubflow
- #23701 Attribute search does not work with federated users with ldap.
- #23980 Keycloak Operator fails to install realm authentication flow because "flow is null"
- #25490 Partial export/import is not mentioned in Keycloak's Server Administration Guide
- #25687 A java.lang.NullPointerException occurs when sending a Multipart/form-data request to any file upload interface.
- #26396 How do you update a custom user storage provider jar that includes a version number?
- #27117 user sessions not accessible in all cluster nodes
- #27180 Grant type "urn:ietf:params:oauth:grant-type:uma-ticket" openid-connect/token service endpoint is returning refresh token with invalid Expiration
- #27228 Lowercased "terms_and_conditions" is not migrated in fed_user_required_action table
- #27245 Account console does not correctly treat link / unlink account
- #27269 mvnw clean install -Pdistribution on Windows deletes necessary files during clean of org.keycloak:keycloak-admin-ui
- #27275 Invalidating offline token is not working from client sessions tab
- #27366 Social login - test failures with unexpected status code
- #27483 Authz-client AuthorizationResource.getPermissions() ClassCastException
- #27504 Cpu and memory sizing typo
- #27529 LegacyUserCredentialManager class not found
- #27540 URL change for liquibase docs
- #27548 Custom Browser Flow not working anymore
- #27573 Release notes from 24.0.0 miss that multi-site active-passive deployments are supported
- #27597 dropping KC_PROXY=edge causes startup error
- #27611 Cannot modify realm email settings since keycloak 24
- #27653 Admin tests: Flaky realm_settings_user_profile_enabled test
- #27701 MTLS Cache options should be runtime options, not build time options
- #27719 Wrong Welcome page image in the documentation
- #27745 Registration template in login2 is broken
- #27761 Snyk workflow failure
- #27779 Broken Migration "MigrateTo24_0_0"
- #27780 Fixing downstream documentation build
- #27797 User profile fields cannot be set empty once they have a non-empty value (in Login Theme)
- #27820 Account console confusing with WebAuthn
- #27841 ES translation causes FreeMarker rendering issues
- #27852 VerifyUserProfile invalidates user cache on every login
- #27878 Error when executing refresh grant, with scope param, without offline_access scope specified
- #27882 Incorrect version of bctls-fips in the docs
- #27892 Truststore handling for the Operator is not documented
- #27894 Multi datasource configuration does not work in Keycloak 24.0.1
- #27900 Performance impact in changed hashing measured wrong
- #27925 Keycloak docs state that there are http metrics, but they are disabled
- #27954 Hibernate Dialect detection does not work anymore for Oracle DBs
- #27966 🍺 instead of dot: Attributes in account UI are not loaded
- #27967 ORA-01450 when updating keycloak 23 -> 24
- #27981 User Profile: Inconsistent ordering of attributes between account and login themes
- #28001 MySQL connector artifact should be ignored
- #28012 Keycloak CR Truststore should not have a name
- #28113 WebAuthN registration broken after upgrading to 24.0.1
from keycloak-js GitHub release notesHighlights
Partial update to user attributes when updating users through the Admin User API is no longer supported
When updating user attributes through the Admin User API, you cannot execute partial updates when updating the user attributes, including the root attributes like
username,email,firstName, andlastName.For more details, see the Upgrading Guide.
Upgrading
Before upgrading refer to the migration guide for a complete list of changes.
All resolved issues
Enhancements
docsdist/quarkusdocsBugs
admin/apiimport-exportcoreadapter/jee-samlcicioidcadmin/uiadmin/uiadmin/apiinfinispandocsadmin/uiadmin/uiadmin/uiadmin/uiadmin/uidist/quarkusadmin/uicoreldapdocsdocsUpgrading
Before upgrading refer to the migration guide for a complete list of changes.
All resolved issues
Enhancements
ldapBugs
ldapidentity-brokeringadmin/apiadapter/javascriptoperatorUpgrading
Before upgrading refer to the migration guide for a complete list of changes.
All resolved issues
Enhancements
authorization-servicesdocsdist/quarkuscoredocsdocsdist/quarkusBugs
account/uicoreauthenticationcoreadmin/uiimport-exportdocsadmin/apidist/quarkusinfinispanauthorization-servicescoreaccount/uiadmin/uiauthenticationtestsuiteauthorization-servicesdocsstoragedocsadmin/uidocscoreuser-profileadmin/uidist/quarkusdocslogin/uicicoredocsuser-profileaccount/uitranslationscoreoidcdocsoperatordist/quarkusauthenticationdocsstorageuser-profilestorageuser-profiledist/quarkusoperatorauthentication/webauthnImportant
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: