Bump org.keycloak:keycloak-core from 18.0.9.redhat-00001 to 26.4.13.redhat-00001 by dependabot[bot] · Pull Request #738 · project-ncl/dependency-analysis

dependabot · 2026-07-11T04:02:43Z

Bumps org.keycloak:keycloak-core from 18.0.9.redhat-00001 to 26.4.13.redhat-00001.

Release notes

Sourced from org.keycloak:keycloak-core's releases.

26.4.7

26.4.6

... (truncated)

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.keycloak:keycloak-core](https://github.com/keycloak/keycloak) from 18.0.9.redhat-00001 to 26.4.13.redhat-00001. - [Release notes](https://github.com/keycloak/keycloak/releases) - [Commits](https://github.com/keycloak/keycloak/commits) --- updated-dependencies: - dependency-name: org.keycloak:keycloak-core dependency-version: 26.4.13.redhat-00001 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-11T04:17:56Z

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output

pentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- maven-scm-provider-jgit-1.13.0.jar
				|-- org.eclipse.jgit-4.5.4.201711221230-r.jar [1 HIGH, 1 MEDIUM]
			|-- maven-scm-provider-svnexe-1.13.0.jar
				|-- commons-lang-2.6.jar [1 MEDIUM]
|-- rest-client-jakarta-3.6.0-SNAPSHOT.jar
	|-- common-3.6.0-SNAPSHOT-jakarta.jar
		|-- opentelemetry-instrumentation-annotations-2.27.0.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- pnc-common-3.5.2-SNAPSHOT-jakarta.jar
		|-- opentelemetry-ext-cli-java-2.1.0.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-exporter-otlp-1.60.1.jar
				|-- opentelemetry-exporter-sender-okhttp-1.60.1.jar
					|-- opentelemetry-exporter-common-1.60.1.jar
						|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
				|-- opentelemetry-sdk-logs-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
				|-- opentelemetry-sdk-metrics-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
				|-- opentelemetry-sdk-trace-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
				|-- opentelemetry-sdk-common-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-semconv-1.29.0-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
source-code-manager-3.0.1-SNAPSHOT.jar
|-- quarkus-quartz-3.37.0.jar
	|-- opentelemetry-instrumentation-api-2.26.1.jar
		|-- opentelemetry-api-incubator-1.60.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
|-- maven-scm-provider-jgit-1.13.0.jar
	|-- org.eclipse.jgit-4.5.4.201711221230-r.jar [1 HIGH, 1 MEDIUM]
|-- maven-scm-provider-svnexe-1.13.0.jar
	|-- commons-lang-2.6.jar [1 MEDIUM]
|-- pnc-common-3.5.2-SNAPSHOT-jakarta.jar
	|-- opentelemetry-ext-cli-java-2.1.0.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-exporter-otlp-1.60.1.jar
			|-- opentelemetry-exporter-sender-okhttp-1.60.1.jar
				|-- opentelemetry-exporter-common-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-common-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-logs-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-metrics-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-trace-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-semconv-1.29.0-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
testsuite-3.0.1-SNAPSHOT.jar
|-- application-3.0.1-SNAPSHOT.jar
	|-- quarkus-jdbc-postgresql-3.37.0.jar
		|-- quarkus-agroal-3.37.0.jar
			|-- quarkus-narayana-jta-3.37.0.jar
				|-- narayana-jta-7.3.4.Final.jar
					|-- infinispan-core-9.4.24.Final.jar [1 HIGH, 1 MEDIUM]
		|-- postgresql-42.7.11.jar [1 MEDIUM]
	|-- quarkus-micrometer-opentelemetry-3.37.0.jar
		|-- opentelemetry-micrometer-1.5-2.26.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- quarkus-micrometer-3.37.0.jar
			|-- micrometer-core-1.16.6.jar
				|-- HdrHistogram-2.2.2.jar [4 LOW]
				|-- LatencyUtils-2.0.3.jar
					|-- HdrHistogram-2.2.2.jar [4 LOW]
		|-- quarkus-opentelemetry-3.37.0.jar
			|-- opentelemetry-instrumentation-annotations-support-2.26.1-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-instrumentation-api-2.26.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-jdbc-2.26.1-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-runtime-telemetry-java17-2.26.1-alpha.jar
				|-- opentelemetry-runtime-telemetry-2.26.1-alpha.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-api-incubator-1.60.1-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-exporter-otlp-common-1.60.1.jar
				|-- opentelemetry-exporter-common-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
				|-- opentelemetry-sdk-common-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
				|-- opentelemetry-sdk-metrics-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- reports-rest-3.0.1-SNAPSHOT.jar
		|-- reports-backend-3.0.1-SNAPSHOT.jar
			|-- communication-3.0.1-SNAPSHOT.jar
				|-- galley-cache-partyline-1.22-jakarta.jar
					|-- partyline-2.4.jar
						|-- infinispan-core-9.4.24.Final.jar [1 HIGH, 1 MEDIUM]
				|-- source-code-manager-3.0.1-SNAPSHOT.jar
					|-- maven-scm-provider-jgit-1.13.0.jar
						|-- org.eclipse.jgit-4.5.4.201711221230-r.jar [1 HIGH, 1 MEDIUM]
					|-- maven-scm-provider-svnexe-1.13.0.jar
						|-- commons-lang-2.6.jar [1 MEDIUM]
|-- rest-client-jakarta-3.6.0-SNAPSHOT.jar
	|-- common-3.6.0-SNAPSHOT-jakarta.jar
		|-- opentelemetry-instrumentation-annotations-2.27.0.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- pnc-common-3.5.2-SNAPSHOT-jakarta.jar
		|-- opentelemetry-ext-cli-java-2.1.0.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-exporter-otlp-1.60.1.jar
				|-- opentelemetry-sdk-logs-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
				|-- opentelemetry-sdk-trace-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-semconv-1.29.0-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]


No Policy violations were detected

Project 'dependency-analysis' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=17cd357b-3d0e-43ac-a982-661505cac482
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=d38fa0abfb554c9cac571a09497e0af3f534680889b74705ab11e416b1c07dd4

Mend AI scan succeeded.

Support Token: 0fa73fe16c5ec43478f0a246515ce7cbf1783743380363

SAST scan output

*no findings*

Full logs and artifacts

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jul 11, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump org.keycloak:keycloak-core from 18.0.9.redhat-00001 to 26.4.13.redhat-00001#738

Bump org.keycloak:keycloak-core from 18.0.9.redhat-00001 to 26.4.13.redhat-00001#738
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/org.keycloak-keycloak-core-26.4.13.redhat-00001

dependabot Bot commented on behalf of github Jul 11, 2026

Uh oh!

github-actions Bot commented Jul 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 11, 2026

26.4.7

26.4.6

Uh oh!

github-actions Bot commented Jul 11, 2026

Mend Scan Results

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants