feat(keycloak): update to 26.5.4

[pepol]

Summary by CodeRabbit

• Chores
  • Upgraded Keycloak to version 26.5.4 across the stack.
  • Adjusted Keycloak service startup to production mode and enabled HTTP support while relaxing hostname strictness.

Checklist

• I have discussed my proposed changes in an issue and have received approval to proceed.
• I have followed the coding standards of the project.
• Tests or benchmarks have been added or updated.
• Documentation has been updated on https://github.com/wundergraph/cosmo-docs.
• I have read the Contributors Guide.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 41.17%. Comparing base (610f4c0) to head (eb90f4f).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##            main    #2612       +/-   ##
==========================================
+ Coverage   1.43%   41.17%   +39.73%     
==========================================
  Files        296     1042      +746     
  Lines      46042   145379    +99337     
  Branches     432     9445     +9013     
==========================================
+ Hits         662    59863    +59201     
- Misses     45094    83976    +38882     
- Partials     286     1540     +1254     

see 746 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

Router image scan passed

✅ No security vulnerabilities found in image:

ghcr.io/wundergraph/cosmo/router:sha-abe9e9a4bea32809d9e01f86779b7d54c5ec7c75

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: c67965c4-d45e-4d69-ad92-c58aef1ca1ad

📥 Commits

Reviewing files that changed from the base of the PR and between 57ba621 and eb90f4f.

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (1)

• controlplane/package.json

🚧 Files skipped from review as they are similar to previous changes (1)

• controlplane/package.json

---

Walkthrough

Keycloak dependency and service version bumped from 26.2.5 to 26.5.4 across package.json and Dockerfile. Docker Compose Keycloak service command changed from start-dev to start and two KC_* environment variables were added.

Changes

Cohort / File(s)	Summary
Package Dependency controlplane/package.json	Updated @keycloak/keycloak-admin-client from 26.2.5 to 26.5.4.
Docker Compose Services docker-compose.full.yml, docker-compose.yml	Keycloak service command changed from start-dev to start (preserving --import-realm and --optimized flags). Added KC_HTTP_ENABLED='true' and KC_HOSTNAME_STRICT='false'.
Container Build Configuration keycloak/Dockerfile	Bumped ARG KEYCLOAK_VERSION from 26.2.5 to 26.5.4.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~8 minutes

Possibly related PRs

• feat(keycloak): move to official images #2561 — Modifies Keycloak Dockerfile and docker-compose service configuration including KC environment variables and startup command.
• feat: improve Keycloak device auth page to include SSO options #2100 — Bumps Keycloak-related version pins in package files and Dockerfile.

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The pull request title clearly and accurately summarizes the main change: updating Keycloak to version 26.5.4, which is reflected across all modified files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

Tip

Try Coding Plans. Let us write the prompt for your AI agent so you can ship faster (with fewer bugs).
Share your feedback on Discord.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[StarpTech]

LGTM