all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    ubuntu-jammy:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fefd:8adb
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: fabd1ddc-2d05-4ac6-89bc-2695449b2cac
        host_id: 55633341e2323245483187cac115f046b03a9f9bdd80b43c7e9345ac
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fefd:8adb
        label: ubuntu-jammy
        node_properties: {}
        private_ipv4: 10.128.7.245
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.193.152
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fefd:8adb
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: YAKEcloud/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job hadolint explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#37>'
      - '<Job hadolint explicit: None implied: None source: YAKEcloud/yake-ansible/.zuul.yaml@main#82>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 1119fb4618564053a9737373ff5c2e93
      build_refs:
      - branch: main
        change: '467'
        change_message: "chore(deps): update dependency keycloak/keycloak to v26.5.2\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [keycloak/keycloak](https://redirect.github.com/keycloak/keycloak) | patch
          | `26.5.1` \u2192 `26.5.2` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>keycloak/keycloak
          (keycloak/keycloak)</summary>\n\n### [`v26.5.2`](https://redirect.github.com/keycloak/keycloak/releases/tag/26.5.2)\n\n[Compare
          Source](https://redirect.github.com/keycloak/keycloak/compare/26.5.1...26.5.2)\n\n<div>\n\n<h2>Upgrading</h2>\n<p>Before
          upgrading refer to <a href=\"https://www.keycloak.org/docs/latest/upgrading/#migration-changes\">the
          migration guide</a> for a complete list of changes.</p>\n\n<h2>All resolved
          issues</h2>\n\n<h3>Security fixes</h3>\n<ul>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/44994\">#&#8203;44994</a>
          CVE-2025-67735 - netty-codec-http: Request Smuggling via CRLF Injection
          <code>dependencies</code></li>\n</ul>\n\n<h3>Enhancements</h3>\n<ul>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/43443\">#&#8203;43443</a>
          Keycloak should warn when ISPN or JGROUPS is running in debug level logging
          </li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45498\">#&#8203;45498</a>
          Ignore OpenAPI artifacts when disabled <code>dist/quarkus</code></li>\n</ul>\n\n<h3>Bugs</h3>\n<ul>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/44785\">#&#8203;44785</a>
          Can not get through SSO login if using a custom attribute with default value
          <code>user-profile</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45015\">#&#8203;45015</a>
          Deadlock in Infinispan virtual threads <code>infinispan</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45250\">#&#8203;45250</a>
          IDToken contains duplicate address claims <code>oidc</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45333\">#&#8203;45333</a>
          User admin events don't show role, group mapping, reset password like events
          <code>admin/ui</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45396\">#&#8203;45396</a>
          Database Migration fails when updating to 26.5.0 on MS SQL <code>core</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45415\">#&#8203;45415</a>
          cache-remote-host becomes mandatory at build time when using clusterless
          feature <code>infinispan</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45417\">#&#8203;45417</a>
          Unmanaged Attributes Type (Only administrators can view) allows admin API
          to set Unmanaged Attributes <code>user-profile</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45474\">#&#8203;45474</a>
          Admin REST API document is not up to date <code>docs</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45526\">#&#8203;45526</a>
          Regression (26.5.1): Organizations domain resolution fails on MariaDB/MySQL
          due to ORG/ORG_DOMAIN collation mismatch <code>organizations</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45533\">#&#8203;45533</a>
          Keycloak should not allow matrix parameters in URLs as we don't use them
          <code>dist/quarkus</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45570\">#&#8203;45570</a>
          CVE-2025-66560 - io.quarkus/quarkus-rest: Quarkus REST Worker Thread Exhaustion
          Vulnerability </li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45584\">#&#8203;45584</a>
          Keycloak supported specs should list DPoP as supported <code>oidc</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45590\">#&#8203;45590</a>
          OIDCIdentityProviderConfig issuer configuration <code>token-exchange</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45597\">#&#8203;45597</a>
          Possible mismatch of charset/collation between columns on mysql/mariadb
          <code>organizations</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45651\">#&#8203;45651</a>
          CVE-2025-14559 keycloak-services: Keycloak keycloak-services: Business logic
          flaw allows unauthorized token issuance for disabled users </li>\n</ul>\n\n</div>\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR is behind base branch, or
          you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this
          PR and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Mi4xIiwidXBkYXRlZEluVmVyIjoiNDIuOTIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/YAKEcloud/yake-ansible/pull/467
        commit_id: 91dd67a93fe4cf5a61fbb4e1d3c966e811c5b244
        patchset: 91dd67a93fe4cf5a61fbb4e1d3c966e811c5b244
        project:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          name: YAKEcloud/yake-ansible
          short_name: yake-ansible
        src_dir: src/github.com/YAKEcloud/yake-ansible
        topic: null
      buildset: 6caac2c3150a4799871a4c750c96a0c7
      buildset_refs:
      - branch: main
        change: '467'
        change_message: "chore(deps): update dependency keycloak/keycloak to v26.5.2\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [keycloak/keycloak](https://redirect.github.com/keycloak/keycloak) | patch
          | `26.5.1` \u2192 `26.5.2` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>keycloak/keycloak
          (keycloak/keycloak)</summary>\n\n### [`v26.5.2`](https://redirect.github.com/keycloak/keycloak/releases/tag/26.5.2)\n\n[Compare
          Source](https://redirect.github.com/keycloak/keycloak/compare/26.5.1...26.5.2)\n\n<div>\n\n<h2>Upgrading</h2>\n<p>Before
          upgrading refer to <a href=\"https://www.keycloak.org/docs/latest/upgrading/#migration-changes\">the
          migration guide</a> for a complete list of changes.</p>\n\n<h2>All resolved
          issues</h2>\n\n<h3>Security fixes</h3>\n<ul>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/44994\">#&#8203;44994</a>
          CVE-2025-67735 - netty-codec-http: Request Smuggling via CRLF Injection
          <code>dependencies</code></li>\n</ul>\n\n<h3>Enhancements</h3>\n<ul>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/43443\">#&#8203;43443</a>
          Keycloak should warn when ISPN or JGROUPS is running in debug level logging
          </li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45498\">#&#8203;45498</a>
          Ignore OpenAPI artifacts when disabled <code>dist/quarkus</code></li>\n</ul>\n\n<h3>Bugs</h3>\n<ul>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/44785\">#&#8203;44785</a>
          Can not get through SSO login if using a custom attribute with default value
          <code>user-profile</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45015\">#&#8203;45015</a>
          Deadlock in Infinispan virtual threads <code>infinispan</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45250\">#&#8203;45250</a>
          IDToken contains duplicate address claims <code>oidc</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45333\">#&#8203;45333</a>
          User admin events don't show role, group mapping, reset password like events
          <code>admin/ui</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45396\">#&#8203;45396</a>
          Database Migration fails when updating to 26.5.0 on MS SQL <code>core</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45415\">#&#8203;45415</a>
          cache-remote-host becomes mandatory at build time when using clusterless
          feature <code>infinispan</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45417\">#&#8203;45417</a>
          Unmanaged Attributes Type (Only administrators can view) allows admin API
          to set Unmanaged Attributes <code>user-profile</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45474\">#&#8203;45474</a>
          Admin REST API document is not up to date <code>docs</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45526\">#&#8203;45526</a>
          Regression (26.5.1): Organizations domain resolution fails on MariaDB/MySQL
          due to ORG/ORG_DOMAIN collation mismatch <code>organizations</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45533\">#&#8203;45533</a>
          Keycloak should not allow matrix parameters in URLs as we don't use them
          <code>dist/quarkus</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45570\">#&#8203;45570</a>
          CVE-2025-66560 - io.quarkus/quarkus-rest: Quarkus REST Worker Thread Exhaustion
          Vulnerability </li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45584\">#&#8203;45584</a>
          Keycloak supported specs should list DPoP as supported <code>oidc</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45590\">#&#8203;45590</a>
          OIDCIdentityProviderConfig issuer configuration <code>token-exchange</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45597\">#&#8203;45597</a>
          Possible mismatch of charset/collation between columns on mysql/mariadb
          <code>organizations</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45651\">#&#8203;45651</a>
          CVE-2025-14559 keycloak-services: Keycloak keycloak-services: Business logic
          flaw allows unauthorized token issuance for disabled users </li>\n</ul>\n\n</div>\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR is behind base branch, or
          you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this
          PR and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Mi4xIiwidXBkYXRlZEluVmVyIjoiNDIuOTIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/YAKEcloud/yake-ansible/pull/467
        commit_id: 91dd67a93fe4cf5a61fbb4e1d3c966e811c5b244
        patchset: 91dd67a93fe4cf5a61fbb4e1d3c966e811c5b244
        project:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          name: YAKEcloud/yake-ansible
          short_name: yake-ansible
        src_dir: src/github.com/YAKEcloud/yake-ansible
        topic: null
      change: '467'
      change_message: "chore(deps): update dependency keycloak/keycloak to v26.5.2\n\nThis
        PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
        [keycloak/keycloak](https://redirect.github.com/keycloak/keycloak) | patch
        | `26.5.1` \u2192 `26.5.2` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>keycloak/keycloak
        (keycloak/keycloak)</summary>\n\n### [`v26.5.2`](https://redirect.github.com/keycloak/keycloak/releases/tag/26.5.2)\n\n[Compare
        Source](https://redirect.github.com/keycloak/keycloak/compare/26.5.1...26.5.2)\n\n<div>\n\n<h2>Upgrading</h2>\n<p>Before
        upgrading refer to <a href=\"https://www.keycloak.org/docs/latest/upgrading/#migration-changes\">the
        migration guide</a> for a complete list of changes.</p>\n\n<h2>All resolved
        issues</h2>\n\n<h3>Security fixes</h3>\n<ul>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/44994\">#&#8203;44994</a>
        CVE-2025-67735 - netty-codec-http: Request Smuggling via CRLF Injection <code>dependencies</code></li>\n</ul>\n\n<h3>Enhancements</h3>\n<ul>\n<li><a
        href=\"https://redirect.github.com/keycloak/keycloak/issues/43443\">#&#8203;43443</a>
        Keycloak should warn when ISPN or JGROUPS is running in debug level logging
        </li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45498\">#&#8203;45498</a>
        Ignore OpenAPI artifacts when disabled <code>dist/quarkus</code></li>\n</ul>\n\n<h3>Bugs</h3>\n<ul>\n<li><a
        href=\"https://redirect.github.com/keycloak/keycloak/issues/44785\">#&#8203;44785</a>
        Can not get through SSO login if using a custom attribute with default value
        <code>user-profile</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45015\">#&#8203;45015</a>
        Deadlock in Infinispan virtual threads <code>infinispan</code></li>\n<li><a
        href=\"https://redirect.github.com/keycloak/keycloak/issues/45250\">#&#8203;45250</a>
        IDToken contains duplicate address claims <code>oidc</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45333\">#&#8203;45333</a>
        User admin events don't show role, group mapping, reset password like events
        <code>admin/ui</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45396\">#&#8203;45396</a>
        Database Migration fails when updating to 26.5.0 on MS SQL <code>core</code></li>\n<li><a
        href=\"https://redirect.github.com/keycloak/keycloak/issues/45415\">#&#8203;45415</a>
        cache-remote-host becomes mandatory at build time when using clusterless feature
        <code>infinispan</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45417\">#&#8203;45417</a>
        Unmanaged Attributes Type (Only administrators can view) allows admin API
        to set Unmanaged Attributes <code>user-profile</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45474\">#&#8203;45474</a>
        Admin REST API document is not up to date <code>docs</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45526\">#&#8203;45526</a>
        Regression (26.5.1): Organizations domain resolution fails on MariaDB/MySQL
        due to ORG/ORG_DOMAIN collation mismatch <code>organizations</code></li>\n<li><a
        href=\"https://redirect.github.com/keycloak/keycloak/issues/45533\">#&#8203;45533</a>
        Keycloak should not allow matrix parameters in URLs as we don't use them <code>dist/quarkus</code></li>\n<li><a
        href=\"https://redirect.github.com/keycloak/keycloak/issues/45570\">#&#8203;45570</a>
        CVE-2025-66560 - io.quarkus/quarkus-rest: Quarkus REST Worker Thread Exhaustion
        Vulnerability </li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45584\">#&#8203;45584</a>
        Keycloak supported specs should list DPoP as supported <code>oidc</code></li>\n<li><a
        href=\"https://redirect.github.com/keycloak/keycloak/issues/45590\">#&#8203;45590</a>
        OIDCIdentityProviderConfig issuer configuration <code>token-exchange</code></li>\n<li><a
        href=\"https://redirect.github.com/keycloak/keycloak/issues/45597\">#&#8203;45597</a>
        Possible mismatch of charset/collation between columns on mysql/mariadb <code>organizations</code></li>\n<li><a
        href=\"https://redirect.github.com/keycloak/keycloak/issues/45651\">#&#8203;45651</a>
        CVE-2025-14559 keycloak-services: Keycloak keycloak-services: Business logic
        flaw allows unauthorized token issuance for disabled users </li>\n</ul>\n\n</div>\n\n</details>\n\n---\n\n###
        Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time (no
        schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
        **Automerge**: Disabled by config. Please merge this manually once you are
        satisfied.\n\n\u267B **Rebasing**: Whenever PR is behind base branch, or you
        tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR and
        you won't be reminded about this update again.\n\n---\n\n - [ ] <!-- rebase-check
        -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was
        generated by [Mend Renovate](https://mend.io/renovate/). View the [repository
        job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Mi4xIiwidXBkYXRlZEluVmVyIjoiNDIuOTIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
      change_url: https://github.com/YAKEcloud/yake-ansible/pull/467
      child_jobs: []
      commit_id: 91dd67a93fe4cf5a61fbb4e1d3c966e811c5b244
      event_id: bdfd3ed0-fceb-11f0-903b-d77570f09df2
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/1119fb4618564053a9737373ff5c2e93/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/1119fb4618564053a9737373ff5c2e93/work/logs
        result_data_file: /var/lib/zuul/builds/1119fb4618564053a9737373ff5c2e93/work/results.json
        src_root: /var/lib/zuul/builds/1119fb4618564053a9737373ff5c2e93/work/src
        work_root: /var/lib/zuul/builds/1119fb4618564053a9737373ff5c2e93/work
      include_vars: []
      items:
      - branch: main
        change: '467'
        change_message: "chore(deps): update dependency keycloak/keycloak to v26.5.2\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [keycloak/keycloak](https://redirect.github.com/keycloak/keycloak) | patch
          | `26.5.1` \u2192 `26.5.2` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>keycloak/keycloak
          (keycloak/keycloak)</summary>\n\n### [`v26.5.2`](https://redirect.github.com/keycloak/keycloak/releases/tag/26.5.2)\n\n[Compare
          Source](https://redirect.github.com/keycloak/keycloak/compare/26.5.1...26.5.2)\n\n<div>\n\n<h2>Upgrading</h2>\n<p>Before
          upgrading refer to <a href=\"https://www.keycloak.org/docs/latest/upgrading/#migration-changes\">the
          migration guide</a> for a complete list of changes.</p>\n\n<h2>All resolved
          issues</h2>\n\n<h3>Security fixes</h3>\n<ul>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/44994\">#&#8203;44994</a>
          CVE-2025-67735 - netty-codec-http: Request Smuggling via CRLF Injection
          <code>dependencies</code></li>\n</ul>\n\n<h3>Enhancements</h3>\n<ul>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/43443\">#&#8203;43443</a>
          Keycloak should warn when ISPN or JGROUPS is running in debug level logging
          </li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45498\">#&#8203;45498</a>
          Ignore OpenAPI artifacts when disabled <code>dist/quarkus</code></li>\n</ul>\n\n<h3>Bugs</h3>\n<ul>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/44785\">#&#8203;44785</a>
          Can not get through SSO login if using a custom attribute with default value
          <code>user-profile</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45015\">#&#8203;45015</a>
          Deadlock in Infinispan virtual threads <code>infinispan</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45250\">#&#8203;45250</a>
          IDToken contains duplicate address claims <code>oidc</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45333\">#&#8203;45333</a>
          User admin events don't show role, group mapping, reset password like events
          <code>admin/ui</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45396\">#&#8203;45396</a>
          Database Migration fails when updating to 26.5.0 on MS SQL <code>core</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45415\">#&#8203;45415</a>
          cache-remote-host becomes mandatory at build time when using clusterless
          feature <code>infinispan</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45417\">#&#8203;45417</a>
          Unmanaged Attributes Type (Only administrators can view) allows admin API
          to set Unmanaged Attributes <code>user-profile</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45474\">#&#8203;45474</a>
          Admin REST API document is not up to date <code>docs</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45526\">#&#8203;45526</a>
          Regression (26.5.1): Organizations domain resolution fails on MariaDB/MySQL
          due to ORG/ORG_DOMAIN collation mismatch <code>organizations</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45533\">#&#8203;45533</a>
          Keycloak should not allow matrix parameters in URLs as we don't use them
          <code>dist/quarkus</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45570\">#&#8203;45570</a>
          CVE-2025-66560 - io.quarkus/quarkus-rest: Quarkus REST Worker Thread Exhaustion
          Vulnerability </li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45584\">#&#8203;45584</a>
          Keycloak supported specs should list DPoP as supported <code>oidc</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45590\">#&#8203;45590</a>
          OIDCIdentityProviderConfig issuer configuration <code>token-exchange</code></li>\n<li><a
          href=\"https://redirect.github.com/keycloak/keycloak/issues/45597\">#&#8203;45597</a>
          Possible mismatch of charset/collation between columns on mysql/mariadb
          <code>organizations</code></li>\n<li><a href=\"https://redirect.github.com/keycloak/keycloak/issues/45651\">#&#8203;45651</a>
          CVE-2025-14559 keycloak-services: Keycloak keycloak-services: Business logic
          flaw allows unauthorized token issuance for disabled users </li>\n</ul>\n\n</div>\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR is behind base branch, or
          you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this
          PR and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Mi4xIiwidXBkYXRlZEluVmVyIjoiNDIuOTIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/YAKEcloud/yake-ansible/pull/467
        commit_id: 91dd67a93fe4cf5a61fbb4e1d3c966e811c5b244
        patchset: 91dd67a93fe4cf5a61fbb4e1d3c966e811c5b244
        project:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          name: YAKEcloud/yake-ansible
          short_name: yake-ansible
          src_dir: src/github.com/YAKEcloud/yake-ansible
        topic: null
      job: hadolint
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: 91dd67a93fe4cf5a61fbb4e1d3c966e811c5b244
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/YAKEcloud/zuul-config:
            canonical_name: github.com/YAKEcloud/zuul-config
            checkout: main
            commit: 187ca9c93783cf78b5778e0c84c687f3aefbe0a7
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: a01eed06dffe368c1d01819193bfadccb137414d
          untrusted/project_1/github.com/YAKEcloud/zuul-config:
            canonical_name: github.com/YAKEcloud/zuul-config
            checkout: main
            commit: 187ca9c93783cf78b5778e0c84c687f3aefbe0a7
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/hadolint/run.yaml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_0/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_0/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_1/github.com/YAKEcloud/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/YAKEcloud/yake-ansible
        name: YAKEcloud/yake-ansible
        short_name: yake-ansible
        src_dir: src/github.com/YAKEcloud/yake-ansible
      projects:
        github.com/YAKEcloud/yake-ansible:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          checkout: main
          checkout_description: zuul branch
          commit: f3d4b1657956fd2f8d7829a4f446a307ad08d1e0
          name: YAKEcloud/yake-ansible
          required: false
          short_name: yake-ansible
          src_dir: src/github.com/YAKEcloud/yake-ansible
      ref: refs/pull/467/head
      resources: {}
      tenant: yakecloud
      timeout: 1800
      topic: null
      voting: true
