@continuoussecuritytooling/keycloak-reporter 1.3.2 → 1.3.4

package/.github/workflows/pipeline.yml

@@ -47,9 +47,9 @@ jobs:
       - name: Set up Helm
         uses: azure/setup-helm@v5
         with:
-          version: v4.2.3
+          version: v4.3.0
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7.0.0
         with:
           python-version: '3.14'
           check-latest: true
@@ -74,7 +74,7 @@ jobs:
 
       - name: Create kind cluster
         if: steps.list-changed.outputs.changed == 'true'
-        uses: helm/kind-action@v1.14.0
+        uses: helm/kind-action@v1.15.0
 
       - name: Run chart-testing (install - no further args)
         if: steps.list-changed.outputs.changed == 'true'
@@ -111,10 +111,10 @@ jobs:
         with:
           node-version: '${{ matrix.node_version }}'
       - name: Install Java
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v6
         with:
           distribution: 'temurin' # See 'Supported distributions' for available options
-          java-version: '17'
+          java-version: '25.0.4+101.0.LTS'
       - name: npm build and test
         run: |
           npm run clean
@@ -189,7 +189,7 @@ jobs:
 
       - name: Build Container Image
         id: build-image
-        uses: redhat-actions/buildah-build@v2
+        uses: redhat-actions/buildah-build@v3
         with:
           image: continuoussecuritytooling/keycloak-reporting-cli
           tags: 'latest next ${{env.APP_VERSION}} ${{env.APP_VERSION}}_rc'

package/.github/workflows/release.yml

@@ -1,226 +1,227 @@
 name: Create release # You may choose a different name
 run-name: ${{ inputs.releaseversion }} # Enumerates entries in the "workflow runs" view
 on:
-    workflow_dispatch:
-        inputs:
-            releaseversion:
-                description: 'Release version'
-                required: true
-                type: string
-                default: "X.Y.Z"
+  workflow_dispatch:
+    inputs:
+      releaseversion:
+        description: 'Release version'
+        required: true
+        type: string
+        default: 'X.Y.Z'
 
 jobs:
-    release: # Arbitrarily chosen
-        name: Release
-        runs-on: ubuntu-latest
-        permissions:
-            contents: write
-            packages: write
-            attestations: write
-            id-token: write
-        steps:
-
-            -   uses: actions/create-github-app-token@v3
-                id: app-token
-                with:
-                    app-id: ${{ vars.CI_APP_ID }}
-                    private-key: ${{ secrets.CI_PRIVATE_KEY }}
-
-            -   name: Checkout
-                uses: actions/checkout@v7
-                with:
-                    fetch-depth: 0
-                    token: ${{ steps.app-token.outputs.token }}
-                    ref: ${{ github.head_ref }}
-
-            -   name: Get GitHub App User ID
-                id: get-user-id
-                run: echo "user-id=$(gh api "/users/${{ steps.app-token.outputs.app-slug }}[bot]" --jq .id)" >> "$GITHUB_OUTPUT"
-                env:
-                    GH_TOKEN: ${{ steps.app-token.outputs.token }}
-
-            -   name: Configure Git author
-                run: |
-                    git config --global user.name '${{ steps.app-token.outputs.app-slug }}[bot]'
-                    git config --global user.email '${{ steps.get-user-id.outputs.user-id }}+${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com>'
-
-            -   name: Setup NodeJS
-                uses: actions/setup-node@v7
-                with:
-                    node-version: '24'
-                    registry-url: 'https://registry.npmjs.org'
-
-            -   name: Setup Java
-                uses: actions/setup-java@v5 # Does also set up Maven and GPG
-                with:
-                    distribution: 'temurin' # As good as any other, see: https://github.com/actions/setup-java#supported-distributions
-                    java-version: '21'
-
-            -   name: Package Application
-                run: |
-                    npm run clean
-                    npm version --no-git-tag-version ${{ github.event.inputs.releaseversion }} || true
-                    npm run build
-
-            -   name: Write version vars
-                run: |
-                    BUILD_DATE=`date -u +"%Y-%m-%dT%H:%M:%SZ"`
-                    BRANCH=${GITHUB_REF_NAME#v}
-                    APP_VERSION=$(cat package.json | grep version| head -1 | awk -F: '{ print $2 }' | sed 's/[",]//g')
-                    echo Version: $APP_VERSION
-                    echo "VERSION=$APP_VERSION" >> $GITHUB_ENV
-                    echo "APP_VERSION=$APP_VERSION" >> $GITHUB_ENV
-                    echo "BUILD_DATE=$BUILD_DATE" >> $GITHUB_ENV
-
-            -   name: Install Helm
-                uses: azure/setup-helm@v5
-
-            -   name: Install Python
-                uses: actions/setup-python@v6
-                with:
-                    python-version: '3.14'
-                    check-latest: true
-            -   name: Set up chart-testing
-                uses: helm/chart-testing-action@v2.8.0
-                with:
-                  version: v3.14.0
-                  yamale_version: '6.0.0'
-
-            -   name: Set up helm-docs
-                uses: gabe565/setup-helm-docs-action@v1
-
-            -   name: Run chart-testing (lint)
-                run: ct lint --config .ct.yaml
-
-            -   name: Helm Package
-                run: |
-
-                    # Increment a version string using Semantic Versioning (SemVer) terminology.
-                    # Parse command line options.
-                    # Source: https://github.com/fmahnke/shell-semver
-                    #
-                    # usage: increment_version.sh [-Mmp] major.minor.patch
-                    increment_version() {
-                      while getopts ":Mmp" Option
-                      do
-                        case $Option in
-                          M ) major=true;;
-                          m ) minor=true;;
-                          p ) patch=true;;
-                          * ) patch=true;;
-                        esac
-                      done
-
-                      # shellcheck disable=SC2004,SC2206
-                      shift $(($OPTIND - 1))
-
-                      version=$1
-
-                      # Build array from version string.
-                      # shellcheck disable=SC2206
-                      a=( ${version//./ } )
-                      # If version string is missing or has the wrong number of members, show usage message.
-                      if [ ${#a[@]} -ne 3 ]
-                      then
-                        echo "usage: $(basename $0) [-Mmp] major.minor.patch"
-                        exit 1
-                      fi
-
-                      # Increment version numbers as requested.
-
-                      if [ -n "$major" ]
-                      then
-                        ((a[0]++))
-                        a[1]=0
-                        a[2]=0
-                      fi
-
-                      if [ -n "$minor" ]
-                      then
-                        ((a[1]++))
-                        a[2]=0
-                      fi
-
-                      if [ -n "$patch" ]
-                      then
-                        ((a[2]++))
-                      fi
-
-                      echo "${a[0]}.${a[1]}.${a[2]}"
-                    }
-
-                    export HELM_CHART_DIR=charts/keycloak-reporter
-                    chartVersion=$(cat $HELM_CHART_DIR/Chart.yaml | grep "version: " | sed -E -n "s/^version: \s*(.*)$/\1/p")
-                    appVersion=$(cat $HELM_CHART_DIR/Chart.yaml | grep "appVersion: " | sed -E -n "s/^appVersion: \s*(.*)$/\1/p")
-                    newVersion=$(increment_version -p $chartVersion)
-                    sed -i 's/version: '"$chartVersion"'/version: '"$newVersion"'/g' $HELM_CHART_DIR/Chart.yaml
-                    sed -i 's/appVersion: '"$appVersion"'/appVersion: '"${{ github.event.inputs.releaseversion }}"'/g' $HELM_CHART_DIR/Chart.yaml
-                    helm-docs
-                    helm package $HELM_CHART_DIR
-                    git add .
-
-
-            -   name: Run chart-testing (lint)
-                run: ct lint --config .ct.yaml
-
-            -   name: Conventional Changelog Action
-                uses: TriPSs/conventional-changelog-action@v6
-                with:
-                    input-file: CHANGELOG.md
-                    github-token: ${{ steps.app-token.outputs.token }}
-                    version-file: package.json
-                    pre-release: true
-                    skip-bump: true
-                    skip-tag: true
-                    skip-on-empty: true
-                    tag-prefix: 'v'
-
-            -   name: Create Release on GH
-                id: tag-and-release
-                uses: avakar/tag-and-release@v1.0.0
-                with:
-                    draft: true
-                    release_name: ${{ github.event.inputs.releaseversion }}
-                    tag_name: v${{ github.event.inputs.releaseversion }}
-                env:
-                    GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-            -   name: Build Container Image
-                id: build-image
-                uses: redhat-actions/buildah-build@v2
-                with:
-                    image: continuoussecuritytooling/keycloak-reporting-cli
-                    tags: 'latest ${{ github.event.inputs.releaseversion }}'
-                    containerfiles: |
-                        ./Dockerfile
-                    build-args: |
-                        BUILD_DATE=${{ env.BUILD_DATE }}
-                        APP_VERSION=${{ github.event.inputs.releaseversion }}
-
-            -   name: Push To Docker Hub
-                id: push-to-dockerhub-preview
-                uses: redhat-actions/push-to-registry@v2
-                with:
-                    image: ${{ steps.build-image.outputs.image }}
-                    tags: 'latest ${{ github.event.inputs.releaseversion }}'
-                    registry: registry.hub.docker.com
-                    username: continuoussecuritytooling
-                    password: ${{ secrets.DOCKER_HUB_TOKEN }}
-
-            -   name: Publish npm package
-                run: |
-                    npm publish
-
-            -   name: Login to GitHub Container Registry
-                run: |
-                    echo ${{ secrets.CT_OCI_GITHUB_TOKEN }} | helm registry login ghcr.io -u $ --password-stdin
-
-            -   name: Push Charts to GHCR
-                run: |
-                    shopt -s nullglob
-                    for pkg in *.tgz; do
-                      if [ -z "${pkg:-}" ]; then
-                        break
-                      fi
-                      helm push "${pkg}" oci://ghcr.io/cloudtooling/helm-charts
-                    done
+  release: # Arbitrarily chosen
+    name: Release
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
+      attestations: write
+      id-token: write
+    steps:
+      - uses: actions/create-github-app-token@v3
+        id: app-token
+        with:
+          app-id: ${{ vars.CI_APP_ID }}
+          private-key: ${{ secrets.CI_PRIVATE_KEY }}
+
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+          token: ${{ steps.app-token.outputs.token }}
+          ref: ${{ github.head_ref }}
+
+      - name: Get GitHub App User ID
+        id: get-user-id
+        run: echo "user-id=$(gh api "/users/${{ steps.app-token.outputs.app-slug }}[bot]" --jq .id)" >> "$GITHUB_OUTPUT"
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+
+      - name: Configure Git author
+        run: |
+          git config --global user.name '${{ steps.app-token.outputs.app-slug }}[bot]'
+          git config --global user.email '${{ steps.get-user-id.outputs.user-id }}+${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com>'
+
+      - name: Setup NodeJS
+        uses: actions/setup-node@v7
+        with:
+          node-version: '24'
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Setup Java
+        uses: actions/setup-java@v6 # Does also set up Maven and GPG
+        with:
+          distribution: 'temurin' # As good as any other, see: https://github.com/actions/setup-java#supported-distributions
+          java-version: '25.0.4+101.0.LTS'
+
+      - name: Package Application
+        run: |
+          npm run clean
+          npm version --no-git-tag-version ${{ github.event.inputs.releaseversion }} || true
+          npm run build
+
+      - name: Write version vars
+        run: |
+          BUILD_DATE=`date -u +"%Y-%m-%dT%H:%M:%SZ"`
+          BRANCH=${GITHUB_REF_NAME#v}
+          APP_VERSION=$(cat package.json | grep version| head -1 | awk -F: '{ print $2 }' | sed 's/[",]//g')
+          echo Version: $APP_VERSION
+          echo "VERSION=$APP_VERSION" >> $GITHUB_ENV
+          echo "APP_VERSION=$APP_VERSION" >> $GITHUB_ENV
+          echo "BUILD_DATE=$BUILD_DATE" >> $GITHUB_ENV
+
+      - name: Install Helm
+        uses: azure/setup-helm@v5
+
+      - name: Install Python
+        uses: actions/setup-python@v7.0.0
+        with:
+          python-version: '3.14'
+          check-latest: true
+      - name: Set up chart-testing
+        uses: helm/chart-testing-action@v2.8.0
+        with:
+          version: v3.14.0
+          yamale_version: '6.0.0'
+
+      - name: Set up helm-docs
+        uses: gabe565/setup-helm-docs-action@v1
+
+      - name: Run chart-testing (lint)
+        run: ct lint --config .ct.yaml
+
+      - name: Helm Package
+        run: |
+
+          # Increment a version string using Semantic Versioning (SemVer) terminology.
+          # Parse command line options.
+          # Source: https://github.com/fmahnke/shell-semver
+          #
+          # usage: increment_version.sh [-Mmp] major.minor.patch
+          increment_version() {
+            while getopts ":Mmp" Option
+            do
+              case $Option in
+                M ) major=true;;
+                m ) minor=true;;
+                p ) patch=true;;
+                * ) patch=true;;
+              esac
+            done
+
+            # shellcheck disable=SC2004,SC2206
+            shift $(($OPTIND - 1))
+
+            version=$1
+
+            # Build array from version string.
+            # shellcheck disable=SC2206
+            a=( ${version//./ } )
+            # If version string is missing or has the wrong number of members, show usage message.
+            if [ ${#a[@]} -ne 3 ]
+            then
+              echo "usage: $(basename $0) [-Mmp] major.minor.patch"
+              exit 1
+            fi
+
+            # Increment version numbers as requested.
+
+            if [ -n "$major" ]
+            then
+              ((a[0]++))
+              a[1]=0
+              a[2]=0
+            fi
+
+            if [ -n "$minor" ]
+            then
+              ((a[1]++))
+              a[2]=0
+            fi
+
+            if [ -n "$patch" ]
+            then
+              ((a[2]++))
+            fi
+
+            echo "${a[0]}.${a[1]}.${a[2]}"
+          }
+
+          export HELM_CHART_DIR=charts/keycloak-reporter
+          chartVersion=$(cat $HELM_CHART_DIR/Chart.yaml | grep "version: " | sed -E -n "s/^version: \s*(.*)$/\1/p")
+          appVersion=$(cat $HELM_CHART_DIR/Chart.yaml | grep "appVersion: " | sed -E -n "s/^appVersion: \s*(.*)$/\1/p")
+          newVersion=$(increment_version -p $chartVersion)
+          sed -i 's/version: '"$chartVersion"'/version: '"$newVersion"'/g' $HELM_CHART_DIR/Chart.yaml
+          sed -i 's/appVersion: '"$appVersion"'/appVersion: '"${{ github.event.inputs.releaseversion }}"'/g' $HELM_CHART_DIR/Chart.yaml
+          helm-docs
+          helm package $HELM_CHART_DIR
+          git add .
+
+      - name: Run chart-testing (lint)
+        run: ct lint --config .ct.yaml
+
+      - name: Generate Changelog
+        uses: orhun/git-cliff-action@v4
+        with:
+          config: cliff.toml
+          args: --tag v${{ inputs.releaseversion }} --prepend CHANGELOG.md --unreleased
+        env:
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
+
+      - name: Commit Changelog
+        run: |
+          git add CHANGELOG.md
+          git diff --staged --quiet || git commit -m "chore(release): update changelog for v${{ inputs.releaseversion }}"
+          git tag v${{ github.event.inputs.releaseversion }} || true
+          git push
+          git push --tags || true
+      - name: Create Release on GH
+        id: tag-and-release
+        uses: avakar/tag-and-release@v1.0.0
+        with:
+          draft: true
+          release_name: ${{ github.event.inputs.releaseversion }}
+          tag_name: v${{ github.event.inputs.releaseversion }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build Container Image
+        id: build-image
+        uses: redhat-actions/buildah-build@v3
+        with:
+          image: continuoussecuritytooling/keycloak-reporting-cli
+          tags: 'latest ${{ github.event.inputs.releaseversion }}'
+          containerfiles: |
+            ./Dockerfile
+          build-args: |
+            BUILD_DATE=${{ env.BUILD_DATE }}
+            APP_VERSION=${{ github.event.inputs.releaseversion }}
+
+      - name: Push To Docker Hub
+        id: push-to-dockerhub-preview
+        uses: redhat-actions/push-to-registry@v3
+        with:
+          image: ${{ steps.build-image.outputs.image }}
+          tags: 'latest ${{ github.event.inputs.releaseversion }}'
+          registry: registry.hub.docker.com
+          username: continuoussecuritytooling
+          password: ${{ secrets.DOCKER_HUB_TOKEN }}
+
+      - name: Publish npm package
+        run: |
+          npm publish
+
+      - name: Login to GitHub Container Registry
+        run: |
+          echo ${{ secrets.CT_OCI_GITHUB_TOKEN }} | helm registry login ghcr.io -u $ --password-stdin
+
+      - name: Push Charts to GHCR
+        run: |
+          shopt -s nullglob
+          for pkg in *.tgz; do
+            if [ -z "${pkg:-}" ]; then
+              break
+            fi
+            helm push "${pkg}" oci://ghcr.io/cloudtooling/helm-charts
+          done

package/CHANGELOG.md

@@ -1,3 +1,145 @@
+
+## [1.3.4](https://github.com/ContinuousSecurityTooling/keycloak-auditor/compare/v1.3.3...v1.3.4) (2026-10-04)
+
+### Dependency Updates
+
+* **deps:** Update dependency @json2csv/node to v7.0.8 ([14d39a2](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/14d39a2616d1821c10b7d936979fed2144525021))
+
+* **deps:** Update dependency eslint to v10.8.1 ([f18ce7d](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/f18ce7d7dc29bedb47dea4fe89a252d5b42c47b4))
+
+* **deps:** Update typescript-eslint monorepo to v8.67.0 ([cb358eb](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/cb358ebbdf28c904d2af13ee0261f338eccc4020))
+
+* **deps:** Update dependency openid-client to v6.8.5 ([0b5e276](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/0b5e2762d6e6645fea7b3a8039939e5497ba1e6b))
+
+* **deps:** Update dependency globals to v17.10.0 ([17f6e98](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/17f6e98180a8ac7258391fbbd4f42ac04b3fdff8))
+
+* **deps:** Update dependency helm to v4.2.4 ([84811a1](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/84811a1d824ef76c218447591d4455075335126c))
+
+* **deps:** Update dependency globals to v17.11.0 ([8760593](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/8760593e5f9f66bed46428532390f98b535b4ef0))
+
+* **deps:** Update dependency openid-client to v6.8.6 ([0516a6a](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/0516a6ad3c6a5f17052df6b672319a2b2c9a56d5))
+
+* **deps:** Update dependency @continuoussecuritytooling/keycloak-auditor to v2.2.9 ([bef7035](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/bef7035d987ffc67feaf36071987aabb144ca799))
+
+* **deps:** Update dependency openid-client to v6.8.7 ([fa1b9cf](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/fa1b9cf5e752bf6111eff66397f5e5c8ea284db9))
+
+* **deps:** Update dependency eslint to v10.9.1 ([e500e99](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/e500e9999799811d4ceb36a37f7befd7683bddcc))
+
+* **deps:** Update typescript-eslint monorepo to v8.68.0 ([27582a1](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/27582a1d075c1667f82b63a964fd8f8b5ff5a42e))
+
+* **deps:** Update actions/setup-java action to v6 ([7741590](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/774159000d0549747215cf9075d52b4b81e24e3c))
+
+* **deps:** Update dependency @slack/webhook to v8.0.1 ([e45d433](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/e45d433c6fe33ac229bbab9b25344e24ab24bd00))
+
+* **deps:** Update node.js to v24.20.0 ([7b09209](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/7b09209d8b2df90ea765c6c4d109f32dc1ca9fb0))
+
+* **deps:** Update dependency @slack/webhook to v8.0.2 ([41f802e](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/41f802e511e01352bcf8903252d9c8cb0090fe51))
+
+* **deps:** Update dependency @continuoussecuritytooling/keycloak-auditor to v2.3.0 ([8651a34](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/8651a34a04619a3c03334106b243114bc2d59e23))
+
+* **deps:** Update dependency jest to v30.5.0 ([fbd137d](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/fbd137db0c42a981a7e245ee1e32e72452902b2c))
+
+* **deps:** Update dependency @keycloak/keycloak-admin-client to v26.7.3 ([c6cc13f](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/c6cc13f8a97c01bcc1851206d3915efecb946336))
+
+* **deps:** Update typescript-eslint monorepo to v8.69.0 ([59e9bb5](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/59e9bb509111025b57f9e4a1e6a56ae27ebbcf43))
+
+* **deps:** Update dependency jest to v30.5.1 ([a4aeba0](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/a4aeba03e5409d8fb32d49c56e77aff88875ba1e))
+
+* **deps:** Update dependency @eslint/eslintrc to v3.3.7 ([4a80ef5](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/4a80ef5e5073de24f393dddb096d2e24b59cc29f))
+
+* **deps:** Update dependency globals to v17.12.0 ([d2fab74](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/d2fab748f0a9a02fc60c45fc433b7eece41f596f))
+
+* **deps:** Update helm/kind-action action to v1.15.0 ([0815186](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/0815186c226b2da211e15ff07dbdf3b816222f3b))
+
+* **deps:** Update dependency eslint to v10.10.0 ([331bd09](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/331bd09f1cf9b2710de0a6869e51d0f6bda516a4))
+
+* **deps:** Update dependency openid-client to v6.8.8 ([bd607df](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/bd607df3917b5e089c4d5ccb2c1c68c40c452298))
+
+* **deps:** Update typescript-eslint monorepo to v8.70.0 ([90c59f7](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/90c59f78ff5caacc6603ef6956ce8b89e8412728))
+
+* **deps:** Update dependency @types/node to v24.13.4 ([ece26ae](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/ece26ae5c62afdc65028cd813d3f66b9fecd9c7f))
+
+* **deps:** Update node.js to v24.21.0 ([b373a30](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/b373a301c340d8f6509046c1d58c625faa0ea1a4))
+
+* **deps:** Update dependency helm to v4.3.0 ([97ca2cb](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/97ca2cba17c5187c440ca3ac14de09a6e317ea5b))
+
+* **deps:** Update dependency java-jdk to v17.0.20+101 ([0a1c851](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/0a1c851e580efacd605bf40f93d272bdd5cada4f))
+
+* **deps:** Update dependency @types/node to v24.13.5 ([33a9704](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/33a9704aaaa8373f22d4917f6553b359fcde8d8f))
+
+* **deps:** Update dependency java-jdk to v21.0.12+101.0.lts ([562121d](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/562121d5ed2cc80a845e4d8ef6f8d020e753cd8c))
+
+* **deps:** Update dependency java-jdk to v25 ([8a06c43](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/8a06c4365f070757b932508cc16a7a286ea4c636))
+
+* **deps:** Update dependency @keycloak/keycloak-admin-client to v26.7.4 ([0c65ad9](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/0c65ad9176e83280cf2e7dd4cb6466eefe372d93))
+
+* **deps:** Update dependency eslint to v10.11.0 ([e8eadfb](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/e8eadfb89b3acd325382cd9146d4fd2a99b1e44b))
+
+* **deps:** Update dependency jest to v30.5.2 ([87d49dc](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/87d49dccc02b36c418e80744946367bdfcde9779))
+
+* **deps:** Update dependency @types/node to v24.13.6 ([60b879d](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/60b879d8e577b44d12b4f721c1e1acaab051904f))
+
+* **deps:** Update dependency yargs to v18.2.0 ([fe3f753](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/fe3f7535a415af13a9cafdb32e40191555dd22a6))
+
+* **deps:** Update typescript-eslint monorepo to v8.70.1 ([49237e7](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/49237e779d1d6d660dc10088c8982c6634f90610))
+
+* **deps:** Update dependency ts-jest to v29.4.13 ([18d93c0](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/18d93c017a5e92dbb5f11c5358f3950a08bd044b))
+
+* **deps:** Update dependency @continuoussecuritytooling/keycloak-auditor to v2.4.0 ([d73dab2](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/d73dab2d1511d607f14693f327b446deaf668ab3))
+
+* **deps:** Update dependency ts-jest to v29.4.14 ([17c7590](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/17c75904890dec69b238845827fa0822987cad4f))
+
+* **deps:** Update dependency @types/node to v24.19.0 ([3279d47](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/3279d478c551ff8a41614d40776f6b197557493e))
+
+* **deps:** Update typescript-eslint monorepo to v8.71.0 ([b94666c](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/b94666c60bf85f97ab3bc7840f76bbbdbc148044))
+
+* **deps:** Update dependency @keycloak/keycloak-admin-client to v26.7.5 ([7fa29b6](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/7fa29b62c881998a6801b953acd876ac4ea37da3))
+
+* **deps:** Update dependency globals to v17.13.0 ([5576380](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/5576380ae2ce1920d6f096e9bb1f1ca2a7624ad8))
+
+* **deps:** Update dependency @keycloak/keycloak-admin-client to v26.8.0 ([f42cf4e](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/f42cf4e16b1ccca448d8fa871963089f1df2e7a2))
+
+* **deps:** Update dependency @types/node to v24.19.1 ([0ef0b4d](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/0ef0b4d8ae375d4e0b27f1323bd246d8ef20e5a5))
+
+* **deps:** Update dependency eslint to v10.12.0 ([11393fa](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/11393faa74050ef8f6868ae08440b01bac6d372e))
+
+* **deps:** Update dependency @continuoussecuritytooling/keycloak-auditor to v2.4.3 ([7cb94c9](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/7cb94c9b4fafdd59ac06bb2648d62afe86664479))
+
+
+
+
+## [1.3.3](https://github.com/ContinuousSecurityTooling/keycloak-auditor/compare/v1.3.2...v1.3.3) (2026-08-04)
+
+### Dependency Updates
+
+* **deps:** Update actions/setup-python action to v7 ([79e4659](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/79e4659c91dfde4fdbe0ce0a84854a87ae4e7655))
+
+* **deps:** Update typescript-eslint monorepo to v8.65.0 ([77f73bf](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/77f73bf53890266963a44de528f54ca7e01d729e))
+
+* **deps:** Update dependency @continuoussecuritytooling/keycloak-auditor to v2.2.8 ([f4fcc72](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/f4fcc72a5c8c0aab46509229a3d313069b147c2f))
+
+* **deps:** Update dependency ts-jest to v29.4.12 ([0f1f1f5](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/0f1f1f59360a9802d85f66d86b6419a0db6e7dd1))
+
+* **deps:** Update dependency eslint to v10.8.0 ([59792c3](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/59792c360e3fdcb47731a54465da205d8cc5c9f7))
+
+* **deps:** Update redhat-actions/push-to-registry action to v3 ([d70bc28](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/d70bc28c39bdcce8a5be396f7875e36f5e7e126a))
+
+* **deps:** Update redhat-actions/buildah-build action to v3 ([bf3abce](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/bf3abcea334f31c248e4bd494a182dff601272be))
+
+* **deps:** Update dependency yargs to v18.1.0 ([a6c9225](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/a6c92251d5393ca62412efa8252e9fbc0bc49009))
+
+* **deps:** Update dependency globals to v17.8.0 ([7c1c9f9](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/7c1c9f920a5a45ce2e531c87cf5b239fcdbaeaf7))
+
+* **deps:** Update node.js to v24.18.1 ([9d9ca95](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/9d9ca95f1f486a314a1ebd367da2700fa3c2da26))
+
+* **deps:** Update dependency globals to v17.9.0 ([11a3f25](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/11a3f250325b33c61e1815819eb92cc02bb1c136))
+
+* **deps:** Update typescript-eslint monorepo to v8.66.0 ([012fe3a](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/012fe3ae24f589db259787843490cb1de5758fca))
+
+* **deps:** Update node.js to v24.19.0 ([62e4e8c](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/62e4e8c2f9894a19beb214199f784b4d93170643))
+
+
+
 ## [1.3.2](https://github.com/ContinuousSecurityTooling/keycloak-reporter/compare/v1.3.1...v1.3.2) (2026-07-17)
 
 

package/Dockerfile

@@ -1,4 +1,4 @@
-FROM node:24.18.0-slim
+FROM node:24.21.0-slim
 
 ARG BUILD_DATE
 ARG APP_VERSION

package/charts/keycloak-reporter/Chart.yaml

@@ -15,14 +15,14 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.4.14
+version: 1.4.16
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
 # renovate: datasource=docker depName=continuoussecuritytooling/keycloak-reporting-cli
-appVersion: 1.3.2
+appVersion: 1.3.4
 maintainers:
   # Martin Reinhardt
   - name: hypery2k

package/charts/keycloak-reporter/README.md

@@ -1,6 +1,6 @@
 # keycloak-reporter
 
-![Version: 1.4.14](https://img.shields.io/badge/Version-1.4.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.3.2](https://img.shields.io/badge/AppVersion-1.3.2-informational?style=flat-square)
+![Version: 1.4.16](https://img.shields.io/badge/Version-1.4.16-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.3.4](https://img.shields.io/badge/AppVersion-1.3.4-informational?style=flat-square)
 
 Keycloak user and client reporting tool for automated regular access checks.
 

package/cliff.toml

@@ -0,0 +1,48 @@
+[changelog]
+header = ""
+body = """
+{% if version %}\
+## [{{ version | trim_start_matches(pat="v") }}](https://github.com/ContinuousSecurityTooling/keycloak-auditor/compare/{{ previous.version }}...{{ version }}) ({{ timestamp | date(format="%Y-%m-%d") }})
+{% else %}\
+## [Unreleased]
+{% endif %}\
+
+{% for group, commits in commits | group_by(attribute="group") %}
+### {{ group }}
+
+{% for commit in commits %}\
+* {% if commit.scope %}**{{ commit.scope }}:** {% endif %}{{ commit.message | upper_first }} \
+([{{ commit.id | truncate(length=7, end="") }}](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/{{ commit.id }}))\
+{% if commit.breaking %} **BREAKING CHANGE**{% endif %}
+
+{% endfor %}
+{% endfor %}\n
+"""
+trim = true
+footer = ""
+
+[git]
+conventional_commits = true
+filter_unconventional = true
+split_commits = false
+tag_pattern = "v[0-9].*"
+skip_tags = ""
+ignore_tags = ""
+sort_commits = "oldest"
+
+commit_parsers = [
+    { message = "^feat", group = "Features" },
+    { message = "^fix", group = "Bug Fixes" },
+    { message = "^perf", group = "Performance" },
+    { message = "^refactor", group = "Refactoring" },
+    { message = "^doc|^docs", group = "Documentation" },
+    { message = "^test", group = "Testing" },
+    { message = "^chore\\(deps\\)", group = "Dependency Updates" },
+    { message = "^chore", skip = true },
+    { message = "^ci", skip = true },
+    { message = "^style", skip = true },
+    { body = ".*security", group = "Security" },
+]
+
+protect_breaking_commits = false
+filter_commits = true

package/continuoussecuritytooling-keycloak-reporting-cli-latest_digest.txt

@@ -1 +1 @@
-sha256:dd2638f00386cc1c98a5a7fda68665e05149a14485b3f21e13a9aade11fda4d8
+sha256:939d10b6976a3ea4777811fdf733fd876092c546e4f1810a0fb2cadd220bbf0f

package/git-cliff/CHANGELOG.md

@@ -0,0 +1,109 @@
+
+## [1.3.4](https://github.com/ContinuousSecurityTooling/keycloak-auditor/compare/v1.3.3...v1.3.4) (2026-10-04)
+
+### Dependency Updates
+
+* **deps:** Update dependency @json2csv/node to v7.0.8 ([14d39a2](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/14d39a2616d1821c10b7d936979fed2144525021))
+
+* **deps:** Update dependency eslint to v10.8.1 ([f18ce7d](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/f18ce7d7dc29bedb47dea4fe89a252d5b42c47b4))
+
+* **deps:** Update typescript-eslint monorepo to v8.67.0 ([cb358eb](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/cb358ebbdf28c904d2af13ee0261f338eccc4020))
+
+* **deps:** Update dependency openid-client to v6.8.5 ([0b5e276](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/0b5e2762d6e6645fea7b3a8039939e5497ba1e6b))
+
+* **deps:** Update dependency globals to v17.10.0 ([17f6e98](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/17f6e98180a8ac7258391fbbd4f42ac04b3fdff8))
+
+* **deps:** Update dependency helm to v4.2.4 ([84811a1](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/84811a1d824ef76c218447591d4455075335126c))
+
+* **deps:** Update dependency globals to v17.11.0 ([8760593](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/8760593e5f9f66bed46428532390f98b535b4ef0))
+
+* **deps:** Update dependency openid-client to v6.8.6 ([0516a6a](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/0516a6ad3c6a5f17052df6b672319a2b2c9a56d5))
+
+* **deps:** Update dependency @continuoussecuritytooling/keycloak-auditor to v2.2.9 ([bef7035](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/bef7035d987ffc67feaf36071987aabb144ca799))
+
+* **deps:** Update dependency openid-client to v6.8.7 ([fa1b9cf](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/fa1b9cf5e752bf6111eff66397f5e5c8ea284db9))
+
+* **deps:** Update dependency eslint to v10.9.1 ([e500e99](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/e500e9999799811d4ceb36a37f7befd7683bddcc))
+
+* **deps:** Update typescript-eslint monorepo to v8.68.0 ([27582a1](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/27582a1d075c1667f82b63a964fd8f8b5ff5a42e))
+
+* **deps:** Update actions/setup-java action to v6 ([7741590](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/774159000d0549747215cf9075d52b4b81e24e3c))
+
+* **deps:** Update dependency @slack/webhook to v8.0.1 ([e45d433](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/e45d433c6fe33ac229bbab9b25344e24ab24bd00))
+
+* **deps:** Update node.js to v24.20.0 ([7b09209](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/7b09209d8b2df90ea765c6c4d109f32dc1ca9fb0))
+
+* **deps:** Update dependency @slack/webhook to v8.0.2 ([41f802e](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/41f802e511e01352bcf8903252d9c8cb0090fe51))
+
+* **deps:** Update dependency @continuoussecuritytooling/keycloak-auditor to v2.3.0 ([8651a34](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/8651a34a04619a3c03334106b243114bc2d59e23))
+
+* **deps:** Update dependency jest to v30.5.0 ([fbd137d](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/fbd137db0c42a981a7e245ee1e32e72452902b2c))
+
+* **deps:** Update dependency @keycloak/keycloak-admin-client to v26.7.3 ([c6cc13f](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/c6cc13f8a97c01bcc1851206d3915efecb946336))
+
+* **deps:** Update typescript-eslint monorepo to v8.69.0 ([59e9bb5](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/59e9bb509111025b57f9e4a1e6a56ae27ebbcf43))
+
+* **deps:** Update dependency jest to v30.5.1 ([a4aeba0](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/a4aeba03e5409d8fb32d49c56e77aff88875ba1e))
+
+* **deps:** Update dependency @eslint/eslintrc to v3.3.7 ([4a80ef5](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/4a80ef5e5073de24f393dddb096d2e24b59cc29f))
+
+* **deps:** Update dependency globals to v17.12.0 ([d2fab74](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/d2fab748f0a9a02fc60c45fc433b7eece41f596f))
+
+* **deps:** Update helm/kind-action action to v1.15.0 ([0815186](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/0815186c226b2da211e15ff07dbdf3b816222f3b))
+
+* **deps:** Update dependency eslint to v10.10.0 ([331bd09](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/331bd09f1cf9b2710de0a6869e51d0f6bda516a4))
+
+* **deps:** Update dependency openid-client to v6.8.8 ([bd607df](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/bd607df3917b5e089c4d5ccb2c1c68c40c452298))
+
+* **deps:** Update typescript-eslint monorepo to v8.70.0 ([90c59f7](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/90c59f78ff5caacc6603ef6956ce8b89e8412728))
+
+* **deps:** Update dependency @types/node to v24.13.4 ([ece26ae](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/ece26ae5c62afdc65028cd813d3f66b9fecd9c7f))
+
+* **deps:** Update node.js to v24.21.0 ([b373a30](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/b373a301c340d8f6509046c1d58c625faa0ea1a4))
+
+* **deps:** Update dependency helm to v4.3.0 ([97ca2cb](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/97ca2cba17c5187c440ca3ac14de09a6e317ea5b))
+
+* **deps:** Update dependency java-jdk to v17.0.20+101 ([0a1c851](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/0a1c851e580efacd605bf40f93d272bdd5cada4f))
+
+* **deps:** Update dependency @types/node to v24.13.5 ([33a9704](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/33a9704aaaa8373f22d4917f6553b359fcde8d8f))
+
+* **deps:** Update dependency java-jdk to v21.0.12+101.0.lts ([562121d](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/562121d5ed2cc80a845e4d8ef6f8d020e753cd8c))
+
+* **deps:** Update dependency java-jdk to v25 ([8a06c43](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/8a06c4365f070757b932508cc16a7a286ea4c636))
+
+* **deps:** Update dependency @keycloak/keycloak-admin-client to v26.7.4 ([0c65ad9](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/0c65ad9176e83280cf2e7dd4cb6466eefe372d93))
+
+* **deps:** Update dependency eslint to v10.11.0 ([e8eadfb](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/e8eadfb89b3acd325382cd9146d4fd2a99b1e44b))
+
+* **deps:** Update dependency jest to v30.5.2 ([87d49dc](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/87d49dccc02b36c418e80744946367bdfcde9779))
+
+* **deps:** Update dependency @types/node to v24.13.6 ([60b879d](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/60b879d8e577b44d12b4f721c1e1acaab051904f))
+
+* **deps:** Update dependency yargs to v18.2.0 ([fe3f753](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/fe3f7535a415af13a9cafdb32e40191555dd22a6))
+
+* **deps:** Update typescript-eslint monorepo to v8.70.1 ([49237e7](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/49237e779d1d6d660dc10088c8982c6634f90610))
+
+* **deps:** Update dependency ts-jest to v29.4.13 ([18d93c0](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/18d93c017a5e92dbb5f11c5358f3950a08bd044b))
+
+* **deps:** Update dependency @continuoussecuritytooling/keycloak-auditor to v2.4.0 ([d73dab2](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/d73dab2d1511d607f14693f327b446deaf668ab3))
+
+* **deps:** Update dependency ts-jest to v29.4.14 ([17c7590](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/17c75904890dec69b238845827fa0822987cad4f))
+
+* **deps:** Update dependency @types/node to v24.19.0 ([3279d47](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/3279d478c551ff8a41614d40776f6b197557493e))
+
+* **deps:** Update typescript-eslint monorepo to v8.71.0 ([b94666c](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/b94666c60bf85f97ab3bc7840f76bbbdbc148044))
+
+* **deps:** Update dependency @keycloak/keycloak-admin-client to v26.7.5 ([7fa29b6](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/7fa29b62c881998a6801b953acd876ac4ea37da3))
+
+* **deps:** Update dependency globals to v17.13.0 ([5576380](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/5576380ae2ce1920d6f096e9bb1f1ca2a7624ad8))
+
+* **deps:** Update dependency @keycloak/keycloak-admin-client to v26.8.0 ([f42cf4e](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/f42cf4e16b1ccca448d8fa871963089f1df2e7a2))
+
+* **deps:** Update dependency @types/node to v24.19.1 ([0ef0b4d](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/0ef0b4d8ae375d4e0b27f1323bd246d8ef20e5a5))
+
+* **deps:** Update dependency eslint to v10.12.0 ([11393fa](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/11393faa74050ef8f6868ae08440b01bac6d372e))
+
+* **deps:** Update dependency @continuoussecuritytooling/keycloak-auditor to v2.4.3 ([7cb94c9](https://github.com/ContinuousSecurityTooling/keycloak-auditor/commit/7cb94c9b4fafdd59ac06bb2648d62afe86664479))
+
+
+

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@continuoussecuritytooling/keycloak-reporter",
-  "version": "1.3.2",
+  "version": "1.3.4",
   "description": "Reporting Tools for Keycloak",
   "main": "dist/index.js",
   "bin": {