Skip to main content

TideCloak 0.14.11

Summary​

TideCloak 0.14.11 is a cumulative maintenance release over 0.14.2 on the same Keycloak 26.7.0 base. It delivers one small UX feature (a scoped "Tide Account Linked" success confirmation), an SDK modernization pass that unblocks TypeScript 7 / node16 consumers, a build and release-automation overhaul, and security hardening across npm audit findings. No breaking changes, no schema migration.

Key Features​

"Tide Account Linked" Success Message : Account-linking now shows a scoped success confirmation instead of a generic message, and freshly-scaffolded apps get a matching "Tide Account Linked Successfully" redirect page. Spans tidecloak-override (AuthenticationManager + i18n), tidecloak-idp-extensions (LinkTideAccount session tag), and @tidecloak/create-nextjs.

SDK Modernization : @tidecloak/js, react, nextjs, and verify now build under TypeScript 7 / node16 module resolution, with proper CJS + ESM type outputs. This unblocks consumers that previously couldn't build against them. Existing consumers are unaffected.

Scaffolder Improvements (@tidecloak/create-nextjs) : Native iga-core tcinit, realm.json aligned to the IdP frontend template (drops tide-roles-mapper), "Cybersecurity Fabric" branding, and scaffolded apps now run on the app-URL's port.

Deploy Pipeline Overhaul : Release and deploy is now largely non-interactive — CI-driven, Slack-reporting. Ships a fixed staging liveness probe (tcpSocket 9000, 60s) so a redeploy no longer reintroduces the earlier crash loop.

Security Hardening (npm audit) : High-severity transitive dependency findings cleared in the ORK Enclave, the Ragnarök client, and the create-nextjs / nextjs templates. Recommended to take this release for the dependency fixes.

Enclave SRI : sha256-pEd1bz2ssjf3VFqKRVheEWuzkpIuiwkOgW7b6Pk29Tc=

Upgrade Notes (0.14.2 → 0.14.11)​

  • No breaking changes. Same Keycloak 26.7.0 base — no DB or schema migration, no new provider jars, no SPI or provider-id renames. A rebuild just ships updated keycloak-services and keycloak-tide jars at the same coordinates.
  • Scaffolder change is new-apps-only. The create-nextjs realm.json and tcinit changes affect newly generated apps, not existing installs.

Detailed changelog​

For a granular per-repository breakdown of changes, see the detailed changelog.