Skip to main content

TideCloak 0.14.41

Summary​

TideCloak 0.14.41 is a maintenance release. The Keycloak server runtime is functionally identical to 0.14.40 — no changes to core, services, model, quarkus, or server-spi. Changes focus on ORK, the SDK popup-UX, build-dependency security in the themes toolchain, and release/CI tooling improvements.

Key Features​

Default Contract for Relationship Attestations (ORK) : ORK now ships a default Forseti contract for relationship attestations, so flows that previously required an explicit contract can proceed with a built-in default.

Popup-Blocked Overlay (tidecloak-js) : When the browser has popups disabled, the SDK now surfaces an overlay explaining the setting instead of silently failing the approval flow.

Themes Build-Dependency Hardening : Upgraded Vite to 7 and pinned patched build dependencies to clear source-scan CVEs in the theme toolchain.

Release Tooling Improvements : Release tagging fixed in MergeRelease. PromoteRelease now waits longer for packages to appear on npmjs before promoting. The Keygen CI image now builds on .NET 10. pnpm points at the stage registry too — pnpm 11 ignores npm_config_*, which previously caused the admin UI to resolve a just-packed @tidecloak/js on npmjs where it didn't yet exist. The E2E report now shows the error message for failed tests instead of just pass/fail.

Test / CI Stack Updates : Account-recovery email is now sent from the CI stack (ORK recovery SMTP wired into the test stack). Deploys wait until every ORK can resolve the payer before proceeding, reducing flaky bring-ups. Local and test stacks adapted to newer PostgreSQL and Stripe CLI servers. Added STRIPE_PK and STRIPE_FREE_LEGACY_PRODUCT_IDS configuration variables for test environments.

Enclave SRI : sha256-pB1UXZ4d4mqzFeOPH7F4Cli1nf0Cxd0cp2btbLTAwc0=

Upgrade Notes​

  • Drop-in from 0.14.40 — no server configuration or data migration required; the Keycloak server runtime is unchanged.
  • If you build the themes yourself — note the Vite 7 and build-dependency bump.
  • New CI/test config vars — STRIPE_PK and STRIPE_FREE_LEGACY_PRODUCT_IDS are available for CI and test environments; not required for production unless you're mirroring the test configuration.

Detailed changelog​

For a granular per-repository breakdown of changes, see the detailed changelog.