v0.16.0

What's Changed

• New Auditor: PasswordPolicyMissing by @NilsBergmann in #186
• Enable integration tests by @twwd in #10
• Bump pytest from 9.0.0 to 9.0.2 by @dependabot[bot] in #179, #184
• Bump testcontainers from 4.13.2 to 4.13.3 by @dependabot[bot] in #180
• Bump ruff from 0.14.4 to 0.14.7 by @dependabot[bot] in #178, #181 #183
• Bump pre-commit from 4.4.0 to 4.5.0 by @dependabot[bot] in #182

New Contributors

• @NilsBergmann made their first contribution in #186 - Thank you 🥳

Full Changelog: v0.15.1...v0.16.0

v0.15.1

What's Changed

• New auditors: AccessTokenLifespanTooLong and ClientAccessTokenLifespanTooLong by @twwd in #152
• Add advanced usage documentation on plugins and continuous exectution by @twwd in #151
• Fix false positives on user profiles feature in Keycloak 26+ by @malexmave in #173
• Allow storing the txt format table into the specified output file by @twwd in #174

Version bumps

• Bump ruff from 0.12.9 to 0.12.10 by @dependabot[bot] in #150
• Bump python-keycloak from 5.7.0 to 5.8.1 by @dependabot[bot] in #149
• Bump ruff from 0.12.10 to 0.12.12 by @dependabot[bot] in #156
• Bump pytest from 8.4.1 to 8.4.2 by @dependabot[bot] in #157
• Bump ruff from 0.12.12 to 0.13.0 by @dependabot[bot] in #159
• Bump testcontainers from 4.12.0 to 4.13.0 by @dependabot[bot] in #158
• Bump ruff from 0.13.0 to 0.13.1 by @dependabot[bot] in #160
• Bump pyyaml from 6.0.2 to 6.0.3 by @dependabot[bot] in #162
• Bump rich from 14.1.0 to 14.2.0 by @dependabot[bot] in #168
• Bump ruff from 0.13.1 to 0.14.0 by @dependabot[bot] in #167
• Bump testcontainers from 4.13.0 to 4.13.2 by @dependabot[bot] in #166
• Bump ruff from 0.14.0 to 0.14.1 by @dependabot[bot] in #169
• Bump ruff from 0.14.1 to 0.14.2 by @dependabot[bot] in #170
• Bump ruff from 0.14.2 to 0.14.3 by @dependabot[bot] in #171

Full Changelog: v0.15.0...v0.15.1

v0.15.0

What's Changed

• Consider the default behavior of Keycloak that refresh tokens are… by @twwd in #142
• New auditor: ClientMustNotUseGlobalWildcardURI by @twwd in #147
• Optionally return Non-Zero exit code on findings by @malexmave in #148
• Consider the new attributes that indicate whether users can edit their attributes by @twwd in #146
• Several dependency updates

Full Changelog: v0.14.0...v0.15.0

v0.14.0

What's Changed

• New Auditor: Small hashing iterations by @malexmave in #102
• use links to official rfc9700 instead of draft version by @dasniko in #117
• Display rich table for better readability by @dennis-spiegel in #120
• Bump python-keycloak from 5.5.0 to 5.5.1 by @dependabot[bot] in #107
• Bump requests from 2.32.3 to 2.32.4 by @dependabot[bot] in #113

New Contributors

• @dasniko made their first contribution in #117
• @dennis-spiegel made their first contribution in #120

Full Changelog: v0.13.2...v0.14.0

v0.13.2

What's Changed

• Bump ruff from 0.11.5 to 0.11.9 by @dependabot in #93 #95 #96 #98
• Bump h11 from 0.14.0 to 0.16.0 by @dependabot in #94
• Improve robustness of the import and refactor by @twwd in #97
• Permit unencrypted connections to local redirect URIs with a port and… by @twwd in #100

Full Changelog: v0.13.1...v0.13.2

v0.13.1

What's Changed

• #23: Add auditor to check whether the brute-force protection is disabled by @twwd in #92

Full Changelog: v0.13.0...v0.13.1

v0.13.0

What's Changed

• Optimize file argument handling by @twwd
• Bump testcontainers from 4.9.0 to 4.9.1 by @dependabot in #76
• Bump python-keycloak from 5.1.1 to 5.1.2 by @dependabot in #78
• Bump ruff from 0.9.2 to 0.9.3 by @dependabot in #77
• Bump ruff from 0.9.3 to 0.9.4 by @dependabot in #79
• Bump python-keycloak from 5.1.2 to 5.3.1 by @dependabot in #80
• Bump ruff from 0.9.4 to 0.9.6 by @dependabot in #81
• Bump ruff from 0.9.6 to 0.9.7 by @dependabot in #82
• Bump ruff from 0.9.7 to 0.9.9 by @dependabot in #84
• Bump pytest from 8.3.4 to 8.3.5 by @dependabot in #85
• Bump ruff from 0.9.10 to 0.11.0 by @dependabot in #86
• Bump ruff from 0.11.0 to 0.11.2 by @dependabot in #87
• Bump ruff from 0.11.2 to 0.11.4 by @dependabot in #88
• Bump testcontainers from 4.9.2 to 4.10.0 by @dependabot in #89
• Bump ruff from 0.11.4 to 0.11.5 by @dependabot in #90
• Bump python-keycloak from 5.3.1 to 5.5.0 by @dependabot in #91

Full Changelog: v0.12.1...v0.13.0

v0.12.1

What's Changed

• Use Python 3.13 for all build jobs by @twwd in #75

Full Changelog: v0.12.0...v0.12.1

v0.12.0

What's Changed

Features

• Added Client credential authentication for configuration download, by @malexmave in #65

Bug fixes

• Fix: Monitors will now also ignore disabled clients if the switch is active, by @malexmave in #64

Maintenance

• Refactoring: Auto-import auditors by @twwd in #43
• Add Python 3.13 by @twwd in #47
• Add sponsor link and logo by @twwd in #48
• Remove surplus print statement by @malexmave in #73

Dependency Updates

• Bump ruff from 0.6.8 to 0.6.9 by @dependabot in #44
• Bump python-keycloak from 4.5.0 to 4.6.2 by @dependabot in #45
• Bump testcontainers from 4.8.1 to 4.8.2 by @dependabot in #49
• Bump ruff from 0.6.9 to 0.7.0 by @dependabot in #50
• Bump python-keycloak from 4.6.2 to 4.7.0 by @dependabot in #54
• Bump ruff from 0.7.0 to 0.7.2 by @dependabot in #53
• Bump ruff from 0.7.2 to 0.7.3 by @dependabot in #56
• Bump python-keycloak from 4.7.0 to 4.7.2 by @dependabot in #58
• Bump ruff from 0.7.3 to 0.7.4 by @dependabot in #57
• Bump python-keycloak from 4.7.2 to 4.7.3 by @dependabot in #60
• Bump ruff from 0.7.4 to 0.8.2 by @dependabot in #63
• Bump pytest from 8.3.3 to 8.3.4 by @dependabot in #62
• Bump testcontainers from 4.8.2 to 4.9.0 by @dependabot in #66
• Bump ruff from 0.8.2 to 0.8.3 by @dependabot in #67
• Bump python-keycloak from 4.7.3 to 5.1.1 by @dependabot in #68
• Bump ruff from 0.8.3 to 0.8.4 by @dependabot in #69
• Bump jinja2 from 3.1.4 to 3.1.5 by @dependabot in #70
• Bump ruff from 0.8.4 to 0.8.6 by @dependabot in #71
• Bump ruff from 0.8.6 to 0.9.1 by @dependabot in #72
• Bump ruff from 0.9.1 to 0.9.2 by @dependabot in #74

Full Changelog: v0.11.0...v0.12.0

v0.11.0

New Auditor

• New Auditor: Keycloak version check by @twwd in #41

Bugfixes

• Bugfix: Add new IDP check to auditor list to activate it by @malexmave in #40

Maintenance

• Improve formatting of the docs by @twwd in #39

Full Changelog: v0.10.0...v0.11.0