Merge branch 'main' into chore/hadoop-patch-bumps-25.11

Author: adwk67

.github/ISSUE_TEMPLATE/update-product-zookeeper.md

@@ -28,9 +28,11 @@ Add/Change/Remove anything that isn't applicable anymore
 ## Update tasks
 
 - [ ] Update `boil-config.toml` to reflect the agreed upon versions in the spreadsheet (including the removal of old versions).
-- [ ] Upload new version (see `zookeeper/upload_new_zookeeper_version.sh`).
 - [ ] Update `boil-config.toml` to the latest supported version of JVM (base and devel).
 - [ ] Update other dependencies if applicable (eg: jmx_exporter, etc).
+- [ ] Initialize new product versions with patchable and add patches if applicable.
+- [ ] Delete old patch directories.
+- [ ] Check the corresponding operator (getting_started / kuttl / supported-versions) for usage of the versions.
 - [ ] Check other operators (getting_started / kuttl / supported-versions) for usage of the versions. Add the PR(s) to the list below.
 - [ ] Update the version in demos. Add the PR(s) to the list below.
 

.scripts/upload_new_keycloak_version.sh

@@ -0,0 +1,45 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+VERSION=${1:?"Missing version number argument (arg 1)"}
+NEXUS_USER=${2:?"Missing Nexus username argument (arg 2)"}
+
+read -r -s -p "Nexus Password: " NEXUS_PASSWORD
+echo ""
+
+# https://stackoverflow.com/questions/4632028/how-to-create-a-temporary-directory
+# Find the directory name of the script
+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+
+# the temp directory used, within $DIR
+WORK_DIR=$(mktemp -d -p "$DIR")
+
+# check if tmp dir was created
+if [[ ! "$WORK_DIR" || ! -d "$WORK_DIR" ]]; then
+  echo "Could not create temp dir"
+  exit 1
+fi
+
+# deletes the temp directory
+function cleanup {
+  rm -rf "$WORK_DIR"
+}
+
+# register the cleanup function to be called on the EXIT signal
+trap cleanup EXIT
+
+cd "$WORK_DIR" || exit
+
+file=keycloak-$VERSION.tar.gz
+
+echo "Downloading $file from github.com"
+curl --fail -LO --progress-bar "https://github.com/keycloak/keycloak/releases/download/$VERSION/$file"
+
+echo "Uploading $file to Nexus"
+curl --fail -o /dev/null --progress-bar -u "$NEXUS_USER:$NEXUS_PASSWORD" \
+    --upload-file "$file" \
+    'https://repo.stackable.tech/repository/packages/keycloak/'
+
+echo "Successfully uploaded new version $VERSION to Nexus"
+echo "https://repo.stackable.tech/service/rest/repository/browse/packages/keycloak/"

CHANGELOG.md

@@ -24,6 +24,8 @@ All notable changes to this project will be documented in this file.
 - spark: Add `4.0.1` ([#1286]).
 - spark-connect-client: Add `4.0.1` ([#1286]).
 - trino/trino-storage-connector: Add `477` ([#1285]).
+- testing-tools: Add `upload_new_keycloak_version.sh` script ([#1289]).
+- zookeeper: Add `3.9.4` ([#1292]).
 
 ### Changed
 
@@ -34,10 +36,9 @@ All notable changes to this project will be documented in this file.
 - stackable-devel: Bump ubi9 base image and update cargo-auditable to `0.7.0` ([#1253]).
 - vector: Bump to `0.49.0` ([#1258]).
 - airflow: Bump uvicorn dependency to `0.37.0` ([#1264]).
-- druid: Deprecate `33.0.0` ([#1263]).
-- opa: Deprecate `1.4.2` ([#1279]).
 - trino-cli: Bump to 477 ([#1285]).
 - tools: Bump dependency versions - kubectl to `1.34.1`, yq to `4.47.2`, and jq to `1.8.1` ([#1290]).
+- testing-tools: Update keycloak dependency to `26.3.5` and `python:3.12-slim-bullseye` base image ([#1289]).
 
 ### Removed
 
@@ -76,7 +77,9 @@ All notable changes to this project will be documented in this file.
 [#1284]: https://github.com/stackabletech/docker-images/pull/1284
 [#1285]: https://github.com/stackabletech/docker-images/pull/1285
 [#1286]: https://github.com/stackabletech/docker-images/pull/1286
+[#1289]: https://github.com/stackabletech/docker-images/pull/1289
 [#1290]: https://github.com/stackabletech/docker-images/pull/1290
+[#1292]: https://github.com/stackabletech/docker-images/pull/1292
 
 ## [25.7.0] - 2025-07-23
 

testing-tools/Dockerfile

@@ -5,7 +5,7 @@
 # https://hub.docker.com/_/python/tags
 # In Docker Hub, open up the tag and look for Index Digest. Otherwise do:
 # docker pull python:3.12-slim-bullseye and see the digest that appears in the output.
-FROM python:3.12-slim-bullseye@sha256:f6d639b794b394cbeb7a9327d5af9976f0e8d61353bcf41916984775c9bbed1a
+FROM python:3.12-slim-bullseye@sha256:411fa4dcfdce7e7a3057c45662beba9dcd4fa36b2e50a2bfcd6c9333e59bf0db
 
 ARG PRODUCT_VERSION
 ARG RELEASE_VERSION

testing-tools/README.md

@@ -1,4 +1,4 @@
 # Stackable testing tools image
 
-* Based on debian/python 3.11 unlike `tools` which is based on UBI9 with python 3.9.
+* Based on debian/python 3.12 unlike `tools` which is based on UBI9 with python 3.9.
 * Comes with Python packages needed by the kuttl tests.

testing-tools/boil-config.toml

@@ -1,2 +1,2 @@
 [versions."0.2.0".build-arguments]
-keycloak-version = "23.0.0"
+keycloak-version = "26.3.5"

zookeeper/boil-config.toml

@@ -3,4 +3,11 @@ java-base = "17"
 java-devel = "11"
 
 [versions."3.9.3".build-arguments]
-jmx-exporter-version = "1.3.0"
+jmx-exporter-version = "1.4.0"
+
+[versions."3.9.4".local-images]
+java-base = "17"
+java-devel = "11"
+
+[versions."3.9.4".build-arguments]
+jmx-exporter-version = "1.4.0"

zookeeper/stackable/patches/3.9.4/0001-Add-CycloneDX-plugin.patch

@@ -0,0 +1,34 @@
+From 24644dd2f8463f972965d14021a7b071d8feaf81 Mon Sep 17 00:00:00 2001
+From: xeniape <xenia.fischer@stackable.tech>
+Date: Tue, 30 Sep 2025 15:24:05 +0200
+Subject: Add CycloneDX plugin
+
+---
+ pom.xml | 7 ++++++-
+ 1 file changed, 6 insertions(+), 1 deletion(-)
+
+diff --git a/pom.xml b/pom.xml
+index 860ffb97..5355571a 100644
+--- a/pom.xml
++++ b/pom.xml
+@@ -925,7 +925,7 @@
+         <plugin>
+           <groupId>org.cyclonedx</groupId>
+           <artifactId>cyclonedx-maven-plugin</artifactId>
+-          <version>2.7.9</version>
++          <version>2.8.0</version>
+        </plugin>
+       </plugins>
+     </pluginManagement>
+@@ -1200,6 +1200,11 @@
+       <plugin>
+         <groupId>org.cyclonedx</groupId>
+         <artifactId>cyclonedx-maven-plugin</artifactId>
++        <configuration>
++            <projectType>application</projectType>
++            <schemaVersion>1.5</schemaVersion>
++            <skipNotDeployed>false</skipNotDeployed>
++        </configuration>
+         <executions>
+           <execution>
+             <goals>

zookeeper/stackable/patches/3.9.4/patchable.toml

@@ -0,0 +1,2 @@
+mirror = "https://github.com/stackabletech/zookeeper.git"
+base = "7246445ec281f3dbf53dc54e970c914f39713903"