chore(docs): update of OEL changelog

[ory-bot]

Update OEL changelog

Summary by CodeRabbit

• New Features

  • Kratos: Bulk session management endpoint with disable and delete operations
  • Oathkeeper: Enhanced logging with matched access rule IDs and OpenTelemetry trace context

• Bug Fixes

  • All products: Security patches for vulnerable dependencies
  • Kratos: Improved credential import validation and password hash enforcement; schema loading hardening to prevent denial-of-service
  • OAuth2: Removed spurious error logs during authorization flows

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 83256205-f7b7-412f-b5bc-612b9fc6bea3

📥 Commits

Reviewing files that changed from the base of the PR and between 0854cf7 and 21b572f.

📒 Files selected for processing (10)

• docs/self-hosted/oel/keto/changelog/v26.2.10.md
• docs/self-hosted/oel/keto/changelog/v26.2.9.md
• docs/self-hosted/oel/kratos/changelog/v26.2.10.md
• docs/self-hosted/oel/kratos/changelog/v26.2.9.md
• docs/self-hosted/oel/oathkeeper/changelog/v26.2.10.md
• docs/self-hosted/oel/oathkeeper/changelog/v26.2.9.md
• docs/self-hosted/oel/oauth2/changelog/v26.2.10.md
• docs/self-hosted/oel/oauth2/changelog/v26.2.9.md
• docs/self-hosted/oel/polis/changelog/v26.2.10.md
• docs/self-hosted/oel/polis/changelog/v26.2.9.md

✅ Files skipped from review due to trivial changes (5)

• docs/self-hosted/oel/keto/changelog/v26.2.10.md
• docs/self-hosted/oel/oauth2/changelog/v26.2.10.md
• docs/self-hosted/oel/oathkeeper/changelog/v26.2.10.md
• docs/self-hosted/oel/polis/changelog/v26.2.10.md
• docs/self-hosted/oel/kratos/changelog/v26.2.10.md

---

📝 Walkthrough

Walkthrough

Changelog docs updated across multiple self-hosted products: v26.2.9 adds dependency-security patch entries for Keto, Oathkeeper, OAuth2, Polis, and Kratos (Kratos also documents schema-loading hardening); several v26.2.10 changelog files were added/updated with small release notes or placeholders.

Changes

Version 26.2.9 and 26.2.10 Release Documentation

Layer / File(s)	Summary
Kratos: Schema hardening docs/self-hosted/oel/kratos/changelog/v26.2.9.md (lines 1-27)	Describes identity-schema loading hardening: pre-parse structural limits (1 MiB size, 32 nesting, 1024 keys/object, 128 array elements, 8192 nodes), rejection of $ref resolving to document root, early invalid-regex detection, and SSRF-guarded HTTP client when fetching schemas outside request context.
Kratos: Dependency notes docs/self-hosted/oel/kratos/changelog/v26.2.9.md (lines 28-42)	Adds a “Patch security vulnerabilities in dependencies” section listing bumped/patched Go and Node dependency versions.
v26.2.9: Keto, Oathkeeper, OAuth2, Polis docs/self-hosted/oel/keto/changelog/v26.2.9.md, docs/self-hosted/oel/oathkeeper/changelog/v26.2.9.md, docs/self-hosted/oel/oauth2/changelog/v26.2.9.md, docs/self-hosted/oel/polis/changelog/v26.2.9.md	New v26.2.9 entries documenting dependency-security patch releases and enumerating bumped versions (e.g., github.com/jackc/pgx/v5 → v5.9.2, github.com/moby/spdystream → v0.5.1, go.opentelemetry.io/otel → v1.41.0, and several npm package updates).
v26.2.10: placeholders & minor notes docs/self-hosted/oel/keto/changelog/v26.2.10.md, docs/self-hosted/oel/kratos/changelog/v26.2.10.md, docs/self-hosted/oel/oathkeeper/changelog/v26.2.10.md, docs/self-hosted/oel/oauth2/changelog/v26.2.10.md, docs/self-hosted/oel/polis/changelog/v26.2.10.md	Keto and Polis: placeholder lines reporting no entries; Kratos: admin API bulk session, identity-import, and password-hash import notes; Oathkeeper: logging includes rule_id and OpenTelemetry ids; OAuth2: remove spurious aborted-authorization log messages.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

Suggested reviewers

• vinckr
• aeneasr
• unatasha8
• adamwalach

Poem

🐰 Changelogs hop in a tidy line,
Patches tucked in, dependencies fine;
Kratos guards schemas with limits tight,
Small notes and placeholders set things right.
v26.2.x — a well-organized sign.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The PR description 'Update OEL changelog' is extremely minimal and does not follow the required template structure, missing all key sections like motivation, related issues, checklist items, and breaking changes documentation.	Expand the description to follow the template: explain what changelog entries were added/updated, reference any related issues, complete the checklist, and note if this addresses security items or breaking changes.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'chore(docs): update of OEL changelog' clearly describes the main change: updating documentation for the OEL changelog across multiple product versions.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch oel-changelog-update

Tip

💬 Introducing Slack Agent: The best way for teams to turn conversations into code.

Slack Agent is built on CodeRabbit's deep understanding of your code, so your team can collaborate across the entire SDLC without losing context.

• Generate code and open pull requests
• Plan features and break down work
• Investigate incidents and troubleshoot customer tickets together
• Automate recurring tasks and respond to alerts with triggers
• Summarize progress and report instantly

Built for teams:

• Shared memory across your entire org—no repeating context
• Per-thread sandboxes to safely plan and execute work
• Governance built-in—scoped access, auditability, and budget controls

One agent for your entire SDLC. Right inside Slack.

👉 Get started

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}