Changelog for Ory Keto OEL

v25.4.3

Breaking changes

Remove the ability for Keto to watch a WebSocket URL (starting with ws://) for legacy namespaces.

This affects the configuration field namespaces, but only when using the legacy namespaces which are deprecated. Use the new Ory Permission Language instead.

To check if you are affected, run the command: keto namespace validate-legacy -c /path/to/keto.yml.

---

25.4.2

No changes requiring a changelog in the 25.4.2.

---

25.4.1

No changes requiring a changelog in the 25.4.1.

---

25.4.0

No changes requiring a changelog in the 25.4.0.

---

25.3.9

No changes requiring a changelog in the 25.3.9.

---

25.3.8

No changes requiring a changelog in the 25.3.8.

---

25.3.6

No changes requiring a changelog in the 25.3.6.

---

v25.3.5

Change of base image

The base image for OEL images is now set to "gcr.io/distroless/static-debian12:nonroot". Previously, it was "gcr.io/distroless/static-debian12:debug-nonroot", which included BusyBox (a minimal shell and basic debugging utilities). Debug images are still available using the "-debug" tag suffix.

---

25.3.4

No changes requiring a changelog in the 25.3.4.

---

v25.3.3

Improved tracing and metrics for the high-performance SQL connection pool

This change adds distributed tracing and advanced metrics for the high-performance SQL connection pool in all Ory OEL products.

---