chore(release): 1.16.0 [skip ci]

## [1.16.0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/compare/v1.15.2...v1.16.0) (2025-12-15)

### Features

* helm template test and move example-custom-secret-values.yaml to ci/ ([53df7c0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/53df7c02ddcd8d78976ee6906a642ef6f43a642d)), closes [univention/dev/internal/team-nubus#1528](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1528)
* **umc-server:** update charts for bundled memcached ([1fa102b](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/1fa102bec3b2046a20b16170deb810bb30cd5218)), closes [univention/dev/internal/team-nubus#1501](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1501)
* upgrade provisioning subcharts for NATS queue migration ([3026d11](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/3026d11c427181e1e492f7c63db626487b7aeab0)), closes [univention/dev/internal/team-nubus#1520](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1520)
* use prod Dependency-Track URLs ([3aa2476](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/3aa2476aa1397f3a5fb75084fc2ea2238c047e79)), closes [univention/dev/internal/team-nubus#1512](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1512)

### Bug Fixes

* bump guardian to include js sbom ([c61f943](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/c61f943a32601fc09fbe0563948784b565e09cc8)), closes [univention/dev/tooling/vulnerability-management#1](https://git.knut.univention.de/univention/dev/tooling/vulnerability-management/issues/1)
* bump helm charts to fix critical vulnerabilities ([6785784](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/678578420f57d2d679a34332c45163dd532521c0)), closes [univention/dev/internal/team-nubus#1540](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1540)
* bump image to errata 298 ([16dfbb3](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/16dfbb378efc102812ec33e0b46b9ed65fcbd6f5)), closes [univention/dev/internal/team-nubus#1543](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1543)
* bump images for frontend containers with JS sbom ([890675e](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/890675ef5c0f39d6c78fb12e2d25dfe3ebe6f946)), closes [univention/dev/tooling/vulnerability-management#1](https://git.knut.univention.de/univention/dev/tooling/vulnerability-management/issues/1)
* bump keycloak helm chart ([408177d](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/408177d7f5d094e936be630a827dd4a643ae62c7)), closes [univention/dev/internal/team-nubus#1374](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1374)
* bump provisioning for nats upgrade ([2f404a8](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/2f404a843e25a882bd6e91099ab6bd663fb9e9f1)), closes [univention/dev/internal/team-nubus#1539](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1539)
* bump provisioning NATS chart ([fbb9a5e](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/fbb9a5ec06ccaadeddce1a5b5b3c4b5dd1c9487c)), closes [univention/dev/internal/team-nubus#1515](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1515)
* bump wait-for-dependency and keycloak-bootstrap images ([4738d33](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/4738d33dba6d546b88b79c96ab5805876a5c6fda)), closes [univention/dev/internal/team-nubus#1476](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1476)
* ci: vul-man SBOM upload cleans tag before uploading new SBOMs for a tag ([aab720b](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/aab720b24676b29c5372807029fde6ee712568d6)), closes [univention/dev/internal/team-nubus#1529](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1529)
* **deps:** Update dependency univention/dev/nubus-for-k8s/common-ci to v1.54.0 ([de3c3ea](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/de3c3eae3f660bb0202eb6f2fcb5253a59505ebe)), closes [#0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/issues/0)
* **helm:** Support added for clientSecret value ([c56b828](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/c56b8281baef073740a2c119c919c2f6657d970b)), closes [univention/dev/internal/team-nubus#1523](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1523)
* **keycloak:** Upgrade Keycloak to version 26.4.6 ([73586ba](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/73586ba33e514f020bb0b8e1dfc0fec20bb2063f)), closes [univention/dev/projects/keycloak/keycloak-app#249](https://git.knut.univention.de/univention/dev/projects/keycloak/keycloak-app/issues/249)
* **portal-frontend:** bump version ([9e5c07f](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/9e5c07f93816115465d4bbe71638fcb5bacc640b)), closes [univention/dev/projects/portal#1485](https://git.knut.univention.de/univention/dev/projects/portal/issues/1485)
* **provisioning:** Bump provisioning and consumer chart ([9d0d22f](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/9d0d22f0873fdf94759ceb12d5219c8e671013c0)), closes [univention/dev/projects/open-xchange/connector#143](https://git.knut.univention.de/univention/dev/projects/open-xchange/connector/issues/143)
* **umc-server:** move memcached secret generation to sub-chart ([b6c6e99](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/b6c6e9927d08cba1a4957141a13294d7e8fa6774)), closes [univention/dev/internal/team-nubus#1501](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1501)
* Updated base container image tags ([6873f94](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/6873f94670964ca3fa5b9fddd43212ef042c059d)), closes [univention/dev/internal/team-nubus#1519](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1519)
* use guardian images from harbor ([e64b318](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/e64b3186dc8ca0349497c2a09d13a92f5c0f0709)), closes [univention/dev/internal/team-nubus#1466](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1466)
* use guardian images from harbor ([f85c6b7](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/f85c6b7f1a9ac1d951f3973b20ccfb073767c25f)), closes [univention/dev/internal/team-nubus#1466](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1466)

chore(release): 1.15.2 [skip ci]

## [1.15.2](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/compare/v1.15.1...v1.15.2) (2025-11-17)

### Bug Fixes

* bump keycloak ([f0afbf7](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/f0afbf7dd7f67f2a03abce1dd373070abc97dd1d)), closes [#0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/issues/0)

chore(release): 1.15.1 [skip ci]

## [1.15.1](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/compare/v1.15.0...v1.15.1) (2025-11-13)

### Bug Fixes

* bump keycloak-extensions ([078f8f3](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/078f8f395e995dab382fd6342cf26c280eea8c0d)), closes [univention/dev/internal/team-nubus#1525](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1525)
* enable keycloak-extensions for kubeconform ([29c7081](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/29c70813606bda24d9353a743947ca45fbe4431c)), closes [univention/dev/internal/team-nubus#1525](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1525)
* remove non-existent secret from keycloak-extensions smtp auth ([9e0528b](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/9e0528bf034656fa44de45be2f32c0f7fbd9f76e)), closes [univention/dev/internal/team-nubus#1525](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1525)

chore(release): 1.15.0 [skip ci]

## [1.15.0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/compare/v1.14.1...v1.15.0) (2025-11-11)

### Features

* disable saml endpoint ([77ec675](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/77ec67540c885240427649aead193c1c5d184a0c)), closes [univention/dev/internal/team-nubus#1442](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1442)
* enable natsBox for test environments ([070b01c](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/070b01c31460137daf4f3358fc3aada9aa719497)), closes [univention/dev/internal/team-nubus#1514](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1514)
* Remove empty "keyMapping" entries from "registerConsumers" ([3f59289](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/3f592899a175b54ee2d26850c331cd4bbbb4c6f2)), closes [univention/dev/internal/team-nubus#1377](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1377)
* **secrets:** allow templated keymappings ([7d06625](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/7d06625040028147ac8826d52bf007e101dba6be)), closes [univention/dev/internal/team-nubus#1441](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1441)
* upgrade charts with lint fixes ([39b12a4](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/39b12a4c53191007c0a35948710279bb8e57df3f)), closes [univention/dev/internal/team-nubus#1426](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1426)
* upgrade scim-server chart ([feaf5fb](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/feaf5fbd31f3fdcf671a399dd981aa42e9d1e736)), closes [univention/dev/internal/team-nubus#1429](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1429)

### Bug Fixes

* Adjust image repository of memcached in umc server ([501bbf2](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/501bbf259d399d40af88a4b35565ed2b4089fbd8)), closes [univention/dev/internal/team-nubus#1406](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1406)
* adjust secrets to new provisioning and NATS secret handling ([188c886](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/188c886e3df703b329d70d17ab6f0c6d3cfad0da)), closes [univention/dev/internal/team-nubus#1399](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1399)
* bump 2fa-helpdesk ([dbefd25](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/dbefd250a2be35fc8890762e2df61e4a95ac360c)), closes [univention/dev/internal/team-nubus#1427](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1427)
* bump keycloak-bootstrap ([dffb65c](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/dffb65c108aa99b987920e05e0ea645b6d2c650e)), closes [univention/dev/internal/team-nubus#1448](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1448)
* bump keycloak-bootstrap after remove pin version ([6c35f5e](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/6c35f5ec6d0d7948ef510b84e1558539b79dc885)), closes [univention/dev/internal/team-nubus#1424](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1424)
* bump provisioning ([eb709e0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/eb709e0115f7893d79975fd4e7fed474ae710240)), closes [univention/dev/internal/team-nubus#1399](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1399)
* bump subchart versions ([91b8ea2](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/91b8ea212ca32f66a8b4a0f88929b770d6257101)), closes [univention/dev/internal/team-nubus#1398](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1398)
* bump subchart versions ([7c301b2](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/7c301b293107d90fd36a9cdf224c03811f9af996)), closes [univention/dev/internal/team-nubus#1398](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1398)
* bump udm-rest-api ([f1c9c94](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/f1c9c94985defc070f155a144262f5d627d069a4)), closes [univention/dev/internal/team-nubus#1417](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1417)
* Deactivate bundled dependencies by default ([d23bfa1](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/d23bfa1fa4f15bc1377beae48672e18e1a4e5b7c)), closes [univention/dev/internal/team-nubus#1397](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1397)
* Deactivate bundled dependencies by default ([9482be5](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/9482be5389518fd21288fbaff4603ebe56fc5b1d)), closes [univention/dev/internal/team-nubus#1397](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1397)
* **deps:** update nubus subcharts ([c50cbe3](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/c50cbe3ab9822c47b12c650df8023bb7c8018ad1)), closes [univention/dev/internal/team-nubus#1486](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1486)
* Disable PostgreSQL provisioning job when using external PostgreSQL ([e3feb84](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/e3feb8427e301044157ffd55fb2607550960d059)), closes [univention/dev/internal/team-nubus#1397](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1397)
* **ldap:** Remove unused domain name ([4d51d09](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/4d51d09de164ef0d1616d0626eba67e19d09a6bc)), closes [univention/dev/internal/team-nubus#1425](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1425)
* Make memcached secret generation optional ([489266d](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/489266d324b09724e702f776737242fb15cf22b0)), closes [univention/dev/internal/team-nubus#1397](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1397)
* overwrite registry for bitnami charts in demo-values ([a38e03d](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/a38e03d89b029bde2b07bd35a032b04c6d8d7849)), closes [univention/dev/internal/team-nubus#1398](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1398)
* portal uses the new session-info features. ([7fe04e3](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/7fe04e34b1a80c0ed70a446cdcd3189f2e7ba698)), closes [univention/dev/internal/team-nubus#1419](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1419)
* **portal-frontend:** Accessible UMC modal dialogs ([a497575](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/a497575c4376e0e3e886581019fa360d1172ec29)), closes [univention/dev/internal/team-nubus#1493](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1493)
* **portal-frontend:** Bump chart version ([faca11e](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/faca11ed6cc9fe62ace281941930a4b6556cd202)), closes [univention/dev/internal/team-nubus#1443](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1443)
* Production values for external PostgreSQL and Memcached ([97af9a7](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/97af9a7326f7dc6e4fcc6f02af7b3b43ea4cd139)), closes [univention/dev/internal/team-nubus#1397](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1397)
* **provisioning:** avoid empty old object on cache miss ([9ec11dc](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/9ec11dcfdfeb188d5e7670073bbf757d35b6d0ad)), closes [univention/dev/internal/team-nubus#1502](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1502)
* rebase into nubus 1.14.1 ([526ec0c](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/526ec0c7ff4ceca35f056e34683867737b703379)), closes [univention/dev/internal/team-nubus#1464](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1464)
* remove keycloak readonly and guardian keycloak client secret from nubus secrets ([25957de](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/25957deb4b56a380809ea9fc929aeb3eaa8e08fb)), closes [univention/dev/internal/team-nubus#1398](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1398)
* **stack-data:** UMC login redirection points to OIDC ([8938ebf](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/8938ebf428a107f67a225f1f99a099eda55a3e64)), closes [univention/dev/internal/team-nubus#1435](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1435)
* test with provided secret values ([7461eaf](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/7461eaf9ae155f8af5e1057dbc2dc2aa62d2b365)), closes [univention/dev/internal/team-nubus#1394](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1394)
* update portal server charts ([5fefa03](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/5fefa0329b1b2097a96c9977ad8c8e849ddbfd10)), closes [univention/dev/projects/portal#743](https://git.knut.univention.de/univention/dev/projects/portal/issues/743)
* update portal server charts ([48f7c1c](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/48f7c1ca78e4ec189c85d405ad5dde0425c2c76e)), closes [univention/dev/projects/portal#743](https://git.knut.univention.de/univention/dev/projects/portal/issues/743)
* use correct custom secrets for e2e-tests ([579f8d3](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/579f8d300a41e3ed1276388ceff1e2de50091665)), closes [univention/dev/internal/team-nubus#1398](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1398)
* use internal OIDC issuer if available ([119cacb](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/119cacbcab7067b5f206260788f40876ca95eaaf)), closes [univention/dev/internal/team-nubus#1446](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1446)

### Reverts

* "fix: bump udm-rest-api" ([37d05c9](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/37d05c913e01284aaa6b7b4c6f473ef60268f680))

chore(release): 1.14.1 [skip ci]

## [1.14.1](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/compare/v1.14.0...v1.14.1) (2025-10-21)

### Bug Fixes

* **keycloak:** upgrade Keycloak to 26.3.5 ([c3a83ad](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/c3a83ad3abecdd1f1000205a2aa5a63e471a3d2e)), closes [univention/dev/internal/team-nubus#1464](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1464)

chore(release): 1.14.0 [skip ci]

## [1.14.0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/compare/v1.13.1...v1.14.0) (2025-09-18)

### Features

* Activate OIDC in the portal ([3568f9f](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/3568f9f9b2fd012a3051e578c1dd0c65b36008ac)), closes [univention/dev/internal/team-nubus#1435](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1435)
* **helm:** Support OIDC auth for portal <-> UDM communication ([489ac5e](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/489ac5e4f943f7a62abfbbbeb5f93b20b2ed60f5)), closes [univention/dev/internal/dev-issues/dev-incidents#138](https://git.knut.univention.de/univention/dev/internal/dev-issues/dev-incidents/issues/138)
* setup shared session storage for umc ([9bbc032](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/9bbc032f798e6799b347aa62ade3e5ac2080cc82)), closes [univention/dev/internal/team-nubus#1435](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1435)

### Bug Fixes

* **ci:** fix bitnami images ([b4ac38d](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/b4ac38da32ac656b8b8e61f82b158fc755a80b23)), closes [#0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/issues/0)
* **ci:** fix deployment with external dependencies ([5aed1ec](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/5aed1ec5ca14dcfd92c5397bcb64cf4621c838e7)), closes [univention/dev/internal/team-nubus#1435](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1435)
* **deps:** Update dependency univention/dev/nubus-for-k8s/common-ci to v1.44.6 ([24aa100](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/24aa1009acdd815ec6560b2269128166dd78ab39)), closes [#0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/issues/0)
* **e2e-tests:** Make sure DEPLOY_SUBDOMAIN is a valid domain name and does not end with a '-' ([901080d](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/901080df76dd6c56e1fb86d00592e478120d4a6b)), closes [univention/dev/internal/dev-issues/dev-incidents#138](https://git.knut.univention.de/univention/dev/internal/dev-issues/dev-incidents/issues/138)
* **keycloak-bootstrap:** remove force flag from keycloak-bootstrap ([6b0de0d](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/6b0de0d2f7e54e28bb19bfe2c0b8b70a87566831)), closes [univention/dev/internal/dev-issues/dev-incidents#158](https://git.knut.univention.de/univention/dev/internal/dev-issues/dev-incidents/issues/158)
* **portal-extension:** OIDC tile on upgrade from SAML ([2d5ffdc](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/2d5ffdce42f0882503ee76155704c524d54aedb3)), closes [univention/dev/internal/team-nubus#1435](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1435)
* **portal:** Don't show portal tiles in left sidebar ([99a2200](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/99a22002cce590a4aa14f470cc6531e840387c64)), closes [univention/dev/internal/team-nubus#1416](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1416)
* Remove the dynamic part of the UMC OIDC Keycloak client name to make it static and predictable ([5fd1fa9](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/5fd1fa95f2f69031942e78d751027b538fbdb2c6)), closes [univention/dev/internal/team-nubus#1435](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1435)
* Revert "test: temporary change of testrunner" ([af81219](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/af8121998cc761c0396d2cd8e545db0127854d06)), closes [univention/dev/internal/team-nubus#1435](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1435)

chore(release): 1.13.1 [skip ci]

## [1.13.1](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/compare/v1.13.0...v1.13.1) (2025-09-04)

### Bug Fixes

* **deps:** update nubus subcharts ([efc047b](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/efc047b079df698c76de19a3477908203e8a0b73)), closes [univention/dev/internal/team-nubus#1385](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1385)
* Downgrade keycloak-bootstrap to version 0.15.3 ([c55df86](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/c55df86a011a6cbcdb8fa1e68fe49c414c952bcb)), closes [univention/dev/internal/team-nubus#1385](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1385)
* **portal-frontend:** Prompt for login when refreshing the SAML session fails due to NoPassive ([6a8061c](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/6a8061c41bea90328ceb872b74fb998ee39c5eff)), closes [univention/dev/internal/team-nubus#1401](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1401)
* **provisioning:** Bump provisioning to integrate the nats reconnect fix ([a124963](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/a124963824990a3fe222de29dfa42ebfb6d0fd4d)), closes [univention/dev/internal/team-nubus#1383](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1383)
* Remove default for "keycloakTwofaGroup" ([80146fe](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/80146fe2cd9e915f7fd7b705e0da0d5742667278)), closes [univention/dev/internal/team-nubus#1385](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1385)
* remove unused values from stack-data template context ([e5e6ba4](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/e5e6ba4a3b7f27216c875377daa834be5eb346e8)), closes [univention/dev/internal/team-nubus#1396](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1396)
* **secrets:** Add some existing configuration options to helm default values for documentation purposes ([123a4e1](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/123a4e11dda239e4f193a87a56ebdbc5d26d6547)), closes [univention/dev/internal/team-nubus#989](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/989)
* **secrets:** Update example values and helm unittests ([3891af7](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/3891af79a899d4a9fc2eff35b0ddaedefa859eea)), closes [univention/dev/internal/team-nubus#989](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/989)
* Update provisioning to version 0.60.9 ([868793a](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/868793ae272afed9db6f78ebef1b46cdc2c1836e)), closes [univention/dev/internal/team-nubus#1385](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1385)
* Upgrade keycloak-bootstrap to version 0.16.3 ([2bd1e9a](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/2bd1e9ae9a125ad891501d9022edd7628268626e)), closes [univention/dev/internal/team-nubus#1385](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1385)

chore(release): 1.13.0 [skip ci]

## [1.13.0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/compare/v1.12.0...v1.13.0) (2025-08-27)

### Features

* **ci:** left-sidebar: enable concept of executing test for feature toggles ([72aea15](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/72aea15d2c455bfc1888d2a24de4a024cd321e8c)), closes [univention/dev/internal/team-nubus#1122](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1122)
* **portal:** integration of new sidebar (controlled by feature toggle, default: off) ([d793cbe](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/d793cbef38af8732f7478d1d073cc7200a73fd69)), closes [univention/dev/internal/team-nubus#1231](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1231)
* update charts for configurable centralnav ([8180a3f](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/8180a3fdb52b96fae82d16b58480861baba94b5d)), closes [univention/dev/internal/team-nubus#1301](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1301)
* upgrade bitnami charts ([6325ae0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/6325ae08c130278d4fa137af5d9b4a2c045f62ac)), closes [univention/dev/internal/team-nubus#1406](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1406)

### Bug Fixes

* Don't template postgres or minio secrets if the components are disabled ([bbd7c54](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/bbd7c54977b4890030f866fefaa083a59a9839e0)), closes [univention/dev/internal/team-nubus#989](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/989)
* **keycloak-bootstrap:** Update keyloak-bootstrap to fix yaml parsing bug ([f967a0a](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/f967a0a43daa0a73d5e7a2f06b87b9d6d4654c1e)), closes [univention/dev/internal/team-nubus#989](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/989)
* **keycloak:** Use the same secret for the Keycloak admin credentials everywhere ([b0a4fc6](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/b0a4fc6788199010fb16f64c56ae5c2e6cd2c8f3)), closes [univention/dev/internal/team-nubus#989](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/989)
* **nats:** bump nats chart to solve a template issue ([dbfb8cb](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/dbfb8cb7e8e9d8342f6a042e3470c6f095b9cb8e)), closes [univention/dev/internal/team-nubus#1382](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1382)
* **portal-frontend:** update version of portal 0.75.0 ([a88000f](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/a88000fd7a56c233891d7268a95c787577698b2a)), closes [univention/dev/projects/portal#741](https://git.knut.univention.de/univention/dev/projects/portal/issues/741)
* **provisioning:** atomic subscription to NATS ([b13142a](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/b13142aa684db57f2bbf1baa9f6fd5c8daa78ff4)), closes [univention/dev/internal/team-nubus#1349](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1349)
* **provisioning:** improve error handling in the provisioning api. ([4bd2217](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/4bd221766b72df0ee97d5c16aec0e9037009ac94)), closes [univention/dev/projects/provisioning#78](https://git.knut.univention.de/univention/dev/projects/provisioning/issues/78)
* Remove unused secrets ([8f877ba](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/8f877ba61b441cbe505fb89e44a24d3467cd6f3b)), closes [univention/dev/internal/team-nubus#989](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/989)
* **secrets:** Already documented custom-secret-values ([06ef5db](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/06ef5dbfe2d86ba4f79b13c8ce33075cd31c6ebe)), closes [univention/dev/internal/team-nubus#989](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/989)
* **udm-listener:** fix initialization of UDM listener ([945adb9](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/945adb90b1972a7170bab9a74a002aec571ade52)), closes [univention/dev/internal/team-nubus#1372](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1372)
* **udm-listener:** Remove unused secret from listener ([6acd1b8](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/6acd1b887f7409a8dad5faa341cc9359f6d762a0)), closes [univention/dev/internal/team-nubus#989](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/989)
* **umc-server:** Make podManagementPolicy configurable ([1e517b6](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/1e517b62fdd9ed1842a041d00fa851a24afff22b)), closes [univention/dev/internal/team-nubus#1363](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1363)

chore(release): 1.12.0 [skip ci]

## [1.12.0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/compare/v1.11.2...v1.12.0) (2025-08-01)

### Features

* **2fa:** add integration tests for the 2fa helpdesk ([dc90179](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/dc90179b788020100ed761a0c4a8e541c70508ef)), closes [univention/dev/internal/team-nubus#1218](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1218)
* add frontchannel-logout to 2fa helpdesk ([e846b1c](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/e846b1c2088765a3a362c41da934b19fc8512914)), closes [univention/dev/internal/team-nubus#1238](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1238)
* **portal-frontend:** Allow disabling "me" api endpoint loading ([83f746b](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/83f746b325ddcbaedc47b2d69847116d663648a8)), closes [univention/dev/internal/team-nubus#1358](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1358)
* **portal-frontend:** update version of portal 0.71.0 ([fa38051](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/fa3805119ef37f35a41cc1dd8186c21bf214ad87)), closes [univention/dev/projects/portal#740](https://git.knut.univention.de/univention/dev/projects/portal/issues/740)
* update ucs-base to 5.2.2-build.20250714 ([ca98e5f](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/ca98e5fdc7c77278deb4845446788d82e57d8d09)), closes [univention/dev/internal/team-nubus#1320](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1320)

### Bug Fixes

* adjust default name of the 2FA Users group ([6775299](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/6775299964aa27318038425dc597ef050fd7c3a6)), closes [univention/dev/internal/team-nubus#1347](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1347)
* bump 2fa helpdesk ([eae6944](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/eae694415365c17bb9cf45163cd43ee555234142)), closes [univention/dev/internal/team-nubus#1237](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1237)
* Bump systemExtensions to their latest versions ([34af226](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/34af226a5bd9cd01f6acb6f4ecc764f69754d63c)), closes [#0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/issues/0)
* enable 2fa helpdesk admin helpdesk by default ([a196fa9](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/a196fa9081429cfeda035d27b8ee7df331e9feaf)), closes [univention/dev/internal/team-nubus#1347](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1347)
* enable 2fa self-service in CI ([cfff20d](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/cfff20db292932e58c175602fc8860f5d3b299a0)), closes [univention/dev/internal/team-nubus#1347](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1347)
* fix maintainability issues discovered by sonarqube ([5706775](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/57067757ca8723a6648ca7c4adc39602bc780ff8)), closes [#0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/issues/0)
* **helm:** Add new provisioning prefill retry configuration parameters ([27c4915](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/27c49152860887dafa1f865745df51887ba7b676)), closes [univention/dev/internal/team-nubus#1357](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1357)
* **helm:** Add new provisioning prefill retry configuration parameters ([2cb16c8](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/2cb16c818c3251b89b4ebb6dae5254afb6b2352b)), closes [univention/dev/internal/team-nubus#1357](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1357)
* **ingress:** remove wrongly used annotation. ([420b27f](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/420b27f886daa5e7b20df583c0b48e1aa8fbf2e6)), closes [univention/dev/internal/team-nubus#1328](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1328)
* keycloak-bootstrap failing on upgrades ([9062ba9](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/9062ba9957aebb79225695a5e33589a722b6bde1)), closes [#0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/issues/0)
* **keycloak-helm:** Upgrade keycloak to 26.3.1 version. ([d362488](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/d3624880db7574b6ba93e01f73b605cf31612274)), closes [univention/dev/internal/team-nubus#1355](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1355)
* **keycloak:** Template resources in initContainers ([38a4ee8](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/38a4ee841cd6a9a3593a6fc3763da79ba4c1d428)), closes [univention/dev/internal/team-nubus#1356](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1356)
* **ldap-server:** Allow more than 8 ldap secondaries ([ec83f0c](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/ec83f0c54ae365493a72869aea38408c61794779)), closes [univention/dev/internal/team-nubus#1353](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1353)
* **portal-frontend:** Load newsfeed after user is logged in ([4788ffc](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/4788ffc36fb6603539bcbecc346f3cbb1cd65fea)), closes [univention/dev/internal/team-nubus#1359](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1359)
* **provisioning:** bump provisioning version to include the NATS upgrade ([55b3443](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/55b344300a41022bdd5f1c7242621b459c93df6a)), closes [univention/dev/internal/team-nubus#1350](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1350)
* remove leading slash from Keycloak group ([698d3c4](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/698d3c468907be322114c653d89b00bb2cd62f8a)), closes [univention/dev/internal/team-nubus#1343](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1343)
* subcharts ([c8a9c3c](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/c8a9c3ce4c2a3938df69159541568f77676d994e)), closes [univention/dev/internal/team-nubus#1320](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1320)
* **twofa-helpdesk:** Bump version ([4a02a8e](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/4a02a8e0e8e5273de0ef8cb5a2bed31f4b3ea28c)), closes [univention/dev/internal/team-nubus#1241](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1241)
* **twofa-helpdesk:** Helm chart best practices ([0b771d5](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/0b771d5ea2e13374fc14fbb22d10e2973ce4e6fe)), closes [univention/dev/internal/team-nubus#1240](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1240)
* **twofa-helpdesk:** Rename provisioning to keycloakBootstrap ([b07783f](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/b07783fa40be07bde840cf209f15944a9f53b7de)), closes [univention/dev/internal/team-nubus#1356](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1356)
* **univention-portal:** Security fixes ([4d7fb6e](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/4d7fb6e23b8108847f35b4d01006eac899dc6d83)), closes [univention/dev/internal/team-nubus#1221](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1221)
* use final version of 2fa-extensions ([6229884](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/62298844fcebb200f55aa1955bed044a92da1bf1)), closes [#0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/issues/0)

chore(release): 1.11.2 [skip ci]

## [1.11.2](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/compare/v1.11.1...v1.11.2) (2025-07-10)

### Bug Fixes

* add wait-for-nats init container to udm-listener ([ff72c41](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/ff72c41fdab34f021f8444b043bb01d127e9fafb)), closes [univention/dev/internal/dev-issues/dev-incidents#149](https://git.knut.univention.de/univention/dev/internal/dev-issues/dev-incidents/issues/149)
* **udm-listener:** retry to interact with NATS on connection erros and terminate if not possible ([c607046](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/c607046a228525a8d6819176646ed43b4fc57cd6)), closes [univention/dev/internal/dev-issues/dev-incidents#149](https://git.knut.univention.de/univention/dev/internal/dev-issues/dev-incidents/issues/149)