chore: update keycloak

.github/workflows/check-acceptance-test-code.yml

@@ -12,7 +12,7 @@ jobs:
     name: Scala dependencies and code check
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.2
       - name: Setup JDK
         uses: actions/setup-java@v4
         with:

.github/workflows/check-acceptance-test-fmt.yml

@@ -12,7 +12,7 @@ jobs:
     name: Scala formatting check
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.2
       - name: Setup JDK
         uses: actions/setup-java@v4
         with:

.github/workflows/create-release-branch.yml

@@ -16,7 +16,7 @@ jobs:
   create-release-pr:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.2
         with:
           fetch-depth: 0
           token: "${{ secrets.RENKUBOT_GITHUB_TOKEN }}"

.github/workflows/cron-jobs.yaml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: renku teardown
-        uses: SwissDataScienceCenter/renku-actions/cleanup-renku-ci-deployments@v1.17.0
+        uses: SwissDataScienceCenter/renku-actions/cleanup-renku-ci-deployments@v1.18.2
         env:
           GITLAB_TOKEN: ${{ secrets.DEV_GITLAB_TOKEN }}
           RENKUBOT_KUBECONFIG: ${{ secrets.RENKUBOT_DEV_KUBECONFIG }}

.github/workflows/publish-helm-chart.yml

@@ -9,13 +9,13 @@ jobs:
   publish-chart:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.2
         with:
           fetch-depth: 0
       - name: Set version
         id: vars
         run: echo "tag=${GITHUB_REF#refs/*/}" >> $GITHUB_OUTPUT
-      - uses: SwissDataScienceCenter/renku-actions/publish-chart@v1.17.0
+      - uses: SwissDataScienceCenter/renku-actions/publish-chart@v1.18.2
         env:
           CHART_DIR: helm-chart/
           CHART_NAME: renku

.github/workflows/publish-master-merges.yaml

@@ -14,7 +14,7 @@ jobs:
   publish-chart:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.2
         with:
           fetch-depth: 0
       - uses: azure/setup-helm@v4
@@ -35,7 +35,7 @@ jobs:
       - id: set-version
         run: |
           echo "publish_version=${{ steps.bump-semver.outputs.new_version }}.$(echo ${{ github.sha }} | cut -c 1-7)" >> $GITHUB_ENV
-      - uses: SwissDataScienceCenter/renku-actions/publish-chart@v1.17.0
+      - uses: SwissDataScienceCenter/renku-actions/publish-chart@v1.18.2
         env:
           CHART_DIR: helm-chart/
           CHART_TAG: "--tag ${{env.publish_version}}"

.github/workflows/pull-request-test.yml

@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-24.04
     if: github.event.action != 'closed'
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.2
       - uses: actions/setup-java@v4
         with:
           distribution: "temurin"
@@ -71,11 +71,11 @@ jobs:
       extra-values: ${{ steps.deploy-comment.outputs.extra-values || steps.deploy-comment-azure.outputs.extra-values }}
     steps:
       - id: deploy-comment
-        uses: SwissDataScienceCenter/renku-actions/check-pr-description@v1.18.1
+        uses: SwissDataScienceCenter/renku-actions/check-pr-description@v1.18.2
         with:
           pr_ref: ${{ github.event.number }}
       - id: deploy-comment-azure
-        uses: SwissDataScienceCenter/renku-actions/check-pr-description@v1.18.1
+        uses: SwissDataScienceCenter/renku-actions/check-pr-description@v1.18.2
         with:
           string: /AzureDeploy
           pr_ref: ${{ github.event.number }}
@@ -91,7 +91,7 @@ jobs:
       name: ci-renku-${{ github.event.number }}
       url: https://ci-renku-${{ github.event.number }}.dev.renku.ch
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.2
       - name: Find deployment url
         if: needs.check-deploy.outputs.switch-deploy == 'true'
         uses: peter-evans/find-comment@v3
@@ -111,7 +111,7 @@ jobs:
             You can access the deployment of this PR at https://ci-renku-${{ github.event.number }}.dev.renku.ch
       - name: renku build and deploy
         if: needs.check-deploy.outputs.switch-deploy == 'true'
-        uses: SwissDataScienceCenter/renku-actions/deploy-renku@v1.18.1
+        uses: SwissDataScienceCenter/renku-actions/deploy-renku@v1.18.2
         env:
           DOCKER_PASSWORD: ${{ secrets.RENKU_DOCKER_PASSWORD }}
           DOCKER_USERNAME: ${{ secrets.RENKU_DOCKER_USERNAME }}
@@ -143,7 +143,7 @@ jobs:
       id-token: write
     if: github.event.action != 'closed'
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.2
       - name: Find deployment url
         if: needs.check-deploy.outputs.azure-deploy == 'true'
         uses: peter-evans/find-comment@v3
@@ -188,7 +188,7 @@ jobs:
 
       - name: renku build and deploy
         if: needs.check-deploy.outputs.azure-deploy == 'true'
-        uses: SwissDataScienceCenter/renku-actions/deploy-renku@v1.18.1
+        uses: SwissDataScienceCenter/renku-actions/deploy-renku@v1.18.2
         env:
           DOCKER_PASSWORD: ${{ secrets.RENKU_DOCKER_PASSWORD }}
           DOCKER_USERNAME: ${{ secrets.RENKU_DOCKER_USERNAME }}
@@ -246,7 +246,7 @@ jobs:
           cat "${{ github.workspace }}/renkubot-kube.config" >> $GITHUB_ENV
           echo "EOF" >> $GITHUB_ENV
 
-      - uses: SwissDataScienceCenter/renku-actions/test-renku@v1.18.1
+      - uses: SwissDataScienceCenter/renku-actions/test-renku@v1.18.2
         with:
           kubeconfig: ${{ needs.check-deploy.outputs.azure-deploy == 'true' && env.RENKUBOT_KUBECONFIG || secrets.RENKUBOT_DEV_KUBECONFIG }}
           renku-release: ci-renku-${{ github.event.number }}
@@ -273,7 +273,7 @@ jobs:
             rstudioSession,
           ]
     steps:
-      - uses: SwissDataScienceCenter/renku-actions/test-renku-cypress@v1.18.1
+      - uses: SwissDataScienceCenter/renku-actions/test-renku-cypress@v1.18.2
         if: github.event.action != 'closed' && (needs.check-deploy.outputs.switch-deploy == 'true' || needs.check-deploy.outputs.azure-deploy == 'true') && needs.check-deploy.outputs.test-legacy-enabled == 'true'
         with:
           e2e-target: ${{ matrix.tests }}
@@ -300,7 +300,7 @@ jobs:
             sessionBasics,
           ]
     steps:
-      - uses: SwissDataScienceCenter/renku-actions/test-renku-cypress@v1.18.1
+      - uses: SwissDataScienceCenter/renku-actions/test-renku-cypress@v1.18.2
         if: github.event.action != 'closed' && (needs.check-deploy.outputs.switch-deploy == 'true' || needs.check-deploy.outputs.azure-deploy == 'true') && needs.check-deploy.outputs.test-enabled == 'true'
         with:
           e2e-folder: cypress/e2e/v2/
@@ -385,7 +385,7 @@ jobs:
 
       # Cleanup for both standard and Azure deployments
       - name: renku teardown
-        uses: SwissDataScienceCenter/renku-actions/cleanup-renku-ci-deployments@v1.18.1
+        uses: SwissDataScienceCenter/renku-actions/cleanup-renku-ci-deployments@v1.18.2
         env:
           HELM_RELEASE_REGEX: "^ci-renku-${{ github.event.number }}$"
           GITLAB_TOKEN: ${{ secrets.DEV_GITLAB_TOKEN }}

.github/workflows/renku-dev-test.yaml

@@ -8,7 +8,7 @@ jobs:
       github.event.client_payload.message == 'Helm test succeeded' }}
     runs-on: ubuntu-24.04
     steps:
-      - uses: SwissDataScienceCenter/renku-actions/test-renku@v1.17.0
+      - uses: SwissDataScienceCenter/renku-actions/test-renku@v1.18.2
         with:
           kubeconfig: ${{ secrets.RENKUBOT_DEV_KUBECONFIG }}
           renku-release: renku
@@ -22,7 +22,7 @@ jobs:
       github.event.client_payload.message == 'Helm test succeeded' }}
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v4.2.2
       - uses: cypress-io/github-action@v6
         id: cypress
         env:

CHANGELOG.rst

@@ -1,17 +1,41 @@
 .. _changelog:
 
+0.68.0
+------
+
+User-Facing Changes
+~~~~~~~~~~~~~~~~~~~
+
+**🐞 Bug Fixes**
+
+- **Core Service**: Fix a bug where removing activities wouldn't actually remove them.
+
+Internal Changes
+~~~~~~~~~~~~~~~~
+
+- **Helm chart**: Update the Keycloak theme image to use non-root user by default.
+- **Data services**: Added k8s cache service that caches sessions in the data services database.
+- **Admin tools**: Add Harbor initialization script to setup a registry for RenkuLab v2.
+
+Individual Components
+~~~~~~~~~~~~~~~~~~~~~
+
+- `renku-data-services 0.39.0 <https://github.com/SwissDataScienceCenter/renku-data-services/releases/tag/v0.39.0>`_
+- `renku-python 2.9.4 <https://github.com/SwissDataScienceCenter/renku-python/releases/tag/v2.9.4>`_
+- `renku-python 2.9.3 <https://github.com/SwissDataScienceCenter/renku-python/releases/tag/v2.9.3>`_
+
 0.67.2
 ------
 
-Renku ``0.67.2`` fixes several bugs in the data services backend. 
+Renku ``0.67.2`` fixes several bugs in the data services backend.
 
 User-Facing Changes
 ~~~~~~~~~~~~~~~~~~~
 
 **🐞 Bug Fixes**
 
 - **Data services**: Surface more specific message when Git integrations expire.
-- **Data services**: Fix a bug where modifying the resource class of a hibernated 
+- **Data services**: Fix a bug where modifying the resource class of a hibernated
   session would cause it to not start back up when resumed.
 - **Data services**: Data connectors were failing to copy when copying projects.
 
@@ -1601,7 +1625,7 @@ Internal Changes
 Individual Components
 ~~~~~~~~~~~~~~~~~~~~~
 
-- `renku-python 2.9.2 <https://github.com/SwissDataScienceCenter/renku-python/releases/tag/2.9.2>`_
+- `renku-python 2.9.2 <https://github.com/SwissDataScienceCenter/renku-python/releases/tag/v2.9.2>`_
 - `renku-data-services 0.5.0 <https://github.com/SwissDataScienceCenter/renku-data-services/releases/tag/v0.5.0>`_
 - `csi-rclone 0.1.7 <https://github.com/SwissDataScienceCenter/csi-rclone/releases/tag/v0.1.7>`_
 

CITATION.cff

@@ -0,0 +1,61 @@
+cff-version: 1.2.0
+message: "If you use this software, please cite it as below."
+title: "Renku: A platform for sustainable data science"
+authors:
+  - family-names: "Roškar"
+    given-names: "Rok"
+  - family-names: "Ramakrishnan"
+    given-names: "Chandrasekhar"
+  - family-names: "Volpi"
+    given-names: "Michele"
+  - family-names: "Perez-Cruz"
+    given-names: "Fernando"
+  - family-names: "Gasser"
+    given-names: "Lilian"
+  - family-names: "Ozdemir"
+    given-names: "Firat"
+  - family-names: "Paitz"
+    given-names: "Patrick"
+  - family-names: "Alisafaee"
+    given-names: "Mohammad"
+  - family-names: "Fischer"
+    given-names: "Philipp"
+  - family-names: "Grubenmann"
+    given-names: "Ralf"
+  - family-names: "Harris"
+    given-names: "Eliza"
+  - family-names: "Olevski"
+    given-names: "Tasko"
+  - family-names: "Remlinger"
+    given-names: "Carl"
+  - family-names: "Salamanca"
+    given-names: "Luis"
+  - family-names: "Capon Garcia"
+    given-names: "Elisabet"
+  - family-names: "Cavazzi"
+    given-names: "Lorenzo"
+  - family-names: "Chrobasik"
+    given-names: "Jakub"
+  - family-names: "Cordoba Osnas"
+    given-names: "Darlin"
+  - family-names: "Degano"
+    given-names: "Alessandro"
+  - family-names: "Dupre"
+    given-names: "Jimena"
+  - family-names: "Johnson"
+    given-names: "Wesley"
+  - family-names: "Kettner"
+    given-names: "Eike"
+  - family-names: "Kinkead"
+    given-names: "Laura"
+  - family-names: "Murphy"
+    given-names: "Sean D."
+  - family-names: "Thiebaut"
+    given-names: "Flora"
+  - family-names: "Verscheure"
+    given-names: "Olivier"
+date-released: "2023"
+version: "36"
+publisher: "Curran Associates, Inc."
+url: "https://proceedings.neurips.cc/paper_files/paper/2023/file/838694e9ab6b0a193b84daaafcac0eed-Paper-Datasets_and_Benchmarks.pdf"
+type: "conference-paper"

README.md

@@ -94,3 +94,7 @@ Renku is built from several sub-repositories:
     operator for user session servers.
 -   [renkulab-docker](https://github.com/SwissDataScienceCenter/renkulab-docker):
     base images for interactive sessions.
+
+## Citing Renku in research papers
+
+If you use the Renku platform for your research, please do cite our [paper](https://proceedings.neurips.cc/paper_files/paper/2023/hash/838694e9ab6b0a193b84daaafcac0eed-Abstract-Datasets_and_Benchmarks.html). See the citation information in the side panel of this repo for APA and BibTex formats. 

helm-chart/renku/requirements.yaml

@@ -4,7 +4,7 @@ dependencies:
     repository: "oci://registry-1.docker.io/bitnamicharts"
     condition: postgresql.enabled
   - name: keycloakx
-    version: 2.1.0
+    version: 7.0.1
     repository: "https://codecentric.github.io/helm-charts"
     condition: keycloakx.enabled
   - name: redis