chore(docs): update of OEL images

[ory-bot]

Update OEL images

Summary by CodeRabbit

• New Features

  • Added YugabyteDB support for OEL Kratos, Hydra, and Keto.
  • Added OpenMetrics output and trace exemplars to metrics endpoints.
  • Added zero-downtime OAuth2 client secret rotation.
  • Added row-level TTL cleanup commands and single-key DeviceAuthn revocation.
  • Improved WebAuthn clone detection and account linking behavior.

• Bug Fixes & Improvements

  • OAuth2 client updates now preserve unspecified settings.
  • Improved token issuance performance and fixed device authorization session leaks.
  • Added safer migration guidance and updated image tag documentation for v26.3.4.

[coderabbitai]

📝 Walkthrough

Walkthrough

Adds OEL v26.3.4 changelogs covering authentication, OAuth2, metrics, database, and migration updates, plus new image-tag entries for Hydra, Keto, Kratos, Oathkeeper, and Polis.

Changes

OEL v26.3.4 release documentation

Layer / File(s)	Summary
Kratos behavioral release notes docs/self-hosted/oel/kratos/changelog/v26.3.4.md	Documents account linking, password validation, WebAuthn, row-level TTL, DeviceAuthn revocation, session timestamps, metrics, and YugabyteDB updates.
Cross-product metrics and database notes docs/self-hosted/oel/keto/changelog/v26.3.4.md, docs/self-hosted/oel/oathkeeper/changelog/v26.3.4.md	Documents OpenMetrics negotiation, trace exemplars, CockroachDB retry labels, and YugabyteDB configuration and migration handling.
OAuth2 release notes docs/self-hosted/oel/oauth2/changelog/v26.3.4.md	Documents OAuth2 client PATCH behavior, token issuance, OIDC, JWKS, secret rotation, OpenMetrics, and YugabyteDB changes.
Release tags and Polis placeholder docs/self-hosted/oel/oel-*-image-tags.md, docs/self-hosted/oel/polis/changelog/v26.3.4.md	Adds 26.3.4 image-tag rows dated 2026-07-28 and records that no Polis changelog entries were found.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

• ory/docs#2531: Updates the same OEL image-tag tables for an earlier release.
• ory/docs#2637: Adds an earlier OEL release entry to the same image-tag documentation.
• ory/docs#2670: Updates the OEL image-tag tables with the preceding release tag.

Suggested reviewers: aeneasr

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description is too brief and omits the template's required sections and big-picture context.	Expand it with the change summary, related issue or design doc section, checklist items, and any relevant comments or breaking-change notes.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title is concise and accurately reflects the docs update to OEL image tags.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch oel-version-update

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 4

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@docs/self-hosted/oel/kratos/changelog/v26.3.4.md`:
- Around line 108-112: Document supported recovery steps in both
docs/self-hosted/oel/kratos/changelog/v26.3.4.md (lines 108-112) and
docs/self-hosted/oel/keto/changelog/v26.3.4.md (lines 34-38): explain how
operators inspect the migration state, repair any partially applied legacy
statements using the supported procedure, and safely rerun the migration so the
schema_migration record is created. Keep the existing warning about YugabyteDB
DDL autocommit and current multi-statement-safe Ory migrations.
- Around line 102-105: Update every YugabyteDB DSN example in
docs/self-hosted/oel/kratos/changelog/v26.3.4.md (lines 102-105) and
docs/self-hosted/oel/keto/changelog/v26.3.4.md (lines 28-31) to use TLS-enabled
settings instead of sslmode=disable, or explicitly label each example as
local/development-only; keep both examples consistent.

In `@docs/self-hosted/oel/oauth2/changelog/v26.3.4.md`:
- Around line 92-96: Expand the “Recovering an interrupted migration” section
with actionable recovery steps for partially applied inherited YugabyteDB
migrations, either directly or via a link to the canonical procedure. Scope the
guidance to affected migration versions and clarify that current and future
migrations are safe, while previously interrupted migrations still require
recovery.
- Around line 86-90: Update the YugabyteDB DSN example in the “Enabling
YugabyteDB” documentation to use TLS by replacing the disabled SSL mode with a
TLS-required setting; keep the example production-appropriate and retain the
existing YugabyteDB scheme guidance.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 4526b608-c1e6-43a0-8275-b84b97ce73e6

📥 Commits

Reviewing files that changed from the base of the PR and between 5402826 and 957912f.

📒 Files selected for processing (10)

• docs/self-hosted/oel/keto/changelog/v26.3.4.md
• docs/self-hosted/oel/kratos/changelog/v26.3.4.md
• docs/self-hosted/oel/oathkeeper/changelog/v26.3.4.md
• docs/self-hosted/oel/oauth2/changelog/v26.3.4.md
• docs/self-hosted/oel/oel-hydra-image-tags.md
• docs/self-hosted/oel/oel-keto-image-tags.md
• docs/self-hosted/oel/oel-kratos-image-tags.md
• docs/self-hosted/oel/oel-oathkeeper-image-tags.md
• docs/self-hosted/oel/oel-polis-image-tags.md
• docs/self-hosted/oel/polis/changelog/v26.3.4.md