diff --git a/attribute-endpoints-provider/pom.xml b/attribute-endpoints-provider/pom.xml
index 7769188..4459209 100644
--- a/attribute-endpoints-provider/pom.xml
+++ b/attribute-endpoints-provider/pom.xml
@@ -17,7 +17,7 @@
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <maven.compiler.source>17</maven.compiler.source>
     <maven.compiler.target>17</maven.compiler.target>
-    <keycloak.version>26.4.2</keycloak.version>
+    <keycloak.version>26.5.7</keycloak.version>
   </properties>
 
   <dependencies>
@@ -86,7 +86,7 @@
         </plugin>
         <plugin>
           <artifactId>maven-surefire-plugin</artifactId>
-          <version>2.22.1</version>
+          <version>3.5.5</version>
         </plugin>
         <plugin>
           <artifactId>maven-jar-plugin</artifactId>
@@ -94,11 +94,11 @@
         </plugin>
         <plugin>
           <artifactId>maven-install-plugin</artifactId>
-          <version>2.5.2</version>
+          <version>3.1.4</version>
         </plugin>
         <plugin>
           <artifactId>maven-deploy-plugin</artifactId>
-          <version>2.8.2</version>
+          <version>3.1.4</version>
         </plugin>
         <!-- site lifecycle, see
         https://maven.apache.org/ref/current/maven-core/lifecycles.html#site_Lifecycle -->
diff --git a/compose.yaml b/compose.yaml
index 6acf6dc..863d181 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -1,6 +1,6 @@
 services:
   keycloak:
-    image: quay.io/keycloak/keycloak:26.5.3
+    image: quay.io/keycloak/keycloak:26.5.7
     pull_policy: always
     command: "start-dev --features=declarative-ui"
     environment:
diff --git a/renovate.json b/renovate.json
index d3e62f2..28e16cb 100644
--- a/renovate.json
+++ b/renovate.json
@@ -8,7 +8,18 @@
     {
       "groupName": "maven plugins",
       "groupSlug": "maven-plugins",
-      "matchPackagePatterns": [ "org\\.apache\\.maven\\.plugins\\.*" ]
+      "matchPackageNames": [
+        "/org\.apache\.maven\.plugins\.*/"
+      ]
+    },
+    // Group Keycloak package updates.
+    {
+      "groupName": "Keycloak packages",
+      "groupSlug": "keycloak-packages",
+      "matchPackageNames": [
+        "/quay\.io/keycloak/keycloak/",
+        "/org\.keycloak:keycloak-parent/"
+      ]
     }
   ]
 }