diff --git a/roles/web-app-keycloak/meta/services.yml b/roles/web-app-keycloak/meta/services.yml
index 9625e85359..0e85f7d448 100644
--- a/roles/web-app-keycloak/meta/services.yml
+++ b/roles/web-app-keycloak/meta/services.yml
@@ -51,7 +51,7 @@ keycloak:
   shared: true
   provides: sso
   image: quay.io/keycloak/keycloak
-  version: "26.7.4"
+  version: "26.8.0"
   name: keycloak
   min_storage: 468MB
   cpus: "2.0"
@@ -88,7 +88,7 @@ keycloak:
 # nocheck: playwright-service-flag — sidecar shape, no probe-able surface flag
 sso_proxy:
   image: quay.io/oauth2-proxy/oauth2-proxy
-  version: "v7.15.4"
+  version: "v7.15.5"
   min_storage: 220MB
   configuration_file: oauth2-proxy-keycloak.cfg
   ports: