diff --git a/api/client/src/intTest/resources/org/projectnessie/client/auth/oauth2/Dockerfile-keycloak-version b/api/client/src/intTest/resources/org/projectnessie/client/auth/oauth2/Dockerfile-keycloak-version
index 8e726b2ac4e..1deff33e19d 100644
--- a/api/client/src/intTest/resources/org/projectnessie/client/auth/oauth2/Dockerfile-keycloak-version
+++ b/api/client/src/intTest/resources/org/projectnessie/client/auth/oauth2/Dockerfile-keycloak-version
@@ -1,3 +1,3 @@
 # Dockerfile to provide the image name and tag to a test.
 # Version is managed by Renovate - do not edit.
-FROM quay.io/keycloak/keycloak:25.0.5
+FROM quay.io/keycloak/keycloak:25.0.6
diff --git a/cli/cli/src/intTest/resources/org/projectnessie/nessie/cli/commands/Dockerfile-keycloak-version b/cli/cli/src/intTest/resources/org/projectnessie/nessie/cli/commands/Dockerfile-keycloak-version
index 8e726b2ac4e..1deff33e19d 100644
--- a/cli/cli/src/intTest/resources/org/projectnessie/nessie/cli/commands/Dockerfile-keycloak-version
+++ b/cli/cli/src/intTest/resources/org/projectnessie/nessie/cli/commands/Dockerfile-keycloak-version
@@ -1,3 +1,3 @@
 # Dockerfile to provide the image name and tag to a test.
 # Version is managed by Renovate - do not edit.
-FROM quay.io/keycloak/keycloak:25.0.5
+FROM quay.io/keycloak/keycloak:25.0.6
diff --git a/docker/authn-keycloak/docker-compose.yml b/docker/authn-keycloak/docker-compose.yml
index aa77e7ff722..0d3c6ac99ee 100644
--- a/docker/authn-keycloak/docker-compose.yml
+++ b/docker/authn-keycloak/docker-compose.yml
@@ -47,7 +47,7 @@ services:
       retries: 15
 
   keycloak:
-    image: quay.io/keycloak/keycloak:25.0.5
+    image: quay.io/keycloak/keycloak:25.0.6
     ports:
       - "8080:8080"
       - "9001:9000"
diff --git a/docker/catalog-auth-s3-otel-jdbc/docker-compose.yml b/docker/catalog-auth-s3-otel-jdbc/docker-compose.yml
index 2b41787b299..65d3a30afa9 100644
--- a/docker/catalog-auth-s3-otel-jdbc/docker-compose.yml
+++ b/docker/catalog-auth-s3-otel-jdbc/docker-compose.yml
@@ -212,7 +212,7 @@ services:
   #   curl http://127.0.0.1:8080/realms/iceberg/protocol/openid-connect/token --user client2:s3cr3t -d 'grant_type=client_credentials' -d 'scope=catalog'
   #   curl http://127.0.0.1:8080/realms/iceberg/protocol/openid-connect/token --user client3:s3cr3t -d 'grant_type=client_credentials' -d 'scope=catalog'
   keycloak:
-    image: quay.io/keycloak/keycloak:25.0.5
+    image: quay.io/keycloak/keycloak:25.0.6
     depends_on:
       - postgres
     ports:
diff --git a/docker/catalog-auth-s3-otel/docker-compose.yml b/docker/catalog-auth-s3-otel/docker-compose.yml
index 134e815ef5c..f549417aee4 100644
--- a/docker/catalog-auth-s3-otel/docker-compose.yml
+++ b/docker/catalog-auth-s3-otel/docker-compose.yml
@@ -208,7 +208,7 @@ services:
   #   curl http://127.0.0.1:8080/realms/iceberg/protocol/openid-connect/token --user client2:s3cr3t -d 'grant_type=client_credentials' -d 'scope=catalog'
   #   curl http://127.0.0.1:8080/realms/iceberg/protocol/openid-connect/token --user client3:s3cr3t -d 'grant_type=client_credentials' -d 'scope=catalog'
   keycloak:
-    image: quay.io/keycloak/keycloak:25.0.5
+    image: quay.io/keycloak/keycloak:25.0.6
     ports:
       - "8080:8080"
       - "9001:9000"
diff --git a/docker/catalog-auth-s3/docker-compose.yml b/docker/catalog-auth-s3/docker-compose.yml
index e744e0d6c2d..fbf79302689 100644
--- a/docker/catalog-auth-s3/docker-compose.yml
+++ b/docker/catalog-auth-s3/docker-compose.yml
@@ -155,7 +155,7 @@ services:
   #   curl http://127.0.0.1:8080/realms/iceberg/protocol/openid-connect/token --user client2:s3cr3t -d 'grant_type=client_credentials' -d 'scope=catalog'
   #   curl http://127.0.0.1:8080/realms/iceberg/protocol/openid-connect/token --user client3:s3cr3t -d 'grant_type=client_credentials' -d 'scope=catalog'
   keycloak:
-    image: quay.io/keycloak/keycloak:25.0.5
+    image: quay.io/keycloak/keycloak:25.0.6
     ports:
       - "8080:8080"
       - "9001:9000"
diff --git a/testing/keycloak-container/src/main/resources/org/projectnessie/testing/keycloak/Dockerfile-keycloak-version b/testing/keycloak-container/src/main/resources/org/projectnessie/testing/keycloak/Dockerfile-keycloak-version
index 8e726b2ac4e..1deff33e19d 100644
--- a/testing/keycloak-container/src/main/resources/org/projectnessie/testing/keycloak/Dockerfile-keycloak-version
+++ b/testing/keycloak-container/src/main/resources/org/projectnessie/testing/keycloak/Dockerfile-keycloak-version
@@ -1,3 +1,3 @@
 # Dockerfile to provide the image name and tag to a test.
 # Version is managed by Renovate - do not edit.
-FROM quay.io/keycloak/keycloak:25.0.5
+FROM quay.io/keycloak/keycloak:25.0.6