KropCloud/gitops
2
0
Fork 0
Code Issues 1 Pull requests 10 Projects Releases Packages Wiki Activity Actions

Update Helm release authentik to v2026 #930

Open
renovate-bot wants to merge 1 commit from renovate/authentik-2026.x into master
pull from: renovate/authentik-2026.x
merge into: KropCloud:master
Conversation 0 Commits 1 Files changed 1 +1 -1
renovate-bot commented 2026-03-03 17:03:54 +00:00
Member
Copy link

This PR contains the following updates:

Package Update Change
authentik (source) major 2025.10.2 → 2026.5.2

Release Notes

goauthentik/helm (authentik)

v2026.5.2

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

Full Changelog: https://github.com/goauthentik/helm/compare/authentik-2026.5.0...authentik-2026.5.2

v2026.5.0

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

See https://docs.goauthentik.io/releases/2026.5/

What's Changed

Full Changelog: https://github.com/goauthentik/helm/compare/authentik-2026.2.3...authentik-2026.5.0

v2026.2.3

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

See See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202623

What's Changed

Full Changelog: https://github.com/goauthentik/helm/compare/authentik-2026.2.2...authentik-2026.2.3

v2026.2.2

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202622

What's Changed

Full Changelog: https://github.com/goauthentik/helm/compare/authentik-2026.2.1...authentik-2026.2.2

v2026.2.1

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

New Contributors

Full Changelog: https://github.com/goauthentik/helm/compare/authentik-2026.2.0...authentik-2026.2.1

Full release notes for authentik

See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202621

What's Changed

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2026.2.0...version/2026.2.1

v2026.2.0

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

New Contributors

Full Changelog: https://github.com/goauthentik/helm/compare/authentik-2025.12.4...authentik-2026.2.0

Full release notes for authentik

See https://docs.goauthentik.io/docs/releases/2026.2

What's Changed

New Contributors

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2025.12.4...version/2026.2.0

v2025.12.4

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

see https://docs.goauthentik.io/releases/2025.12/#fixed-in-2025124

What's Changed

Full Changelog: https://github.com/goauthentik/helm/compare/authentik-2025.12.3...authentik-2025.12.4

v2025.12.3

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2025.12.2...version/2025.12.3

v2025.12.2

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2025.12.1...version/2025.12.2

v2025.12.1

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

Full Changelog: https://github.com/goauthentik/helm/compare/authentik-2025.12.0...authentik-2025.12.1

v2025.12.0

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

New Contributors

Full Changelog: https://github.com/goauthentik/helm/compare/authentik-2025.10.3...authentik-2025.12.0

v2025.10.3

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

Full Changelog: https://github.com/goauthentik/helm/compare/authentik-2025.10.2...authentik-2025.10.3

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [authentik](https://goauthentik.io) ([source](https://github.com/goauthentik/helm)) | major | `2025.10.2` → `2026.5.2` | --- ### Release Notes <details> <summary>goauthentik/helm (authentik)</summary> ### [`v2026.5.2`](https://github.com/goauthentik/helm/releases/tag/authentik-2026.5.2) [Compare Source](https://github.com/goauthentik/helm/compare/authentik-2026.5.0...authentik-2026.5.2) authentik is an open-source Identity Provider focused on flexibility and versatility #### What's Changed - charts/authentik: bump to 2026.5.2 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [#&#8203;476](https://github.com/goauthentik/helm/pull/476) **Full Changelog**: <https://github.com/goauthentik/helm/compare/authentik-2026.5.0...authentik-2026.5.2> ### [`v2026.5.0`](https://github.com/goauthentik/helm/releases/tag/authentik-2026.5.0) [Compare Source](https://github.com/goauthentik/helm/compare/authentik-2026.2.3...authentik-2026.5.0) authentik is an open-source Identity Provider focused on flexibility and versatility See <https://docs.goauthentik.io/releases/2026.5/> #### What's Changed - charts/authentik: bump postgresql subchart from 16.7.27 to 18.6.5 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;410](https://github.com/goauthentik/helm/pull/410) - charts/authentik: remove hardcoded AUTHENTIK\_LISTEN variables by [@&#8203;rissson](https://github.com/rissson) in [#&#8203;468](https://github.com/goauthentik/helm/pull/468) - charts/authentik: update docker.io/library/postgres Docker tag to v17.10 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;470](https://github.com/goauthentik/helm/pull/470) - charts/authentik: bump postgresql subchart to v18.6.7 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;469](https://github.com/goauthentik/helm/pull/469) - charts/authentik: bump to 2026.5.0 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [#&#8203;471](https://github.com/goauthentik/helm/pull/471) **Full Changelog**: <https://github.com/goauthentik/helm/compare/authentik-2026.2.3...authentik-2026.5.0> ### [`v2026.2.3`](https://github.com/goauthentik/helm/releases/tag/authentik-2026.2.3) [Compare Source](https://github.com/goauthentik/helm/compare/authentik-2026.2.2...authentik-2026.2.3) authentik is an open-source Identity Provider focused on flexibility and versatility See See <https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202623> #### What's Changed - charts/authentik: bump to 2026.2.3 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [#&#8203;467](https://github.com/goauthentik/helm/pull/467) **Full Changelog**: <https://github.com/goauthentik/helm/compare/authentik-2026.2.2...authentik-2026.2.3> ### [`v2026.2.2`](https://github.com/goauthentik/helm/releases/tag/authentik-2026.2.2) [Compare Source](https://github.com/goauthentik/helm/compare/authentik-2026.2.1...authentik-2026.2.2) authentik is an open-source Identity Provider focused on flexibility and versatility See <https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202622> #### What's Changed - chore(deps): update docker/login-action action to v4 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;460](https://github.com/goauthentik/helm/pull/460) - ci: rename gh app private key variable by [@&#8203;rissson](https://github.com/rissson) in [#&#8203;461](https://github.com/goauthentik/helm/pull/461) - chore(deps): update azure/setup-helm action to v5 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;462](https://github.com/goauthentik/helm/pull/462) - charts/authentik: bump to 2026.2.2 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [#&#8203;463](https://github.com/goauthentik/helm/pull/463) **Full Changelog**: <https://github.com/goauthentik/helm/compare/authentik-2026.2.1...authentik-2026.2.2> ### [`v2026.2.1`](https://github.com/goauthentik/helm/releases/tag/authentik-2026.2.1) [Compare Source](https://github.com/goauthentik/helm/compare/authentik-2026.2.0...authentik-2026.2.1) authentik is an open-source Identity Provider focused on flexibility and versatility #### What's Changed - charts/authentik: Add weight to http route service by [@&#8203;flipper](https://github.com/flipper) in [#&#8203;458](https://github.com/goauthentik/helm/pull/458) - chore(deps): update docker.io/library/postgres docker tag to v17.9 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;452](https://github.com/goauthentik/helm/pull/452) - chore(deps): update prometheuscommunity/postgres-exporter docker tag to v0.19.1 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;445](https://github.com/goauthentik/helm/pull/445) - charts/authentik: bump to 2026.2.1 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [#&#8203;459](https://github.com/goauthentik/helm/pull/459) #### New Contributors - [@&#8203;flipper](https://github.com/flipper) made their first contribution in [#&#8203;458](https://github.com/goauthentik/helm/pull/458) **Full Changelog**: <https://github.com/goauthentik/helm/compare/authentik-2026.2.0...authentik-2026.2.1> *** ### Full release notes for authentik See <https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202621> #### What's Changed - website/docs: update supported versions (cherry-pick [#&#8203;20534](https://github.com/goauthentik/helm/issues/20534) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20535](https://github.com/goauthentik/authentik/pull/20535) - website/docs: fix upgrade link in `2026.2` release notes (cherry-pick [#&#8203;20539](https://github.com/goauthentik/helm/issues/20539) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20542](https://github.com/goauthentik/authentik/pull/20542) - website/docs: remove bad logs redirect (cherry-pick [#&#8203;20522](https://github.com/goauthentik/helm/issues/20522) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20548](https://github.com/goauthentik/authentik/pull/20548) - website/docs: revamp enterprise section (cherry-pick [#&#8203;20379](https://github.com/goauthentik/helm/issues/20379) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20546](https://github.com/goauthentik/authentik/pull/20546) - docs: fix typos and wording in docs and integrations (cherry-pick [#&#8203;20550](https://github.com/goauthentik/helm/issues/20550) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20563](https://github.com/goauthentik/authentik/pull/20563) - ci: add `reason` change to versions repo bump (cherry-pick [#&#8203;20562](https://github.com/goauthentik/helm/issues/20562) to version-2026.2) by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#20569](https://github.com/goauthentik/authentik/pull/20569) - internal: make http timeouts configurable (cherry-pick [#&#8203;20472](https://github.com/goauthentik/helm/issues/20472) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20567](https://github.com/goauthentik/authentik/pull/20567) - packages/django-dramatiq-postgres: use fork (cherry-pick [#&#8203;20606](https://github.com/goauthentik/helm/issues/20606) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20608](https://github.com/goauthentik/authentik/pull/20608) - web/flows: fix source icons being always inverted (cherry-pick [#&#8203;20419](https://github.com/goauthentik/helm/issues/20419) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20607](https://github.com/goauthentik/authentik/pull/20607) - crypto: fix kid legacy signal (cherry-pick [#&#8203;20627](https://github.com/goauthentik/helm/issues/20627) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20628](https://github.com/goauthentik/authentik/pull/20628) - sources/ldap: add connection logging & downgrade message (cherry-pick [#&#8203;20519](https://github.com/goauthentik/helm/issues/20519) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20636](https://github.com/goauthentik/authentik/pull/20636) - packages/django-dramatiq-postgres: fix worker startup on macos (cherry-pick [#&#8203;20637](https://github.com/goauthentik/helm/issues/20637) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20641](https://github.com/goauthentik/authentik/pull/20641) - enterprise/wsfed: Fix metadata export and signing logic (cherry-pick [#&#8203;20643](https://github.com/goauthentik/helm/issues/20643) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20649](https://github.com/goauthentik/authentik/pull/20649) - website/docs: entra id provider: add custom email domain info (cherry-pick [#&#8203;20444](https://github.com/goauthentik/helm/issues/20444) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20660](https://github.com/goauthentik/authentik/pull/20660) - website/docs: kerberos: add note about caching (cherry-pick [#&#8203;20663](https://github.com/goauthentik/helm/issues/20663) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20664](https://github.com/goauthentik/authentik/pull/20664) - core: fix get\_provider returning base Provider instead of subclass (cherry-pick [#&#8203;19064](https://github.com/goauthentik/helm/issues/19064) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20670](https://github.com/goauthentik/authentik/pull/20670) - packages/django-channels-postgres: eagerly delete messages (cherry-pick [#&#8203;20687](https://github.com/goauthentik/helm/issues/20687) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20688](https://github.com/goauthentik/authentik/pull/20688) - outpost/proxyv2: prevent panic in handleSignOut (cherry-pick [#&#8203;20097](https://github.com/goauthentik/helm/issues/20097) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20689](https://github.com/goauthentik/authentik/pull/20689) - website/docs: add 2025 pentest (cherry-pick [#&#8203;20626](https://github.com/goauthentik/helm/issues/20626) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20691](https://github.com/goauthentik/authentik/pull/20691) - web: fix identification stage styling in compatibility mode (cherry-pick [#&#8203;20684](https://github.com/goauthentik/helm/issues/20684) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20694](https://github.com/goauthentik/authentik/pull/20694) - providers/proxy: move search path to query instead of runtime parameter (cherry-pick [#&#8203;20662](https://github.com/goauthentik/helm/issues/20662) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20693](https://github.com/goauthentik/authentik/pull/20693) - website/docs: add release notes for `2026.2.1` (cherry-pick [#&#8203;20659](https://github.com/goauthentik/helm/issues/20659) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20695](https://github.com/goauthentik/authentik/pull/20695) **Full Changelog**: <https://github.com/goauthentik/authentik/compare/version/2026.2.0...version/2026.2.1> ### [`v2026.2.0`](https://github.com/goauthentik/helm/releases/tag/authentik-2026.2.0) [Compare Source](https://github.com/goauthentik/helm/compare/authentik-2025.12.4...authentik-2026.2.0) authentik is an open-source Identity Provider focused on flexibility and versatility #### What's Changed - charts/authentik: add fields auto-added by Kubernetes to httproute by [@&#8203;cfi2017](https://github.com/cfi2017) in [#&#8203;453](https://github.com/goauthentik/helm/pull/453) - chore(deps): update helm/kind-action action to v1.14.0 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;454](https://github.com/goauthentik/helm/pull/454) - charts/authentik: add note how to set version by [@&#8203;BeryJu](https://github.com/BeryJu) in [#&#8203;456](https://github.com/goauthentik/helm/pull/456) - charts/authentik: bump to 2026.2.0 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [#&#8203;457](https://github.com/goauthentik/helm/pull/457) #### New Contributors - [@&#8203;cfi2017](https://github.com/cfi2017) made their first contribution in [#&#8203;453](https://github.com/goauthentik/helm/pull/453) **Full Changelog**: <https://github.com/goauthentik/helm/compare/authentik-2025.12.4...authentik-2026.2.0> *** ### Full release notes for authentik See <https://docs.goauthentik.io/docs/releases/2026.2> #### What's Changed - root: bump version to 2026.2.0-rc1 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#18794](https://github.com/goauthentik/authentik/pull/18794) - tests/e2e: retry detached shadow roots by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#18796](https://github.com/goauthentik/authentik/pull/18796) - website/release notes: Update v2025.12 release notes by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#18797](https://github.com/goauthentik/authentik/pull/18797) - web/admin: fix read-only provider selection for application form by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#18768](https://github.com/goauthentik/authentik/pull/18768) - web: bump the react group across 1 directory with 2 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18775](https://github.com/goauthentik/authentik/pull/18775) - web: bump chromedriver from 143.0.0 to 143.0.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18776](https://github.com/goauthentik/authentik/pull/18776) - web: bump the storybook group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18774](https://github.com/goauthentik/authentik/pull/18774) - internal: don't warn on empty outpost for embedded by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18786](https://github.com/goauthentik/authentik/pull/18786) - lifecycle/aws: bump aws-cdk from 2.1033.0 to 2.1034.0 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18771](https://github.com/goauthentik/authentik/pull/18771) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#18804](https://github.com/goauthentik/authentik/pull/18804) - root: Add macOS support for sed in Makefile by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#18795](https://github.com/goauthentik/authentik/pull/18795) - ci: bump astral-sh/setup-uv from 7.1.5 to 7.1.6 in /.github/actions/setup by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18826](https://github.com/goauthentik/authentik/pull/18826) - ci: bump actions/upload-artifact from 5.0.0 to 6.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18824](https://github.com/goauthentik/authentik/pull/18824) - core: bump goauthentik/fips-debian from `07f41ce` to `c10cd2c` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18822](https://github.com/goauthentik/authentik/pull/18822) - ci: bump actions/download-artifact from 6.0.0 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18825](https://github.com/goauthentik/authentik/pull/18825) - ci: bump actions/cache from 5.0.0 to 5.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18823](https://github.com/goauthentik/authentik/pull/18823) - core: list applications fix by [@&#8203;ryanpesek](https://github.com/ryanpesek) in [goauthentik/authentik#18798](https://github.com/goauthentik/authentik/pull/18798) - website/docs: add icon info to style guide by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#18832](https://github.com/goauthentik/authentik/pull/18832) - core: remove superuser check from `Token` list by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#18684](https://github.com/goauthentik/authentik/pull/18684) - packages/django-dramatiq-postgres: broker: close django connections on consumer close by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#18833](https://github.com/goauthentik/authentik/pull/18833) - core: bump goauthentik.io/api/v3 from 3.2025120.26 to 3.2026020.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18815](https://github.com/goauthentik/authentik/pull/18815) - admin/files: revert add check for /media existence ([#&#8203;18636](https://github.com/goauthentik/helm/issues/18636)) by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#18829](https://github.com/goauthentik/authentik/pull/18829) - website/docs: add jellyseer integration doc by [@&#8203;gabay](https://github.com/gabay) in [goauthentik/authentik#18812](https://github.com/goauthentik/authentik/pull/18812) - crypto: Store details parsed from includeDetails in database instead by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#18013](https://github.com/goauthentik/authentik/pull/18013) - core: skip s3 tests if endpoint isn't available by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#18841](https://github.com/goauthentik/authentik/pull/18841) - admin/files: fix get\_objects\_for\_user queryset argument in FileUsedByView by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#18845](https://github.com/goauthentik/authentik/pull/18845) - core: bump goauthentik/fips-debian from `c10cd2c` to `2f19fc1` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18856](https://github.com/goauthentik/authentik/pull/18856) - ci: replace codecov test-results action by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18862](https://github.com/goauthentik/authentik/pull/18862) - core: add skip s3\_test\_server\_available to TestResolveFileUrlS3Backend by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#18858](https://github.com/goauthentik/authentik/pull/18858) - rbac: alter migrated direct permission roles by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#18860](https://github.com/goauthentik/authentik/pull/18860) - core: bump library/golang from `5d35fb8` to `8e8f9c8` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18855](https://github.com/goauthentik/authentik/pull/18855) - web/admin/rbac: misc object permission fixes by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#18859](https://github.com/goauthentik/authentik/pull/18859) - outposts: fix permission errors for related certificates by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18861](https://github.com/goauthentik/authentik/pull/18861) - website/docs: adjust RBAC-related details in 2025.12 release notes by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#18863](https://github.com/goauthentik/authentik/pull/18863) - website/docs: Add docs for passkey autofill (WebauthN Conditional UI) by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#18805](https://github.com/goauthentik/authentik/pull/18805) - website/docs: 2025.10.3 release notes by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18868](https://github.com/goauthentik/authentik/pull/18868) - web: add custom message with links for empty data export list by [@&#8203;atereshkin](https://github.com/atereshkin) in [goauthentik/authentik#18830](https://github.com/goauthentik/authentik/pull/18830) - web: fix notification counter by [@&#8203;atereshkin](https://github.com/atereshkin) in [goauthentik/authentik#18781](https://github.com/goauthentik/authentik/pull/18781) - web: bump vite from 7.2.7 to 7.3.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18854](https://github.com/goauthentik/authentik/pull/18854) - stages/authenticator\_\*: fix code input field not string by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18875](https://github.com/goauthentik/authentik/pull/18875) - web: fix file upload form by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#18808](https://github.com/goauthentik/authentik/pull/18808) - web/admin: endpoint: change wording and add helper text by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#18871](https://github.com/goauthentik/authentik/pull/18871) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#18807](https://github.com/goauthentik/authentik/pull/18807) - website/integrations: bookstack: fix redir url by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#18891](https://github.com/goauthentik/authentik/pull/18891) - core: bump astral-sh/uv from 0.9.17 to 0.9.18 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18898](https://github.com/goauthentik/authentik/pull/18898) - core: bump goauthentik/fips-debian from `2f19fc1` to `189345a` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18897](https://github.com/goauthentik/authentik/pull/18897) - web: bump knip from 5.73.3 to 5.74.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18896](https://github.com/goauthentik/authentik/pull/18896) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.0.0 to 25.0.3 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18895](https://github.com/goauthentik/authentik/pull/18895) - web: bump the rollup group across 1 directory with 4 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18852](https://github.com/goauthentik/authentik/pull/18852) - web: bump the bundler group across 1 directory with 7 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18894](https://github.com/goauthentik/authentik/pull/18894) - web: bump [@&#8203;sentry/browser](https://github.com/sentry/browser) from 10.30.0 to 10.31.0 in /web in the sentry group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18893](https://github.com/goauthentik/authentik/pull/18893) - lifecycle/aws: bump aws-cdk from 2.1034.0 to 2.1100.0 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18850](https://github.com/goauthentik/authentik/pull/18850) - web: bump the goauthentik group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18819](https://github.com/goauthentik/authentik/pull/18819) - web: bump the swc group across 1 directory with 11 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18818](https://github.com/goauthentik/authentik/pull/18818) - web: bump the eslint group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18851](https://github.com/goauthentik/authentik/pull/18851) - core: bump goauthentik.io/api/v3 from 3.2026020.1 to 3.2026020.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18892](https://github.com/goauthentik/authentik/pull/18892) - tasks/middleware: close connections on worker status update database error by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#18881](https://github.com/goauthentik/authentik/pull/18881) - website/docs: added list of Int Guide contributors (also edited frontmatter) by [@&#8203;tanberry](https://github.com/tanberry) in [goauthentik/authentik#18888](https://github.com/goauthentik/authentik/pull/18888) - api: fix page\_size with invalid query param by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#18879](https://github.com/goauthentik/authentik/pull/18879) - ci/release-tag: checkout correct branch for make test-docker by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#18880](https://github.com/goauthentik/authentik/pull/18880) - api: fix latest version for public schema by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18902](https://github.com/goauthentik/authentik/pull/18902) - website/docs: 2025.12: remove superfluous changes by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#18910](https://github.com/goauthentik/authentik/pull/18910) - web/admin: reword some things on the device view page by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18785](https://github.com/goauthentik/authentik/pull/18785) - core/groups: optimize prefetch queries to fetch only required fields by [@&#8203;joaocfernandes](https://github.com/joaocfernandes) in [goauthentik/authentik#18448](https://github.com/goauthentik/authentik/pull/18448) - root: fix docker-compose data mount by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#18903](https://github.com/goauthentik/authentik/pull/18903) - web/admin: add UI copy to RBAC modal by [@&#8203;tanberry](https://github.com/tanberry) in [goauthentik/authentik#18917](https://github.com/goauthentik/authentik/pull/18917) - tests/e2e: handle StaleElementReferenceException in parse\_json\_content by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#18842](https://github.com/goauthentik/authentik/pull/18842) - core: bump goauthentik/fips-debian from `189345a` to `10dadf1` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18927](https://github.com/goauthentik/authentik/pull/18927) - web: bump chromedriver from 143.0.1 to 143.0.2 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18926](https://github.com/goauthentik/authentik/pull/18926) - web: bump knip from 5.74.0 to 5.75.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18924](https://github.com/goauthentik/authentik/pull/18924) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#18920](https://github.com/goauthentik/authentik/pull/18920) - lifecycle/aws: bump aws-cdk from 2.1100.0 to 2.1100.1 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18922](https://github.com/goauthentik/authentik/pull/18922) - web: bump the swc group across 1 directory with 11 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18923](https://github.com/goauthentik/authentik/pull/18923) - web: bump the storybook group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18817](https://github.com/goauthentik/authentik/pull/18817) - stages: remove more global state by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18641](https://github.com/goauthentik/authentik/pull/18641) - packages/ak-guardian: cast safely by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#18929](https://github.com/goauthentik/authentik/pull/18929) - web/flow: Fix spurious double submit on ak-stage-autosubmit by [@&#8203;dminuoso](https://github.com/dminuoso) in [goauthentik/authentik#18727](https://github.com/goauthentik/authentik/pull/18727) - website/integrations: Add launch URL for Immich by [@&#8203;optix2000](https://github.com/optix2000) in [goauthentik/authentik#18921](https://github.com/goauthentik/authentik/pull/18921) - crypto: fix extra cert data in db migration by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#18937](https://github.com/goauthentik/authentik/pull/18937) - web/elements: progress-bar and table loading header by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18934](https://github.com/goauthentik/authentik/pull/18934) - stages/identification: replace sleep with make\_password by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18883](https://github.com/goauthentik/authentik/pull/18883) - website/docs: endpoint devices by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#18634](https://github.com/goauthentik/authentik/pull/18634) - website/docs: Fix labels, Pre-Release detection by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#18945](https://github.com/goauthentik/authentik/pull/18945) - website/docs: release notes: add endpoint device links to 2025.12 notes by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#18940](https://github.com/goauthentik/authentik/pull/18940) - website/docs: Fix version parsing. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#18948](https://github.com/goauthentik/authentik/pull/18948) - web/admin: fix endpoints user binding by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18935](https://github.com/goauthentik/authentik/pull/18935) - flows/executor: fix KeyError when session has no existing plan by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#18951](https://github.com/goauthentik/authentik/pull/18951) - root: move docker files to lifecycle/containers and change docker-compose to compose by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#16624](https://github.com/goauthentik/authentik/pull/16624) - core: bump goauthentik.io/api/v3 from 3.2026020.3 to 3.2026020.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18956](https://github.com/goauthentik/authentik/pull/18956) - web: bump chromedriver from 143.0.2 to 143.0.3 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18959](https://github.com/goauthentik/authentik/pull/18959) - web: bump the swc group across 1 directory with 11 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18958](https://github.com/goauthentik/authentik/pull/18958) - web: bump [@&#8203;sentry/browser](https://github.com/sentry/browser) from 10.31.0 to 10.32.0 in /web in the sentry group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18957](https://github.com/goauthentik/authentik/pull/18957) - ci: bump actions/attest-build-provenance from 3.0.0 to 3.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18960](https://github.com/goauthentik/authentik/pull/18960) - website/docs: add note to active directory source doc by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#18787](https://github.com/goauthentik/authentik/pull/18787) - web/maintenance: fix missing custom web component imports by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#18942](https://github.com/goauthentik/authentik/pull/18942) - web/maintenance: no unknown tag names by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#18944](https://github.com/goauthentik/authentik/pull/18944) - website/integrations: Fix path for Cloudflare Access by [@&#8203;stijn220](https://github.com/stijn220) in [goauthentik/authentik#18979](https://github.com/goauthentik/authentik/pull/18979) - blueprints: add InternallyManagedMixin instead of large list by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18983](https://github.com/goauthentik/authentik/pull/18983) - web/admin: fix dark theme on map by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18985](https://github.com/goauthentik/authentik/pull/18985) - web/admin: Fix haveibeenpwned link in PasswordPolicyForm by [@&#8203;hskrtich](https://github.com/hskrtich) in [goauthentik/authentik#18984](https://github.com/goauthentik/authentik/pull/18984) - events: notifications live update by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18980](https://github.com/goauthentik/authentik/pull/18980) - web: fix Open button selecting row instead of navigating by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#18992](https://github.com/goauthentik/authentik/pull/18992) - blueprints: fix flaky tests by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19002](https://github.com/goauthentik/authentik/pull/19002) - ci: bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18999](https://github.com/goauthentik/authentik/pull/18999) - providers/oauth2: Automated OpenID Conformance tests by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#14785](https://github.com/goauthentik/authentik/pull/14785) - enterprise/reports: improve export list, confirmation by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18981](https://github.com/goauthentik/authentik/pull/18981) - enterprise/search: add static autocomplete structure by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19008](https://github.com/goauthentik/authentik/pull/19008) - website/docs: improve endpoint devices docs by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19007](https://github.com/goauthentik/authentik/pull/19007) - web: bump the rollup group across 1 directory with 4 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18994](https://github.com/goauthentik/authentik/pull/18994) - core: bump openapitools/openapi-generator-cli from v7.16.0 to v7.18.0 in /scripts/api by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19018](https://github.com/goauthentik/authentik/pull/19018) - web: bump globby from 16.0.0 to 16.1.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18995](https://github.com/goauthentik/authentik/pull/18995) - api: rework schema generation by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18977](https://github.com/goauthentik/authentik/pull/18977) - web/admin: prevent file upload attempt when backend not managed by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18646](https://github.com/goauthentik/authentik/pull/18646) - web: bump the eslint group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19019](https://github.com/goauthentik/authentik/pull/19019) - core: bump goauthentik.io/api/v3 from 3.2026020.4 to 3.2026020.5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19017](https://github.com/goauthentik/authentik/pull/19017) - website/docs: Prioritize "Release Candidate" over "Current Release" by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#18975](https://github.com/goauthentik/authentik/pull/18975) - web: Locale selector UI fixes by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#18972](https://github.com/goauthentik/authentik/pull/18972) - web: Fix Storybook package resolution with `npm link` by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19016](https://github.com/goauthentik/authentik/pull/19016) - core: use chunked\_queryset for expired message deletion by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19028](https://github.com/goauthentik/authentik/pull/19028) - web/admin: use consistent icon for inactive user status by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19032](https://github.com/goauthentik/authentik/pull/19032) - web: bump lit from 3.3.1 to 3.3.2 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19038](https://github.com/goauthentik/authentik/pull/19038) - web: bump [@&#8203;lit/reactive-element](https://github.com/lit/reactive-element) from 2.1.1 to 2.1.2 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19037](https://github.com/goauthentik/authentik/pull/19037) - web: bump knip from 5.75.1 to 5.77.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19041](https://github.com/goauthentik/authentik/pull/19041) - core: bump goauthentik.io/api/v3 from 3.2026020.5 to 3.2026020.6 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19036](https://github.com/goauthentik/authentik/pull/19036) - docs/release notes: update 2025.12 release notes by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19043](https://github.com/goauthentik/authentik/pull/19043) - lib/sync: fix sync\_dispatch by [@&#8203;krejcar25](https://github.com/krejcar25) in [goauthentik/authentik#19053](https://github.com/goauthentik/authentik/pull/19053) - endpoints/devices: cleanup by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19047](https://github.com/goauthentik/authentik/pull/19047) - blueprints: set enrollment token key by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19061](https://github.com/goauthentik/authentik/pull/19061) - website/integrations: Add Wallos by [@&#8203;0skater0](https://github.com/0skater0) in [goauthentik/authentik#19013](https://github.com/goauthentik/authentik/pull/19013) - website/docs: FreeIPA documentation updates by [@&#8203;borutmrak](https://github.com/borutmrak) in [goauthentik/authentik#15183](https://github.com/goauthentik/authentik/pull/15183) - \*: Auto compress images by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19065](https://github.com/goauthentik/authentik/pull/19065) - blueprints: fix deadlock and task context error in MetaApplyBlueprint by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19033](https://github.com/goauthentik/authentik/pull/19033) - web: fix file search input not resetting results properly by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19034](https://github.com/goauthentik/authentik/pull/19034) - website/integrations: owncloud: fix php by [@&#8203;ocmateusz](https://github.com/ocmateusz) in [goauthentik/authentik#19073](https://github.com/goauthentik/authentik/pull/19073) - tests/e2e: add endpoint tests by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19072](https://github.com/goauthentik/authentik/pull/19072) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#18991](https://github.com/goauthentik/authentik/pull/18991) - web: bump knip from 5.77.0 to 5.77.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19049](https://github.com/goauthentik/authentik/pull/19049) - web: bump [@&#8203;lit/localize-tools](https://github.com/lit/localize-tools) from 0.8.0 to 0.8.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19040](https://github.com/goauthentik/authentik/pull/19040) - internal: update TLS Suite by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19076](https://github.com/goauthentik/authentik/pull/19076) - web: bump [@&#8203;formatjs/intl-listformat](https://github.com/formatjs/intl-listformat) from 7.7.13 to 8.1.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19054](https://github.com/goauthentik/authentik/pull/19054) - web/admin: fix button alignment on user view page by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19079](https://github.com/goauthentik/authentik/pull/19079) - website/docs: endpoints: mention connector key required for stage to work by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19084](https://github.com/goauthentik/authentik/pull/19084) - website/docs: rel notes .12: add wallos by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19063](https://github.com/goauthentik/authentik/pull/19063) - website/docs: endpoint devices: update features table by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19094](https://github.com/goauthentik/authentik/pull/19094) - website/docs: endpoint devices: add path to macos setup by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19093](https://github.com/goauthentik/authentik/pull/19093) - web: bump knip from 5.77.1 to 5.78.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19090](https://github.com/goauthentik/authentik/pull/19090) - web: fix promoted source button hover losing blue color by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19048](https://github.com/goauthentik/authentik/pull/19048) - web: Fix stale flow background by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19015](https://github.com/goauthentik/authentik/pull/19015) - Update Vaultwarden documentation by removing warning by [@&#8203;austin-dudzik](https://github.com/austin-dudzik) in [goauthentik/authentik#19102](https://github.com/goauthentik/authentik/pull/19102) - web/maintenance/no unknown attributes (part 1) by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#18970](https://github.com/goauthentik/authentik/pull/18970) - website/integrations: Add Pulse by [@&#8203;0skater0](https://github.com/0skater0) in [goauthentik/authentik#19105](https://github.com/goauthentik/authentik/pull/19105) - website/integrations: Add Audiobookshelf by [@&#8203;0skater0](https://github.com/0skater0) in [goauthentik/authentik#19104](https://github.com/goauthentik/authentik/pull/19104) - website/docs: release notes: Add more integrations by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19109](https://github.com/goauthentik/authentik/pull/19109) - web: bump the storybook group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19111](https://github.com/goauthentik/authentik/pull/19111) - core: bump library/nginx from `fb01117` to `ad85427` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19112](https://github.com/goauthentik/authentik/pull/19112) - web: bump the eslint group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19110](https://github.com/goauthentik/authentik/pull/19110) - web: Fix Impersonation, Lit Reactive Controller Contexts by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19114](https://github.com/goauthentik/authentik/pull/19114) - web: Capitalize language display names, code owner fix by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19119](https://github.com/goauthentik/authentik/pull/19119) - core: bump library/nginx from `ad85427` to `ca871a8` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19126](https://github.com/goauthentik/authentik/pull/19126) - web: bump the swc group across 1 directory with 11 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19124](https://github.com/goauthentik/authentik/pull/19124) - core: bump github.com/jackc/pgx/v5 from 5.7.6 to 5.8.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19088](https://github.com/goauthentik/authentik/pull/19088) - core: bump library/node from `ccfd9da` to `03729a7` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19125](https://github.com/goauthentik/authentik/pull/19125) - core, web: bump qs from 6.14.0 to 6.14.1 in /packages/docusaurus-config by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19130](https://github.com/goauthentik/authentik/pull/19130) - website/integrations: karakeep: don't hardcode wellknown's slug by [@&#8203;pippo73](https://github.com/pippo73) in [goauthentik/authentik#19127](https://github.com/goauthentik/authentik/pull/19127) - web: disable user settings fields when changes are not allowed by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19132](https://github.com/goauthentik/authentik/pull/19132) - website/docs: endpoint agent release notes by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19042](https://github.com/goauthentik/authentik/pull/19042) - website/docs: fix build by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19148](https://github.com/goauthentik/authentik/pull/19148) - web: Token Form Fixes by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19121](https://github.com/goauthentik/authentik/pull/19121) - web/user: fix consent delete form missing details by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19147](https://github.com/goauthentik/authentik/pull/19147) - web: bump globals from 16.5.0 to 17.0.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19154](https://github.com/goauthentik/authentik/pull/19154) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19135](https://github.com/goauthentik/authentik/pull/19135) - ci: bump int128/docker-manifest-create-action from 2.10.0 to 2.12.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19138](https://github.com/goauthentik/authentik/pull/19138) - website/integrations: vaultwarden: add custom email scope by [@&#8203;williamkray](https://github.com/williamkray) in [goauthentik/authentik#19160](https://github.com/goauthentik/authentik/pull/19160) - stages/authenticator\_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19137](https://github.com/goauthentik/authentik/pull/19137) - core: handle deserialization errors from FileField migration by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19067](https://github.com/goauthentik/authentik/pull/19067) - web: fix slug auto-updating when editing existing applications by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19169](https://github.com/goauthentik/authentik/pull/19169) - web: Fix user library colors, modal z-indexes, table progress bars by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19152](https://github.com/goauthentik/authentik/pull/19152) - web/admin: adjust sync threshold, add tooltip by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19131](https://github.com/goauthentik/authentik/pull/19131) - website/docs: remove duplicates in slo docs by [@&#8203;nmasnadithya](https://github.com/nmasnadithya) in [goauthentik/authentik#19170](https://github.com/goauthentik/authentik/pull/19170) - lifecycle: fix migration conn\_options for psycopg connection by [@&#8203;D-Tasker207](https://github.com/D-Tasker207) in [goauthentik/authentik#19134](https://github.com/goauthentik/authentik/pull/19134) - web: bump knip from 5.78.0 to 5.79.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19181](https://github.com/goauthentik/authentik/pull/19181) - ci: bump getsentry/action-release from 3.4.0 to 3.5.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19183](https://github.com/goauthentik/authentik/pull/19183) - web: bump [@&#8203;formatjs/intl-listformat](https://github.com/formatjs/intl-listformat) from 8.1.0 to 8.1.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19182](https://github.com/goauthentik/authentik/pull/19182) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19179](https://github.com/goauthentik/authentik/pull/19179) - lib: update error logging by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#18628](https://github.com/goauthentik/authentik/pull/18628) - website/integrations: make grafana terraform section expand by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19192](https://github.com/goauthentik/authentik/pull/19192) - core: add prettier failure on duplicate group names by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#18941](https://github.com/goauthentik/authentik/pull/18941) - web/maintenance: no missing element type definitions by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#18950](https://github.com/goauthentik/authentik/pull/18950) - root: codespell: ignore Python virtual env, group patterns. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19180](https://github.com/goauthentik/authentik/pull/19180) - web: Merge branch -- Stale notifications, synchronized context objects, rendering fixes by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19141](https://github.com/goauthentik/authentik/pull/19141) - website/docs: Add docs for roles by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19196](https://github.com/goauthentik/authentik/pull/19196) - web: Defer table refresh, visibility checks. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19194](https://github.com/goauthentik/authentik/pull/19194) - rbac: Add show all to roles tab, add role tab to groups by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19097](https://github.com/goauthentik/authentik/pull/19097) - website/docs: rewrite section about users and perms by [@&#8203;tanberry](https://github.com/tanberry) in [goauthentik/authentik#19195](https://github.com/goauthentik/authentik/pull/19195) - core: add last\_login filter to users API by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#18993](https://github.com/goauthentik/authentik/pull/18993) - web: bump the eslint group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19205](https://github.com/goauthentik/authentik/pull/19205) - admin/files: support %(theme)s variable in media file paths by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19108](https://github.com/goauthentik/authentik/pull/19108) - website/integrations: glpi: add step by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19208](https://github.com/goauthentik/authentik/pull/19208) - web: bump knip from 5.79.0 to 5.80.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19207](https://github.com/goauthentik/authentik/pull/19207) - core: bump axllent/mailpit from v1.28.0 to v1.28.1 in /tests/e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19204](https://github.com/goauthentik/authentik/pull/19204) - lifecycle/aws: bump aws-cdk from 2.1100.1 to 2.1100.2 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19203](https://github.com/goauthentik/authentik/pull/19203) - core: bump goauthentik.io/api/v3 from 3.2026020.6 to 3.2026020.7 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19202](https://github.com/goauthentik/authentik/pull/19202) - translate: Updates for project authentik and language pt\_BR by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#19082](https://github.com/goauthentik/authentik/pull/19082) - web/maintenance: lint pass to add missing HTMLElementEventMap entries by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#18953](https://github.com/goauthentik/authentik/pull/18953) - outpost/proxyv2: reduce max number of postgres connections by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19211](https://github.com/goauthentik/authentik/pull/19211) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19200](https://github.com/goauthentik/authentik/pull/19200) - website/docs: revisit endpoint docs the nth by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19116](https://github.com/goauthentik/authentik/pull/19116) - ci: bump astral-sh/setup-uv from 7.1.6 to 7.2.0 in /.github/actions/setup by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19221](https://github.com/goauthentik/authentik/pull/19221) - endpoints: include license status in agent config by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19227](https://github.com/goauthentik/authentik/pull/19227) - web: bump [@&#8203;formatjs/intl-listformat](https://github.com/formatjs/intl-listformat) from 8.1.1 to 8.1.2 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19220](https://github.com/goauthentik/authentik/pull/19220) - lifecycle/aws: bump aws-cdk from 2.1100.2 to 2.1100.3 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19219](https://github.com/goauthentik/authentik/pull/19219) - core: bump goauthentik.io/api/v3 from 3.2026020.7 to 3.2026020.8 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19218](https://github.com/goauthentik/authentik/pull/19218) - stages/authenticator\_static: set max token length to 100 chars by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19162](https://github.com/goauthentik/authentik/pull/19162) - website/glossary: improve by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#18969](https://github.com/goauthentik/authentik/pull/18969) - core: fix read replica routing during transactions by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19086](https://github.com/goauthentik/authentik/pull/19086) - website: Fix typos. by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19243](https://github.com/goauthentik/authentik/pull/19243) - core: bump goauthentik.io/api/v3 from 3.2026020.8 to 3.2026020.10 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19242](https://github.com/goauthentik/authentik/pull/19242) - website/integrations: update AWS by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#17861](https://github.com/goauthentik/authentik/pull/17861) - website/docs: update github social login script example by [@&#8203;busybox11](https://github.com/busybox11) in [goauthentik/authentik#19246](https://github.com/goauthentik/authentik/pull/19246) - web: bump vite from 7.3.0 to 7.3.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19245](https://github.com/goauthentik/authentik/pull/19245) - web: bump the rollup group across 1 directory with 4 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19206](https://github.com/goauthentik/authentik/pull/19206) - stages/prompt: optimize API endpoints by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19251](https://github.com/goauthentik/authentik/pull/19251) - website/docs: update entra id provider docs by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#18366](https://github.com/goauthentik/authentik/pull/18366) - website/integations: fix aws spelling by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19253](https://github.com/goauthentik/authentik/pull/19253) - stages/password: replace session-based retries with reputation by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18643](https://github.com/goauthentik/authentik/pull/18643) - web: bump chromedriver from 143.0.3 to 143.0.4 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19244](https://github.com/goauthentik/authentik/pull/19244) - web/admin: add banner to flow import form by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19288](https://github.com/goauthentik/authentik/pull/19288) - core: bump django from v5.2.9 to 5.2.10 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19290](https://github.com/goauthentik/authentik/pull/19290) - endpoints: show agent version by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19239](https://github.com/goauthentik/authentik/pull/19239) - core: bump urllib3 from 2.5.0 to v2.6.3 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19287](https://github.com/goauthentik/authentik/pull/19287) - web: bump knip from 5.80.0 to 5.80.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19301](https://github.com/goauthentik/authentik/pull/19301) - web: Fix flow inspector advancement event. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19309](https://github.com/goauthentik/authentik/pull/19309) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19237](https://github.com/goauthentik/authentik/pull/19237) - website/docs: deprecate GCDT auth stage by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19306](https://github.com/goauthentik/authentik/pull/19306) - website/docs: Fix typo in GitHub OAuth Source instructions by [@&#8203;tcrasset](https://github.com/tcrasset) in [goauthentik/authentik#18936](https://github.com/goauthentik/authentik/pull/18936) - website/docs: update m2m doc by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#18963](https://github.com/goauthentik/authentik/pull/18963) - website/docs: Fix documentation example for `app_entitlements_attributes`. by [@&#8203;sebastianw](https://github.com/sebastianw) in [goauthentik/authentik#19316](https://github.com/goauthentik/authentik/pull/19316) - website/docs: add flow import warnings by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19307](https://github.com/goauthentik/authentik/pull/19307) - web: bump pino from 10.1.0 to 10.1.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19333](https://github.com/goauthentik/authentik/pull/19333) - web: bump knip from 5.80.1 to 5.80.2 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19332](https://github.com/goauthentik/authentik/pull/19332) - core: bump axllent/mailpit from v1.28.1 to v1.28.2 in /tests/e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19329](https://github.com/goauthentik/authentik/pull/19329) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.0.3 to 25.0.6 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19331](https://github.com/goauthentik/authentik/pull/19331) - core: bump library/nginx from `ca871a8` to `7272239` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19334](https://github.com/goauthentik/authentik/pull/19334) - website/docs: update unique email policy by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19305](https://github.com/goauthentik/authentik/pull/19305) - web: bump [@&#8203;types/react](https://github.com/types/react) from 19.2.7 to 19.2.8 in /web in the react group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19330](https://github.com/goauthentik/authentik/pull/19330) - web: Images styles, theming by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19233](https://github.com/goauthentik/authentik/pull/19233) - website/docs: update LDAP provider docs by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#18272](https://github.com/goauthentik/authentik/pull/18272) - web: Flow info, localization, back button. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19234](https://github.com/goauthentik/authentik/pull/19234) - web: bump type-fest from 5.3.1 to 5.4.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19354](https://github.com/goauthentik/authentik/pull/19354) - core: bump goauthentik.io/api/v3 from 3.2026020.10 to 3.2026020.11 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19300](https://github.com/goauthentik/authentik/pull/19300) - ci: bump actions/setup-go from 6.1.0 to 6.2.0 in /.github/actions/setup by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19352](https://github.com/goauthentik/authentik/pull/19352) - web: bump the bundler group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19349](https://github.com/goauthentik/authentik/pull/19349) - ci: bump actions/setup-go from 6.1.0 to 6.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19351](https://github.com/goauthentik/authentik/pull/19351) - web: bump [@&#8203;sentry/browser](https://github.com/sentry/browser) from 10.32.1 to 10.33.0 in /web in the sentry group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19347](https://github.com/goauthentik/authentik/pull/19347) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.0.6 to 25.0.7 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19353](https://github.com/goauthentik/authentik/pull/19353) - core: bump library/nginx from `7272239` to `06eb0c8` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19350](https://github.com/goauthentik/authentik/pull/19350) - packages/django-dramatiq-postgres: broker: empty message after task completed successfully by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19340](https://github.com/goauthentik/authentik/pull/19340) - core: bump jsii from 1.120.0 to v1.125.0 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19268](https://github.com/goauthentik/authentik/pull/19268) - core: bump microsoft-kiota-abstractions from 1.9.7 to v1.9.8 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19270](https://github.com/goauthentik/authentik/pull/19270) - core: bump microsoft-kiota-serialization-json from 1.9.7 to v1.9.8 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19272](https://github.com/goauthentik/authentik/pull/19272) - core: bump orjson from 3.11.4 to v3.11.5 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19276](https://github.com/goauthentik/authentik/pull/19276) - core: bump platformdirs from 4.5.0 to v4.5.1 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19278](https://github.com/goauthentik/authentik/pull/19278) - core: bump protobuf from 6.33.1 to v6.33.2 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19280](https://github.com/goauthentik/authentik/pull/19280) - core: bump ua-parser-builtins from 0.18.0.post1 to v202601 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19286](https://github.com/goauthentik/authentik/pull/19286) - core: bump cbor2 from 5.7.1 to v5.8.0 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19263](https://github.com/goauthentik/authentik/pull/19263) - core: bump microsoft-kiota-serialization-multipart from 1.9.7 to v1.9.8 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19273](https://github.com/goauthentik/authentik/pull/19273) - core: bump microsoft-kiota-serialization-form from 1.9.7 to v1.9.8 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19271](https://github.com/goauthentik/authentik/pull/19271) - core: bump boto3 from 1.42.1 to v1.42.24 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19261](https://github.com/goauthentik/authentik/pull/19261) - core: bump pynacl from 1.6.1 to v1.6.2 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19281](https://github.com/goauthentik/authentik/pull/19281) - core: bump opentelemetry-api from 1.39.0 to v1.39.1 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19275](https://github.com/goauthentik/authentik/pull/19275) - core: bump pathspec from 0.12.1 to v1.0.2 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19277](https://github.com/goauthentik/authentik/pull/19277) - core: bump jsonschema from 4.25.1 to v4.26.0 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19269](https://github.com/goauthentik/authentik/pull/19269) - core: bump txaio from 25.9.2 to v25.12.2 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19284](https://github.com/goauthentik/authentik/pull/19284) - core: bump anyio from 4.12.0 to v4.12.1 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19258](https://github.com/goauthentik/authentik/pull/19258) - core: bump aiohttp from 3.13.2 to v3.13.3 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19257](https://github.com/goauthentik/authentik/pull/19257) - core: bump google-auth-httplib2 from 0.2.1 to v0.3.0 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19266](https://github.com/goauthentik/authentik/pull/19266) - core: bump sqlparse from 0.5.4 to v0.5.5 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19283](https://github.com/goauthentik/authentik/pull/19283) - core: bump certifi from 2025.11.12 to v2026.1.4 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19264](https://github.com/goauthentik/authentik/pull/19264) - core: bump autobahn from 25.11.1 to v25.12.2 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19259](https://github.com/goauthentik/authentik/pull/19259) - core: bump pyparsing from 3.2.5 to v3.3.1 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19282](https://github.com/goauthentik/authentik/pull/19282) - core: bump types-requests from 2.32.4.20250913 to v2.32.4.20260107 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19285](https://github.com/goauthentik/authentik/pull/19285) - core: bump greenlet from 3.2.4 to v3.3.0 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19267](https://github.com/goauthentik/authentik/pull/19267) - core: bump google-auth from 2.43.0 to v2.47.0 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19265](https://github.com/goauthentik/authentik/pull/19265) - core: bump azure-core from 1.36.0 to v1.37.0 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19260](https://github.com/goauthentik/authentik/pull/19260) - internal: rework liveness probe and proxy by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19312](https://github.com/goauthentik/authentik/pull/19312) - core: bump proto-plus from 1.26.1 to v1.27.0 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19279](https://github.com/goauthentik/authentik/pull/19279) - core: bump microsoft-kiota-serialization-text from 1.9.7 to v1.9.8 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19274](https://github.com/goauthentik/authentik/pull/19274) - core: bump google-api-core from 2.28.1 to v2.29.0 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19359](https://github.com/goauthentik/authentik/pull/19359) - core: bump pathspec from 1.0.2 to v1.0.3 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19363](https://github.com/goauthentik/authentik/pull/19363) - core: bump azure-core from 1.37.0 to v1.38.0 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19357](https://github.com/goauthentik/authentik/pull/19357) - web/admin: always retrieve selected provider when editing the application by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#19341](https://github.com/goauthentik/authentik/pull/19341) - revert: web: disable user settings fields when changes are not allowed by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19230](https://github.com/goauthentik/authentik/pull/19230) - core: bump zope-interface from 8.1.1 to v8.2 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19367](https://github.com/goauthentik/authentik/pull/19367) - core: bump protobuf from 6.33.2 to v6.33.4 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19365](https://github.com/goauthentik/authentik/pull/19365) - core: bump prometheus-client from 0.23.1 to v0.24.0 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19364](https://github.com/goauthentik/authentik/pull/19364) - internal/outpost: improve PostgreSQL connection options parsing by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19118](https://github.com/goauthentik/authentik/pull/19118) - outpost/proxyv2: fix stale session cookie causing 400 error in createState by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19026](https://github.com/goauthentik/authentik/pull/19026) - website/docs: update location for logs on windows by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19371](https://github.com/goauthentik/authentik/pull/19371) - core: bump boto3 from 1.42.24 to v1.42.26 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19358](https://github.com/goauthentik/authentik/pull/19358) - web/elements: hidden secrets not propagating by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#19029](https://github.com/goauthentik/authentik/pull/19029) - core: bump websockets from 15.0.1 to v16.0 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19366](https://github.com/goauthentik/authentik/pull/19366) - core: bump httplib2 from 0.31.0 to v0.31.1 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19360](https://github.com/goauthentik/authentik/pull/19360) - core: bump microsoft-kiota-authentication-azure from 1.9.7 to v1.9.8 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19361](https://github.com/goauthentik/authentik/pull/19361) - stages/authenticator\_validate: decrease reputation on failed MFA attempt by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19378](https://github.com/goauthentik/authentik/pull/19378) - core: bump microsoft-kiota-http from 1.9.7 to v1.9.8 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19362](https://github.com/goauthentik/authentik/pull/19362) - web: UI Locale Fixes by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19235](https://github.com/goauthentik/authentik/pull/19235) - website/integrations: Add DataDog by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19320](https://github.com/goauthentik/authentik/pull/19320) - web: bump the eslint group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19348](https://github.com/goauthentik/authentik/pull/19348) - core: Update supported versions in SECURITY.md by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19385](https://github.com/goauthentik/authentik/pull/19385) - website/docs: update gws provider docs by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#18286](https://github.com/goauthentik/authentik/pull/18286) - web/admin: Pluralize Certificate-Key Pair deletion confirmation by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19389](https://github.com/goauthentik/authentik/pull/19389) - website/docs: mention dynamic overrides in redirect stage documentation by [@&#8203;severin](https://github.com/severin) in [goauthentik/authentik#19368](https://github.com/goauthentik/authentik/pull/19368) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.0.7 to 25.0.8 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19392](https://github.com/goauthentik/authentik/pull/19392) - website/docs: add import to discord policy by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19397](https://github.com/goauthentik/authentik/pull/19397) - website/docs: remove "beta" tag from 2025.12 by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#19404](https://github.com/goauthentik/authentik/pull/19404) - core: bump library/node from `03729a7` to `6222695` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19393](https://github.com/goauthentik/authentik/pull/19393) - core: bump library/nginx from `06eb0c8` to `e3a22a7` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19394](https://github.com/goauthentik/authentik/pull/19394) - core: bump xmlsec from 1.3.16 to 1.3.17 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19411](https://github.com/goauthentik/authentik/pull/19411) - core: bump lxml from 6.0.0 to 6.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19409](https://github.com/goauthentik/authentik/pull/19409) - core: bump black from 25.1.0 to 25.12.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19412](https://github.com/goauthentik/authentik/pull/19412) - core: bump drf-orjson-renderer from 1.7.3 to 1.8.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19415](https://github.com/goauthentik/authentik/pull/19415) - core: bump python-kadmin-rs from 0.6.1 to 0.6.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19416](https://github.com/goauthentik/authentik/pull/19416) - core: bump ruff from 0.11.9 to 0.14.11 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19410](https://github.com/goauthentik/authentik/pull/19410) - core: bump pdoc from 15.0.3 to 16.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19413](https://github.com/goauthentik/authentik/pull/19413) - core: bump bpython from 0.25 to 0.26 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19408](https://github.com/goauthentik/authentik/pull/19408) - core: bump wsproto from 1.2.0 to 1.3.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19417](https://github.com/goauthentik/authentik/pull/19417) - website/docs: add 2026.2 release notes draft page by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#19418](https://github.com/goauthentik/authentik/pull/19418) - core: remove session migration by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#14568](https://github.com/goauthentik/authentik/pull/14568) - core: bump debugpy from 1.8.14 to 1.8.19 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19414](https://github.com/goauthentik/authentik/pull/19414) - core: bump geoip2 from 5.1.0 to 5.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19429](https://github.com/goauthentik/authentik/pull/19429) - core: bump importlib-metadata from 8.6.1 to 8.7.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19430](https://github.com/goauthentik/authentik/pull/19430) - web/startup: deprecated theme names break theming by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#19431](https://github.com/goauthentik/authentik/pull/19431) - core: bump freezegun from 1.5.1 to 1.5.5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19423](https://github.com/goauthentik/authentik/pull/19423) - core: bump bandit from 1.8.3 to 1.9.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19422](https://github.com/goauthentik/authentik/pull/19422) - core: bump pyyaml from 6.0.2 to 6.0.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19426](https://github.com/goauthentik/authentik/pull/19426) - core: bump django-stubs\[compatible-mypy] from 5.2.5 to 5.2.8 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19424](https://github.com/goauthentik/authentik/pull/19424) - core: bump django-pgtrigger from 4.15.2 to 4.17.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19428](https://github.com/goauthentik/authentik/pull/19428) - core: bump aws-cdk-lib from 2.188.0 to 2.234.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19427](https://github.com/goauthentik/authentik/pull/19427) - core: bump pytest from 8.3.5 to 9.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19425](https://github.com/goauthentik/authentik/pull/19425) - core: bump types-ldap3 from 2.9.13.20250622 to 2.9.13.20251121 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19438](https://github.com/goauthentik/authentik/pull/19438) - core: bump django-pglock from 1.7.2 to 1.8.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19437](https://github.com/goauthentik/authentik/pull/19437) - core: bump cryptography from 45.0.5 to 46.0.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19439](https://github.com/goauthentik/authentik/pull/19439) - core: bump pydantic from 2.11.7 to 2.12.5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19435](https://github.com/goauthentik/authentik/pull/19435) - core: bump twilio from 9.7.0 to 9.9.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19434](https://github.com/goauthentik/authentik/pull/19434) - core: bump sentry-sdk from 2.33.2 to 2.49.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19441](https://github.com/goauthentik/authentik/pull/19441) - core: bump coverage\[toml] from 7.8.0 to 7.13.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19446](https://github.com/goauthentik/authentik/pull/19446) - core: bump setproctitle from 1.3.6 to 1.3.7 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19447](https://github.com/goauthentik/authentik/pull/19447) - core: bump django-filter from 25.1 to 25.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19444](https://github.com/goauthentik/authentik/pull/19444) - core: bump paramiko from 3.5.1 to 4.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19440](https://github.com/goauthentik/authentik/pull/19440) - core: bump gssapi from 1.9.0 to 1.10.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19436](https://github.com/goauthentik/authentik/pull/19436) - core: bump fido2 from 2.0.0 to 2.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19445](https://github.com/goauthentik/authentik/pull/19445) - core: bump webauthn from 2.6.0 to 2.7.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19442](https://github.com/goauthentik/authentik/pull/19442) - core: bump uvicorn\[standard] from 0.35.0 to 0.40.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19453](https://github.com/goauthentik/authentik/pull/19453) - core: bump psycopg\[c,pool] from 3.2.9 to 3.3.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19452](https://github.com/goauthentik/authentik/pull/19452) - core: bump djangorestframework-stubs\[compatible-mypy] from 3.16.3 to 3.16.7 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19449](https://github.com/goauthentik/authentik/pull/19449) - core: bump pytest-randomly from 3.16.0 to 4.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19456](https://github.com/goauthentik/authentik/pull/19456) - core: bump structlog from 25.4.0 to 25.5.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19450](https://github.com/goauthentik/authentik/pull/19450) - core: bump constructs from 10.4.2 to 10.4.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19451](https://github.com/goauthentik/authentik/pull/19451) - core: bump msgraph-sdk from 1.39.0 to 1.52.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19454](https://github.com/goauthentik/authentik/pull/19454) - core: bump selenium from 4.32.0 to 4.39.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19455](https://github.com/goauthentik/authentik/pull/19455) - core: bump google-api-python-client from 2.177.0 to 2.188.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19443](https://github.com/goauthentik/authentik/pull/19443) - core: bump mypy from 1.18.2 to 1.19.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19457](https://github.com/goauthentik/authentik/pull/19457) - core: bump channels from 4.3.1 to 4.3.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19458](https://github.com/goauthentik/authentik/pull/19458) - root: Python 3.14 by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#17313](https://github.com/goauthentik/authentik/pull/17313) - ci: fix checkout stable (for 2025.12) by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#19448](https://github.com/goauthentik/authentik/pull/19448) - lib: use orjson for structlog json by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19462](https://github.com/goauthentik/authentik/pull/19462) - root: upgrade ruff lint for 3.14 by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19461](https://github.com/goauthentik/authentik/pull/19461) - website/integrations: add MinIO AIStor configuration via environment variables by [@&#8203;Fredouye](https://github.com/Fredouye) in [goauthentik/authentik#19337](https://github.com/goauthentik/authentik/pull/19337) - web: bump prettier from 3.7.4 to 3.8.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19471](https://github.com/goauthentik/authentik/pull/19471) - core: bump library/node from 25.2.1-trixie to 25.3.0-trixie in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19468](https://github.com/goauthentik/authentik/pull/19468) - core: bump library/nginx from `e3a22a7` to `c881927` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19469](https://github.com/goauthentik/authentik/pull/19469) - stages/authenticator\_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19464](https://github.com/goauthentik/authentik/pull/19464) - revert: lib: use orjson for structlog json by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19478](https://github.com/goauthentik/authentik/pull/19478) - providers/oauth2: allow property mappings to override scope claim in access tokens by [@&#8203;JMLX42](https://github.com/JMLX42) in [goauthentik/authentik#19226](https://github.com/goauthentik/authentik/pull/19226) - root: adjust makefile for non-brew macos by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19479](https://github.com/goauthentik/authentik/pull/19479) - endpoints/connectors/agent: Skip Endpoint stage on device IA & fix confusing identification subtext by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19482](https://github.com/goauthentik/authentik/pull/19482) - website/docs: limiting permissions of AD service account by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19483](https://github.com/goauthentik/authentik/pull/19483) - endpoints/connectors/agent: add tests for IA endpoint stage by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19487](https://github.com/goauthentik/authentik/pull/19487) - web: Z-Index Fixes, Mobile Sidebar Behavior. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19460](https://github.com/goauthentik/authentik/pull/19460) - web/admin: fix switches by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19493](https://github.com/goauthentik/authentik/pull/19493) - lifecycle: re-add quoted types for gunicorn config by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19500](https://github.com/goauthentik/authentik/pull/19500) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19386](https://github.com/goauthentik/authentik/pull/19386) - website/docs: release notes: Update release notes for version 2025.12.1 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19502](https://github.com/goauthentik/authentik/pull/19502) - sources/kerberos: update to new python-kadmin-rs by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19491](https://github.com/goauthentik/authentik/pull/19491) - root, web: Bump package-lock.json by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19501](https://github.com/goauthentik/authentik/pull/19501) - lifecycle/aws: bump aws-cdk from 2.1100.3 to 2.1101.0 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19510](https://github.com/goauthentik/authentik/pull/19510) - core: bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19507](https://github.com/goauthentik/authentik/pull/19507) - web: bump [@&#8203;sentry/browser](https://github.com/sentry/browser) from 10.33.0 to 10.34.0 in /web in the sentry group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19466](https://github.com/goauthentik/authentik/pull/19466) - web: bump pino from 10.1.1 to 10.2.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19474](https://github.com/goauthentik/authentik/pull/19474) - web: bump knip from 5.80.2 to 5.81.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19475](https://github.com/goauthentik/authentik/pull/19475) - core: bump aws-cdk-lib from 2.234.1 to 2.235.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19511](https://github.com/goauthentik/authentik/pull/19511) - core: bump github.com/getsentry/sentry-go from 0.40.0 to 0.41.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19508](https://github.com/goauthentik/authentik/pull/19508) - core: bump ruff from 0.14.11 to 0.14.13 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19513](https://github.com/goauthentik/authentik/pull/19513) - core: bump kubernetes from 33.1.0 to 35.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19514](https://github.com/goauthentik/authentik/pull/19514) - ci: bump actions/setup-node from 6.1.0 to 6.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19470](https://github.com/goauthentik/authentik/pull/19470) - ci: bump actions/setup-node from 6.1.0 to 6.2.0 in /.github/actions/setup by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19472](https://github.com/goauthentik/authentik/pull/19472) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.0.8 to 25.0.9 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19516](https://github.com/goauthentik/authentik/pull/19516) - web: bump [@&#8203;formatjs/intl-listformat](https://github.com/formatjs/intl-listformat) from 8.1.2 to 8.2.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19515](https://github.com/goauthentik/authentik/pull/19515) - website: Omit Drafts From Version Picker by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19505](https://github.com/goauthentik/authentik/pull/19505) - tests/e2e: Add delay and serialized rollback to saml e2e test by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#18840](https://github.com/goauthentik/authentik/pull/18840) - core: bump pyasn1 from 0.6.1 to 0.6.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19531](https://github.com/goauthentik/authentik/pull/19531) - website/integrations: portainer: add automatic team management instructions by [@&#8203;DonQuinleone](https://github.com/DonQuinleone) in [goauthentik/authentik#19530](https://github.com/goauthentik/authentik/pull/19530) - website/docs: endpoint devices: update device code flow instructions by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19528](https://github.com/goauthentik/authentik/pull/19528) - \*: Auto compress images by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19533](https://github.com/goauthentik/authentik/pull/19533) - admin/files: fix manageable check blocking file creation on fresh installs by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19547](https://github.com/goauthentik/authentik/pull/19547) - admin/files: fix duplicate bucket name in presigned URLs with custom domain by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19537](https://github.com/goauthentik/authentik/pull/19537) - ci: bump actions/cache from 5.0.1 to 5.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19571](https://github.com/goauthentik/authentik/pull/19571) - core: bump constructs from 10.4.4 to 10.4.5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19563](https://github.com/goauthentik/authentik/pull/19563) - core: bump axllent/mailpit from v1.28.2 to v1.28.3 in /tests/e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19565](https://github.com/goauthentik/authentik/pull/19565) - ci: bump int128/docker-manifest-create-action from 2.12.0 to 2.13.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19572](https://github.com/goauthentik/authentik/pull/19572) - website/docs: add s3 perms by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19579](https://github.com/goauthentik/authentik/pull/19579) - web/forms: fix invalid date error for empty datetime-local inputs by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19561](https://github.com/goauthentik/authentik/pull/19561) - website/docs: add Arcane integration by [@&#8203;steilerDev](https://github.com/steilerDev) in [goauthentik/authentik#19584](https://github.com/goauthentik/authentik/pull/19584) - core: bump black from 25.12.0 to 26.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19567](https://github.com/goauthentik/authentik/pull/19567) - core: bump bandit from 1.9.2 to 1.9.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19566](https://github.com/goauthentik/authentik/pull/19566) - web: update [@&#8203;goauthentik/api](https://github.com/goauthentik/api) by [@&#8203;Ma27](https://github.com/Ma27) in [goauthentik/authentik#19542](https://github.com/goauthentik/authentik/pull/19542) - tests: improve e2e/integration test reliability by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19540](https://github.com/goauthentik/authentik/pull/19540) - web: bump knip from 5.81.0 to 5.82.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19603](https://github.com/goauthentik/authentik/pull/19603) - web: bump pino from 10.2.0 to 10.2.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19602](https://github.com/goauthentik/authentik/pull/19602) - web: bump the swc group across 1 directory with 12 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19601](https://github.com/goauthentik/authentik/pull/19601) - web: bump the rollup group across 1 directory with 4 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19600](https://github.com/goauthentik/authentik/pull/19600) - web: bump the eslint group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19599](https://github.com/goauthentik/authentik/pull/19599) - core: bump aws-cdk-lib from 2.235.0 to 2.235.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19598](https://github.com/goauthentik/authentik/pull/19598) - web: bump [@&#8203;sentry/browser](https://github.com/sentry/browser) from 10.34.0 to 10.35.0 in /web in the sentry group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19597](https://github.com/goauthentik/authentik/pull/19597) - core: bump fido2 from 2.1.0 to 2.1.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19596](https://github.com/goauthentik/authentik/pull/19596) - core: bump openapitools/openapi-generator-cli from v7.18.0 to v7.19.0 in /scripts/api by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19595](https://github.com/goauthentik/authentik/pull/19595) - core: bump goauthentik.io/api/v3 from 3.2026020.11 to 3.2026020.12 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19594](https://github.com/goauthentik/authentik/pull/19594) - core: bump selenium from 4.39.0 to 4.40.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19564](https://github.com/goauthentik/authentik/pull/19564) - endpoints: fix endpoints stage marked as enterprise by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19607](https://github.com/goauthentik/authentik/pull/19607) - web: bump type-fest from 5.4.0 to 5.4.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19473](https://github.com/goauthentik/authentik/pull/19473) - policies: fix Providers authentication\_flow not used when set by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19609](https://github.com/goauthentik/authentik/pull/19609) - integrations: add saml steps to mattermost by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19590](https://github.com/goauthentik/authentik/pull/19590) - providers/saml: allow encryption certificates without private keys by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19526](https://github.com/goauthentik/authentik/pull/19526) - providers/saml: fix structure of encrypted saml assertion by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19592](https://github.com/goauthentik/authentik/pull/19592) - sources/saml: Fix signature verification order to accommodate encrypted assertions by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19593](https://github.com/goauthentik/authentik/pull/19593) - lib/sync/outgoing: handle deletions even if object does not exist in database by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#18968](https://github.com/goauthentik/authentik/pull/18968) - website/docs: endpoints devices: typo fix by [@&#8203;fheisler](https://github.com/fheisler) in [goauthentik/authentik#19621](https://github.com/goauthentik/authentik/pull/19621) - website/docs: sources: add keycloak by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19591](https://github.com/goauthentik/authentik/pull/19591) - web/user: fix Firefox for Android infinite render loop in user library by [@&#8203;Gulianrdgd](https://github.com/Gulianrdgd) in [goauthentik/authentik#19379](https://github.com/goauthentik/authentik/pull/19379) - web/forms: fix forms not resetting state when modal closes by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19562](https://github.com/goauthentik/authentik/pull/19562) - web/elements: reduce spacing between collapsible form groups by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19627](https://github.com/goauthentik/authentik/pull/19627) - website/docs: Update saml google workspace guide by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19624](https://github.com/goauthentik/authentik/pull/19624) - website/integrations: update qnap by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19644](https://github.com/goauthentik/authentik/pull/19644) - core: bump sentry-sdk from 2.49.0 to 2.50.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19630](https://github.com/goauthentik/authentik/pull/19630) - web: bump [@&#8203;types/react](https://github.com/types/react) from 19.2.8 to 19.2.9 in /web in the react group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19631](https://github.com/goauthentik/authentik/pull/19631) - core: bump django-stubs\[compatible-mypy] from 5.2.8 to 5.2.9 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19629](https://github.com/goauthentik/authentik/pull/19629) - core: bump github.com/pires/go-proxyproto from 0.8.1 to 0.9.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19628](https://github.com/goauthentik/authentik/pull/19628) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19535](https://github.com/goauthentik/authentik/pull/19535) - core: bump library/node from 25.3.0-trixie to 25.4.0-trixie in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19632](https://github.com/goauthentik/authentik/pull/19632) - website/docs: update endpoint agent windows log location by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19645](https://github.com/goauthentik/authentik/pull/19645) - sources/saml: Set AuthnRequest ProtocolBinding to HTTP-POST instead of HTTP-Redirect by [@&#8203;ikob](https://github.com/ikob) in [goauthentik/authentik#17378](https://github.com/goauthentik/authentik/pull/17378) - sources/saml: properly catch InvalidSignature exception by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19641](https://github.com/goauthentik/authentik/pull/19641) - web: Reduce Sentry Development Errors by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19504](https://github.com/goauthentik/authentik/pull/19504) - web/a11y: Locale selector select styles, contrast. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19634](https://github.com/goauthentik/authentik/pull/19634) - web/elements: remove pfbase everywhere by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#19623](https://github.com/goauthentik/authentik/pull/19623) - web/flows: update icon and text for device classes by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19648](https://github.com/goauthentik/authentik/pull/19648) - web/admin: fix captcha stage provider selector not showing saved value by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19555](https://github.com/goauthentik/authentik/pull/19555) - web: bump chromedriver from 143.0.4 to 144.0.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19668](https://github.com/goauthentik/authentik/pull/19668) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19654](https://github.com/goauthentik/authentik/pull/19654) - core: bump packaging from 25.0 to 26.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19659](https://github.com/goauthentik/authentik/pull/19659) - web: bump [@&#8203;sentry/browser](https://github.com/sentry/browser) from 10.35.0 to 10.36.0 in /web in the sentry group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19660](https://github.com/goauthentik/authentik/pull/19660) - ci: bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19662](https://github.com/goauthentik/authentik/pull/19662) - ci: bump actions/setup-python from 6.1.0 to 6.2.0 in /.github/actions/setup by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19664](https://github.com/goauthentik/authentik/pull/19664) - core, web: bump lodash from 4.17.21 to 4.17.23 in /packages/docusaurus-config by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19655](https://github.com/goauthentik/authentik/pull/19655) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.0.9 to 25.0.10 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19669](https://github.com/goauthentik/authentik/pull/19669) - web: bump prettier from 3.8.0 to 3.8.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19667](https://github.com/goauthentik/authentik/pull/19667) - web: bump country-flag-icons from 1.6.4 to 1.6.7 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19666](https://github.com/goauthentik/authentik/pull/19666) - web: bump the storybook group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19661](https://github.com/goauthentik/authentik/pull/19661) - web: bump the rollup group across 1 directory with 4 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19663](https://github.com/goauthentik/authentik/pull/19663) - web: bump core-js from 3.47.0 to 3.48.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19665](https://github.com/goauthentik/authentik/pull/19665) - providers/oauth2: add `logout+jwt` token type for oidc logout token. by [@&#8203;jeroen1602](https://github.com/jeroen1602) in [goauthentik/authentik#19554](https://github.com/goauthentik/authentik/pull/19554) - website/docs: update LDAP search permission instructions by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19676](https://github.com/goauthentik/authentik/pull/19676) - sources/oauth: add fallback for id\_token when profile URL is not available by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19311](https://github.com/goauthentik/authentik/pull/19311) - website/docs: endpoint devices: add serial number note by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19677](https://github.com/goauthentik/authentik/pull/19677) - core: add bulk session revocation by [@&#8203;cdmx-in](https://github.com/cdmx-in) in [goauthentik/authentik#18564](https://github.com/goauthentik/authentik/pull/18564) - providers/proxy: Fix incorrect comparison of redirect URL and CookieDomain by [@&#8203;vitSkalicky](https://github.com/vitSkalicky) in [goauthentik/authentik#15686](https://github.com/goauthentik/authentik/pull/15686) - web/admin: fix brand form sending "undefined" string for blank default application by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19658](https://github.com/goauthentik/authentik/pull/19658) - web/admin: fix file upload not preserving extension for custom names with dots by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19548](https://github.com/goauthentik/authentik/pull/19548) - web/common: add dev middleware to show warnings for consecutive identical requests by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19671](https://github.com/goauthentik/authentik/pull/19671) - web: Form Modal Independence: Part 1 by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19395](https://github.com/goauthentik/authentik/pull/19395) - ci: bump actions/checkout from 6.0.1 to 6.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19696](https://github.com/goauthentik/authentik/pull/19696) - web: bump globals from 17.0.0 to 17.1.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19695](https://github.com/goauthentik/authentik/pull/19695) - web: bump unist-util-visit from 5.0.0 to 5.1.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19694](https://github.com/goauthentik/authentik/pull/19694) - web: bump the bundler group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19693](https://github.com/goauthentik/authentik/pull/19693) - core: bump gunicorn from 23.0.0 to 24.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19692](https://github.com/goauthentik/authentik/pull/19692) - core: bump twilio from 9.9.1 to 9.10.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19691](https://github.com/goauthentik/authentik/pull/19691) - core: bump ruff from 0.14.13 to 0.14.14 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19690](https://github.com/goauthentik/authentik/pull/19690) - core: bump msgraph-sdk from 1.52.0 to 1.53.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19689](https://github.com/goauthentik/authentik/pull/19689) - core: bump goauthentik/selenium from 143.0-ak-0.35.3 to 144.0-ak-0.35.7 in /tests/e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19688](https://github.com/goauthentik/authentik/pull/19688) - lifecycle/aws: bump aws-cdk from 2.1101.0 to 2.1102.0 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19687](https://github.com/goauthentik/authentik/pull/19687) - core: bump goauthentik.io/api/v3 from 3.2026020.12 to 3.2026020.14 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19686](https://github.com/goauthentik/authentik/pull/19686) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19684](https://github.com/goauthentik/authentik/pull/19684) - internal: fix incorrect metric calculation by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19701](https://github.com/goauthentik/authentik/pull/19701) - core: return bad request when user is authenticated and not active by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19706](https://github.com/goauthentik/authentik/pull/19706) - web/admin: fix impersonation form requesting data without being opened by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19673](https://github.com/goauthentik/authentik/pull/19673) - endpoints: FleetDM connector by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18589](https://github.com/goauthentik/authentik/pull/18589) - endpoints/connectors/agent: fix icon by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19722](https://github.com/goauthentik/authentik/pull/19722) - Makefile: add optional uv prefix by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19738](https://github.com/goauthentik/authentik/pull/19738) - website/integrations: paperless-ngx: Update by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19718](https://github.com/goauthentik/authentik/pull/19718) - web: bump playwright from 1.57.0 to 1.58.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19755](https://github.com/goauthentik/authentik/pull/19755) - web: bump country-flag-icons from 1.6.7 to 1.6.8 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19754](https://github.com/goauthentik/authentik/pull/19754) - web: bump pino from 10.2.1 to 10.3.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19752](https://github.com/goauthentik/authentik/pull/19752) - core: bump gunicorn from 24.0.0 to 24.1.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19751](https://github.com/goauthentik/authentik/pull/19751) - core: bump coverage\[toml] from 7.13.1 to 7.13.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19749](https://github.com/goauthentik/authentik/pull/19749) - core: bump cachetools from 6.2.4 to 6.2.5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19750](https://github.com/goauthentik/authentik/pull/19750) - core: bump goauthentik/selenium from 144.0-ak-0.35.7 to 144.0-ak-0.35.8 in /tests/e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19747](https://github.com/goauthentik/authentik/pull/19747) - core: bump aws-cdk-lib from 2.235.1 to 2.236.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19745](https://github.com/goauthentik/authentik/pull/19745) - lifecycle/aws: bump aws-cdk from 2.1102.0 to 2.1103.0 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19744](https://github.com/goauthentik/authentik/pull/19744) - core: bump github.com/pires/go-proxyproto from 0.9.0 to 0.9.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19743](https://github.com/goauthentik/authentik/pull/19743) - core: bump axllent/mailpit from v1.28.3 to v1.28.4 in /tests/e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19748](https://github.com/goauthentik/authentik/pull/19748) - core: bump goauthentik.io/api/v3 from 3.2026020.14 to 3.2026020.15 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19742](https://github.com/goauthentik/authentik/pull/19742) - ci: fix typo in volume path by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19741](https://github.com/goauthentik/authentik/pull/19741) - core: bump djangoql from 0.18.1 to 0.18.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19746](https://github.com/goauthentik/authentik/pull/19746) - web: bump [@&#8203;playwright/test](https://github.com/playwright/test) from 1.57.0 to 1.58.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19753](https://github.com/goauthentik/authentik/pull/19753) - enterprise/audit: Expanded Diff by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19726](https://github.com/goauthentik/authentik/pull/19726) - root: make logged HTTP headers configurable by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19716](https://github.com/goauthentik/authentik/pull/19716) - web/sfe: downgrade bootstrap, add access denied test by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19763](https://github.com/goauthentik/authentik/pull/19763) - internal: fix certificate not refetched if fingerprint changes by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19761](https://github.com/goauthentik/authentik/pull/19761) - root: update client-go generation by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19762](https://github.com/goauthentik/authentik/pull/19762) - website/integrations: Add Elastic Cloud by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19719](https://github.com/goauthentik/authentik/pull/19719) - website/docs: fix Transifex link in translation guide by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19735](https://github.com/goauthentik/authentik/pull/19735) - web/table: align row action icons and tooltip color by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19736](https://github.com/goauthentik/authentik/pull/19736) - web/a11y: CAPTCHA Stage Form by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19670](https://github.com/goauthentik/authentik/pull/19670) - web/elements: stabilize dual-select status height by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19734](https://github.com/goauthentik/authentik/pull/19734) - web: Enforce `challenge` nullish types. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19768](https://github.com/goauthentik/authentik/pull/19768) - website/docs: endpoint devices: fix local device login by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19698](https://github.com/goauthentik/authentik/pull/19698) - ci: bump actions/attest-build-provenance from 3.1.0 to 3.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19783](https://github.com/goauthentik/authentik/pull/19783) - core: bump gssapi from 1.10.1 to 1.11.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19781](https://github.com/goauthentik/authentik/pull/19781) - core: bump openapitools/openapi-diff from 2.1.6 to 2.1.7 in /scripts/api by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19779](https://github.com/goauthentik/authentik/pull/19779) - core: bump github.com/pires/go-proxyproto from 0.9.1 to 0.9.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19778](https://github.com/goauthentik/authentik/pull/19778) - admin/files: add centralized theme variable support for file URLs by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19657](https://github.com/goauthentik/authentik/pull/19657) - providers/oauth2: Support login\_hint by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19498](https://github.com/goauthentik/authentik/pull/19498) - web: bump country-flag-icons from 1.6.8 to 1.6.9 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19785](https://github.com/goauthentik/authentik/pull/19785) - web: bump the react group across 1 directory with 2 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19784](https://github.com/goauthentik/authentik/pull/19784) - web: bump the eslint group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19782](https://github.com/goauthentik/authentik/pull/19782) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19717](https://github.com/goauthentik/authentik/pull/19717) - web: Vendor SFE Bootstrap by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19766](https://github.com/goauthentik/authentik/pull/19766) - core: bump djangoql from 0.18.2 to 0.19.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19780](https://github.com/goauthentik/authentik/pull/19780) - web: bump API Client version by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19760](https://github.com/goauthentik/authentik/pull/19760) - revert: website/integrations: wazuh: Change exchange key generation to 64 bytes by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19759](https://github.com/goauthentik/authentik/pull/19759) - sources/saml: Add testcases for PR [#&#8203;19593](https://github.com/goauthentik/helm/issues/19593) by [@&#8203;ikob](https://github.com/ikob) in [goauthentik/authentik#19647](https://github.com/goauthentik/authentik/pull/19647) - website/docs: fix authenticator sms docs by [@&#8203;macmoritz](https://github.com/macmoritz) in [goauthentik/authentik#19797](https://github.com/goauthentik/authentik/pull/19797) - web: bump globals from 17.1.0 to 17.2.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19811](https://github.com/goauthentik/authentik/pull/19811) - web: bump type-fest from 5.4.1 to 5.4.2 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19810](https://github.com/goauthentik/authentik/pull/19810) - web: bump [@&#8203;types/react](https://github.com/types/react) from 19.2.9 to 19.2.10 in /web in the react group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19809](https://github.com/goauthentik/authentik/pull/19809) - web: bump [@&#8203;goauthentik/api](https://github.com/goauthentik/api) from 2025.12.0-rc1-1765566302 to 2026.2.0-rc1-1769523342 in /web in the goauthentik group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19808](https://github.com/goauthentik/authentik/pull/19808) - web: bump the swc group across 1 directory with 11 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19807](https://github.com/goauthentik/authentik/pull/19807) - web: bump the rollup group across 1 directory with 4 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19806](https://github.com/goauthentik/authentik/pull/19806) - core: bump library/node from 25.4.0-trixie to 25.5.0-trixie in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19805](https://github.com/goauthentik/authentik/pull/19805) - web: bump the storybook group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19804](https://github.com/goauthentik/authentik/pull/19804) - core: bump cachetools from 6.2.5 to 6.2.6 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19803](https://github.com/goauthentik/authentik/pull/19803) - core: bump cryptography from 46.0.3 to 46.0.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19801](https://github.com/goauthentik/authentik/pull/19801) - core: bump github.com/getsentry/sentry-go from 0.41.0 to 0.42.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19800](https://github.com/goauthentik/authentik/pull/19800) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19799](https://github.com/goauthentik/authentik/pull/19799) - web: bump [@&#8203;sentry/browser](https://github.com/sentry/browser) from 10.36.0 to 10.37.0 in /web in the sentry group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19802](https://github.com/goauthentik/authentik/pull/19802) - web: bump [@&#8203;floating-ui/dom](https://github.com/floating-ui/dom) from 1.7.4 to 1.7.5 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19812](https://github.com/goauthentik/authentik/pull/19812) - enterprise/providers: WS-Federation by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19583](https://github.com/goauthentik/authentik/pull/19583) - web: Session UI Config Lifecycle by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19788](https://github.com/goauthentik/authentik/pull/19788) - web/admin: fix toggle-group for bindings now showing up by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19820](https://github.com/goauthentik/authentik/pull/19820) - core: add CC and BCC support to ak\_send\_email and TemplateEmailMessage by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19633](https://github.com/goauthentik/authentik/pull/19633) - web: display custom attributes on admin view pages by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19720](https://github.com/goauthentik/authentik/pull/19720) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.0.10 to 25.1.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19838](https://github.com/goauthentik/authentik/pull/19838) - web: bump chromedriver from 144.0.0 to 144.0.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19837](https://github.com/goauthentik/authentik/pull/19837) - web: bump country-flag-icons from 1.6.9 to 1.6.12 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19836](https://github.com/goauthentik/authentik/pull/19836) - web: bump [@&#8203;goauthentik/api](https://github.com/goauthentik/api) from 2026.2.0-rc1-1769523342 to 2026.2.0-rc1-1769650973 in /web in the goauthentik group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19834](https://github.com/goauthentik/authentik/pull/19834) - core: bump sentry-sdk from 2.50.0 to 2.51.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19833](https://github.com/goauthentik/authentik/pull/19833) - ci: bump docker/login-action from 3.6.0 to 3.7.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19835](https://github.com/goauthentik/authentik/pull/19835) - core: bump pyrad from 2.4 to 2.5.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19831](https://github.com/goauthentik/authentik/pull/19831) - core: bump goauthentik/selenium from 144.0-ak-0.35.8 to 144.0-ak-0.35.9 in /tests/e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19832](https://github.com/goauthentik/authentik/pull/19832) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19824](https://github.com/goauthentik/authentik/pull/19824) - core: bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19829](https://github.com/goauthentik/authentik/pull/19829) - lifecycle/aws: bump aws-cdk from 2.1103.0 to 2.1104.0 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19830](https://github.com/goauthentik/authentik/pull/19830) - providers/scim: import SCIM groups by [@&#8203;bitpavel-l25](https://github.com/bitpavel-l25) in [goauthentik/authentik#19846](https://github.com/goauthentik/authentik/pull/19846) - providers/scim: modify user- and group syncing behavior by [@&#8203;ImmanuelVonNeumann](https://github.com/ImmanuelVonNeumann) in [goauthentik/authentik#13947](https://github.com/goauthentik/authentik/pull/13947) - providers/scim: fix email validation mismatch by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19848](https://github.com/goauthentik/authentik/pull/19848) - sources/oauth: Fix an issue where wechat may crash duing login. by [@&#8203;Anduin2017](https://github.com/Anduin2017) in [goauthentik/authentik#18973](https://github.com/goauthentik/authentik/pull/18973) - website/docs: add more info to entra id scim doc by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19849](https://github.com/goauthentik/authentik/pull/19849) - web: bump API Client version by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19851](https://github.com/goauthentik/authentik/pull/19851) - rbac: clean up roles and permissions by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#19588](https://github.com/goauthentik/authentik/pull/19588) - web: bump API Client version by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19857](https://github.com/goauthentik/authentik/pull/19857) - website/docs: add tip for recovering from accidental main branch work by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19865](https://github.com/goauthentik/authentik/pull/19865) - web: Fix development theme overrides by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19826](https://github.com/goauthentik/authentik/pull/19826) - web: Lit Development Mode, performance fixes. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19825](https://github.com/goauthentik/authentik/pull/19825) - root: assign cherry-pick PRs to original author by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19858](https://github.com/goauthentik/authentik/pull/19858) - web: Captcha Refinements, Part 2 by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19757](https://github.com/goauthentik/authentik/pull/19757) - web: bump chromedriver from 144.0.1 to 145.0.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19874](https://github.com/goauthentik/authentik/pull/19874) - ci: bump actions/cache from 5.0.2 to 5.0.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19873](https://github.com/goauthentik/authentik/pull/19873) - core: bump debugpy from 1.8.19 to 1.8.20 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19872](https://github.com/goauthentik/authentik/pull/19872) - web: bump [@&#8203;sentry/browser](https://github.com/sentry/browser) from 10.37.0 to 10.38.0 in /web in the sentry group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19871](https://github.com/goauthentik/authentik/pull/19871) - common: introduce common by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19852](https://github.com/goauthentik/authentik/pull/19852) - website/docs: endpoint devices: add version command by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19767](https://github.com/goauthentik/authentik/pull/19767) - website/integrations: immich: add signing algorithm by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19187](https://github.com/goauthentik/authentik/pull/19187) - website: QL Search keyboard interactions docs, examples. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#16259](https://github.com/goauthentik/authentik/pull/16259) - website/docs: Remove stale 2024 version directives by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19888](https://github.com/goauthentik/authentik/pull/19888) - web: fix Brand CSS not applied to nested Shadow DOM components by [@&#8203;Mmx233](https://github.com/Mmx233) in [goauthentik/authentik#19892](https://github.com/goauthentik/authentik/pull/19892) - stages/authenticator\_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19897](https://github.com/goauthentik/authentik/pull/19897) - core: bump protobuf from 6.33.4 to 6.33.5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19886](https://github.com/goauthentik/authentik/pull/19886) - ci: fix cherry-pick assignee by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19905](https://github.com/goauthentik/authentik/pull/19905) - website/docs: Color Palette Test Page by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19879](https://github.com/goauthentik/authentik/pull/19879) - ci: bump astral-sh/setup-uv from 7.2.0 to 7.2.1 in /.github/actions/setup by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19929](https://github.com/goauthentik/authentik/pull/19929) - web: bump globals from 17.2.0 to 17.3.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19928](https://github.com/goauthentik/authentik/pull/19928) - web: bump type-fest from 5.4.2 to 5.4.3 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19927](https://github.com/goauthentik/authentik/pull/19927) - web: bump playwright from 1.58.0 to 1.58.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19925](https://github.com/goauthentik/authentik/pull/19925) - core: bump goauthentik/selenium from 144.0-ak-0.35.9 to 144.0-ak-0.40.0 in /tests/e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19917](https://github.com/goauthentik/authentik/pull/19917) - core: bump axllent/mailpit from v1.28.4 to v1.29.0 in /tests/e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19918](https://github.com/goauthentik/authentik/pull/19918) - web: bump the storybook group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19921](https://github.com/goauthentik/authentik/pull/19921) - web: bump [@&#8203;formatjs/intl-listformat](https://github.com/formatjs/intl-listformat) from 8.2.0 to 8.2.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19924](https://github.com/goauthentik/authentik/pull/19924) - core: bump cachetools from 6.2.6 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19919](https://github.com/goauthentik/authentik/pull/19919) - core: bump pyjwt from 2.10.1 to 2.11.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19920](https://github.com/goauthentik/authentik/pull/19920) - core: bump gunicorn from 24.1.1 to 25.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19916](https://github.com/goauthentik/authentik/pull/19916) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19868](https://github.com/goauthentik/authentik/pull/19868) - providers/scim: add configuration warning for migration by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19859](https://github.com/goauthentik/authentik/pull/19859) - ci: always generate API clients by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19906](https://github.com/goauthentik/authentik/pull/19906) - web: bump the rollup group across 1 directory with 4 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19922](https://github.com/goauthentik/authentik/pull/19922) - web: bump [@&#8203;playwright/test](https://github.com/playwright/test) from 1.58.0 to 1.58.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19926](https://github.com/goauthentik/authentik/pull/19926) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.1.0 to 25.2.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19923](https://github.com/goauthentik/authentik/pull/19923) - website/docs: Update location of media storage and outdated references by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19885](https://github.com/goauthentik/authentik/pull/19885) - lifecycle/aws: add /data volume by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19936](https://github.com/goauthentik/authentik/pull/19936) - lifecycle/ak: make sure /data has the correct permissions by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19935](https://github.com/goauthentik/authentik/pull/19935) - core: fix non-expiring service accounts and app passwords by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19913](https://github.com/goauthentik/authentik/pull/19913) - lib: Add ssh/sftp schemas in to DomainlessFormattedURLValidator by [@&#8203;PopovSergeyS](https://github.com/PopovSergeyS) in [goauthentik/authentik#19881](https://github.com/goauthentik/authentik/pull/19881) - ci: fix test\_docker.sh by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19944](https://github.com/goauthentik/authentik/pull/19944) - web/admin: fix default binding order by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19943](https://github.com/goauthentik/authentik/pull/19943) - website/docs: Add `NODE_ENV: production` to workflow. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19889](https://github.com/goauthentik/authentik/pull/19889) - website/docs: Add changes in 2025.12.2 and 2025.12.3 to the release notes by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19949](https://github.com/goauthentik/authentik/pull/19949) - web: add "Copy Secret" button to TOTP configuration stage by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19863](https://github.com/goauthentik/authentik/pull/19863) - root: fix NPM\_VERSION in Makefile by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#19844](https://github.com/goauthentik/authentik/pull/19844) - web: refactor TOTP clipboard handlers and secret parsing by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19953](https://github.com/goauthentik/authentik/pull/19953) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19954](https://github.com/goauthentik/authentik/pull/19954) - web: bump knip from 5.82.1 to 5.83.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19962](https://github.com/goauthentik/authentik/pull/19962) - web/admin: Merge branch -- Stage elements, linter warnings by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19948](https://github.com/goauthentik/authentik/pull/19948) - crypto: Add [`ED25519`](https://github.com/goauthentik/helm/commit/ED25519) and ED448 support to the certificate builder by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19465](https://github.com/goauthentik/authentik/pull/19465) - lifecycle: bump shm size by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19369](https://github.com/goauthentik/authentik/pull/19369) - core: bump goauthentik.io/api/v3 to 3.2026.2.0-rc1-1770129730 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19973](https://github.com/goauthentik/authentik/pull/19973) - core: bump gunicorn from 25.0.0 to 25.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19959](https://github.com/goauthentik/authentik/pull/19959) - core: bump library/nginx from `c881927` to `7fe5dda` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19961](https://github.com/goauthentik/authentik/pull/19961) - web: bump the storybook group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19960](https://github.com/goauthentik/authentik/pull/19960) - core: bump aws-cdk-lib from 2.236.0 to 2.237.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19958](https://github.com/goauthentik/authentik/pull/19958) - core: ask for token duration on recovery link/email by admin by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#19875](https://github.com/goauthentik/authentik/pull/19875) - recovery: consume token in transaction by [@&#8203;kolega-ai-dev](https://github.com/kolega-ai-dev) in [goauthentik/authentik#19967](https://github.com/goauthentik/authentik/pull/19967) - providers/oauth2: use compare\_digest for client\_secret comparison by [@&#8203;kolega-ai-dev](https://github.com/kolega-ai-dev) in [goauthentik/authentik#19979](https://github.com/goauthentik/authentik/pull/19979) - web/flows: update flow background by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19974](https://github.com/goauthentik/authentik/pull/19974) - root: revert enterprise loading behaviour by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19485](https://github.com/goauthentik/authentik/pull/19485) - ci: allow setting assignee to fail by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19985](https://github.com/goauthentik/authentik/pull/19985) - core: bump django from 5.2.10 to 5.2.11 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19988](https://github.com/goauthentik/authentik/pull/19988) - stages/authenticator\_webauthn: fix double JSON encoding of webauthn options by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19952](https://github.com/goauthentik/authentik/pull/19952) - web: bump [@&#8203;isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19989](https://github.com/goauthentik/authentik/pull/19989) - core, web: bump [@&#8203;isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in /packages/prettier-config by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19990](https://github.com/goauthentik/authentik/pull/19990) - providers/saml: auto pull signature algorithm options by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#17614](https://github.com/goauthentik/authentik/pull/17614) - outposts: fix docker\_tls created files permission by [@&#8203;kolega-ai-dev](https://github.com/kolega-ai-dev) in [goauthentik/authentik#19978](https://github.com/goauthentik/authentik/pull/19978) - web: bump [@&#8203;goauthentik/api](https://github.com/goauthentik/api) from 2026.2.0-rc1-1769710374 to 2026.2.0-rc1-1770134072 in /web in the goauthentik group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20009](https://github.com/goauthentik/authentik/pull/20009) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19998](https://github.com/goauthentik/authentik/pull/19998) - website/docs: fix typos by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#20000](https://github.com/goauthentik/authentik/pull/20000) - ci: bump calibreapp/image-actions from [`420075c`](https://github.com/goauthentik/helm/commit/420075c115b26f8785e293c5bd5bef0911c506e5) to [`d9c8ee5`](https://github.com/goauthentik/helm/commit/d9c8ee5c3dc52ae4622c82ead88d658f4b16b65f) by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20008](https://github.com/goauthentik/authentik/pull/20008) - core: bump library/nginx from `7fe5dda` to `9dd2888` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20006](https://github.com/goauthentik/authentik/pull/20006) - core: bump coverage\[toml] from 7.13.2 to 7.13.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20002](https://github.com/goauthentik/authentik/pull/20002) - core: bump aws-cdk-lib from 2.237.0 to 2.237.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20003](https://github.com/goauthentik/authentik/pull/20003) - core: bump google-api-python-client from 2.188.0 to 2.189.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20004](https://github.com/goauthentik/authentik/pull/20004) - core: bump djangorestframework-stubs\[compatible-mypy] from 3.16.7 to 3.16.8 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20005](https://github.com/goauthentik/authentik/pull/20005) - core: bump library/node from 25.5.0-trixie to 25.6.0-trixie in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20007](https://github.com/goauthentik/authentik/pull/20007) - core: bump goauthentik.io/api/v3 to 3.2026.2.0-rc1-1770134534 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19980](https://github.com/goauthentik/authentik/pull/19980) - core: bump ruff from 0.14.14 to 0.15.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20001](https://github.com/goauthentik/authentik/pull/20001) - brands: fix Domain Matching in Brand Resolution by [@&#8203;kolega-ai-dev](https://github.com/kolega-ai-dev) in [goauthentik/authentik#19976](https://github.com/goauthentik/authentik/pull/19976) - website/docs: add a new page to help people get started after install is complete by [@&#8203;tanberry](https://github.com/tanberry) in [goauthentik/authentik#19217](https://github.com/goauthentik/authentik/pull/19217) - website/docs: endpoint devices: more updates by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19971](https://github.com/goauthentik/authentik/pull/19971) - flows: add option for flow layout with frame background by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19527](https://github.com/goauthentik/authentik/pull/19527) - web: bump API Client version by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20017](https://github.com/goauthentik/authentik/pull/20017) - website/docs: dont throw exception for outdated version badges by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#20024](https://github.com/goauthentik/authentik/pull/20024) - website/docs: endpoint devices: specify name and slug by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#20016](https://github.com/goauthentik/authentik/pull/20016) - web/flows: revisit agent stage fallback delay by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#20028](https://github.com/goauthentik/authentik/pull/20028) - ci: bump aws-actions/configure-aws-credentials from 5.1.1 to 6.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20037](https://github.com/goauthentik/authentik/pull/20037) - lib: add helper for creating events in migration by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#20044](https://github.com/goauthentik/authentik/pull/20044) - web: bump [@&#8203;types/react](https://github.com/types/react) from 19.2.10 to 19.2.11 in /web in the react group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20038](https://github.com/goauthentik/authentik/pull/20038) - core: bump library/nginx from `9dd2888` to `b17697e` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20036](https://github.com/goauthentik/authentik/pull/20036) - web: bump the storybook group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20035](https://github.com/goauthentik/authentik/pull/20035) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20032](https://github.com/goauthentik/authentik/pull/20032) - website/docs: endpoint devices: fix non debian wording by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#20046](https://github.com/goauthentik/authentik/pull/20046) - core: bump sentry-sdk from 2.51.0 to 2.52.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20034](https://github.com/goauthentik/authentik/pull/20034) - lib: fix migration event by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#20047](https://github.com/goauthentik/authentik/pull/20047) - core: bump goauthentik.io/api/v3 to 3.2026.2.0-rc1-1770223759 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20018](https://github.com/goauthentik/authentik/pull/20018) - core: bump django-tenants from 3.9.0 to 3.10.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20033](https://github.com/goauthentik/authentik/pull/20033) - website/docs: endpoint devices: update device authentication location by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#20049](https://github.com/goauthentik/authentik/pull/20049) - website/docs: capturing outpost logs by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#20045](https://github.com/goauthentik/authentik/pull/20045) - web/admin: fix rendering for configuration\_warning event by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#20050](https://github.com/goauthentik/authentik/pull/20050) - docs: add instructions for configuring rp-initiated single logout by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#20040](https://github.com/goauthentik/authentik/pull/20040) - outpost/proxyv2: revalidate auth if session fails to load by [@&#8203;chetan](https://github.com/chetan) in [goauthentik/authentik#18063](https://github.com/goauthentik/authentik/pull/18063) - website/docs: automated install: mention no file:// vars by [@&#8203;tcrasset](https://github.com/tcrasset) in [goauthentik/authentik#20043](https://github.com/goauthentik/authentik/pull/20043) - providers/saml: fix signing order for encrypted saml responses by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19620](https://github.com/goauthentik/authentik/pull/19620) - providers/saml: update metadata parser for single logout and encryption certificate by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#20031](https://github.com/goauthentik/authentik/pull/20031) - blueprints: don't exclude default values by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#20057](https://github.com/goauthentik/authentik/pull/20057) - sources/saml: update handling statusmessage by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19739](https://github.com/goauthentik/authentik/pull/19739) - website/docs: remove redundant RC notice by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#20052](https://github.com/goauthentik/authentik/pull/20052) - sources/saml: prevent authnrequest signature being inside body on redirect by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19898](https://github.com/goauthentik/authentik/pull/19898) - enterprise/providers: WSFed configurable realm, default wreply by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19996](https://github.com/goauthentik/authentik/pull/19996) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20069](https://github.com/goauthentik/authentik/pull/20069) - core, web: bump webpack from 5.103.0 to 5.105.0 in /packages/docusaurus-config by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20068](https://github.com/goauthentik/authentik/pull/20068) - core: bump goauthentik.io/api/v3 to 3.2026.2.0-rc1-1770333724 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20067](https://github.com/goauthentik/authentik/pull/20067) - core: bump library/nginx from `b17697e` to `341bf0f` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20077](https://github.com/goauthentik/authentik/pull/20077) - core: bump pyrad from 2.5.2 to 2.5.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20073](https://github.com/goauthentik/authentik/pull/20073) - core: bump msgraph-sdk from 1.53.0 to 1.54.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20072](https://github.com/goauthentik/authentik/pull/20072) - core: bump twilio from 9.10.0 to 9.10.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20071](https://github.com/goauthentik/authentik/pull/20071) - lifecycle/aws: bump aws-cdk from 2.1104.0 to 2.1105.0 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20070](https://github.com/goauthentik/authentik/pull/20070) - web: bump chromedriver from 145.0.0 to 145.0.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20082](https://github.com/goauthentik/authentik/pull/20082) - web: bump semver from 7.7.3 to 7.7.4 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20081](https://github.com/goauthentik/authentik/pull/20081) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.2.0 to 25.2.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20080](https://github.com/goauthentik/authentik/pull/20080) - web: bump [@&#8203;goauthentik/api](https://github.com/goauthentik/api) from 2026.2.0-rc1-1770223158 to 2026.2.0-rc1-1770333267 in /web in the goauthentik group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20078](https://github.com/goauthentik/authentik/pull/20078) - web: bump the bundler group across 1 directory with 4 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20076](https://github.com/goauthentik/authentik/pull/20076) - web: bump the storybook group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20075](https://github.com/goauthentik/authentik/pull/20075) - core: bump django-cte from 2.0.0 to 3.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20074](https://github.com/goauthentik/authentik/pull/20074) - web: bump [@&#8203;types/react](https://github.com/types/react) from 19.2.11 to 19.2.13 in /web in the react group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20079](https://github.com/goauthentik/authentik/pull/20079) - web: Allow unused spreaded properties to strict unsafe. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#20084](https://github.com/goauthentik/authentik/pull/20084) - web/i18n: Fix Japanese and Korean font overrides. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19994](https://github.com/goauthentik/authentik/pull/19994) - web: Fix locale selector in compatibility mode. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19946](https://github.com/goauthentik/authentik/pull/19946) - sources/saml: truncate transient username longer than 150 chars by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19930](https://github.com/goauthentik/authentik/pull/19930) - providers/saml: move sp acs binding down in form by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#20039](https://github.com/goauthentik/authentik/pull/20039) - website/docs: generate CVE sidebar by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#20098](https://github.com/goauthentik/authentik/pull/20098) - sources/oauth: Fix InvalidAudienceError in id\_token fallback by [@&#8203;ryanpesek](https://github.com/ryanpesek) in [goauthentik/authentik#20096](https://github.com/goauthentik/authentik/pull/20096) - web: bump type-fest from 5.4.3 to 5.4.4 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20113](https://github.com/goauthentik/authentik/pull/20113) - web: bump knip from 5.83.0 to 5.83.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20112](https://github.com/goauthentik/authentik/pull/20112) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.2.1 to 25.2.2 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20111](https://github.com/goauthentik/authentik/pull/20111) - web: bump [@&#8203;playwright/test](https://github.com/playwright/test) from 1.58.1 to 1.58.2 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20110](https://github.com/goauthentik/authentik/pull/20110) - web: bump playwright from 1.58.1 to 1.58.2 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20109](https://github.com/goauthentik/authentik/pull/20109) - web: bump the swc group across 2 directories with 1 update by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20108](https://github.com/goauthentik/authentik/pull/20108) - ci: bump astral-sh/setup-uv from 7.2.1 to 7.3.0 in /.github/actions/setup by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20106](https://github.com/goauthentik/authentik/pull/20106) - ci: bump int128/docker-manifest-create-action from 2.13.0 to 2.14.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20105](https://github.com/goauthentik/authentik/pull/20105) - core: bump gunicorn from 25.0.1 to 25.0.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20104](https://github.com/goauthentik/authentik/pull/20104) - core: bump golang.org/x/oauth2 from 0.34.0 to 0.35.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20103](https://github.com/goauthentik/authentik/pull/20103) - core: bump github.com/pires/go-proxyproto from 0.9.2 to 0.10.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20102](https://github.com/goauthentik/authentik/pull/20102) - tasks/middlewares: call monitoring\_set upon metrics request by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#20117](https://github.com/goauthentik/authentik/pull/20117) - website/docs: endpoint devices: add fleet connector doc by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#20086](https://github.com/goauthentik/authentik/pull/20086) - tasks: add queued tasks metrics by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#20118](https://github.com/goauthentik/authentik/pull/20118) - web/admin: source forms not rendering by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#19887](https://github.com/goauthentik/authentik/pull/19887) - website/docs/social-logins: add shibboleth integration guide by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19909](https://github.com/goauthentik/authentik/pull/19909) - web/sfe: bug: polyfill needed to supply Object.assign() to IE11. by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#20126](https://github.com/goauthentik/authentik/pull/20126) - web: bump axios from 1.13.2 to 1.13.5 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20137](https://github.com/goauthentik/authentik/pull/20137) - ci: bump tj-actions/changed-files from 47.0.1 to 47.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20132](https://github.com/goauthentik/authentik/pull/20132) - core: bump coverage\[toml] from 7.13.3 to 7.13.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20129](https://github.com/goauthentik/authentik/pull/20129) - core: bump aws-cdk-lib from 2.237.1 to 2.238.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20128](https://github.com/goauthentik/authentik/pull/20128) - website/integrations: add AFFiNE by [@&#8203;akaSorin](https://github.com/akaSorin) in [goauthentik/authentik#20143](https://github.com/goauthentik/authentik/pull/20143) - website/docs: endpoint/devices: add authentik version tags by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#20144](https://github.com/goauthentik/authentik/pull/20144) - enterprise/lifecycle: implement Object Lifecycle Management by [@&#8203;atereshkin](https://github.com/atereshkin) in [goauthentik/authentik#20015](https://github.com/goauthentik/authentik/pull/20015) - web: bump API Client version by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20149](https://github.com/goauthentik/authentik/pull/20149) - website/docs: release notes for `2026.2.0` by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#20013](https://github.com/goauthentik/authentik/pull/20013) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20152](https://github.com/goauthentik/authentik/pull/20152) - stages/authenticator\_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20155](https://github.com/goauthentik/authentik/pull/20155) - translate: Updates for project authentik and language pt\_BR by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20170](https://github.com/goauthentik/authentik/pull/20170) - translate: Updates for project authentik and language fi\_FI by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20158](https://github.com/goauthentik/authentik/pull/20158) - translate: Updates for project authentik and language fr\_FR by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20163](https://github.com/goauthentik/authentik/pull/20163) - translate: Updates for project authentik and language es\_ES by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20159](https://github.com/goauthentik/authentik/pull/20159) - translate: Updates for project authentik and language de\_DE by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20157](https://github.com/goauthentik/authentik/pull/20157) - translate: Updates for project authentik and language ja\_JP by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20160](https://github.com/goauthentik/authentik/pull/20160) - translate: Updates for project authentik and language ko\_KR by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20162](https://github.com/goauthentik/authentik/pull/20162) - translate: Updates for project authentik and language ru\_RU by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20161](https://github.com/goauthentik/authentik/pull/20161) - translate: Updates for project authentik and language zh-Hans by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20164](https://github.com/goauthentik/authentik/pull/20164) - translate: Updates for project authentik and language tr\_TR by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20167](https://github.com/goauthentik/authentik/pull/20167) - translate: Updates for project authentik and language cs\_CZ by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20166](https://github.com/goauthentik/authentik/pull/20166) - translate: Updates for project authentik and language pt\_PT by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20169](https://github.com/goauthentik/authentik/pull/20169) - translate: Updates for project authentik and language it\_IT by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20168](https://github.com/goauthentik/authentik/pull/20168) - translate: Updates for project authentik and language pl\_PL by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20165](https://github.com/goauthentik/authentik/pull/20165) - core: bump goauthentik.io/api/v3 to 3.2026.2.0-rc1-1770745754 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20150](https://github.com/goauthentik/authentik/pull/20150) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20172](https://github.com/goauthentik/authentik/pull/20172) - core: fix `test_docker.sh` (cherry-pick [#&#8203;20179](https://github.com/goauthentik/helm/issues/20179) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20192](https://github.com/goauthentik/authentik/pull/20192) - core: bump cryptography from 46.0.4 to 46.0.5 (cherry-pick [#&#8203;20171](https://github.com/goauthentik/helm/issues/20171) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20193](https://github.com/goauthentik/authentik/pull/20193) - api: fix `test_build_schema` (cherry-pick [#&#8203;20196](https://github.com/goauthentik/helm/issues/20196) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20199](https://github.com/goauthentik/authentik/pull/20199) - website/docs: rac: fixes the property mapping formatting (cherry-pick [#&#8203;20200](https://github.com/goauthentik/helm/issues/20200) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20203](https://github.com/goauthentik/authentik/pull/20203) - website/docs: add email verification scope doc (cherry-pick [#&#8203;20141](https://github.com/goauthentik/helm/issues/20141) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20206](https://github.com/goauthentik/authentik/pull/20206) - website/docs: ssf: update SSF documentation (cherry-pick [#&#8203;20195](https://github.com/goauthentik/helm/issues/20195) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20211](https://github.com/goauthentik/authentik/pull/20211) - ci: fix release testing (cherry-pick [#&#8203;20207](https://github.com/goauthentik/helm/issues/20207) to version-2026.2) by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#20224](https://github.com/goauthentik/authentik/pull/20224) - security: CVE-2026-25922 (2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20238](https://github.com/goauthentik/authentik/pull/20238) - security: CVE-2026-25748 (2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20237](https://github.com/goauthentik/authentik/pull/20237) - security: CVE-2026-25227 (2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20236](https://github.com/goauthentik/authentik/pull/20236) - web: updated package-lock.json to include missing tree-sitter references (cherry-pick [#&#8203;20244](https://github.com/goauthentik/helm/issues/20244) to version-2026.2) by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#20246](https://github.com/goauthentik/authentik/pull/20246) - website/docs: 2025.10.4 release notes (cherry-pick [#&#8203;20242](https://github.com/goauthentik/helm/issues/20242) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20251](https://github.com/goauthentik/authentik/pull/20251) - website/docs: 2025.12.4 release notes (cherry-pick [#&#8203;20226](https://github.com/goauthentik/helm/issues/20226) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20253](https://github.com/goauthentik/authentik/pull/20253) - website/docs: 2025.8.6 release notes (cherry-pick [#&#8203;20243](https://github.com/goauthentik/helm/issues/20243) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20257](https://github.com/goauthentik/authentik/pull/20257) - website/docs: draft of new WS-Fed provider docs (cherry-pick [#&#8203;20091](https://github.com/goauthentik/helm/issues/20091) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20262](https://github.com/goauthentik/authentik/pull/20262) - ci: fix binary outpost build on release (cherry-pick [#&#8203;20248](https://github.com/goauthentik/helm/issues/20248) to version-2026.2) by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#20279](https://github.com/goauthentik/authentik/pull/20279) - enterprise/lifecycle: fix multiple reviews showing up in "Reviews" when the user is a member of multiple reviewer groups (cherry-pick [#&#8203;20266](https://github.com/goauthentik/helm/issues/20266) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20278](https://github.com/goauthentik/authentik/pull/20278) - web: add pretty names for lifecycle review events in event logs (cherry-pick [#&#8203;20264](https://github.com/goauthentik/helm/issues/20264) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20268](https://github.com/goauthentik/authentik/pull/20268) - website/docs: Custom CSS (cherry-pick [#&#8203;19991](https://github.com/goauthentik/helm/issues/19991) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20287](https://github.com/goauthentik/authentik/pull/20287) - stage/identification: recovery: make wording more generic (cherry-pick [#&#8203;20209](https://github.com/goauthentik/helm/issues/20209) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20293](https://github.com/goauthentik/authentik/pull/20293) - web: fix italic formatting in lifecycle rule help text (cherry-pick [#&#8203;20263](https://github.com/goauthentik/helm/issues/20263) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20267](https://github.com/goauthentik/authentik/pull/20267) - website/docs: add affine to release notes (cherry-pick [#&#8203;20299](https://github.com/goauthentik/helm/issues/20299) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20308](https://github.com/goauthentik/authentik/pull/20308) - root: do not rely on npm cli for version bump (cherry-pick [#&#8203;20276](https://github.com/goauthentik/helm/issues/20276) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20321](https://github.com/goauthentik/authentik/pull/20321) - website/docs: add okta source doc (cherry-pick [#&#8203;20296](https://github.com/goauthentik/helm/issues/20296) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20335](https://github.com/goauthentik/authentik/pull/20335) - website/docs: rac: update rac provider docs (cherry-pick [#&#8203;20225](https://github.com/goauthentik/helm/issues/20225) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20337](https://github.com/goauthentik/authentik/pull/20337) - website/docs, integrations: fix language (cherry-pick [#&#8203;20338](https://github.com/goauthentik/helm/issues/20338) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20347](https://github.com/goauthentik/authentik/pull/20347) - ci: fix setup altering package-lock (cherry-pick [#&#8203;20348](https://github.com/goauthentik/helm/issues/20348) to version-2026.2) by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#20356](https://github.com/goauthentik/authentik/pull/20356) - web: revert `package-lock.json` by tag workflow by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#20349](https://github.com/goauthentik/authentik/pull/20349) - rbac: fix object permission request (cherry-pick [#&#8203;20304](https://github.com/goauthentik/helm/issues/20304) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20366](https://github.com/goauthentik/authentik/pull/20366) - web: Flow Executor layout fixes (cherry-pick [#&#8203;20134](https://github.com/goauthentik/helm/issues/20134) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20331](https://github.com/goauthentik/authentik/pull/20331) - enterprise/providers/ws\_federation: fix incorrect metadata download URL (cherry-pick [#&#8203;20173](https://github.com/goauthentik/helm/issues/20173) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20365](https://github.com/goauthentik/authentik/pull/20365) - website/docs: Fix broken link to flow executor (cherry-pick [#&#8203;20364](https://github.com/goauthentik/helm/issues/20364) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20370](https://github.com/goauthentik/authentik/pull/20370) - core: add cause to `ak_groups` deprecation event and logs (cherry-pick [#&#8203;20361](https://github.com/goauthentik/helm/issues/20361) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20368](https://github.com/goauthentik/authentik/pull/20368) - website/docs: correct reference to overriden S3 variable (cherry-pick [#&#8203;20156](https://github.com/goauthentik/helm/issues/20156) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20378](https://github.com/goauthentik/authentik/pull/20378) - web/admin: bug: stage update forms not rendering, several modal form buttons missing (cherry-pick [#&#8203;20373](https://github.com/goauthentik/helm/issues/20373) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20394](https://github.com/goauthentik/authentik/pull/20394) - enterprise/providers/microsoft\_entra: fix dangling comma (cherry-pick [#&#8203;20391](https://github.com/goauthentik/helm/issues/20391) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20395](https://github.com/goauthentik/authentik/pull/20395) - ci: pull latest changes before tagging new version (cherry-pick [#&#8203;20413](https://github.com/goauthentik/helm/issues/20413) to version-2026.2) by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#20414](https://github.com/goauthentik/authentik/pull/20414) - enterprise/providers/microsoft\_entra: only check upn when set (cherry-pick [#&#8203;20441](https://github.com/goauthentik/helm/issues/20441) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20442](https://github.com/goauthentik/authentik/pull/20442) - stages/user\_login: log correct user when session binding is broken (cherry-pick [#&#8203;20094](https://github.com/goauthentik/helm/issues/20094) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20453](https://github.com/goauthentik/authentik/pull/20453) - enterprise: monkey patch pyjwt to accept mismatching key (cherry-pick [#&#8203;20402](https://github.com/goauthentik/helm/issues/20402) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20474](https://github.com/goauthentik/authentik/pull/20474) - enterprise/lifecycle: use datetime instead of date to track review cycles (cherry-pick [#&#8203;20283](https://github.com/goauthentik/helm/issues/20283) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20473](https://github.com/goauthentik/authentik/pull/20473) - policies: measure policy process from manager (cherry-pick [#&#8203;20477](https://github.com/goauthentik/helm/issues/20477) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20481](https://github.com/goauthentik/authentik/pull/20481) - providers/proxy: preserve URL-encoded path characters in redirect (cherry-pick [#&#8203;20476](https://github.com/goauthentik/helm/issues/20476) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20482](https://github.com/goauthentik/authentik/pull/20482) - web: Center footer links. (cherry-pick [#&#8203;20345](https://github.com/goauthentik/helm/issues/20345) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20425](https://github.com/goauthentik/authentik/pull/20425) - website/docs: add info about make install and recovery key (cherry-pick [#&#8203;20447](https://github.com/goauthentik/helm/issues/20447) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20486](https://github.com/goauthentik/authentik/pull/20486) - providers/oauth2: device code flow client id via auth header (cherry-pick [#&#8203;20457](https://github.com/goauthentik/helm/issues/20457) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20503](https://github.com/goauthentik/authentik/pull/20503) - enterprise: add `ES384` to enterprise license algorithms (cherry-pick [#&#8203;20507](https://github.com/goauthentik/helm/issues/20507) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20510](https://github.com/goauthentik/authentik/pull/20510) - web/admin/bugfix: Edit Stage not working. Invoking IdentificationStageForm not working (cherry-pick [#&#8203;20429](https://github.com/goauthentik/helm/issues/20429) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20512](https://github.com/goauthentik/authentik/pull/20512) - web: fix Edit Policy button on Flow view page (cherry-pick [#&#8203;20511](https://github.com/goauthentik/helm/issues/20511) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20515](https://github.com/goauthentik/authentik/pull/20515) - endpoints: fix infinite recursion in stage with unsupported connector (cherry-pick [#&#8203;20485](https://github.com/goauthentik/helm/issues/20485) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20514](https://github.com/goauthentik/authentik/pull/20514) - website/docs: fix linux setup docs (cherry-pick [#&#8203;20508](https://github.com/goauthentik/helm/issues/20508) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20517](https://github.com/goauthentik/authentik/pull/20517) - website/docs: fix GitHub social-login wording and capitalization (cherry-pick [#&#8203;20489](https://github.com/goauthentik/helm/issues/20489) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20505](https://github.com/goauthentik/authentik/pull/20505) - policies: fix PolicyEngineMode ALL with static binding optimization (cherry-pick [#&#8203;20430](https://github.com/goauthentik/helm/issues/20430) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20524](https://github.com/goauthentik/authentik/pull/20524) - providers/oauth2: deactivate locale after testing (cherry-pick [#&#8203;20518](https://github.com/goauthentik/helm/issues/20518) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20526](https://github.com/goauthentik/authentik/pull/20526) - providers/oauth2: add jti claim (cherry-pick [#&#8203;20484](https://github.com/goauthentik/helm/issues/20484) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20528](https://github.com/goauthentik/authentik/pull/20528) - website/docs: autogenerate release notes (cherry-pick [#&#8203;20527](https://github.com/goauthentik/helm/issues/20527) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20531](https://github.com/goauthentik/authentik/pull/20531) #### New Contributors - [@&#8203;gabay](https://github.com/gabay) made their first contribution in [goauthentik/authentik#18812](https://github.com/goauthentik/authentik/pull/18812) - [@&#8203;joaocfernandes](https://github.com/joaocfernandes) made their first contribution in [goauthentik/authentik#18448](https://github.com/goauthentik/authentik/pull/18448) - [@&#8203;dminuoso](https://github.com/dminuoso) made their first contribution in [goauthentik/authentik#18727](https://github.com/goauthentik/authentik/pull/18727) - [@&#8203;optix2000](https://github.com/optix2000) made their first contribution in [goauthentik/authentik#18921](https://github.com/goauthentik/authentik/pull/18921) - [@&#8203;stijn220](https://github.com/stijn220) made their first contribution in [goauthentik/authentik#18979](https://github.com/goauthentik/authentik/pull/18979) - [@&#8203;hskrtich](https://github.com/hskrtich) made their first contribution in [goauthentik/authentik#18984](https://github.com/goauthentik/authentik/pull/18984) - [@&#8203;0skater0](https://github.com/0skater0) made their first contribution in [goauthentik/authentik#19013](https://github.com/goauthentik/authentik/pull/19013) - [@&#8203;borutmrak](https://github.com/borutmrak) made their first contribution in [goauthentik/authentik#15183](https://github.com/goauthentik/authentik/pull/15183) - [@&#8203;ocmateusz](https://github.com/ocmateusz) made their first contribution in [goauthentik/authentik#19073](https://github.com/goauthentik/authentik/pull/19073) - [@&#8203;austin-dudzik](https://github.com/austin-dudzik) made their first contribution in [goauthentik/authentik#19102](https://github.com/goauthentik/authentik/pull/19102) - [@&#8203;pippo73](https://github.com/pippo73) made their first contribution in [goauthentik/authentik#19127](https://github.com/goauthentik/authentik/pull/19127) - [@&#8203;williamkray](https://github.com/williamkray) made their first contribution in [goauthentik/authentik#19160](https://github.com/goauthentik/authentik/pull/19160) - [@&#8203;nmasnadithya](https://github.com/nmasnadithya) made their first contribution in [goauthentik/authentik#19170](https://github.com/goauthentik/authentik/pull/19170) - [@&#8203;busybox11](https://github.com/busybox11) made their first contribution in [goauthentik/authentik#19246](https://github.com/goauthentik/authentik/pull/19246) - [@&#8203;tcrasset](https://github.com/tcrasset) made their first contribution in [goauthentik/authentik#18936](https://github.com/goauthentik/authentik/pull/18936) - [@&#8203;sebastianw](https://github.com/sebastianw) made their first contribution in [goauthentik/authentik#19316](https://github.com/goauthentik/authentik/pull/19316) - [@&#8203;severin](https://github.com/severin) made their first contribution in [goauthentik/authentik#19368](https://github.com/goauthentik/authentik/pull/19368) - [@&#8203;Fredouye](https://github.com/Fredouye) made their first contribution in [goauthentik/authentik#19337](https://github.com/goauthentik/authentik/pull/19337) - [@&#8203;JMLX42](https://github.com/JMLX42) made their first contribution in [goauthentik/authentik#19226](https://github.com/goauthentik/authentik/pull/19226) - [@&#8203;DonQuinleone](https://github.com/DonQuinleone) made their first contribution in [goauthentik/authentik#19530](https://github.com/goauthentik/authentik/pull/19530) - [@&#8203;steilerDev](https://github.com/steilerDev) made their first contribution in [goauthentik/authentik#19584](https://github.com/goauthentik/authentik/pull/19584) - [@&#8203;Ma27](https://github.com/Ma27) made their first contribution in [goauthentik/authentik#19542](https://github.com/goauthentik/authentik/pull/19542) - [@&#8203;Gulianrdgd](https://github.com/Gulianrdgd) made their first contribution in [goauthentik/authentik#19379](https://github.com/goauthentik/authentik/pull/19379) - [@&#8203;jeroen1602](https://github.com/jeroen1602) made their first contribution in [goauthentik/authentik#19554](https://github.com/goauthentik/authentik/pull/19554) - [@&#8203;vitSkalicky](https://github.com/vitSkalicky) made their first contribution in [goauthentik/authentik#15686](https://github.com/goauthentik/authentik/pull/15686) - [@&#8203;ImmanuelVonNeumann](https://github.com/ImmanuelVonNeumann) made their first contribution in [goauthentik/authentik#13947](https://github.com/goauthentik/authentik/pull/13947) - [@&#8203;Mmx233](https://github.com/Mmx233) made their first contribution in [goauthentik/authentik#19892](https://github.com/goauthentik/authentik/pull/19892) - [@&#8203;PopovSergeyS](https://github.com/PopovSergeyS) made their first contribution in [goauthentik/authentik#19881](https://github.com/goauthentik/authentik/pull/19881) - [@&#8203;kolega-ai-dev](https://github.com/kolega-ai-dev) made their first contribution in [goauthentik/authentik#19967](https://github.com/goauthentik/authentik/pull/19967) - [@&#8203;chetan](https://github.com/chetan) made their first contribution in [goauthentik/authentik#18063](https://github.com/goauthentik/authentik/pull/18063) - [@&#8203;akaSorin](https://github.com/akaSorin) made their first contribution in [goauthentik/authentik#20143](https://github.com/goauthentik/authentik/pull/20143) **Full Changelog**: <https://github.com/goauthentik/authentik/compare/version/2025.12.4...version/2026.2.0> ### [`v2025.12.4`](https://github.com/goauthentik/helm/releases/tag/authentik-2025.12.4) [Compare Source](https://github.com/goauthentik/helm/compare/authentik-2025.12.3...authentik-2025.12.4) authentik is an open-source Identity Provider focused on flexibility and versatility see <https://docs.goauthentik.io/releases/2025.12/#fixed-in-2025124> #### What's Changed - charts/authentik: add link to authentik configuration docs by [@&#8203;rissson](https://github.com/rissson) in [#&#8203;447](https://github.com/goauthentik/helm/pull/447) - charts/authentik: bump to 2025.12.4 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [#&#8203;451](https://github.com/goauthentik/helm/pull/451) **Full Changelog**: <https://github.com/goauthentik/helm/compare/authentik-2025.12.3...authentik-2025.12.4> ### [`v2025.12.3`](https://github.com/goauthentik/helm/releases/tag/authentik-2025.12.3) [Compare Source](https://github.com/goauthentik/helm/compare/authentik-2025.12.2...authentik-2025.12.3) authentik is an open-source Identity Provider focused on flexibility and versatility #### What's Changed - charts/authentik: bump to 2025.12.3 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [#&#8203;444](https://github.com/goauthentik/helm/pull/444) - 2025.12: Revert bulk revoke added by accident in release branch by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19870](https://github.com/goauthentik/authentik/pull/19870) - web/admin: fix toggle-group for bindings now showing up (cherry-pick [#&#8203;19820](https://github.com/goauthentik/helm/issues/19820) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19895](https://github.com/goauthentik/authentik/pull/19895) - web: fix Brand CSS not applied to nested Shadow DOM components (cherry-pick [#&#8203;19892](https://github.com/goauthentik/helm/issues/19892) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19900](https://github.com/goauthentik/authentik/pull/19900) - ci: always generate API clients ([#&#8203;19906](https://github.com/goauthentik/helm/issues/19906)) by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19932](https://github.com/goauthentik/authentik/pull/19932) - lifecycle/ak: make sure /data has the correct permissions (cherry-pick [#&#8203;19935](https://github.com/goauthentik/helm/issues/19935) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19940](https://github.com/goauthentik/authentik/pull/19940) - lifecycle/aws: add /data volume (cherry-pick [#&#8203;19936](https://github.com/goauthentik/helm/issues/19936) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19938](https://github.com/goauthentik/authentik/pull/19938) - core: fix non-expiring service accounts and app passwords (cherry-pick [#&#8203;19913](https://github.com/goauthentik/helm/issues/19913) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19941](https://github.com/goauthentik/authentik/pull/19941) **Full Changelog**: <https://github.com/goauthentik/authentik/compare/version/2025.12.2...version/2025.12.3> ### [`v2025.12.2`](https://github.com/goauthentik/helm/releases/tag/authentik-2025.12.2) [Compare Source](https://github.com/goauthentik/helm/compare/authentik-2025.12.1...authentik-2025.12.2) authentik is an open-source Identity Provider focused on flexibility and versatility #### What's Changed - charts/authentik: bump to 2025.12.2 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [#&#8203;442](https://github.com/goauthentik/helm/pull/442) - sources/kerberos: update to new python-kadmin-rs (cherry-pick [#&#8203;19491](https://github.com/goauthentik/helm/issues/19491) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19523](https://github.com/goauthentik/authentik/pull/19523) - tests/e2e: Add delay and serialized rollback to saml e2e test (cherry-pick [#&#8203;18840](https://github.com/goauthentik/helm/issues/18840) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19532](https://github.com/goauthentik/authentik/pull/19532) - admin/files: fix manageable check blocking file creation on fresh installs (cherry-pick [#&#8203;19547](https://github.com/goauthentik/helm/issues/19547) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19553](https://github.com/goauthentik/authentik/pull/19553) - admin/files: fix duplicate bucket name in presigned URLs with custom domain (cherry-pick [#&#8203;19537](https://github.com/goauthentik/helm/issues/19537) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19575](https://github.com/goauthentik/authentik/pull/19575) - core: Update supported versions in SECURITY.md (cherry-pick [#&#8203;19385](https://github.com/goauthentik/helm/issues/19385) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19578](https://github.com/goauthentik/authentik/pull/19578) - web: update [@&#8203;goauthentik/api](https://github.com/goauthentik/api) (cherry-pick [#&#8203;19542](https://github.com/goauthentik/helm/issues/19542) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19589](https://github.com/goauthentik/authentik/pull/19589) - web/forms: fix invalid date error for empty datetime-local inputs (cherry-pick [#&#8203;19561](https://github.com/goauthentik/helm/issues/19561) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19582](https://github.com/goauthentik/authentik/pull/19582) - endpoints: fix endpoints stage marked as enterprise (cherry-pick [#&#8203;19607](https://github.com/goauthentik/helm/issues/19607) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19610](https://github.com/goauthentik/authentik/pull/19610) - policies: fix Providers authentication\_flow not used when set (cherry-pick [#&#8203;19609](https://github.com/goauthentik/helm/issues/19609) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19615](https://github.com/goauthentik/authentik/pull/19615) - providers/saml: fix structure of encrypted saml assertion (cherry-pick [#&#8203;19592](https://github.com/goauthentik/helm/issues/19592) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19613](https://github.com/goauthentik/authentik/pull/19613) - providers/saml: allow encryption certificates without private keys (cherry-pick [#&#8203;19526](https://github.com/goauthentik/helm/issues/19526) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19612](https://github.com/goauthentik/authentik/pull/19612) - sources/saml: Fix signature verification order to accommodate encrypted assertions (cherry-pick [#&#8203;19593](https://github.com/goauthentik/helm/issues/19593) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19614](https://github.com/goauthentik/authentik/pull/19614) - tests: improve e2e/integration test reliability (cherry-pick [#&#8203;19540](https://github.com/goauthentik/helm/issues/19540) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19611](https://github.com/goauthentik/authentik/pull/19611) - lib/sync/outgoing: handle deletions even if object does not exist in database (cherry-pick [#&#8203;18968](https://github.com/goauthentik/helm/issues/18968) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19617](https://github.com/goauthentik/authentik/pull/19617) - web/user: fix Firefox for Android infinite render loop in user library (cherry-pick [#&#8203;19379](https://github.com/goauthentik/helm/issues/19379) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19626](https://github.com/goauthentik/authentik/pull/19626) - web/maintenance: fix missing custom web component imports (cherry-pick [#&#8203;18942](https://github.com/goauthentik/helm/issues/18942) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19636](https://github.com/goauthentik/authentik/pull/19636) - web/a11y: Locale selector select styles, contrast. (cherry-pick [#&#8203;19634](https://github.com/goauthentik/helm/issues/19634) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19651](https://github.com/goauthentik/authentik/pull/19651) - web/maintenance: no unknown tag names (cherry-pick [#&#8203;18944](https://github.com/goauthentik/helm/issues/18944) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19637](https://github.com/goauthentik/authentik/pull/19637) - providers/oauth2: add `logout+jwt` token type for oidc logout token. (cherry-pick [#&#8203;19554](https://github.com/goauthentik/helm/issues/19554) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19675](https://github.com/goauthentik/authentik/pull/19675) - web/maintenance: no missing element type definitions (cherry-pick [#&#8203;18950](https://github.com/goauthentik/helm/issues/18950) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19638](https://github.com/goauthentik/authentik/pull/19638) - web/maintenance/no unknown attributes (part 1) (cherry-pick [#&#8203;18970](https://github.com/goauthentik/helm/issues/18970) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19639](https://github.com/goauthentik/authentik/pull/19639) - sources/saml: Set AuthnRequest ProtocolBinding to HTTP-POST instead of HTTP-Redirect (cherry-pick [#&#8203;17378](https://github.com/goauthentik/helm/issues/17378) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19649](https://github.com/goauthentik/authentik/pull/19649) - web/forms: fix forms not resetting state when modal closes (cherry-pick [#&#8203;19562](https://github.com/goauthentik/helm/issues/19562) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19635](https://github.com/goauthentik/authentik/pull/19635) - web/admin: fix brand form sending "undefined" string for blank default application (cherry-pick [#&#8203;19658](https://github.com/goauthentik/helm/issues/19658) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19682](https://github.com/goauthentik/authentik/pull/19682) - internal: fix incorrect metric calculation (cherry-pick [#&#8203;19701](https://github.com/goauthentik/helm/issues/19701) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19703](https://github.com/goauthentik/authentik/pull/19703) - sources/oauth: add fallback for id\_token when profile URL is not available (cherry-pick [#&#8203;19311](https://github.com/goauthentik/helm/issues/19311) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19704](https://github.com/goauthentik/authentik/pull/19704) - core: return bad request when user is authenticated and not active (cherry-pick [#&#8203;19706](https://github.com/goauthentik/helm/issues/19706) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19710](https://github.com/goauthentik/authentik/pull/19710) - web/admin: fix impersonation form requesting data without being opened (cherry-pick [#&#8203;19673](https://github.com/goauthentik/helm/issues/19673) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19712](https://github.com/goauthentik/authentik/pull/19712) - web/sfe: downgrade bootstrap, add access denied test (cherry-pick [#&#8203;19763](https://github.com/goauthentik/helm/issues/19763) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19765](https://github.com/goauthentik/authentik/pull/19765) - root: update client-go generation (cherry-pick [#&#8203;19762](https://github.com/goauthentik/helm/issues/19762) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19791](https://github.com/goauthentik/authentik/pull/19791) - web/elements: reduce spacing between collapsible form groups (cherry-pick [#&#8203;19627](https://github.com/goauthentik/helm/issues/19627) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19640](https://github.com/goauthentik/authentik/pull/19640) - web/elements: stabilize dual-select status height (cherry-pick [#&#8203;19734](https://github.com/goauthentik/helm/issues/19734) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19776](https://github.com/goauthentik/authentik/pull/19776) - providers/scim: fix email validation mismatch (cherry-pick [#&#8203;19848](https://github.com/goauthentik/helm/issues/19848) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19853](https://github.com/goauthentik/authentik/pull/19853) - sources/saml: properly catch InvalidSignature exception (cherry-pick [#&#8203;19641](https://github.com/goauthentik/helm/issues/19641) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19650](https://github.com/goauthentik/authentik/pull/19650) - sources/oauth: Fix an issue where wechat may crash duing login. (cherry-pick [#&#8203;18973](https://github.com/goauthentik/helm/issues/18973) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19854](https://github.com/goauthentik/authentik/pull/19854) - admin/files: add centralized theme variable support for file URLs (cherry-pick [#&#8203;19657](https://github.com/goauthentik/helm/issues/19657) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19793](https://github.com/goauthentik/authentik/pull/19793) - web/table: align row action icons and tooltip color (cherry-pick [#&#8203;19736](https://github.com/goauthentik/helm/issues/19736) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19773](https://github.com/goauthentik/authentik/pull/19773) - web/admin: fix file upload not preserving extension for custom names with dots (cherry-pick [#&#8203;19548](https://github.com/goauthentik/helm/issues/19548) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19685](https://github.com/goauthentik/authentik/pull/19685) - web/admin: fix captcha stage provider selector not showing saved value (cherry-pick [#&#8203;19555](https://github.com/goauthentik/helm/issues/19555) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19656](https://github.com/goauthentik/authentik/pull/19656) - web: Session UI Config Lifecycle (cherry-pick [#&#8203;19788](https://github.com/goauthentik/helm/issues/19788) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19821](https://github.com/goauthentik/authentik/pull/19821) - web: Enforce `challenge` nullish types. (cherry-pick [#&#8203;19768](https://github.com/goauthentik/helm/issues/19768) to version-2025.12) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19777](https://github.com/goauthentik/authentik/pull/19777) **Full Changelog**: <https://github.com/goauthentik/authentik/compare/version/2025.12.1...version/2025.12.2> ### [`v2025.12.1`](https://github.com/goauthentik/helm/releases/tag/authentik-2025.12.1) [Compare Source](https://github.com/goauthentik/helm/compare/authentik-2025.12.0...authentik-2025.12.1) authentik is an open-source Identity Provider focused on flexibility and versatility #### What's Changed - charts/authentik: bump to 2025.12.1 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [#&#8203;440](https://github.com/goauthentik/helm/pull/440) **Full Changelog**: <https://github.com/goauthentik/helm/compare/authentik-2025.12.0...authentik-2025.12.1> ### [`v2025.12.0`](https://github.com/goauthentik/helm/releases/tag/authentik-2025.12.0) [Compare Source](https://github.com/goauthentik/helm/compare/authentik-2025.10.3...authentik-2025.12.0) authentik is an open-source Identity Provider focused on flexibility and versatility #### What's Changed - charts/authentik: use debian:13-slim for PostgreSQL volume permissions by [@&#8203;yolanv](https://github.com/yolanv) in [#&#8203;434](https://github.com/goauthentik/helm/pull/434) - authentik: replace bitnami postgres exporter by [@&#8203;BeryJu](https://github.com/BeryJu) in [#&#8203;435](https://github.com/goauthentik/helm/pull/435) - charts/authentik: add support for external Kubernetes secret by [@&#8203;gthieleb](https://github.com/gthieleb) in [#&#8203;436](https://github.com/goauthentik/helm/pull/436) - charts/authentik: use read only root filesystem for postgresql by [@&#8203;KoiFresh](https://github.com/KoiFresh) in [#&#8203;427](https://github.com/goauthentik/helm/pull/427) - charts/authentik: bump to 2025.12.0 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [#&#8203;438](https://github.com/goauthentik/helm/pull/438) #### New Contributors - [@&#8203;yolanv](https://github.com/yolanv) made their first contribution in [#&#8203;434](https://github.com/goauthentik/helm/pull/434) - [@&#8203;gthieleb](https://github.com/gthieleb) made their first contribution in [#&#8203;436](https://github.com/goauthentik/helm/pull/436) - [@&#8203;KoiFresh](https://github.com/KoiFresh) made their first contribution in [#&#8203;427](https://github.com/goauthentik/helm/pull/427) **Full Changelog**: <https://github.com/goauthentik/helm/compare/authentik-2025.10.3...authentik-2025.12.0> ### [`v2025.10.3`](https://github.com/goauthentik/helm/releases/tag/authentik-2025.10.3) [Compare Source](https://github.com/goauthentik/helm/compare/authentik-2025.10.2...authentik-2025.10.3) authentik is an open-source Identity Provider focused on flexibility and versatility #### What's Changed - charts/authentik: remove redis by [@&#8203;BeryJu](https://github.com/BeryJu) in [#&#8203;409](https://github.com/goauthentik/helm/pull/409) - chore(deps): update actions/checkout action to v6 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;430](https://github.com/goauthentik/helm/pull/430) - ci: update chart-testing-action by [@&#8203;rissson](https://github.com/rissson) in [#&#8203;432](https://github.com/goauthentik/helm/pull/432) - chore(deps): update docker.io/library/postgres docker tag to v17.7 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;426](https://github.com/goauthentik/helm/pull/426) - chore(deps): update postgresql docker tag to v16.7.27 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;393](https://github.com/goauthentik/helm/pull/393) - charts/authentik: bump to 2025.10.3 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [#&#8203;433](https://github.com/goauthentik/helm/pull/433) **Full Changelog**: <https://github.com/goauthentik/helm/compare/authentik-2025.10.2...authentik-2025.10.3> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS41OS4xIiwidXBkYXRlZEluVmVyIjoiNDMuMTI5LjAiLCJ0YXJnZXRCcmFuY2giOiJtYXN0ZXIiLCJsYWJlbHMiOltdfQ==-->
renovate-bot force-pushed renovate/authentik-2026.x from c7b768dfb3 to beaa5e7904 2026-03-03 21:03:47 +00:00 Compare
renovate-bot force-pushed renovate/authentik-2026.x from beaa5e7904 to 337450d873 2026-04-08 01:04:03 +00:00 Compare
renovate-bot force-pushed renovate/authentik-2026.x from 337450d873 to 3509f19220 2026-05-12 21:04:40 +00:00 Compare
This pull request is broken due to missing fork information.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/authentik-2026.x:renovate/authentik-2026.x
git switch renovate/authentik-2026.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master
git merge --no-ff renovate/authentik-2026.x
git switch renovate/authentik-2026.x
git rebase master
git switch master
git merge --ff-only renovate/authentik-2026.x
git switch renovate/authentik-2026.x
git rebase master
git switch master
git merge --no-ff renovate/authentik-2026.x
git switch master
git merge --squash renovate/authentik-2026.x
git switch master
git merge --ff-only renovate/authentik-2026.x
git switch master
git merge renovate/authentik-2026.x
git push origin master
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
KropCloud/gitops!930
No description provided.