Update Helm release authentik to v2025.12.1 (#3223)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [authentik](https://goauthentik.io) ([source](https://github.com/goauthentik/helm)) | minor | `2025.10.3` → `2025.12.1` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

### Release Notes

<details>
<summary>goauthentik/helm (authentik)</summary>

### [`v2025.12.1`](https://github.com/goauthentik/helm/releases/tag/authentik-2025.12.1)

[Compare Source](https://github.com/goauthentik/helm/compare/authentik-2025.12.0...authentik-2025.12.1)

authentik is an open-source Identity Provider focused on flexibility and versatility

#### What's Changed

- charts/authentik: bump to 2025.12.1 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [#&#8203;440](https://github.com/goauthentik/helm/pull/440)

**Full Changelog**: <https://github.com/goauthentik/helm/compare/authentik-2025.12.0...authentik-2025.12.1>

### [`v2025.12.0`](https://github.com/goauthentik/helm/releases/tag/authentik-2025.12.0)

[Compare Source](https://github.com/goauthentik/helm/compare/authentik-2025.10.3...authentik-2025.12.0)

authentik is an open-source Identity Provider focused on flexibility and versatility

#### What's Changed

- charts/authentik: use debian:13-slim for PostgreSQL volume permissions by [@&#8203;yolanv](https://github.com/yolanv) in [#&#8203;434](https://github.com/goauthentik/helm/pull/434)
- authentik: replace bitnami postgres exporter by [@&#8203;BeryJu](https://github.com/BeryJu) in [#&#8203;435](https://github.com/goauthentik/helm/pull/435)
- charts/authentik: add support for external Kubernetes secret by [@&#8203;gthieleb](https://github.com/gthieleb) in [#&#8203;436](https://github.com/goauthentik/helm/pull/436)
- charts/authentik: use read only root filesystem for postgresql by [@&#8203;KoiFresh](https://github.com/KoiFresh) in [#&#8203;427](https://github.com/goauthentik/helm/pull/427)
- charts/authentik: bump to 2025.12.0 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [#&#8203;438](https://github.com/goauthentik/helm/pull/438)

#### New Contributors

- [@&#8203;yolanv](https://github.com/yolanv) made their first contribution in [#&#8203;434](https://github.com/goauthentik/helm/pull/434)
- [@&#8203;gthieleb](https://github.com/gthieleb) made their first contribution in [#&#8203;436](https://github.com/goauthentik/helm/pull/436)
- [@&#8203;KoiFresh](https://github.com/KoiFresh) made their first contribution in [#&#8203;427](https://github.com/goauthentik/helm/pull/427)

**Full Changelog**: <https://github.com/goauthentik/helm/compare/authentik-2025.10.3...authentik-2025.12.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi42OS4yIiwidXBkYXRlZEluVmVyIjoiNDIuNjkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=-->

Reviewed-on: #3223
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/helm/authentik/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: authentik
   repository: https://charts.goauthentik.io/
-  version: 2025.10.3
+  version: 2025.12.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.1.6
@@ -11,5 +11,5 @@ dependencies:
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:b9fe766e223b1f65430c64c02f94c1f97ad7149a5a9acc7bab8339615706293f
-generated: "2026-01-08T23:01:41.173354097Z"
+digest: sha256:a473d3cc3e54c917f3d14c96f3de72e81940c82b3fbe6ce316e4d28a7bdcc56d
+generated: "2026-01-16T18:05:21.607549312Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -21,7 +21,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: authentik
-    version: 2025.10.3
+    version: 2025.12.1
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts