chore(deps): update helm release authentik to v2026 #4227

Merged

alexlebens merged 1 commits from renovate/authentik-2026.x into main 2026-02-25 04:46:27 +00:00

Conversation 0 Commits 1 Files Changed 2 +4 -4

renovate-bot commented 2026-02-24 23:39:10 +00:00

Collaborator

Copy Link

This PR contains the following updates:

Package	Update	Change
authentik (source)	major	2025.12.4 → 2026.2.0

---

Release Notes

goauthentik/helm (authentik)

v2026.2.0

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: add fields auto-added by Kubernetes to httproute by @​cfi2017 in #​453
• chore(deps): update helm/kind-action action to v1.14.0 by @​renovate[bot] in #​454
• charts/authentik: add note how to set version by @​BeryJu in #​456
• charts/authentik: bump to 2026.2.0 by @​authentik-automation[bot] in #​457

New Contributors

• @​cfi2017 made their first contribution in #​453

Full Changelog: https://github.com/goauthentik/helm/compare/authentik-2025.12.4...authentik-2026.2.0

---

Full release notes for authentik

See https://docs.goauthentik.io/docs/releases/2026.2

What's Changed

• root: bump version to 2026.2.0-rc1 by @​authentik-automation[bot] in goauthentik/authentik#18794
• tests/e2e: retry detached shadow roots by @​melizeche in goauthentik/authentik#18796
• website/release notes: Update v2025.12 release notes by @​melizeche in goauthentik/authentik#18797
• web/admin: fix read-only provider selection for application form by @​dominic-r in goauthentik/authentik#18768
• web: bump the react group across 1 directory with 2 updates by @​dependabot[bot] in goauthentik/authentik#18775
• web: bump chromedriver from 143.0.0 to 143.0.1 in /web by @​dependabot[bot] in goauthentik/authentik#18776
• web: bump the storybook group across 1 directory with 5 updates by @​dependabot[bot] in goauthentik/authentik#18774
• internal: don't warn on empty outpost for embedded by @​BeryJu in goauthentik/authentik#18786
• lifecycle/aws: bump aws-cdk from 2.1033.0 to 2.1034.0 in /lifecycle/aws by @​dependabot[bot] in goauthentik/authentik#18771
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#18804
• root: Add macOS support for sed in Makefile by @​melizeche in goauthentik/authentik#18795
• ci: bump astral-sh/setup-uv from 7.1.5 to 7.1.6 in /.github/actions/setup by @​dependabot[bot] in goauthentik/authentik#18826
• ci: bump actions/upload-artifact from 5.0.0 to 6.0.0 by @​dependabot[bot] in goauthentik/authentik#18824
• core: bump goauthentik/fips-debian from 07f41ce to c10cd2c by @​dependabot[bot] in goauthentik/authentik#18822
• ci: bump actions/download-artifact from 6.0.0 to 7.0.0 by @​dependabot[bot] in goauthentik/authentik#18825
• ci: bump actions/cache from 5.0.0 to 5.0.1 by @​dependabot[bot] in goauthentik/authentik#18823
• core: list applications fix by @​ryanpesek in goauthentik/authentik#18798
• website/docs: add icon info to style guide by @​dewi-tik in goauthentik/authentik#18832
• core: remove superuser check from Token list by @​gergosimonyi in goauthentik/authentik#18684
• packages/django-dramatiq-postgres: broker: close django connections on consumer close by @​rissson in goauthentik/authentik#18833
• core: bump goauthentik.io/api/v3 from 3.2025120.26 to 3.2026020.1 by @​dependabot[bot] in goauthentik/authentik#18815
• admin/files: revert add check for /media existence (#​18636) by @​rissson in goauthentik/authentik#18829
• website/docs: add jellyseer integration doc by @​gabay in goauthentik/authentik#18812
• crypto: Store details parsed from includeDetails in database instead by @​PeshekDotDev in goauthentik/authentik#18013
• core: skip s3 tests if endpoint isn't available by @​melizeche in goauthentik/authentik#18841
• admin/files: fix get_objects_for_user queryset argument in FileUsedByView by @​dominic-r in goauthentik/authentik#18845
• core: bump goauthentik/fips-debian from c10cd2c to 2f19fc1 by @​dependabot[bot] in goauthentik/authentik#18856
• ci: replace codecov test-results action by @​BeryJu in goauthentik/authentik#18862
• core: add skip s3_test_server_available to TestResolveFileUrlS3Backend by @​melizeche in goauthentik/authentik#18858
• rbac: alter migrated direct permission roles by @​gergosimonyi in goauthentik/authentik#18860
• core: bump library/golang from 5d35fb8 to 8e8f9c8 by @​dependabot[bot] in goauthentik/authentik#18855
• web/admin/rbac: misc object permission fixes by @​gergosimonyi in goauthentik/authentik#18859
• outposts: fix permission errors for related certificates by @​BeryJu in goauthentik/authentik#18861
• website/docs: adjust RBAC-related details in 2025.12 release notes by @​gergosimonyi in goauthentik/authentik#18863
• website/docs: Add docs for passkey autofill (WebauthN Conditional UI) by @​melizeche in goauthentik/authentik#18805
• website/docs: 2025.10.3 release notes by @​BeryJu in goauthentik/authentik#18868
• web: add custom message with links for empty data export list by @​atereshkin in goauthentik/authentik#18830
• web: fix notification counter by @​atereshkin in goauthentik/authentik#18781
• web: bump vite from 7.2.7 to 7.3.0 in /web by @​dependabot[bot] in goauthentik/authentik#18854
• stages/authenticator_*: fix code input field not string by @​BeryJu in goauthentik/authentik#18875
• web: fix file upload form by @​dominic-r in goauthentik/authentik#18808
• web/admin: endpoint: change wording and add helper text by @​dewi-tik in goauthentik/authentik#18871
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#18807
• website/integrations: bookstack: fix redir url by @​dominic-r in goauthentik/authentik#18891
• core: bump astral-sh/uv from 0.9.17 to 0.9.18 by @​dependabot[bot] in goauthentik/authentik#18898
• core: bump goauthentik/fips-debian from 2f19fc1 to 189345a by @​dependabot[bot] in goauthentik/authentik#18897
• web: bump knip from 5.73.3 to 5.74.0 in /web by @​dependabot[bot] in goauthentik/authentik#18896
• web: bump @​types/node from 25.0.0 to 25.0.3 in /web by @​dependabot[bot] in goauthentik/authentik#18895
• web: bump the rollup group across 1 directory with 4 updates by @​dependabot[bot] in goauthentik/authentik#18852
• web: bump the bundler group across 1 directory with 7 updates by @​dependabot[bot] in goauthentik/authentik#18894
• web: bump @​sentry/browser from 10.30.0 to 10.31.0 in /web in the sentry group across 1 directory by @​dependabot[bot] in goauthentik/authentik#18893
• lifecycle/aws: bump aws-cdk from 2.1034.0 to 2.1100.0 in /lifecycle/aws by @​dependabot[bot] in goauthentik/authentik#18850
• web: bump the goauthentik group across 1 directory with 3 updates by @​dependabot[bot] in goauthentik/authentik#18819
• web: bump the swc group across 1 directory with 11 updates by @​dependabot[bot] in goauthentik/authentik#18818
• web: bump the eslint group across 1 directory with 5 updates by @​dependabot[bot] in goauthentik/authentik#18851
• core: bump goauthentik.io/api/v3 from 3.2026020.1 to 3.2026020.3 by @​dependabot[bot] in goauthentik/authentik#18892
• tasks/middleware: close connections on worker status update database error by @​rissson in goauthentik/authentik#18881
• website/docs: added list of Int Guide contributors (also edited frontmatter) by @​tanberry in goauthentik/authentik#18888
• api: fix page_size with invalid query param by @​rissson in goauthentik/authentik#18879
• ci/release-tag: checkout correct branch for make test-docker by @​rissson in goauthentik/authentik#18880
• api: fix latest version for public schema by @​BeryJu in goauthentik/authentik#18902
• website/docs: 2025.12: remove superfluous changes by @​rissson in goauthentik/authentik#18910
• web/admin: reword some things on the device view page by @​BeryJu in goauthentik/authentik#18785
• core/groups: optimize prefetch queries to fetch only required fields by @​joaocfernandes in goauthentik/authentik#18448
• root: fix docker-compose data mount by @​rissson in goauthentik/authentik#18903
• web/admin: add UI copy to RBAC modal by @​tanberry in goauthentik/authentik#18917
• tests/e2e: handle StaleElementReferenceException in parse_json_content by @​melizeche in goauthentik/authentik#18842
• core: bump goauthentik/fips-debian from 189345a to 10dadf1 by @​dependabot[bot] in goauthentik/authentik#18927
• web: bump chromedriver from 143.0.1 to 143.0.2 in /web by @​dependabot[bot] in goauthentik/authentik#18926
• web: bump knip from 5.74.0 to 5.75.1 in /web by @​dependabot[bot] in goauthentik/authentik#18924
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#18920
• lifecycle/aws: bump aws-cdk from 2.1100.0 to 2.1100.1 in /lifecycle/aws by @​dependabot[bot] in goauthentik/authentik#18922
• web: bump the swc group across 1 directory with 11 updates by @​dependabot[bot] in goauthentik/authentik#18923
• web: bump the storybook group across 1 directory with 5 updates by @​dependabot[bot] in goauthentik/authentik#18817
• stages: remove more global state by @​BeryJu in goauthentik/authentik#18641
• packages/ak-guardian: cast safely by @​gergosimonyi in goauthentik/authentik#18929
• web/flow: Fix spurious double submit on ak-stage-autosubmit by @​dminuoso in goauthentik/authentik#18727
• website/integrations: Add launch URL for Immich by @​optix2000 in goauthentik/authentik#18921
• crypto: fix extra cert data in db migration by @​rissson in goauthentik/authentik#18937
• web/elements: progress-bar and table loading header by @​BeryJu in goauthentik/authentik#18934
• stages/identification: replace sleep with make_password by @​BeryJu in goauthentik/authentik#18883
• website/docs: endpoint devices by @​dewi-tik in goauthentik/authentik#18634
• website/docs: Fix labels, Pre-Release detection by @​GirlBossRush in goauthentik/authentik#18945
• website/docs: release notes: add endpoint device links to 2025.12 notes by @​dewi-tik in goauthentik/authentik#18940
• website/docs: Fix version parsing. by @​GirlBossRush in goauthentik/authentik#18948
• web/admin: fix endpoints user binding by @​BeryJu in goauthentik/authentik#18935
• flows/executor: fix KeyError when session has no existing plan by @​dominic-r in goauthentik/authentik#18951
• root: move docker files to lifecycle/containers and change docker-compose to compose by @​PeshekDotDev in goauthentik/authentik#16624
• core: bump goauthentik.io/api/v3 from 3.2026020.3 to 3.2026020.4 by @​dependabot[bot] in goauthentik/authentik#18956
• web: bump chromedriver from 143.0.2 to 143.0.3 in /web by @​dependabot[bot] in goauthentik/authentik#18959
• web: bump the swc group across 1 directory with 11 updates by @​dependabot[bot] in goauthentik/authentik#18958
• web: bump @​sentry/browser from 10.31.0 to 10.32.0 in /web in the sentry group across 1 directory by @​dependabot[bot] in goauthentik/authentik#18957
• ci: bump actions/attest-build-provenance from 3.0.0 to 3.1.0 by @​dependabot[bot] in goauthentik/authentik#18960
• website/docs: add note to active directory source doc by @​dewi-tik in goauthentik/authentik#18787
• web/maintenance: fix missing custom web component imports by @​kensternberg-authentik in goauthentik/authentik#18942
• web/maintenance: no unknown tag names by @​kensternberg-authentik in goauthentik/authentik#18944
• website/integrations: Fix path for Cloudflare Access by @​stijn220 in goauthentik/authentik#18979
• blueprints: add InternallyManagedMixin instead of large list by @​BeryJu in goauthentik/authentik#18983
• web/admin: fix dark theme on map by @​BeryJu in goauthentik/authentik#18985
• web/admin: Fix haveibeenpwned link in PasswordPolicyForm by @​hskrtich in goauthentik/authentik#18984
• events: notifications live update by @​BeryJu in goauthentik/authentik#18980
• web: fix Open button selecting row instead of navigating by @​dominic-r in goauthentik/authentik#18992
• blueprints: fix flaky tests by @​BeryJu in goauthentik/authentik#19002
• ci: bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @​dependabot[bot] in goauthentik/authentik#18999
• providers/oauth2: Automated OpenID Conformance tests by @​BeryJu in goauthentik/authentik#14785
• enterprise/reports: improve export list, confirmation by @​BeryJu in goauthentik/authentik#18981
• enterprise/search: add static autocomplete structure by @​BeryJu in goauthentik/authentik#19008
• website/docs: improve endpoint devices docs by @​dewi-tik in goauthentik/authentik#19007
• web: bump the rollup group across 1 directory with 4 updates by @​dependabot[bot] in goauthentik/authentik#18994
• core: bump openapitools/openapi-generator-cli from v7.16.0 to v7.18.0 in /scripts/api by @​dependabot[bot] in goauthentik/authentik#19018
• web: bump globby from 16.0.0 to 16.1.0 in /web by @​dependabot[bot] in goauthentik/authentik#18995
• api: rework schema generation by @​BeryJu in goauthentik/authentik#18977
• web/admin: prevent file upload attempt when backend not managed by @​BeryJu in goauthentik/authentik#18646
• web: bump the eslint group across 1 directory with 3 updates by @​dependabot[bot] in goauthentik/authentik#19019
• core: bump goauthentik.io/api/v3 from 3.2026020.4 to 3.2026020.5 by @​dependabot[bot] in goauthentik/authentik#19017
• website/docs: Prioritize "Release Candidate" over "Current Release" by @​GirlBossRush in goauthentik/authentik#18975
• web: Locale selector UI fixes by @​GirlBossRush in goauthentik/authentik#18972
• web: Fix Storybook package resolution with npm link by @​GirlBossRush in goauthentik/authentik#19016
• core: use chunked_queryset for expired message deletion by @​BeryJu in goauthentik/authentik#19028
• web/admin: use consistent icon for inactive user status by @​dominic-r in goauthentik/authentik#19032
• web: bump lit from 3.3.1 to 3.3.2 in /web by @​dependabot[bot] in goauthentik/authentik#19038
• web: bump @​lit/reactive-element from 2.1.1 to 2.1.2 in /web by @​dependabot[bot] in goauthentik/authentik#19037
• web: bump knip from 5.75.1 to 5.77.0 in /web by @​dependabot[bot] in goauthentik/authentik#19041
• core: bump goauthentik.io/api/v3 from 3.2026020.5 to 3.2026020.6 by @​dependabot[bot] in goauthentik/authentik#19036
• docs/release notes: update 2025.12 release notes by @​melizeche in goauthentik/authentik#19043
• lib/sync: fix sync_dispatch by @​krejcar25 in goauthentik/authentik#19053
• endpoints/devices: cleanup by @​BeryJu in goauthentik/authentik#19047
• blueprints: set enrollment token key by @​BeryJu in goauthentik/authentik#19061
• website/integrations: Add Wallos by @​0skater0 in goauthentik/authentik#19013
• website/docs: FreeIPA documentation updates by @​borutmrak in goauthentik/authentik#15183
• *: Auto compress images by @​authentik-automation[bot] in goauthentik/authentik#19065
• blueprints: fix deadlock and task context error in MetaApplyBlueprint by @​dominic-r in goauthentik/authentik#19033
• web: fix file search input not resetting results properly by @​dominic-r in goauthentik/authentik#19034
• website/integrations: owncloud: fix php by @​ocmateusz in goauthentik/authentik#19073
• tests/e2e: add endpoint tests by @​BeryJu in goauthentik/authentik#19072
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#18991
• web: bump knip from 5.77.0 to 5.77.1 in /web by @​dependabot[bot] in goauthentik/authentik#19049
• web: bump @​lit/localize-tools from 0.8.0 to 0.8.1 in /web by @​dependabot[bot] in goauthentik/authentik#19040
• internal: update TLS Suite by @​BeryJu in goauthentik/authentik#19076
• web: bump @​formatjs/intl-listformat from 7.7.13 to 8.1.0 in /web by @​dependabot[bot] in goauthentik/authentik#19054
• web/admin: fix button alignment on user view page by @​BeryJu in goauthentik/authentik#19079
• website/docs: endpoints: mention connector key required for stage to work by @​dominic-r in goauthentik/authentik#19084
• website/docs: rel notes .12: add wallos by @​dominic-r in goauthentik/authentik#19063
• website/docs: endpoint devices: update features table by @​dewi-tik in goauthentik/authentik#19094
• website/docs: endpoint devices: add path to macos setup by @​dewi-tik in goauthentik/authentik#19093
• web: bump knip from 5.77.1 to 5.78.0 in /web by @​dependabot[bot] in goauthentik/authentik#19090
• web: fix promoted source button hover losing blue color by @​dominic-r in goauthentik/authentik#19048
• web: Fix stale flow background by @​dominic-r in goauthentik/authentik#19015
• Update Vaultwarden documentation by removing warning by @​austin-dudzik in goauthentik/authentik#19102
• web/maintenance/no unknown attributes (part 1) by @​kensternberg-authentik in goauthentik/authentik#18970
• website/integrations: Add Pulse by @​0skater0 in goauthentik/authentik#19105
• website/integrations: Add Audiobookshelf by @​0skater0 in goauthentik/authentik#19104
• website/docs: release notes: Add more integrations by @​dominic-r in goauthentik/authentik#19109
• web: bump the storybook group across 1 directory with 5 updates by @​dependabot[bot] in goauthentik/authentik#19111
• core: bump library/nginx from fb01117 to ad85427 in /website by @​dependabot[bot] in goauthentik/authentik#19112
• web: bump the eslint group across 1 directory with 3 updates by @​dependabot[bot] in goauthentik/authentik#19110
• web: Fix Impersonation, Lit Reactive Controller Contexts by @​GirlBossRush in goauthentik/authentik#19114
• web: Capitalize language display names, code owner fix by @​GirlBossRush in goauthentik/authentik#19119
• core: bump library/nginx from ad85427 to ca871a8 in /website by @​dependabot[bot] in goauthentik/authentik#19126
• web: bump the swc group across 1 directory with 11 updates by @​dependabot[bot] in goauthentik/authentik#19124
• core: bump github.com/jackc/pgx/v5 from 5.7.6 to 5.8.0 by @​dependabot[bot] in goauthentik/authentik#19088
• core: bump library/node from ccfd9da to 03729a7 in /website by @​dependabot[bot] in goauthentik/authentik#19125
• core, web: bump qs from 6.14.0 to 6.14.1 in /packages/docusaurus-config by @​dependabot[bot] in goauthentik/authentik#19130
• website/integrations: karakeep: don't hardcode wellknown's slug by @​pippo73 in goauthentik/authentik#19127
• web: disable user settings fields when changes are not allowed by @​dominic-r in goauthentik/authentik#19132
• website/docs: endpoint agent release notes by @​BeryJu in goauthentik/authentik#19042
• website/docs: fix build by @​BeryJu in goauthentik/authentik#19148
• web: Token Form Fixes by @​GirlBossRush in goauthentik/authentik#19121
• web/user: fix consent delete form missing details by @​BeryJu in goauthentik/authentik#19147
• web: bump globals from 16.5.0 to 17.0.0 in /web by @​dependabot[bot] in goauthentik/authentik#19154
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#19135
• ci: bump int128/docker-manifest-create-action from 2.10.0 to 2.12.0 by @​dependabot[bot] in goauthentik/authentik#19138
• website/integrations: vaultwarden: add custom email scope by @​williamkray in goauthentik/authentik#19160
• stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @​authentik-automation[bot] in goauthentik/authentik#19137
• core: handle deserialization errors from FileField migration by @​dominic-r in goauthentik/authentik#19067
• web: fix slug auto-updating when editing existing applications by @​dominic-r in goauthentik/authentik#19169
• web: Fix user library colors, modal z-indexes, table progress bars by @​GirlBossRush in goauthentik/authentik#19152
• web/admin: adjust sync threshold, add tooltip by @​BeryJu in goauthentik/authentik#19131
• website/docs: remove duplicates in slo docs by @​nmasnadithya in goauthentik/authentik#19170
• lifecycle: fix migration conn_options for psycopg connection by @​D-Tasker207 in goauthentik/authentik#19134
• web: bump knip from 5.78.0 to 5.79.0 in /web by @​dependabot[bot] in goauthentik/authentik#19181
• ci: bump getsentry/action-release from 3.4.0 to 3.5.0 by @​dependabot[bot] in goauthentik/authentik#19183
• web: bump @​formatjs/intl-listformat from 8.1.0 to 8.1.1 in /web by @​dependabot[bot] in goauthentik/authentik#19182
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#19179
• lib: update error logging by @​PeshekDotDev in goauthentik/authentik#18628
• website/integrations: make grafana terraform section expand by @​BeryJu in goauthentik/authentik#19192
• core: add prettier failure on duplicate group names by @​gergosimonyi in goauthentik/authentik#18941
• web/maintenance: no missing element type definitions by @​kensternberg-authentik in goauthentik/authentik#18950
• root: codespell: ignore Python virtual env, group patterns. by @​GirlBossRush in goauthentik/authentik#19180
• web: Merge branch -- Stale notifications, synchronized context objects, rendering fixes by @​GirlBossRush in goauthentik/authentik#19141
• website/docs: Add docs for roles by @​PeshekDotDev in goauthentik/authentik#19196
• web: Defer table refresh, visibility checks. by @​GirlBossRush in goauthentik/authentik#19194
• rbac: Add show all to roles tab, add role tab to groups by @​PeshekDotDev in goauthentik/authentik#19097
• website/docs: rewrite section about users and perms by @​tanberry in goauthentik/authentik#19195
• core: add last_login filter to users API by @​dominic-r in goauthentik/authentik#18993
• web: bump the eslint group across 1 directory with 3 updates by @​dependabot[bot] in goauthentik/authentik#19205
• admin/files: support %(theme)s variable in media file paths by @​dominic-r in goauthentik/authentik#19108
• website/integrations: glpi: add step by @​dewi-tik in goauthentik/authentik#19208
• web: bump knip from 5.79.0 to 5.80.0 in /web by @​dependabot[bot] in goauthentik/authentik#19207
• core: bump axllent/mailpit from v1.28.0 to v1.28.1 in /tests/e2e by @​dependabot[bot] in goauthentik/authentik#19204
• lifecycle/aws: bump aws-cdk from 2.1100.1 to 2.1100.2 in /lifecycle/aws by @​dependabot[bot] in goauthentik/authentik#19203
• core: bump goauthentik.io/api/v3 from 3.2026020.6 to 3.2026020.7 by @​dependabot[bot] in goauthentik/authentik#19202
• translate: Updates for project authentik and language pt_BR by @​transifex-integration[bot] in goauthentik/authentik#19082
• web/maintenance: lint pass to add missing HTMLElementEventMap entries by @​kensternberg-authentik in goauthentik/authentik#18953
• outpost/proxyv2: reduce max number of postgres connections by @​rissson in goauthentik/authentik#19211
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#19200
• website/docs: revisit endpoint docs the nth by @​BeryJu in goauthentik/authentik#19116
• ci: bump astral-sh/setup-uv from 7.1.6 to 7.2.0 in /.github/actions/setup by @​dependabot[bot] in goauthentik/authentik#19221
• endpoints: include license status in agent config by @​BeryJu in goauthentik/authentik#19227
• web: bump @​formatjs/intl-listformat from 8.1.1 to 8.1.2 in /web by @​dependabot[bot] in goauthentik/authentik#19220
• lifecycle/aws: bump aws-cdk from 2.1100.2 to 2.1100.3 in /lifecycle/aws by @​dependabot[bot] in goauthentik/authentik#19219
• core: bump goauthentik.io/api/v3 from 3.2026020.7 to 3.2026020.8 by @​dependabot[bot] in goauthentik/authentik#19218
• stages/authenticator_static: set max token length to 100 chars by @​dominic-r in goauthentik/authentik#19162
• website/glossary: improve by @​dominic-r in goauthentik/authentik#18969
• core: fix read replica routing during transactions by @​dominic-r in goauthentik/authentik#19086
• website: Fix typos. by @​dominic-r in goauthentik/authentik#19243
• core: bump goauthentik.io/api/v3 from 3.2026020.8 to 3.2026020.10 by @​dependabot[bot] in goauthentik/authentik#19242
• website/integrations: update AWS by @​dewi-tik in goauthentik/authentik#17861
• website/docs: update github social login script example by @​busybox11 in goauthentik/authentik#19246
• web: bump vite from 7.3.0 to 7.3.1 in /web by @​dependabot[bot] in goauthentik/authentik#19245
• web: bump the rollup group across 1 directory with 4 updates by @​dependabot[bot] in goauthentik/authentik#19206
• stages/prompt: optimize API endpoints by @​rissson in goauthentik/authentik#19251
• website/docs: update entra id provider docs by @​dewi-tik in goauthentik/authentik#18366
• website/integations: fix aws spelling by @​dewi-tik in goauthentik/authentik#19253
• stages/password: replace session-based retries with reputation by @​BeryJu in goauthentik/authentik#18643
• web: bump chromedriver from 143.0.3 to 143.0.4 in /web by @​dependabot[bot] in goauthentik/authentik#19244
• web/admin: add banner to flow import form by @​BeryJu in goauthentik/authentik#19288
• core: bump django from v5.2.9 to 5.2.10 by @​melizeche in goauthentik/authentik#19290
• endpoints: show agent version by @​BeryJu in goauthentik/authentik#19239
• core: bump urllib3 from 2.5.0 to v2.6.3 by @​melizeche in goauthentik/authentik#19287
• web: bump knip from 5.80.0 to 5.80.1 in /web by @​dependabot[bot] in goauthentik/authentik#19301
• web: Fix flow inspector advancement event. by @​GirlBossRush in goauthentik/authentik#19309
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#19237
• website/docs: deprecate GCDT auth stage by @​dewi-tik in goauthentik/authentik#19306
• website/docs: Fix typo in GitHub OAuth Source instructions by @​tcrasset in goauthentik/authentik#18936
• website/docs: update m2m doc by @​dewi-tik in goauthentik/authentik#18963
• website/docs: Fix documentation example for app_entitlements_attributes. by @​sebastianw in goauthentik/authentik#19316
• website/docs: add flow import warnings by @​dewi-tik in goauthentik/authentik#19307
• web: bump pino from 10.1.0 to 10.1.1 in /web by @​dependabot[bot] in goauthentik/authentik#19333
• web: bump knip from 5.80.1 to 5.80.2 in /web by @​dependabot[bot] in goauthentik/authentik#19332
• core: bump axllent/mailpit from v1.28.1 to v1.28.2 in /tests/e2e by @​dependabot[bot] in goauthentik/authentik#19329
• web: bump @​types/node from 25.0.3 to 25.0.6 in /web by @​dependabot[bot] in goauthentik/authentik#19331
• core: bump library/nginx from ca871a8 to 7272239 in /website by @​dependabot[bot] in goauthentik/authentik#19334
• website/docs: update unique email policy by @​dewi-tik in goauthentik/authentik#19305
• web: bump @​types/react from 19.2.7 to 19.2.8 in /web in the react group across 1 directory by @​dependabot[bot] in goauthentik/authentik#19330
• web: Images styles, theming by @​GirlBossRush in goauthentik/authentik#19233
• website/docs: update LDAP provider docs by @​dewi-tik in goauthentik/authentik#18272
• web: Flow info, localization, back button. by @​GirlBossRush in goauthentik/authentik#19234
• web: bump type-fest from 5.3.1 to 5.4.0 in /web by @​dependabot[bot] in goauthentik/authentik#19354
• core: bump goauthentik.io/api/v3 from 3.2026020.10 to 3.2026020.11 by @​dependabot[bot] in goauthentik/authentik#19300
• ci: bump actions/setup-go from 6.1.0 to 6.2.0 in /.github/actions/setup by @​dependabot[bot] in goauthentik/authentik#19352
• web: bump the bundler group across 1 directory with 3 updates by @​dependabot[bot] in goauthentik/authentik#19349
• ci: bump actions/setup-go from 6.1.0 to 6.2.0 by @​dependabot[bot] in goauthentik/authentik#19351
• web: bump @​sentry/browser from 10.32.1 to 10.33.0 in /web in the sentry group across 1 directory by @​dependabot[bot] in goauthentik/authentik#19347
• web: bump @​types/node from 25.0.6 to 25.0.7 in /web by @​dependabot[bot] in goauthentik/authentik#19353
• core: bump library/nginx from 7272239 to 06eb0c8 in /website by @​dependabot[bot] in goauthentik/authentik#19350
• packages/django-dramatiq-postgres: broker: empty message after task completed successfully by @​rissson in goauthentik/authentik#19340
• core: bump jsii from 1.120.0 to v1.125.0 by @​melizeche in goauthentik/authentik#19268
• core: bump microsoft-kiota-abstractions from 1.9.7 to v1.9.8 by @​melizeche in goauthentik/authentik#19270
• core: bump microsoft-kiota-serialization-json from 1.9.7 to v1.9.8 by @​melizeche in goauthentik/authentik#19272
• core: bump orjson from 3.11.4 to v3.11.5 by @​melizeche in goauthentik/authentik#19276
• core: bump platformdirs from 4.5.0 to v4.5.1 by @​melizeche in goauthentik/authentik#19278
• core: bump protobuf from 6.33.1 to v6.33.2 by @​melizeche in goauthentik/authentik#19280
• core: bump ua-parser-builtins from 0.18.0.post1 to v202601 by @​melizeche in goauthentik/authentik#19286
• core: bump cbor2 from 5.7.1 to v5.8.0 by @​melizeche in goauthentik/authentik#19263
• core: bump microsoft-kiota-serialization-multipart from 1.9.7 to v1.9.8 by @​melizeche in goauthentik/authentik#19273
• core: bump microsoft-kiota-serialization-form from 1.9.7 to v1.9.8 by @​melizeche in goauthentik/authentik#19271
• core: bump boto3 from 1.42.1 to v1.42.24 by @​melizeche in goauthentik/authentik#19261
• core: bump pynacl from 1.6.1 to v1.6.2 by @​melizeche in goauthentik/authentik#19281
• core: bump opentelemetry-api from 1.39.0 to v1.39.1 by @​melizeche in goauthentik/authentik#19275
• core: bump pathspec from 0.12.1 to v1.0.2 by @​melizeche in goauthentik/authentik#19277
• core: bump jsonschema from 4.25.1 to v4.26.0 by @​melizeche in goauthentik/authentik#19269
• core: bump txaio from 25.9.2 to v25.12.2 by @​melizeche in goauthentik/authentik#19284
• core: bump anyio from 4.12.0 to v4.12.1 by @​melizeche in goauthentik/authentik#19258
• core: bump aiohttp from 3.13.2 to v3.13.3 by @​melizeche in goauthentik/authentik#19257
• core: bump google-auth-httplib2 from 0.2.1 to v0.3.0 by @​melizeche in goauthentik/authentik#19266
• core: bump sqlparse from 0.5.4 to v0.5.5 by @​melizeche in goauthentik/authentik#19283
• core: bump certifi from 2025.11.12 to v2026.1.4 by @​melizeche in goauthentik/authentik#19264
• core: bump autobahn from 25.11.1 to v25.12.2 by @​melizeche in goauthentik/authentik#19259
• core: bump pyparsing from 3.2.5 to v3.3.1 by @​melizeche in goauthentik/authentik#19282
• core: bump types-requests from 2.32.4.20250913 to v2.32.4.20260107 by @​melizeche in goauthentik/authentik#19285
• core: bump greenlet from 3.2.4 to v3.3.0 by @​melizeche in goauthentik/authentik#19267
• core: bump google-auth from 2.43.0 to v2.47.0 by @​melizeche in goauthentik/authentik#19265
• core: bump azure-core from 1.36.0 to v1.37.0 by @​melizeche in goauthentik/authentik#19260
• internal: rework liveness probe and proxy by @​BeryJu in goauthentik/authentik#19312
• core: bump proto-plus from 1.26.1 to v1.27.0 by @​melizeche in goauthentik/authentik#19279
• core: bump microsoft-kiota-serialization-text from 1.9.7 to v1.9.8 by @​melizeche in goauthentik/authentik#19274
• core: bump google-api-core from 2.28.1 to v2.29.0 by @​rissson in goauthentik/authentik#19359
• core: bump pathspec from 1.0.2 to v1.0.3 by @​rissson in goauthentik/authentik#19363
• core: bump azure-core from 1.37.0 to v1.38.0 by @​rissson in goauthentik/authentik#19357
• web/admin: always retrieve selected provider when editing the application by @​kensternberg-authentik in goauthentik/authentik#19341
• revert: web: disable user settings fields when changes are not allowed by @​BeryJu in goauthentik/authentik#19230
• core: bump zope-interface from 8.1.1 to v8.2 by @​rissson in goauthentik/authentik#19367
• core: bump protobuf from 6.33.2 to v6.33.4 by @​rissson in goauthentik/authentik#19365
• core: bump prometheus-client from 0.23.1 to v0.24.0 by @​rissson in goauthentik/authentik#19364
• internal/outpost: improve PostgreSQL connection options parsing by @​dominic-r in goauthentik/authentik#19118
• outpost/proxyv2: fix stale session cookie causing 400 error in createState by @​dominic-r in goauthentik/authentik#19026
• website/docs: update location for logs on windows by @​BeryJu in goauthentik/authentik#19371
• core: bump boto3 from 1.42.24 to v1.42.26 by @​rissson in goauthentik/authentik#19358
• web/elements: hidden secrets not propagating by @​kensternberg-authentik in goauthentik/authentik#19029
• core: bump websockets from 15.0.1 to v16.0 by @​rissson in goauthentik/authentik#19366
• core: bump httplib2 from 0.31.0 to v0.31.1 by @​rissson in goauthentik/authentik#19360
• core: bump microsoft-kiota-authentication-azure from 1.9.7 to v1.9.8 by @​rissson in goauthentik/authentik#19361
• stages/authenticator_validate: decrease reputation on failed MFA attempt by @​BeryJu in goauthentik/authentik#19378
• core: bump microsoft-kiota-http from 1.9.7 to v1.9.8 by @​rissson in goauthentik/authentik#19362
• web: UI Locale Fixes by @​GirlBossRush in goauthentik/authentik#19235
• website/integrations: Add DataDog by @​dominic-r in goauthentik/authentik#19320
• web: bump the eslint group across 1 directory with 3 updates by @​dependabot[bot] in goauthentik/authentik#19348
• core: Update supported versions in SECURITY.md by @​melizeche in goauthentik/authentik#19385
• website/docs: update gws provider docs by @​dewi-tik in goauthentik/authentik#18286
• web/admin: Pluralize Certificate-Key Pair deletion confirmation by @​dominic-r in goauthentik/authentik#19389
• website/docs: mention dynamic overrides in redirect stage documentation by @​severin in goauthentik/authentik#19368
• web: bump @​types/node from 25.0.7 to 25.0.8 in /web by @​dependabot[bot] in goauthentik/authentik#19392
• website/docs: add import to discord policy by @​dewi-tik in goauthentik/authentik#19397
• website/docs: remove "beta" tag from 2025.12 by @​gergosimonyi in goauthentik/authentik#19404
• core: bump library/node from 03729a7 to 6222695 in /website by @​dependabot[bot] in goauthentik/authentik#19393
• core: bump library/nginx from 06eb0c8 to e3a22a7 in /website by @​dependabot[bot] in goauthentik/authentik#19394
• core: bump xmlsec from 1.3.16 to 1.3.17 by @​dependabot[bot] in goauthentik/authentik#19411
• core: bump lxml from 6.0.0 to 6.0.2 by @​dependabot[bot] in goauthentik/authentik#19409
• core: bump black from 25.1.0 to 25.12.0 by @​dependabot[bot] in goauthentik/authentik#19412
• core: bump drf-orjson-renderer from 1.7.3 to 1.8.0 by @​dependabot[bot] in goauthentik/authentik#19415
• core: bump python-kadmin-rs from 0.6.1 to 0.6.3 by @​dependabot[bot] in goauthentik/authentik#19416
• core: bump ruff from 0.11.9 to 0.14.11 by @​dependabot[bot] in goauthentik/authentik#19410
• core: bump pdoc from 15.0.3 to 16.0.0 by @​dependabot[bot] in goauthentik/authentik#19413
• core: bump bpython from 0.25 to 0.26 by @​dependabot[bot] in goauthentik/authentik#19408
• core: bump wsproto from 1.2.0 to 1.3.2 by @​dependabot[bot] in goauthentik/authentik#19417
• website/docs: add 2026.2 release notes draft page by @​gergosimonyi in goauthentik/authentik#19418
• core: remove session migration by @​rissson in goauthentik/authentik#14568
• core: bump debugpy from 1.8.14 to 1.8.19 by @​dependabot[bot] in goauthentik/authentik#19414
• core: bump geoip2 from 5.1.0 to 5.2.0 by @​dependabot[bot] in goauthentik/authentik#19429
• core: bump importlib-metadata from 8.6.1 to 8.7.1 by @​dependabot[bot] in goauthentik/authentik#19430
• web/startup: deprecated theme names break theming by @​kensternberg-authentik in goauthentik/authentik#19431
• core: bump freezegun from 1.5.1 to 1.5.5 by @​dependabot[bot] in goauthentik/authentik#19423
• core: bump bandit from 1.8.3 to 1.9.2 by @​dependabot[bot] in goauthentik/authentik#19422
• core: bump pyyaml from 6.0.2 to 6.0.3 by @​dependabot[bot] in goauthentik/authentik#19426
• core: bump django-stubs[compatible-mypy] from 5.2.5 to 5.2.8 by @​dependabot[bot] in goauthentik/authentik#19424
• core: bump django-pgtrigger from 4.15.2 to 4.17.0 by @​dependabot[bot] in goauthentik/authentik#19428
• core: bump aws-cdk-lib from 2.188.0 to 2.234.1 by @​dependabot[bot] in goauthentik/authentik#19427
• core: bump pytest from 8.3.5 to 9.0.2 by @​dependabot[bot] in goauthentik/authentik#19425
• core: bump types-ldap3 from 2.9.13.20250622 to 2.9.13.20251121 by @​dependabot[bot] in goauthentik/authentik#19438
• core: bump django-pglock from 1.7.2 to 1.8.0 by @​dependabot[bot] in goauthentik/authentik#19437
• core: bump cryptography from 45.0.5 to 46.0.3 by @​dependabot[bot] in goauthentik/authentik#19439
• core: bump pydantic from 2.11.7 to 2.12.5 by @​dependabot[bot] in goauthentik/authentik#19435
• core: bump twilio from 9.7.0 to 9.9.1 by @​dependabot[bot] in goauthentik/authentik#19434
• core: bump sentry-sdk from 2.33.2 to 2.49.0 by @​dependabot[bot] in goauthentik/authentik#19441
• core: bump coverage[toml] from 7.8.0 to 7.13.1 by @​dependabot[bot] in goauthentik/authentik#19446
• core: bump setproctitle from 1.3.6 to 1.3.7 by @​dependabot[bot] in goauthentik/authentik#19447
• core: bump django-filter from 25.1 to 25.2 by @​dependabot[bot] in goauthentik/authentik#19444
• core: bump paramiko from 3.5.1 to 4.0.0 by @​dependabot[bot] in goauthentik/authentik#19440
• core: bump gssapi from 1.9.0 to 1.10.1 by @​dependabot[bot] in goauthentik/authentik#19436
• core: bump fido2 from 2.0.0 to 2.1.0 by @​dependabot[bot] in goauthentik/authentik#19445
• core: bump webauthn from 2.6.0 to 2.7.0 by @​dependabot[bot] in goauthentik/authentik#19442
• core: bump uvicorn[standard] from 0.35.0 to 0.40.0 by @​dependabot[bot] in goauthentik/authentik#19453
• core: bump psycopg[c,pool] from 3.2.9 to 3.3.2 by @​dependabot[bot] in goauthentik/authentik#19452
• core: bump djangorestframework-stubs[compatible-mypy] from 3.16.3 to 3.16.7 by @​dependabot[bot] in goauthentik/authentik#19449
• core: bump pytest-randomly from 3.16.0 to 4.0.1 by @​dependabot[bot] in goauthentik/authentik#19456
• core: bump structlog from 25.4.0 to 25.5.0 by @​dependabot[bot] in goauthentik/authentik#19450
• core: bump constructs from 10.4.2 to 10.4.4 by @​dependabot[bot] in goauthentik/authentik#19451
• core: bump msgraph-sdk from 1.39.0 to 1.52.0 by @​dependabot[bot] in goauthentik/authentik#19454
• core: bump selenium from 4.32.0 to 4.39.0 by @​dependabot[bot] in goauthentik/authentik#19455
• core: bump google-api-python-client from 2.177.0 to 2.188.0 by @​dependabot[bot] in goauthentik/authentik#19443
• core: bump mypy from 1.18.2 to 1.19.1 by @​dependabot[bot] in goauthentik/authentik#19457
• core: bump channels from 4.3.1 to 4.3.2 by @​dependabot[bot] in goauthentik/authentik#19458
• root: Python 3.14 by @​BeryJu in goauthentik/authentik#17313
• ci: fix checkout stable (for 2025.12) by @​gergosimonyi in goauthentik/authentik#19448
• lib: use orjson for structlog json by @​BeryJu in goauthentik/authentik#19462
• root: upgrade ruff lint for 3.14 by @​BeryJu in goauthentik/authentik#19461
• website/integrations: add MinIO AIStor configuration via environment variables by @​Fredouye in goauthentik/authentik#19337
• web: bump prettier from 3.7.4 to 3.8.0 in /web by @​dependabot[bot] in goauthentik/authentik#19471
• core: bump library/node from 25.2.1-trixie to 25.3.0-trixie in /website by @​dependabot[bot] in goauthentik/authentik#19468
• core: bump library/nginx from e3a22a7 to c881927 in /website by @​dependabot[bot] in goauthentik/authentik#19469
• stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @​authentik-automation[bot] in goauthentik/authentik#19464
• revert: lib: use orjson for structlog json by @​BeryJu in goauthentik/authentik#19478
• providers/oauth2: allow property mappings to override scope claim in access tokens by @​JMLX42 in goauthentik/authentik#19226
• root: adjust makefile for non-brew macos by @​BeryJu in goauthentik/authentik#19479
• endpoints/connectors/agent: Skip Endpoint stage on device IA & fix confusing identification subtext by @​BeryJu in goauthentik/authentik#19482
• website/docs: limiting permissions of AD service account by @​dewi-tik in goauthentik/authentik#19483
• endpoints/connectors/agent: add tests for IA endpoint stage by @​BeryJu in goauthentik/authentik#19487
• web: Z-Index Fixes, Mobile Sidebar Behavior. by @​GirlBossRush in goauthentik/authentik#19460
• web/admin: fix switches by @​BeryJu in goauthentik/authentik#19493
• lifecycle: re-add quoted types for gunicorn config by @​BeryJu in goauthentik/authentik#19500
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#19386
• website/docs: release notes: Update release notes for version 2025.12.1 by @​melizeche in goauthentik/authentik#19502
• sources/kerberos: update to new python-kadmin-rs by @​rissson in goauthentik/authentik#19491
• root, web: Bump package-lock.json by @​GirlBossRush in goauthentik/authentik#19501
• lifecycle/aws: bump aws-cdk from 2.1100.3 to 2.1101.0 in /lifecycle/aws by @​dependabot[bot] in goauthentik/authentik#19510
• core: bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 by @​dependabot[bot] in goauthentik/authentik#19507
• web: bump @​sentry/browser from 10.33.0 to 10.34.0 in /web in the sentry group across 1 directory by @​dependabot[bot] in goauthentik/authentik#19466
• web: bump pino from 10.1.1 to 10.2.0 in /web by @​dependabot[bot] in goauthentik/authentik#19474
• web: bump knip from 5.80.2 to 5.81.0 in /web by @​dependabot[bot] in goauthentik/authentik#19475
• core: bump aws-cdk-lib from 2.234.1 to 2.235.0 by @​dependabot[bot] in goauthentik/authentik#19511
• core: bump github.com/getsentry/sentry-go from 0.40.0 to 0.41.0 by @​dependabot[bot] in goauthentik/authentik#19508
• core: bump ruff from 0.14.11 to 0.14.13 by @​dependabot[bot] in goauthentik/authentik#19513
• core: bump kubernetes from 33.1.0 to 35.0.0 by @​dependabot[bot] in goauthentik/authentik#19514
• ci: bump actions/setup-node from 6.1.0 to 6.2.0 by @​dependabot[bot] in goauthentik/authentik#19470
• ci: bump actions/setup-node from 6.1.0 to 6.2.0 in /.github/actions/setup by @​dependabot[bot] in goauthentik/authentik#19472
• web: bump @​types/node from 25.0.8 to 25.0.9 in /web by @​dependabot[bot] in goauthentik/authentik#19516
• web: bump @​formatjs/intl-listformat from 8.1.2 to 8.2.0 in /web by @​dependabot[bot] in goauthentik/authentik#19515
• website: Omit Drafts From Version Picker by @​GirlBossRush in goauthentik/authentik#19505
• tests/e2e: Add delay and serialized rollback to saml e2e test by @​melizeche in goauthentik/authentik#18840
• core: bump pyasn1 from 0.6.1 to 0.6.2 by @​dependabot[bot] in goauthentik/authentik#19531
• website/integrations: portainer: add automatic team management instructions by @​DonQuinleone in goauthentik/authentik#19530
• website/docs: endpoint devices: update device code flow instructions by @​dewi-tik in goauthentik/authentik#19528
• *: Auto compress images by @​authentik-automation[bot] in goauthentik/authentik#19533
• admin/files: fix manageable check blocking file creation on fresh installs by @​dominic-r in goauthentik/authentik#19547
• admin/files: fix duplicate bucket name in presigned URLs with custom domain by @​dominic-r in goauthentik/authentik#19537
• ci: bump actions/cache from 5.0.1 to 5.0.2 by @​dependabot[bot] in goauthentik/authentik#19571
• core: bump constructs from 10.4.4 to 10.4.5 by @​dependabot[bot] in goauthentik/authentik#19563
• core: bump axllent/mailpit from v1.28.2 to v1.28.3 in /tests/e2e by @​dependabot[bot] in goauthentik/authentik#19565
• ci: bump int128/docker-manifest-create-action from 2.12.0 to 2.13.0 by @​dependabot[bot] in goauthentik/authentik#19572
• website/docs: add s3 perms by @​dewi-tik in goauthentik/authentik#19579
• web/forms: fix invalid date error for empty datetime-local inputs by @​dominic-r in goauthentik/authentik#19561
• website/docs: add Arcane integration by @​steilerDev in goauthentik/authentik#19584
• core: bump black from 25.12.0 to 26.1.0 by @​dependabot[bot] in goauthentik/authentik#19567
• core: bump bandit from 1.9.2 to 1.9.3 by @​dependabot[bot] in goauthentik/authentik#19566
• web: update @​goauthentik/api by @​Ma27 in goauthentik/authentik#19542
• tests: improve e2e/integration test reliability by @​BeryJu in goauthentik/authentik#19540
• web: bump knip from 5.81.0 to 5.82.1 in /web by @​dependabot[bot] in goauthentik/authentik#19603
• web: bump pino from 10.2.0 to 10.2.1 in /web by @​dependabot[bot] in goauthentik/authentik#19602
• web: bump the swc group across 1 directory with 12 updates by @​dependabot[bot] in goauthentik/authentik#19601
• web: bump the rollup group across 1 directory with 4 updates by @​dependabot[bot] in goauthentik/authentik#19600
• web: bump the eslint group across 1 directory with 3 updates by @​dependabot[bot] in goauthentik/authentik#19599
• core: bump aws-cdk-lib from 2.235.0 to 2.235.1 by @​dependabot[bot] in goauthentik/authentik#19598
• web: bump @​sentry/browser from 10.34.0 to 10.35.0 in /web in the sentry group across 1 directory by @​dependabot[bot] in goauthentik/authentik#19597
• core: bump fido2 from 2.1.0 to 2.1.1 by @​dependabot[bot] in goauthentik/authentik#19596
• core: bump openapitools/openapi-generator-cli from v7.18.0 to v7.19.0 in /scripts/api by @​dependabot[bot] in goauthentik/authentik#19595
• core: bump goauthentik.io/api/v3 from 3.2026020.11 to 3.2026020.12 by @​dependabot[bot] in goauthentik/authentik#19594
• core: bump selenium from 4.39.0 to 4.40.0 by @​dependabot[bot] in goauthentik/authentik#19564
• endpoints: fix endpoints stage marked as enterprise by @​BeryJu in goauthentik/authentik#19607
• web: bump type-fest from 5.4.0 to 5.4.1 in /web by @​dependabot[bot] in goauthentik/authentik#19473
• policies: fix Providers authentication_flow not used when set by @​BeryJu in goauthentik/authentik#19609
• integrations: add saml steps to mattermost by @​PeshekDotDev in goauthentik/authentik#19590
• providers/saml: allow encryption certificates without private keys by @​PeshekDotDev in goauthentik/authentik#19526
• providers/saml: fix structure of encrypted saml assertion by @​PeshekDotDev in goauthentik/authentik#19592
• sources/saml: Fix signature verification order to accommodate encrypted assertions by @​PeshekDotDev in goauthentik/authentik#19593
• lib/sync/outgoing: handle deletions even if object does not exist in database by @​rissson in goauthentik/authentik#18968
• website/docs: endpoints devices: typo fix by @​fheisler in goauthentik/authentik#19621
• website/docs: sources: add keycloak by @​PeshekDotDev in goauthentik/authentik#19591
• web/user: fix Firefox for Android infinite render loop in user library by @​Gulianrdgd in goauthentik/authentik#19379
• web/forms: fix forms not resetting state when modal closes by @​dominic-r in goauthentik/authentik#19562
• web/elements: reduce spacing between collapsible form groups by @​dominic-r in goauthentik/authentik#19627
• website/docs: Update saml google workspace guide by @​PeshekDotDev in goauthentik/authentik#19624
• website/integrations: update qnap by @​dewi-tik in goauthentik/authentik#19644
• core: bump sentry-sdk from 2.49.0 to 2.50.0 by @​dependabot[bot] in goauthentik/authentik#19630
• web: bump @​types/react from 19.2.8 to 19.2.9 in /web in the react group across 1 directory by @​dependabot[bot] in goauthentik/authentik#19631
• core: bump django-stubs[compatible-mypy] from 5.2.8 to 5.2.9 by @​dependabot[bot] in goauthentik/authentik#19629
• core: bump github.com/pires/go-proxyproto from 0.8.1 to 0.9.0 by @​dependabot[bot] in goauthentik/authentik#19628
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#19535
• core: bump library/node from 25.3.0-trixie to 25.4.0-trixie in /website by @​dependabot[bot] in goauthentik/authentik#19632
• website/docs: update endpoint agent windows log location by @​BeryJu in goauthentik/authentik#19645
• sources/saml: Set AuthnRequest ProtocolBinding to HTTP-POST instead of HTTP-Redirect by @​ikob in goauthentik/authentik#17378
• sources/saml: properly catch InvalidSignature exception by @​PeshekDotDev in goauthentik/authentik#19641
• web: Reduce Sentry Development Errors by @​GirlBossRush in goauthentik/authentik#19504
• web/a11y: Locale selector select styles, contrast. by @​GirlBossRush in goauthentik/authentik#19634
• web/elements: remove pfbase everywhere by @​kensternberg-authentik in goauthentik/authentik#19623
• web/flows: update icon and text for device classes by @​BeryJu in goauthentik/authentik#19648
• web/admin: fix captcha stage provider selector not showing saved value by @​dominic-r in goauthentik/authentik#19555
• web: bump chromedriver from 143.0.4 to 144.0.0 in /web by @​dependabot[bot] in goauthentik/authentik#19668
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#19654
• core: bump packaging from 25.0 to 26.0 by @​dependabot[bot] in goauthentik/authentik#19659
• web: bump @​sentry/browser from 10.35.0 to 10.36.0 in /web in the sentry group across 1 directory by @​dependabot[bot] in goauthentik/authentik#19660
• ci: bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 by @​dependabot[bot] in goauthentik/authentik#19662
• ci: bump actions/setup-python from 6.1.0 to 6.2.0 in /.github/actions/setup by @​dependabot[bot] in goauthentik/authentik#19664
• core, web: bump lodash from 4.17.21 to 4.17.23 in /packages/docusaurus-config by @​dependabot[bot] in goauthentik/authentik#19655
• web: bump @​types/node from 25.0.9 to 25.0.10 in /web by @​dependabot[bot] in goauthentik/authentik#19669
• web: bump prettier from 3.8.0 to 3.8.1 in /web by @​dependabot[bot] in goauthentik/authentik#19667
• web: bump country-flag-icons from 1.6.4 to 1.6.7 in /web by @​dependabot[bot] in goauthentik/authentik#19666
• web: bump the storybook group across 1 directory with 5 updates by @​dependabot[bot] in goauthentik/authentik#19661
• web: bump the rollup group across 1 directory with 4 updates by @​dependabot[bot] in goauthentik/authentik#19663
• web: bump core-js from 3.47.0 to 3.48.0 in /web by @​dependabot[bot] in goauthentik/authentik#19665
• providers/oauth2: add logout+jwt token type for oidc logout token. by @​jeroen1602 in goauthentik/authentik#19554
• website/docs: update LDAP search permission instructions by @​dewi-tik in goauthentik/authentik#19676
• sources/oauth: add fallback for id_token when profile URL is not available by @​BeryJu in goauthentik/authentik#19311
• website/docs: endpoint devices: add serial number note by @​dewi-tik in goauthentik/authentik#19677
• core: add bulk session revocation by @​cdmx-in in goauthentik/authentik#18564
• providers/proxy: Fix incorrect comparison of redirect URL and CookieDomain by @​vitSkalicky in goauthentik/authentik#15686
• web/admin: fix brand form sending "undefined" string for blank default application by @​dominic-r in goauthentik/authentik#19658
• web/admin: fix file upload not preserving extension for custom names with dots by @​dominic-r in goauthentik/authentik#19548
• web/common: add dev middleware to show warnings for consecutive identical requests by @​BeryJu in goauthentik/authentik#19671
• web: Form Modal Independence: Part 1 by @​GirlBossRush in goauthentik/authentik#19395
• ci: bump actions/checkout from 6.0.1 to 6.0.2 by @​dependabot[bot] in goauthentik/authentik#19696
• web: bump globals from 17.0.0 to 17.1.0 in /web by @​dependabot[bot] in goauthentik/authentik#19695
• web: bump unist-util-visit from 5.0.0 to 5.1.0 in /web by @​dependabot[bot] in goauthentik/authentik#19694
• web: bump the bundler group across 1 directory with 3 updates by @​dependabot[bot] in goauthentik/authentik#19693
• core: bump gunicorn from 23.0.0 to 24.0.0 by @​dependabot[bot] in goauthentik/authentik#19692
• core: bump twilio from 9.9.1 to 9.10.0 by @​dependabot[bot] in goauthentik/authentik#19691
• core: bump ruff from 0.14.13 to 0.14.14 by @​dependabot[bot] in goauthentik/authentik#19690
• core: bump msgraph-sdk from 1.52.0 to 1.53.0 by @​dependabot[bot] in goauthentik/authentik#19689
• core: bump goauthentik/selenium from 143.0-ak-0.35.3 to 144.0-ak-0.35.7 in /tests/e2e by @​dependabot[bot] in goauthentik/authentik#19688
• lifecycle/aws: bump aws-cdk from 2.1101.0 to 2.1102.0 in /lifecycle/aws by @​dependabot[bot] in goauthentik/authentik#19687
• core: bump goauthentik.io/api/v3 from 3.2026020.12 to 3.2026020.14 by @​dependabot[bot] in goauthentik/authentik#19686
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#19684
• internal: fix incorrect metric calculation by @​BeryJu in goauthentik/authentik#19701
• core: return bad request when user is authenticated and not active by @​BeryJu in goauthentik/authentik#19706
• web/admin: fix impersonation form requesting data without being opened by @​BeryJu in goauthentik/authentik#19673
• endpoints: FleetDM connector by @​BeryJu in goauthentik/authentik#18589
• endpoints/connectors/agent: fix icon by @​BeryJu in goauthentik/authentik#19722
• Makefile: add optional uv prefix by @​PeshekDotDev in goauthentik/authentik#19738
• website/integrations: paperless-ngx: Update by @​dominic-r in goauthentik/authentik#19718
• web: bump playwright from 1.57.0 to 1.58.0 in /web by @​dependabot[bot] in goauthentik/authentik#19755
• web: bump country-flag-icons from 1.6.7 to 1.6.8 in /web by @​dependabot[bot] in goauthentik/authentik#19754
• web: bump pino from 10.2.1 to 10.3.0 in /web by @​dependabot[bot] in goauthentik/authentik#19752
• core: bump gunicorn from 24.0.0 to 24.1.1 by @​dependabot[bot] in goauthentik/authentik#19751
• core: bump coverage[toml] from 7.13.1 to 7.13.2 by @​dependabot[bot] in goauthentik/authentik#19749
• core: bump cachetools from 6.2.4 to 6.2.5 by @​dependabot[bot] in goauthentik/authentik#19750
• core: bump goauthentik/selenium from 144.0-ak-0.35.7 to 144.0-ak-0.35.8 in /tests/e2e by @​dependabot[bot] in goauthentik/authentik#19747
• core: bump aws-cdk-lib from 2.235.1 to 2.236.0 by @​dependabot[bot] in goauthentik/authentik#19745
• lifecycle/aws: bump aws-cdk from 2.1102.0 to 2.1103.0 in /lifecycle/aws by @​dependabot[bot] in goauthentik/authentik#19744
• core: bump github.com/pires/go-proxyproto from 0.9.0 to 0.9.1 by @​dependabot[bot] in goauthentik/authentik#19743
• core: bump axllent/mailpit from v1.28.3 to v1.28.4 in /tests/e2e by @​dependabot[bot] in goauthentik/authentik#19748
• core: bump goauthentik.io/api/v3 from 3.2026020.14 to 3.2026020.15 by @​dependabot[bot] in goauthentik/authentik#19742
• ci: fix typo in volume path by @​PeshekDotDev in goauthentik/authentik#19741
• core: bump djangoql from 0.18.1 to 0.18.2 by @​dependabot[bot] in goauthentik/authentik#19746
• web: bump @​playwright/test from 1.57.0 to 1.58.0 in /web by @​dependabot[bot] in goauthentik/authentik#19753
• enterprise/audit: Expanded Diff by @​BeryJu in goauthentik/authentik#19726
• root: make logged HTTP headers configurable by @​BeryJu in goauthentik/authentik#19716
• web/sfe: downgrade bootstrap, add access denied test by @​BeryJu in goauthentik/authentik#19763
• internal: fix certificate not refetched if fingerprint changes by @​BeryJu in goauthentik/authentik#19761
• root: update client-go generation by @​rissson in goauthentik/authentik#19762
• website/integrations: Add Elastic Cloud by @​dominic-r in goauthentik/authentik#19719
• website/docs: fix Transifex link in translation guide by @​dominic-r in goauthentik/authentik#19735
• web/table: align row action icons and tooltip color by @​dominic-r in goauthentik/authentik#19736
• web/a11y: CAPTCHA Stage Form by @​GirlBossRush in goauthentik/authentik#19670
• web/elements: stabilize dual-select status height by @​dominic-r in goauthentik/authentik#19734
• web: Enforce challenge nullish types. by @​GirlBossRush in goauthentik/authentik#19768
• website/docs: endpoint devices: fix local device login by @​dewi-tik in goauthentik/authentik#19698
• ci: bump actions/attest-build-provenance from 3.1.0 to 3.2.0 by @​dependabot[bot] in goauthentik/authentik#19783
• core: bump gssapi from 1.10.1 to 1.11.1 by @​dependabot[bot] in goauthentik/authentik#19781
• core: bump openapitools/openapi-diff from 2.1.6 to 2.1.7 in /scripts/api by @​dependabot[bot] in goauthentik/authentik#19779
• core: bump github.com/pires/go-proxyproto from 0.9.1 to 0.9.2 by @​dependabot[bot] in goauthentik/authentik#19778
• admin/files: add centralized theme variable support for file URLs by @​dominic-r in goauthentik/authentik#19657
• providers/oauth2: Support login_hint by @​PeshekDotDev in goauthentik/authentik#19498
• web: bump country-flag-icons from 1.6.8 to 1.6.9 in /web by @​dependabot[bot] in goauthentik/authentik#19785
• web: bump the react group across 1 directory with 2 updates by @​dependabot[bot] in goauthentik/authentik#19784
• web: bump the eslint group across 1 directory with 3 updates by @​dependabot[bot] in goauthentik/authentik#19782
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#19717
• web: Vendor SFE Bootstrap by @​GirlBossRush in goauthentik/authentik#19766
• core: bump djangoql from 0.18.2 to 0.19.1 by @​dependabot[bot] in goauthentik/authentik#19780
• web: bump API Client version by @​authentik-automation[bot] in goauthentik/authentik#19760
• revert: website/integrations: wazuh: Change exchange key generation to 64 bytes by @​dewi-tik in goauthentik/authentik#19759
• sources/saml: Add testcases for PR #​19593 by @​ikob in goauthentik/authentik#19647
• website/docs: fix authenticator sms docs by @​macmoritz in goauthentik/authentik#19797
• web: bump globals from 17.1.0 to 17.2.0 in /web by @​dependabot[bot] in goauthentik/authentik#19811
• web: bump type-fest from 5.4.1 to 5.4.2 in /web by @​dependabot[bot] in goauthentik/authentik#19810
• web: bump @​types/react from 19.2.9 to 19.2.10 in /web in the react group across 1 directory by @​dependabot[bot] in goauthentik/authentik#19809
• web: bump @​goauthentik/api from 2025.12.0-rc1-1765566302 to 2026.2.0-rc1-1769523342 in /web in the goauthentik group across 1 directory by @​dependabot[bot] in goauthentik/authentik#19808
• web: bump the swc group across 1 directory with 11 updates by @​dependabot[bot] in goauthentik/authentik#19807
• web: bump the rollup group across 1 directory with 4 updates by @​dependabot[bot] in goauthentik/authentik#19806
• core: bump library/node from 25.4.0-trixie to 25.5.0-trixie in /website by @​dependabot[bot] in goauthentik/authentik#19805
• web: bump the storybook group across 1 directory with 5 updates by @​dependabot[bot] in goauthentik/authentik#19804
• core: bump cachetools from 6.2.5 to 6.2.6 by @​dependabot[bot] in goauthentik/authentik#19803
• core: bump cryptography from 46.0.3 to 46.0.4 by @​dependabot[bot] in goauthentik/authentik#19801
• core: bump github.com/getsentry/sentry-go from 0.41.0 to 0.42.0 by @​dependabot[bot] in goauthentik/authentik#19800
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#19799
• web: bump @​sentry/browser from 10.36.0 to 10.37.0 in /web in the sentry group across 1 directory by @​dependabot[bot] in goauthentik/authentik#19802
• web: bump @​floating-ui/dom from 1.7.4 to 1.7.5 in /web by @​dependabot[bot] in goauthentik/authentik#19812
• enterprise/providers: WS-Federation by @​BeryJu in goauthentik/authentik#19583
• web: Session UI Config Lifecycle by @​GirlBossRush in goauthentik/authentik#19788
• web/admin: fix toggle-group for bindings now showing up by @​BeryJu in goauthentik/authentik#19820
• core: add CC and BCC support to ak_send_email and TemplateEmailMessage by @​melizeche in goauthentik/authentik#19633
• web: display custom attributes on admin view pages by @​dominic-r in goauthentik/authentik#19720
• web: bump @​types/node from 25.0.10 to 25.1.0 in /web by @​dependabot[bot] in goauthentik/authentik#19838
• web: bump chromedriver from 144.0.0 to 144.0.1 in /web by @​dependabot[bot] in goauthentik/authentik#19837
• web: bump country-flag-icons from 1.6.9 to 1.6.12 in /web by @​dependabot[bot] in goauthentik/authentik#19836
• web: bump @​goauthentik/api from 2026.2.0-rc1-1769523342 to 2026.2.0-rc1-1769650973 in /web in the goauthentik group across 1 directory by @​dependabot[bot] in goauthentik/authentik#19834
• core: bump sentry-sdk from 2.50.0 to 2.51.0 by @​dependabot[bot] in goauthentik/authentik#19833
• ci: bump docker/login-action from 3.6.0 to 3.7.0 by @​dependabot[bot] in goauthentik/authentik#19835
• core: bump pyrad from 2.4 to 2.5.2 by @​dependabot[bot] in goauthentik/authentik#19831
• core: bump goauthentik/selenium from 144.0-ak-0.35.8 to 144.0-ak-0.35.9 in /tests/e2e by @​dependabot[bot] in goauthentik/authentik#19832
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#19824
• core: bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1 by @​dependabot[bot] in goauthentik/authentik#19829
• lifecycle/aws: bump aws-cdk from 2.1103.0 to 2.1104.0 in /lifecycle/aws by @​dependabot[bot] in goauthentik/authentik#19830
• providers/scim: import SCIM groups by @​bitpavel-l25 in goauthentik/authentik#19846
• providers/scim: modify user- and group syncing behavior by @​ImmanuelVonNeumann in goauthentik/authentik#13947
• providers/scim: fix email validation mismatch by @​BeryJu in goauthentik/authentik#19848
• sources/oauth: Fix an issue where wechat may crash duing login. by @​Anduin2017 in goauthentik/authentik#18973
• website/docs: add more info to entra id scim doc by @​dewi-tik in goauthentik/authentik#19849
• web: bump API Client version by @​authentik-automation[bot] in goauthentik/authentik#19851
• rbac: clean up roles and permissions by @​gergosimonyi in goauthentik/authentik#19588
• web: bump API Client version by @​authentik-automation[bot] in goauthentik/authentik#19857
• website/docs: add tip for recovering from accidental main branch work by @​dominic-r in goauthentik/authentik#19865
• web: Fix development theme overrides by @​GirlBossRush in goauthentik/authentik#19826
• web: Lit Development Mode, performance fixes. by @​GirlBossRush in goauthentik/authentik#19825
• root: assign cherry-pick PRs to original author by @​melizeche in goauthentik/authentik#19858
• web: Captcha Refinements, Part 2 by @​GirlBossRush in goauthentik/authentik#19757
• web: bump chromedriver from 144.0.1 to 145.0.0 in /web by @​dependabot[bot] in goauthentik/authentik#19874
• ci: bump actions/cache from 5.0.2 to 5.0.3 by @​dependabot[bot] in goauthentik/authentik#19873
• core: bump debugpy from 1.8.19 to 1.8.20 by @​dependabot[bot] in goauthentik/authentik#19872
• web: bump @​sentry/browser from 10.37.0 to 10.38.0 in /web in the sentry group across 1 directory by @​dependabot[bot] in goauthentik/authentik#19871
• common: introduce common by @​BeryJu in goauthentik/authentik#19852
• website/docs: endpoint devices: add version command by @​dewi-tik in goauthentik/authentik#19767
• website/integrations: immich: add signing algorithm by @​dewi-tik in goauthentik/authentik#19187
• website: QL Search keyboard interactions docs, examples. by @​GirlBossRush in goauthentik/authentik#16259
• website/docs: Remove stale 2024 version directives by @​GirlBossRush in goauthentik/authentik#19888
• web: fix Brand CSS not applied to nested Shadow DOM components by @​Mmx233 in goauthentik/authentik#19892
• stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @​authentik-automation[bot] in goauthentik/authentik#19897
• core: bump protobuf from 6.33.4 to 6.33.5 by @​dependabot[bot] in goauthentik/authentik#19886
• ci: fix cherry-pick assignee by @​BeryJu in goauthentik/authentik#19905
• website/docs: Color Palette Test Page by @​GirlBossRush in goauthentik/authentik#19879
• ci: bump astral-sh/setup-uv from 7.2.0 to 7.2.1 in /.github/actions/setup by @​dependabot[bot] in goauthentik/authentik#19929
• web: bump globals from 17.2.0 to 17.3.0 in /web by @​dependabot[bot] in goauthentik/authentik#19928
• web: bump type-fest from 5.4.2 to 5.4.3 in /web by @​dependabot[bot] in goauthentik/authentik#19927
• web: bump playwright from 1.58.0 to 1.58.1 in /web by @​dependabot[bot] in goauthentik/authentik#19925
• core: bump goauthentik/selenium from 144.0-ak-0.35.9 to 144.0-ak-0.40.0 in /tests/e2e by @​dependabot[bot] in goauthentik/authentik#19917
• core: bump axllent/mailpit from v1.28.4 to v1.29.0 in /tests/e2e by @​dependabot[bot] in goauthentik/authentik#19918
• web: bump the storybook group across 1 directory with 5 updates by @​dependabot[bot] in goauthentik/authentik#19921
• web: bump @​formatjs/intl-listformat from 8.2.0 to 8.2.1 in /web by @​dependabot[bot] in goauthentik/authentik#19924
• core: bump cachetools from 6.2.6 to 7.0.0 by @​dependabot[bot] in goauthentik/authentik#19919
• core: bump pyjwt from 2.10.1 to 2.11.0 by @​dependabot[bot] in goauthentik/authentik#19920
• core: bump gunicorn from 24.1.1 to 25.0.0 by @​dependabot[bot] in goauthentik/authentik#19916
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#19868
• providers/scim: add configuration warning for migration by @​BeryJu in goauthentik/authentik#19859
• ci: always generate API clients by @​BeryJu in goauthentik/authentik#19906
• web: bump the rollup group across 1 directory with 4 updates by @​dependabot[bot] in goauthentik/authentik#19922
• web: bump @​playwright/test from 1.58.0 to 1.58.1 in /web by @​dependabot[bot] in goauthentik/authentik#19926
• web: bump @​types/node from 25.1.0 to 25.2.0 in /web by @​dependabot[bot] in goauthentik/authentik#19923
• website/docs: Update location of media storage and outdated references by @​dominic-r in goauthentik/authentik#19885
• lifecycle/aws: add /data volume by @​rissson in goauthentik/authentik#19936
• lifecycle/ak: make sure /data has the correct permissions by @​rissson in goauthentik/authentik#19935
• core: fix non-expiring service accounts and app passwords by @​dominic-r in goauthentik/authentik#19913
• lib: Add ssh/sftp schemas in to DomainlessFormattedURLValidator by @​PopovSergeyS in goauthentik/authentik#19881
• ci: fix test_docker.sh by @​rissson in goauthentik/authentik#19944
• web/admin: fix default binding order by @​BeryJu in goauthentik/authentik#19943
• website/docs: Add NODE_ENV: production to workflow. by @​GirlBossRush in goauthentik/authentik#19889
• website/docs: Add changes in 2025.12.2 and 2025.12.3 to the release notes by @​melizeche in goauthentik/authentik#19949
• web: add "Copy Secret" button to TOTP configuration stage by @​dominic-r in goauthentik/authentik#19863
• root: fix NPM_VERSION in Makefile by @​gergosimonyi in goauthentik/authentik#19844
• web: refactor TOTP clipboard handlers and secret parsing by @​dominic-r in goauthentik/authentik#19953
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#19954
• web: bump knip from 5.82.1 to 5.83.0 in /web by @​dependabot[bot] in goauthentik/authentik#19962
• web/admin: Merge branch -- Stage elements, linter warnings by @​GirlBossRush in goauthentik/authentik#19948
• crypto: Add ED25519 and ED448 support to the certificate builder by @​PeshekDotDev in goauthentik/authentik#19465
• lifecycle: bump shm size by @​BeryJu in goauthentik/authentik#19369
• core: bump goauthentik.io/api/v3 to 3.2026.2.0-rc1-1770129730 by @​rissson in goauthentik/authentik#19973
• core: bump gunicorn from 25.0.0 to 25.0.1 by @​dependabot[bot] in goauthentik/authentik#19959
• core: bump library/nginx from c881927 to 7fe5dda in /website by @​dependabot[bot] in goauthentik/authentik#19961
• web: bump the storybook group across 1 directory with 5 updates by @​dependabot[bot] in goauthentik/authentik#19960
• core: bump aws-cdk-lib from 2.236.0 to 2.237.0 by @​dependabot[bot] in goauthentik/authentik#19958
• core: ask for token duration on recovery link/email by admin by @​gergosimonyi in goauthentik/authentik#19875
• recovery: consume token in transaction by @​kolega-ai-dev in goauthentik/authentik#19967
• providers/oauth2: use compare_digest for client_secret comparison by @​kolega-ai-dev in goauthentik/authentik#19979
• web/flows: update flow background by @​BeryJu in goauthentik/authentik#19974
• root: revert enterprise loading behaviour by @​BeryJu in goauthentik/authentik#19485
• ci: allow setting assignee to fail by @​BeryJu in goauthentik/authentik#19985
• core: bump django from 5.2.10 to 5.2.11 by @​dependabot[bot] in goauthentik/authentik#19988
• stages/authenticator_webauthn: fix double JSON encoding of webauthn options by @​BeryJu in goauthentik/authentik#19952
• web: bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1 in /web by @​dependabot[bot] in goauthentik/authentik#19989
• core, web: bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1 in /packages/prettier-config by @​dependabot[bot] in goauthentik/authentik#19990
• providers/saml: auto pull signature algorithm options by @​PeshekDotDev in goauthentik/authentik#17614
• outposts: fix docker_tls created files permission by @​kolega-ai-dev in goauthentik/authentik#19978
• web: bump @​goauthentik/api from 2026.2.0-rc1-1769710374 to 2026.2.0-rc1-1770134072 in /web in the goauthentik group across 1 directory by @​dependabot[bot] in goauthentik/authentik#20009
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#19998
• website/docs: fix typos by @​dominic-r in goauthentik/authentik#20000
• ci: bump calibreapp/image-actions from 420075c to d9c8ee5 by @​dependabot[bot] in goauthentik/authentik#20008
• core: bump library/nginx from 7fe5dda to 9dd2888 in /website by @​dependabot[bot] in goauthentik/authentik#20006
• core: bump coverage[toml] from 7.13.2 to 7.13.3 by @​dependabot[bot] in goauthentik/authentik#20002
• core: bump aws-cdk-lib from 2.237.0 to 2.237.1 by @​dependabot[bot] in goauthentik/authentik#20003
• core: bump google-api-python-client from 2.188.0 to 2.189.0 by @​dependabot[bot] in goauthentik/authentik#20004
• core: bump djangorestframework-stubs[compatible-mypy] from 3.16.7 to 3.16.8 by @​dependabot[bot] in goauthentik/authentik#20005
• core: bump library/node from 25.5.0-trixie to 25.6.0-trixie in /website by @​dependabot[bot] in goauthentik/authentik#20007
• core: bump goauthentik.io/api/v3 to 3.2026.2.0-rc1-1770134534 by @​authentik-automation[bot] in goauthentik/authentik#19980
• core: bump ruff from 0.14.14 to 0.15.0 by @​dependabot[bot] in goauthentik/authentik#20001
• brands: fix Domain Matching in Brand Resolution by @​kolega-ai-dev in goauthentik/authentik#19976
• website/docs: add a new page to help people get started after install is complete by @​tanberry in goauthentik/authentik#19217
• website/docs: endpoint devices: more updates by @​dewi-tik in goauthentik/authentik#19971
• flows: add option for flow layout with frame background by @​BeryJu in goauthentik/authentik#19527
• web: bump API Client version by @​authentik-automation[bot] in goauthentik/authentik#20017
• website/docs: dont throw exception for outdated version badges by @​BeryJu in goauthentik/authentik#20024
• website/docs: endpoint devices: specify name and slug by @​dewi-tik in goauthentik/authentik#20016
• web/flows: revisit agent stage fallback delay by @​BeryJu in goauthentik/authentik#20028
• ci: bump aws-actions/configure-aws-credentials from 5.1.1 to 6.0.0 by @​dependabot[bot] in goauthentik/authentik#20037
• lib: add helper for creating events in migration by @​BeryJu in goauthentik/authentik#20044
• web: bump @​types/react from 19.2.10 to 19.2.11 in /web in the react group across 1 directory by @​dependabot[bot] in goauthentik/authentik#20038
• core: bump library/nginx from 9dd2888 to b17697e in /website by @​dependabot[bot] in goauthentik/authentik#20036
• web: bump the storybook group across 1 directory with 5 updates by @​dependabot[bot] in goauthentik/authentik#20035
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#20032
• website/docs: endpoint devices: fix non debian wording by @​dewi-tik in goauthentik/authentik#20046
• core: bump sentry-sdk from 2.51.0 to 2.52.0 by @​dependabot[bot] in goauthentik/authentik#20034
• lib: fix migration event by @​BeryJu in goauthentik/authentik#20047
• core: bump goauthentik.io/api/v3 to 3.2026.2.0-rc1-1770223759 by @​authentik-automation[bot] in goauthentik/authentik#20018
• core: bump django-tenants from 3.9.0 to 3.10.0 by @​dependabot[bot] in goauthentik/authentik#20033
• website/docs: endpoint devices: update device authentication location by @​dewi-tik in goauthentik/authentik#20049
• website/docs: capturing outpost logs by @​dewi-tik in goauthentik/authentik#20045
• web/admin: fix rendering for configuration_warning event by @​BeryJu in goauthentik/authentik#20050
• docs: add instructions for configuring rp-initiated single logout by @​PeshekDotDev in goauthentik/authentik#20040
• outpost/proxyv2: revalidate auth if session fails to load by @​chetan in goauthentik/authentik#18063
• website/docs: automated install: mention no file:// vars by @​tcrasset in goauthentik/authentik#20043
• providers/saml: fix signing order for encrypted saml responses by @​PeshekDotDev in goauthentik/authentik#19620
• providers/saml: update metadata parser for single logout and encryption certificate by @​PeshekDotDev in goauthentik/authentik#20031
• blueprints: don't exclude default values by @​BeryJu in goauthentik/authentik#20057
• sources/saml: update handling statusmessage by @​PeshekDotDev in goauthentik/authentik#19739
• website/docs: remove redundant RC notice by @​gergosimonyi in goauthentik/authentik#20052
• sources/saml: prevent authnrequest signature being inside body on redirect by @​PeshekDotDev in goauthentik/authentik#19898
• enterprise/providers: WSFed configurable realm, default wreply by @​BeryJu in goauthentik/authentik#19996
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#20069
• core, web: bump webpack from 5.103.0 to 5.105.0 in /packages/docusaurus-config by @​dependabot[bot] in goauthentik/authentik#20068
• core: bump goauthentik.io/api/v3 to 3.2026.2.0-rc1-1770333724 by @​authentik-automation[bot] in goauthentik/authentik#20067
• core: bump library/nginx from b17697e to 341bf0f in /website by @​dependabot[bot] in goauthentik/authentik#20077
• core: bump pyrad from 2.5.2 to 2.5.4 by @​dependabot[bot] in goauthentik/authentik#20073
• core: bump msgraph-sdk from 1.53.0 to 1.54.0 by @​dependabot[bot] in goauthentik/authentik#20072
• core: bump twilio from 9.10.0 to 9.10.1 by @​dependabot[bot] in goauthentik/authentik#20071
• lifecycle/aws: bump aws-cdk from 2.1104.0 to 2.1105.0 in /lifecycle/aws by @​dependabot[bot] in goauthentik/authentik#20070
• web: bump chromedriver from 145.0.0 to 145.0.1 in /web by @​dependabot[bot] in goauthentik/authentik#20082
• web: bump semver from 7.7.3 to 7.7.4 in /web by @​dependabot[bot] in goauthentik/authentik#20081
• web: bump @​types/node from 25.2.0 to 25.2.1 in /web by @​dependabot[bot] in goauthentik/authentik#20080
• web: bump @​goauthentik/api from 2026.2.0-rc1-1770223158 to 2026.2.0-rc1-1770333267 in /web in the goauthentik group across 1 directory by @​dependabot[bot] in goauthentik/authentik#20078
• web: bump the bundler group across 1 directory with 4 updates by @​dependabot[bot] in goauthentik/authentik#20076
• web: bump the storybook group across 1 directory with 5 updates by @​dependabot[bot] in goauthentik/authentik#20075
• core: bump django-cte from 2.0.0 to 3.0.0 by @​dependabot[bot] in goauthentik/authentik#20074
• web: bump @​types/react from 19.2.11 to 19.2.13 in /web in the react group across 1 directory by @​dependabot[bot] in goauthentik/authentik#20079
• web: Allow unused spreaded properties to strict unsafe. by @​GirlBossRush in goauthentik/authentik#20084
• web/i18n: Fix Japanese and Korean font overrides. by @​GirlBossRush in goauthentik/authentik#19994
• web: Fix locale selector in compatibility mode. by @​GirlBossRush in goauthentik/authentik#19946
• sources/saml: truncate transient username longer than 150 chars by @​PeshekDotDev in goauthentik/authentik#19930
• providers/saml: move sp acs binding down in form by @​PeshekDotDev in goauthentik/authentik#20039
• website/docs: generate CVE sidebar by @​BeryJu in goauthentik/authentik#20098
• sources/oauth: Fix InvalidAudienceError in id_token fallback by @​ryanpesek in goauthentik/authentik#20096
• web: bump type-fest from 5.4.3 to 5.4.4 in /web by @​dependabot[bot] in goauthentik/authentik#20113
• web: bump knip from 5.83.0 to 5.83.1 in /web by @​dependabot[bot] in goauthentik/authentik#20112
• web: bump @​types/node from 25.2.1 to 25.2.2 in /web by @​dependabot[bot] in goauthentik/authentik#20111
• web: bump @​playwright/test from 1.58.1 to 1.58.2 in /web by @​dependabot[bot] in goauthentik/authentik#20110
• web: bump playwright from 1.58.1 to 1.58.2 in /web by @​dependabot[bot] in goauthentik/authentik#20109
• web: bump the swc group across 2 directories with 1 update by @​dependabot[bot] in goauthentik/authentik#20108
• ci: bump astral-sh/setup-uv from 7.2.1 to 7.3.0 in /.github/actions/setup by @​dependabot[bot] in goauthentik/authentik#20106
• ci: bump int128/docker-manifest-create-action from 2.13.0 to 2.14.0 by @​dependabot[bot] in goauthentik/authentik#20105
• core: bump gunicorn from 25.0.1 to 25.0.3 by @​dependabot[bot] in goauthentik/authentik#20104
• core: bump golang.org/x/oauth2 from 0.34.0 to 0.35.0 by @​dependabot[bot] in goauthentik/authentik#20103
• core: bump github.com/pires/go-proxyproto from 0.9.2 to 0.10.0 by @​dependabot[bot] in goauthentik/authentik#20102
• tasks/middlewares: call monitoring_set upon metrics request by @​rissson in goauthentik/authentik#20117
• website/docs: endpoint devices: add fleet connector doc by @​dewi-tik in goauthentik/authentik#20086
• tasks: add queued tasks metrics by @​rissson in goauthentik/authentik#20118
• web/admin: source forms not rendering by @​kensternberg-authentik in goauthentik/authentik#19887
• website/docs/social-logins: add shibboleth integration guide by @​PeshekDotDev in goauthentik/authentik#19909
• web/sfe: bug: polyfill needed to supply Object.assign() to IE11. by @​kensternberg-authentik in goauthentik/authentik#20126
• web: bump axios from 1.13.2 to 1.13.5 in /web by @​dependabot[bot] in goauthentik/authentik#20137
• ci: bump tj-actions/changed-files from 47.0.1 to 47.0.2 by @​dependabot[bot] in goauthentik/authentik#20132
• core: bump coverage[toml] from 7.13.3 to 7.13.4 by @​dependabot[bot] in goauthentik/authentik#20129
• core: bump aws-cdk-lib from 2.237.1 to 2.238.0 by @​dependabot[bot] in goauthentik/authentik#20128
• website/integrations: add AFFiNE by @​akaSorin in goauthentik/authentik#20143
• website/docs: endpoint/devices: add authentik version tags by @​dewi-tik in goauthentik/authentik#20144
• enterprise/lifecycle: implement Object Lifecycle Management by @​atereshkin in goauthentik/authentik#20015
• web: bump API Client version by @​authentik-automation[bot] in goauthentik/authentik#20149
• website/docs: release notes for 2026.2.0 by @​gergosimonyi in goauthentik/authentik#20013
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#20152
• stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @​authentik-automation[bot] in goauthentik/authentik#20155
• translate: Updates for project authentik and language pt_BR by @​transifex-integration[bot] in goauthentik/authentik#20170
• translate: Updates for project authentik and language fi_FI by @​transifex-integration[bot] in goauthentik/authentik#20158
• translate: Updates for project authentik and language fr_FR by @​transifex-integration[bot] in goauthentik/authentik#20163
• translate: Updates for project authentik and language es_ES by @​transifex-integration[bot] in goauthentik/authentik#20159
• translate: Updates for project authentik and language de_DE by @​transifex-integration[bot] in goauthentik/authentik#20157
• translate: Updates for project authentik and language ja_JP by @​transifex-integration[bot] in goauthentik/authentik#20160
• translate: Updates for project authentik and language ko_KR by @​transifex-integration[bot] in goauthentik/authentik#20162
• translate: Updates for project authentik and language ru_RU by @​transifex-integration[bot] in goauthentik/authentik#20161
• translate: Updates for project authentik and language zh-Hans by @​transifex-integration[bot] in goauthentik/authentik#20164
• translate: Updates for project authentik and language tr_TR by @​transifex-integration[bot] in goauthentik/authentik#20167
• translate: Updates for project authentik and language cs_CZ by @​transifex-integration[bot] in goauthentik/authentik#20166
• translate: Updates for project authentik and language pt_PT by @​transifex-integration[bot] in goauthentik/authentik#20169
• translate: Updates for project authentik and language it_IT by @​transifex-integration[bot] in goauthentik/authentik#20168
• translate: Updates for project authentik and language pl_PL by @​transifex-integration[bot] in goauthentik/authentik#20165
• core: bump goauthentik.io/api/v3 to 3.2026.2.0-rc1-1770745754 by @​authentik-automation[bot] in goauthentik/authentik#20150
• core, web: update translations by @​authentik-automation[bot] in goauthentik/authentik#20172
• core: fix test_docker.sh (cherry-pick #​20179 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20192
• core: bump cryptography from 46.0.4 to 46.0.5 (cherry-pick #​20171 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20193
• api: fix test_build_schema (cherry-pick #​20196 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20199
• website/docs: rac: fixes the property mapping formatting (cherry-pick #​20200 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20203
• website/docs: add email verification scope doc (cherry-pick #​20141 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20206
• website/docs: ssf: update SSF documentation (cherry-pick #​20195 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20211
• ci: fix release testing (cherry-pick #​20207 to version-2026.2) by @​rissson in goauthentik/authentik#20224
• security: CVE-2026-25922 (2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20238
• security: CVE-2026-25748 (2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20237
• security: CVE-2026-25227 (2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20236
• web: updated package-lock.json to include missing tree-sitter references (cherry-pick #​20244 to version-2026.2) by @​rissson in goauthentik/authentik#20246
• website/docs: 2025.10.4 release notes (cherry-pick #​20242 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20251
• website/docs: 2025.12.4 release notes (cherry-pick #​20226 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20253
• website/docs: 2025.8.6 release notes (cherry-pick #​20243 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20257
• website/docs: draft of new WS-Fed provider docs (cherry-pick #​20091 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20262
• ci: fix binary outpost build on release (cherry-pick #​20248 to version-2026.2) by @​rissson in goauthentik/authentik#20279
• enterprise/lifecycle: fix multiple reviews showing up in "Reviews" when the user is a member of multiple reviewer groups (cherry-pick #​20266 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20278
• web: add pretty names for lifecycle review events in event logs (cherry-pick #​20264 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20268
• website/docs: Custom CSS (cherry-pick #​19991 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20287
• stage/identification: recovery: make wording more generic (cherry-pick #​20209 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20293
• web: fix italic formatting in lifecycle rule help text (cherry-pick #​20263 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20267
• website/docs: add affine to release notes (cherry-pick #​20299 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20308
• root: do not rely on npm cli for version bump (cherry-pick #​20276 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20321
• website/docs: add okta source doc (cherry-pick #​20296 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20335
• website/docs: rac: update rac provider docs (cherry-pick #​20225 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20337
• website/docs, integrations: fix language (cherry-pick #​20338 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20347
• ci: fix setup altering package-lock (cherry-pick #​20348 to version-2026.2) by @​rissson in goauthentik/authentik#20356
• web: revert package-lock.json by tag workflow by @​gergosimonyi in goauthentik/authentik#20349
• rbac: fix object permission request (cherry-pick #​20304 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20366
• web: Flow Executor layout fixes (cherry-pick #​20134 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20331
• enterprise/providers/ws_federation: fix incorrect metadata download URL (cherry-pick #​20173 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20365
• website/docs: Fix broken link to flow executor (cherry-pick #​20364 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20370
• core: add cause to ak_groups deprecation event and logs (cherry-pick #​20361 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20368
• website/docs: correct reference to overriden S3 variable (cherry-pick #​20156 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20378
• web/admin: bug: stage update forms not rendering, several modal form buttons missing (cherry-pick #​20373 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20394
• enterprise/providers/microsoft_entra: fix dangling comma (cherry-pick #​20391 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20395
• ci: pull latest changes before tagging new version (cherry-pick #​20413 to version-2026.2) by @​rissson in goauthentik/authentik#20414
• enterprise/providers/microsoft_entra: only check upn when set (cherry-pick #​20441 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20442
• stages/user_login: log correct user when session binding is broken (cherry-pick #​20094 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20453
• enterprise: monkey patch pyjwt to accept mismatching key (cherry-pick #​20402 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20474
• enterprise/lifecycle: use datetime instead of date to track review cycles (cherry-pick #​20283 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20473
• policies: measure policy process from manager (cherry-pick #​20477 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20481
• providers/proxy: preserve URL-encoded path characters in redirect (cherry-pick #​20476 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20482
• web: Center footer links. (cherry-pick #​20345 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20425
• website/docs: add info about make install and recovery key (cherry-pick #​20447 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20486
• providers/oauth2: device code flow client id via auth header (cherry-pick #​20457 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20503
• enterprise: add ES384 to enterprise license algorithms (cherry-pick #​20507 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20510
• web/admin/bugfix: Edit Stage not working. Invoking IdentificationStageForm not working (cherry-pick #​20429 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20512
• web: fix Edit Policy button on Flow view page (cherry-pick #​20511 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20515
• endpoints: fix infinite recursion in stage with unsupported connector (cherry-pick #​20485 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20514
• website/docs: fix linux setup docs (cherry-pick #​20508 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20517
• website/docs: fix GitHub social-login wording and capitalization (cherry-pick #​20489 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20505
• policies: fix PolicyEngineMode ALL with static binding optimization (cherry-pick #​20430 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20524
• providers/oauth2: deactivate locale after testing (cherry-pick #​20518 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20526
• providers/oauth2: add jti claim (cherry-pick #​20484 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20528
• website/docs: autogenerate release notes (cherry-pick #​20527 to version-2026.2) by @​authentik-automation[bot] in goauthentik/authentik#20531

New Contributors

• @​gabay made their first contribution in goauthentik/authentik#18812
• @​joaocfernandes made their first contribution in goauthentik/authentik#18448
• @​dminuoso made their first contribution in goauthentik/authentik#18727
• @​optix2000 made their first contribution in goauthentik/authentik#18921
• @​stijn220 made their first contribution in goauthentik/authentik#18979
• @​hskrtich made their first contribution in goauthentik/authentik#18984
• @​0skater0 made their first contribution in goauthentik/authentik#19013
• @​borutmrak made their first contribution in goauthentik/authentik#15183
• @​ocmateusz made their first contribution in goauthentik/authentik#19073
• @​austin-dudzik made their first contribution in goauthentik/authentik#19102
• @​pippo73 made their first contribution in goauthentik/authentik#19127
• @​williamkray made their first contribution in goauthentik/authentik#19160
• @​nmasnadithya made their first contribution in goauthentik/authentik#19170
• @​busybox11 made their first contribution in goauthentik/authentik#19246
• @​tcrasset made their first contribution in goauthentik/authentik#18936
• @​sebastianw made their first contribution in goauthentik/authentik#19316
• @​severin made their first contribution in goauthentik/authentik#19368
• @​Fredouye made their first contribution in goauthentik/authentik#19337
• @​JMLX42 made their first contribution in goauthentik/authentik#19226
• @​DonQuinleone made their first contribution in goauthentik/authentik#19530
• @​steilerDev made their first contribution in goauthentik/authentik#19584
• @​Ma27 made their first contribution in goauthentik/authentik#19542
• @​Gulianrdgd made their first contribution in goauthentik/authentik#19379
• @​jeroen1602 made their first contribution in goauthentik/authentik#19554
• @​vitSkalicky made their first contribution in goauthentik/authentik#15686
• @​ImmanuelVonNeumann made their first contribution in goauthentik/authentik#13947
• @​Mmx233 made their first contribution in goauthentik/authentik#19892
• @​PopovSergeyS made their first contribution in goauthentik/authentik#19881
• @​kolega-ai-dev made their first contribution in goauthentik/authentik#19967
• @​chetan made their first contribution in goauthentik/authentik#18063
• @​akaSorin made their first contribution in goauthentik/authentik#20143

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2025.12.4...version/2026.2.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [authentik](https://goauthentik.io) ([source](https://github.com/goauthentik/helm)) | major | `2025.12.4` → `2026.2.0` | --- ### Release Notes <details> <summary>goauthentik/helm (authentik)</summary> ### [`v2026.2.0`](https://github.com/goauthentik/helm/releases/tag/authentik-2026.2.0) [Compare Source](https://github.com/goauthentik/helm/compare/authentik-2025.12.4...authentik-2026.2.0) authentik is an open-source Identity Provider focused on flexibility and versatility #### What's Changed - charts/authentik: add fields auto-added by Kubernetes to httproute by [@&#8203;cfi2017](https://github.com/cfi2017) in [#&#8203;453](https://github.com/goauthentik/helm/pull/453) - chore(deps): update helm/kind-action action to v1.14.0 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;454](https://github.com/goauthentik/helm/pull/454) - charts/authentik: add note how to set version by [@&#8203;BeryJu](https://github.com/BeryJu) in [#&#8203;456](https://github.com/goauthentik/helm/pull/456) - charts/authentik: bump to 2026.2.0 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [#&#8203;457](https://github.com/goauthentik/helm/pull/457) #### New Contributors - [@&#8203;cfi2017](https://github.com/cfi2017) made their first contribution in [#&#8203;453](https://github.com/goauthentik/helm/pull/453) **Full Changelog**: <https://github.com/goauthentik/helm/compare/authentik-2025.12.4...authentik-2026.2.0> *** ### Full release notes for authentik See <https://docs.goauthentik.io/docs/releases/2026.2> #### What's Changed - root: bump version to 2026.2.0-rc1 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#18794](https://github.com/goauthentik/authentik/pull/18794) - tests/e2e: retry detached shadow roots by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#18796](https://github.com/goauthentik/authentik/pull/18796) - website/release notes: Update v2025.12 release notes by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#18797](https://github.com/goauthentik/authentik/pull/18797) - web/admin: fix read-only provider selection for application form by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#18768](https://github.com/goauthentik/authentik/pull/18768) - web: bump the react group across 1 directory with 2 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18775](https://github.com/goauthentik/authentik/pull/18775) - web: bump chromedriver from 143.0.0 to 143.0.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18776](https://github.com/goauthentik/authentik/pull/18776) - web: bump the storybook group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18774](https://github.com/goauthentik/authentik/pull/18774) - internal: don't warn on empty outpost for embedded by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18786](https://github.com/goauthentik/authentik/pull/18786) - lifecycle/aws: bump aws-cdk from 2.1033.0 to 2.1034.0 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18771](https://github.com/goauthentik/authentik/pull/18771) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#18804](https://github.com/goauthentik/authentik/pull/18804) - root: Add macOS support for sed in Makefile by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#18795](https://github.com/goauthentik/authentik/pull/18795) - ci: bump astral-sh/setup-uv from 7.1.5 to 7.1.6 in /.github/actions/setup by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18826](https://github.com/goauthentik/authentik/pull/18826) - ci: bump actions/upload-artifact from 5.0.0 to 6.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18824](https://github.com/goauthentik/authentik/pull/18824) - core: bump goauthentik/fips-debian from `07f41ce` to `c10cd2c` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18822](https://github.com/goauthentik/authentik/pull/18822) - ci: bump actions/download-artifact from 6.0.0 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18825](https://github.com/goauthentik/authentik/pull/18825) - ci: bump actions/cache from 5.0.0 to 5.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18823](https://github.com/goauthentik/authentik/pull/18823) - core: list applications fix by [@&#8203;ryanpesek](https://github.com/ryanpesek) in [goauthentik/authentik#18798](https://github.com/goauthentik/authentik/pull/18798) - website/docs: add icon info to style guide by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#18832](https://github.com/goauthentik/authentik/pull/18832) - core: remove superuser check from `Token` list by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#18684](https://github.com/goauthentik/authentik/pull/18684) - packages/django-dramatiq-postgres: broker: close django connections on consumer close by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#18833](https://github.com/goauthentik/authentik/pull/18833) - core: bump goauthentik.io/api/v3 from 3.2025120.26 to 3.2026020.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18815](https://github.com/goauthentik/authentik/pull/18815) - admin/files: revert add check for /media existence ([#&#8203;18636](https://github.com/goauthentik/helm/issues/18636)) by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#18829](https://github.com/goauthentik/authentik/pull/18829) - website/docs: add jellyseer integration doc by [@&#8203;gabay](https://github.com/gabay) in [goauthentik/authentik#18812](https://github.com/goauthentik/authentik/pull/18812) - crypto: Store details parsed from includeDetails in database instead by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#18013](https://github.com/goauthentik/authentik/pull/18013) - core: skip s3 tests if endpoint isn't available by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#18841](https://github.com/goauthentik/authentik/pull/18841) - admin/files: fix get\_objects\_for\_user queryset argument in FileUsedByView by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#18845](https://github.com/goauthentik/authentik/pull/18845) - core: bump goauthentik/fips-debian from `c10cd2c` to `2f19fc1` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18856](https://github.com/goauthentik/authentik/pull/18856) - ci: replace codecov test-results action by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18862](https://github.com/goauthentik/authentik/pull/18862) - core: add skip s3\_test\_server\_available to TestResolveFileUrlS3Backend by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#18858](https://github.com/goauthentik/authentik/pull/18858) - rbac: alter migrated direct permission roles by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#18860](https://github.com/goauthentik/authentik/pull/18860) - core: bump library/golang from `5d35fb8` to `8e8f9c8` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18855](https://github.com/goauthentik/authentik/pull/18855) - web/admin/rbac: misc object permission fixes by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#18859](https://github.com/goauthentik/authentik/pull/18859) - outposts: fix permission errors for related certificates by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18861](https://github.com/goauthentik/authentik/pull/18861) - website/docs: adjust RBAC-related details in 2025.12 release notes by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#18863](https://github.com/goauthentik/authentik/pull/18863) - website/docs: Add docs for passkey autofill (WebauthN Conditional UI) by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#18805](https://github.com/goauthentik/authentik/pull/18805) - website/docs: 2025.10.3 release notes by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18868](https://github.com/goauthentik/authentik/pull/18868) - web: add custom message with links for empty data export list by [@&#8203;atereshkin](https://github.com/atereshkin) in [goauthentik/authentik#18830](https://github.com/goauthentik/authentik/pull/18830) - web: fix notification counter by [@&#8203;atereshkin](https://github.com/atereshkin) in [goauthentik/authentik#18781](https://github.com/goauthentik/authentik/pull/18781) - web: bump vite from 7.2.7 to 7.3.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18854](https://github.com/goauthentik/authentik/pull/18854) - stages/authenticator\_\*: fix code input field not string by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18875](https://github.com/goauthentik/authentik/pull/18875) - web: fix file upload form by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#18808](https://github.com/goauthentik/authentik/pull/18808) - web/admin: endpoint: change wording and add helper text by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#18871](https://github.com/goauthentik/authentik/pull/18871) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#18807](https://github.com/goauthentik/authentik/pull/18807) - website/integrations: bookstack: fix redir url by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#18891](https://github.com/goauthentik/authentik/pull/18891) - core: bump astral-sh/uv from 0.9.17 to 0.9.18 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18898](https://github.com/goauthentik/authentik/pull/18898) - core: bump goauthentik/fips-debian from `2f19fc1` to `189345a` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18897](https://github.com/goauthentik/authentik/pull/18897) - web: bump knip from 5.73.3 to 5.74.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18896](https://github.com/goauthentik/authentik/pull/18896) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.0.0 to 25.0.3 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18895](https://github.com/goauthentik/authentik/pull/18895) - web: bump the rollup group across 1 directory with 4 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18852](https://github.com/goauthentik/authentik/pull/18852) - web: bump the bundler group across 1 directory with 7 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18894](https://github.com/goauthentik/authentik/pull/18894) - web: bump [@&#8203;sentry/browser](https://github.com/sentry/browser) from 10.30.0 to 10.31.0 in /web in the sentry group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18893](https://github.com/goauthentik/authentik/pull/18893) - lifecycle/aws: bump aws-cdk from 2.1034.0 to 2.1100.0 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18850](https://github.com/goauthentik/authentik/pull/18850) - web: bump the goauthentik group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18819](https://github.com/goauthentik/authentik/pull/18819) - web: bump the swc group across 1 directory with 11 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18818](https://github.com/goauthentik/authentik/pull/18818) - web: bump the eslint group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18851](https://github.com/goauthentik/authentik/pull/18851) - core: bump goauthentik.io/api/v3 from 3.2026020.1 to 3.2026020.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18892](https://github.com/goauthentik/authentik/pull/18892) - tasks/middleware: close connections on worker status update database error by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#18881](https://github.com/goauthentik/authentik/pull/18881) - website/docs: added list of Int Guide contributors (also edited frontmatter) by [@&#8203;tanberry](https://github.com/tanberry) in [goauthentik/authentik#18888](https://github.com/goauthentik/authentik/pull/18888) - api: fix page\_size with invalid query param by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#18879](https://github.com/goauthentik/authentik/pull/18879) - ci/release-tag: checkout correct branch for make test-docker by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#18880](https://github.com/goauthentik/authentik/pull/18880) - api: fix latest version for public schema by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18902](https://github.com/goauthentik/authentik/pull/18902) - website/docs: 2025.12: remove superfluous changes by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#18910](https://github.com/goauthentik/authentik/pull/18910) - web/admin: reword some things on the device view page by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18785](https://github.com/goauthentik/authentik/pull/18785) - core/groups: optimize prefetch queries to fetch only required fields by [@&#8203;joaocfernandes](https://github.com/joaocfernandes) in [goauthentik/authentik#18448](https://github.com/goauthentik/authentik/pull/18448) - root: fix docker-compose data mount by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#18903](https://github.com/goauthentik/authentik/pull/18903) - web/admin: add UI copy to RBAC modal by [@&#8203;tanberry](https://github.com/tanberry) in [goauthentik/authentik#18917](https://github.com/goauthentik/authentik/pull/18917) - tests/e2e: handle StaleElementReferenceException in parse\_json\_content by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#18842](https://github.com/goauthentik/authentik/pull/18842) - core: bump goauthentik/fips-debian from `189345a` to `10dadf1` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18927](https://github.com/goauthentik/authentik/pull/18927) - web: bump chromedriver from 143.0.1 to 143.0.2 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18926](https://github.com/goauthentik/authentik/pull/18926) - web: bump knip from 5.74.0 to 5.75.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18924](https://github.com/goauthentik/authentik/pull/18924) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#18920](https://github.com/goauthentik/authentik/pull/18920) - lifecycle/aws: bump aws-cdk from 2.1100.0 to 2.1100.1 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18922](https://github.com/goauthentik/authentik/pull/18922) - web: bump the swc group across 1 directory with 11 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18923](https://github.com/goauthentik/authentik/pull/18923) - web: bump the storybook group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18817](https://github.com/goauthentik/authentik/pull/18817) - stages: remove more global state by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18641](https://github.com/goauthentik/authentik/pull/18641) - packages/ak-guardian: cast safely by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#18929](https://github.com/goauthentik/authentik/pull/18929) - web/flow: Fix spurious double submit on ak-stage-autosubmit by [@&#8203;dminuoso](https://github.com/dminuoso) in [goauthentik/authentik#18727](https://github.com/goauthentik/authentik/pull/18727) - website/integrations: Add launch URL for Immich by [@&#8203;optix2000](https://github.com/optix2000) in [goauthentik/authentik#18921](https://github.com/goauthentik/authentik/pull/18921) - crypto: fix extra cert data in db migration by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#18937](https://github.com/goauthentik/authentik/pull/18937) - web/elements: progress-bar and table loading header by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18934](https://github.com/goauthentik/authentik/pull/18934) - stages/identification: replace sleep with make\_password by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18883](https://github.com/goauthentik/authentik/pull/18883) - website/docs: endpoint devices by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#18634](https://github.com/goauthentik/authentik/pull/18634) - website/docs: Fix labels, Pre-Release detection by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#18945](https://github.com/goauthentik/authentik/pull/18945) - website/docs: release notes: add endpoint device links to 2025.12 notes by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#18940](https://github.com/goauthentik/authentik/pull/18940) - website/docs: Fix version parsing. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#18948](https://github.com/goauthentik/authentik/pull/18948) - web/admin: fix endpoints user binding by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18935](https://github.com/goauthentik/authentik/pull/18935) - flows/executor: fix KeyError when session has no existing plan by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#18951](https://github.com/goauthentik/authentik/pull/18951) - root: move docker files to lifecycle/containers and change docker-compose to compose by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#16624](https://github.com/goauthentik/authentik/pull/16624) - core: bump goauthentik.io/api/v3 from 3.2026020.3 to 3.2026020.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18956](https://github.com/goauthentik/authentik/pull/18956) - web: bump chromedriver from 143.0.2 to 143.0.3 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18959](https://github.com/goauthentik/authentik/pull/18959) - web: bump the swc group across 1 directory with 11 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18958](https://github.com/goauthentik/authentik/pull/18958) - web: bump [@&#8203;sentry/browser](https://github.com/sentry/browser) from 10.31.0 to 10.32.0 in /web in the sentry group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18957](https://github.com/goauthentik/authentik/pull/18957) - ci: bump actions/attest-build-provenance from 3.0.0 to 3.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18960](https://github.com/goauthentik/authentik/pull/18960) - website/docs: add note to active directory source doc by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#18787](https://github.com/goauthentik/authentik/pull/18787) - web/maintenance: fix missing custom web component imports by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#18942](https://github.com/goauthentik/authentik/pull/18942) - web/maintenance: no unknown tag names by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#18944](https://github.com/goauthentik/authentik/pull/18944) - website/integrations: Fix path for Cloudflare Access by [@&#8203;stijn220](https://github.com/stijn220) in [goauthentik/authentik#18979](https://github.com/goauthentik/authentik/pull/18979) - blueprints: add InternallyManagedMixin instead of large list by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18983](https://github.com/goauthentik/authentik/pull/18983) - web/admin: fix dark theme on map by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18985](https://github.com/goauthentik/authentik/pull/18985) - web/admin: Fix haveibeenpwned link in PasswordPolicyForm by [@&#8203;hskrtich](https://github.com/hskrtich) in [goauthentik/authentik#18984](https://github.com/goauthentik/authentik/pull/18984) - events: notifications live update by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18980](https://github.com/goauthentik/authentik/pull/18980) - web: fix Open button selecting row instead of navigating by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#18992](https://github.com/goauthentik/authentik/pull/18992) - blueprints: fix flaky tests by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19002](https://github.com/goauthentik/authentik/pull/19002) - ci: bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18999](https://github.com/goauthentik/authentik/pull/18999) - providers/oauth2: Automated OpenID Conformance tests by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#14785](https://github.com/goauthentik/authentik/pull/14785) - enterprise/reports: improve export list, confirmation by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18981](https://github.com/goauthentik/authentik/pull/18981) - enterprise/search: add static autocomplete structure by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19008](https://github.com/goauthentik/authentik/pull/19008) - website/docs: improve endpoint devices docs by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19007](https://github.com/goauthentik/authentik/pull/19007) - web: bump the rollup group across 1 directory with 4 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18994](https://github.com/goauthentik/authentik/pull/18994) - core: bump openapitools/openapi-generator-cli from v7.16.0 to v7.18.0 in /scripts/api by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19018](https://github.com/goauthentik/authentik/pull/19018) - web: bump globby from 16.0.0 to 16.1.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#18995](https://github.com/goauthentik/authentik/pull/18995) - api: rework schema generation by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18977](https://github.com/goauthentik/authentik/pull/18977) - web/admin: prevent file upload attempt when backend not managed by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18646](https://github.com/goauthentik/authentik/pull/18646) - web: bump the eslint group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19019](https://github.com/goauthentik/authentik/pull/19019) - core: bump goauthentik.io/api/v3 from 3.2026020.4 to 3.2026020.5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19017](https://github.com/goauthentik/authentik/pull/19017) - website/docs: Prioritize "Release Candidate" over "Current Release" by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#18975](https://github.com/goauthentik/authentik/pull/18975) - web: Locale selector UI fixes by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#18972](https://github.com/goauthentik/authentik/pull/18972) - web: Fix Storybook package resolution with `npm link` by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19016](https://github.com/goauthentik/authentik/pull/19016) - core: use chunked\_queryset for expired message deletion by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19028](https://github.com/goauthentik/authentik/pull/19028) - web/admin: use consistent icon for inactive user status by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19032](https://github.com/goauthentik/authentik/pull/19032) - web: bump lit from 3.3.1 to 3.3.2 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19038](https://github.com/goauthentik/authentik/pull/19038) - web: bump [@&#8203;lit/reactive-element](https://github.com/lit/reactive-element) from 2.1.1 to 2.1.2 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19037](https://github.com/goauthentik/authentik/pull/19037) - web: bump knip from 5.75.1 to 5.77.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19041](https://github.com/goauthentik/authentik/pull/19041) - core: bump goauthentik.io/api/v3 from 3.2026020.5 to 3.2026020.6 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19036](https://github.com/goauthentik/authentik/pull/19036) - docs/release notes: update 2025.12 release notes by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19043](https://github.com/goauthentik/authentik/pull/19043) - lib/sync: fix sync\_dispatch by [@&#8203;krejcar25](https://github.com/krejcar25) in [goauthentik/authentik#19053](https://github.com/goauthentik/authentik/pull/19053) - endpoints/devices: cleanup by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19047](https://github.com/goauthentik/authentik/pull/19047) - blueprints: set enrollment token key by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19061](https://github.com/goauthentik/authentik/pull/19061) - website/integrations: Add Wallos by [@&#8203;0skater0](https://github.com/0skater0) in [goauthentik/authentik#19013](https://github.com/goauthentik/authentik/pull/19013) - website/docs: FreeIPA documentation updates by [@&#8203;borutmrak](https://github.com/borutmrak) in [goauthentik/authentik#15183](https://github.com/goauthentik/authentik/pull/15183) - \*: Auto compress images by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19065](https://github.com/goauthentik/authentik/pull/19065) - blueprints: fix deadlock and task context error in MetaApplyBlueprint by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19033](https://github.com/goauthentik/authentik/pull/19033) - web: fix file search input not resetting results properly by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19034](https://github.com/goauthentik/authentik/pull/19034) - website/integrations: owncloud: fix php by [@&#8203;ocmateusz](https://github.com/ocmateusz) in [goauthentik/authentik#19073](https://github.com/goauthentik/authentik/pull/19073) - tests/e2e: add endpoint tests by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19072](https://github.com/goauthentik/authentik/pull/19072) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#18991](https://github.com/goauthentik/authentik/pull/18991) - web: bump knip from 5.77.0 to 5.77.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19049](https://github.com/goauthentik/authentik/pull/19049) - web: bump [@&#8203;lit/localize-tools](https://github.com/lit/localize-tools) from 0.8.0 to 0.8.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19040](https://github.com/goauthentik/authentik/pull/19040) - internal: update TLS Suite by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19076](https://github.com/goauthentik/authentik/pull/19076) - web: bump [@&#8203;formatjs/intl-listformat](https://github.com/formatjs/intl-listformat) from 7.7.13 to 8.1.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19054](https://github.com/goauthentik/authentik/pull/19054) - web/admin: fix button alignment on user view page by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19079](https://github.com/goauthentik/authentik/pull/19079) - website/docs: endpoints: mention connector key required for stage to work by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19084](https://github.com/goauthentik/authentik/pull/19084) - website/docs: rel notes .12: add wallos by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19063](https://github.com/goauthentik/authentik/pull/19063) - website/docs: endpoint devices: update features table by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19094](https://github.com/goauthentik/authentik/pull/19094) - website/docs: endpoint devices: add path to macos setup by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19093](https://github.com/goauthentik/authentik/pull/19093) - web: bump knip from 5.77.1 to 5.78.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19090](https://github.com/goauthentik/authentik/pull/19090) - web: fix promoted source button hover losing blue color by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19048](https://github.com/goauthentik/authentik/pull/19048) - web: Fix stale flow background by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19015](https://github.com/goauthentik/authentik/pull/19015) - Update Vaultwarden documentation by removing warning by [@&#8203;austin-dudzik](https://github.com/austin-dudzik) in [goauthentik/authentik#19102](https://github.com/goauthentik/authentik/pull/19102) - web/maintenance/no unknown attributes (part 1) by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#18970](https://github.com/goauthentik/authentik/pull/18970) - website/integrations: Add Pulse by [@&#8203;0skater0](https://github.com/0skater0) in [goauthentik/authentik#19105](https://github.com/goauthentik/authentik/pull/19105) - website/integrations: Add Audiobookshelf by [@&#8203;0skater0](https://github.com/0skater0) in [goauthentik/authentik#19104](https://github.com/goauthentik/authentik/pull/19104) - website/docs: release notes: Add more integrations by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19109](https://github.com/goauthentik/authentik/pull/19109) - web: bump the storybook group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19111](https://github.com/goauthentik/authentik/pull/19111) - core: bump library/nginx from `fb01117` to `ad85427` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19112](https://github.com/goauthentik/authentik/pull/19112) - web: bump the eslint group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19110](https://github.com/goauthentik/authentik/pull/19110) - web: Fix Impersonation, Lit Reactive Controller Contexts by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19114](https://github.com/goauthentik/authentik/pull/19114) - web: Capitalize language display names, code owner fix by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19119](https://github.com/goauthentik/authentik/pull/19119) - core: bump library/nginx from `ad85427` to `ca871a8` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19126](https://github.com/goauthentik/authentik/pull/19126) - web: bump the swc group across 1 directory with 11 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19124](https://github.com/goauthentik/authentik/pull/19124) - core: bump github.com/jackc/pgx/v5 from 5.7.6 to 5.8.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19088](https://github.com/goauthentik/authentik/pull/19088) - core: bump library/node from `ccfd9da` to `03729a7` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19125](https://github.com/goauthentik/authentik/pull/19125) - core, web: bump qs from 6.14.0 to 6.14.1 in /packages/docusaurus-config by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19130](https://github.com/goauthentik/authentik/pull/19130) - website/integrations: karakeep: don't hardcode wellknown's slug by [@&#8203;pippo73](https://github.com/pippo73) in [goauthentik/authentik#19127](https://github.com/goauthentik/authentik/pull/19127) - web: disable user settings fields when changes are not allowed by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19132](https://github.com/goauthentik/authentik/pull/19132) - website/docs: endpoint agent release notes by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19042](https://github.com/goauthentik/authentik/pull/19042) - website/docs: fix build by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19148](https://github.com/goauthentik/authentik/pull/19148) - web: Token Form Fixes by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19121](https://github.com/goauthentik/authentik/pull/19121) - web/user: fix consent delete form missing details by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19147](https://github.com/goauthentik/authentik/pull/19147) - web: bump globals from 16.5.0 to 17.0.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19154](https://github.com/goauthentik/authentik/pull/19154) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19135](https://github.com/goauthentik/authentik/pull/19135) - ci: bump int128/docker-manifest-create-action from 2.10.0 to 2.12.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19138](https://github.com/goauthentik/authentik/pull/19138) - website/integrations: vaultwarden: add custom email scope by [@&#8203;williamkray](https://github.com/williamkray) in [goauthentik/authentik#19160](https://github.com/goauthentik/authentik/pull/19160) - stages/authenticator\_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19137](https://github.com/goauthentik/authentik/pull/19137) - core: handle deserialization errors from FileField migration by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19067](https://github.com/goauthentik/authentik/pull/19067) - web: fix slug auto-updating when editing existing applications by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19169](https://github.com/goauthentik/authentik/pull/19169) - web: Fix user library colors, modal z-indexes, table progress bars by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19152](https://github.com/goauthentik/authentik/pull/19152) - web/admin: adjust sync threshold, add tooltip by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19131](https://github.com/goauthentik/authentik/pull/19131) - website/docs: remove duplicates in slo docs by [@&#8203;nmasnadithya](https://github.com/nmasnadithya) in [goauthentik/authentik#19170](https://github.com/goauthentik/authentik/pull/19170) - lifecycle: fix migration conn\_options for psycopg connection by [@&#8203;D-Tasker207](https://github.com/D-Tasker207) in [goauthentik/authentik#19134](https://github.com/goauthentik/authentik/pull/19134) - web: bump knip from 5.78.0 to 5.79.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19181](https://github.com/goauthentik/authentik/pull/19181) - ci: bump getsentry/action-release from 3.4.0 to 3.5.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19183](https://github.com/goauthentik/authentik/pull/19183) - web: bump [@&#8203;formatjs/intl-listformat](https://github.com/formatjs/intl-listformat) from 8.1.0 to 8.1.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19182](https://github.com/goauthentik/authentik/pull/19182) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19179](https://github.com/goauthentik/authentik/pull/19179) - lib: update error logging by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#18628](https://github.com/goauthentik/authentik/pull/18628) - website/integrations: make grafana terraform section expand by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19192](https://github.com/goauthentik/authentik/pull/19192) - core: add prettier failure on duplicate group names by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#18941](https://github.com/goauthentik/authentik/pull/18941) - web/maintenance: no missing element type definitions by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#18950](https://github.com/goauthentik/authentik/pull/18950) - root: codespell: ignore Python virtual env, group patterns. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19180](https://github.com/goauthentik/authentik/pull/19180) - web: Merge branch -- Stale notifications, synchronized context objects, rendering fixes by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19141](https://github.com/goauthentik/authentik/pull/19141) - website/docs: Add docs for roles by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19196](https://github.com/goauthentik/authentik/pull/19196) - web: Defer table refresh, visibility checks. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19194](https://github.com/goauthentik/authentik/pull/19194) - rbac: Add show all to roles tab, add role tab to groups by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19097](https://github.com/goauthentik/authentik/pull/19097) - website/docs: rewrite section about users and perms by [@&#8203;tanberry](https://github.com/tanberry) in [goauthentik/authentik#19195](https://github.com/goauthentik/authentik/pull/19195) - core: add last\_login filter to users API by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#18993](https://github.com/goauthentik/authentik/pull/18993) - web: bump the eslint group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19205](https://github.com/goauthentik/authentik/pull/19205) - admin/files: support %(theme)s variable in media file paths by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19108](https://github.com/goauthentik/authentik/pull/19108) - website/integrations: glpi: add step by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19208](https://github.com/goauthentik/authentik/pull/19208) - web: bump knip from 5.79.0 to 5.80.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19207](https://github.com/goauthentik/authentik/pull/19207) - core: bump axllent/mailpit from v1.28.0 to v1.28.1 in /tests/e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19204](https://github.com/goauthentik/authentik/pull/19204) - lifecycle/aws: bump aws-cdk from 2.1100.1 to 2.1100.2 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19203](https://github.com/goauthentik/authentik/pull/19203) - core: bump goauthentik.io/api/v3 from 3.2026020.6 to 3.2026020.7 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19202](https://github.com/goauthentik/authentik/pull/19202) - translate: Updates for project authentik and language pt\_BR by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#19082](https://github.com/goauthentik/authentik/pull/19082) - web/maintenance: lint pass to add missing HTMLElementEventMap entries by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#18953](https://github.com/goauthentik/authentik/pull/18953) - outpost/proxyv2: reduce max number of postgres connections by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19211](https://github.com/goauthentik/authentik/pull/19211) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19200](https://github.com/goauthentik/authentik/pull/19200) - website/docs: revisit endpoint docs the nth by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19116](https://github.com/goauthentik/authentik/pull/19116) - ci: bump astral-sh/setup-uv from 7.1.6 to 7.2.0 in /.github/actions/setup by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19221](https://github.com/goauthentik/authentik/pull/19221) - endpoints: include license status in agent config by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19227](https://github.com/goauthentik/authentik/pull/19227) - web: bump [@&#8203;formatjs/intl-listformat](https://github.com/formatjs/intl-listformat) from 8.1.1 to 8.1.2 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19220](https://github.com/goauthentik/authentik/pull/19220) - lifecycle/aws: bump aws-cdk from 2.1100.2 to 2.1100.3 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19219](https://github.com/goauthentik/authentik/pull/19219) - core: bump goauthentik.io/api/v3 from 3.2026020.7 to 3.2026020.8 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19218](https://github.com/goauthentik/authentik/pull/19218) - stages/authenticator\_static: set max token length to 100 chars by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19162](https://github.com/goauthentik/authentik/pull/19162) - website/glossary: improve by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#18969](https://github.com/goauthentik/authentik/pull/18969) - core: fix read replica routing during transactions by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19086](https://github.com/goauthentik/authentik/pull/19086) - website: Fix typos. by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19243](https://github.com/goauthentik/authentik/pull/19243) - core: bump goauthentik.io/api/v3 from 3.2026020.8 to 3.2026020.10 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19242](https://github.com/goauthentik/authentik/pull/19242) - website/integrations: update AWS by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#17861](https://github.com/goauthentik/authentik/pull/17861) - website/docs: update github social login script example by [@&#8203;busybox11](https://github.com/busybox11) in [goauthentik/authentik#19246](https://github.com/goauthentik/authentik/pull/19246) - web: bump vite from 7.3.0 to 7.3.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19245](https://github.com/goauthentik/authentik/pull/19245) - web: bump the rollup group across 1 directory with 4 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19206](https://github.com/goauthentik/authentik/pull/19206) - stages/prompt: optimize API endpoints by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19251](https://github.com/goauthentik/authentik/pull/19251) - website/docs: update entra id provider docs by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#18366](https://github.com/goauthentik/authentik/pull/18366) - website/integations: fix aws spelling by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19253](https://github.com/goauthentik/authentik/pull/19253) - stages/password: replace session-based retries with reputation by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18643](https://github.com/goauthentik/authentik/pull/18643) - web: bump chromedriver from 143.0.3 to 143.0.4 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19244](https://github.com/goauthentik/authentik/pull/19244) - web/admin: add banner to flow import form by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19288](https://github.com/goauthentik/authentik/pull/19288) - core: bump django from v5.2.9 to 5.2.10 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19290](https://github.com/goauthentik/authentik/pull/19290) - endpoints: show agent version by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19239](https://github.com/goauthentik/authentik/pull/19239) - core: bump urllib3 from 2.5.0 to v2.6.3 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19287](https://github.com/goauthentik/authentik/pull/19287) - web: bump knip from 5.80.0 to 5.80.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19301](https://github.com/goauthentik/authentik/pull/19301) - web: Fix flow inspector advancement event. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19309](https://github.com/goauthentik/authentik/pull/19309) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19237](https://github.com/goauthentik/authentik/pull/19237) - website/docs: deprecate GCDT auth stage by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19306](https://github.com/goauthentik/authentik/pull/19306) - website/docs: Fix typo in GitHub OAuth Source instructions by [@&#8203;tcrasset](https://github.com/tcrasset) in [goauthentik/authentik#18936](https://github.com/goauthentik/authentik/pull/18936) - website/docs: update m2m doc by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#18963](https://github.com/goauthentik/authentik/pull/18963) - website/docs: Fix documentation example for `app_entitlements_attributes`. by [@&#8203;sebastianw](https://github.com/sebastianw) in [goauthentik/authentik#19316](https://github.com/goauthentik/authentik/pull/19316) - website/docs: add flow import warnings by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19307](https://github.com/goauthentik/authentik/pull/19307) - web: bump pino from 10.1.0 to 10.1.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19333](https://github.com/goauthentik/authentik/pull/19333) - web: bump knip from 5.80.1 to 5.80.2 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19332](https://github.com/goauthentik/authentik/pull/19332) - core: bump axllent/mailpit from v1.28.1 to v1.28.2 in /tests/e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19329](https://github.com/goauthentik/authentik/pull/19329) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.0.3 to 25.0.6 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19331](https://github.com/goauthentik/authentik/pull/19331) - core: bump library/nginx from `ca871a8` to `7272239` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19334](https://github.com/goauthentik/authentik/pull/19334) - website/docs: update unique email policy by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19305](https://github.com/goauthentik/authentik/pull/19305) - web: bump [@&#8203;types/react](https://github.com/types/react) from 19.2.7 to 19.2.8 in /web in the react group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19330](https://github.com/goauthentik/authentik/pull/19330) - web: Images styles, theming by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19233](https://github.com/goauthentik/authentik/pull/19233) - website/docs: update LDAP provider docs by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#18272](https://github.com/goauthentik/authentik/pull/18272) - web: Flow info, localization, back button. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19234](https://github.com/goauthentik/authentik/pull/19234) - web: bump type-fest from 5.3.1 to 5.4.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19354](https://github.com/goauthentik/authentik/pull/19354) - core: bump goauthentik.io/api/v3 from 3.2026020.10 to 3.2026020.11 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19300](https://github.com/goauthentik/authentik/pull/19300) - ci: bump actions/setup-go from 6.1.0 to 6.2.0 in /.github/actions/setup by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19352](https://github.com/goauthentik/authentik/pull/19352) - web: bump the bundler group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19349](https://github.com/goauthentik/authentik/pull/19349) - ci: bump actions/setup-go from 6.1.0 to 6.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19351](https://github.com/goauthentik/authentik/pull/19351) - web: bump [@&#8203;sentry/browser](https://github.com/sentry/browser) from 10.32.1 to 10.33.0 in /web in the sentry group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19347](https://github.com/goauthentik/authentik/pull/19347) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.0.6 to 25.0.7 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19353](https://github.com/goauthentik/authentik/pull/19353) - core: bump library/nginx from `7272239` to `06eb0c8` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19350](https://github.com/goauthentik/authentik/pull/19350) - packages/django-dramatiq-postgres: broker: empty message after task completed successfully by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19340](https://github.com/goauthentik/authentik/pull/19340) - core: bump jsii from 1.120.0 to v1.125.0 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19268](https://github.com/goauthentik/authentik/pull/19268) - core: bump microsoft-kiota-abstractions from 1.9.7 to v1.9.8 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19270](https://github.com/goauthentik/authentik/pull/19270) - core: bump microsoft-kiota-serialization-json from 1.9.7 to v1.9.8 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19272](https://github.com/goauthentik/authentik/pull/19272) - core: bump orjson from 3.11.4 to v3.11.5 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19276](https://github.com/goauthentik/authentik/pull/19276) - core: bump platformdirs from 4.5.0 to v4.5.1 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19278](https://github.com/goauthentik/authentik/pull/19278) - core: bump protobuf from 6.33.1 to v6.33.2 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19280](https://github.com/goauthentik/authentik/pull/19280) - core: bump ua-parser-builtins from 0.18.0.post1 to v202601 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19286](https://github.com/goauthentik/authentik/pull/19286) - core: bump cbor2 from 5.7.1 to v5.8.0 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19263](https://github.com/goauthentik/authentik/pull/19263) - core: bump microsoft-kiota-serialization-multipart from 1.9.7 to v1.9.8 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19273](https://github.com/goauthentik/authentik/pull/19273) - core: bump microsoft-kiota-serialization-form from 1.9.7 to v1.9.8 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19271](https://github.com/goauthentik/authentik/pull/19271) - core: bump boto3 from 1.42.1 to v1.42.24 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19261](https://github.com/goauthentik/authentik/pull/19261) - core: bump pynacl from 1.6.1 to v1.6.2 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19281](https://github.com/goauthentik/authentik/pull/19281) - core: bump opentelemetry-api from 1.39.0 to v1.39.1 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19275](https://github.com/goauthentik/authentik/pull/19275) - core: bump pathspec from 0.12.1 to v1.0.2 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19277](https://github.com/goauthentik/authentik/pull/19277) - core: bump jsonschema from 4.25.1 to v4.26.0 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19269](https://github.com/goauthentik/authentik/pull/19269) - core: bump txaio from 25.9.2 to v25.12.2 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19284](https://github.com/goauthentik/authentik/pull/19284) - core: bump anyio from 4.12.0 to v4.12.1 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19258](https://github.com/goauthentik/authentik/pull/19258) - core: bump aiohttp from 3.13.2 to v3.13.3 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19257](https://github.com/goauthentik/authentik/pull/19257) - core: bump google-auth-httplib2 from 0.2.1 to v0.3.0 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19266](https://github.com/goauthentik/authentik/pull/19266) - core: bump sqlparse from 0.5.4 to v0.5.5 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19283](https://github.com/goauthentik/authentik/pull/19283) - core: bump certifi from 2025.11.12 to v2026.1.4 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19264](https://github.com/goauthentik/authentik/pull/19264) - core: bump autobahn from 25.11.1 to v25.12.2 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19259](https://github.com/goauthentik/authentik/pull/19259) - core: bump pyparsing from 3.2.5 to v3.3.1 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19282](https://github.com/goauthentik/authentik/pull/19282) - core: bump types-requests from 2.32.4.20250913 to v2.32.4.20260107 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19285](https://github.com/goauthentik/authentik/pull/19285) - core: bump greenlet from 3.2.4 to v3.3.0 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19267](https://github.com/goauthentik/authentik/pull/19267) - core: bump google-auth from 2.43.0 to v2.47.0 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19265](https://github.com/goauthentik/authentik/pull/19265) - core: bump azure-core from 1.36.0 to v1.37.0 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19260](https://github.com/goauthentik/authentik/pull/19260) - internal: rework liveness probe and proxy by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19312](https://github.com/goauthentik/authentik/pull/19312) - core: bump proto-plus from 1.26.1 to v1.27.0 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19279](https://github.com/goauthentik/authentik/pull/19279) - core: bump microsoft-kiota-serialization-text from 1.9.7 to v1.9.8 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19274](https://github.com/goauthentik/authentik/pull/19274) - core: bump google-api-core from 2.28.1 to v2.29.0 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19359](https://github.com/goauthentik/authentik/pull/19359) - core: bump pathspec from 1.0.2 to v1.0.3 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19363](https://github.com/goauthentik/authentik/pull/19363) - core: bump azure-core from 1.37.0 to v1.38.0 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19357](https://github.com/goauthentik/authentik/pull/19357) - web/admin: always retrieve selected provider when editing the application by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#19341](https://github.com/goauthentik/authentik/pull/19341) - revert: web: disable user settings fields when changes are not allowed by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19230](https://github.com/goauthentik/authentik/pull/19230) - core: bump zope-interface from 8.1.1 to v8.2 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19367](https://github.com/goauthentik/authentik/pull/19367) - core: bump protobuf from 6.33.2 to v6.33.4 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19365](https://github.com/goauthentik/authentik/pull/19365) - core: bump prometheus-client from 0.23.1 to v0.24.0 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19364](https://github.com/goauthentik/authentik/pull/19364) - internal/outpost: improve PostgreSQL connection options parsing by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19118](https://github.com/goauthentik/authentik/pull/19118) - outpost/proxyv2: fix stale session cookie causing 400 error in createState by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19026](https://github.com/goauthentik/authentik/pull/19026) - website/docs: update location for logs on windows by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19371](https://github.com/goauthentik/authentik/pull/19371) - core: bump boto3 from 1.42.24 to v1.42.26 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19358](https://github.com/goauthentik/authentik/pull/19358) - web/elements: hidden secrets not propagating by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#19029](https://github.com/goauthentik/authentik/pull/19029) - core: bump websockets from 15.0.1 to v16.0 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19366](https://github.com/goauthentik/authentik/pull/19366) - core: bump httplib2 from 0.31.0 to v0.31.1 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19360](https://github.com/goauthentik/authentik/pull/19360) - core: bump microsoft-kiota-authentication-azure from 1.9.7 to v1.9.8 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19361](https://github.com/goauthentik/authentik/pull/19361) - stages/authenticator\_validate: decrease reputation on failed MFA attempt by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19378](https://github.com/goauthentik/authentik/pull/19378) - core: bump microsoft-kiota-http from 1.9.7 to v1.9.8 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19362](https://github.com/goauthentik/authentik/pull/19362) - web: UI Locale Fixes by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19235](https://github.com/goauthentik/authentik/pull/19235) - website/integrations: Add DataDog by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19320](https://github.com/goauthentik/authentik/pull/19320) - web: bump the eslint group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19348](https://github.com/goauthentik/authentik/pull/19348) - core: Update supported versions in SECURITY.md by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19385](https://github.com/goauthentik/authentik/pull/19385) - website/docs: update gws provider docs by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#18286](https://github.com/goauthentik/authentik/pull/18286) - web/admin: Pluralize Certificate-Key Pair deletion confirmation by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19389](https://github.com/goauthentik/authentik/pull/19389) - website/docs: mention dynamic overrides in redirect stage documentation by [@&#8203;severin](https://github.com/severin) in [goauthentik/authentik#19368](https://github.com/goauthentik/authentik/pull/19368) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.0.7 to 25.0.8 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19392](https://github.com/goauthentik/authentik/pull/19392) - website/docs: add import to discord policy by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19397](https://github.com/goauthentik/authentik/pull/19397) - website/docs: remove "beta" tag from 2025.12 by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#19404](https://github.com/goauthentik/authentik/pull/19404) - core: bump library/node from `03729a7` to `6222695` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19393](https://github.com/goauthentik/authentik/pull/19393) - core: bump library/nginx from `06eb0c8` to `e3a22a7` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19394](https://github.com/goauthentik/authentik/pull/19394) - core: bump xmlsec from 1.3.16 to 1.3.17 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19411](https://github.com/goauthentik/authentik/pull/19411) - core: bump lxml from 6.0.0 to 6.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19409](https://github.com/goauthentik/authentik/pull/19409) - core: bump black from 25.1.0 to 25.12.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19412](https://github.com/goauthentik/authentik/pull/19412) - core: bump drf-orjson-renderer from 1.7.3 to 1.8.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19415](https://github.com/goauthentik/authentik/pull/19415) - core: bump python-kadmin-rs from 0.6.1 to 0.6.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19416](https://github.com/goauthentik/authentik/pull/19416) - core: bump ruff from 0.11.9 to 0.14.11 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19410](https://github.com/goauthentik/authentik/pull/19410) - core: bump pdoc from 15.0.3 to 16.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19413](https://github.com/goauthentik/authentik/pull/19413) - core: bump bpython from 0.25 to 0.26 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19408](https://github.com/goauthentik/authentik/pull/19408) - core: bump wsproto from 1.2.0 to 1.3.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19417](https://github.com/goauthentik/authentik/pull/19417) - website/docs: add 2026.2 release notes draft page by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#19418](https://github.com/goauthentik/authentik/pull/19418) - core: remove session migration by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#14568](https://github.com/goauthentik/authentik/pull/14568) - core: bump debugpy from 1.8.14 to 1.8.19 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19414](https://github.com/goauthentik/authentik/pull/19414) - core: bump geoip2 from 5.1.0 to 5.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19429](https://github.com/goauthentik/authentik/pull/19429) - core: bump importlib-metadata from 8.6.1 to 8.7.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19430](https://github.com/goauthentik/authentik/pull/19430) - web/startup: deprecated theme names break theming by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#19431](https://github.com/goauthentik/authentik/pull/19431) - core: bump freezegun from 1.5.1 to 1.5.5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19423](https://github.com/goauthentik/authentik/pull/19423) - core: bump bandit from 1.8.3 to 1.9.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19422](https://github.com/goauthentik/authentik/pull/19422) - core: bump pyyaml from 6.0.2 to 6.0.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19426](https://github.com/goauthentik/authentik/pull/19426) - core: bump django-stubs\[compatible-mypy] from 5.2.5 to 5.2.8 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19424](https://github.com/goauthentik/authentik/pull/19424) - core: bump django-pgtrigger from 4.15.2 to 4.17.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19428](https://github.com/goauthentik/authentik/pull/19428) - core: bump aws-cdk-lib from 2.188.0 to 2.234.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19427](https://github.com/goauthentik/authentik/pull/19427) - core: bump pytest from 8.3.5 to 9.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19425](https://github.com/goauthentik/authentik/pull/19425) - core: bump types-ldap3 from 2.9.13.20250622 to 2.9.13.20251121 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19438](https://github.com/goauthentik/authentik/pull/19438) - core: bump django-pglock from 1.7.2 to 1.8.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19437](https://github.com/goauthentik/authentik/pull/19437) - core: bump cryptography from 45.0.5 to 46.0.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19439](https://github.com/goauthentik/authentik/pull/19439) - core: bump pydantic from 2.11.7 to 2.12.5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19435](https://github.com/goauthentik/authentik/pull/19435) - core: bump twilio from 9.7.0 to 9.9.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19434](https://github.com/goauthentik/authentik/pull/19434) - core: bump sentry-sdk from 2.33.2 to 2.49.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19441](https://github.com/goauthentik/authentik/pull/19441) - core: bump coverage\[toml] from 7.8.0 to 7.13.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19446](https://github.com/goauthentik/authentik/pull/19446) - core: bump setproctitle from 1.3.6 to 1.3.7 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19447](https://github.com/goauthentik/authentik/pull/19447) - core: bump django-filter from 25.1 to 25.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19444](https://github.com/goauthentik/authentik/pull/19444) - core: bump paramiko from 3.5.1 to 4.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19440](https://github.com/goauthentik/authentik/pull/19440) - core: bump gssapi from 1.9.0 to 1.10.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19436](https://github.com/goauthentik/authentik/pull/19436) - core: bump fido2 from 2.0.0 to 2.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19445](https://github.com/goauthentik/authentik/pull/19445) - core: bump webauthn from 2.6.0 to 2.7.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19442](https://github.com/goauthentik/authentik/pull/19442) - core: bump uvicorn\[standard] from 0.35.0 to 0.40.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19453](https://github.com/goauthentik/authentik/pull/19453) - core: bump psycopg\[c,pool] from 3.2.9 to 3.3.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19452](https://github.com/goauthentik/authentik/pull/19452) - core: bump djangorestframework-stubs\[compatible-mypy] from 3.16.3 to 3.16.7 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19449](https://github.com/goauthentik/authentik/pull/19449) - core: bump pytest-randomly from 3.16.0 to 4.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19456](https://github.com/goauthentik/authentik/pull/19456) - core: bump structlog from 25.4.0 to 25.5.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19450](https://github.com/goauthentik/authentik/pull/19450) - core: bump constructs from 10.4.2 to 10.4.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19451](https://github.com/goauthentik/authentik/pull/19451) - core: bump msgraph-sdk from 1.39.0 to 1.52.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19454](https://github.com/goauthentik/authentik/pull/19454) - core: bump selenium from 4.32.0 to 4.39.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19455](https://github.com/goauthentik/authentik/pull/19455) - core: bump google-api-python-client from 2.177.0 to 2.188.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19443](https://github.com/goauthentik/authentik/pull/19443) - core: bump mypy from 1.18.2 to 1.19.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19457](https://github.com/goauthentik/authentik/pull/19457) - core: bump channels from 4.3.1 to 4.3.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19458](https://github.com/goauthentik/authentik/pull/19458) - root: Python 3.14 by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#17313](https://github.com/goauthentik/authentik/pull/17313) - ci: fix checkout stable (for 2025.12) by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#19448](https://github.com/goauthentik/authentik/pull/19448) - lib: use orjson for structlog json by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19462](https://github.com/goauthentik/authentik/pull/19462) - root: upgrade ruff lint for 3.14 by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19461](https://github.com/goauthentik/authentik/pull/19461) - website/integrations: add MinIO AIStor configuration via environment variables by [@&#8203;Fredouye](https://github.com/Fredouye) in [goauthentik/authentik#19337](https://github.com/goauthentik/authentik/pull/19337) - web: bump prettier from 3.7.4 to 3.8.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19471](https://github.com/goauthentik/authentik/pull/19471) - core: bump library/node from 25.2.1-trixie to 25.3.0-trixie in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19468](https://github.com/goauthentik/authentik/pull/19468) - core: bump library/nginx from `e3a22a7` to `c881927` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19469](https://github.com/goauthentik/authentik/pull/19469) - stages/authenticator\_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19464](https://github.com/goauthentik/authentik/pull/19464) - revert: lib: use orjson for structlog json by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19478](https://github.com/goauthentik/authentik/pull/19478) - providers/oauth2: allow property mappings to override scope claim in access tokens by [@&#8203;JMLX42](https://github.com/JMLX42) in [goauthentik/authentik#19226](https://github.com/goauthentik/authentik/pull/19226) - root: adjust makefile for non-brew macos by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19479](https://github.com/goauthentik/authentik/pull/19479) - endpoints/connectors/agent: Skip Endpoint stage on device IA & fix confusing identification subtext by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19482](https://github.com/goauthentik/authentik/pull/19482) - website/docs: limiting permissions of AD service account by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19483](https://github.com/goauthentik/authentik/pull/19483) - endpoints/connectors/agent: add tests for IA endpoint stage by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19487](https://github.com/goauthentik/authentik/pull/19487) - web: Z-Index Fixes, Mobile Sidebar Behavior. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19460](https://github.com/goauthentik/authentik/pull/19460) - web/admin: fix switches by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19493](https://github.com/goauthentik/authentik/pull/19493) - lifecycle: re-add quoted types for gunicorn config by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19500](https://github.com/goauthentik/authentik/pull/19500) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19386](https://github.com/goauthentik/authentik/pull/19386) - website/docs: release notes: Update release notes for version 2025.12.1 by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19502](https://github.com/goauthentik/authentik/pull/19502) - sources/kerberos: update to new python-kadmin-rs by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19491](https://github.com/goauthentik/authentik/pull/19491) - root, web: Bump package-lock.json by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19501](https://github.com/goauthentik/authentik/pull/19501) - lifecycle/aws: bump aws-cdk from 2.1100.3 to 2.1101.0 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19510](https://github.com/goauthentik/authentik/pull/19510) - core: bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19507](https://github.com/goauthentik/authentik/pull/19507) - web: bump [@&#8203;sentry/browser](https://github.com/sentry/browser) from 10.33.0 to 10.34.0 in /web in the sentry group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19466](https://github.com/goauthentik/authentik/pull/19466) - web: bump pino from 10.1.1 to 10.2.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19474](https://github.com/goauthentik/authentik/pull/19474) - web: bump knip from 5.80.2 to 5.81.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19475](https://github.com/goauthentik/authentik/pull/19475) - core: bump aws-cdk-lib from 2.234.1 to 2.235.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19511](https://github.com/goauthentik/authentik/pull/19511) - core: bump github.com/getsentry/sentry-go from 0.40.0 to 0.41.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19508](https://github.com/goauthentik/authentik/pull/19508) - core: bump ruff from 0.14.11 to 0.14.13 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19513](https://github.com/goauthentik/authentik/pull/19513) - core: bump kubernetes from 33.1.0 to 35.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19514](https://github.com/goauthentik/authentik/pull/19514) - ci: bump actions/setup-node from 6.1.0 to 6.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19470](https://github.com/goauthentik/authentik/pull/19470) - ci: bump actions/setup-node from 6.1.0 to 6.2.0 in /.github/actions/setup by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19472](https://github.com/goauthentik/authentik/pull/19472) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.0.8 to 25.0.9 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19516](https://github.com/goauthentik/authentik/pull/19516) - web: bump [@&#8203;formatjs/intl-listformat](https://github.com/formatjs/intl-listformat) from 8.1.2 to 8.2.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19515](https://github.com/goauthentik/authentik/pull/19515) - website: Omit Drafts From Version Picker by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19505](https://github.com/goauthentik/authentik/pull/19505) - tests/e2e: Add delay and serialized rollback to saml e2e test by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#18840](https://github.com/goauthentik/authentik/pull/18840) - core: bump pyasn1 from 0.6.1 to 0.6.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19531](https://github.com/goauthentik/authentik/pull/19531) - website/integrations: portainer: add automatic team management instructions by [@&#8203;DonQuinleone](https://github.com/DonQuinleone) in [goauthentik/authentik#19530](https://github.com/goauthentik/authentik/pull/19530) - website/docs: endpoint devices: update device code flow instructions by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19528](https://github.com/goauthentik/authentik/pull/19528) - \*: Auto compress images by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19533](https://github.com/goauthentik/authentik/pull/19533) - admin/files: fix manageable check blocking file creation on fresh installs by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19547](https://github.com/goauthentik/authentik/pull/19547) - admin/files: fix duplicate bucket name in presigned URLs with custom domain by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19537](https://github.com/goauthentik/authentik/pull/19537) - ci: bump actions/cache from 5.0.1 to 5.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19571](https://github.com/goauthentik/authentik/pull/19571) - core: bump constructs from 10.4.4 to 10.4.5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19563](https://github.com/goauthentik/authentik/pull/19563) - core: bump axllent/mailpit from v1.28.2 to v1.28.3 in /tests/e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19565](https://github.com/goauthentik/authentik/pull/19565) - ci: bump int128/docker-manifest-create-action from 2.12.0 to 2.13.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19572](https://github.com/goauthentik/authentik/pull/19572) - website/docs: add s3 perms by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19579](https://github.com/goauthentik/authentik/pull/19579) - web/forms: fix invalid date error for empty datetime-local inputs by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19561](https://github.com/goauthentik/authentik/pull/19561) - website/docs: add Arcane integration by [@&#8203;steilerDev](https://github.com/steilerDev) in [goauthentik/authentik#19584](https://github.com/goauthentik/authentik/pull/19584) - core: bump black from 25.12.0 to 26.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19567](https://github.com/goauthentik/authentik/pull/19567) - core: bump bandit from 1.9.2 to 1.9.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19566](https://github.com/goauthentik/authentik/pull/19566) - web: update [@&#8203;goauthentik/api](https://github.com/goauthentik/api) by [@&#8203;Ma27](https://github.com/Ma27) in [goauthentik/authentik#19542](https://github.com/goauthentik/authentik/pull/19542) - tests: improve e2e/integration test reliability by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19540](https://github.com/goauthentik/authentik/pull/19540) - web: bump knip from 5.81.0 to 5.82.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19603](https://github.com/goauthentik/authentik/pull/19603) - web: bump pino from 10.2.0 to 10.2.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19602](https://github.com/goauthentik/authentik/pull/19602) - web: bump the swc group across 1 directory with 12 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19601](https://github.com/goauthentik/authentik/pull/19601) - web: bump the rollup group across 1 directory with 4 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19600](https://github.com/goauthentik/authentik/pull/19600) - web: bump the eslint group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19599](https://github.com/goauthentik/authentik/pull/19599) - core: bump aws-cdk-lib from 2.235.0 to 2.235.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19598](https://github.com/goauthentik/authentik/pull/19598) - web: bump [@&#8203;sentry/browser](https://github.com/sentry/browser) from 10.34.0 to 10.35.0 in /web in the sentry group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19597](https://github.com/goauthentik/authentik/pull/19597) - core: bump fido2 from 2.1.0 to 2.1.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19596](https://github.com/goauthentik/authentik/pull/19596) - core: bump openapitools/openapi-generator-cli from v7.18.0 to v7.19.0 in /scripts/api by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19595](https://github.com/goauthentik/authentik/pull/19595) - core: bump goauthentik.io/api/v3 from 3.2026020.11 to 3.2026020.12 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19594](https://github.com/goauthentik/authentik/pull/19594) - core: bump selenium from 4.39.0 to 4.40.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19564](https://github.com/goauthentik/authentik/pull/19564) - endpoints: fix endpoints stage marked as enterprise by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19607](https://github.com/goauthentik/authentik/pull/19607) - web: bump type-fest from 5.4.0 to 5.4.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19473](https://github.com/goauthentik/authentik/pull/19473) - policies: fix Providers authentication\_flow not used when set by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19609](https://github.com/goauthentik/authentik/pull/19609) - integrations: add saml steps to mattermost by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19590](https://github.com/goauthentik/authentik/pull/19590) - providers/saml: allow encryption certificates without private keys by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19526](https://github.com/goauthentik/authentik/pull/19526) - providers/saml: fix structure of encrypted saml assertion by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19592](https://github.com/goauthentik/authentik/pull/19592) - sources/saml: Fix signature verification order to accommodate encrypted assertions by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19593](https://github.com/goauthentik/authentik/pull/19593) - lib/sync/outgoing: handle deletions even if object does not exist in database by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#18968](https://github.com/goauthentik/authentik/pull/18968) - website/docs: endpoints devices: typo fix by [@&#8203;fheisler](https://github.com/fheisler) in [goauthentik/authentik#19621](https://github.com/goauthentik/authentik/pull/19621) - website/docs: sources: add keycloak by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19591](https://github.com/goauthentik/authentik/pull/19591) - web/user: fix Firefox for Android infinite render loop in user library by [@&#8203;Gulianrdgd](https://github.com/Gulianrdgd) in [goauthentik/authentik#19379](https://github.com/goauthentik/authentik/pull/19379) - web/forms: fix forms not resetting state when modal closes by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19562](https://github.com/goauthentik/authentik/pull/19562) - web/elements: reduce spacing between collapsible form groups by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19627](https://github.com/goauthentik/authentik/pull/19627) - website/docs: Update saml google workspace guide by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19624](https://github.com/goauthentik/authentik/pull/19624) - website/integrations: update qnap by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19644](https://github.com/goauthentik/authentik/pull/19644) - core: bump sentry-sdk from 2.49.0 to 2.50.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19630](https://github.com/goauthentik/authentik/pull/19630) - web: bump [@&#8203;types/react](https://github.com/types/react) from 19.2.8 to 19.2.9 in /web in the react group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19631](https://github.com/goauthentik/authentik/pull/19631) - core: bump django-stubs\[compatible-mypy] from 5.2.8 to 5.2.9 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19629](https://github.com/goauthentik/authentik/pull/19629) - core: bump github.com/pires/go-proxyproto from 0.8.1 to 0.9.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19628](https://github.com/goauthentik/authentik/pull/19628) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19535](https://github.com/goauthentik/authentik/pull/19535) - core: bump library/node from 25.3.0-trixie to 25.4.0-trixie in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19632](https://github.com/goauthentik/authentik/pull/19632) - website/docs: update endpoint agent windows log location by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19645](https://github.com/goauthentik/authentik/pull/19645) - sources/saml: Set AuthnRequest ProtocolBinding to HTTP-POST instead of HTTP-Redirect by [@&#8203;ikob](https://github.com/ikob) in [goauthentik/authentik#17378](https://github.com/goauthentik/authentik/pull/17378) - sources/saml: properly catch InvalidSignature exception by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19641](https://github.com/goauthentik/authentik/pull/19641) - web: Reduce Sentry Development Errors by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19504](https://github.com/goauthentik/authentik/pull/19504) - web/a11y: Locale selector select styles, contrast. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19634](https://github.com/goauthentik/authentik/pull/19634) - web/elements: remove pfbase everywhere by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#19623](https://github.com/goauthentik/authentik/pull/19623) - web/flows: update icon and text for device classes by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19648](https://github.com/goauthentik/authentik/pull/19648) - web/admin: fix captcha stage provider selector not showing saved value by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19555](https://github.com/goauthentik/authentik/pull/19555) - web: bump chromedriver from 143.0.4 to 144.0.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19668](https://github.com/goauthentik/authentik/pull/19668) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19654](https://github.com/goauthentik/authentik/pull/19654) - core: bump packaging from 25.0 to 26.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19659](https://github.com/goauthentik/authentik/pull/19659) - web: bump [@&#8203;sentry/browser](https://github.com/sentry/browser) from 10.35.0 to 10.36.0 in /web in the sentry group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19660](https://github.com/goauthentik/authentik/pull/19660) - ci: bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19662](https://github.com/goauthentik/authentik/pull/19662) - ci: bump actions/setup-python from 6.1.0 to 6.2.0 in /.github/actions/setup by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19664](https://github.com/goauthentik/authentik/pull/19664) - core, web: bump lodash from 4.17.21 to 4.17.23 in /packages/docusaurus-config by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19655](https://github.com/goauthentik/authentik/pull/19655) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.0.9 to 25.0.10 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19669](https://github.com/goauthentik/authentik/pull/19669) - web: bump prettier from 3.8.0 to 3.8.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19667](https://github.com/goauthentik/authentik/pull/19667) - web: bump country-flag-icons from 1.6.4 to 1.6.7 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19666](https://github.com/goauthentik/authentik/pull/19666) - web: bump the storybook group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19661](https://github.com/goauthentik/authentik/pull/19661) - web: bump the rollup group across 1 directory with 4 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19663](https://github.com/goauthentik/authentik/pull/19663) - web: bump core-js from 3.47.0 to 3.48.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19665](https://github.com/goauthentik/authentik/pull/19665) - providers/oauth2: add `logout+jwt` token type for oidc logout token. by [@&#8203;jeroen1602](https://github.com/jeroen1602) in [goauthentik/authentik#19554](https://github.com/goauthentik/authentik/pull/19554) - website/docs: update LDAP search permission instructions by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19676](https://github.com/goauthentik/authentik/pull/19676) - sources/oauth: add fallback for id\_token when profile URL is not available by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19311](https://github.com/goauthentik/authentik/pull/19311) - website/docs: endpoint devices: add serial number note by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19677](https://github.com/goauthentik/authentik/pull/19677) - core: add bulk session revocation by [@&#8203;cdmx-in](https://github.com/cdmx-in) in [goauthentik/authentik#18564](https://github.com/goauthentik/authentik/pull/18564) - providers/proxy: Fix incorrect comparison of redirect URL and CookieDomain by [@&#8203;vitSkalicky](https://github.com/vitSkalicky) in [goauthentik/authentik#15686](https://github.com/goauthentik/authentik/pull/15686) - web/admin: fix brand form sending "undefined" string for blank default application by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19658](https://github.com/goauthentik/authentik/pull/19658) - web/admin: fix file upload not preserving extension for custom names with dots by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19548](https://github.com/goauthentik/authentik/pull/19548) - web/common: add dev middleware to show warnings for consecutive identical requests by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19671](https://github.com/goauthentik/authentik/pull/19671) - web: Form Modal Independence: Part 1 by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19395](https://github.com/goauthentik/authentik/pull/19395) - ci: bump actions/checkout from 6.0.1 to 6.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19696](https://github.com/goauthentik/authentik/pull/19696) - web: bump globals from 17.0.0 to 17.1.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19695](https://github.com/goauthentik/authentik/pull/19695) - web: bump unist-util-visit from 5.0.0 to 5.1.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19694](https://github.com/goauthentik/authentik/pull/19694) - web: bump the bundler group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19693](https://github.com/goauthentik/authentik/pull/19693) - core: bump gunicorn from 23.0.0 to 24.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19692](https://github.com/goauthentik/authentik/pull/19692) - core: bump twilio from 9.9.1 to 9.10.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19691](https://github.com/goauthentik/authentik/pull/19691) - core: bump ruff from 0.14.13 to 0.14.14 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19690](https://github.com/goauthentik/authentik/pull/19690) - core: bump msgraph-sdk from 1.52.0 to 1.53.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19689](https://github.com/goauthentik/authentik/pull/19689) - core: bump goauthentik/selenium from 143.0-ak-0.35.3 to 144.0-ak-0.35.7 in /tests/e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19688](https://github.com/goauthentik/authentik/pull/19688) - lifecycle/aws: bump aws-cdk from 2.1101.0 to 2.1102.0 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19687](https://github.com/goauthentik/authentik/pull/19687) - core: bump goauthentik.io/api/v3 from 3.2026020.12 to 3.2026020.14 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19686](https://github.com/goauthentik/authentik/pull/19686) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19684](https://github.com/goauthentik/authentik/pull/19684) - internal: fix incorrect metric calculation by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19701](https://github.com/goauthentik/authentik/pull/19701) - core: return bad request when user is authenticated and not active by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19706](https://github.com/goauthentik/authentik/pull/19706) - web/admin: fix impersonation form requesting data without being opened by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19673](https://github.com/goauthentik/authentik/pull/19673) - endpoints: FleetDM connector by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#18589](https://github.com/goauthentik/authentik/pull/18589) - endpoints/connectors/agent: fix icon by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19722](https://github.com/goauthentik/authentik/pull/19722) - Makefile: add optional uv prefix by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19738](https://github.com/goauthentik/authentik/pull/19738) - website/integrations: paperless-ngx: Update by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19718](https://github.com/goauthentik/authentik/pull/19718) - web: bump playwright from 1.57.0 to 1.58.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19755](https://github.com/goauthentik/authentik/pull/19755) - web: bump country-flag-icons from 1.6.7 to 1.6.8 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19754](https://github.com/goauthentik/authentik/pull/19754) - web: bump pino from 10.2.1 to 10.3.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19752](https://github.com/goauthentik/authentik/pull/19752) - core: bump gunicorn from 24.0.0 to 24.1.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19751](https://github.com/goauthentik/authentik/pull/19751) - core: bump coverage\[toml] from 7.13.1 to 7.13.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19749](https://github.com/goauthentik/authentik/pull/19749) - core: bump cachetools from 6.2.4 to 6.2.5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19750](https://github.com/goauthentik/authentik/pull/19750) - core: bump goauthentik/selenium from 144.0-ak-0.35.7 to 144.0-ak-0.35.8 in /tests/e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19747](https://github.com/goauthentik/authentik/pull/19747) - core: bump aws-cdk-lib from 2.235.1 to 2.236.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19745](https://github.com/goauthentik/authentik/pull/19745) - lifecycle/aws: bump aws-cdk from 2.1102.0 to 2.1103.0 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19744](https://github.com/goauthentik/authentik/pull/19744) - core: bump github.com/pires/go-proxyproto from 0.9.0 to 0.9.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19743](https://github.com/goauthentik/authentik/pull/19743) - core: bump axllent/mailpit from v1.28.3 to v1.28.4 in /tests/e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19748](https://github.com/goauthentik/authentik/pull/19748) - core: bump goauthentik.io/api/v3 from 3.2026020.14 to 3.2026020.15 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19742](https://github.com/goauthentik/authentik/pull/19742) - ci: fix typo in volume path by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19741](https://github.com/goauthentik/authentik/pull/19741) - core: bump djangoql from 0.18.1 to 0.18.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19746](https://github.com/goauthentik/authentik/pull/19746) - web: bump [@&#8203;playwright/test](https://github.com/playwright/test) from 1.57.0 to 1.58.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19753](https://github.com/goauthentik/authentik/pull/19753) - enterprise/audit: Expanded Diff by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19726](https://github.com/goauthentik/authentik/pull/19726) - root: make logged HTTP headers configurable by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19716](https://github.com/goauthentik/authentik/pull/19716) - web/sfe: downgrade bootstrap, add access denied test by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19763](https://github.com/goauthentik/authentik/pull/19763) - internal: fix certificate not refetched if fingerprint changes by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19761](https://github.com/goauthentik/authentik/pull/19761) - root: update client-go generation by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19762](https://github.com/goauthentik/authentik/pull/19762) - website/integrations: Add Elastic Cloud by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19719](https://github.com/goauthentik/authentik/pull/19719) - website/docs: fix Transifex link in translation guide by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19735](https://github.com/goauthentik/authentik/pull/19735) - web/table: align row action icons and tooltip color by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19736](https://github.com/goauthentik/authentik/pull/19736) - web/a11y: CAPTCHA Stage Form by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19670](https://github.com/goauthentik/authentik/pull/19670) - web/elements: stabilize dual-select status height by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19734](https://github.com/goauthentik/authentik/pull/19734) - web: Enforce `challenge` nullish types. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19768](https://github.com/goauthentik/authentik/pull/19768) - website/docs: endpoint devices: fix local device login by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19698](https://github.com/goauthentik/authentik/pull/19698) - ci: bump actions/attest-build-provenance from 3.1.0 to 3.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19783](https://github.com/goauthentik/authentik/pull/19783) - core: bump gssapi from 1.10.1 to 1.11.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19781](https://github.com/goauthentik/authentik/pull/19781) - core: bump openapitools/openapi-diff from 2.1.6 to 2.1.7 in /scripts/api by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19779](https://github.com/goauthentik/authentik/pull/19779) - core: bump github.com/pires/go-proxyproto from 0.9.1 to 0.9.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19778](https://github.com/goauthentik/authentik/pull/19778) - admin/files: add centralized theme variable support for file URLs by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19657](https://github.com/goauthentik/authentik/pull/19657) - providers/oauth2: Support login\_hint by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19498](https://github.com/goauthentik/authentik/pull/19498) - web: bump country-flag-icons from 1.6.8 to 1.6.9 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19785](https://github.com/goauthentik/authentik/pull/19785) - web: bump the react group across 1 directory with 2 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19784](https://github.com/goauthentik/authentik/pull/19784) - web: bump the eslint group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19782](https://github.com/goauthentik/authentik/pull/19782) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19717](https://github.com/goauthentik/authentik/pull/19717) - web: Vendor SFE Bootstrap by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19766](https://github.com/goauthentik/authentik/pull/19766) - core: bump djangoql from 0.18.2 to 0.19.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19780](https://github.com/goauthentik/authentik/pull/19780) - web: bump API Client version by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19760](https://github.com/goauthentik/authentik/pull/19760) - revert: website/integrations: wazuh: Change exchange key generation to 64 bytes by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19759](https://github.com/goauthentik/authentik/pull/19759) - sources/saml: Add testcases for PR [#&#8203;19593](https://github.com/goauthentik/helm/issues/19593) by [@&#8203;ikob](https://github.com/ikob) in [goauthentik/authentik#19647](https://github.com/goauthentik/authentik/pull/19647) - website/docs: fix authenticator sms docs by [@&#8203;macmoritz](https://github.com/macmoritz) in [goauthentik/authentik#19797](https://github.com/goauthentik/authentik/pull/19797) - web: bump globals from 17.1.0 to 17.2.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19811](https://github.com/goauthentik/authentik/pull/19811) - web: bump type-fest from 5.4.1 to 5.4.2 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19810](https://github.com/goauthentik/authentik/pull/19810) - web: bump [@&#8203;types/react](https://github.com/types/react) from 19.2.9 to 19.2.10 in /web in the react group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19809](https://github.com/goauthentik/authentik/pull/19809) - web: bump [@&#8203;goauthentik/api](https://github.com/goauthentik/api) from 2025.12.0-rc1-1765566302 to 2026.2.0-rc1-1769523342 in /web in the goauthentik group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19808](https://github.com/goauthentik/authentik/pull/19808) - web: bump the swc group across 1 directory with 11 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19807](https://github.com/goauthentik/authentik/pull/19807) - web: bump the rollup group across 1 directory with 4 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19806](https://github.com/goauthentik/authentik/pull/19806) - core: bump library/node from 25.4.0-trixie to 25.5.0-trixie in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19805](https://github.com/goauthentik/authentik/pull/19805) - web: bump the storybook group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19804](https://github.com/goauthentik/authentik/pull/19804) - core: bump cachetools from 6.2.5 to 6.2.6 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19803](https://github.com/goauthentik/authentik/pull/19803) - core: bump cryptography from 46.0.3 to 46.0.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19801](https://github.com/goauthentik/authentik/pull/19801) - core: bump github.com/getsentry/sentry-go from 0.41.0 to 0.42.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19800](https://github.com/goauthentik/authentik/pull/19800) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19799](https://github.com/goauthentik/authentik/pull/19799) - web: bump [@&#8203;sentry/browser](https://github.com/sentry/browser) from 10.36.0 to 10.37.0 in /web in the sentry group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19802](https://github.com/goauthentik/authentik/pull/19802) - web: bump [@&#8203;floating-ui/dom](https://github.com/floating-ui/dom) from 1.7.4 to 1.7.5 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19812](https://github.com/goauthentik/authentik/pull/19812) - enterprise/providers: WS-Federation by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19583](https://github.com/goauthentik/authentik/pull/19583) - web: Session UI Config Lifecycle by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19788](https://github.com/goauthentik/authentik/pull/19788) - web/admin: fix toggle-group for bindings now showing up by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19820](https://github.com/goauthentik/authentik/pull/19820) - core: add CC and BCC support to ak\_send\_email and TemplateEmailMessage by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19633](https://github.com/goauthentik/authentik/pull/19633) - web: display custom attributes on admin view pages by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19720](https://github.com/goauthentik/authentik/pull/19720) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.0.10 to 25.1.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19838](https://github.com/goauthentik/authentik/pull/19838) - web: bump chromedriver from 144.0.0 to 144.0.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19837](https://github.com/goauthentik/authentik/pull/19837) - web: bump country-flag-icons from 1.6.9 to 1.6.12 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19836](https://github.com/goauthentik/authentik/pull/19836) - web: bump [@&#8203;goauthentik/api](https://github.com/goauthentik/api) from 2026.2.0-rc1-1769523342 to 2026.2.0-rc1-1769650973 in /web in the goauthentik group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19834](https://github.com/goauthentik/authentik/pull/19834) - core: bump sentry-sdk from 2.50.0 to 2.51.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19833](https://github.com/goauthentik/authentik/pull/19833) - ci: bump docker/login-action from 3.6.0 to 3.7.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19835](https://github.com/goauthentik/authentik/pull/19835) - core: bump pyrad from 2.4 to 2.5.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19831](https://github.com/goauthentik/authentik/pull/19831) - core: bump goauthentik/selenium from 144.0-ak-0.35.8 to 144.0-ak-0.35.9 in /tests/e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19832](https://github.com/goauthentik/authentik/pull/19832) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19824](https://github.com/goauthentik/authentik/pull/19824) - core: bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19829](https://github.com/goauthentik/authentik/pull/19829) - lifecycle/aws: bump aws-cdk from 2.1103.0 to 2.1104.0 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19830](https://github.com/goauthentik/authentik/pull/19830) - providers/scim: import SCIM groups by [@&#8203;bitpavel-l25](https://github.com/bitpavel-l25) in [goauthentik/authentik#19846](https://github.com/goauthentik/authentik/pull/19846) - providers/scim: modify user- and group syncing behavior by [@&#8203;ImmanuelVonNeumann](https://github.com/ImmanuelVonNeumann) in [goauthentik/authentik#13947](https://github.com/goauthentik/authentik/pull/13947) - providers/scim: fix email validation mismatch by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19848](https://github.com/goauthentik/authentik/pull/19848) - sources/oauth: Fix an issue where wechat may crash duing login. by [@&#8203;Anduin2017](https://github.com/Anduin2017) in [goauthentik/authentik#18973](https://github.com/goauthentik/authentik/pull/18973) - website/docs: add more info to entra id scim doc by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19849](https://github.com/goauthentik/authentik/pull/19849) - web: bump API Client version by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19851](https://github.com/goauthentik/authentik/pull/19851) - rbac: clean up roles and permissions by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#19588](https://github.com/goauthentik/authentik/pull/19588) - web: bump API Client version by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19857](https://github.com/goauthentik/authentik/pull/19857) - website/docs: add tip for recovering from accidental main branch work by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19865](https://github.com/goauthentik/authentik/pull/19865) - web: Fix development theme overrides by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19826](https://github.com/goauthentik/authentik/pull/19826) - web: Lit Development Mode, performance fixes. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19825](https://github.com/goauthentik/authentik/pull/19825) - root: assign cherry-pick PRs to original author by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19858](https://github.com/goauthentik/authentik/pull/19858) - web: Captcha Refinements, Part 2 by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19757](https://github.com/goauthentik/authentik/pull/19757) - web: bump chromedriver from 144.0.1 to 145.0.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19874](https://github.com/goauthentik/authentik/pull/19874) - ci: bump actions/cache from 5.0.2 to 5.0.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19873](https://github.com/goauthentik/authentik/pull/19873) - core: bump debugpy from 1.8.19 to 1.8.20 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19872](https://github.com/goauthentik/authentik/pull/19872) - web: bump [@&#8203;sentry/browser](https://github.com/sentry/browser) from 10.37.0 to 10.38.0 in /web in the sentry group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19871](https://github.com/goauthentik/authentik/pull/19871) - common: introduce common by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19852](https://github.com/goauthentik/authentik/pull/19852) - website/docs: endpoint devices: add version command by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19767](https://github.com/goauthentik/authentik/pull/19767) - website/integrations: immich: add signing algorithm by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19187](https://github.com/goauthentik/authentik/pull/19187) - website: QL Search keyboard interactions docs, examples. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#16259](https://github.com/goauthentik/authentik/pull/16259) - website/docs: Remove stale 2024 version directives by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19888](https://github.com/goauthentik/authentik/pull/19888) - web: fix Brand CSS not applied to nested Shadow DOM components by [@&#8203;Mmx233](https://github.com/Mmx233) in [goauthentik/authentik#19892](https://github.com/goauthentik/authentik/pull/19892) - stages/authenticator\_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19897](https://github.com/goauthentik/authentik/pull/19897) - core: bump protobuf from 6.33.4 to 6.33.5 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19886](https://github.com/goauthentik/authentik/pull/19886) - ci: fix cherry-pick assignee by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19905](https://github.com/goauthentik/authentik/pull/19905) - website/docs: Color Palette Test Page by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19879](https://github.com/goauthentik/authentik/pull/19879) - ci: bump astral-sh/setup-uv from 7.2.0 to 7.2.1 in /.github/actions/setup by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19929](https://github.com/goauthentik/authentik/pull/19929) - web: bump globals from 17.2.0 to 17.3.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19928](https://github.com/goauthentik/authentik/pull/19928) - web: bump type-fest from 5.4.2 to 5.4.3 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19927](https://github.com/goauthentik/authentik/pull/19927) - web: bump playwright from 1.58.0 to 1.58.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19925](https://github.com/goauthentik/authentik/pull/19925) - core: bump goauthentik/selenium from 144.0-ak-0.35.9 to 144.0-ak-0.40.0 in /tests/e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19917](https://github.com/goauthentik/authentik/pull/19917) - core: bump axllent/mailpit from v1.28.4 to v1.29.0 in /tests/e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19918](https://github.com/goauthentik/authentik/pull/19918) - web: bump the storybook group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19921](https://github.com/goauthentik/authentik/pull/19921) - web: bump [@&#8203;formatjs/intl-listformat](https://github.com/formatjs/intl-listformat) from 8.2.0 to 8.2.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19924](https://github.com/goauthentik/authentik/pull/19924) - core: bump cachetools from 6.2.6 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19919](https://github.com/goauthentik/authentik/pull/19919) - core: bump pyjwt from 2.10.1 to 2.11.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19920](https://github.com/goauthentik/authentik/pull/19920) - core: bump gunicorn from 24.1.1 to 25.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19916](https://github.com/goauthentik/authentik/pull/19916) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19868](https://github.com/goauthentik/authentik/pull/19868) - providers/scim: add configuration warning for migration by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19859](https://github.com/goauthentik/authentik/pull/19859) - ci: always generate API clients by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19906](https://github.com/goauthentik/authentik/pull/19906) - web: bump the rollup group across 1 directory with 4 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19922](https://github.com/goauthentik/authentik/pull/19922) - web: bump [@&#8203;playwright/test](https://github.com/playwright/test) from 1.58.0 to 1.58.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19926](https://github.com/goauthentik/authentik/pull/19926) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.1.0 to 25.2.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19923](https://github.com/goauthentik/authentik/pull/19923) - website/docs: Update location of media storage and outdated references by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19885](https://github.com/goauthentik/authentik/pull/19885) - lifecycle/aws: add /data volume by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19936](https://github.com/goauthentik/authentik/pull/19936) - lifecycle/ak: make sure /data has the correct permissions by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19935](https://github.com/goauthentik/authentik/pull/19935) - core: fix non-expiring service accounts and app passwords by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19913](https://github.com/goauthentik/authentik/pull/19913) - lib: Add ssh/sftp schemas in to DomainlessFormattedURLValidator by [@&#8203;PopovSergeyS](https://github.com/PopovSergeyS) in [goauthentik/authentik#19881](https://github.com/goauthentik/authentik/pull/19881) - ci: fix test\_docker.sh by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19944](https://github.com/goauthentik/authentik/pull/19944) - web/admin: fix default binding order by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19943](https://github.com/goauthentik/authentik/pull/19943) - website/docs: Add `NODE_ENV: production` to workflow. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19889](https://github.com/goauthentik/authentik/pull/19889) - website/docs: Add changes in 2025.12.2 and 2025.12.3 to the release notes by [@&#8203;melizeche](https://github.com/melizeche) in [goauthentik/authentik#19949](https://github.com/goauthentik/authentik/pull/19949) - web: add "Copy Secret" button to TOTP configuration stage by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19863](https://github.com/goauthentik/authentik/pull/19863) - root: fix NPM\_VERSION in Makefile by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#19844](https://github.com/goauthentik/authentik/pull/19844) - web: refactor TOTP clipboard handlers and secret parsing by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#19953](https://github.com/goauthentik/authentik/pull/19953) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19954](https://github.com/goauthentik/authentik/pull/19954) - web: bump knip from 5.82.1 to 5.83.0 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19962](https://github.com/goauthentik/authentik/pull/19962) - web/admin: Merge branch -- Stage elements, linter warnings by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19948](https://github.com/goauthentik/authentik/pull/19948) - crypto: Add [`ED25519`](https://github.com/goauthentik/helm/commit/ED25519) and ED448 support to the certificate builder by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19465](https://github.com/goauthentik/authentik/pull/19465) - lifecycle: bump shm size by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19369](https://github.com/goauthentik/authentik/pull/19369) - core: bump goauthentik.io/api/v3 to 3.2026.2.0-rc1-1770129730 by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#19973](https://github.com/goauthentik/authentik/pull/19973) - core: bump gunicorn from 25.0.0 to 25.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19959](https://github.com/goauthentik/authentik/pull/19959) - core: bump library/nginx from `c881927` to `7fe5dda` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19961](https://github.com/goauthentik/authentik/pull/19961) - web: bump the storybook group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19960](https://github.com/goauthentik/authentik/pull/19960) - core: bump aws-cdk-lib from 2.236.0 to 2.237.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19958](https://github.com/goauthentik/authentik/pull/19958) - core: ask for token duration on recovery link/email by admin by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#19875](https://github.com/goauthentik/authentik/pull/19875) - recovery: consume token in transaction by [@&#8203;kolega-ai-dev](https://github.com/kolega-ai-dev) in [goauthentik/authentik#19967](https://github.com/goauthentik/authentik/pull/19967) - providers/oauth2: use compare\_digest for client\_secret comparison by [@&#8203;kolega-ai-dev](https://github.com/kolega-ai-dev) in [goauthentik/authentik#19979](https://github.com/goauthentik/authentik/pull/19979) - web/flows: update flow background by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19974](https://github.com/goauthentik/authentik/pull/19974) - root: revert enterprise loading behaviour by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19485](https://github.com/goauthentik/authentik/pull/19485) - ci: allow setting assignee to fail by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19985](https://github.com/goauthentik/authentik/pull/19985) - core: bump django from 5.2.10 to 5.2.11 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19988](https://github.com/goauthentik/authentik/pull/19988) - stages/authenticator\_webauthn: fix double JSON encoding of webauthn options by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19952](https://github.com/goauthentik/authentik/pull/19952) - web: bump [@&#8203;isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19989](https://github.com/goauthentik/authentik/pull/19989) - core, web: bump [@&#8203;isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in /packages/prettier-config by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#19990](https://github.com/goauthentik/authentik/pull/19990) - providers/saml: auto pull signature algorithm options by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#17614](https://github.com/goauthentik/authentik/pull/17614) - outposts: fix docker\_tls created files permission by [@&#8203;kolega-ai-dev](https://github.com/kolega-ai-dev) in [goauthentik/authentik#19978](https://github.com/goauthentik/authentik/pull/19978) - web: bump [@&#8203;goauthentik/api](https://github.com/goauthentik/api) from 2026.2.0-rc1-1769710374 to 2026.2.0-rc1-1770134072 in /web in the goauthentik group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20009](https://github.com/goauthentik/authentik/pull/20009) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19998](https://github.com/goauthentik/authentik/pull/19998) - website/docs: fix typos by [@&#8203;dominic-r](https://github.com/dominic-r) in [goauthentik/authentik#20000](https://github.com/goauthentik/authentik/pull/20000) - ci: bump calibreapp/image-actions from [`420075c`](https://github.com/goauthentik/helm/commit/420075c115b26f8785e293c5bd5bef0911c506e5) to [`d9c8ee5`](https://github.com/goauthentik/helm/commit/d9c8ee5c3dc52ae4622c82ead88d658f4b16b65f) by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20008](https://github.com/goauthentik/authentik/pull/20008) - core: bump library/nginx from `7fe5dda` to `9dd2888` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20006](https://github.com/goauthentik/authentik/pull/20006) - core: bump coverage\[toml] from 7.13.2 to 7.13.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20002](https://github.com/goauthentik/authentik/pull/20002) - core: bump aws-cdk-lib from 2.237.0 to 2.237.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20003](https://github.com/goauthentik/authentik/pull/20003) - core: bump google-api-python-client from 2.188.0 to 2.189.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20004](https://github.com/goauthentik/authentik/pull/20004) - core: bump djangorestframework-stubs\[compatible-mypy] from 3.16.7 to 3.16.8 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20005](https://github.com/goauthentik/authentik/pull/20005) - core: bump library/node from 25.5.0-trixie to 25.6.0-trixie in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20007](https://github.com/goauthentik/authentik/pull/20007) - core: bump goauthentik.io/api/v3 to 3.2026.2.0-rc1-1770134534 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#19980](https://github.com/goauthentik/authentik/pull/19980) - core: bump ruff from 0.14.14 to 0.15.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20001](https://github.com/goauthentik/authentik/pull/20001) - brands: fix Domain Matching in Brand Resolution by [@&#8203;kolega-ai-dev](https://github.com/kolega-ai-dev) in [goauthentik/authentik#19976](https://github.com/goauthentik/authentik/pull/19976) - website/docs: add a new page to help people get started after install is complete by [@&#8203;tanberry](https://github.com/tanberry) in [goauthentik/authentik#19217](https://github.com/goauthentik/authentik/pull/19217) - website/docs: endpoint devices: more updates by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#19971](https://github.com/goauthentik/authentik/pull/19971) - flows: add option for flow layout with frame background by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19527](https://github.com/goauthentik/authentik/pull/19527) - web: bump API Client version by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20017](https://github.com/goauthentik/authentik/pull/20017) - website/docs: dont throw exception for outdated version badges by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#20024](https://github.com/goauthentik/authentik/pull/20024) - website/docs: endpoint devices: specify name and slug by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#20016](https://github.com/goauthentik/authentik/pull/20016) - web/flows: revisit agent stage fallback delay by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#20028](https://github.com/goauthentik/authentik/pull/20028) - ci: bump aws-actions/configure-aws-credentials from 5.1.1 to 6.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20037](https://github.com/goauthentik/authentik/pull/20037) - lib: add helper for creating events in migration by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#20044](https://github.com/goauthentik/authentik/pull/20044) - web: bump [@&#8203;types/react](https://github.com/types/react) from 19.2.10 to 19.2.11 in /web in the react group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20038](https://github.com/goauthentik/authentik/pull/20038) - core: bump library/nginx from `9dd2888` to `b17697e` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20036](https://github.com/goauthentik/authentik/pull/20036) - web: bump the storybook group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20035](https://github.com/goauthentik/authentik/pull/20035) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20032](https://github.com/goauthentik/authentik/pull/20032) - website/docs: endpoint devices: fix non debian wording by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#20046](https://github.com/goauthentik/authentik/pull/20046) - core: bump sentry-sdk from 2.51.0 to 2.52.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20034](https://github.com/goauthentik/authentik/pull/20034) - lib: fix migration event by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#20047](https://github.com/goauthentik/authentik/pull/20047) - core: bump goauthentik.io/api/v3 to 3.2026.2.0-rc1-1770223759 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20018](https://github.com/goauthentik/authentik/pull/20018) - core: bump django-tenants from 3.9.0 to 3.10.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20033](https://github.com/goauthentik/authentik/pull/20033) - website/docs: endpoint devices: update device authentication location by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#20049](https://github.com/goauthentik/authentik/pull/20049) - website/docs: capturing outpost logs by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#20045](https://github.com/goauthentik/authentik/pull/20045) - web/admin: fix rendering for configuration\_warning event by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#20050](https://github.com/goauthentik/authentik/pull/20050) - docs: add instructions for configuring rp-initiated single logout by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#20040](https://github.com/goauthentik/authentik/pull/20040) - outpost/proxyv2: revalidate auth if session fails to load by [@&#8203;chetan](https://github.com/chetan) in [goauthentik/authentik#18063](https://github.com/goauthentik/authentik/pull/18063) - website/docs: automated install: mention no file:// vars by [@&#8203;tcrasset](https://github.com/tcrasset) in [goauthentik/authentik#20043](https://github.com/goauthentik/authentik/pull/20043) - providers/saml: fix signing order for encrypted saml responses by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19620](https://github.com/goauthentik/authentik/pull/19620) - providers/saml: update metadata parser for single logout and encryption certificate by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#20031](https://github.com/goauthentik/authentik/pull/20031) - blueprints: don't exclude default values by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#20057](https://github.com/goauthentik/authentik/pull/20057) - sources/saml: update handling statusmessage by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19739](https://github.com/goauthentik/authentik/pull/19739) - website/docs: remove redundant RC notice by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#20052](https://github.com/goauthentik/authentik/pull/20052) - sources/saml: prevent authnrequest signature being inside body on redirect by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19898](https://github.com/goauthentik/authentik/pull/19898) - enterprise/providers: WSFed configurable realm, default wreply by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#19996](https://github.com/goauthentik/authentik/pull/19996) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20069](https://github.com/goauthentik/authentik/pull/20069) - core, web: bump webpack from 5.103.0 to 5.105.0 in /packages/docusaurus-config by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20068](https://github.com/goauthentik/authentik/pull/20068) - core: bump goauthentik.io/api/v3 to 3.2026.2.0-rc1-1770333724 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20067](https://github.com/goauthentik/authentik/pull/20067) - core: bump library/nginx from `b17697e` to `341bf0f` in /website by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20077](https://github.com/goauthentik/authentik/pull/20077) - core: bump pyrad from 2.5.2 to 2.5.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20073](https://github.com/goauthentik/authentik/pull/20073) - core: bump msgraph-sdk from 1.53.0 to 1.54.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20072](https://github.com/goauthentik/authentik/pull/20072) - core: bump twilio from 9.10.0 to 9.10.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20071](https://github.com/goauthentik/authentik/pull/20071) - lifecycle/aws: bump aws-cdk from 2.1104.0 to 2.1105.0 in /lifecycle/aws by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20070](https://github.com/goauthentik/authentik/pull/20070) - web: bump chromedriver from 145.0.0 to 145.0.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20082](https://github.com/goauthentik/authentik/pull/20082) - web: bump semver from 7.7.3 to 7.7.4 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20081](https://github.com/goauthentik/authentik/pull/20081) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.2.0 to 25.2.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20080](https://github.com/goauthentik/authentik/pull/20080) - web: bump [@&#8203;goauthentik/api](https://github.com/goauthentik/api) from 2026.2.0-rc1-1770223158 to 2026.2.0-rc1-1770333267 in /web in the goauthentik group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20078](https://github.com/goauthentik/authentik/pull/20078) - web: bump the bundler group across 1 directory with 4 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20076](https://github.com/goauthentik/authentik/pull/20076) - web: bump the storybook group across 1 directory with 5 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20075](https://github.com/goauthentik/authentik/pull/20075) - core: bump django-cte from 2.0.0 to 3.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20074](https://github.com/goauthentik/authentik/pull/20074) - web: bump [@&#8203;types/react](https://github.com/types/react) from 19.2.11 to 19.2.13 in /web in the react group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20079](https://github.com/goauthentik/authentik/pull/20079) - web: Allow unused spreaded properties to strict unsafe. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#20084](https://github.com/goauthentik/authentik/pull/20084) - web/i18n: Fix Japanese and Korean font overrides. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19994](https://github.com/goauthentik/authentik/pull/19994) - web: Fix locale selector in compatibility mode. by [@&#8203;GirlBossRush](https://github.com/GirlBossRush) in [goauthentik/authentik#19946](https://github.com/goauthentik/authentik/pull/19946) - sources/saml: truncate transient username longer than 150 chars by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19930](https://github.com/goauthentik/authentik/pull/19930) - providers/saml: move sp acs binding down in form by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#20039](https://github.com/goauthentik/authentik/pull/20039) - website/docs: generate CVE sidebar by [@&#8203;BeryJu](https://github.com/BeryJu) in [goauthentik/authentik#20098](https://github.com/goauthentik/authentik/pull/20098) - sources/oauth: Fix InvalidAudienceError in id\_token fallback by [@&#8203;ryanpesek](https://github.com/ryanpesek) in [goauthentik/authentik#20096](https://github.com/goauthentik/authentik/pull/20096) - web: bump type-fest from 5.4.3 to 5.4.4 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20113](https://github.com/goauthentik/authentik/pull/20113) - web: bump knip from 5.83.0 to 5.83.1 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20112](https://github.com/goauthentik/authentik/pull/20112) - web: bump [@&#8203;types/node](https://github.com/types/node) from 25.2.1 to 25.2.2 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20111](https://github.com/goauthentik/authentik/pull/20111) - web: bump [@&#8203;playwright/test](https://github.com/playwright/test) from 1.58.1 to 1.58.2 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20110](https://github.com/goauthentik/authentik/pull/20110) - web: bump playwright from 1.58.1 to 1.58.2 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20109](https://github.com/goauthentik/authentik/pull/20109) - web: bump the swc group across 2 directories with 1 update by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20108](https://github.com/goauthentik/authentik/pull/20108) - ci: bump astral-sh/setup-uv from 7.2.1 to 7.3.0 in /.github/actions/setup by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20106](https://github.com/goauthentik/authentik/pull/20106) - ci: bump int128/docker-manifest-create-action from 2.13.0 to 2.14.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20105](https://github.com/goauthentik/authentik/pull/20105) - core: bump gunicorn from 25.0.1 to 25.0.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20104](https://github.com/goauthentik/authentik/pull/20104) - core: bump golang.org/x/oauth2 from 0.34.0 to 0.35.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20103](https://github.com/goauthentik/authentik/pull/20103) - core: bump github.com/pires/go-proxyproto from 0.9.2 to 0.10.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20102](https://github.com/goauthentik/authentik/pull/20102) - tasks/middlewares: call monitoring\_set upon metrics request by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#20117](https://github.com/goauthentik/authentik/pull/20117) - website/docs: endpoint devices: add fleet connector doc by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#20086](https://github.com/goauthentik/authentik/pull/20086) - tasks: add queued tasks metrics by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#20118](https://github.com/goauthentik/authentik/pull/20118) - web/admin: source forms not rendering by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#19887](https://github.com/goauthentik/authentik/pull/19887) - website/docs/social-logins: add shibboleth integration guide by [@&#8203;PeshekDotDev](https://github.com/PeshekDotDev) in [goauthentik/authentik#19909](https://github.com/goauthentik/authentik/pull/19909) - web/sfe: bug: polyfill needed to supply Object.assign() to IE11. by [@&#8203;kensternberg-authentik](https://github.com/kensternberg-authentik) in [goauthentik/authentik#20126](https://github.com/goauthentik/authentik/pull/20126) - web: bump axios from 1.13.2 to 1.13.5 in /web by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20137](https://github.com/goauthentik/authentik/pull/20137) - ci: bump tj-actions/changed-files from 47.0.1 to 47.0.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20132](https://github.com/goauthentik/authentik/pull/20132) - core: bump coverage\[toml] from 7.13.3 to 7.13.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20129](https://github.com/goauthentik/authentik/pull/20129) - core: bump aws-cdk-lib from 2.237.1 to 2.238.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [goauthentik/authentik#20128](https://github.com/goauthentik/authentik/pull/20128) - website/integrations: add AFFiNE by [@&#8203;akaSorin](https://github.com/akaSorin) in [goauthentik/authentik#20143](https://github.com/goauthentik/authentik/pull/20143) - website/docs: endpoint/devices: add authentik version tags by [@&#8203;dewi-tik](https://github.com/dewi-tik) in [goauthentik/authentik#20144](https://github.com/goauthentik/authentik/pull/20144) - enterprise/lifecycle: implement Object Lifecycle Management by [@&#8203;atereshkin](https://github.com/atereshkin) in [goauthentik/authentik#20015](https://github.com/goauthentik/authentik/pull/20015) - web: bump API Client version by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20149](https://github.com/goauthentik/authentik/pull/20149) - website/docs: release notes for `2026.2.0` by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#20013](https://github.com/goauthentik/authentik/pull/20013) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20152](https://github.com/goauthentik/authentik/pull/20152) - stages/authenticator\_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20155](https://github.com/goauthentik/authentik/pull/20155) - translate: Updates for project authentik and language pt\_BR by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20170](https://github.com/goauthentik/authentik/pull/20170) - translate: Updates for project authentik and language fi\_FI by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20158](https://github.com/goauthentik/authentik/pull/20158) - translate: Updates for project authentik and language fr\_FR by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20163](https://github.com/goauthentik/authentik/pull/20163) - translate: Updates for project authentik and language es\_ES by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20159](https://github.com/goauthentik/authentik/pull/20159) - translate: Updates for project authentik and language de\_DE by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20157](https://github.com/goauthentik/authentik/pull/20157) - translate: Updates for project authentik and language ja\_JP by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20160](https://github.com/goauthentik/authentik/pull/20160) - translate: Updates for project authentik and language ko\_KR by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20162](https://github.com/goauthentik/authentik/pull/20162) - translate: Updates for project authentik and language ru\_RU by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20161](https://github.com/goauthentik/authentik/pull/20161) - translate: Updates for project authentik and language zh-Hans by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20164](https://github.com/goauthentik/authentik/pull/20164) - translate: Updates for project authentik and language tr\_TR by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20167](https://github.com/goauthentik/authentik/pull/20167) - translate: Updates for project authentik and language cs\_CZ by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20166](https://github.com/goauthentik/authentik/pull/20166) - translate: Updates for project authentik and language pt\_PT by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20169](https://github.com/goauthentik/authentik/pull/20169) - translate: Updates for project authentik and language it\_IT by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20168](https://github.com/goauthentik/authentik/pull/20168) - translate: Updates for project authentik and language pl\_PL by [@&#8203;transifex-integration](https://github.com/transifex-integration)\[bot] in [goauthentik/authentik#20165](https://github.com/goauthentik/authentik/pull/20165) - core: bump goauthentik.io/api/v3 to 3.2026.2.0-rc1-1770745754 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20150](https://github.com/goauthentik/authentik/pull/20150) - core, web: update translations by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20172](https://github.com/goauthentik/authentik/pull/20172) - core: fix `test_docker.sh` (cherry-pick [#&#8203;20179](https://github.com/goauthentik/helm/issues/20179) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20192](https://github.com/goauthentik/authentik/pull/20192) - core: bump cryptography from 46.0.4 to 46.0.5 (cherry-pick [#&#8203;20171](https://github.com/goauthentik/helm/issues/20171) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20193](https://github.com/goauthentik/authentik/pull/20193) - api: fix `test_build_schema` (cherry-pick [#&#8203;20196](https://github.com/goauthentik/helm/issues/20196) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20199](https://github.com/goauthentik/authentik/pull/20199) - website/docs: rac: fixes the property mapping formatting (cherry-pick [#&#8203;20200](https://github.com/goauthentik/helm/issues/20200) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20203](https://github.com/goauthentik/authentik/pull/20203) - website/docs: add email verification scope doc (cherry-pick [#&#8203;20141](https://github.com/goauthentik/helm/issues/20141) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20206](https://github.com/goauthentik/authentik/pull/20206) - website/docs: ssf: update SSF documentation (cherry-pick [#&#8203;20195](https://github.com/goauthentik/helm/issues/20195) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20211](https://github.com/goauthentik/authentik/pull/20211) - ci: fix release testing (cherry-pick [#&#8203;20207](https://github.com/goauthentik/helm/issues/20207) to version-2026.2) by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#20224](https://github.com/goauthentik/authentik/pull/20224) - security: CVE-2026-25922 (2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20238](https://github.com/goauthentik/authentik/pull/20238) - security: CVE-2026-25748 (2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20237](https://github.com/goauthentik/authentik/pull/20237) - security: CVE-2026-25227 (2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20236](https://github.com/goauthentik/authentik/pull/20236) - web: updated package-lock.json to include missing tree-sitter references (cherry-pick [#&#8203;20244](https://github.com/goauthentik/helm/issues/20244) to version-2026.2) by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#20246](https://github.com/goauthentik/authentik/pull/20246) - website/docs: 2025.10.4 release notes (cherry-pick [#&#8203;20242](https://github.com/goauthentik/helm/issues/20242) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20251](https://github.com/goauthentik/authentik/pull/20251) - website/docs: 2025.12.4 release notes (cherry-pick [#&#8203;20226](https://github.com/goauthentik/helm/issues/20226) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20253](https://github.com/goauthentik/authentik/pull/20253) - website/docs: 2025.8.6 release notes (cherry-pick [#&#8203;20243](https://github.com/goauthentik/helm/issues/20243) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20257](https://github.com/goauthentik/authentik/pull/20257) - website/docs: draft of new WS-Fed provider docs (cherry-pick [#&#8203;20091](https://github.com/goauthentik/helm/issues/20091) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20262](https://github.com/goauthentik/authentik/pull/20262) - ci: fix binary outpost build on release (cherry-pick [#&#8203;20248](https://github.com/goauthentik/helm/issues/20248) to version-2026.2) by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#20279](https://github.com/goauthentik/authentik/pull/20279) - enterprise/lifecycle: fix multiple reviews showing up in "Reviews" when the user is a member of multiple reviewer groups (cherry-pick [#&#8203;20266](https://github.com/goauthentik/helm/issues/20266) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20278](https://github.com/goauthentik/authentik/pull/20278) - web: add pretty names for lifecycle review events in event logs (cherry-pick [#&#8203;20264](https://github.com/goauthentik/helm/issues/20264) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20268](https://github.com/goauthentik/authentik/pull/20268) - website/docs: Custom CSS (cherry-pick [#&#8203;19991](https://github.com/goauthentik/helm/issues/19991) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20287](https://github.com/goauthentik/authentik/pull/20287) - stage/identification: recovery: make wording more generic (cherry-pick [#&#8203;20209](https://github.com/goauthentik/helm/issues/20209) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20293](https://github.com/goauthentik/authentik/pull/20293) - web: fix italic formatting in lifecycle rule help text (cherry-pick [#&#8203;20263](https://github.com/goauthentik/helm/issues/20263) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20267](https://github.com/goauthentik/authentik/pull/20267) - website/docs: add affine to release notes (cherry-pick [#&#8203;20299](https://github.com/goauthentik/helm/issues/20299) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20308](https://github.com/goauthentik/authentik/pull/20308) - root: do not rely on npm cli for version bump (cherry-pick [#&#8203;20276](https://github.com/goauthentik/helm/issues/20276) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20321](https://github.com/goauthentik/authentik/pull/20321) - website/docs: add okta source doc (cherry-pick [#&#8203;20296](https://github.com/goauthentik/helm/issues/20296) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20335](https://github.com/goauthentik/authentik/pull/20335) - website/docs: rac: update rac provider docs (cherry-pick [#&#8203;20225](https://github.com/goauthentik/helm/issues/20225) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20337](https://github.com/goauthentik/authentik/pull/20337) - website/docs, integrations: fix language (cherry-pick [#&#8203;20338](https://github.com/goauthentik/helm/issues/20338) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20347](https://github.com/goauthentik/authentik/pull/20347) - ci: fix setup altering package-lock (cherry-pick [#&#8203;20348](https://github.com/goauthentik/helm/issues/20348) to version-2026.2) by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#20356](https://github.com/goauthentik/authentik/pull/20356) - web: revert `package-lock.json` by tag workflow by [@&#8203;gergosimonyi](https://github.com/gergosimonyi) in [goauthentik/authentik#20349](https://github.com/goauthentik/authentik/pull/20349) - rbac: fix object permission request (cherry-pick [#&#8203;20304](https://github.com/goauthentik/helm/issues/20304) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20366](https://github.com/goauthentik/authentik/pull/20366) - web: Flow Executor layout fixes (cherry-pick [#&#8203;20134](https://github.com/goauthentik/helm/issues/20134) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20331](https://github.com/goauthentik/authentik/pull/20331) - enterprise/providers/ws\_federation: fix incorrect metadata download URL (cherry-pick [#&#8203;20173](https://github.com/goauthentik/helm/issues/20173) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20365](https://github.com/goauthentik/authentik/pull/20365) - website/docs: Fix broken link to flow executor (cherry-pick [#&#8203;20364](https://github.com/goauthentik/helm/issues/20364) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20370](https://github.com/goauthentik/authentik/pull/20370) - core: add cause to `ak_groups` deprecation event and logs (cherry-pick [#&#8203;20361](https://github.com/goauthentik/helm/issues/20361) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20368](https://github.com/goauthentik/authentik/pull/20368) - website/docs: correct reference to overriden S3 variable (cherry-pick [#&#8203;20156](https://github.com/goauthentik/helm/issues/20156) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20378](https://github.com/goauthentik/authentik/pull/20378) - web/admin: bug: stage update forms not rendering, several modal form buttons missing (cherry-pick [#&#8203;20373](https://github.com/goauthentik/helm/issues/20373) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20394](https://github.com/goauthentik/authentik/pull/20394) - enterprise/providers/microsoft\_entra: fix dangling comma (cherry-pick [#&#8203;20391](https://github.com/goauthentik/helm/issues/20391) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20395](https://github.com/goauthentik/authentik/pull/20395) - ci: pull latest changes before tagging new version (cherry-pick [#&#8203;20413](https://github.com/goauthentik/helm/issues/20413) to version-2026.2) by [@&#8203;rissson](https://github.com/rissson) in [goauthentik/authentik#20414](https://github.com/goauthentik/authentik/pull/20414) - enterprise/providers/microsoft\_entra: only check upn when set (cherry-pick [#&#8203;20441](https://github.com/goauthentik/helm/issues/20441) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20442](https://github.com/goauthentik/authentik/pull/20442) - stages/user\_login: log correct user when session binding is broken (cherry-pick [#&#8203;20094](https://github.com/goauthentik/helm/issues/20094) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20453](https://github.com/goauthentik/authentik/pull/20453) - enterprise: monkey patch pyjwt to accept mismatching key (cherry-pick [#&#8203;20402](https://github.com/goauthentik/helm/issues/20402) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20474](https://github.com/goauthentik/authentik/pull/20474) - enterprise/lifecycle: use datetime instead of date to track review cycles (cherry-pick [#&#8203;20283](https://github.com/goauthentik/helm/issues/20283) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20473](https://github.com/goauthentik/authentik/pull/20473) - policies: measure policy process from manager (cherry-pick [#&#8203;20477](https://github.com/goauthentik/helm/issues/20477) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20481](https://github.com/goauthentik/authentik/pull/20481) - providers/proxy: preserve URL-encoded path characters in redirect (cherry-pick [#&#8203;20476](https://github.com/goauthentik/helm/issues/20476) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20482](https://github.com/goauthentik/authentik/pull/20482) - web: Center footer links. (cherry-pick [#&#8203;20345](https://github.com/goauthentik/helm/issues/20345) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20425](https://github.com/goauthentik/authentik/pull/20425) - website/docs: add info about make install and recovery key (cherry-pick [#&#8203;20447](https://github.com/goauthentik/helm/issues/20447) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20486](https://github.com/goauthentik/authentik/pull/20486) - providers/oauth2: device code flow client id via auth header (cherry-pick [#&#8203;20457](https://github.com/goauthentik/helm/issues/20457) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20503](https://github.com/goauthentik/authentik/pull/20503) - enterprise: add `ES384` to enterprise license algorithms (cherry-pick [#&#8203;20507](https://github.com/goauthentik/helm/issues/20507) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20510](https://github.com/goauthentik/authentik/pull/20510) - web/admin/bugfix: Edit Stage not working. Invoking IdentificationStageForm not working (cherry-pick [#&#8203;20429](https://github.com/goauthentik/helm/issues/20429) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20512](https://github.com/goauthentik/authentik/pull/20512) - web: fix Edit Policy button on Flow view page (cherry-pick [#&#8203;20511](https://github.com/goauthentik/helm/issues/20511) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20515](https://github.com/goauthentik/authentik/pull/20515) - endpoints: fix infinite recursion in stage with unsupported connector (cherry-pick [#&#8203;20485](https://github.com/goauthentik/helm/issues/20485) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20514](https://github.com/goauthentik/authentik/pull/20514) - website/docs: fix linux setup docs (cherry-pick [#&#8203;20508](https://github.com/goauthentik/helm/issues/20508) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20517](https://github.com/goauthentik/authentik/pull/20517) - website/docs: fix GitHub social-login wording and capitalization (cherry-pick [#&#8203;20489](https://github.com/goauthentik/helm/issues/20489) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20505](https://github.com/goauthentik/authentik/pull/20505) - policies: fix PolicyEngineMode ALL with static binding optimization (cherry-pick [#&#8203;20430](https://github.com/goauthentik/helm/issues/20430) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20524](https://github.com/goauthentik/authentik/pull/20524) - providers/oauth2: deactivate locale after testing (cherry-pick [#&#8203;20518](https://github.com/goauthentik/helm/issues/20518) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20526](https://github.com/goauthentik/authentik/pull/20526) - providers/oauth2: add jti claim (cherry-pick [#&#8203;20484](https://github.com/goauthentik/helm/issues/20484) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20528](https://github.com/goauthentik/authentik/pull/20528) - website/docs: autogenerate release notes (cherry-pick [#&#8203;20527](https://github.com/goauthentik/helm/issues/20527) to version-2026.2) by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in [goauthentik/authentik#20531](https://github.com/goauthentik/authentik/pull/20531) #### New Contributors - [@&#8203;gabay](https://github.com/gabay) made their first contribution in [goauthentik/authentik#18812](https://github.com/goauthentik/authentik/pull/18812) - [@&#8203;joaocfernandes](https://github.com/joaocfernandes) made their first contribution in [goauthentik/authentik#18448](https://github.com/goauthentik/authentik/pull/18448) - [@&#8203;dminuoso](https://github.com/dminuoso) made their first contribution in [goauthentik/authentik#18727](https://github.com/goauthentik/authentik/pull/18727) - [@&#8203;optix2000](https://github.com/optix2000) made their first contribution in [goauthentik/authentik#18921](https://github.com/goauthentik/authentik/pull/18921) - [@&#8203;stijn220](https://github.com/stijn220) made their first contribution in [goauthentik/authentik#18979](https://github.com/goauthentik/authentik/pull/18979) - [@&#8203;hskrtich](https://github.com/hskrtich) made their first contribution in [goauthentik/authentik#18984](https://github.com/goauthentik/authentik/pull/18984) - [@&#8203;0skater0](https://github.com/0skater0) made their first contribution in [goauthentik/authentik#19013](https://github.com/goauthentik/authentik/pull/19013) - [@&#8203;borutmrak](https://github.com/borutmrak) made their first contribution in [goauthentik/authentik#15183](https://github.com/goauthentik/authentik/pull/15183) - [@&#8203;ocmateusz](https://github.com/ocmateusz) made their first contribution in [goauthentik/authentik#19073](https://github.com/goauthentik/authentik/pull/19073) - [@&#8203;austin-dudzik](https://github.com/austin-dudzik) made their first contribution in [goauthentik/authentik#19102](https://github.com/goauthentik/authentik/pull/19102) - [@&#8203;pippo73](https://github.com/pippo73) made their first contribution in [goauthentik/authentik#19127](https://github.com/goauthentik/authentik/pull/19127) - [@&#8203;williamkray](https://github.com/williamkray) made their first contribution in [goauthentik/authentik#19160](https://github.com/goauthentik/authentik/pull/19160) - [@&#8203;nmasnadithya](https://github.com/nmasnadithya) made their first contribution in [goauthentik/authentik#19170](https://github.com/goauthentik/authentik/pull/19170) - [@&#8203;busybox11](https://github.com/busybox11) made their first contribution in [goauthentik/authentik#19246](https://github.com/goauthentik/authentik/pull/19246) - [@&#8203;tcrasset](https://github.com/tcrasset) made their first contribution in [goauthentik/authentik#18936](https://github.com/goauthentik/authentik/pull/18936) - [@&#8203;sebastianw](https://github.com/sebastianw) made their first contribution in [goauthentik/authentik#19316](https://github.com/goauthentik/authentik/pull/19316) - [@&#8203;severin](https://github.com/severin) made their first contribution in [goauthentik/authentik#19368](https://github.com/goauthentik/authentik/pull/19368) - [@&#8203;Fredouye](https://github.com/Fredouye) made their first contribution in [goauthentik/authentik#19337](https://github.com/goauthentik/authentik/pull/19337) - [@&#8203;JMLX42](https://github.com/JMLX42) made their first contribution in [goauthentik/authentik#19226](https://github.com/goauthentik/authentik/pull/19226) - [@&#8203;DonQuinleone](https://github.com/DonQuinleone) made their first contribution in [goauthentik/authentik#19530](https://github.com/goauthentik/authentik/pull/19530) - [@&#8203;steilerDev](https://github.com/steilerDev) made their first contribution in [goauthentik/authentik#19584](https://github.com/goauthentik/authentik/pull/19584) - [@&#8203;Ma27](https://github.com/Ma27) made their first contribution in [goauthentik/authentik#19542](https://github.com/goauthentik/authentik/pull/19542) - [@&#8203;Gulianrdgd](https://github.com/Gulianrdgd) made their first contribution in [goauthentik/authentik#19379](https://github.com/goauthentik/authentik/pull/19379) - [@&#8203;jeroen1602](https://github.com/jeroen1602) made their first contribution in [goauthentik/authentik#19554](https://github.com/goauthentik/authentik/pull/19554) - [@&#8203;vitSkalicky](https://github.com/vitSkalicky) made their first contribution in [goauthentik/authentik#15686](https://github.com/goauthentik/authentik/pull/15686) - [@&#8203;ImmanuelVonNeumann](https://github.com/ImmanuelVonNeumann) made their first contribution in [goauthentik/authentik#13947](https://github.com/goauthentik/authentik/pull/13947) - [@&#8203;Mmx233](https://github.com/Mmx233) made their first contribution in [goauthentik/authentik#19892](https://github.com/goauthentik/authentik/pull/19892) - [@&#8203;PopovSergeyS](https://github.com/PopovSergeyS) made their first contribution in [goauthentik/authentik#19881](https://github.com/goauthentik/authentik/pull/19881) - [@&#8203;kolega-ai-dev](https://github.com/kolega-ai-dev) made their first contribution in [goauthentik/authentik#19967](https://github.com/goauthentik/authentik/pull/19967) - [@&#8203;chetan](https://github.com/chetan) made their first contribution in [goauthentik/authentik#18063](https://github.com/goauthentik/authentik/pull/18063) - [@&#8203;akaSorin](https://github.com/akaSorin) made their first contribution in [goauthentik/authentik#20143](https://github.com/goauthentik/authentik/pull/20143) **Full Changelog**: <https://github.com/goauthentik/authentik/compare/version/2025.12.4...version/2026.2.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNS43IiwidXBkYXRlZEluVmVyIjoiNDMuMjUuNyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=-->

renovate-bot added the chart label 2026-02-24 23:39:10 +00:00

renovate-bot added 1 commit 2026-02-24 23:39:12 +00:00

chore(deps): update helm release authentik to v2026 089afa0ab2

renovate-bot force-pushed renovate/authentik-2026.x from 089afa0ab2 to a8503ed744 2026-02-25 00:28:53 +00:00 Compare

renovate-bot force-pushed renovate/authentik-2026.x from a8503ed744 to e013c34cd2 2026-02-25 03:06:28 +00:00 Compare

alexlebens merged commit 826558ae44 into main 2026-02-25 04:46:27 +00:00

alexlebens referenced this issue from a commit 2026-02-25 04:46:28 +00:00

chore(deps): update helm release authentik to v2026 (#4227)

alexlebens deleted branch renovate/authentik-2026.x 2026-02-25 04:46:33 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

Renovate

Issue generated by Renovate.

automerge

This PR will be automerged by Renovate.

chart

Chart update generated by Renovate.

image

Image update generated by Renovate.

stale

PR or Issue that has not been updated recently.

No Label chart

Milestone

No items

No Milestone

Assignees

Clear assignees

gitea-bot renovate-bot alexlebens

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: alexlebens/infrastructure#4227