authentik-2026.2.2

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• chore(deps): update docker/login-action action to v4 by @renovate[bot] in #460
• ci: rename gh app private key variable by @rissson in #461
• chore(deps): update azure/setup-helm action to v5 by @renovate[bot] in #462
• charts/authentik: bump to 2026.2.2 by @authentik-automation[bot] in #463

Full Changelog: authentik-2026.2.1...authentik-2026.2.2

authentik-2026.2.1

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: Add weight to http route service by @flipper in #458
• chore(deps): update docker.io/library/postgres docker tag to v17.9 by @renovate[bot] in #452
• chore(deps): update prometheuscommunity/postgres-exporter docker tag to v0.19.1 by @renovate[bot] in #445
• charts/authentik: bump to 2026.2.1 by @authentik-automation[bot] in #459

New Contributors

• @flipper made their first contribution in #458

Full Changelog: authentik-2026.2.0...authentik-2026.2.1

---

Full release notes for authentik

See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202621

What's Changed

• website/docs: update supported versions (cherry-pick #20534 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20535
• website/docs: fix upgrade link in 2026.2 release notes (cherry-pick #20539 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20542
• website/docs: remove bad logs redirect (cherry-pick #20522 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20548
• website/docs: revamp enterprise section (cherry-pick #20379 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20546
• docs: fix typos and wording in docs and integrations (cherry-pick #20550 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20563
• ci: add reason change to versions repo bump (cherry-pick #20562 to version-2026.2) by @gergosimonyi in goauthentik/authentik#20569
• internal: make http timeouts configurable (cherry-pick #20472 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20567
• packages/django-dramatiq-postgres: use fork (cherry-pick #20606 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20608
• web/flows: fix source icons being always inverted (cherry-pick #20419 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20607
• crypto: fix kid legacy signal (cherry-pick #20627 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20628
• sources/ldap: add connection logging & downgrade message (cherry-pick #20519 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20636
• packages/django-dramatiq-postgres: fix worker startup on macos (cherry-pick #20637 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20641
• enterprise/wsfed: Fix metadata export and signing logic (cherry-pick #20643 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20649
• website/docs: entra id provider: add custom email domain info (cherry-pick #20444 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20660
• website/docs: kerberos: add note about caching (cherry-pick #20663 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20664
• core: fix get_provider returning base Provider instead of subclass (cherry-pick #19064 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20670
• packages/django-channels-postgres: eagerly delete messages (cherry-pick #20687 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20688
• outpost/proxyv2: prevent panic in handleSignOut (cherry-pick #20097 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20689
• website/docs: add 2025 pentest (cherry-pick #20626 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20691
• web: fix identification stage styling in compatibility mode (cherry-pick #20684 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20694
• providers/proxy: move search path to query instead of runtime parameter (cherry-pick #20662 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20693
• website/docs: add release notes for 2026.2.1 (cherry-pick #20659 to version-2026.2) by @authentik-automation[bot] in goauthentik/authentik#20695

Full Changelog: goauthentik/authentik@version/2026.2.0...version/2026.2.1

authentik-2026.2.0

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: add fields auto-added by Kubernetes to httproute by @cfi2017 in #453
• chore(deps): update helm/kind-action action to v1.14.0 by @renovate[bot] in #454
• charts/authentik: add note how to set version by @BeryJu in #456
• charts/authentik: bump to 2026.2.0 by @authentik-automation[bot] in #457

New Contributors

• @cfi2017 made their first contribution in #453

Full Changelog: authentik-2025.12.4...authentik-2026.2.0

---

Full release notes for authentik

See https://docs.goauthentik.io/docs/releases/2026.2

What's Changed

• root: bump version to 2026.2.0-rc1 by @authentik-automation[bot] in goauthentik/authentik#18794
• tests/e2e: retry detached shadow roots by @melizeche in goauthentik/authentik#18796
• website/release notes: Update v2025.12 release notes by @melizeche in goauthentik/authentik#18797
• web/admin: fix read-only provider selection for application form by @dominic-r in goauthentik/authentik#18768
• web: bump the react group across 1 directory with 2 updates by @dependabot[bot] in goauthentik/authentik#18775
• web: bump chromedriver from 143.0.0 to 143.0.1 in /web by @dependabot[bot] in goauthentik/authentik#18776
• web: bump the storybook group across 1 directory with 5 updates by @dependabot[bot] in goauthentik/authentik#18774
• internal: don't warn on empty outpost for embedded by @BeryJu in goauthentik/authentik#18786
• lifecycle/aws: bump aws-cdk from 2.1033.0 to 2.1034.0 in /lifecycle/aws by @dependabot[bot] in goauthentik/authentik#18771
• core, web: update translations by @authentik-automation[bot] in goauthentik/authentik#18804
• root: Add macOS support for sed in Makefile by @melizeche in goauthentik/authentik#18795
• ci: bump astral-sh/setup-uv from 7.1.5 to 7.1.6 in /.github/actions/setup by @dependabot[bot] in goauthentik/authentik#18826
• ci: bump actions/upload-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in goauthentik/authentik#18824
• core: bump goauthentik/fips-debian from 07f41ce to c10cd2c by @dependabot[bot] in goauthentik/authentik#18822
• ci: bump actions/download-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in goauthentik/authentik#18825
• ci: bump actions/cache from 5.0.0 to 5.0.1 by @dependabot[bot] in goauthentik/authentik#18823
• core: list applications fix by @ryanpesek in goauthentik/authentik#18798
• website/docs: add icon info to style guide by @dewi-tik in goauthentik/authentik#18832
• core: remove superuser check from Token list by @gergosimonyi in goauthentik/authentik#18684
• packages/django-dramatiq-postgres: broker: close django connections on consumer close by @rissson in goauthentik/authentik#18833
• core: bump goauthentik.io/api/v3 from 3.2025120.26 to 3.2026020.1 by @dependabot[bot] in goauthentik/authentik#18815
• admin/files: revert add check for /media existence (#18636) by @rissson in goauthentik/authentik#18829
• website/docs: add jellyseer integration doc by @gabay in goauthentik/authentik#18812
• crypto: Store details parsed from includeDetails in database instead by @PeshekDotDev in goauthentik/authentik#18013
• core: skip s3 tests if endpoint isn't available by @melizeche in goauthentik/authentik#18841
• admin/files: fix get_objects_for_user queryset argument in FileUsedByView by @dominic-r in goauthentik/authentik#18845
• core: bump goauthentik/fips-debian from c10cd2c to 2f19fc1 by @dependabot[bot] in goauthentik/authentik#18856
• ci: replace codecov test-results action by @BeryJu in goauthentik/authentik#18862
• core: add skip s3_test_server_available to TestResolveFileUrlS3Backend by @melizeche in goauthentik/authentik#18858
• rbac: alter migrated direct permission roles by @gergosimonyi in goauthentik/authentik#18860
• core: bump library/golang from 5d35fb8 to 8e8f9c8 by @dependabot[bot] in goauthentik/authentik#18855
• web/admin/rbac: misc object permission fixes by @gergosimonyi in goauthentik/authentik#18859
• outposts: fix permission errors for related certificates by @BeryJu in goauthentik/authentik#18861
• website/docs: adjust RBAC-related details in 2025.12 release notes by @gergosimonyi in goauthentik/authentik#18863
• website/docs: Add docs for passkey autofill (WebauthN Conditional UI) by @melizeche in goauthentik/authentik#18805
• website/docs: 2025.10.3 release notes by @BeryJu in goauthentik/authentik#18868
• web: add custom message with links for empty data export list by @atereshkin in goauthentik/authentik#18830
• web: fix notification counter by @atereshkin in goauthentik/authentik#18781
• web: bump vite from 7.2.7 to 7.3.0 in /web by @dependabot[bot] in goauthentik/authentik#18854
• stages/authenticator_*: fix code input field not string by @BeryJu in goauthentik/authentik#18875
• web: fix file upload form by @dominic-r in goauthentik/authentik#18808
• web/admin: endpoint: change wording and add helper text by @dewi-tik in goauthentik/authentik#18871
• core, web: update translations by @authentik-automation[bot] in goauthentik/authentik#18807
• website/integrations: bookstack: fix redir url by @dominic-r in goauthentik/authentik#18891
• core: bump astral-sh/uv from 0.9.17 to 0.9.18 by @dependabot[bot] in goauthentik/authentik#18898
• core: bump goauthentik/fips-debian from 2f19fc1 to 189345a by @dependabot[bot] in goauthentik/authentik#18897
• web: bump knip from 5.73.3 to 5.74.0 in /web by @dependabot[bot] in goauthentik/authentik#18896
• web: bump @types/node from 25.0.0 to 25.0.3 in /web by @dependabot[bot] in goauthentik/authentik#18895
• web: bump the rollup group across 1 directory with 4 updates by @dependabot[bot] in goauthentik/authentik#18852
• web: bump the bundler group across 1 directory with 7 updates by @dependabot[bot] in goauthentik/authentik#18894
• web: bump @sentry/browser from 10.30.0 to 10.31.0 in /web in the sentry group across 1 directory by @dependabot[bot] in goauthentik/authentik#18893
• lifecycle/aws: bump aws-cdk from 2.1034.0 to 2.1100.0 in /lifecycle/aws by @dependabot[bot] in goauthentik/authentik#18850
• web: bump the goauthentik group across 1 directory with 3 updates by @dependabot[bot] in goauthentik/authentik#18819
• web: bump the swc group across 1 directory with 11 updates by @dependabot[bot] in goauthentik/authentik#18818
• web: bump the eslint group across 1 directory with 5 updates by @dependabot[bot] in goauthentik/authentik#18851
• core: bump goauthentik.io/api/v3 from 3.2026020.1 to 3.2026020.3 by @dependabot[bot] in goauthentik/authentik#18892
• tasks/middleware: close connections on worker status update database error by @rissson in goauthentik/authentik#18881
• website/docs: added list of Int Guide contributors (also edited frontmatter) by @tanberry in goauthentik/authentik#18888
• api: fix page_size with invalid query param by @rissson in goauthentik/authentik#18879
• ci/release-tag: checkout correct branch for make test-docker by @rissson in goauthentik/authentik#18880
• api: fix latest version for public schema by @BeryJu in goauthentik/authentik#18902
• website/docs: 2025.12: remove superfluous changes by @rissson in goauthentik/authentik#18910
• web/admin: reword some things on the device view page by @BeryJu in goauthentik/authentik#18785
• core/groups: optimize prefetch queries to fetch only required fields by @joaocfernandes in goauthentik/authentik#18448
• root: fix docker-compose data mount by @rissson in goauthentik/authentik#18903
• web/admin: add UI copy to RBAC modal by @tanberry in goauthentik/authentik#18917
• tests/e2e: handle StaleElementReferenceException in parse_json_content by @melizeche in goauthentik/authentik#18842
• core: bump goauthentik/fips-debian from 189345a to 10dadf1 by @dependabot[bot] in goauthentik/authentik#18927
• web: bump chromedriver from 143.0.1 to 143.0.2 in /web by @dependabot[bot] in goauthentik/authentik#18926
• web: bump knip from 5.74.0 to 5.75.1 in /web by @dependabot[bot] in https://github.com/goauthentik/authe...

authentik-2025.12.4

authentik is an open-source Identity Provider focused on flexibility and versatility

see https://docs.goauthentik.io/releases/2025.12/#fixed-in-2025124

What's Changed

• charts/authentik: add link to authentik configuration docs by @rissson in #447
• charts/authentik: bump to 2025.12.4 by @authentik-automation[bot] in #451

Full Changelog: authentik-2025.12.3...authentik-2025.12.4

authentik-2025.12.3

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: bump to 2025.12.3 by @authentik-automation[bot] in #444
• 2025.12: Revert bulk revoke added by accident in release branch by @dominic-r in goauthentik/authentik#19870
• web/admin: fix toggle-group for bindings now showing up (cherry-pick #19820 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19895
• web: fix Brand CSS not applied to nested Shadow DOM components (cherry-pick #19892 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19900
• ci: always generate API clients (#19906) by @BeryJu in goauthentik/authentik#19932
• lifecycle/ak: make sure /data has the correct permissions (cherry-pick #19935 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19940
• lifecycle/aws: add /data volume (cherry-pick #19936 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19938
• core: fix non-expiring service accounts and app passwords (cherry-pick #19913 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19941

Full Changelog: goauthentik/authentik@version/2025.12.2...version/2025.12.3

authentik-2025.12.2

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: bump to 2025.12.2 by @authentik-automation[bot] in #442
• sources/kerberos: update to new python-kadmin-rs (cherry-pick #19491 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19523
• tests/e2e: Add delay and serialized rollback to saml e2e test (cherry-pick #18840 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19532
• admin/files: fix manageable check blocking file creation on fresh installs (cherry-pick #19547 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19553
• admin/files: fix duplicate bucket name in presigned URLs with custom domain (cherry-pick #19537 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19575
• core: Update supported versions in SECURITY.md (cherry-pick #19385 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19578
• web: update @goauthentik/api (cherry-pick #19542 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19589
• web/forms: fix invalid date error for empty datetime-local inputs (cherry-pick #19561 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19582
• endpoints: fix endpoints stage marked as enterprise (cherry-pick #19607 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19610
• policies: fix Providers authentication_flow not used when set (cherry-pick #19609 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19615
• providers/saml: fix structure of encrypted saml assertion (cherry-pick #19592 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19613
• providers/saml: allow encryption certificates without private keys (cherry-pick #19526 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19612
• sources/saml: Fix signature verification order to accommodate encrypted assertions (cherry-pick #19593 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19614
• tests: improve e2e/integration test reliability (cherry-pick #19540 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19611
• lib/sync/outgoing: handle deletions even if object does not exist in database (cherry-pick #18968 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19617
• web/user: fix Firefox for Android infinite render loop in user library (cherry-pick #19379 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19626
• web/maintenance: fix missing custom web component imports (cherry-pick #18942 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19636
• web/a11y: Locale selector select styles, contrast. (cherry-pick #19634 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19651
• web/maintenance: no unknown tag names (cherry-pick #18944 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19637
• providers/oauth2: add logout+jwt token type for oidc logout token. (cherry-pick #19554 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19675
• web/maintenance: no missing element type definitions (cherry-pick #18950 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19638
• web/maintenance/no unknown attributes (part 1) (cherry-pick #18970 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19639
• sources/saml: Set AuthnRequest ProtocolBinding to HTTP-POST instead of HTTP-Redirect (cherry-pick #17378 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19649
• web/forms: fix forms not resetting state when modal closes (cherry-pick #19562 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19635
• web/admin: fix brand form sending "undefined" string for blank default application (cherry-pick #19658 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19682
• internal: fix incorrect metric calculation (cherry-pick #19701 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19703
• sources/oauth: add fallback for id_token when profile URL is not available (cherry-pick #19311 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19704
• core: return bad request when user is authenticated and not active (cherry-pick #19706 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19710
• web/admin: fix impersonation form requesting data without being opened (cherry-pick #19673 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19712
• web/sfe: downgrade bootstrap, add access denied test (cherry-pick #19763 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19765
• root: update client-go generation (cherry-pick #19762 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19791
• web/elements: reduce spacing between collapsible form groups (cherry-pick #19627 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19640
• web/elements: stabilize dual-select status height (cherry-pick #19734 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19776
• providers/scim: fix email validation mismatch (cherry-pick #19848 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19853
• sources/saml: properly catch InvalidSignature exception (cherry-pick #19641 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19650
• sources/oauth: Fix an issue where wechat may crash duing login. (cherry-pick #18973 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19854
• admin/files: add centralized theme variable support for file URLs (cherry-pick #19657 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19793
• web/table: align row action icons and tooltip color (cherry-pick #19736 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19773
• web/admin: fix file upload not preserving extension for custom names with dots (cherry-pick #19548 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19685
• web/admin: fix captcha stage provider selector not showing saved value (cherry-pick #19555 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19656
• web: Session UI Config Lifecycle (cherry-pick #19788 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19821
• web: Enforce challenge nullish types. (cherry-pick #19768 to version-2025.12) by @authentik-automation[bot] in goauthentik/authentik#19777

Full Changelog: goauthentik/authentik@version/2025.12.1...version/2025.12.2

authentik-2025.12.1

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: bump to 2025.12.1 by @authentik-automation[bot] in #440

Full Changelog: authentik-2025.12.0...authentik-2025.12.1

authentik-2025.12.0

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: use debian:13-slim for PostgreSQL volume permissions by @yolanv in #434
• authentik: replace bitnami postgres exporter by @BeryJu in #435
• charts/authentik: add support for external Kubernetes secret by @gthieleb in #436
• charts/authentik: use read only root filesystem for postgresql by @KoiFresh in #427
• charts/authentik: bump to 2025.12.0 by @authentik-automation[bot] in #438

New Contributors

• @yolanv made their first contribution in #434
• @gthieleb made their first contribution in #436
• @KoiFresh made their first contribution in #427

Full Changelog: authentik-2025.10.3...authentik-2025.12.0

authentik-2025.10.3

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: remove redis by @BeryJu in #409
• chore(deps): update actions/checkout action to v6 by @renovate[bot] in #430
• ci: update chart-testing-action by @rissson in #432
• chore(deps): update docker.io/library/postgres docker tag to v17.7 by @renovate[bot] in #426
• chore(deps): update postgresql docker tag to v16.7.27 by @renovate[bot] in #393
• charts/authentik: bump to 2025.10.3 by @authentik-automation[bot] in #433

Full Changelog: authentik-2025.10.2...authentik-2025.10.3

authentik-2025.10.2

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• chore(deps): update helm/kind-action action to v1.13.0 by @renovate[bot] in #421
• bump to 2025.10.2 by @BeryJu in #428

Full Changelog: authentik-2025.10.1...authentik-2025.10.2