github goauthentik/authentik version/2024.4.0-rc1
Release 2024.4.0-rc1

pre-release13 days ago

See https://docs.goauthentik.io/docs/releases/2024.4

What's Changed

  • ci: docker push: re-add timestamp image tag by @rissson in #8529
  • ci: fix release pipeline by @BeryJu in #8530
  • core, web: update translations by @authentik-automation in #8531
  • web: fix save & reset behavior on System ➲ Settings page. by @kensternberg-authentik in #8528
  • web: change "delete" verb to "remove" for one-to-many relationships by @kensternberg-authentik in #8535
  • ci: fix release sentry step by @rissson in #8540
  • web: bump the storybook group in /web with 8 updates by @dependabot in #8544
  • web: bump chromedriver from 121.0.0 to 121.0.1 in /tests/wdio by @dependabot in #8545
  • web: bump the wdio group in /tests/wdio with 2 updates by @dependabot in #8543
  • web: bump the sentry group in /web with 1 update by @dependabot in #8542
  • web: bump rollup from 4.10.0 to 4.11.0 in /web by @dependabot in #8546
  • core: bump cryptography from 42.0.0 to 42.0.2 by @dependabot in #8553
  • website: bump undici from 5.27.2 to 5.28.3 in /website by @dependabot in #8550
  • core: bump github.com/redis/go-redis/v9 from 9.4.0 to 9.5.0 by @dependabot in #8567
  • web: bump rollup from 4.11.0 to 4.12.0 in /web by @dependabot in #8566
  • web: bump the storybook group in /web with 1 update by @dependabot in #8565
  • web: bump chromedriver from 121.0.1 to 121.0.2 in /tests/wdio by @dependabot in #8564
  • website: bump react-tooltip from 5.26.2 to 5.26.3 in /website by @dependabot in #8562
  • website: bump @types/react from 18.2.55 to 18.2.56 in /website by @dependabot in #8561
  • web: bump the wdio group in /tests/wdio with 4 updates by @dependabot in #8563
  • web/flows: improve authenticator styling by @BeryJu in #8560
  • root: fix app settings load order by @BeryJu in #8569
  • ci: main: use correct previous version by @rissson in #8539
  • Revert "core: bump github.com/redis/go-redis/v9 from 9.4.0 to 9.5.0 (… by @BeryJu in #8573
  • core: bump twilio from 8.12.0 to 8.13.0 by @dependabot in #8525
  • core: bump black from 24.1.1 to 24.2.0 by @dependabot in #8524
  • web: bump core-js from 3.35.1 to 3.36.0 in /web by @dependabot in #8523
  • core, web: update translations by @authentik-automation in #8574
  • website/docs: kubernetes installation: update values by @rissson in #8575
  • website/docs: edited Docs about tenants by @tanberry in #8549
  • website/docs: remove outdated info by @tanberry in #8552
  • providers/oauth2: improve conformance with client_credentials standard by @BeryJu in #8471
  • website/docs: remove tenants docs from sidebar for now by @tanberry in #8551
  • website/docs: edit RN to remove tenants by @tanberry in #8578
  • translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #8582
  • translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #8581
  • translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #8590
  • website: bump @types/react from 18.2.56 to 18.2.57 in /website by @dependabot in #8589
  • core: bump ruff from 0.2.1 to 0.2.2 by @dependabot in #8588
  • core: bump github.com/jellydator/ttlcache/v3 from 3.1.1 to 3.2.0 by @dependabot in #8587
  • web: bump the eslint group in /web with 2 updates by @dependabot in #8583
  • web: bump the esbuild group in /web with 2 updates by @dependabot in #8584
  • web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #8585
  • rbac: fix permission decorator for global permissions by @BeryJu in #8591
  • web: spell customization with a Z by @fheisler in #8596
  • web/flows: fix webauthn retry by @BeryJu in #8599
  • web: bump @codemirror/lang-javascript from 6.2.1 to 6.2.2 in /web by @dependabot in #8615
  • web: bump @open-wc/lit-helpers from 0.6.0 to 0.7.0 in /web by @dependabot in #8614
  • web: bump the storybook group in /web with 8 updates by @dependabot in #8613
  • web: bump the sentry group in /web with 1 update by @dependabot in #8612
  • core: bump github.com/redis/go-redis/v9 from 9.4.0 to 9.5.1 by @dependabot in #8611
  • web: bump the wdio group in /tests/wdio with 3 updates by @dependabot in #8610
  • web: bump ip from 1.1.8 to 1.1.9 in /tests/wdio by @dependabot in #8608
  • core: bump cbor2 from 5.5.1 to 5.6.2 by @dependabot in #8607
  • core, web: update translations by @authentik-automation in #8606
  • translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #8609
  • web: bump API Client version by @authentik-automation in #8617
  • website/blog: Blog about release 2024.2 by @tanberry in #8580
  • website/docs: fix link to helm chart release notes by @BeryJu in #8624
  • stages/authenticator_validate: fix error with get_webauthn_challenge_without_user by @BeryJu in #8625
  • website/docs: added a new template for "combo" topics by @tanberry in #8595
  • fix version by @tanberry in #8630
  • core: bump goauthentik.io/api/v3 from 3.2023107.2 to 3.2024020.1 by @dependabot in #8635
  • core: bump cryptography from 42.0.2 to 42.0.4 by @dependabot in #8629
  • brands: fix context processor when request doesn't have a tenant by @BeryJu in #8643
  • ci: fix missing tags from release by @BeryJu in #8645
  • events: sanitize args and kwargs saved in system tasks by @BeryJu in #8644
  • website/docs: prepare 2024.2.1 release notes by @BeryJu in #8649
  • website/blog: add draft for blog about fletcher joining by @tanberry in #8634
  • web: bump API Client version by @authentik-automation in #8654
  • website/blog: fix image so it displays in twitter post by @tanberry in #8656
  • core: rework recovery API to return better error messages by @BeryJu in #8655
  • web: bump API Client version by @authentik-automation in #8658
  • website/blog: Blog try again by @tanberry in #8659
  • web: bump the sentry group in /web with 1 update by @dependabot in #8665
  • core: bump selenium from 4.17.2 to 4.18.1 by @dependabot in #8664
  • core: bump pytest from 8.0.0 to 8.0.1 by @dependabot in #8663
  • web: bump chromedriver from 121.0.2 to 122.0.3 in /tests/wdio by @dependabot in #8662
  • core: bump goauthentik.io/api/v3 from 3.2024020.1 to 3.2024021.2 by @dependabot in #8661
  • translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #8622
  • blueprints: use reconcile decorator instead of relying on function name prefix by @BeryJu in #8483
  • translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #8621
  • website: test frontmatter image by @BeryJu in #8671
  • website/docs: 2024.2: update comment about upgrading to mention breaking changes by @rissson in #8667
  • website/integrations: multiple integration edits by @ZuluWhiskey in #7923
  • root: early spring clean for linting by @BeryJu in #8498
  • root: fix config loading after refactor during ruff migration by @BeryJu in #8674
  • core, web: update translations by @authentik-automation in #8672
  • translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #8679
  • translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #8678
  • providers/oauth2: fix inconsistent sub value when setting via mapping by @BeryJu in #8677
  • core: bump coverage from 7.4.1 to 7.4.3 by @dependabot in #8694
  • core: bump sentry-sdk from 1.40.4 to 1.40.5 by @dependabot in #8692
  • web: bump the eslint group in /tests/wdio with 1 update by @dependabot in #8691
  • website: bump @types/react from 18.2.57 to 18.2.58 in /website by @dependabot in #8690
  • core: bump pytest from 8.0.1 to 8.0.2 by @dependabot in #8693
  • web: bump the eslint group in /web with 1 update by @dependabot in #8688
  • web: bump yaml from 2.3.4 to 2.4.0 in /web by @dependabot in #8689
  • web: bump the sentry group in /web with 1 update by @dependabot in #8687
  • core: fix blueprint export by @BeryJu in #8695
  • enterprise: fix read_only activating when no license is installed by @BeryJu in #8697
  • website: add solve gitea group does not take effect by @yidaqiang in #8413
  • website/docs: Add documentation for Glitchtip by @Daniel15 in #8182
  • Add missing commas, correction of spelling errors by @patsevanton in #8680
  • web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #8702
  • web: bump the eslint group in /web with 2 updates by @dependabot in #8701
  • core, web: update translations by @authentik-automation in #8700
  • translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #8709
  • website: split by @BeryJu in #8616
  • website: fix links in navbar opening in new tab by @BeryJu in #8713
  • translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #8706
  • translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #8705
  • website/integrations: add documentation for OIDC setup with Paperless-ngx by @girlpunk in #8538
  • translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #8710
  • ci: do not push docker image if fork by @rissson in #8724
  • enterprise: force license usage update after change to license by @BeryJu in #8723
  • website/docs: s3: fix environment variables by @rissson in #8722
  • root: fix container build by @BeryJu in #8727
  • core: bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0 by @dependabot in #8720
  • core: bump github.com/go-openapi/strfmt from 0.22.0 to 0.22.1 by @dependabot in #8719
  • web: bump style-mod from 4.1.0 to 4.1.1 in /web by @dependabot in #8718
  • web: bump the sentry group in /web with 1 update by @dependabot in #8717
  • core: bump sentry-sdk from 1.40.5 to 1.40.6 by @dependabot in #8716
  • core: bump pydantic from 2.6.1 to 2.6.3 by @dependabot in #8715
  • website: bump @types/react from 18.2.58 to 18.2.60 in /website by @dependabot in #8714
  • website: post-split cleanup by @BeryJu in #8729
  • ci: fix missing DOCKER_USERNAME secret by @BeryJu in #8730
  • providers/oauth2: fix offline_access requests when prompt doesn't include consent by @BeryJu in #8731
  • website/docs: s3: fix migration docs by @rissson in #8735
  • stages/authenticator_webauthn: fix error when enrolling new device by @BeryJu in #8738
  • ci: fix missing output on composite action by @BeryJu in #8741
  • core, web: update translations by @authentik-automation in #8743
  • web: bump chromedriver from 122.0.3 to 122.0.4 in /tests/wdio by @dependabot in #8747
  • web: bump chart.js from 4.4.1 to 4.4.2 in /web by @dependabot in #8746
  • web: bump @types/grecaptcha from 3.0.7 to 3.0.8 in /web by @dependabot in #8745
  • web: bump the babel group in /web with 4 updates by @dependabot in #8744
  • sources/oauth: add gitlab type [AUTH-323] by @smusali in #8195
  • web: bump API Client version by @authentik-automation in #8753
  • website: redirect root to /docs by @BeryJu in #8754
  • web/admin: don't mark property mappings as required anywhere by @BeryJu in #8752
  • website/docs: move Applications docs up a level, other edits by @tanberry in #8712
  • web/admin: don't mark remaining property mappings as required by @rissson in #8772
  • core, web: update translations by @authentik-automation in #8759
  • translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #8774
  • core: bump twilio from 8.13.0 to 9.0.0 by @dependabot in #8767
  • core: bump ruff from 0.2.2 to 0.3.0 by @dependabot in #8766
  • core: bump goauthentik.io/api/v3 from 3.2024021.2 to 3.2024021.3 by @dependabot in #8765
  • website: bump @types/react from 18.2.60 to 18.2.61 in /website by @dependabot in #8764
  • web: bump style-mod from 4.1.1 to 4.1.2 in /web by @dependabot in #8763
  • web: bump the sentry group in /web with 1 update by @dependabot in #8762
  • root: ensure consistent install_id by @BeryJu in #8775
  • translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #8779
  • translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #8778
  • core: bump twisted from 23.10.0 to 24.3.0 by @dependabot in #8788
  • core: bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #8790
  • web: bump the wdio group in /tests/wdio with 4 updates by @dependabot in #8789
  • website/docs: installation: kubernetes: fix values by @rissson in #8783
  • web: clean up UserInterface in prep for OAuth and Silo Projects by @kensternberg-authentik in #8278
  • providers/oauth2: fix validation ordering by @BeryJu in #8793
  • flows: fix mismatched redirect behaviour for invalid and valid flows by @BeryJu in #8794
  • website/docs: prepare 2024.2.2 release notes by @BeryJu in #8782
  • web: bump API Client version by @authentik-automation in #8797
  • website/integrations: fix typo in proxmox docs by @wdhdev in #8791
  • web: bump the eslint group in /web with 2 updates by @dependabot in #8807
  • web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #8806
  • website: bump @types/react from 18.2.61 to 18.2.62 in /website by @dependabot in #8805
  • core: bump github.com/go-openapi/runtime from 0.27.1 to 0.27.2 by @dependabot in #8804
  • core: bump golang.org/x/oauth2 from 0.17.0 to 0.18.0 by @dependabot in #8803
  • core: bump goauthentik.io/api/v3 from 3.2024021.3 to 3.2024022.1 by @dependabot in #8802
  • core, web: update translations by @authentik-automation in #8800
  • core: bump github.com/go-openapi/strfmt from 0.22.1 to 0.22.2 by @dependabot in #8801
  • core: bump django from 5.0.2 to 5.0.3 by @dependabot in #8808
  • website: fix missing compose file by @BeryJu in #8809
  • enterprise: only check for valid license existing for creating Enterprise objects by @BeryJu in #8813
  • core: bump golang from 1.22.0-bookworm to 1.22.1-bookworm by @dependabot in #8820
  • web: bump mermaid from 10.8.0 to 10.9.0 in /web by @dependabot in #8818
  • website: bump @types/react from 18.2.62 to 18.2.63 in /website by @dependabot in #8817
  • core: bump github.com/sethvargo/go-envconfig from 1.0.0 to 1.0.1 by @dependabot in #8819
  • stages/email: Disable autoescape for text templates by @Chasethechicken in #8812
  • enterprise: use tenant uuid instead of install_id when tenants are enabled by @BeryJu in #8823
  • website/integrations: Add description for custom enrollment to azure ad by @tograss in #8392
  • website: bump @types/react from 18.2.63 to 18.2.64 in /website by @dependabot in #8831
  • website: bump typescript from 5.3.3 to 5.4.2 in /website by @dependabot in #8830
  • web: bump typescript from 5.3.3 to 5.4.2 in /tests/wdio by @dependabot in #8832
  • tests: fix e2e flow tests by @BeryJu in #8835
  • website: fix bundled website build by @BeryJu in #8836
  • web: replace rollup with esbuild by @kensternberg-authentik in #8699
  • web: bump yaml from 2.4.0 to 2.4.1 in /web by @dependabot in #8829
  • web: bump typescript from 5.3.3 to 5.4.2 in /web by @dependabot in #8827
  • web: bump @codemirror/lang-xml from 6.0.2 to 6.1.0 in /web by @dependabot in #8826
  • web: fix build script timing and clearing by @BeryJu in #8837
  • core: bump importlib-metadata from 7.0.1 to 7.0.2 by @dependabot in #8845
  • core: bump ruff from 0.3.0 to 0.3.1 by @dependabot in #8844
  • core: bump sentry-sdk from 1.40.6 to 1.41.0 by @dependabot in #8843
  • website: bump redocusaurus from 2.0.1 to 2.0.2 in /website by @dependabot in #8842
  • web: bump the wdio group in /tests/wdio with 3 updates by @dependabot in #8841
  • web: bump @rollup/rollup-linux-arm64-gnu from 4.12.0 to 4.12.1 in /web by @dependabot in #8848
  • stages/email: fix issue when sending emails to users with same display as email by @BeryJu in #8850
  • core: bump pytest-timeout from 2.2.0 to 2.3.1 by @dependabot in #8855
  • web: bump the rollup group in /web with 2 updates by @dependabot in #8854
  • web: bump the sentry group in /web with 1 update by @dependabot in #8853
  • translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #8811
  • translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #8810
  • core: bump django-filter from 23.5 to 24.1 by @dependabot in #8874
  • core: bump uvicorn from 0.27.1 to 0.28.0 by @dependabot in #8872
  • core: bump requests-oauthlib from 1.3.1 to 1.4.0 by @dependabot in #8866
  • web: bump the wdio group in /tests/wdio with 3 updates by @dependabot in #8865
  • core: bump ruff from 0.3.1 to 0.3.2 by @dependabot in #8873
  • core: bump packaging from 23.2 to 24.0 by @dependabot in #8871
  • core: bump bandit from 1.7.7 to 1.7.8 by @dependabot in #8870
  • core: bump github.com/go-openapi/strfmt from 0.22.2 to 0.23.0 by @dependabot in #8869
  • core: bump pytest from 8.0.2 to 8.1.1 by @dependabot in #8868
  • core: bump github.com/go-openapi/runtime from 0.27.2 to 0.28.0 by @dependabot in #8867
  • tenants: really ensure default tenant cannot be deleted by @rissson in #8875
  • web: fix esbuild issue with style sheets by @kensternberg-authentik in #8856
  • web: upgrade to lit 3 by @kensternberg-authentik in #8781
  • website: bump @types/react from 18.2.64 to 18.2.65 in /website by @dependabot in #8886
  • web: bump the eslint group in /web with 2 updates by @dependabot in #8885
  • web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #8883
  • web: bump chromedriver from 122.0.4 to 122.0.5 in /tests/wdio by @dependabot in #8884
  • web: bump the sentry group in /web with 1 update by @dependabot in #8881
  • website/docs: new landing page for Providers by @tanberry in #8879
  • Update _envoy_istio.md by @valkenburg-prevue-ch in #8888
  • core: bump twilio from 9.0.0 to 9.0.1 by @dependabot in #8893
  • core: bump pydantic from 2.6.3 to 2.6.4 by @dependabot in #8892
  • web: bump the rollup group in /web with 3 updates by @dependabot in #8891
  • api: capabilities: properly set can_save_media when s3 is enabled by @rissson in #8896
  • web: provide InstallID on EnterpriseListPage by @kensternberg-authentik in #8898
  • core: bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by @dependabot in #8901
  • web: bump vite-tsconfig-paths from 4.3.1 to 4.3.2 in /web by @dependabot in #8903
  • web: bump chromedriver from 122.0.5 to 122.0.6 in /tests/wdio by @dependabot in #8902
  • web/admin: fix markdown table rendering by @kensternberg-authentik in #8908
  • web: clean up and remove redundant alias '@goauthentik/app' by @kensternberg-authentik in #8889
  • stages: source stage by @BeryJu in #8330
  • web: bump API Client version by @authentik-automation in #8910
  • enterprise/rac: fix connection token management by @BeryJu in #8909
  • web: bump follow-redirects from 1.15.5 to 1.15.6 in /tests/wdio by @dependabot in #8913
  • web: bump follow-redirects from 1.15.5 to 1.15.6 in /web by @dependabot in #8914
  • website: bump follow-redirects from 1.15.4 to 1.15.6 in /website by @dependabot in #8911
  • web: bump esbuild from 0.20.1 to 0.20.2 in /web by @dependabot in #8924
  • web: bump the sentry group in /web with 1 update by @dependabot in #8922
  • website: bump @types/react from 18.2.65 to 18.2.66 in /website by @dependabot in #8921
  • core: bump goauthentik.io/api/v3 from 3.2024022.1 to 3.2024022.2 by @dependabot in #8920
  • core: bump sentry-sdk from 1.41.0 to 1.42.0 by @dependabot in #8919
  • core: bump urllib3 from 1.26.18 to 2.2.1 by @dependabot in #8918
  • core: bump coverage from 7.4.3 to 7.4.4 by @dependabot in #8917
  • admin: Handle latest version unknown in admin dashboard by @RoboMagus in #8858
  • website/docs: update example ldapsearch commands by @Trident101 in #8906
  • stages/user_write: ensure user data is json-serializable by @BeryJu in #8926
  • outpost: improved set secret answers for flow execution by @sirux88 in #8013
  • web: bump API Client version by @authentik-automation in #8927
  • website/docs: add link to CRUD docs by @tanberry in #8925
  • outposts: Enhance config options for k8s outposts by @PKizzle in #7363
  • website/docs: add new name "Microsft Entra ID" for Azure AD by @tanberry in #8930
  • core: bump goauthentik.io/api/v3 from 3.2024022.2 to 3.2024022.3 by @dependabot in #8946
  • ci: always run ci-main on branch pushes by @rissson in #8950
  • events: discard notification if user has empty email by @BeryJu in #8938
  • core: bump ruff from 0.3.2 to 0.3.3 by @dependabot in #8943
  • core: bump twilio from 9.0.1 to 9.0.2 by @dependabot in #8942
  • website: bump postcss from 8.4.35 to 8.4.36 in /website by @dependabot in #8940
  • web: bump the sentry group in /web with 1 update by @dependabot in #8941
  • web: bump the wdio group in /tests/wdio with 2 updates by @dependabot in #8939
  • core: bump black from 24.2.0 to 24.3.0 by @dependabot in #8945
  • root: support redis username by @BeryJu in #8935
  • web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #8963
  • website: bump @types/react from 18.2.66 to 18.2.67 in /website by @dependabot in #8962
  • web: bump core-js from 3.36.0 to 3.36.1 in /web by @dependabot in #8960
  • web: bump the eslint group in /web with 2 updates by @dependabot in #8959
  • core: cache user application list under policies by @BeryJu in #8895
  • outposts/proxy: Fix invalid redirect on external hosts containing path components by @GermanCoding in #8915
  • web: improve build speeds even moar!!!!!! by @kensternberg-authentik in #8954
  • website/integrations: portainer: match portainer settings order by @MaxPelly in #8974
  • internal: cleanup static file serving setup code by @BeryJu in #8965
  • website: bump postcss from 8.4.36 to 8.4.37 in /website by @dependabot in #8967
  • core: bump uvicorn from 0.28.0 to 0.28.1 by @dependabot in #8968
  • web: bump the babel group in /web with 7 updates by @dependabot in #8969
  • web: bump country-flag-icons from 1.5.9 to 1.5.10 in /web by @dependabot in #8970
  • web: bump @types/grecaptcha from 3.0.8 to 3.0.9 in /web by @dependabot in #8971
  • website/docs: config: remove options moved to tenants by @rissson in #8976
  • website: bump postcss from 8.4.37 to 8.4.38 in /website by @dependabot in #8988
  • web: bump the wdio group in /tests/wdio with 3 updates by @dependabot in #8985
  • core: bump importlib-metadata from 7.0.2 to 7.1.0 by @dependabot in #8982
  • website: bump typescript from 5.4.2 to 5.4.3 in /website by @dependabot in #8989
  • web: bump chromedriver from 122.0.6 to 123.0.0 in /tests/wdio by @dependabot in #8987
  • web: bump typescript from 5.4.2 to 5.4.3 in /tests/wdio by @dependabot in #8986
  • web: bump typescript from 5.4.2 to 5.4.3 in /web by @dependabot in #8984
  • web: bump the babel group in /web with 3 updates by @dependabot in #8983
  • core: bump sentry-sdk from 1.42.0 to 1.43.0 by @dependabot in #8981
  • core: bump uvicorn from 0.28.1 to 0.29.0 by @dependabot in #8980
  • web/admin: remove enterprise preview banner by @BeryJu in #8991
  • website/docs: add example policy to enforce unique email address by @BeryJu in #8955
  • website/deverlop-docs website/integrations: add links to integrations template by @tanberry in #8995
  • website/docs: improve flow inspector docs by @BeryJu in #8993
  • website/docs: Upgrade nginx reverse porxy config by @vnwnv in #8947
  • core: bump ruff from 0.3.3 to 0.3.4 by @dependabot in #8998
  • website: bump webpack-dev-middleware from 5.3.3 to 5.3.4 in /website by @dependabot in #9001
  • web/admin: small fixes by @BeryJu in #9002
  • web: bump the sentry group in /web with 2 updates by @dependabot in #9017
  • core: bump requests-oauthlib from 1.4.0 to 2.0.0 by @dependabot in #9018
  • website: bump @types/react from 18.2.67 to 18.2.69 in /website by @dependabot in #9016
  • web/flow: general ux improvements by @roney492 in #8558
  • website/integrations: Update nextcloud Admin Group Expression by @smdion in #7314
  • lifecycle: migrate: ensure template schema exists before migrating by @rissson in #8952
  • web: bump API Client version by @authentik-automation in #9020
  • sources/ldap: add ability to disable password write on login by @rissson in #8377
  • web: bump API Client version by @authentik-automation in #9021
  • website/docs: include OS-specific docker-compose install instructions + minor fixes by @fheisler in #8975
  • translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #9023
  • web: bump katex from 0.16.9 to 0.16.10 in /web by @dependabot in #9025
  • web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #9033
  • website: bump @types/react from 18.2.69 to 18.2.70 in /website by @dependabot in #9032
  • core: bump goauthentik.io/api/v3 from 3.2024022.3 to 3.2024022.5 by @dependabot in #9031
  • web: bump the eslint group in /web with 2 updates by @dependabot in #9030
  • web: bump express from 4.18.3 to 4.19.2 in /web by @dependabot in #9028
  • website: bump express from 4.18.2 to 4.19.2 in /website by @dependabot in #9027
  • core: bump duo-client from 5.2.0 to 5.3.0 by @dependabot in #9029
  • website/docs: maintenance, re-add system settings by @BeryJu in #9026
  • web: bump API Client version by @authentik-automation in #9035
  • web: fix markdown rendering bug for alerts by @kensternberg-authentik in #9037
  • core: bump goauthentik.io/api/v3 from 3.2024022.5 to 3.2024022.6 by @dependabot in #9042
  • website: bump @types/react from 18.2.70 to 18.2.72 in /website by @dependabot in #9041
  • website/integrations: add documentation for OIDC setup with Xen Orchestra by @pgumpoldsberger in #9000
  • web: a few minor bugfixes and lintfixes by @kensternberg-authentik in #9044
  • website/integrations: wekan: fix properties by @falkheiland in #9047
  • web: bump chromedriver from 123.0.0 to 123.0.1 in /tests/wdio by @dependabot in #9058
  • core: bump selenium from 4.18.1 to 4.19.0 by @dependabot in #9057
  • core: bump requests-mock from 1.11.0 to 1.12.0 by @dependabot in #9056
  • core: bump django-filter from 24.1 to 24.2 by @dependabot in #9055
  • web: bump the rollup group in /web with 3 updates by @dependabot in #9053
  • website: bump @types/react from 18.2.72 to 18.2.73 in /website by @dependabot in #9052
  • website/docs: update airgapped config by @BeryJu in #9049
  • events: rework log messages returned from API and their rendering by @BeryJu in #8770
  • web: bump API Client version by @authentik-automation in #9061
  • core: bump requests-mock from 1.12.0 to 1.12.1 by @dependabot in #9072
  • core: bump sentry-sdk from 1.43.0 to 1.44.0 by @dependabot in #9073
  • core: bump webauthn from 2.0.0 to 2.1.0 by @dependabot in #9070
  • web: bump the eslint group in /tests/wdio with 1 update by @dependabot in #9071
  • web: bump the rollup group in /web with 3 updates by @dependabot in #9067
  • web: bump glob from 10.3.10 to 10.3.12 in /web by @dependabot in #9069
  • web: bump the eslint group in /web with 1 update by @dependabot in #9066
  • web: bump @codemirror/lang-python from 6.1.4 to 6.1.5 in /web by @dependabot in #9068
  • core: bump goauthentik.io/api/v3 from 3.2024022.6 to 3.2024022.7 by @dependabot in #9064
  • web: bump the sentry group in /web with 2 updates by @dependabot in #9065
  • events: fix log_capture by @BeryJu in #9075
  • website/docs: fix transports example by @Mrs-Feathers in #9074
  • providers/oauth2: fix interactive device flow by @BeryJu in #9076
  • web: consistent style declarations internally by @kensternberg-authentik in #9077
  • web: maintenance: split tsconfig into “base” and “build” variants. by @kensternberg-authentik in #9036
  • web: move context controllers into reactive controller plugins by @kensternberg-authentik in #8996
  • web/admin: allow custom sorting for bound* tables by @BeryJu in #9080
  • website: bump the docusaurus group in /website with 9 updates by @dependabot in #9087
  • web: bump ts-pattern from 5.0.8 to 5.1.0 in /web by @dependabot in #9090
  • web: bump @patternfly/elements from 2.4.0 to 3.0.0 in /web by @dependabot in #9089
  • website/docs: email stage: fix example translation error by @schnadoslin in #9048
  • website/docs: fix typo by @Iamanaws in #9082
  • website/integrations: add outline knowledge base by @fallenhitokiri in #8786
  • web: fix broken locale compile by @BeryJu in #9095
  • website/docs: update notes on SECRET_KEY by @pidi3000 in #9091
  • core: bump ruff from 0.3.4 to 0.3.5 by @dependabot in #9102
  • core: bump django-model-utils from 4.4.0 to 4.5.0 by @dependabot in #9101
  • core: bump drf-spectacular from 0.27.1 to 0.27.2 by @dependabot in #9100
  • web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #9099
  • core: bump twilio from 9.0.2 to 9.0.3 by @dependabot in #9103
  • web: bump the eslint group in /web with 2 updates by @dependabot in #9098
  • web: fix console log leftover by @BeryJu in #9096
  • root: move database calls from ready() to dedicated startup signal by @BeryJu in #9081
  • root: fix missing imports after #9081 by @BeryJu in #9106
  • website/integrations: Update OPNsense LDAP instructions by @Meliox in #9014
  • website: Bump @types/react from 18.2.73 to 18.2.74 in /website by @dependabot in #9115
  • web: Bump @fortawesome/fontawesome-free from 6.5.1 to 6.5.2 in /web by @dependabot in #9116
  • translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #9112
  • translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #9111
  • translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #9109
  • translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #9110
  • web: Bump the rollup group in /web with 3 updates by @dependabot in #9128
  • core: Bump django from 5.0.3 to 5.0.4 by @dependabot in #9132
  • core: Bump channels from 4.0.0 to 4.1.0 by @dependabot in #9131
  • core: Bump sentry-sdk from 1.44.0 to 1.44.1 by @dependabot in #9130
  • web: Bump the eslint group in /tests/wdio with 1 update by @dependabot in #9129
  • web: Bump the eslint group in /web with 1 update by @dependabot in #9127
  • web: Bump the babel group in /web with 2 updates by @dependabot in #9126
  • core: Bump golang from 1.22.1-bookworm to 1.22.2-bookworm by @dependabot in #9125
  • core, web: update translations by @authentik-automation in #9124
  • web: Bump vite from 5.1.4 to 5.2.8 in /web by @dependabot in #9120
  • root: generate python client by @BeryJu in #9107
  • ci: fix python client generator by @BeryJu in #9134
  • web: bump API Client version by @authentik-automation in #9133
  • website/docs: add procedural docs for RAC by @tanberry in #9006
  • blueprints: fix default username field in user-settings flow by @BeryJu in #9136
  • blueprints: fix schema generation for PrimaryKeyRelated fields with non-int PK by @BeryJu in #9140
  • web: Bump typescript from 5.4.3 to 5.4.4 in /tests/wdio by @dependabot in #9148
  • core: Bump golang.org/x/sync from 0.6.0 to 0.7.0 by @dependabot in #9147
  • website: Bump typescript from 5.4.3 to 5.4.4 in /website by @dependabot in #9150
  • website: Bump the docusaurus group in /website with 9 updates by @dependabot in #9149
  • web: Bump typescript from 5.4.3 to 5.4.4 in /web by @dependabot in #9145
  • web: Bump country-flag-icons from 1.5.10 to 1.5.11 in /web by @dependabot in #9144
  • core: Bump twilio from 9.0.3 to 9.0.4 by @dependabot in #9143
  • core: Bump golang.org/x/oauth2 from 0.18.0 to 0.19.0 by @dependabot in #9146
  • root: fix startup by @BeryJu in #9151
  • web: ak-checkbox-group for short, static, multi-select events by @kensternberg-authentik in #9138
  • root: fix redis username in lifecycle by @orzFly in #9158
  • core, web: update translations by @authentik-automation in #9156
  • core: bump github.com/go-ldap/ldap/v3 from 3.4.6 to 3.4.7 by @dependabot in #9168
  • web: bump ts-pattern from 5.1.0 to 5.1.1 in /web by @dependabot in #9167
  • web: bump @codemirror/legacy-modes from 6.3.3 to 6.4.0 in /web by @dependabot in #9166
  • web: bump the rollup group in /web with 3 updates by @dependabot in #9164
  • translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #9171
  • translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #9170
  • website/integrations: Update Nextcloud OIDC secret size limitation by @Fymyte in #9139
  • stages/authenticator_webauthn: add MDS support by @BeryJu in #9114
  • web: bump API Client version by @authentik-automation in #9174
  • web: bump @spotlightjs/spotlight from 1.2.16 to 1.2.17 in /web in the sentry group by @dependabot in #9162
  • enterprise: fix audit middleware import by @BeryJu in #9177
  • root: fix readme by @BeryJu in #9178
  • web: fix application library list display length and capability by @kensternberg-authentik in #9094
  • events: add context manager to ignore/modify audit events being written by @BeryJu in #9181
  • core: bump maxmind/geoipupdate from v6.1 to v7.0 by @dependabot in #9186
  • website/docs: update Postgresql username by @pgumpoldsberger in #9190
  • website: bump @types/react from 18.2.74 to 18.2.75 in /website by @dependabot in #9185
  • web: bump chromedriver from 123.0.1 to 123.0.2 in /tests/wdio by @dependabot in #9188
  • core, web: update translations by @authentik-automation in #9183
  • web/admin: fix SAML Provider preview by @BeryJu in #9192
  • sources/oauth: make URLs not required, only check when no OIDC URLs are defined by @BeryJu in #9182
  • web: bump API Client version by @authentik-automation in #9195
  • web: preserve selected list when provider updates by @kensternberg-authentik in #9200
  • translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #9198
  • translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #9196
  • translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #9197
  • translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #9194
  • website/docs: add note for flow compatibility mode by @BeryJu in #9204
  • core: bump python from 3.12.2-slim-bookworm to 3.12.3-slim-bookworm by @dependabot in #9211
  • website: bump typescript from 5.4.4 to 5.4.5 in /website by @dependabot in #9210
  • web: bump typescript from 5.4.4 to 5.4.5 in /web by @dependabot in #9209
  • core: bump sentry-sdk from 1.44.1 to 1.45.0 by @dependabot in #9208
  • web: bump chromedriver from 123.0.2 to 123.0.3 in /tests/wdio by @dependabot in #9207
  • web: bump typescript from 5.4.4 to 5.4.5 in /tests/wdio by @dependabot in #9206
  • core, web: update translations by @authentik-automation in #9205
  • core: add user settable token durations by @jmdilly in #7410
  • web: bump API Client version by @authentik-automation in #9213
  • stages/authenticator_validate: add ability to limit webauthn device types by @BeryJu in #9180
  • web: bump API Client version by @authentik-automation in #9214
  • core: bump goauthentik.io/api/v3 from 3.2024022.7 to 3.2024022.8 by @dependabot in #9215
  • website/docs: add more info and links about enforciing unique email addresses by @tanberry in #9154
  • website/integrations: Jenkins, fix bolding by @tanberry in #9217
  • website/integrations: nextcloud: add tip to solve hashed groups configuring OAuth2 by @lucaam in #9153
  • internal: add tests to go flow executor by @BeryJu in #9219
  • website/docs: add websocket support to nginx snippets by @BeryJu in #9220
  • core: bump idna from 3.6 to 3.7 by @dependabot in #9224
  • website/integrations: add pfSense search scope by @BeryJu in #9221
  • core, web: update translations by @authentik-automation in #9225
  • website: bump @types/react from 18.2.75 to 18.2.77 in /website by @dependabot in #9236
  • web: bump @sentry/browser from 7.109.0 to 7.110.0 in /web in the sentry group by @dependabot in #9234
  • core: bump ruff from 0.3.5 to 0.3.7 by @dependabot in #9233
  • core: bump pydantic from 2.6.4 to 2.7.0 by @dependabot in #9232
  • translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #9231
  • translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #9228
  • translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #9230
  • translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #9229
  • api: fix authentication schema by @BeryJu in #9238
  • website/integrations: portainer: Fix Redirect URL mismatch by @MisterrrX in #9226
  • web: bump API Client version by @authentik-automation in #9239
  • blueprints: only create default brand if no other default brand exists by @BeryJu in #9222
  • website/docs: ensure yaml code blocks have language tags by @BeryJu in #9240
  • web: manage stacked modals with a stack by @kensternberg-authentik in #9193
  • core: bump dnspython from 2.4.2 to 2.6.1 by @dependabot in #9242
  • core, web: update translations by @authentik-automation in #9243
  • providers/scim: allow custom user and group schemas by @BeryJu in #9255
  • web: bump the wdio group in /tests/wdio with 4 updates by @dependabot in #9265
  • web: bump the rollup group in /web with 3 updates by @dependabot in #9262
  • web: bump turnstile-types from 1.2.0 to 1.2.1 in /web by @dependabot in #9263
  • core: bump goauthentik.io/api/v3 from 3.2024022.8 to 3.2024022.9 by @dependabot in #9261
  • website: bump @types/react from 18.2.77 to 18.2.78 in /website by @dependabot in #9260
  • core: bump black from 24.3.0 to 24.4.0 by @dependabot in #9258
  • lib: cache gravatar connection status by @BeryJu in #9248
  • web: bump @codemirror/lang-html from 6.4.8 to 6.4.9 in /web by @dependabot in #9264
  • stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in #9268
  • web/admin: rework captcha stage by @BeryJu in #9256
  • core: optionally don't return groups' users and users' groups by default by @BeryJu in #9179
  • web: bump API Client version by @authentik-automation in #9269
  • core: delegated group member management by @BeryJu in #9254
  • sources: add SCIM source by @BeryJu in #3051
  • web: bump API Client version by @authentik-automation in #9270
  • website/docs: cleanup more by @BeryJu in #9249
  • root: fix geoipupdate arguments by @BeryJu in #9271
  • web/flows: fix passwordless hidden without input by @BeryJu in #9273
  • events: add indexes by @BeryJu in #9272
  • lifecycle: gunicorn: fix app preload by @rissson in #9274
  • core: bump sqlparse from 0.4.4 to 0.5.0 by @dependabot in #9276
  • core: bump goauthentik.io/api/v3 from 3.2024022.10 to 3.2024022.11 by @dependabot in #9285
  • website: bump @types/react from 18.2.78 to 18.2.79 in /website by @dependabot in #9286
  • web: bump @lit/context from 1.1.0 to 1.1.1 in /web by @dependabot in #9281
  • web: bump lit from 3.1.2 to 3.1.3 in /web by @dependabot in #9282
  • web: bump the rollup group in /web with 3 updates by @dependabot in #9280
  • core, web: update translations by @authentik-automation in #9277
  • web: bump @sentry/browser from 7.110.0 to 7.110.1 in /web in the sentry group by @dependabot in #9278
  • providers/oauth2: fix refresh_token grant returning incorrect id_token by @BeryJu in #9275
  • core: fix api schema for users and groups by @BeryJu in #9298
  • web: bump API Client version by @authentik-automation in #9299
  • web: restore sourcemaps by @kensternberg-authentik in #9300
  • translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #9296
  • translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #9294
  • translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #9295
  • translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #9293
  • events: fix incorrect user logged when using API token authentication by @BeryJu in #9302
  • web/flow: fix form input rendering issue by @BeryJu in #9297
  • core: replace authentik_signals_ignored_fields with audit_ignore by @BeryJu in #9291
  • translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #9303
  • translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #9304
  • web: fix locale loading being skipped by @Gunsmithy in #9301
  • web/flows: update flow background by @BeryJu in #9305
  • website/docs: system settings: add default token duration and length by @rissson in #9306
  • core, web: update translations by @authentik-automation in #9307
  • core: bump gunicorn from 21.2.0 to 22.0.0 by @dependabot in #9308
  • web: bump core-js from 3.36.1 to 3.37.0 in /web by @dependabot in #9309
  • core: bump goauthentik.io/api/v3 from 3.2024022.11 to 3.2024022.12 by @dependabot in #9311
  • core: bump github.com/go-ldap/ldap/v3 from 3.4.7 to 3.4.8 by @dependabot in #9310
  • website/docs: fix formatting for stage changes by @BeryJu in #9314
  • web/admin: fix log viewer empty state by @BeryJu in #9315
  • website/docs: 2024.2.3 release notes by @BeryJu in #9313
  • web: bump API Client version by @authentik-automation in #9316
  • sources/scim: cleanup service account when source is deleted by @BeryJu in #9319
  • web: bump the storybook group in /web with 8 updates by @dependabot in #9266
  • sources/scim: service account should be internal by @BeryJu in #9321
  • core: bump goauthentik.io/api/v3 from 3.2024022.12 to 3.2024023.1 by @dependabot in #9327
  • core: bump celery from 5.3.6 to 5.4.0 by @dependabot in #9325
  • web: bump @patternfly/elements from 3.0.0 to 3.0.1 in /web by @dependabot in #9324
  • core, web: update translations by @authentik-automation in #9323
  • website/docs: fix email template formatting by @Zapfmeister in #9330
  • website/docs: fix SECRET_KEY length by @strugee in #9328
  • stages/authenticator_webauthn: fix attestation value by @BeryJu in #9333
  • web: bump API Client version by @authentik-automation in #9334
  • web/admin: fix error in admin interface due to un-hydrated context by @BeryJu in #9336
  • root: make redis settings more consistent and allow TLS CA by @BeryJu in #9335
  • root: fix go.mod for codeql checking by @BeryJu in #9338
  • website/integrations: fix typo by @Code-Dreams in #9340
  • root: expose session storage configuration by @BeryJu in #9337
  • stages/prompt: fix username field throwing error with existing user by @BeryJu in #9342
  • core: bump aiohttp from 3.9.2 to 3.9.4 by @dependabot in #9339
  • web: fix locale prioritization scheme by @kensternberg-authentik in #9341
  • brands: add indexes to brand domain and default by @BeryJu in #9343
  • web/admin: fix user_write stage's user type input by @BeryJu in #9344
  • web: bump @sentry/browser from 7.110.1 to 7.111.0 in /web in the sentry group by @dependabot in #9349
  • core: bump ruff from 0.3.7 to 0.4.0 by @dependabot in #9347
  • core: bump twilio from 9.0.4 to 9.0.5 by @dependabot in #9346
  • web: bump chromedriver from 123.0.3 to 123.0.4 in /tests/wdio by @dependabot in #9348
  • core: bump goauthentik.io/api/v3 from 3.2024023.1 to 3.2024023.2 by @dependabot in #9345
  • core: bump golang.org/x/net from 0.22.0 to 0.23.0 by @dependabot in #9351
  • web/admin: group form dual select by @BeryJu in #9354
  • sources/ldap: fix default blueprint for mapping user DN to path by @BeryJu in #9355
  • website/docs: 2024.4 release notes by @BeryJu in #9267

New Contributors

Full Changelog: version/2024.2.3...version/2024.4.0-rc1

Don't miss a new authentik release

NewReleases is sending notifications on new releases.