See https://docs.goauthentik.io/docs/releases/2024.4
What's Changed
- ci: docker push: re-add timestamp image tag by @rissson in #8529
- ci: fix release pipeline by @BeryJu in #8530
- core, web: update translations by @authentik-automation in #8531
- web: fix save & reset behavior on System ➲ Settings page. by @kensternberg-authentik in #8528
- web: change "delete" verb to "remove" for one-to-many relationships by @kensternberg-authentik in #8535
- ci: fix release sentry step by @rissson in #8540
- web: bump the storybook group in /web with 8 updates by @dependabot in #8544
- web: bump chromedriver from 121.0.0 to 121.0.1 in /tests/wdio by @dependabot in #8545
- web: bump the wdio group in /tests/wdio with 2 updates by @dependabot in #8543
- web: bump the sentry group in /web with 1 update by @dependabot in #8542
- web: bump rollup from 4.10.0 to 4.11.0 in /web by @dependabot in #8546
- core: bump cryptography from 42.0.0 to 42.0.2 by @dependabot in #8553
- website: bump undici from 5.27.2 to 5.28.3 in /website by @dependabot in #8550
- core: bump github.com/redis/go-redis/v9 from 9.4.0 to 9.5.0 by @dependabot in #8567
- web: bump rollup from 4.11.0 to 4.12.0 in /web by @dependabot in #8566
- web: bump the storybook group in /web with 1 update by @dependabot in #8565
- web: bump chromedriver from 121.0.1 to 121.0.2 in /tests/wdio by @dependabot in #8564
- website: bump react-tooltip from 5.26.2 to 5.26.3 in /website by @dependabot in #8562
- website: bump @types/react from 18.2.55 to 18.2.56 in /website by @dependabot in #8561
- web: bump the wdio group in /tests/wdio with 4 updates by @dependabot in #8563
- web/flows: improve authenticator styling by @BeryJu in #8560
- root: fix app settings load order by @BeryJu in #8569
- ci: main: use correct previous version by @rissson in #8539
- Revert "core: bump github.com/redis/go-redis/v9 from 9.4.0 to 9.5.0 (… by @BeryJu in #8573
- core: bump twilio from 8.12.0 to 8.13.0 by @dependabot in #8525
- core: bump black from 24.1.1 to 24.2.0 by @dependabot in #8524
- web: bump core-js from 3.35.1 to 3.36.0 in /web by @dependabot in #8523
- core, web: update translations by @authentik-automation in #8574
- website/docs: kubernetes installation: update values by @rissson in #8575
- website/docs: edited Docs about tenants by @tanberry in #8549
- website/docs: remove outdated info by @tanberry in #8552
- providers/oauth2: improve conformance with client_credentials standard by @BeryJu in #8471
- website/docs: remove tenants docs from sidebar for now by @tanberry in #8551
- website/docs: edit RN to remove tenants by @tanberry in #8578
- translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #8582
- translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #8581
- translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #8590
- website: bump @types/react from 18.2.56 to 18.2.57 in /website by @dependabot in #8589
- core: bump ruff from 0.2.1 to 0.2.2 by @dependabot in #8588
- core: bump github.com/jellydator/ttlcache/v3 from 3.1.1 to 3.2.0 by @dependabot in #8587
- web: bump the eslint group in /web with 2 updates by @dependabot in #8583
- web: bump the esbuild group in /web with 2 updates by @dependabot in #8584
- web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #8585
- rbac: fix permission decorator for global permissions by @BeryJu in #8591
- web: spell customization with a Z by @fheisler in #8596
- web/flows: fix webauthn retry by @BeryJu in #8599
- web: bump @codemirror/lang-javascript from 6.2.1 to 6.2.2 in /web by @dependabot in #8615
- web: bump @open-wc/lit-helpers from 0.6.0 to 0.7.0 in /web by @dependabot in #8614
- web: bump the storybook group in /web with 8 updates by @dependabot in #8613
- web: bump the sentry group in /web with 1 update by @dependabot in #8612
- core: bump github.com/redis/go-redis/v9 from 9.4.0 to 9.5.1 by @dependabot in #8611
- web: bump the wdio group in /tests/wdio with 3 updates by @dependabot in #8610
- web: bump ip from 1.1.8 to 1.1.9 in /tests/wdio by @dependabot in #8608
- core: bump cbor2 from 5.5.1 to 5.6.2 by @dependabot in #8607
- core, web: update translations by @authentik-automation in #8606
- translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #8609
- web: bump API Client version by @authentik-automation in #8617
- website/blog: Blog about release 2024.2 by @tanberry in #8580
- website/docs: fix link to helm chart release notes by @BeryJu in #8624
- stages/authenticator_validate: fix error with get_webauthn_challenge_without_user by @BeryJu in #8625
- website/docs: added a new template for "combo" topics by @tanberry in #8595
- fix version by @tanberry in #8630
- core: bump goauthentik.io/api/v3 from 3.2023107.2 to 3.2024020.1 by @dependabot in #8635
- core: bump cryptography from 42.0.2 to 42.0.4 by @dependabot in #8629
- brands: fix context processor when request doesn't have a tenant by @BeryJu in #8643
- ci: fix missing tags from release by @BeryJu in #8645
- events: sanitize args and kwargs saved in system tasks by @BeryJu in #8644
- website/docs: prepare 2024.2.1 release notes by @BeryJu in #8649
- website/blog: add draft for blog about fletcher joining by @tanberry in #8634
- web: bump API Client version by @authentik-automation in #8654
- website/blog: fix image so it displays in twitter post by @tanberry in #8656
- core: rework recovery API to return better error messages by @BeryJu in #8655
- web: bump API Client version by @authentik-automation in #8658
- website/blog: Blog try again by @tanberry in #8659
- web: bump the sentry group in /web with 1 update by @dependabot in #8665
- core: bump selenium from 4.17.2 to 4.18.1 by @dependabot in #8664
- core: bump pytest from 8.0.0 to 8.0.1 by @dependabot in #8663
- web: bump chromedriver from 121.0.2 to 122.0.3 in /tests/wdio by @dependabot in #8662
- core: bump goauthentik.io/api/v3 from 3.2024020.1 to 3.2024021.2 by @dependabot in #8661
- translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #8622
- blueprints: use reconcile decorator instead of relying on function name prefix by @BeryJu in #8483
- translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #8621
- website: test frontmatter image by @BeryJu in #8671
- website/docs: 2024.2: update comment about upgrading to mention breaking changes by @rissson in #8667
- website/integrations: multiple integration edits by @ZuluWhiskey in #7923
- root: early spring clean for linting by @BeryJu in #8498
- root: fix config loading after refactor during ruff migration by @BeryJu in #8674
- core, web: update translations by @authentik-automation in #8672
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #8679
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #8678
- providers/oauth2: fix inconsistent
sub
value when setting via mapping by @BeryJu in #8677 - core: bump coverage from 7.4.1 to 7.4.3 by @dependabot in #8694
- core: bump sentry-sdk from 1.40.4 to 1.40.5 by @dependabot in #8692
- web: bump the eslint group in /tests/wdio with 1 update by @dependabot in #8691
- website: bump @types/react from 18.2.57 to 18.2.58 in /website by @dependabot in #8690
- core: bump pytest from 8.0.1 to 8.0.2 by @dependabot in #8693
- web: bump the eslint group in /web with 1 update by @dependabot in #8688
- web: bump yaml from 2.3.4 to 2.4.0 in /web by @dependabot in #8689
- web: bump the sentry group in /web with 1 update by @dependabot in #8687
- core: fix blueprint export by @BeryJu in #8695
- enterprise: fix read_only activating when no license is installed by @BeryJu in #8697
- website: add solve gitea group does not take effect by @yidaqiang in #8413
- website/docs: Add documentation for Glitchtip by @Daniel15 in #8182
- Add missing commas, correction of spelling errors by @patsevanton in #8680
- web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #8702
- web: bump the eslint group in /web with 2 updates by @dependabot in #8701
- core, web: update translations by @authentik-automation in #8700
- translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #8709
- website: split by @BeryJu in #8616
- website: fix links in navbar opening in new tab by @BeryJu in #8713
- translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #8706
- translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #8705
- website/integrations: add documentation for OIDC setup with Paperless-ngx by @girlpunk in #8538
- translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #8710
- ci: do not push docker image if fork by @rissson in #8724
- enterprise: force license usage update after change to license by @BeryJu in #8723
- website/docs: s3: fix environment variables by @rissson in #8722
- root: fix container build by @BeryJu in #8727
- core: bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0 by @dependabot in #8720
- core: bump github.com/go-openapi/strfmt from 0.22.0 to 0.22.1 by @dependabot in #8719
- web: bump style-mod from 4.1.0 to 4.1.1 in /web by @dependabot in #8718
- web: bump the sentry group in /web with 1 update by @dependabot in #8717
- core: bump sentry-sdk from 1.40.5 to 1.40.6 by @dependabot in #8716
- core: bump pydantic from 2.6.1 to 2.6.3 by @dependabot in #8715
- website: bump @types/react from 18.2.58 to 18.2.60 in /website by @dependabot in #8714
- website: post-split cleanup by @BeryJu in #8729
- ci: fix missing DOCKER_USERNAME secret by @BeryJu in #8730
- providers/oauth2: fix offline_access requests when prompt doesn't include consent by @BeryJu in #8731
- website/docs: s3: fix migration docs by @rissson in #8735
- stages/authenticator_webauthn: fix error when enrolling new device by @BeryJu in #8738
- ci: fix missing output on composite action by @BeryJu in #8741
- core, web: update translations by @authentik-automation in #8743
- web: bump chromedriver from 122.0.3 to 122.0.4 in /tests/wdio by @dependabot in #8747
- web: bump chart.js from 4.4.1 to 4.4.2 in /web by @dependabot in #8746
- web: bump @types/grecaptcha from 3.0.7 to 3.0.8 in /web by @dependabot in #8745
- web: bump the babel group in /web with 4 updates by @dependabot in #8744
- sources/oauth: add gitlab type [AUTH-323] by @smusali in #8195
- web: bump API Client version by @authentik-automation in #8753
- website: redirect root to /docs by @BeryJu in #8754
- web/admin: don't mark property mappings as required anywhere by @BeryJu in #8752
- website/docs: move Applications docs up a level, other edits by @tanberry in #8712
- web/admin: don't mark remaining property mappings as required by @rissson in #8772
- core, web: update translations by @authentik-automation in #8759
- translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #8774
- core: bump twilio from 8.13.0 to 9.0.0 by @dependabot in #8767
- core: bump ruff from 0.2.2 to 0.3.0 by @dependabot in #8766
- core: bump goauthentik.io/api/v3 from 3.2024021.2 to 3.2024021.3 by @dependabot in #8765
- website: bump @types/react from 18.2.60 to 18.2.61 in /website by @dependabot in #8764
- web: bump style-mod from 4.1.1 to 4.1.2 in /web by @dependabot in #8763
- web: bump the sentry group in /web with 1 update by @dependabot in #8762
- root: ensure consistent install_id by @BeryJu in #8775
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #8779
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #8778
- core: bump twisted from 23.10.0 to 24.3.0 by @dependabot in #8788
- core: bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #8790
- web: bump the wdio group in /tests/wdio with 4 updates by @dependabot in #8789
- website/docs: installation: kubernetes: fix values by @rissson in #8783
- web: clean up UserInterface in prep for OAuth and Silo Projects by @kensternberg-authentik in #8278
- providers/oauth2: fix validation ordering by @BeryJu in #8793
- flows: fix mismatched redirect behaviour for invalid and valid flows by @BeryJu in #8794
- website/docs: prepare 2024.2.2 release notes by @BeryJu in #8782
- web: bump API Client version by @authentik-automation in #8797
- website/integrations: fix typo in proxmox docs by @wdhdev in #8791
- web: bump the eslint group in /web with 2 updates by @dependabot in #8807
- web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #8806
- website: bump @types/react from 18.2.61 to 18.2.62 in /website by @dependabot in #8805
- core: bump github.com/go-openapi/runtime from 0.27.1 to 0.27.2 by @dependabot in #8804
- core: bump golang.org/x/oauth2 from 0.17.0 to 0.18.0 by @dependabot in #8803
- core: bump goauthentik.io/api/v3 from 3.2024021.3 to 3.2024022.1 by @dependabot in #8802
- core, web: update translations by @authentik-automation in #8800
- core: bump github.com/go-openapi/strfmt from 0.22.1 to 0.22.2 by @dependabot in #8801
- core: bump django from 5.0.2 to 5.0.3 by @dependabot in #8808
- website: fix missing compose file by @BeryJu in #8809
- enterprise: only check for valid license existing for creating Enterprise objects by @BeryJu in #8813
- core: bump golang from 1.22.0-bookworm to 1.22.1-bookworm by @dependabot in #8820
- web: bump mermaid from 10.8.0 to 10.9.0 in /web by @dependabot in #8818
- website: bump @types/react from 18.2.62 to 18.2.63 in /website by @dependabot in #8817
- core: bump github.com/sethvargo/go-envconfig from 1.0.0 to 1.0.1 by @dependabot in #8819
- stages/email: Disable autoescape for text templates by @Chasethechicken in #8812
- enterprise: use tenant uuid instead of install_id when tenants are enabled by @BeryJu in #8823
- website/integrations: Add description for custom enrollment to azure ad by @tograss in #8392
- website: bump @types/react from 18.2.63 to 18.2.64 in /website by @dependabot in #8831
- website: bump typescript from 5.3.3 to 5.4.2 in /website by @dependabot in #8830
- web: bump typescript from 5.3.3 to 5.4.2 in /tests/wdio by @dependabot in #8832
- tests: fix e2e flow tests by @BeryJu in #8835
- website: fix bundled website build by @BeryJu in #8836
- web: replace rollup with esbuild by @kensternberg-authentik in #8699
- web: bump yaml from 2.4.0 to 2.4.1 in /web by @dependabot in #8829
- web: bump typescript from 5.3.3 to 5.4.2 in /web by @dependabot in #8827
- web: bump @codemirror/lang-xml from 6.0.2 to 6.1.0 in /web by @dependabot in #8826
- web: fix build script timing and clearing by @BeryJu in #8837
- core: bump importlib-metadata from 7.0.1 to 7.0.2 by @dependabot in #8845
- core: bump ruff from 0.3.0 to 0.3.1 by @dependabot in #8844
- core: bump sentry-sdk from 1.40.6 to 1.41.0 by @dependabot in #8843
- website: bump redocusaurus from 2.0.1 to 2.0.2 in /website by @dependabot in #8842
- web: bump the wdio group in /tests/wdio with 3 updates by @dependabot in #8841
- web: bump @rollup/rollup-linux-arm64-gnu from 4.12.0 to 4.12.1 in /web by @dependabot in #8848
- stages/email: fix issue when sending emails to users with same display as email by @BeryJu in #8850
- core: bump pytest-timeout from 2.2.0 to 2.3.1 by @dependabot in #8855
- web: bump the rollup group in /web with 2 updates by @dependabot in #8854
- web: bump the sentry group in /web with 1 update by @dependabot in #8853
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #8811
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #8810
- core: bump django-filter from 23.5 to 24.1 by @dependabot in #8874
- core: bump uvicorn from 0.27.1 to 0.28.0 by @dependabot in #8872
- core: bump requests-oauthlib from 1.3.1 to 1.4.0 by @dependabot in #8866
- web: bump the wdio group in /tests/wdio with 3 updates by @dependabot in #8865
- core: bump ruff from 0.3.1 to 0.3.2 by @dependabot in #8873
- core: bump packaging from 23.2 to 24.0 by @dependabot in #8871
- core: bump bandit from 1.7.7 to 1.7.8 by @dependabot in #8870
- core: bump github.com/go-openapi/strfmt from 0.22.2 to 0.23.0 by @dependabot in #8869
- core: bump pytest from 8.0.2 to 8.1.1 by @dependabot in #8868
- core: bump github.com/go-openapi/runtime from 0.27.2 to 0.28.0 by @dependabot in #8867
- tenants: really ensure default tenant cannot be deleted by @rissson in #8875
- web: fix esbuild issue with style sheets by @kensternberg-authentik in #8856
- web: upgrade to lit 3 by @kensternberg-authentik in #8781
- website: bump @types/react from 18.2.64 to 18.2.65 in /website by @dependabot in #8886
- web: bump the eslint group in /web with 2 updates by @dependabot in #8885
- web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #8883
- web: bump chromedriver from 122.0.4 to 122.0.5 in /tests/wdio by @dependabot in #8884
- web: bump the sentry group in /web with 1 update by @dependabot in #8881
- website/docs: new landing page for Providers by @tanberry in #8879
- Update _envoy_istio.md by @valkenburg-prevue-ch in #8888
- core: bump twilio from 9.0.0 to 9.0.1 by @dependabot in #8893
- core: bump pydantic from 2.6.3 to 2.6.4 by @dependabot in #8892
- web: bump the rollup group in /web with 3 updates by @dependabot in #8891
- api: capabilities: properly set can_save_media when s3 is enabled by @rissson in #8896
- web: provide InstallID on EnterpriseListPage by @kensternberg-authentik in #8898
- core: bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by @dependabot in #8901
- web: bump vite-tsconfig-paths from 4.3.1 to 4.3.2 in /web by @dependabot in #8903
- web: bump chromedriver from 122.0.5 to 122.0.6 in /tests/wdio by @dependabot in #8902
- web/admin: fix markdown table rendering by @kensternberg-authentik in #8908
- web: clean up and remove redundant alias '@goauthentik/app' by @kensternberg-authentik in #8889
- stages: source stage by @BeryJu in #8330
- web: bump API Client version by @authentik-automation in #8910
- enterprise/rac: fix connection token management by @BeryJu in #8909
- web: bump follow-redirects from 1.15.5 to 1.15.6 in /tests/wdio by @dependabot in #8913
- web: bump follow-redirects from 1.15.5 to 1.15.6 in /web by @dependabot in #8914
- website: bump follow-redirects from 1.15.4 to 1.15.6 in /website by @dependabot in #8911
- web: bump esbuild from 0.20.1 to 0.20.2 in /web by @dependabot in #8924
- web: bump the sentry group in /web with 1 update by @dependabot in #8922
- website: bump @types/react from 18.2.65 to 18.2.66 in /website by @dependabot in #8921
- core: bump goauthentik.io/api/v3 from 3.2024022.1 to 3.2024022.2 by @dependabot in #8920
- core: bump sentry-sdk from 1.41.0 to 1.42.0 by @dependabot in #8919
- core: bump urllib3 from 1.26.18 to 2.2.1 by @dependabot in #8918
- core: bump coverage from 7.4.3 to 7.4.4 by @dependabot in #8917
- admin: Handle latest version unknown in admin dashboard by @RoboMagus in #8858
- website/docs: update example ldapsearch commands by @Trident101 in #8906
- stages/user_write: ensure user data is json-serializable by @BeryJu in #8926
- outpost: improved set secret answers for flow execution by @sirux88 in #8013
- web: bump API Client version by @authentik-automation in #8927
- website/docs: add link to CRUD docs by @tanberry in #8925
- outposts: Enhance config options for k8s outposts by @PKizzle in #7363
- website/docs: add new name "Microsft Entra ID" for Azure AD by @tanberry in #8930
- core: bump goauthentik.io/api/v3 from 3.2024022.2 to 3.2024022.3 by @dependabot in #8946
- ci: always run ci-main on branch pushes by @rissson in #8950
- events: discard notification if user has empty email by @BeryJu in #8938
- core: bump ruff from 0.3.2 to 0.3.3 by @dependabot in #8943
- core: bump twilio from 9.0.1 to 9.0.2 by @dependabot in #8942
- website: bump postcss from 8.4.35 to 8.4.36 in /website by @dependabot in #8940
- web: bump the sentry group in /web with 1 update by @dependabot in #8941
- web: bump the wdio group in /tests/wdio with 2 updates by @dependabot in #8939
- core: bump black from 24.2.0 to 24.3.0 by @dependabot in #8945
- root: support redis username by @BeryJu in #8935
- web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #8963
- website: bump @types/react from 18.2.66 to 18.2.67 in /website by @dependabot in #8962
- web: bump core-js from 3.36.0 to 3.36.1 in /web by @dependabot in #8960
- web: bump the eslint group in /web with 2 updates by @dependabot in #8959
- core: cache user application list under policies by @BeryJu in #8895
- outposts/proxy: Fix invalid redirect on external hosts containing path components by @GermanCoding in #8915
- web: improve build speeds even moar!!!!!! by @kensternberg-authentik in #8954
- website/integrations: portainer: match portainer settings order by @MaxPelly in #8974
- internal: cleanup static file serving setup code by @BeryJu in #8965
- website: bump postcss from 8.4.36 to 8.4.37 in /website by @dependabot in #8967
- core: bump uvicorn from 0.28.0 to 0.28.1 by @dependabot in #8968
- web: bump the babel group in /web with 7 updates by @dependabot in #8969
- web: bump country-flag-icons from 1.5.9 to 1.5.10 in /web by @dependabot in #8970
- web: bump @types/grecaptcha from 3.0.8 to 3.0.9 in /web by @dependabot in #8971
- website/docs: config: remove options moved to tenants by @rissson in #8976
- website: bump postcss from 8.4.37 to 8.4.38 in /website by @dependabot in #8988
- web: bump the wdio group in /tests/wdio with 3 updates by @dependabot in #8985
- core: bump importlib-metadata from 7.0.2 to 7.1.0 by @dependabot in #8982
- website: bump typescript from 5.4.2 to 5.4.3 in /website by @dependabot in #8989
- web: bump chromedriver from 122.0.6 to 123.0.0 in /tests/wdio by @dependabot in #8987
- web: bump typescript from 5.4.2 to 5.4.3 in /tests/wdio by @dependabot in #8986
- web: bump typescript from 5.4.2 to 5.4.3 in /web by @dependabot in #8984
- web: bump the babel group in /web with 3 updates by @dependabot in #8983
- core: bump sentry-sdk from 1.42.0 to 1.43.0 by @dependabot in #8981
- core: bump uvicorn from 0.28.1 to 0.29.0 by @dependabot in #8980
- web/admin: remove enterprise preview banner by @BeryJu in #8991
- website/docs: add example policy to enforce unique email address by @BeryJu in #8955
- website/deverlop-docs website/integrations: add links to integrations template by @tanberry in #8995
- website/docs: improve flow inspector docs by @BeryJu in #8993
- website/docs: Upgrade nginx reverse porxy config by @vnwnv in #8947
- core: bump ruff from 0.3.3 to 0.3.4 by @dependabot in #8998
- website: bump webpack-dev-middleware from 5.3.3 to 5.3.4 in /website by @dependabot in #9001
- web/admin: small fixes by @BeryJu in #9002
- web: bump the sentry group in /web with 2 updates by @dependabot in #9017
- core: bump requests-oauthlib from 1.4.0 to 2.0.0 by @dependabot in #9018
- website: bump @types/react from 18.2.67 to 18.2.69 in /website by @dependabot in #9016
- web/flow: general ux improvements by @roney492 in #8558
- website/integrations: Update nextcloud Admin Group Expression by @smdion in #7314
- lifecycle: migrate: ensure template schema exists before migrating by @rissson in #8952
- web: bump API Client version by @authentik-automation in #9020
- sources/ldap: add ability to disable password write on login by @rissson in #8377
- web: bump API Client version by @authentik-automation in #9021
- website/docs: include OS-specific docker-compose install instructions + minor fixes by @fheisler in #8975
- translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #9023
- web: bump katex from 0.16.9 to 0.16.10 in /web by @dependabot in #9025
- web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #9033
- website: bump @types/react from 18.2.69 to 18.2.70 in /website by @dependabot in #9032
- core: bump goauthentik.io/api/v3 from 3.2024022.3 to 3.2024022.5 by @dependabot in #9031
- web: bump the eslint group in /web with 2 updates by @dependabot in #9030
- web: bump express from 4.18.3 to 4.19.2 in /web by @dependabot in #9028
- website: bump express from 4.18.2 to 4.19.2 in /website by @dependabot in #9027
- core: bump duo-client from 5.2.0 to 5.3.0 by @dependabot in #9029
- website/docs: maintenance, re-add system settings by @BeryJu in #9026
- web: bump API Client version by @authentik-automation in #9035
- web: fix markdown rendering bug for alerts by @kensternberg-authentik in #9037
- core: bump goauthentik.io/api/v3 from 3.2024022.5 to 3.2024022.6 by @dependabot in #9042
- website: bump @types/react from 18.2.70 to 18.2.72 in /website by @dependabot in #9041
- website/integrations: add documentation for OIDC setup with Xen Orchestra by @pgumpoldsberger in #9000
- web: a few minor bugfixes and lintfixes by @kensternberg-authentik in #9044
- website/integrations: wekan: fix properties by @falkheiland in #9047
- web: bump chromedriver from 123.0.0 to 123.0.1 in /tests/wdio by @dependabot in #9058
- core: bump selenium from 4.18.1 to 4.19.0 by @dependabot in #9057
- core: bump requests-mock from 1.11.0 to 1.12.0 by @dependabot in #9056
- core: bump django-filter from 24.1 to 24.2 by @dependabot in #9055
- web: bump the rollup group in /web with 3 updates by @dependabot in #9053
- website: bump @types/react from 18.2.72 to 18.2.73 in /website by @dependabot in #9052
- website/docs: update airgapped config by @BeryJu in #9049
- events: rework log messages returned from API and their rendering by @BeryJu in #8770
- web: bump API Client version by @authentik-automation in #9061
- core: bump requests-mock from 1.12.0 to 1.12.1 by @dependabot in #9072
- core: bump sentry-sdk from 1.43.0 to 1.44.0 by @dependabot in #9073
- core: bump webauthn from 2.0.0 to 2.1.0 by @dependabot in #9070
- web: bump the eslint group in /tests/wdio with 1 update by @dependabot in #9071
- web: bump the rollup group in /web with 3 updates by @dependabot in #9067
- web: bump glob from 10.3.10 to 10.3.12 in /web by @dependabot in #9069
- web: bump the eslint group in /web with 1 update by @dependabot in #9066
- web: bump @codemirror/lang-python from 6.1.4 to 6.1.5 in /web by @dependabot in #9068
- core: bump goauthentik.io/api/v3 from 3.2024022.6 to 3.2024022.7 by @dependabot in #9064
- web: bump the sentry group in /web with 2 updates by @dependabot in #9065
- events: fix log_capture by @BeryJu in #9075
- website/docs: fix transports example by @Mrs-Feathers in #9074
- providers/oauth2: fix interactive device flow by @BeryJu in #9076
- web: consistent style declarations internally by @kensternberg-authentik in #9077
- web: maintenance: split tsconfig into “base” and “build” variants. by @kensternberg-authentik in #9036
- web: move context controllers into reactive controller plugins by @kensternberg-authentik in #8996
- web/admin: allow custom sorting for bound* tables by @BeryJu in #9080
- website: bump the docusaurus group in /website with 9 updates by @dependabot in #9087
- web: bump ts-pattern from 5.0.8 to 5.1.0 in /web by @dependabot in #9090
- web: bump @patternfly/elements from 2.4.0 to 3.0.0 in /web by @dependabot in #9089
- website/docs: email stage: fix example translation error by @schnadoslin in #9048
- website/docs: fix typo by @Iamanaws in #9082
- website/integrations: add outline knowledge base by @fallenhitokiri in #8786
- web: fix broken locale compile by @BeryJu in #9095
- website/docs: update notes on SECRET_KEY by @pidi3000 in #9091
- core: bump ruff from 0.3.4 to 0.3.5 by @dependabot in #9102
- core: bump django-model-utils from 4.4.0 to 4.5.0 by @dependabot in #9101
- core: bump drf-spectacular from 0.27.1 to 0.27.2 by @dependabot in #9100
- web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #9099
- core: bump twilio from 9.0.2 to 9.0.3 by @dependabot in #9103
- web: bump the eslint group in /web with 2 updates by @dependabot in #9098
- web: fix console log leftover by @BeryJu in #9096
- root: move database calls from ready() to dedicated startup signal by @BeryJu in #9081
- root: fix missing imports after #9081 by @BeryJu in #9106
- website/integrations: Update OPNsense LDAP instructions by @Meliox in #9014
- website: Bump @types/react from 18.2.73 to 18.2.74 in /website by @dependabot in #9115
- web: Bump @fortawesome/fontawesome-free from 6.5.1 to 6.5.2 in /web by @dependabot in #9116
- translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #9112
- translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #9111
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #9109
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #9110
- web: Bump the rollup group in /web with 3 updates by @dependabot in #9128
- core: Bump django from 5.0.3 to 5.0.4 by @dependabot in #9132
- core: Bump channels from 4.0.0 to 4.1.0 by @dependabot in #9131
- core: Bump sentry-sdk from 1.44.0 to 1.44.1 by @dependabot in #9130
- web: Bump the eslint group in /tests/wdio with 1 update by @dependabot in #9129
- web: Bump the eslint group in /web with 1 update by @dependabot in #9127
- web: Bump the babel group in /web with 2 updates by @dependabot in #9126
- core: Bump golang from 1.22.1-bookworm to 1.22.2-bookworm by @dependabot in #9125
- core, web: update translations by @authentik-automation in #9124
- web: Bump vite from 5.1.4 to 5.2.8 in /web by @dependabot in #9120
- root: generate python client by @BeryJu in #9107
- ci: fix python client generator by @BeryJu in #9134
- web: bump API Client version by @authentik-automation in #9133
- website/docs: add procedural docs for RAC by @tanberry in #9006
- blueprints: fix default username field in user-settings flow by @BeryJu in #9136
- blueprints: fix schema generation for PrimaryKeyRelated fields with non-int PK by @BeryJu in #9140
- web: Bump typescript from 5.4.3 to 5.4.4 in /tests/wdio by @dependabot in #9148
- core: Bump golang.org/x/sync from 0.6.0 to 0.7.0 by @dependabot in #9147
- website: Bump typescript from 5.4.3 to 5.4.4 in /website by @dependabot in #9150
- website: Bump the docusaurus group in /website with 9 updates by @dependabot in #9149
- web: Bump typescript from 5.4.3 to 5.4.4 in /web by @dependabot in #9145
- web: Bump country-flag-icons from 1.5.10 to 1.5.11 in /web by @dependabot in #9144
- core: Bump twilio from 9.0.3 to 9.0.4 by @dependabot in #9143
- core: Bump golang.org/x/oauth2 from 0.18.0 to 0.19.0 by @dependabot in #9146
- root: fix startup by @BeryJu in #9151
- web: ak-checkbox-group for short, static, multi-select events by @kensternberg-authentik in #9138
- root: fix redis username in lifecycle by @orzFly in #9158
- core, web: update translations by @authentik-automation in #9156
- core: bump github.com/go-ldap/ldap/v3 from 3.4.6 to 3.4.7 by @dependabot in #9168
- web: bump ts-pattern from 5.1.0 to 5.1.1 in /web by @dependabot in #9167
- web: bump @codemirror/legacy-modes from 6.3.3 to 6.4.0 in /web by @dependabot in #9166
- web: bump the rollup group in /web with 3 updates by @dependabot in #9164
- translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #9171
- translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #9170
- website/integrations: Update Nextcloud OIDC secret size limitation by @Fymyte in #9139
- stages/authenticator_webauthn: add MDS support by @BeryJu in #9114
- web: bump API Client version by @authentik-automation in #9174
- web: bump @spotlightjs/spotlight from 1.2.16 to 1.2.17 in /web in the sentry group by @dependabot in #9162
- enterprise: fix audit middleware import by @BeryJu in #9177
- root: fix readme by @BeryJu in #9178
- web: fix application library list display length and capability by @kensternberg-authentik in #9094
- events: add context manager to ignore/modify audit events being written by @BeryJu in #9181
- core: bump maxmind/geoipupdate from v6.1 to v7.0 by @dependabot in #9186
- website/docs: update Postgresql username by @pgumpoldsberger in #9190
- website: bump @types/react from 18.2.74 to 18.2.75 in /website by @dependabot in #9185
- web: bump chromedriver from 123.0.1 to 123.0.2 in /tests/wdio by @dependabot in #9188
- core, web: update translations by @authentik-automation in #9183
- web/admin: fix SAML Provider preview by @BeryJu in #9192
- sources/oauth: make URLs not required, only check when no OIDC URLs are defined by @BeryJu in #9182
- web: bump API Client version by @authentik-automation in #9195
- web: preserve selected list when provider updates by @kensternberg-authentik in #9200
- translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #9198
- translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #9196
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #9197
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #9194
- website/docs: add note for flow compatibility mode by @BeryJu in #9204
- core: bump python from 3.12.2-slim-bookworm to 3.12.3-slim-bookworm by @dependabot in #9211
- website: bump typescript from 5.4.4 to 5.4.5 in /website by @dependabot in #9210
- web: bump typescript from 5.4.4 to 5.4.5 in /web by @dependabot in #9209
- core: bump sentry-sdk from 1.44.1 to 1.45.0 by @dependabot in #9208
- web: bump chromedriver from 123.0.2 to 123.0.3 in /tests/wdio by @dependabot in #9207
- web: bump typescript from 5.4.4 to 5.4.5 in /tests/wdio by @dependabot in #9206
- core, web: update translations by @authentik-automation in #9205
- core: add user settable token durations by @jmdilly in #7410
- web: bump API Client version by @authentik-automation in #9213
- stages/authenticator_validate: add ability to limit webauthn device types by @BeryJu in #9180
- web: bump API Client version by @authentik-automation in #9214
- core: bump goauthentik.io/api/v3 from 3.2024022.7 to 3.2024022.8 by @dependabot in #9215
- website/docs: add more info and links about enforciing unique email addresses by @tanberry in #9154
- website/integrations: Jenkins, fix bolding by @tanberry in #9217
- website/integrations: nextcloud: add tip to solve hashed groups configuring OAuth2 by @lucaam in #9153
- internal: add tests to go flow executor by @BeryJu in #9219
- website/docs: add websocket support to nginx snippets by @BeryJu in #9220
- core: bump idna from 3.6 to 3.7 by @dependabot in #9224
- website/integrations: add pfSense search scope by @BeryJu in #9221
- core, web: update translations by @authentik-automation in #9225
- website: bump @types/react from 18.2.75 to 18.2.77 in /website by @dependabot in #9236
- web: bump @sentry/browser from 7.109.0 to 7.110.0 in /web in the sentry group by @dependabot in #9234
- core: bump ruff from 0.3.5 to 0.3.7 by @dependabot in #9233
- core: bump pydantic from 2.6.4 to 2.7.0 by @dependabot in #9232
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #9231
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #9228
- translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #9230
- translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #9229
- api: fix authentication schema by @BeryJu in #9238
- website/integrations: portainer: Fix Redirect URL mismatch by @MisterrrX in #9226
- web: bump API Client version by @authentik-automation in #9239
- blueprints: only create default brand if no other default brand exists by @BeryJu in #9222
- website/docs: ensure yaml code blocks have language tags by @BeryJu in #9240
- web: manage stacked modals with a stack by @kensternberg-authentik in #9193
- core: bump dnspython from 2.4.2 to 2.6.1 by @dependabot in #9242
- core, web: update translations by @authentik-automation in #9243
- providers/scim: allow custom user and group schemas by @BeryJu in #9255
- web: bump the wdio group in /tests/wdio with 4 updates by @dependabot in #9265
- web: bump the rollup group in /web with 3 updates by @dependabot in #9262
- web: bump turnstile-types from 1.2.0 to 1.2.1 in /web by @dependabot in #9263
- core: bump goauthentik.io/api/v3 from 3.2024022.8 to 3.2024022.9 by @dependabot in #9261
- website: bump @types/react from 18.2.77 to 18.2.78 in /website by @dependabot in #9260
- core: bump black from 24.3.0 to 24.4.0 by @dependabot in #9258
- lib: cache gravatar connection status by @BeryJu in #9248
- web: bump @codemirror/lang-html from 6.4.8 to 6.4.9 in /web by @dependabot in #9264
- stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in #9268
- web/admin: rework captcha stage by @BeryJu in #9256
- core: optionally don't return groups' users and users' groups by default by @BeryJu in #9179
- web: bump API Client version by @authentik-automation in #9269
- core: delegated group member management by @BeryJu in #9254
- sources: add SCIM source by @BeryJu in #3051
- web: bump API Client version by @authentik-automation in #9270
- website/docs: cleanup more by @BeryJu in #9249
- root: fix geoipupdate arguments by @BeryJu in #9271
- web/flows: fix passwordless hidden without input by @BeryJu in #9273
- events: add indexes by @BeryJu in #9272
- lifecycle: gunicorn: fix app preload by @rissson in #9274
- core: bump sqlparse from 0.4.4 to 0.5.0 by @dependabot in #9276
- core: bump goauthentik.io/api/v3 from 3.2024022.10 to 3.2024022.11 by @dependabot in #9285
- website: bump @types/react from 18.2.78 to 18.2.79 in /website by @dependabot in #9286
- web: bump @lit/context from 1.1.0 to 1.1.1 in /web by @dependabot in #9281
- web: bump lit from 3.1.2 to 3.1.3 in /web by @dependabot in #9282
- web: bump the rollup group in /web with 3 updates by @dependabot in #9280
- core, web: update translations by @authentik-automation in #9277
- web: bump @sentry/browser from 7.110.0 to 7.110.1 in /web in the sentry group by @dependabot in #9278
- providers/oauth2: fix refresh_token grant returning incorrect id_token by @BeryJu in #9275
- core: fix api schema for users and groups by @BeryJu in #9298
- web: bump API Client version by @authentik-automation in #9299
- web: restore sourcemaps by @kensternberg-authentik in #9300
- translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #9296
- translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #9294
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #9295
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #9293
- events: fix incorrect user logged when using API token authentication by @BeryJu in #9302
- web/flow: fix form input rendering issue by @BeryJu in #9297
- core: replace authentik_signals_ignored_fields with audit_ignore by @BeryJu in #9291
- translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #9303
- translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #9304
- web: fix locale loading being skipped by @Gunsmithy in #9301
- web/flows: update flow background by @BeryJu in #9305
- website/docs: system settings: add default token duration and length by @rissson in #9306
- core, web: update translations by @authentik-automation in #9307
- core: bump gunicorn from 21.2.0 to 22.0.0 by @dependabot in #9308
- web: bump core-js from 3.36.1 to 3.37.0 in /web by @dependabot in #9309
- core: bump goauthentik.io/api/v3 from 3.2024022.11 to 3.2024022.12 by @dependabot in #9311
- core: bump github.com/go-ldap/ldap/v3 from 3.4.7 to 3.4.8 by @dependabot in #9310
- website/docs: fix formatting for stage changes by @BeryJu in #9314
- web/admin: fix log viewer empty state by @BeryJu in #9315
- website/docs: 2024.2.3 release notes by @BeryJu in #9313
- web: bump API Client version by @authentik-automation in #9316
- sources/scim: cleanup service account when source is deleted by @BeryJu in #9319
- web: bump the storybook group in /web with 8 updates by @dependabot in #9266
- sources/scim: service account should be internal by @BeryJu in #9321
- core: bump goauthentik.io/api/v3 from 3.2024022.12 to 3.2024023.1 by @dependabot in #9327
- core: bump celery from 5.3.6 to 5.4.0 by @dependabot in #9325
- web: bump @patternfly/elements from 3.0.0 to 3.0.1 in /web by @dependabot in #9324
- core, web: update translations by @authentik-automation in #9323
- website/docs: fix email template formatting by @Zapfmeister in #9330
- website/docs: fix SECRET_KEY length by @strugee in #9328
- stages/authenticator_webauthn: fix attestation value by @BeryJu in #9333
- web: bump API Client version by @authentik-automation in #9334
- web/admin: fix error in admin interface due to un-hydrated context by @BeryJu in #9336
- root: make redis settings more consistent and allow TLS CA by @BeryJu in #9335
- root: fix go.mod for codeql checking by @BeryJu in #9338
- website/integrations: fix typo by @Code-Dreams in #9340
- root: expose session storage configuration by @BeryJu in #9337
- stages/prompt: fix username field throwing error with existing user by @BeryJu in #9342
- core: bump aiohttp from 3.9.2 to 3.9.4 by @dependabot in #9339
- web: fix locale prioritization scheme by @kensternberg-authentik in #9341
- brands: add indexes to brand domain and default by @BeryJu in #9343
- web/admin: fix user_write stage's user type input by @BeryJu in #9344
- web: bump @sentry/browser from 7.110.1 to 7.111.0 in /web in the sentry group by @dependabot in #9349
- core: bump ruff from 0.3.7 to 0.4.0 by @dependabot in #9347
- core: bump twilio from 9.0.4 to 9.0.5 by @dependabot in #9346
- web: bump chromedriver from 123.0.3 to 123.0.4 in /tests/wdio by @dependabot in #9348
- core: bump goauthentik.io/api/v3 from 3.2024023.1 to 3.2024023.2 by @dependabot in #9345
- core: bump golang.org/x/net from 0.22.0 to 0.23.0 by @dependabot in #9351
- web/admin: group form dual select by @BeryJu in #9354
- sources/ldap: fix default blueprint for mapping user DN to path by @BeryJu in #9355
- website/docs: 2024.4 release notes by @BeryJu in #9267
New Contributors
- @fheisler made their first contribution in #8596
- @yidaqiang made their first contribution in #8413
- @patsevanton made their first contribution in #8680
- @girlpunk made their first contribution in #8538
- @wdhdev made their first contribution in #8791
- @Chasethechicken made their first contribution in #8812
- @valkenburg-prevue-ch made their first contribution in #8888
- @RoboMagus made their first contribution in #8858
- @Trident101 made their first contribution in #8906
- @sirux88 made their first contribution in #8013
- @GermanCoding made their first contribution in #8915
- @MaxPelly made their first contribution in #8974
- @vnwnv made their first contribution in #8947
- @smdion made their first contribution in #7314
- @pgumpoldsberger made their first contribution in #9000
- @falkheiland made their first contribution in #9047
- @Mrs-Feathers made their first contribution in #9074
- @schnadoslin made their first contribution in #9048
- @Iamanaws made their first contribution in #9082
- @fallenhitokiri made their first contribution in #8786
- @pidi3000 made their first contribution in #9091
- @Meliox made their first contribution in #9014
- @orzFly made their first contribution in #9158
- @Fymyte made their first contribution in #9139
- @lucaam made their first contribution in #9153
- @MisterrrX made their first contribution in #9226
- @Gunsmithy made their first contribution in #9301
- @Zapfmeister made their first contribution in #9330
- @strugee made their first contribution in #9328
- @Code-Dreams made their first contribution in #9340
Full Changelog: version/2024.2.3...version/2024.4.0-rc1