See https://docs.goauthentik.io/docs/releases/2025.10#fixed-in-2025101
What's Changed
- website/docs: fix placeholder leftover (cherry-pick #17737 to version-2025.10) by @authentik-automation[bot] in #17738
- root: Add Dockerfile label org.opencontainers.image.source (cherry-pick #17756 to version-2025.10) by @authentik-automation[bot] in #17757
- providers/proxy: fix missing JWT/claims header (cherry-pick #17759 to version-2025.10) by @authentik-automation[bot] in #17764
- sources/oauth: Make PKCE verifier 128 characters (cherry-pick #17763 to version-2025.10) by @authentik-automation[bot] in #17765
- providers/radius: fix panic when no cert is configured (cherry-pick #17762 to version-2025.10) by @authentik-automation[bot] in #17766
- providers/oauth2: move encryption key field (cherry-pick #17722 to version-2025.10) by @authentik-automation[bot] in #17729
- packages/django-postgres-cache: use upsert instead of select/update in a transaction (cherry-pick #17760 to version-2025.10) by @authentik-automation[bot] in #17767
- tasks: delay startup signals (cherry-pick #17769 to version-2025.10) by @authentik-automation[bot] in #17775
- root: use hashes for dockerfile FROM (cherry-pick #17795 to version-2025.10) by @authentik-automation[bot] in #17798
- internal: fix go deprecation for +build (cherry-pick #17806 to version-2025.10) by @authentik-automation[bot] in #17824
- ci: rework internal repo (#17797) by @BeryJu in #17829
- internal/web/proxy: fix return status code during startup (cherry-pick #17827 to version-2025.10) by @authentik-automation[bot] in #17832
- web/admin: fix scim provider form (cherry-pick #17831 to version-2025.10) by @authentik-automation[bot] in #17834
- core: bump astral-sh/uv from 0.9.5 to 0.9.6 (cherry-pick #17820 to version-2025.10) by @authentik-automation[bot] in #17835
- tasks: sanitize log attributes (cherry-pick #17833 to version-2025.10) by @authentik-automation[bot] in #17842
- outposts: update permissions more eagerly (cherry-pick #17783 to version-2025.10) by @authentik-automation[bot] in #17841
- outpost: revert breaking signals change (cherry-pick #17847 to version-2025.10) by @authentik-automation[bot] in #17848
- internal: full openssl path (cherry-pick #17856 to version-2025.10) by @authentik-automation[bot] in #17860
- web: Consistent Tab Panel URL Parameters (cherry-pick #17804 to version-2025.10) by @authentik-automation[bot] in #17859
- web/a11y: User library -- fix issues surrounding element focus, ARIA labeling. (cherry-pick #17522 to version-2025.10) by @authentik-automation[bot] in #17828
- providers/radius: fix inverted message authenticator validation (cherry-pick #17855 to version-2025.10) by @authentik-automation[bot] in #17888
- providers/radius: revert fix inverted message authenticator validation (#17855) (cherry-pick #17915 to version-2025.10) by @authentik-automation[bot] in #17916
- providers/oauth2: fix kid always required for federation (cherry-pick #17914 to version-2025.10) by @authentik-automation[bot] in #17917
- website/docs: 2025.10.1 release notes (cherry-pick #17918 to version-2025.10) by @authentik-automation[bot] in #17919
Full Changelog: version/2025.10.0...version/2025.10.1