goauthentik/authentik version/2025.12.0-rc1 on GitHub

See https://next.goauthentik.io/docs/releases/2025.12

What's Changed

root: bump version to 2025.12.0-rc1 by @authentik-automation[bot] in #17603
website/integrations: Zoom: Fix punctuation in description by @dominic-r in #17608
website: fix active menu link background overlap by @dominic-r in #17607
ci: use forked release action to deal with large release notes by @BeryJu in #17625
translate: Updates for file locale/en/LC_MESSAGES/django.po in pt_BR by @transifex-integration[bot] in #17622
core, web: update translations by @authentik-automation[bot] in #17605
website/docs: add short-lived certificate recommendation by @dewi-tik in #17628
website/integrations: random fixes by @dewi-tik in #17631
web: sync web/package-lock.json by @melizeche in #17611
ci: link to next. for pre-release docs by @BeryJu in #17634
enterprise: add prometheus metrics for license usage and expiry by @BeryJu in #17606
core: bump djangorestframework from 3.16.0 (our fork) to v3.16.1 (official package) by @melizeche in #16594
website/integrations: add zendesk by @PeshekDotDev in #17541
website/integrations: add terraform cloud by @dominic-r in #17610
core: bump github.com/getsentry/sentry-go from 0.36.0 to 0.36.1 by @dependabot[bot] in #17646
web: bump style-mod from 4.1.2 to 4.1.3 in /web by @dependabot[bot] in #17647
core: bump astral-sh/uv from 0.9.4 to 0.9.5 by @dependabot[bot] in #17645
providers/proxy: drop headers with underscores by @BeryJu in #17650
website/docs: rel notes 2025.10: add 3 more integration guides by @tanberry in #17641
core, web: update translations by @authentik-automation[bot] in #17643
translate: Updates for file web/xliff/en.xlf in pt_BR by @transifex-integration[bot] in #17639
web: bump knip from 5.66.1 to 5.66.2 in /web by @dependabot[bot] in #17619
web: bump @types/node from 22.15.19 to 24.9.1 in /web by @dependabot[bot] in #17618
web: bump @types/node from 24.9.0 to 24.9.1 in /packages/prettier-config by @dependabot[bot] in #17617
lib/sync/outgoing: store sync settings in database by @rissson in #17630
web: bump vite from 7.1.10 to 7.1.11 in /web by @dependabot[bot] in #17604
website: bump @types/node from 24.9.0 to 24.9.1 in /website by @dependabot[bot] in #17612
core: bump goauthentik.io/api/v3 from 3.2025100.25 to 3.2025120.1 by @dependabot[bot] in #17613
web: bump @types/node from 24.9.0 to 24.9.1 in /packages/esbuild-plugin-live-reload by @dependabot[bot] in #17616
web: bump hono from 4.9.12 to 4.10.2 in /web by @dependabot[bot] in #17653
website: bump the eslint group in /website with 3 updates by @dependabot[bot] in #17601
lifecycle/aws: bump aws-cdk from 2.1030.0 to 2.1031.0 in /lifecycle/aws by @dependabot[bot] in #17667
web: bump chromedriver from 141.0.3 to 141.0.4 in /web by @dependabot[bot] in #17665
web: bump the sentry group across 1 directory with 2 updates by @dependabot[bot] in #17663
core: bump goauthentik.io/api/v3 from 3.2025120.1 to 3.2025120.2 by @dependabot[bot] in #17662
web: Table row refinements by @GirlBossRush in #17659
web: Abstract Wizard Lifecycle by @GirlBossRush in #17658
website/docs: add note about invite link not bound by @tanberry in #17657
web: Make action field search case insensitive in Event Matcher Policy Form by @melizeche in #17680
web: bump @goauthentik/prettier-config from 1.0.5 to 3.1.0 in /web in the goauthentik group across 1 directory by @dependabot[bot] in #17684
translate: add cs_CZ by @rissson in #17632
root: Fix transifex link by @Gunsmithy in #17696
web: Fix table row click handler. by @GirlBossRush in #17697
website/docs: eap add info about custom validation by @tanberry in #17642
website/integrations: sonarr: clarify reverse proxy setup by @AlexLArmstrong in #17485
website/integrations: zot oci registry integration by @shcherbak in #17682
website/docs: release notes: Add Zot integration by @dominic-r in #17700
website/docs: blueprints: add a bit more info by @dominic-r in #17704
web: bump hono from 4.10.2 to 4.10.3 in /web by @dependabot[bot] in #17698
web: bump @types/node from 22.15.19 to 24.9.1 in /web by @dependabot[bot] in #17687
web: bump @types/codemirror from 5.60.16 to 5.60.17 in /web by @dependabot[bot] in #17685
website/integrations: grafana: replace deprecated redirect_uris usage by allowed_redirect_uris by @TarQ1 in #17710
ci: bump actions/download-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #17719
ci: bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in #17720
web: bump the storybook group across 1 directory with 5 updates by @dependabot[bot] in #17715
ci: bump astral-sh/setup-uv from 7.1.1 to 7.1.2 in /.github/actions/setup by @dependabot[bot] in #17718
providers/oauth2: move encryption key field by @BeryJu in #17722
enterprise: handle cached naive timezone by @BeryJu in #17695
lifecycle: set search_path in system migrations by @BeryJu in #17721
website/docs: update flow context ref by @BeryJu in #17723
website/docs: finalise 2025.10 release notes by @BeryJu in #17728
website/docs: fix placeholder leftover by @BeryJu in #17737
root: update security.md's supported versions by @dominic-r in #17736
web/a11y: Prefers more field contrast by @GirlBossRush in #17279
root: Add Dockerfile label org.opencontainers.image.source by @Erwan-loot in #17756
web: bump the sentry group across 1 directory with 2 updates by @dependabot[bot] in #17743
providers/proxy: add gorm logging by @BeryJu in #17758
providers/proxy: fix missing JWT/claims header by @BeryJu in #17759
sources/oauth: Make PKCE verifier 128 characters by @alex9smith in #17763
providers/radius: fix panic when no cert is configured by @BeryJu in #17762
packages/django-postgres-cache: use upsert instead of select/update in a transaction by @rissson in #17760
web: bump validator from 13.15.15 to 13.15.20 in /packages/eslint-config by @dependabot[bot] in #17742
web: bump eslint-plugin-react-hooks from 7.0.0 to 7.0.1 in /packages/eslint-config in the eslint group across 1 directory by @dependabot[bot] in #17714
website: bump validator from 13.15.15 to 13.15.20 in /website by @dependabot[bot] in #17741
web: bump vite from 7.1.11 to 7.1.12 in /web by @dependabot[bot] in #17689
core, web: update translations by @authentik-automation[bot] in #17660
website: bump the build group in /website with 6 updates by @dependabot[bot] in #17712
tasks: delay startup signals by @rissson in #17769
web: bump validator from 13.15.15 to 13.15.20 in /packages/prettier-config by @dependabot[bot] in #17776
root: use hashes for dockerfile FROM by @BeryJu in #17795
ci: rework internal repo by @BeryJu in #17797
core, web: update translations by @authentik-automation[bot] in #17782
website/integrations: fixed paperless-ngx yml syntax issue and added additional info by @mroetsc in #17739
ci: use hashes for actions everywhere by @rissson in #17803
web: Consistent Tab Panel URL Parameters by @GirlBossRush in #17804
web/a11y: User library -- fix issues surrounding element focus, ARIA labeling. by @GirlBossRush in #17522
internal: fix go deprecation for +build by @dominic-r in #17806
web/integrations: add slo supported integrations by @PeshekDotDev in #17810
web: Render Markdown in Blueprints descriptions, user and group notes by @GirlBossRush in #17746
website/integrations: miniflux: existing users must link accounts manually first by @KucharczykL in #17822
internal/web/proxy: fix return status code during startup by @rissson in #17827
web/admin: fix scim provider form by @BeryJu in #17831
core: bump library/nginx from b619c34 to f547e3d in /website by @dependabot[bot] in #17821
core: bump astral-sh/uv from 0.9.5 to 0.9.6 by @dependabot[bot] in #17820
outposts: update permissions more eagerly by @dominic-r in #17783
web/integrations: add information for slo supported integrations by @PeshekDotDev in #17836
tasks: sanitize log attributes by @rissson in #17833
provider/saml: make signing kp singleton by @PeshekDotDev in #17703
web/a11y: Isolated Outpost Error Page by @GirlBossRush in #17683
outpost: revert breaking signals change by @BeryJu in #17847
internal: full openssl path by @BeryJu in #17856
core: bump astral-sh/uv from 0.9.6 to 0.9.7 by @dependabot[bot] in #17851
lifecycle/aws: bump aws-cdk from 2.1031.0 to 2.1031.1 in /lifecycle/aws by @dependabot[bot] in #17850
website: bump the build group across 1 directory with 9 updates by @dependabot[bot] in #17849
website/integrations: Add Keycloak integration by @PeshekDotDev in #17813
website/integrations: oracle cloud: cleanup by @dominic-r in #17808
web: fix package-lock.json by @dominic-r in #17809
stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation[bot] in #17871
providers/radius: fix inverted message authenticator validation by @BeryJu in #17855
internal: add default go http server timeouts by @BeryJu in #17858
web: bump validator from 13.15.15 to 13.15.20 in /packages/docusaurus-config by @dependabot[bot] in #17866
web: bump @rollup/plugin-commonjs from 28.0.8 to 28.0.9 in /web in the rollup group across 1 directory by @dependabot[bot] in #17788
website: bump @types/node from 24.9.1 to 24.9.2 in /website by @dependabot[bot] in #17786
providers/radius: revert fix inverted message authenticator validation (#17855) by @BeryJu in #17915
providers/oauth2: fix kid always required for federation by @BeryJu in #17914
website/docs: 2025.10.1 release notes by @BeryJu in #17918
brands: add more matching tests by @rissson in #16185
web: bump the storybook group across 1 directory with 5 updates by @dependabot[bot] in #17787
brands: sort matched brand by match length by @rissson in #17920
core, web: update translations by @authentik-automation[bot] in #17807
tasks/schedules: fix rel obj not being associated or updated by @rissson in #17934
ci: bump helm/kind-action from 1.12.0 to 1.13.0 by @dependabot[bot] in #17930
ci: bump getsentry/action-release from 3.3.0 to 3.4.0 by @dependabot[bot] in #17931
core: bump openapitools/openapi-diff from 2.1.4 to 2.1.5 in /scripts/api by @dependabot[bot] in #17929
crypto: update certificate api and component by @PeshekDotDev in #17921
website/docs: added Note about email_verified scope mapping is set to false by default by @tanberry in #17942
web/admin: fixes capitalization in application wizard title by @dewi-tik in #17959
website/docs: remove broken info box and fix sentence by @dewi-tik in #17963
core: bump uvloop from 0.21.0 to v0.22.1 by @melizeche in #17990
core: bump aiohttp from 3.13.0 to v3.13.2 by @melizeche in #17969
core: bump iniconfig from 2.1.0 to v2.3.0 by @melizeche in #17980
core: bump std-uritemplate from 2.0.6 to v2.0.8 by @melizeche in #17988
core: bump rpds-py from 0.27.1 to v0.28.0 by @melizeche in #17987
core: bump psycopg-pool from 3.2.6 to v3.2.7 by @melizeche in #17985
core: bump orjson from 3.11.3 to v3.11.4 by @melizeche in #17983
core: bump opentelemetry-api from 1.37.0 to v1.38.0 by @melizeche in #17982
core: bump google-auth from 2.41.1 to v2.42.1 by @melizeche in #17977
core: bump google-api-core from 2.26.0 to v2.28.1 by @melizeche in #17976
core: bump cbor2 from 5.7.0 to v5.7.1 by @melizeche in #17974
core: bump boto3 from 1.40.51 to v1.40.66 by @melizeche in #17973
core: bump azure-core from 1.35.1 to v1.36.0 by @melizeche in #17971
core: bump blessed from 1.22.0 to v1.23.0 by @melizeche in #17972
core: bump jsii from 1.116.0 to v1.118.0 by @melizeche in #17981
core: bump cwcwidth from 0.1.10 to v0.1.12 by @melizeche in #17975
core: bump autobahn from 24.4.2 to v25.10.2 by @melizeche in #17970
core: bump trio from 0.31.0 to v0.32.0 by @melizeche in #17989
core: bump python-dotenv from 1.1.1 to v1.2.1 by @melizeche in #17986
website/docs: Update Homarr instructions to v1.43.1. by @holocronweaver in #17992
core: bump django from 5.2.7 to 5.2.8 by @melizeche in #17967
core: bump protobuf from 6.32.1 to v6.33.0 by @melizeche in #17984
core: bump google-auth-httplib2 from 0.2.0 to v0.2.1 by @melizeche in #17978
root: settings.py: fix comment by @dominic-r in #18006
core: Add example invitation blueprint by @melizeche in #17661
providers/saml: move sp binding location and default value by @PeshekDotDev in #17609
website/docs: updates img-src csp by @dewi-tik in #18010
core: bump library/golang from 1.25.3-trixie to 1.25.4-trixie by @dependabot[bot] in #18000
ci: fix migrate-from-stable for old versions by @BeryJu in #18019
core: bump library/golang from a13297b to 27e1c92 by @dependabot[bot] in #18038
ci: bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 by @dependabot[bot] in #18036
core: bump axllent/mailpit from v1.27.10 to v1.27.11 in /tests/e2e by @dependabot[bot] in #18035
core: bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 by @dependabot[bot] in #18034
core: bump astral-sh/uv from 0.9.7 to 0.9.8 by @dependabot[bot] in #18037
core: bump golang.org/x/sync from 0.17.0 to 0.18.0 by @dependabot[bot] in #18033
lifecycle/aws: bump aws-cdk from 2.1031.1 to 2.1031.2 in /lifecycle/aws by @dependabot[bot] in #18014
ci: bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #17999
web: bump @types/node from 22.15.19 to 24.10.0 in /web by @dependabot[bot] in #17950
core: bump goauthentik.io/api/v3 from 3.2025120.2 to 3.2025120.3 by @dependabot[bot] in #17945
core: bump library/nginx from f547e3d to 1beed3c in /website by @dependabot[bot] in #17955
web: bump @types/node from 24.9.1 to 24.10.0 in /packages/prettier-config by @dependabot[bot] in #17949
core, web: update translations by @authentik-automation[bot] in #17943
website/release notes: fix broken urls by @kensternberg-authentik in #18041
ci: bump astral-sh/setup-uv from 7.1.2 to 7.1.3 in /.github/actions/setup by @dependabot[bot] in #18053
web: bump the storybook group across 1 directory with 5 updates by @dependabot[bot] in #18050
web: bump the eslint group across 2 directories with 5 updates by @dependabot[bot] in #18049
core: bump github.com/getsentry/sentry-go from 0.36.1 to 0.36.2 by @dependabot[bot] in #17785
core: bump gorm.io/gorm from 1.31.0 to 1.31.1 by @dependabot[bot] in #17907
core: bump github.com/go-openapi/runtime from 0.29.0 to 0.29.2 by @dependabot[bot] in #18048
website: bump the eslint group across 1 directory with 5 updates by @dependabot[bot] in #17928
core: bump selenium/standalone-chromium from 141.0 to 142.0 in /tests/e2e by @dependabot[bot] in #17910
translate: Updates for file locale/en/LC_MESSAGES/django.po in fi by @transifex-integration[bot] in #18056
website: bump the build group across 1 directory with 9 updates by @dependabot[bot] in #17995
web: bump the sentry group across 1 directory with 2 updates by @dependabot[bot] in #17997
core: bump googleapis-common-protos from 1.70.0 to v1.71.0 by @melizeche in #17979
ci: bump calibreapp/image-actions from 05b1cf44e88c3b041b841452482df9497f046ef7 to 420075c115b26f8785e293c5bd5bef0911c506e5 by @dependabot[bot] in #17953
web: bump @types/node from 24.9.1 to 24.10.0 in /packages/esbuild-plugin-live-reload by @dependabot[bot] in #17948
website: bump @types/node from 24.9.2 to 24.10.0 in /website by @dependabot[bot] in #17909
web: Make Spotlight optional. by @GirlBossRush in #17904
core: bump goauthentik/fips-debian from 9b4cedf to f3228f8 by @dependabot[bot] in #17819
website/docs: update discord social login script example by @TMUniversal in #18026
web: bump the swc group across 1 directory with 12 updates by @dependabot[bot] in #17998
ci: revert to upstream GHA for release by @BeryJu in #18058
ci: attempt to fix integration tests using dind by @BeryJu in #18066
events: fix timezone not set for log events by @BeryJu in #18067
web: Fix application of global styles in style roots. by @GirlBossRush in #17444
providers/scim: allow custom schema data by @BeryJu in #18073
core: improve app launch URL formatting by @BeryJu in #18076
core: bump goauthentik/fips-debian from f3228f8 to 5017d65 by @dependabot[bot] in #18084
web: bump the react group across 2 directories with 1 update by @dependabot[bot] in #18083
web: bump the rollup group across 1 directory with 4 updates by @dependabot[bot] in #18082
web: bump the storybook group across 1 directory with 5 updates by @dependabot[bot] in #18080
website: bump @types/node from 24.10.0 to 24.10.1 in /website by @dependabot[bot] in #18078
website: bump @types/react from 19.2.2 to 19.2.3 in /website by @dependabot[bot] in #18077
web: bump @sentry/browser from 10.24.0 to 10.25.0 in /web in the sentry group across 1 directory by @dependabot[bot] in #18079
cmd/server/healthcheck: remove worker HTTP healthcheck by @rissson in #18090
web: Fix RAC modal visibility. by @GirlBossRush in #17941
web: Fix tab activation, blank provider URLs by @GirlBossRush in #18031
web: Lit Session Context by @GirlBossRush in #17903
web/i18n: Locale message fixes by @GirlBossRush in #17913
web/i18n: Japanese Locale（日本語ロケール） by @GirlBossRush in #17938
translate: Updates for file locale/en/LC_MESSAGES/django.po in fi by @transifex-integration[bot] in #18060
web: bump @types/node from 22.15.19 to 24.10.1 in /web by @dependabot[bot] in #18113
web: bump @types/node from 24.10.0 to 24.10.1 in /packages/prettier-config by @dependabot[bot] in #18112
website: bump @types/react-dom from 19.2.2 to 19.2.3 in /website by @dependabot[bot] in #18107
translate: Updates for file locale/en/LC_MESSAGES/django.po in fi by @transifex-integration[bot] in #18105
web: bump the react group across 2 directories with 2 updates by @dependabot[bot] in #18110
website: bump the build group in /website with 3 updates by @dependabot[bot] in #18106
web: bump @types/node from 24.10.0 to 24.10.1 in /packages/esbuild-plugin-live-reload by @dependabot[bot] in #18111
website: bump @types/react from 19.2.3 to 19.2.4 in /website by @dependabot[bot] in #18108
website/integrations: Frappe: update instructions by @Daniel15 in #18029
packages/django-dramatiq-postgres: broker: ensure locking happens with the same connection by @rissson in #18095
website/docs: fix wording in stages overview by @dewi-tik in #18061
github: convert issue templates to forms by @dewi-tik in #18117
revert: github: convert issue templates to forms by @dewi-tik in #18121
website/docs: update application description by @dewi-tik in #18125
web/flows: improvements for hCaptcha by @Tealk in #16882
website/integrations: stripe: fix markdown by @dominic-r in #18126
website/integrations: add SeaTable by @christophdb in #18115
web/admin: update stage descriptions by @dewi-tik in #18118
web/admin: link to user on invitation list page by @BeryJu in #18132
web: Disable library <datalist> on Firefox. by @GirlBossRush in #18103
website/integrations: Add Joplin by @tetragir in #18042
website/integrations: Add ezBookkeeping integration by @mayswind in #18040
core: bump goauthentik/fips-debian from 5017d65 to 40a1f32 by @dependabot[bot] in #18149
core: bump astral-sh/uv from 0.9.8 to 0.9.9 by @dependabot[bot] in #18148
web: bump globals from 16.4.0 to 16.5.0 in /web by @dependabot[bot] in #18145
website: bump the build group in /website with 3 updates by @dependabot[bot] in #18141
web: bump vite from 7.1.12 to 7.2.2 in /web by @dependabot[bot] in #18143
web: bump type-fest from 5.1.0 to 5.2.0 in /web by @dependabot[bot] in #18144
core: bump github.com/getsentry/sentry-go from 0.36.2 to 0.37.0 by @dependabot[bot] in #18140
github: converts issue templates to forms by @dewi-tik in #18133
crypto: update certificates on fs event by @PeshekDotDev in #18129
web: bump @trivago/prettier-plugin-sort-imports from 5.2.2 to 6.0.0 in /web by @dependabot[bot] in #18146
core: deduplicate user attribute constant definitions by @dominic-r in #18138
packages/django-channels-postgres/layer: fix query when subscribed to multiple channels by @rissson in #18152
website/integrations: macmon NAC by @nicedevil007 in #17898
web: Fix ESBuild hanging process by @GirlBossRush in #18162
web/sfe: downgrade bootstrap that was accidentally upgraded by @BeryJu in #18157
website/integrations: FortiMail by @nicedevil007 in #17900
website/integrations: ubuntu landscape: remove appendix by @slapcat in #18188
web: bump js-yaml from 4.1.0 to 4.1.1 in /packages/prettier-config by @dependabot[bot] in #18185
web: bump js-yaml from 4.1.0 to 4.1.1 in /web by @dependabot[bot] in #18170
build(deps): bump js-yaml from 4.1.0 to 4.1.1 by @dependabot[bot] in #18169
stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation[bot] in #18166
web: fix outpost build by @BeryJu in #18190
web/a11y: Update wizard form labels, placeholders. by @GirlBossRush in #17811
website/docs: Add instructions for installing RC versions by @melizeche in #18099
web: Hide avatars when set to "none" by @GirlBossRush in #17911
providers/saml: fix front-end saml binding defaults by @PeshekDotDev in #18189
core: bump library/nginx from 1beed3c to b5b9e01 in /website by @dependabot[bot] in #18225
ci: bump actions/checkout from 5.0.0 to 5.0.1 by @dependabot[bot] in #18222
core: bump goauthentik/fips-debian from 40a1f32 to 65a9f1f by @dependabot[bot] in #18223
core: bump cattrs from 25.2.0 to v25.3.0 by @melizeche in #18196
core: bump protobuf from 6.33.0 to v6.33.1 by @melizeche in #18202
core: bump rpds-py from 0.28.0 to v0.29.0 by @melizeche in #18204
core: bump cachetools from 6.2.1 to v6.2.2 by @melizeche in #18195
core: bump zope-event from 6.0 to v6.1 by @melizeche in #18205
core: bump zope-interface from 8.0.1 to v8.1.1 by @melizeche in #18206
core: bump certifi from 2025.10.5 to v2025.11.12 by @melizeche in #18197
core: bump googleapis-common-protos from 1.71.0 to v1.72.0 by @melizeche in #18200
core: bump boto3 from 1.40.66 to v1.40.75 by @melizeche in #18194
core: bump pynacl from 1.6.0 to v1.6.1 by @melizeche in #18203
core: bump jsii from 1.118.0 to v1.119.0 by @melizeche in #18201
core: bump astral-sh/uv from 0.9.9 to 0.9.10 by @dependabot[bot] in #18224
web: bump the swc group across 1 directory with 11 updates by @dependabot[bot] in #18219
web: bump the storybook group across 1 directory with 5 updates by @dependabot[bot] in #18217
website: bump @types/react from 19.2.4 to 19.2.6 in /website by @dependabot[bot] in #18215
core: bump github.com/getsentry/sentry-go from 0.37.0 to 0.38.0 by @dependabot[bot] in #18212
core: bump google-auth from 2.42.1 to v2.43.0 by @melizeche in #18199
web: bump the eslint group across 2 directories with 3 updates by @dependabot[bot] in #18216
website: bump the eslint group in /website with 3 updates by @dependabot[bot] in #18214
core, web: update translations by @authentik-automation[bot] in #18046
website: bump the build group across 1 directory with 9 updates by @dependabot[bot] in #18231
core: bump click from 8.3.0 to v8.3.1 by @melizeche in #18198
lifecycle/aws: bump aws-cdk from 2.1031.2 to 2.1032.0 in /lifecycle/aws by @dependabot[bot] in #18218
web: Patternfly 5 Prep: Part 2 by @GirlBossRush in #18085
stages/prompt: fix choices with labels causing error on submit by @BeryJu in #18183
web/i18n: Clean up locale scripts by @GirlBossRush in #18163
web: bump js-yaml from 3.14.1 to 3.14.2 in /packages/docusaurus-config by @dependabot[bot] in #18239
web/i18n: Remove English Locale by @GirlBossRush in #18164
web: bump js-yaml from 4.1.0 to 4.1.1 in /packages/esbuild-plugin-live-reload by @dependabot[bot] in #18237
web: Bump Vitest, TypeScript config by @GirlBossRush in #18238
core: bump goauthentik/fips-debian from 65a9f1f to 55c1514 by @dependabot[bot] in #18251
core: bump library/golang from 27e1c92 to 728cbef by @dependabot[bot] in #18252
core: bump library/nginx from b5b9e01 to 553f64a in /website by @dependabot[bot] in #18253
web: bump knip from 5.66.2 to 5.70.0 in /web by @dependabot[bot] in #18245
web: bump the react group across 2 directories with 1 update by @dependabot[bot] in #18244
web: bump ts-pattern from 5.8.0 to 5.9.0 in /web by @dependabot[bot] in #18247
core, web: update translations by @authentik-automation[bot] in #18241
internal: Automated internal backport: 1487-invitation-expiry.sec.patch to authentik-main by @authentik-automation[bot] in #18264
internal: Automated internal backport: 1498-oauth2-cc-user-active.sec.patch to authentik-main by @authentik-automation[bot] in #18265
internal: Automated internal backport: 5000-sidebar.sec.patch to authentik-main by @authentik-automation[bot] in #18266
website/docs: add 2025.8.5 and 2025.10.2 release notes by @BeryJu in #18268
Makefile: Fix kerberos tests for brew users by @PeshekDotDev in #17223
website/docs: enhance blueprint docs by @tanberry in #15984
endpoints: initial data structure by @BeryJu in #11499
web: bump js-yaml from 4.1.0 to 4.1.1 in /packages/eslint-config by @dependabot[bot] in #18301
ci: fix checkout stable by @gergosimonyi in #18303
web: bump country-flag-icons from 1.5.21 to 1.6.1 in /web by @dependabot[bot] in #18280
website/docs: fix broken link in source switching doc by @dewi-tik in #18317
website/docs: further improvments to source switch doc by @dewi-tik in #18320
web: Prettier Config 3.2 by @GirlBossRush in #18305
website/docs: added missed edits on Blueprints docs by @tanberry in #18321
website/docs: add high availability doc by @dewi-tik in #18182
website/docs: update certificate doc by @dewi-tik in #18295
core: bump library/golang from 728cbef to a02d35e by @dependabot[bot] in #18340
ci: bump actions/setup-go from 6.0.0 to 6.1.0 in /.github/actions/setup by @dependabot[bot] in #18284
core: bump goauthentik/fips-debian from 55c1514 to 8b7e8d0 by @dependabot[bot] in #18283
ci: bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 by @dependabot[bot] in #18337
ci: bump actions/create-github-app-token from 2.1.4 to 2.2.0 by @dependabot[bot] in #18338
ci: bump astral-sh/setup-uv from 7.1.3 to 7.1.4 in /.github/actions/setup by @dependabot[bot] in #18339
ci: bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 by @dependabot[bot] in #18336
core: bump astral-sh/uv from 0.9.10 to 0.9.11 by @dependabot[bot] in #18312
ci: bump svenstaro/upload-release-action from 2.11.2 to 2.11.3 by @dependabot[bot] in #18311
core: bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0 by @dependabot[bot] in #18306
web: bump the swc group across 1 directory with 11 updates by @dependabot[bot] in #18309
website: bump the build group in /website with 6 updates by @dependabot[bot] in #18308
ci: bump actions/setup-go from 6.0.0 to 6.1.0 by @dependabot[bot] in #18282
ci: bump actions/checkout from 5.0.1 to 6.0.0 by @dependabot[bot] in #18313
web: bump the rollup group across 1 directory with 4 updates by @dependabot[bot] in #18277
core: bump goauthentik.io/api/v3 from 3.2025120.3 to 3.2025120.4 by @dependabot[bot] in #18307
root: regen schema by @dominic-r in #18327
web: Improve user display in modals by falling back to username by @dominic-r in #18243
web: Update Deprecated NPM Packages by @GirlBossRush in #18335
website/integrations: harbor: fix slashes in URLs and group claim name by @adns44 in #18332
core, web: update translations by @authentik-automation[bot] in #18304
web: bump knip from 5.70.0 to 5.70.1 in /web by @dependabot[bot] in #18310
website/docs: update info about docker socket mount by @dewi-tik in #18344
web/sources: Add promoted source by @dominic-r in #18334
ci: bump aws-actions/configure-aws-credentials from 5.1.0 to 5.1.1 by @dependabot[bot] in #18359
core: bump goauthentik.io/api/v3 from 3.2025120.4 to 3.2025120.5 by @dependabot[bot] in #18354
website: Unlisted & Draft Release Notes by @GirlBossRush in #18210
ci: bump actions/setup-python from 6.0.0 to 6.1.0 in /.github/actions/setup by @dependabot[bot] in #18360
core: bump github.com/getsentry/sentry-go from 0.38.0 to 0.39.0 by @dependabot[bot] in #18353
lifecycle/aws: bump aws-cdk from 2.1032.0 to 2.1033.0 in /lifecycle/aws by @dependabot[bot] in #18278
core: bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @dependabot[bot] in #18275
web: ESLint Typing Fixes by @GirlBossRush in #18362
outposts: set container healthcheck inline by @BeryJu in #18298
*: convert slugfields to textfields by @rissson in #17411
web: Bump packages. by @GirlBossRush in #18371
web: Fix stale table rows by @GirlBossRush in #17940
enterprise/providers/scim: fix OAuth by @PeshekDotDev in #18358
providers/scim: fix PATCH for AWS by @bitpavel-l25 in #18230
policies: use flow planner directly in PolicyAccessView to directly set flow context by @BeryJu in #18372
website: bump the eslint group in /website with 3 updates by @dependabot[bot] in #18356
website: bump the goauthentik group across 1 directory with 4 updates by @dependabot[bot] in #18378
root: improve testing helpers by @BeryJu in #18379
core: bump astral-sh/uv from 0.9.11 to 0.9.12 by @dependabot[bot] in #18383
website: bump the build group in /website with 3 updates by @dependabot[bot] in #18382
core: bump goauthentik/fips-debian from 8b7e8d0 to 8c4ec98 by @dependabot[bot] in #18361
web/admin: add entitlement search by @BeryJu in #18291
core: bump goauthentik.io/api/v3 from 3.2025120.5 to 3.2025120.7 by @dependabot[bot] in #18381
web/admin: fix wording in password stage by @dewi-tik in #18393
lib/sync/outgoing: check if there is a provider before creating tasks by @rissson in #18394
website/docs: add some more info and tweak the full dev Docs by @tanberry in #18374
core: bump goauthentik/fips-debian from 8c4ec98 to ac4c80b by @dependabot[bot] in #18403
website/integrations: KnowBe4 by @nicedevil007 in #17899
stages/captcha: allow dynamic public/private key by @BeryJu in #18346
core: bump astral-sh/uv from 0.9.12 to 0.9.13 by @dependabot[bot] in #18402
core: bump axllent/mailpit from v1.27.11 to v1.28.0 in /tests/e2e by @dependabot[bot] in #18401
flows: remove SESSION_KEY_APPLICATION_PRE by @BeryJu in #18388
core: bump openapitools/openapi-diff from 2.1.5 to 2.1.6 in /scripts/api by @dependabot[bot] in #18400
stages/prompt: set allow_blank for _read_only fields by @BeryJu in #18297
web: bump node-forge from 1.3.1 to 1.3.2 in /packages/docusaurus-config by @dependabot[bot] in #18398
packages/django-channels-postgres: fix notify size check by @rissson in #18347
providers/oauth2: optimize JWKS endpoint queries by @rissson in #18405
website/integrations: ChatGPT by @nicedevil007 in #17893
website/docs: improve creds recovery docs by @dewi-tik in #18385
website/integrations: Microsoft365 Federation by @nicedevil007 in #17891
ci: remove unused local env by @gergosimonyi in #18410
api: add decorator to validate serializer in @action endpoints by @BeryJu in #17435
endpoints: AuthN and AuthZ by @BeryJu in #18350
endpoints: include device ID in agent config by @BeryJu in #18414
website/integrations: add Placetel by @TimoReusch in #18399
website/integrations: Amazon Business by @nicedevil007 in #17894
endpoints: rework perms by @BeryJu in #18422
translate: Updates for project authentik and language fi by @transifex-integration[bot] in #18429
translate: Updates for project authentik and language de by @transifex-integration[bot] in #18435
translate: Updates for project authentik and language es by @transifex-integration[bot] in #18433
translate: Updates for project authentik and language nl by @transifex-integration[bot] in #18434
translate: Updates for project authentik and language pt_BR by @transifex-integration[bot] in #18436
translate: Updates for project authentik and language pl by @transifex-integration[bot] in #18430
website/integrations: add local browser setting to seafile by @dewi-tik in #18428
translate: Updates for project authentik and language zh_CN by @transifex-integration[bot] in #18441
translate: Updates for project authentik and language zh-Hans by @transifex-integration[bot] in #18439
translate: Updates for project authentik and language pt by @transifex-integration[bot] in #18437
translate: Updates for project authentik and language cs_CZ by @transifex-integration[bot] in #18443
translate: Updates for project authentik and language ru by @transifex-integration[bot] in #18442
translate: Updates for project authentik and language fr by @transifex-integration[bot] in #18431
translate: Updates for project authentik and language tr by @transifex-integration[bot] in #18438
ci: remove translation-rename by @rissson in #18444
crypto: only generate managed keypair if non-existent by @BeryJu in #18457
enterprise: Apple Platform SSO by @BeryJu in #15318
website/integrations: small fixes by @dewi-tik in #18423
website/integrations: add GLPI by @lameslime in #17937
core: bump goauthentik.io/api/v3 from 3.2025120.7 to 3.2025120.11 by @dependabot[bot] in #18461
website: bump prettier-plugin-packagejson from 2.5.19 to 2.5.20 in /website by @dependabot[bot] in #18460
core: bump github.com/getsentry/sentry-go from 0.39.0 to 0.40.0 by @dependabot[bot] in #18416
core: bump goauthentik/fips-debian from ac4c80b to de70579 by @dependabot[bot] in #18419
website: bump @types/react from 19.2.6 to 19.2.7 in /website by @dependabot[bot] in #18357
enterprise/endpoints/connectors/agent: fix Apple JWE encryption when FIPS is enabled by @BeryJu in #18464
providers/scim: compare users/groups before sending update request by @BeryJu in #18456
stages/user_write: Fix user attributes are not sanitized under certains conditions by @se7kn8 in #17890
web: re-add en.xlf locale by @rissson in #18469
core, web: update translations by @authentik-automation[bot] in #18380
translate: Updates for project authentik and language fi by @transifex-integration[bot] in #18490
translate: Updates for project authentik and language nl by @transifex-integration[bot] in #18497
translate: Updates for project authentik and language de by @transifex-integration[bot] in #18487
translate: Updates for project authentik and language fr by @transifex-integration[bot] in #18496
translate: Updates for project authentik and language pt by @transifex-integration[bot] in #18498
translate: Updates for project authentik and language ru by @transifex-integration[bot] in #18500
translate: Updates for project authentik and language zh_TW by @transifex-integration[bot] in #18499
translate: Updates for project authentik and language es by @transifex-integration[bot] in #18485
translate: Updates for project authentik and language ko by @transifex-integration[bot] in #18488
core, web: unified locales by @rissson in #18502
translate: fix config by @rissson in #18504
web: Fixes for Docusaurus & ESlint Upgrade by @GirlBossRush in #18452
translate: fix source locale not matching transifex by @GirlBossRush in #18503
integrations/slack: Add SCIM tutorial by @PeshekDotDev in #18508
core: bump goauthentik/fips-debian from de70579 to c718f60 by @dependabot[bot] in #18515
core: bump astral-sh/uv from 0.9.13 to 0.9.14 by @dependabot[bot] in #18514
ci: bump softprops/action-gh-release from 2.4.2 to 2.5.0 by @dependabot[bot] in #18512
core, web: update translations by @authentik-automation[bot] in #18510
website: bump the goauthentik group in /website with 2 updates by @dependabot[bot] in #18513
web: bump express from 4.21.2 to 4.22.1 in /packages/docusaurus-config by @dependabot[bot] in #18520
web/admin: fix brands default switch label by @MarcinKoziuk in #18518
files: rework by @rissson in #17535
sources/oauth: save returned oauth refresh tokens and add slack provider by @PeshekDotDev in #18501
core: custom avatar url improvements by @konradmoesch in #10525
website/integrations: add salesforce by @PeshekDotDev in #18516
endpoints: implement endpoint stage by @BeryJu in #18468
web/flows: update default background image by @BeryJu in #18540
website/integrations: add hoop.dev by @shcherbak in #17868
website: Docusaurus 3.9.2 by @GirlBossRush in #18506
endpoints/stage: v2, better error handling, more settings by @BeryJu in #18545
website: Glossary by @dominic-r in #16007
web/i18n: Locale Context Merge Branch by @GirlBossRush in #18426
providers/scim: cache ServiceProviderConfig by @dominic-r in #18047
core: bump library/golang from 1.25.4-trixie to 1.25.5-trixie by @dependabot[bot] in #18558
ci: bump actions/setup-node from 6.0.0 to 6.1.0 in /.github/actions/setup by @dependabot[bot] in #18559
ci: bump golangci/golangci-lint-action from 9.1.0 to 9.2.0 by @dependabot[bot] in #18557
ci: bump actions/stale from 10.1.0 to 10.1.1 by @dependabot[bot] in #18556
ci: bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in #18554
core: bump goauthentik/fips-debian from c718f60 to cf233be by @dependabot[bot] in #18553
core: bump goauthentik.io/api/v3 from 3.2025120.11 to 3.2025120.15 by @dependabot[bot] in #18551
core: bump astral-sh/uv from 0.9.14 to 0.9.15 by @dependabot[bot] in #18555
admin/files: delete applications cache on migration by @rissson in #18565
web: Adjust colors by @GirlBossRush in #18427
build(deps): bump django from 5.2.8 to 5.2.9 by @dependabot[bot] in #18566
endpoints/stage: v2.1, fix asymmetric token exchange and missing form input by @BeryJu in #18547
stages/captcha: Make stage more managed with provider-specific defaults by @dominic-r in #16129
web: bump base package by @GirlBossRush in #18509
core: bump django from v5.2.8 to 5.2.9 by @melizeche in #18582
core: bump stevedore from 5.5.0 to v5.6.0 by @melizeche in #18581
core: bump sqlparse from 0.5.3 to v0.5.4 by @melizeche in #18580
core: bump psycopg-pool from 3.2.7 to v3.3.0 by @melizeche in #18578
core: bump jsii from 1.119.0 to v1.120.0 by @melizeche in #18576
core: bump incremental from 24.7.2 to v24.11.0 by @melizeche in #18575
core: bump opentelemetry-api from 1.38.0 to v1.39.0 by @melizeche in #18577
core: bump rpds-py from 0.29.0 to v0.30.0 by @melizeche in #18579
core: bump django-pgactivity from 1.7.1 to v1.8.0 by @melizeche in #18573
core: bump django-stubs-ext from 5.2.7 to v5.2.8 by @melizeche in #18574
core: bump cron-converter from 1.2.2 to v1.3.1 by @melizeche in #18572
core: bump blessed from 1.24.0 to v1.25.0 by @melizeche in #18570
core: bump autobahn from 25.10.2 to v25.11.1 by @melizeche in #18569
core: bump asgiref from 3.10.0 to v3.11.0 by @melizeche in #18568
core: bump boto3 from 1.40.75 to v1.42.1 by @melizeche in #18571
core, web: update translations by @authentik-automation[bot] in #18587
core: bump goauthentik.io/api/v3 from 3.2025120.15 to 3.2025120.16 by @dependabot[bot] in #18591
core: bump github.com/spf13/cobra from 1.10.1 to 1.10.2 by @dependabot[bot] in #18592
crypto: separate permissions for certificate and private keydownload by @BeryJu in #18588
api: test action decorator by @BeryJu in #18583
web/elements: update AppIcon story with files change by @rissson in #18608
web: bump yaml from 2.8.1 to 2.8.2 in /web by @dependabot[bot] in #18605
website/docs: add missing API sidebar entry by @dewi-tik in #18586
website/docs: expressions: fix markdown by @dominic-r in #18613
web: bump packages in /web by @dependabot[bot] in #18604
web: Codemirror fixes by @GirlBossRush in #18610
web: bump mermaid from 11.12.1 to 11.12.2 in /web by @dependabot[bot] in #18602
api: fix IPC auth by @BeryJu in #18612
website/docs: adds note about ak_create_jwt function by @dewi-tik in #18614
web: bump @sentry/browser from 10.28.0 to 10.29.0 in /web in the sentry group across 1 directory by @dependabot[bot] in #18623
core: bump goauthentik/fips-debian from cf233be to a80dbbd by @dependabot[bot] in #18594
ci: bump actions/setup-node from 6.0.0 to 6.1.0 by @dependabot[bot] in #18552
core, web: update translations by @authentik-automation[bot] in #18620
flows: keep ?next url when using cancel by @BeryJu in #18619
flows: refresh unauthenticated tabs by @BeryJu in #18621
wed/admin: change s to S in "Stage" by @dewi-tik in #18632
enterprise/stages/mtls: fix traefik certificate parsing by @BeryJu in #18607
root: fix missing authentik_device cookie causing error by @BeryJu in #18642
docs/integrations: add salesforce oauth source and SCIM steps by @PeshekDotDev in https://github.com/goauthentik/authentik/pull/18627
web: Fix row expansion on modal trigger buttons. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/18412
web: Bump types, fix ESLint errors by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/17546
web/admin: fix event volume chart not updating with query by @BeryJu in https://github.com/goauthentik/authentik/pull/18649
sources/ldap: make server info optional by @BeryJu in https://github.com/goauthentik/authentik/pull/18648
endpoints: fix UI bugs, add user binding, etc by @BeryJu in https://github.com/goauthentik/authentik/pull/18609
stages/mtls: always include cert in flow plan by @BeryJu in https://github.com/goauthentik/authentik/pull/18657
website/integrations: wordpress: fix redirect uri by @dominic-r in https://github.com/goauthentik/authentik/pull/18658
website/docs: install-config: fix dump_config command by @dominic-r in https://github.com/goauthentik/authentik/pull/18659
website/docs: background tasks: add more detail about "next run" by @dominic-r in https://github.com/goauthentik/authentik/pull/18660
ci: bump astral-sh/setup-uv from 7.1.4 to 7.1.5 in /.github/actions/setup by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18667
ci: bump actions/create-github-app-token from 2.2.0 to 2.2.1 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18664
core: bump goauthentik/fips-debian from a80dbbd to 10c8086 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18665
web: bump vite from 7.2.6 to 7.2.7 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18662
ci: bump peter-evans/create-pull-request from 7.0.9 to 7.0.11 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18666
web: bump type-fest from 5.3.0 to 5.3.1 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18663
core: bump goauthentik.io/api/v3 from 3.2025120.16 to 3.2025120.18 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18661
core: bump astral-sh/uv from 0.9.15 to 0.9.16 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18668
core: add digraph group hierarchy by @gergosimonyi in https://github.com/goauthentik/authentik/pull/17050
root: skip current tab when refreshing others by @BeryJu in https://github.com/goauthentik/authentik/pull/18674
website/integrations: update kimai doc by @dewi-tik in https://github.com/goauthentik/authentik/pull/18629
*: Auto compress images by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18673
web: Hide device picker when challenges are not present. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/18611
web: Improved Timestamps by @GirlBossRush in https://github.com/goauthentik/authentik/pull/18300
website/integrations: homarr: fix capitalization of redirect uri by @dominic-r in https://github.com/goauthentik/authentik/pull/18679
web: Improved table selection behavior by @GirlBossRush in https://github.com/goauthentik/authentik/pull/18622
core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18640
core: bump goauthentik.io/api/v3 from 3.2025120.18 to 3.2025120.19 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18689
stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18458
core: bump library/golang from 4f9d98e to b669435 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18697
enterprise/reports: add users and events export by @atereshkin in https://github.com/goauthentik/authentik/pull/18088
core: bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18691
core: bump golang.org/x/sync from 0.18.0 to 0.19.0 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18690
core: bump goauthentik/fips-debian from 10c8086 to cb2d1f8 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18696
core: propagate ModuleNotFoundError in import_relative by @gergosimonyi in https://github.com/goauthentik/authentik/pull/18683
core: bump library/nginx from 553f64a to e21f8d0 in /website by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18698
lib: add ak_create_jwt_raw by @BeryJu in https://github.com/goauthentik/authentik/pull/18676
core/sessions: remove django groups prefetch by @rissson in https://github.com/goauthentik/authentik/pull/18704
web: bump knip from 5.71.0 to 5.72.0 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18695
web: bump dompurify from 3.3.0 to 3.3.1 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18694
tenants: remove extra query for each request by @rissson in https://github.com/goauthentik/authentik/pull/18705
endpoints: fix device access group missing from blueprint by @BeryJu in https://github.com/goauthentik/authentik/pull/18703
contributing: don't use main branch by @dominic-r in https://github.com/goauthentik/authentik/pull/18688
packages/ak-guardian: bump python requirement to 3.14 by @melizeche in https://github.com/goauthentik/authentik/pull/18711
web: 2025.12 UI tidy by @GirlBossRush in https://github.com/goauthentik/authentik/pull/18650
core: bump astral-sh/uv from 0.9.16 to 0.9.17 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18723
blueprints: remove pk from recovery example by @gergosimonyi in https://github.com/goauthentik/authentik/pull/18712
sources/oauth: add WeChat type by @Anduin2017 in https://github.com/goauthentik/authentik/pull/18086
web/admin: Add SAML metadata form to wizard by @PeshekDotDev in https://github.com/goauthentik/authentik/pull/17690
core: bump library/node from 7942b33 to ccfd9da in /website by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18725
core: bump library/nginx from e21f8d0 to 325b00a in /website by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18724
core: bump goauthentik/fips-debian from cb2d1f8 to e72277d by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18720
core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18713
ci: bump peter-evans/create-pull-request from 7.0.11 to 8.0.0 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18721
ci: bump codecov/codecov-action from 5.5.1 to 5.5.2 in /.github/actions/test-results by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18722
core: bump library/golang from b669435 to 5d35fb8 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18718
core: bump goauthentik.io/api/v3 from 3.2025120.19 to 3.2025120.21 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18714
lifecycle/migrate: remove tenant_files migration by @rissson in https://github.com/goauthentik/authentik/pull/18729
admin/files: add check for /media existence by @rissson in https://github.com/goauthentik/authentik/pull/18636
website/integrations: add KitchenOwl by @dominic-r in https://github.com/goauthentik/authentik/pull/18687
sources/sync: configuration for outgoing sync trigger mode by @rissson in https://github.com/goauthentik/authentik/pull/17669
sources/telegram: implement connecting existing user to a Telegram account by @atereshkin in https://github.com/goauthentik/authentik/pull/18517
web: Locale selector by @GirlBossRush in https://github.com/goauthentik/authentik/pull/18560
core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18730
website/integrations: m365: fix string match by @TFenby in https://github.com/goauthentik/authentik/pull/18731
core: bump goauthentik/fips-debian from e72277d to dea09c4 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18736
web: bump knip from 5.72.0 to 5.73.1 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18734
web: bump the storybook group across 1 directory with 5 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18715
core: bump goauthentik.io/api/v3 from 3.2025120.21 to 3.2025120.25 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18732
core: bump library/nginx from 325b00a to fb01117 in /website by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18737
lib: do not strip and re-add curly braces from raw JSON config by @hoshsadiq in https://github.com/goauthentik/authentik/pull/13769
web: bump @types/guacamole-common-js from 1.5.4 to 1.5.5 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18717
outpost/proxyv2: more tests, fix pg password with spaces, and existing session on restart by @dominic-r in https://github.com/goauthentik/authentik/pull/18211
root: do not require backend approval for npm workspace dependencies by @rissson in https://github.com/goauthentik/authentik/pull/18738
api: allow configuring default page_size and max_page_size by @nalves599 in https://github.com/goauthentik/authentik/pull/18165
stages/identification: Add WebAuthn conditional UI (passkey autofill) support by @melizeche in https://github.com/goauthentik/authentik/pull/18377
translate: Updates for project authentik and language fr_FR by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/18747
translate: Updates for project authentik and language cs_CZ by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/18753
translate: Updates for project authentik and language it_IT by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/18750
translate: Updates for project authentik and language es_ES by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/18748
translate: Updates for project authentik and language pt_BR by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/18746
translate: Updates for project authentik and language nl_NL by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/18751
translate: Updates for project authentik and language de_DE by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/18749
translate: Updates for project authentik and language ja_JP by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/18755
translate: Updates for project authentik and language ko_KR by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/18760
translate: Updates for project authentik and language ru_RU by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/18745
translate: Updates for project authentik and language pl_PL by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/18754
translate: Updates for project authentik and language fi_FI by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/18759
translate: Updates for project authentik and language tr_TR by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/18758
translate: Updates for project authentik and language zh-Hans by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/18756
website/docs: fix incorrect menu reference in data exports doc by @atereshkin in https://github.com/goauthentik/authentik/pull/18752
website/integrations: wazuh: Change exchange key generation to 64 bytes by @sirofwalls in https://github.com/goauthentik/authentik/pull/18769
ci: generate typescript api client for release too by @rissson in https://github.com/goauthentik/authentik/pull/18761
web: bump types (merge branch) by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18735
core: bump selenium/standalone-chromium from 142.0 to 143.0 in /tests/e2e by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18772
core: bump goauthentik.io/api/v3 from 3.2025120.25 to 3.2025120.26 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18770
ci: bump tj-actions/changed-files from 47.0.0 to 47.0.1 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18780
ci: bump actions/cache from 4.3.0 to 5.0.0 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18779
admin/files: cache expensive generated URLs by @rissson in https://github.com/goauthentik/authentik/pull/18784
core: bump goauthentik/fips-debian from dea09c4 to 07f41ce by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/18778
translate: Updates for project authentik and language fr_FR by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/18788
web/admin: fix typo in PolicyAccessView by @rissson in https://github.com/goauthentik/authentik/pull/18789
core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18766
core: optimize list applications by @ryanpesek in https://github.com/goauthentik/authentik/pull/18330
web: Fix switch labels by @GirlBossRush in https://github.com/goauthentik/authentik/pull/18741
web: Fix background refreshing too frequently. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/18764
web/admin: make empty table message configurable by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/18763
stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18793
website/release notes: Release notes for v2025.12 by @melizeche in https://github.com/goauthentik/authentik/pull/18595
website/release notes: Update v2025.12 release notes (cherry-pick #18797 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18800
tests/e2e: retry detached shadow roots (cherry-pick #18796 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18799
core: list applications fix (cherry-pick #18798 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18828
packages/django-dramatiq-postgres: broker: close django connections on consumer close (cherry-pick #18833 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18836
admin/files: revert add check for /media existence (#18636) (cherry-pick #18829 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18838
admin/files: fix get_objects_for_user queryset argument in FileUsedByView (cherry-pick #18845 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18847

New Contributors

@AlexLArmstrong made their first contribution in #17485
@shcherbak made their first contribution in #17682
@TarQ1 made their first contribution in #17710
@Erwan-loot made their first contribution in #17756
@alex9smith made their first contribution in #17763
@mroetsc made their first contribution in #17739
@KucharczykL made their first contribution in #17822
@holocronweaver made their first contribution in #17992
@TMUniversal made their first contribution in #18026
@christophdb made their first contribution in #18115
@tetragir made their first contribution in #18042
@mayswind made their first contribution in #18040
@slapcat made their first contribution in #18188
@adns44 made their first contribution in #18332
@bitpavel-l25 made their first contribution in #18230
@TimoReusch made their first contribution in #18399
@lameslime made their first contribution in #17937
@se7kn8 made their first contribution in #17890
@MarcinKoziuk made their first contribution in #18518
@konradmoesch made their first contribution in #10525
@Anduin2017 made their first contribution in https://github.com/goauthentik/authentik/pull/18086
@TFenby made their first contribution in https://github.com/goauthentik/authentik/pull/18731
@hoshsadiq made their first contribution in https://github.com/goauthentik/authentik/pull/13769
@sirofwalls made their first contribution in https://github.com/goauthentik/authentik/pull/18769

Full Changelog: version/2025.10.2...version/2025.12.0-rc1

goauthentik/authentik version/2025.12.0-rc1 Release 2025.12.0-rc1 on GitHub

What's Changed

New Contributors

goauthentik/authentik version/2025.12.0-rc1
Release 2025.12.0-rc1

on GitHub