goauthentik/authentik version/2025.4.0 on GitHub

See https://docs.goauthentik.io/docs/releases/2025.4

What's Changed

core: clear expired database sessions by @BeryJu in #13105
website/docs: add 2025.2 release notes by @BeryJu in #13002
providers/rac: move to open source by @gergosimonyi in #13015
web: bump API Client version by @authentik-automation in #13113
web/user: fix opening application with Enter not respecting new tab setting by @BeryJu in #13115
web/admin: update Application Wizard button placement by @kensternberg-authentik in #12771
cmd: set version in outposts by @BeryJu in #13116
sources/oauth: add group sync for azure_ad by @BeryJu in #12894
website: Use Docusaurus Frontmatter for badges by @GirlBossRush in #12893
web: Indicate when caps-lock is active during password input. by @GirlBossRush in #12733
web/flows: fix error on interactive Captcha stage when retrying captcha by @BeryJu in #13119
revert: rbac: exclude permissions for internal models (#12803) by @BeryJu in #13138
core: bump zxcvbn from 4.4.28 to 4.5.0 by @dependabot in #13128
policies/geoip: fix math in impossible travel by @BeryJu in #13141
enterprise/stages/source: fix Source stage not executing authentication/enrollment flow by @BeryJu in #12875
core: bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 by @dependabot in #13135
core: bump goauthentik.io/api/v3 from 3.2024123.6 to 3.2024123.7 by @dependabot in #13134
lifecycle/aws: bump aws-cdk from 2.179.0 to 2.1000.2 in /lifecycle/aws by @dependabot in #13133
core: bump duo-client from 5.3.0 to 5.4.0 by @dependabot in #13132
core: bump kubernetes from 32.0.0 to 32.0.1 by @dependabot in #13131
website: bump postcss from 8.5.2 to 8.5.3 in /website by @dependabot in #13130
website: bump semver from 7.7.0 to 7.7.1 in /website by @dependabot in #13129
scripts: fix broken link by @gergosimonyi in #13156
web/user: fix post MFA creation link being invalid by @BeryJu in #13157
core: bump selenium from 4.28.1 to 4.29.0 by @dependabot in #13155
website: bump docusaurus-plugin-openapi-docs from 4.3.4 to 4.3.5 in /website by @dependabot in #13153
core: bump twilio from 9.4.5 to 9.4.6 by @dependabot in #13151
core: bump ruff from 0.9.6 to 0.9.7 by @dependabot in #13150
website: bump docusaurus-theme-openapi-docs from 4.3.4 to 4.3.5 in /website by @dependabot in #13154
website: bump disqus-react from 1.1.5 to 1.1.6 in /website by @dependabot in #13152
website/docs: troubleshooting: fix missing command prefix for create admin group command in Docker by @dominic-r in #13107
web/user: fix RAC launch not opening when clicking icon by @BeryJu in #13164
ci: update poetry sync command by @rissson in #13161
root: allow configuring session cookie age by @rissson in #12389
web/admin: only show message when not editing an application by @BeryJu in #13165
web/user: fix race condition in user settings flow executor by @BeryJu in #13163
website: enable docusaurus faster option by @BeryJu in #12326
website/docs: fix typo by @klmmr in #13174
web/flow: update default flow background by @BeryJu in #13175
web/flow: grab focus to uid input field by @BeryJu in #13177
web/flows: disambiguate brand links codeblock by @kensternberg-authentik in #12141
web/admin: fix default selection for binding policy by @BeryJu in #13180
core: add darkreader-lock by @BeryJu in #13183
website: revert enable docusaurus faster option (#12326) by @BeryJu in #13207
core: bump github.com/redis/go-redis/v9 from 9.7.0 to 9.7.1 by @dependabot in #13205
core: bump psycopg from 3.2.4 to 3.2.5 by @dependabot in #13203
core: bump setproctitle from 1.3.4 to 1.3.5 by @dependabot in #13202
website: bump prettier from 3.5.1 to 3.5.2 in /website by @dependabot in #13192
web/flow: fix translate extract by @BeryJu in #13208
web/user: fix display for RAC tile by @BeryJu in #13211
website/docs: updated debugging docs by @BeryJu in #12809
website/docs: add new SSF provider docs by @tanberry in #13102
website/docs: add info about new perms for super-user in groups by @tanberry in #13188
stages/authenticator_email: Email Authenticator Stage Documentation by @melizeche in #12853
website/docs: remove mention of wizard by @tanberry in #13126
website/docs: remove Enterprise badge from RAC docs by @gergosimonyi in #13069
website/docs: add paragraph about impossible travel by @tanberry in #13125
core: bump aws-cdk-lib from 2.179.0 to 2.180.0 by @dependabot in #13204
website/docs: update the 2025.2 rel notes by @tanberry in #13213
website/docs: fix missing breaking entry for 2025.2 release notes by @BeryJu in #13223
root: Backport version 2025.2 by @BeryJu in #13225
website/docs: Add Passkeys reference where WebAuthn is mentioned by @melizeche in #13167
web: bump API Client version by @authentik-automation in #13226
website: remove images from integrations index page by @dominic-r in #12897
core: bump goauthentik.io/api/v3 from 3.2024123.7 to 3.2025020.1 by @dependabot in #13241
lifecycle/aws: bump aws-cdk from 2.1000.2 to 2.1000.3 in /lifecycle/aws by @dependabot in #13239
core, web: update translations by @authentik-automation in #13236
core: bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 by @dependabot in #13235
web/admin: fix minor typo by @S33G in #13181
core: bump golang.org/x/oauth2 from 0.26.0 to 0.27.0 by @dependabot in #13240
ci: run translation extraction on PRs too by @rissson in #13214
lifecycle: add warning regarding supported installation methods by @dominic-r in #13190
core: add pre-hydrated relative URL by @BeryJu in #13243
website/integrations: add plesk by @Lars- in #13000
website/docs: add enterprise label to SSF docs by @tanberry in #13251
ci: fix translation extraction for external PRs by @rissson in #13266
website/docs: remove Enterprise badge from RAC docs -- again by @gergosimonyi in #13268
stages/authenticator_email: fix session cleanup test b by @melizeche in #13264
stages/email: Fix email stage serialization by @melizeche in #13256
translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #13274
translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #13275
website/docs: prepare for 2025.2.1 by @rissson in #13277
website/docs: Fix Docusaurus plugin regression in Algolia search by @GirlBossRush in #13281
release: 2025.2.1 by @rissson in #13278
web: bump API Client version by @authentik-automation in #13295
translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #13292
translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #13291
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #13290
ci: bump docker/setup-qemu-action from 3.4.0 to 3.5.0 by @dependabot in #13287
lifecycle/aws: bump aws-cdk from 2.1000.3 to 2.1001.0 in /lifecycle/aws by @dependabot in #13283
core, web: update translations by @authentik-automation in #13282
core: bump aws-cdk-lib from 2.180.0 to 2.181.0 by @dependabot in #13284
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #13293
core: bump google-api-python-client from 2.161.0 to 2.162.0 by @dependabot in #13260
core: bump msgraph-sdk from 1.21.0 to 1.22.0 by @dependabot in #13259
*: Auto compress images by @authentik-automation in #13250
website/integrations: fix netbox env variables by @dustindkoch in #13267
ci: translation extraction: make sure API client is up-to-date by @rissson in #13301
web: ESBuild performance + Live reload by @GirlBossRush in #13026
website/integrations: Add documentation for Drupal by @justafish in #12925
core, web: update translations by @authentik-automation in #13311
core: bump goauthentik.io/api/v3 from 3.2025020.1 to 3.2025021.1 by @dependabot in #13314
core: bump ruff from 0.9.7 to 0.9.8 by @dependabot in #13312
core: bump aws-cdk-lib from 2.181.0 to 2.181.1 by @dependabot in #13313
providers/oauth2: properly support P-384 and P-521 keys by @rissson in #13317
website/docs: enterprise: add instructions to cancel license renewal by @rissson in #13320
website: Revert "website: revert enable docusaurus faster option (#12326) (#13207)" by @BeryJu in #13323
enterprise/stages/source: fix dispatch method signature by @BeryJu in #13321
*: fix stage incorrectly being inserted instead of appended by @BeryJu in #13304
website: bump remark-directive from 3.0.1 to 4.0.0 in /website by @dependabot in #13315
lib/sync/outgoing: add dry run by @BeryJu in #13244
stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in #13330
core, web: update translations by @authentik-automation in #13328
web: bump API Client version by @authentik-automation in #13336
core, web: update translations by @authentik-automation in #13339
core: bump goauthentik.io/api/v3 from 3.2025021.1 to 3.2025021.2 by @dependabot in #13363
core: bump pytest from 8.3.4 to 8.3.5 by @dependabot in #13362
core: bump cryptography from 44.0.1 to 44.0.2 by @dependabot in #13361
ci: bump docker/setup-qemu-action from 3.5.0 to 3.6.0 by @dependabot in #13360
core: bump ruff from 0.9.8 to 0.9.9 by @dependabot in #13359
website: bump prettier from 3.5.2 to 3.5.3 in /website by @dependabot in #13355
ci: update versions for daily full testing by @BeryJu in #13303
translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #13350
translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #13349
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #13347
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #13348
core, web: update translations by @authentik-automation in #13346
website: bump @rspack/binding-darwin-arm64 from 1.1.6 to 1.2.6 in /website by @dependabot in #13354
ci: bump getsentry/action-release from 1 to 3 by @dependabot in #13366
website: bump the build group in /website with 11 updates by @dependabot in #13367
lifecycle/aws: bump aws-cdk from 2.1001.0 to 2.1002.0 in /lifecycle/aws by @dependabot in #13365
website: bump typescript from 5.7.3 to 5.8.2 in /website by @dependabot in #13368
translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #13373
translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #13374
stages/authenticator_email: remove flaky assertions by @rissson in #13371
website/docs: fix typo by @eljpsm in #13377
web/admin: prefer using datefns over moment.js by @kensternberg-authentik in #13143
core, web: update translations by @authentik-automation in #13378
website: bump the build group in /website with 3 updates by @dependabot in #13381
providers/proxy: kubernetes outpost: fix reconcile when only annotations changed by @rissson in #13372
ci: cache helper docker images by @rissson in #13390
website/integrations: Pocketbase by @nicedevil007 in #12906
website/integrations: gravity: add by @dominic-r in #13258
website/docs: Update Open Web UI integration by @Rami-Pastrami in #13392
core: bump debugpy from 1.8.12 to 1.8.13 by @dependabot in #13395
core: bump github.com/prometheus/client_golang from 1.21.0 to 1.21.1 by @dependabot in #13397
website: bump the build group in /website with 6 updates by @dependabot in #13396
web/admin: decorative display in user’s page breaks in other locales by @kensternberg-authentik in #13393
web/admin: fix markdown being completely whited out in dark mode on proxy provider pages by @kensternberg-authentik in #13387
blueprints: Adjust title for MFA set up by @GirlBossRush in #13400
web/admin: add button to clear application cache by @rissson in #13399
core, web: update translations by @authentik-automation in #13405
web/user: ensure modal container on user-settings page is min-height: 100% by @kensternberg-authentik in #13402
core: bump jinja2 from 3.1.5 to 3.1.6 by @dependabot in #13412
core: bump msgraph-sdk from 1.22.0 to 1.23.0 by @dependabot in #13411
core: bump google-api-python-client from 2.162.0 to 2.163.0 by @dependabot in #13410
core: bump aws-cdk-lib from 2.181.1 to 2.182.0 by @dependabot in #13409
core: bump golang.org/x/oauth2 from 0.27.0 to 0.28.0 by @dependabot in #13408
stages/authenticator_email: Fix Enroll dropdown in the MFA Devices page by @melizeche in #13404
core: bump golang.org/x/sync from 0.11.0 to 0.12.0 by @dependabot in #13407
lib/config: fix conn_max_age parsing by @rissson in #13370
translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #13417
translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #13418
core: Tidy contributor onboarding, fix typos. by @GirlBossRush in #12700
web/admin: allow user lists to show active only by @kensternberg-authentik in #13403
website: add a better edit this page element by @BeryJu in #13391
core, web: update translations by @authentik-automation in #13423
translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #13429
translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #13428
lifecycle/aws: bump aws-cdk from 2.1002.0 to 2.1003.0 in /lifecycle/aws by @dependabot in #13426
translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #13431
website/integrations: zipline: add by @dominic-r in #13257
website: fix build in docker by @rissson in #13430
website/docs: sys mgmt: document authentik backups/restoration by @dominic-r in #12943
providers/SCIM: fix object exists error for users, attempt to look up user ID in remote system by @BeryJu in #13437
core: bump django from 5.0.12 to 5.0.13 by @dependabot in #13425
website: bump the build group across 1 directory with 9 updates by @dependabot in #13442
web/admin: fix display bug for assigned users in application bindings in the wizard by @kensternberg-authentik in #13435
web: admin interface: faster card load by @dominic-r in #13331
web: bump prismjs from 1.29.0 to 1.30.0 in /web by @dependabot in #13455
website: bump prismjs from 1.29.0 to 1.30.0 in /website by @dependabot in #13456
website/docs: backup and restore: remove extra period by @dominic-r in #13440
core: bump webauthn from 2.5.1 to 2.5.2 by @dependabot in #13449
core: bump ruff from 0.9.9 to 0.9.10 by @dependabot in #13448
web: Ignore Storybook when running codespell. by @GirlBossRush in #13454
website/docs: in developer docs replace deprecated poetry shell command by @dominic-r in #13460
core, web: update translations by @authentik-automation in #13438
stages/email: token_expiry format by @melizeche in #13394
root: bump python client generator version by @BeryJu in #13467
web: bump API Client version by @authentik-automation in #13469
sources/oauth: ignore missing well-known keys by @BeryJu in #13468
website/integrations: add Mautic by @movabo in #13324
website/docs: ops/backup-restore: add "pending emails" to lost redis data by @dominic-r in #13483
website: edit the new footer with links by @tanberry in #13433
translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #13481
translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #13482
core, web: update translations by @authentik-automation in #13475
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #13489
providers/oauth2: offline_access don't require explicit consent by @BeryJu in #13419
website: Bump the build group in /website with 3 updates by @dependabot in #13480
providers/scim: add compatibility mode for AWS & Slack by @jorhett in #13342
translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #13486
website: Bump @babel/runtime from 7.26.0 to 7.26.10 in /website by @dependabot in #13472
core: Bump twilio from 9.4.6 to 9.5.0 by @dependabot in #13478
core: Bump structlog from 25.1.0 to 25.2.0 by @dependabot in #13476
web: Bump @babel/runtime-corejs3 from 7.25.7 to 7.26.10 in /web by @dependabot in #13474
website: Bump @babel/runtime-corejs3 from 7.26.0 to 7.26.10 in /website by @dependabot in #13473
souces/oauth: reddit: fix duplicate keyword auth by @dominic-r in #13466
core: Bump goauthentik.io/api/v3 from 3.2025021.2 to 3.2025021.3 by @dependabot in #13479
website: Bump @babel/helpers from 7.26.0 to 7.26.10 in /website by @dependabot in #13471
outposts/controllers: k8s: sanitize resource names to comply with DNS subdomain standards by @dominic-r in #13444
web: bump API Client version by @authentik-automation in #13491
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #13488
translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #13487
website: remove the last updated option from footer by @tanberry in #13493
core, web: update translations by @authentik-automation in #13494
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #13508
translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #13509
translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #13511
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #13510
translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #13513
translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #13514
core: Bump psycopg from 3.2.5 to 3.2.6 by @dependabot in #13497
core: Bump aws-cdk-lib from 2.182.0 to 2.183.0 by @dependabot in #13496
core: Bump google-api-python-client from 2.163.0 to 2.164.0 by @dependabot in #13498
core: Bump msgraph-sdk from 1.23.0 to 1.24.0 by @dependabot in #13500
core: Bump importlib-metadata from 8.5.0 to 8.6.1 by @dependabot in #13499
core: Bump goauthentik.io/api/v3 from 3.2025021.3 to 3.2025021.4 by @dependabot in #13495
website: Bump the build group in /website with 6 updates by @dependabot in #13501
web/user: show admin interface button on mobile by @BeryJu in #13421
web/flows: fix missing padding on authenticator_validate card by @BeryJu in #13420
providers/rac: fix signals and Endpoint caching by @gergosimonyi in #13529
core: Bump github.com/coreos/go-oidc/v3 from 3.12.0 to 3.13.0 by @dependabot in #13525
lifecycle/aws: Bump aws-cdk from 2.1003.0 to 2.1004.0 in /lifecycle/aws by @dependabot in #13524
core, web: update translations by @authentik-automation in #13520
core: Bump aws-cdk-lib from 2.183.0 to 2.184.0 by @dependabot in #13522
web/admin: fix comment being rendered by @BeryJu in #13530
sources/oauth: fix duplicate authentication by @BeryJu in #13322
website/docs: dev docs: full: remove note on installing shell plugin by @dominic-r in #13515
core: bump django-tenants by @rissson in #13536
sources: prevent deletion of built-in source by @dominic-r in #12914
website/docs: dev docs: bump node/postgres requirements by @dominic-r in #13516
stages/identification: check captcha after checking authentication by @BeryJu in #13533
core: Bump coverage from 7.6.12 to 7.7.0 by @dependabot in #13548
core: Bump aws-cdk-lib from 2.184.0 to 2.184.1 by @dependabot in #13547
website/docs: prepare for 2025.2.2 by @gergosimonyi in #13552
website: Bump the build group in /website with 3 updates by @dependabot in #13549
stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in #13541
release: 2025.2.2 by @gergosimonyi in #13554
web: bump API Client version by @authentik-automation in #13555
website: bump the build group in /website with 6 updates by @dependabot in #13558
core: bump sentry-sdk from 2.22.0 to 2.23.1 by @dependabot in #13557
core: bump goauthentik.io/api/v3 from 3.2025021.4 to 3.2025022.1 by @dependabot in #13556
scripts: postgres: print statements by @rissson in #13537
providers/scim: save attributes returned from remote system like google workspace and entra ID by @BeryJu in #13459
web: bump API Client version by @authentik-automation in #13565
website: package.json: copy over schema for npm run watch by @dominic-r in #13543
website/docs: Apple Business Manager Integration. by @GirlBossRush in #13319
website/integrations: Beszel by @nicedevil007 in #12905
providers/saml: configurable AuthnContextClassRef by @BeryJu in #13566
core: bump goauthentik.io/api/v3 from 3.2025022.1 to 3.2025022.2 by @dependabot in #13569
core: bump msgraph-sdk from 1.24.0 to 1.25.0 by @dependabot in #13570
web: bump API Client version by @authentik-automation in #13572
web: Fix inline documentation rendering by @GirlBossRush in #13379
root: replace poetry with uv by @rissson in #13388
lifecycle/aws: bump aws-cdk from 2.1004.0 to 2.1005.0 in /lifecycle/aws by @dependabot in #13574
core: bump astral-sh/uv from 0.6.6 to 0.6.8 by @dependabot in #13577
core: bump goauthentik.io/api/v3 from 3.2025022.2 to 3.2025022.3 by @dependabot in #13576
root: fix uv lock file on macOS by @BeryJu in #13578
website/integrations: jellyfin: update OIDC plugin installation by @Netoen in #13544
brands: migrate custom CSS to brands by @BeryJu in #13172
web: bump API Client version by @authentik-automation in #13581
web/admin: fix diff showing previous false as "-" by @BeryJu in #13580
brands: add option to set global default flow background by @BeryJu in #13079
core, web: update translations by @authentik-automation in #13584
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #13590
translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #13591
translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #13593
translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #13596
translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #13597
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #13592
website/docs: style guide & integration template: revamp by @dominic-r in #12929
core: bump goauthentik.io/api/v3 from 3.2025022.3 to 3.2025022.5 by @dependabot in #13594
web: bump API Client version by @authentik-automation in #13585
website/integrations: add miniflux by @chwshka in #13559
lib: set a default HTTP timeout on outgoing requests by @BeryJu in #13599
core: bump github.com/redis/go-redis/v9 from 9.7.1 to 9.7.3 by @dependabot in #13603
website/docs: add clarification about formatting URLs to Style Guide by @tanberry in #13601
website: components: add multilinecodeblock component by @dominic-r in #13179
core: bump astral-sh/uv from 0.6.8 to 0.6.9 by @dependabot in #13612
core, web: update translations by @authentik-automation in #13608
translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #13615
website: update header to match goauthentik.io by @BeryJu in #13616
website/docs: revert token_expiry format in example blueprint by @melizeche in #13582
web: Client-side MDX rendering by @GirlBossRush in #13610
events: add configurable headers to webhooks by @BeryJu in #13602
translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #13621
web: bump API Client version by @authentik-automation in #13623
translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #13622
core: bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 by @dependabot in #13626
web/admin: reworked sync status card by @BeryJu in #13625
core, web: update translations by @authentik-automation in #13628
web: Fix prop. by @GirlBossRush in #13630
brands: fix migration 0008 by removing incorrect context manager usage by @dominic-r in #13635
translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #13634
translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #13632
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #13633
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #13631
flows: fix API not returning configured background by @BeryJu in #13641
ci: add semgrep by @BeryJu in #13643
providers/scim: fix group membership check failing by @BeryJu in #13644
core, web: update translations by @authentik-automation in #13642
website/integrations: add tandoor by @chwshka in #13560
translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #13652
translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #13653
core: bump goauthentik.io/api/v3 from 3.2025022.5 to 3.2025022.6 by @dependabot in #13646
website: bump the build group in /website with 6 updates by @dependabot in #13645
admin: fix system API when using bearer token by @rissson in #13651
root: fix dependency install due to description-file by @BeryJu in #13655
ci: stop publishing latest tag by @BeryJu in #13245
website/docs: fix referral of Paperless-ng by @joeftiger in #13657
core, web: update translations by @authentik-automation in #13658
root: new issue template for Docs by @tanberry in #13659
stages/email: Clean newline characters in TemplateEmailMessage by @melizeche in #13666
website/docs: Add Fleet integration. by @GirlBossRush in #13618
website/docs: add section on how to capture logs by @chwshka in #13662
website/docs: Flesh out integrations copy changes. by @GirlBossRush in #13619
lifecycle/aws: bump aws-cdk from 2.1005.0 to 2.1006.0 in /lifecycle/aws by @dependabot in #13670
core: bump astral-sh/uv from 0.6.9 to 0.6.10 by @dependabot in #13669
web: bump vite from 5.4.14 to 5.4.15 in /web by @dependabot in #13672
website: bump the build group in /website with 3 updates by @dependabot in #13660
ci: bump golangci/golangci-lint-action from 6 to 7 by @dependabot in #13661
web: ensure wizard modal closes on first cancel click by @dominic-r in #13636
website/integrations-all: convert authentik configuration to wizard by @dominic-r in #13144
outposts/ldap: fix paginator going into infinite loop by @BeryJu in #13677
web/admin: add sync status refresh button by @BeryJu in #13678
website/docs: Clarify frontend development. Document local overrides. by @GirlBossRush in #13586
enterprise/stages/source: set is_redirected in flow source stage redirects to by @BeryJu in #13604
website: bump @types/semver from 7.5.8 to 7.7.0 in /website by @dependabot in #13682
core: fix core/user is_superuser filter by @BeryJu in #13693
core: fix non-exploitable open redirect by @BeryJu in #13696
stages/identification: refresh captcha on failure by @BeryJu in #13697
security: fix CVE-2025-29928 by @BeryJu in #13695
website/docs: update release notes for 2024.12 and 2025.2 by @BeryJu in #13702
website/docs: fix 2025 CVE category title by @BeryJu in #13703
release: 2025.2.3 by @BeryJu in #13705
web: bump API Client version by @authentik-automation in #13708
website/docs: add reference to setting in CVE by @BeryJu in #13707
root: bump python patch version to 3.12.9 by @BeryJu in #13710
core: fix flaky tests introduced with is_superuser API fix by @BeryJu in #13709
web: bump tar-fs from 2.1.1 to 2.1.2 in /web by @dependabot in #13713
core: bump oss/go/microsoft/golang from 1.23-fips-bookworm to 1.24-fips-bookworm by @dependabot in #13027
policies: buffered policy access view for concurrent authorization attempts when unauthenticated by @BeryJu in #13629
website/docs: Fix Caddy forward auth example by @garar in #13726
core: bump astral-sh/uv from 0.6.10 to 0.6.11 by @dependabot in #13733
website: bump the build group in /website with 3 updates by @dependabot in #13730
core: bump goauthentik.io/api/v3 from 3.2025022.6 to 3.2025023.1 by @dependabot in #13729
core, web: update translations by @authentik-automation in #13728
core: fix double slash in cache key by @MPK1 in #13721
website/docs: style guide by @tanberry in #13704
translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #13738
core: fix error when viewing used_by for built-in source by @dominic-r in #13588
*/saml: allow for domainless SAML URLs by @BeryJu in #13737
web: bump API Client version by @authentik-automation in #13741
stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in #13744
web/common: utils: fix infinite value handling in getRelativeTime function by @dominic-r in #13564
core: bump goauthentik.io/api/v3 from 3.2025023.1 to 3.2025023.2 by @dependabot in #13746
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #13736
web: bump vite from 5.4.15 to 5.4.16 in /web by @dependabot in #13743
web/admin: fix custom scope mappings being selected by default in proxy provider by @BeryJu in #13735
website/integrations-all: update authentik configuration template by @dominic-r in #13740
website/integrations: slack,pocketbase,tandoor: convert to new authentik configuration format by @dominic-r in #13742
website: edit menu items by @tanberry in #13747
website/integrations: add mailcow by @obakuhl in #13727
website/docs: sys-mgmt: service accounts by @dominic-r in #13722
website: bump image-size from 1.1.1 to 1.2.1 in /website by @dependabot in #13750
website/integrations: calibre-web: document by @dominic-r in #12477
core: bump astral-sh/uv from 0.6.11 to 0.6.12 by @dependabot in #13756
lifecycle/aws: bump aws-cdk from 2.1006.0 to 2.1007.0 in /lifecycle/aws by @dependabot in #13757
core, web: update translations by @authentik-automation in #13753
website/integrations: add certificate instructions to apache guacamole by @dewi-tik in #13684
website/integrations: add sidero omni by @dewi-tik in #13675
core: bump python-kadmin-rs from 0.5.3 to 0.6.0 by @dependabot in #13758
website/docs: Updated redirect URI setup for Synology DSM by @Wr0ngName in #13761
website/docs: add log levels section to logs documentation by @dewi-tik in #13687
website/integrations: jenkins: fix oidc redirect uri by @dominic-r in #13771
website/docs: add skip object instructions by @dewi-tik in #13749
sources/kerberos, saml: allow creation of connections from the API by @rissson in #13794
stages/email: fix for newlines in emails by @melizeche in #13799
sources: move identifier to parent model by @rissson in #13797
website/integrations: add knocknoc by @dewi-tik in #13764
website/integrations: Open Web UI: add OPENID_REDIRECT_URI environment variable by @yuval-ziv in #13785
web: Normalize client-side error handling by @GirlBossRush in #13595
web: Fix TypeScript compilation issues for mixins, events. by @GirlBossRush in #13766
website/integrations: nextcloud: add warning about admin lockout by @Unfaehig in #13782
web: Tidy temporal utilities. by @GirlBossRush in #13755
web: Flesh out configs. by @GirlBossRush in #13801
website/docs: Correcting IDP URLs on Mailcow integration page by @adamjrberry in #13803
core: bump astral-sh/uv from 0.6.12 to 0.6.13 by @dependabot in #13812
core: bump goauthentik.io/api/v3 from 3.2025023.2 to 3.2025023.4 by @dependabot in #13811
core, web: update translations by @authentik-automation in #13806
website/integrations: fix ArgoCD redirect paths by @nfons in #13804
core: users API: add date_joined by @rissson in #13817
translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #13821
translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #13820
translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #13822
Revert "core: fix non-exploitable open redirect (#13696)" by @rissson in #13824
website/docs: Add release notes for 2024.12.5 by @melizeche in #13828
website/docs: Add release notes for 2025.2.4 by @melizeche in #13829
website/integrations: rename Hoarder to Karakeep by @petrsimunek in #13789
release: 2025.2.4 by @melizeche in #13830
core: bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 by @dependabot in #13834
core: bump aiohappyeyeballs from 2.3.5 to 2.6.1 by @rissson in #13840
core: bump autobahn from 23.6.2 to 24.4.2 by @rissson in #13847
core: bump aiohttp from 3.10.11 to 3.11.16 by @rissson in #13841
core: bump aiohttp-retry from 2.8.3 to 2.9.1 by @rissson in #13842
core: bump aiosignal from 1.3.1 to 1.3.2 by @rissson in #13843
core: bump amqp from 5.2.0 to 5.3.1 by @rissson in #13844
core: bump automat from 22.10.0 to 24.8.1 by @rissson in #13848
core: bump azure-identity from 1.17.1 to 1.21.0 by @rissson in #13851
core: bump bcrypt from 4.2.0 to v4.3.0 by @rissson in #13852
core: bump azure-core from 1.30.2 to 1.33.0 by @rissson in #13850
core: bump billiard from 4.2.0 to v4.2.1 by @rissson in #13853
core: bump anyio from 4.4.0 to 4.9.0 by @rissson in #13845
core: bump attrs from 23.2.0 to 25.3.0 by @rissson in #13846
core: bump boto3 from 1.34.150 to v1.37.30 by @rissson in #13854
core: bump cachetools from 5.4.0 to v5.5.2 by @rissson in #13856
core: bump cattrs from 24.1.2 to v24.1.3 by @rissson in #13857
core: bump certifi from 2024.7.4 to v2025.1.31 by @rissson in #13859
core: bump cffi from 1.16.0 to v1.17.1 by @rissson in #13860
core: bump channels from 4.2.0 to v4.2.2 by @rissson in #13861
core: bump charset-normalizer from 3.3.2 to v3.4.1 by @rissson in #13862
core: bump click from 8.1.7 to v8.1.8 by @rissson in #13863
core: bump decorator from 5.1.1 to v5.2.1 by @rissson in #13865
core: bump frozenlist from 1.4.1 to v1.5.0 by @rissson in #13872
core: bump coverage from 7.6.12 to v7.8.0 by @rissson in #13864
core: bump google-auth from 2.32.0 to v2.38.0 by @rissson in #13875
core: bump google-api-python-client from 2.164.0 to v2.166.0 by @rissson in #13874
core: bump idna from 3.7 to v3.10 by @rissson in #13883
core: bump duo-client from 5.4.0 to v5.5.0 by @rissson in #13871
core: bump google-api-core from 2.19.1 to v2.24.2 by @rissson in #13873
core: bump dnspython from 2.6.1 to v2.7.0 by @rissson in #13870
core: bump googleapis-common-protos from 1.63.2 to v1.69.2 by @rissson in #13876
core: bump django-pgactivity from 1.4.1 to v1.7.1 by @rissson in #13868
core: bump httpcore from 1.0.5 to v1.0.7 by @rissson in #13879
core: bump humanize from 4.10.0 to v4.12.2 by @rissson in #13881
core: bump maxminddb from 2.6.2 to v2.6.3 by @rissson in #13891
core: bump lxml from 5.3.1 to v5.3.2 by @rissson in #13889
core: bump microsoft-kiota-serialization-multipart from 1.9.2 to v1.9.3 by @rissson in #13895
core: bump microsoft-kiota-serialization-json from 1.9.2 to v1.9.3 by @rissson in #13894
core: bump microsoft-kiota-serialization-text from 1.9.2 to v1.9.3 by @rissson in #13896
core: bump orjson from 3.10.6 to v3.10.16 by @rissson in #13904
core: bump microsoft-kiota-serialization-form from 1.9.2 to v1.9.3 by @rissson in #13893
core: bump opentelemetry-api from 1.31.0 to v1.31.1 by @rissson in #13903
core: bump pyasn1-modules from 0.4.0 to v0.4.1 by @rissson in #13913
core: bump prompt-toolkit from 3.0.47 to v3.0.50 by @rissson in #13908
core: bump pygments from 2.18.0 to v2.19.1 by @rissson in #13915
core: bump pyasn1 from 0.6.0 to v0.6.1 by @rissson in #13912
core: bump python-dotenv from 1.0.1 to v1.1.0 by @rissson in #13918
core: bump pytz from 2024.1 to v2025.2 by @rissson in #13919
core: bump pyparsing from 3.1.2 to v3.2.3 by @rissson in #13916
core: bump redis from 5.0.7 to v5.2.1 by @rissson in #13920
core: bump pytest-django from 4.10.0 to v4.11.1 by @rissson in #13917
core: bump referencing from 0.35.1 to v0.36.2 by @rissson in #13921
core: bump sqlparse from 0.5.1 to v0.5.3 by @rissson in #13930
core: bump twilio from 9.5.0 to v9.5.2 by @rissson in #13935
core: bump std-uritemplate from 2.0.2 to v2.0.3 by @rissson in #13931
core: bump tzdata from 2024.1 to v2025.2 by @rissson in #13938
core: bump ruff from 0.9.10 to v0.11.4 by @rissson in #13924
core: bump celery from 5.4.0 to v5.5.1 by @rissson in #13858
core, web: update translations by @authentik-automation in #13832
core: bump goauthentik.io/api/v3 from 3.2025023.4 to 3.2025024.1 by @dependabot in #13833
web: bump API Client version by @authentik-automation in #13798
core: bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 by @dependabot in #13788
core: bump github.com/coreos/go-oidc/v3 from 3.13.0 to 3.14.1 by @dependabot in #13772
core: bump django-storages from 1.14.5 to v1.14.6 by @rissson in #13869
core: bump yarl from 1.17.2 to v1.19.0 by @rissson in #13944
core: bump h2 from 4.1.0 to v4.2.0 by @rissson in #13877
core: bump wrapt from 1.16.0 to v1.17.2 by @rissson in #13943
core: bump deprecated from 1.2.14 to v1.2.18 by @rissson in #13866
core: bump trio from 0.26.0 to v0.29.0 by @rissson in #13933
core: bump zipp from 3.20.2 to v3.21.0 by @rissson in #13945
core: bump importlib-resources from 6.4.0 to v6.5.2 by @rissson in #13884
core: bump httpx from 0.27.0 to v0.28.1 by @rissson in #13880
core: bump uvloop from 0.19.0 to v0.21.0 by @rissson in #13940
core: bump hyperframe from 6.0.1 to v6.1.0 by @rissson in #13882
core: bump iniconfig from 2.0.0 to v2.1.0 by @rissson in #13885
core: bump hpack from 4.0.0 to v4.1.0 by @rissson in #13878
core: bump six from 1.16.0 to v1.17.0 by @rissson in #13929
core: bump selenium from 4.29.0 to v4.31.0 by @rissson in #13926
core: bump platformdirs from 4.2.2 to v4.3.7 by @rissson in #13906
core: bump websockets from 12.0 to v15.0.1 by @rissson in #13942
core: bump zope-interface from 6.4.post2 to v7.2 by @rissson in #13946
core: bump stevedore from 5.2.0 to v5.4.1 by @rissson in #13932
core: bump markupsafe from 2.1.5 to v3.0.2 by @rissson in #13890
core: bump jsonschema-specifications from 2023.12.1 to v2024.10.1 by @rissson in #13887
core: bump prometheus-client from 0.20.0 to v0.21.1 by @rissson in #13907
core: bump msal-extensions from 1.2.0 to v1.3.1 by @rissson in #13898
core: bump msal from 1.30.0 to v1.32.0 by @rissson in #13897
core: bump ua-parser-builtins from 0.18.0 to v0.18.0.post1 by @rissson in #13939
core: bump golang.org/x/sync from 0.12.0 to 0.13.0 by @dependabot in #13787
core: bump pbr from 6.0.0 to v6.1.1 by @rissson in #13905
core: bump propcache from 0.2.0 to v0.3.1 by @rissson in #13909
core: bump rpds-py from 0.19.1 to v0.24.0 by @rissson in #13923
core: bump sentry-sdk from 2.22.0 to v2.25.1 by @rissson in #13927
core: bump multidict from 6.0.5 to v6.2.0 by @rissson in #13902
core: bump typing-extensions from 4.12.2 to v4.13.1 by @rissson in #13937
core: bump watchfiles from 0.22.0 to v1.0.5 by @rissson in #13941
core: bump twisted from 24.7.0 to v24.11.0 by @rissson in #13936
core: bump rich from 13.7.1 to v14.0.0 by @rissson in #13922
core: bump pydantic from 2.10.6 to v2.11.3 by @rissson in #13914
core: bump protobuf from 5.27.2 to v5.29.4 by @rissson in #13911
core: bump proto-plus from 1.24.0 to v1.26.1 by @rissson in #13910
core: bump msgraph-sdk from 1.24.0 to v1.26.0 by @rissson in #13901
core: bump msgpack from 1.0.8 to v1.1.0 by @rissson in #13899
core: bump kombu from 5.3.7 to v5.5.2 by @rissson in #13888
core: bump setuptools from 72.1.0 to v78.1.0 by @rissson in #13928
core: bump jsii from 1.109.0 to v1.111.0 by @rissson in #13886
core: bump msgraph-core from 1.3.1 to v1.3.3 by @rissson in #13900
core: bump trio-websocket from 0.11.1 to v0.12.2 by @rissson in #13934
core: bump microsoft-kiota-http from 1.9.2 to v1.9.3 by @rissson in #13949
core: bump microsoft-kiota-authentication-azure from 1.9.2 to v1.9.3 by @rissson in #13948
core: bump pyasn1-modules from 0.4.1 to v0.4.2 by @rissson in #13951
core: bump protobuf from 5.29.4 to v6.30.2 by @rissson in #13950
lifecycle/aws: bump aws-cdk-lib by @rissson in #13953
Fix redirect URL in wordpress integration guide by @virtualboys in #13955
website/integration: update harbor integration document by @dewi-tik in #13816
website/integrations: add Homarr by @nfons in #13818
website/docs: Remove enterprise badge from Fleet integration by @GirlBossRush in #13963
core: bump django from 5.0.13 to 5.0.14 by @melizeche in #13954
core: bump astral-sh/uv from 0.6.13 to 0.6.14 by @dependabot in #13964
translate: Updates for file locale/en/LC_MESSAGES/django.po in it by @transifex-integration in #13957
translate: Updates for file web/xliff/en.xlf in it by @transifex-integration in #13956
sources/ldap: lookup group memberships from user attribute by @krejcar25 in #12661
core: bump boto3 from 1.37.30 to v1.37.31 by @rissson in #13968
core: bump msgraph-sdk from 1.26.0 to v1.27.0 by @rissson in #13970
core: bump multidict from 6.2.0 to v6.4.2 by @rissson in #13971
web: elements: Table: Fix table selection clearing behavior by @dominic-r in #13959
website: dev docs: fix upper-case authentik by @dominic-r in #13961
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans [Manual Sync] by @transifex-integration in #13996
website/integrations: add wazuh by @dewi-tik in #13776
website/integrations: add openproject by @dewi-tik in #13838
core: migrate all sessions to the database by @rissson in #9736
core: fix migrations by @gergosimonyi in #14009
core, web: update translations by @authentik-automation in #13999
core: bump goauthentik.io/api/v3 from 3.2025024.1 to 3.2025024.2 by @dependabot in #14005
core: bump github.com/getsentry/sentry-go from 0.31.1 to 0.32.0 by @dependabot in #14004
translate: Updates for file locale/en/LC_MESSAGES/django.po in ko [Manual Sync] by @transifex-integration in #13993
translate: Updates for file locale/en/LC_MESSAGES/django.po in tr [Manual Sync] by @transifex-integration in #13995
translate: Updates for file locale/en/LC_MESSAGES/django.po in pt_BR [Manual Sync] by @transifex-integration in #13990
translate: Updates for file locale/en/LC_MESSAGES/django.po in pl [Manual Sync] by @transifex-integration in #13989
translate: Updates for file web/xliff/en.xlf in fi [Manual Sync] by @transifex-integration in #13978
translate: Updates for file locale/en/LC_MESSAGES/django.po in fi [Manual Sync] by @transifex-integration in #13988
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_TW [Manual Sync] by @transifex-integration in #13994
translate: Updates for file locale/en/LC_MESSAGES/django.po in es [Manual Sync] by @transifex-integration in #13987
translate: Updates for file locale/en/LC_MESSAGES/django.po in nl [Manual Sync] by @transifex-integration in #13991
translate: Updates for file locale/en/LC_MESSAGES/django.po in de [Manual Sync] by @transifex-integration in #13986
translate: Updates for file locale/en/LC_MESSAGES/django.po in ru [Manual Sync] by @transifex-integration in #13992
translate: Updates for file web/xliff/en.xlf in zh-Hans [Manual Sync] by @transifex-integration in #13985
core: bump urllib3 from 2.3.0 to 2.4.0 by @dependabot in #14006
sources/ldap: add source connections by @rissson in #13796
translate: Updates for file web/xliff/en.xlf in fr [Manual Sync] by @transifex-integration in #13979
web: bump API Client version by @authentik-automation in #13972
translate: Updates for file web/xliff/en.xlf in ru [Manual Sync] by @transifex-integration in #14013
translate: Updates for file web/xliff/en.xlf in zh-Hans [Manual Sync] by @transifex-integration in #14021
translate: Updates for file locale/en/LC_MESSAGES/django.po in es [Manual Sync] by @transifex-integration in #14019
translate: Updates for file locale/en/LC_MESSAGES/django.po in fr [Manual Sync] by @transifex-integration in #14022
translate: Updates for file locale/en/LC_MESSAGES/django.po in ru [Manual Sync] by @transifex-integration in #14032
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans [Manual Sync] by @transifex-integration in #14029
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN [Manual Sync] by @transifex-integration in #14028
translate: Updates for file web/xliff/en.xlf in it [Manual Sync] by @transifex-integration in #14016
translate: Updates for file web/xliff/en.xlf in zh_CN [Manual Sync] by @transifex-integration in #14017
translate: Updates for file web/xliff/en.xlf in pl [Manual Sync] by @transifex-integration in #14015
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_TW [Manual Sync] by @transifex-integration in #14031
translate: Updates for file locale/en/LC_MESSAGES/django.po in fi [Manual Sync] by @transifex-integration in #14023
translate: Updates for file locale/en/LC_MESSAGES/django.po in pl [Manual Sync] by @transifex-integration in #14025
translate: Updates for file locale/en/LC_MESSAGES/django.po in it [Manual Sync] by @transifex-integration in #14024
translate: Updates for file locale/en/LC_MESSAGES/django.po in pt_BR [Manual Sync] by @transifex-integration in #14027
translate: Updates for file locale/en/LC_MESSAGES/django.po in de [Manual Sync] by @transifex-integration in #14020
translate: Updates for file web/xliff/en.xlf in fi [Manual Sync] by @transifex-integration in #14012
translate: Updates for file locale/en/LC_MESSAGES/django.po in nl [Manual Sync] by @transifex-integration in #14026
website: Port WWW theme to docs site. Prep for package. by @GirlBossRush in #13962
core, web: update translations by @authentik-automation in #14037
core: bump github.com/sethvargo/go-envconfig from 1.1.1 to 1.2.0 by @dependabot in #14041
core: bump goauthentik.io/api/v3 from 3.2025024.2 to 3.2025024.4 by @dependabot in #14042
root: prevent docker-compose up when secret key is missing by @josegomezr in #14043
core: bump debugpy from 1.8.13 to v1.8.14 by @rissson in #14047
core: bump googleapis-common-protos from 1.69.2 to v1.70.0 by @rissson in #14049
core: bump google-api-python-client from 2.166.0 to v2.167.0 by @rissson in #14048
core: bump httpcore from 1.0.7 to v1.0.8 by @rissson in #14050
core: bump opentelemetry-api from 1.31.1 to v1.32.0 by @rissson in #14052
core: bump boto3 from 1.37.31 to v1.37.33 by @rissson in #14045
core: bump ruff from 0.11.4 to v0.11.5 by @rissson in #14053
core: bump typing-extensions from 4.13.1 to v4.13.2 by @rissson in #14055
core: bump uvicorn from 0.34.0 to v0.34.1 by @rissson in #14056
core: bump multidict from 6.4.2 to v6.4.3 by @rissson in #14051
providers/oauth2, rac: make sure tokens are revoked after session deletion by @rissson in #14011
root: add packages/ to codeowners by @rissson in #13975
ci: add NPM packages publish by @rissson in #13974
core: bump goauthentik/fips-python from 3.12.9-slim-bookworm-fips to 3.12.10-slim-bookworm-fips by @rissson in #14044
ci: fix api-py-publish by disabling poetry cache by @rissson in #14010
policies/reputation: limit reputation score by @gergosimonyi in #14008
core: bump django-rest-framework from 3.14.0 to 3.16.0 by @gergosimonyi in #14057
core: Bump django from 5.0.14 to 5.1.8 by @melizeche in #14059
web: bump API Client version by @authentik-automation in #14058
rbac: add InitialPermissions by @gergosimonyi in #13795
root: support db pool by @rissson in #13534
website/integrations: fix for actual-budget wiki guide by @jmarmstrong1207 in #14066
core: bump goauthentik.io/api/v3 from 3.2025024.4 to 3.2025024.6 by @dependabot in #14069
stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in #14065
core, web: update translations by @authentik-automation in #14064
website/docs: fix minor typo in working_with_policies.md by @tosdan-vscode in #14071
core: bump msgraph-sdk from 1.27.0 to v1.28.0 by @rissson in #14077
core: bump boto3 from 1.37.33 to v1.37.34 by @rissson in #14074
core: bump prompt-toolkit from 3.0.50 to v3.0.51 by @rissson in #14078
core: bump sentry-sdk from 2.25.1 to v2.26.1 by @rissson in #14079
core: bump google-auth from 2.38.0 to v2.39.0 by @rissson in #14076
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #14083
translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #14084
translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #14086
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #14087
translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #14090
translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #14091
web/api: Fix Hoisted exports across entrypoints. Update Axios. by @GirlBossRush in #14089
core, web: update translations by @authentik-automation in #14096
sources/oauth: introduce authorization code auth method by @rissson in #14034
core: bump rsa from 4.9 to v4.9.1 by @rissson in #14103
core: bump opentelemetry-api from 1.32.0 to v1.32.1 by @rissson in #14102
policies/geoip: fix result when only dynamic results are used by @rissson in #14107
website/integrations: general cleanup and updates by @dominic-r in #12716
website integrations: actual budget: remove old header and support_level by @dominic-r in #14112
website: integrations: apache guacamole: Fix deprecated start-of-doc … by @dominic-r in #14114
core, web: update translations by @authentik-automation in #14117
lifecycle/aws: bump aws-cdk from 2.1007.0 to 2.1010.0 in /lifecycle/aws by @dependabot in #14122
core: bump goauthentik.io/api/v3 from 3.2025024.6 to 3.2025024.7 by @dependabot in #14121
web: add remember me feature to IdentificationStage by @kensternberg-authentik in #10397
translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #14123
translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #14124
core: bump github.com/go-ldap/ldap/v3 from 3.4.10 to 3.4.11 by @dependabot in #14068
website: bump the build group in /website with 9 updates by @dependabot in #13748
website: bump wireit from 0.14.11 to 0.14.12 in /website by @dependabot in #14003
website: bump estree-util-value-to-estree from 3.1.1 to 3.3.3 in /website by @dependabot in #13808
website: bump http-proxy-middleware from 2.0.7 to 2.0.9 in /website by @dependabot in #14111
core: bump automat from 24.8.1 to v25.4.16 by @rissson in #14125
core: bump boto3 from 1.37.34 to v1.37.35 by @rissson in #14126
core: bump kombu from 5.5.2 to v5.5.3 by @rissson in #14127
core: bump yarl from 1.19.0 to v1.20.0 by @rissson in #14128
core, web: update translations by @authentik-automation in #14142
translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #14139
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #14144
core: bump goauthentik.io/api/v3 from 3.2025024.7 to 3.2025024.8 by @dependabot in #14143
translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #14145
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #14146
web: bump API Client version by @authentik-automation in #14062
web: Packagify live reload plugin. by @GirlBossRush in #14134
website: integrations: gravity: fix issuer URL by @dominic-r in #14155
web: fix scrollbar styling by @RoboMagus in #12600
core: bump astral-sh/uv from 0.6.14 to 0.6.16 by @dependabot in #14161
website/docs: fix postgres pool recommended settings by @MatthewStockdale in #14149
web/xliff: fix duplicated translations by @rissson in #14164
enterprise/policies: Add Password Uniqueness History Policy by @melizeche in #13453
web: bump API Client version by @authentik-automation in #14176
web: update default flow background by @rissson in #14115
core, web: update translations by @authentik-automation in #14179
website/integrations: add xcreds by @dewi-tik in #14163
core: bump uvicorn from 0.34.1 to v0.34.2 by @rissson in #14175
Revert "policies: buffered policy access view for concurrent authorization attempts when unauthenticated (#13629)" by @rissson in #14180
website: components: delete multilinecodeblock src by @dominic-r in #14094
website/docs: updates style guide code block section by @dewi-tik in #14088
website/integrations: paperless: use . instead of hardcoded slug value by @dominic-r in #14183
website/docs: dev docs: style guide: update style conventions for urls by @dominic-r in #14184
website/docs: dev-docs: style guide: no longer using italic for vars by @dominic-r in #14185
website/docs: update user object doc by @dewi-tik in #14132
core: bump goauthentik.io/api/v3 from 3.2025024.8 to 3.2025024.9 by @dependabot in #14189
core, web: update translations by @authentik-automation in #14187
website/integrations: mealie add integration by @TrisBits in #14188
translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #14196
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #14197
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #14195
translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #14198
website/docs: adds code examples for getting user objects from a group object by @dewi-tik in #14101
translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #14199
translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #14200
outposts: add support for gateway API by @rissson in #13272
packages/docusaurus-theme: Fix header alignment, overscroll, vertical padding. by @GirlBossRush in #14120
website: integrations: apache guacamole: remove redirect URI comments by @dominic-r in #14113
website/docs: rearranged brands docs by @tanberry in #14116
website/docs: updated user count info by @tanberry in #14186
website/integrations: improves netbird documentation by @dewi-tik in #14191
lifecycle/aws: bump aws-cdk from 2.1010.0 to 2.1012.0 in /lifecycle/aws by @dependabot in #14205
core, web: update translations by @authentik-automation in #14203
lifecycle/migrate: fix migration failing if killed during first startup by @rissson in #14207
website: bump typescript from 5.8.2 to 5.8.3 in /website by @dependabot in #13786
website: bump the build group in /website with 9 updates by @dependabot in #14204
web: Safari fixes merge branch by @GirlBossRush in #14181
Revert "web: Safari fixes merge branch (#14181)" by @rissson in #14211
Revert package-lock.json changes from "web: add remember me feature to IdentificationStage (#10397)" by @rissson in #14212
website/docs: Prepare for monorepo. by @GirlBossRush in #14119
ci: fix npm packages publication not running by @rissson in #14215
web: lock lit/ssr by @rissson in #14214
translate: Updates for file locale/en/LC_MESSAGES/django.po in tr [Manual Sync] by @transifex-integration in #14234
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_TW [Manual Sync] by @transifex-integration in #14235
stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in #14237
web: bump API Client version by @authentik-automation in #14236
Revert "website/docs: Prepare for monorepo. (#14119)" by @melizeche in #14239
translate: Updates for file locale/en/LC_MESSAGES/django.po in pt_BR [Manual Sync] by @transifex-integration in #14233
translate: Updates for file web/xliff/en.xlf in it [Manual Sync] by @transifex-integration in #14216
translate: Updates for file locale/en/LC_MESSAGES/django.po in ru [Manual Sync] by @transifex-integration in #14232
translate: Updates for file locale/en/LC_MESSAGES/django.po in it [Manual Sync] by @transifex-integration in #14231
translate: Updates for file locale/en/LC_MESSAGES/django.po in ko [Manual Sync] by @transifex-integration in #14230
translate: Updates for file locale/en/LC_MESSAGES/django.po in pl [Manual Sync] by @transifex-integration in #14229
translate: Updates for file web/xliff/en.xlf in tr [Manual Sync] by @transifex-integration in #14228
translate: Updates for file locale/en/LC_MESSAGES/django.po in fi [Manual Sync] by @transifex-integration in #14227
translate: Updates for file locale/en/LC_MESSAGES/django.po in de [Manual Sync] by @transifex-integration in #14226
translate: Updates for file web/xliff/en.xlf in zh-Hans [Manual Sync] by @transifex-integration in #14224
translate: Updates for file locale/en/LC_MESSAGES/django.po in es [Manual Sync] by @transifex-integration in #14223
translate: Updates for file web/xliff/en.xlf in pl [Manual Sync] by @transifex-integration in #14222
translate: Updates for file web/xliff/en.xlf in fr [Manual Sync] by @transifex-integration in #14221
translate: Updates for file web/xliff/en.xlf in de [Manual Sync] by @transifex-integration in #14220
translate: Updates for file web/xliff/en.xlf in fi [Manual Sync] by @transifex-integration in #14219
translate: Updates for file web/xliff/en.xlf in nl [Manual Sync] by @transifex-integration in #14217
Updates for file web/xliff/en.xlf in zh_TW [Manual Sync] by @transifex-integration in #14225
core, web: update translations by @authentik-automation in #14241
website/docs: Update release notes for 2025.4 by @melizeche in #14158
core, web: update translations (cherry-pick #14243) by @gcp-cherry-pick-bot in #14245
lifecycle: fix test-all in docker (cherry-pick #14244) by @gcp-cherry-pick-bot in #14246
web: fix bug that was causing charts to be too tall (cherry-pick #14253) by @gcp-cherry-pick-bot in #14254
rbac: add name to Permissions search (cherry-pick #14269) by @gcp-cherry-pick-bot in #14270

New Contributors

@klmmr made their first contribution in #13174
@Lars- made their first contribution in #13000
@dustindkoch made their first contribution in #13267
@justafish made their first contribution in #12925
@eljpsm made their first contribution in #13377
@Rami-Pastrami made their first contribution in #13392
@movabo made their first contribution in #13324
@jorhett made their first contribution in #13342
@Netoen made their first contribution in #13544
@chwshka made their first contribution in #13559
@joeftiger made their first contribution in #13657
@garar made their first contribution in #13726
@MPK1 made their first contribution in #13721
@obakuhl made their first contribution in #13727
@Wr0ngName made their first contribution in #13761
@yuval-ziv made their first contribution in #13785
@Unfaehig made their first contribution in #13782
@adamjrberry made their first contribution in #13803
@nfons made their first contribution in #13804
@petrsimunek made their first contribution in #13789
@virtualboys made their first contribution in #13955
@krejcar25 made their first contribution in #12661
@josegomezr made their first contribution in #14043
@jmarmstrong1207 made their first contribution in #14066
@tosdan-vscode made their first contribution in #14071
@MatthewStockdale made their first contribution in #14149
@TrisBits made their first contribution in #14188

Full Changelog: version/2025.2.4...version/2025.4.0

goauthentik/authentik version/2025.4.0 Release 2025.4.0 on GitHub

What's Changed

New Contributors

goauthentik/authentik version/2025.4.0
Release 2025.4.0

on GitHub