See https://next.goauthentik.io/docs/releases/2025.8/
What's Changed
- website/docs: add more to style guide by @tanberry in #14797
- web: minor design tweaks by @BeryJu in #14803
- core, web: update translations by @authentik-automation[bot] in #14800
- website/integrations: update cloudflare access callback url by @terafirmanz in #14807
- web: bump the eslint group across 2 directories with 5 updates by @dependabot[bot] in #14813
- core: bump celery from 5.5.2 to 5.5.3 by @dependabot[bot] in #14812
- lifecycle/aws: bump aws-cdk from 2.1016.1 to 2.1017.1 in /lifecycle/aws by @dependabot[bot] in #14810
- core: bump goauthentik.io/api/v3 from 3.2025041.2 to 3.2025041.4 by @dependabot[bot] in #14809
- core: bump uvicorn[standard] from 0.34.2 to 0.34.3 by @dependabot[bot] in #14811
- core: bump astral-sh/uv from 0.7.8 to 0.7.9 by @dependabot[bot] in #14806
- website: bump @types/node from 22.15.21 to 22.15.29 in /website by @dependabot[bot] in #14808
- core: bump twilio from 9.6.1 to 9.6.2 by @dependabot[bot] in #14789
- core: bump github.com/redis/go-redis/v9 from 9.8.0 to 9.9.0 by @dependabot[bot] in #14733
- web: bump the esbuild group across 2 directories with 4 updates by @dependabot[bot] in #14711
- website: bump postcss from 8.5.3 to 8.5.4 in /website by @dependabot[bot] in #14787
- web: bump @sentry/browser from 9.22.0 to 9.23.0 in /web in the sentry group across 1 directory by @dependabot[bot] in #14776
- remove fluff from release notes 2025.6 by @gergosimonyi in #14819
- website/integrations: remove trailing slash from budibase redirect by @dewi-tik in #14823
- website/integrations: Update Zammad SAML Instructions by @pacohope in #14774
- web: bump tar-fs from 3.0.8 to 3.0.9 in /web by @dependabot[bot] in #14836
- core: bump structlog from 25.3.0 to 25.4.0 by @dependabot[bot] in #14834
- stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation[bot] in #14801
- website/docs: add LDAP docs for forward deletion and
memberUidby @gergosimonyi in #14814 - website/docs: Add FIDO2 references to the documentation by @melizeche in #14826
- lib/sync: fix static incorrect label of pages by @BeryJu in #14851
- providers/rac: apply ConnectionToken scoped-settings last by @BeryJu in #14838
- website/docs: finalize release notes for
2025.6by @gergosimonyi in #14854 - website/docs: update style guide by @dominic-r in #14373
- website/releases: order new integrations alphabetically by @dominic-r in #14850
- website/integrations: tailscale by @dominic-r in #14499
- core: bump msgraph-sdk from 1.31.0 to 1.32.0 by @dependabot[bot] in #14863
- core: bump argon2-cffi from 23.1.0 to 25.1.0 by @dependabot[bot] in #14862
- core: bump astral-sh/uv from 0.7.9 to 0.7.10 by @dependabot[bot] in #14861
- core, web: update translations by @authentik-automation[bot] in #14858
- core: bump google-api-python-client from 2.170.0 to 2.171.0 by @dependabot[bot] in #14864
- website/docs: release notes for
2025.4.2by @gergosimonyi in #14868 - website/release notes: add tailscale to new integrations by @dominic-r in #14859
- website/docs: rotate supported versions:
2025.6by @gergosimonyi in #14856 - root: backport version bump
2025.6.0by @gergosimonyi in #14904 - web: bump API Client version by @authentik-automation[bot] in #14907
- core: bump zipp from 3.21.0 to v3.22.0 by @melizeche in #14903
- core: bump typing-inspection from 0.4.0 to v0.4.1 by @melizeche in #14901
- core: bump opentelemetry-api from 1.33.0 to v1.34.0 by @melizeche in #14891
- core: bump boto3 from 1.38.13 to v1.38.29 by @melizeche in #14880
- core: bump multidict from 6.4.3 to v6.4.4 by @melizeche in #14890
- core: bump frozenlist from 1.6.0 to v1.6.2 by @melizeche in #14884
- core: bump setuptools from 80.4.0 to v80.9.0 by @melizeche in #14897
- core: bump google-auth from 2.40.1 to v2.40.2 by @melizeche in #14886
- core: bump rpds-py from 0.24.0 to v0.25.1 by @melizeche in #14896
- core: bump google-api-core from 2.24.2 to v2.25.0 by @melizeche in #14885
- core: bump typing-extensions from 4.13.2 to v4.14.0 by @melizeche in #14900
- core: bump daphne from 4.1.2 to v4.2.0 by @melizeche in #14882
- core: bump msgraph-core from 1.3.3 to v1.3.4 by @melizeche in #14889
- core: bump pluggy from 1.5.0 to v1.6.0 by @melizeche in #14892
- core: bump aiohttp from 3.11.18 to v3.12.8 by @melizeche in #14878
- core: bump std-uritemplate from 2.0.3 to v2.0.5 by @melizeche in #14898
- core: bump jsonschema from 4.23.0 to v4.24.0 by @melizeche in #14887
- core: bump prometheus-client from 0.21.1 to v0.22.1 by @melizeche in #14893
- core: bump durationpy from 0.9 to v0.10 by @melizeche in #14883
- core: bump azure-identity from 1.22.0 to v1.23.0 by @melizeche in #14879
- core: bump uritemplate from 4.1.1 to v4.2.0 by @melizeche in #14902
- core: bump click from 8.2.0 to v8.2.1 by @melizeche in #14881
- core: bump protobuf from 6.30.2 to v6.31.1 by @melizeche in #14894
- core: bump redis from 6.0.0 to v6.2.0 by @melizeche in #14895
- website/docs: add credentials prompt for rac doc by @dewi-tik in #14840
- website/docs: fix note at end of rac credentials prompt by @dewi-tik in #14909
- website/integrations: fix komodo provider url by @dylangottlieb in #14912
- website/integrations: improve komodo config verification by @dominic-r in #14849
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration[bot] in #14914
- translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration[bot] in #14916
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration[bot] in #14915
- core: bump goauthentik.io/api/v3 from 3.2025041.4 to 3.2025060.1 by @dependabot[bot] in #14919
- core, web: update translations by @authentik-automation[bot] in #14910
- tenants: fix tenant aware celery scheduler by @rissson in #14921
- *: use ManagedAppConfig everywhere by @rissson in #14839
- providers/proxy: set_oauth_defaults in reconcile instead of task by @rissson in #14875
- core: bump astral-sh/uv from 0.7.10 to 0.7.11 by @dependabot[bot] in #14918
- translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration[bot] in #14923
- admin: only run update checks in the default tenant by @rissson in #14874
- docusaurus-config: Update deps, colors. by @GirlBossRush in #14796
- website/docs: fix outdated and incorrect example kubernetes deployment by @BeryJu in #14928
- web/user: fix user settings flow not loading by @BeryJu in #14911
- web/admin: make message container bottom aligned for admin interface by @BeryJu in #14816
- website/integrations: fix webfinger link in tailscale doc by @Bisns in #14942
- providers/proxy: add option to override host header with property mappings by @BeryJu in #14927
- core, web: update translations by @authentik-automation[bot] in #14933
- root: remove /if/help by @rissson in #14929
- website/docs: add 2025.6.1 release notes by @rissson in #14948
- core: bump django from 5.1.9 to 5.1.10 by @melizeche in #14951
- web/admin: use attribute naming scheme for attributes by @kensternberg-authentik in #14644
- web/maintenance: remove
writeOnlyhacks from Form and HorizontalFormElement by @kensternberg-authentik in #14649 - web/standards: fix boolean attribute abuse by @kensternberg-authentik in #14662
- outposts: remove duplicate startup/setup code, add pyroscope, make sentry not reconfigure every time by @BeryJu in #14724
- tests/e2e: WebAuthn E2E tests by @BeryJu in #14461
- website: bump the build group across 1 directory with 9 updates by @dependabot[bot] in #14937
- core: bump golang.org/x/sync from 0.14.0 to 0.15.0 by @dependabot[bot] in #14936
- lifecycle/aws: bump aws-cdk from 2.1017.1 to 2.1018.0 in /lifecycle/aws by @dependabot[bot] in #14939
- core, web: update translations by @authentik-automation[bot] in #14954
- web: bump @sentry/browser from 9.24.0 to 9.25.1 in /web in the sentry group across 1 directory by @dependabot[bot] in #14865
- core, web: update translations by @authentik-automation[bot] in #14962
- website: bump @typescript-eslint/parser from 8.32.1 to 8.33.1 in /website by @dependabot[bot] in #14828
- website: bump the eslint group in /website with 4 updates by @dependabot[bot] in #14967
- web: bump the eslint group across 2 directories with 3 updates by @dependabot[bot] in #14833
- web: bump @fortawesome/fontawesome-free from 6.6.0 to 6.7.2 in /web by @dependabot[bot] in #14716
- web: bump mermaid from 11.4.1 to 11.6.0 in /web by @dependabot[bot] in #14688
- website: bump @types/node from 22.15.29 to 22.15.30 in /website by @dependabot[bot] in #14968
- web: bump ts-pattern from 5.4.0 to 5.7.1 in /web by @dependabot[bot] in #14686
- web: bump @types/mocha from 10.0.8 to 10.0.10 in /web by @dependabot[bot] in #14684
- core: bump github.com/redis/go-redis/v9 from 9.9.0 to 9.10.0 by @dependabot[bot] in #14966
- core: bump astral-sh/uv from 0.7.11 to 0.7.12 by @dependabot[bot] in #14965
- core: bump axllent/mailpit from v1.25.1 to v1.26.0 in /tests/e2e by @dependabot[bot] in #14964
- core: bump selenium/standalone-chrome from 136.0 to 137.0 in /tests/e2e by @dependabot[bot] in #14963
- website: bump prettier-plugin-packagejson from 2.5.14 to 2.5.15 in /website by @dependabot[bot] in #14829
- web: bump @codemirror/lang-python from 6.1.6 to 6.2.1 in /web by @dependabot[bot] in #14713
- stages/email: Only attach logo to email if used by @chriselsen in #14835
- root: backport 2025.6.1 bump by @BeryJu in #14970
- web: bump API Client version by @authentik-automation[bot] in #14971
- core: bump goauthentik.io/api/v3 from 3.2025060.1 to 3.2025061.1 by @dependabot[bot] in #14972
- website: fix search across multiple subdomains by @BeryJu in #14976
- website/docs: added a link in our Upgrade docs to the Outpost upgrade docs, slight reformatting by @tanberry in #14931
- web/elements: fix dual select without sortBy by @BeryJu in #14977
- internal/outpost: fix incorrect usage of golang SHA API by @BeryJu in #14981
- website/integrations: replaces all kbd and em tags by @dewi-tik in #14980
- events: rework metrics endpoint by @BeryJu in #14934
- core, web: update translations by @authentik-automation[bot] in #14984
- web: bump API Client version by @authentik-automation[bot] in #14985
- core: bump goauthentik/fips-python from 3.13.3-slim-bookworm-fips to 3.13.4-slim-bookworm-fips by @dependabot[bot] in #14990
- core: bump cryptography from 45.0.3 to 45.0.4 by @dependabot[bot] in #14989
- outposts: Refactor session end signal and add LDAP support by @BeryJu in #14539
- website/integrations: add nextcloud ldap config and update doc to new styling by @dewi-tik in #14866
- website/integrations: add 1password by @dewi-tik in #14815
- website/integrations: fix typos, update language and styling by @dewi-tik in #14978
- web: bump the eslint group across 2 directories with 3 updates by @dependabot[bot] in #14991
- website: bump the eslint group in /website with 3 updates by @dependabot[bot] in #14987
- website: bump @types/node from 22.15.30 to 24.0.0 in /website by @dependabot[bot] in #14988
- core: bump goauthentik.io/api/v3 from 3.2025061.1 to 3.2025061.2 by @dependabot[bot] in #14986
- website/integrations: add bitwarden by @dewi-tik in #14922
- web/admin: show selected policy engine mode on bindings pages, allow setting it on sources by @rissson in #12963
- brands: fix custom_css being escaped by @BeryJu in #14994
- website/integrations: add new categories and update sidebar info by @dewi-tik in #14995
- web/admin: fix language in certificate import by @kensternberg-authentik in #14953
- core: bump google-api-python-client from 2.171.0 to 2.172.0 by @dependabot[bot] in #15004
- core: bump msgraph-sdk from 1.32.0 to 1.33.0 by @dependabot[bot] in #15003
- web: bump @sentry/browser from 9.27.0 to 9.28.0 in /web in the sentry group across 1 directory by @dependabot[bot] in #15002
- website: bump the build group in /website with 6 updates by @dependabot[bot] in #15001
- website/docs: note usage of
is_restoredby source stage by @BeryJu in #13422 - website/docs: fixes misplaced sentence by @tanberry in #14998
- core, web: update translations by @authentik-automation[bot] in #14999
- website/docs: add host header dynamic property mapping by @dewi-tik in #15006
- web/elements: Add light mode custom css handling by @cdmx-in in #14944
- core: bump django from 5.1.10 to 5.1.11 by @melizeche in #14997
- website/integrations: standardize application slug placeholder in docs by @dewi-tik in #15007
- outposts/ldap: Handle comma-separated attributes in LDAP search requests by @dominic-r in #15000
- root: test label handling and error reporting in PytestTestRunner by @dominic-r in #14000
- website/docs: correct minor version in release notes by @Zeik0s in #15012
- translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration[bot] in #15019
- core: fix transaction test case by @BeryJu in #15021
- website: bump @types/node from 24.0.0 to 24.0.1 in /website by @dependabot[bot] in #15014
- website: bump postcss from 8.5.4 to 8.5.5 in /website by @dependabot[bot] in #15013
- lifecycle/aws: bump aws-cdk from 2.1018.0 to 2.1018.1 in /lifecycle/aws by @dependabot[bot] in #15016
- translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration[bot] in #15018
- web: bump the sentry group across 1 directory with 2 updates by @dependabot[bot] in #15025
- core, web: update translations by @authentik-automation[bot] in #15026
- core: bump kubernetes from 32.0.1 to 33.1.0 by @dependabot[bot] in #15031
- core: bump sentry-sdk from 2.29.1 to 2.30.0 by @dependabot[bot] in #15030
- core: bump twilio from 9.6.2 to 9.6.3 by @dependabot[bot] in #15029
- core: bump astral-sh/uv from 0.7.12 to 0.7.13 by @dependabot[bot] in #15028
- website: bump the build group in /website with 6 updates by @dependabot[bot] in #15027
- blueprints: sort schema items by @rissson in #15022
- website/docs: also hide the postgres pool_options setting by @rissson in #15023
- providers/rac: fixes prompt data not being merged with connection_settings by @dewi-tik in #15037
- web/admin: Text and Textarea Fields that "hide" their contents until prompted by @kensternberg-authentik in #15024
- web/admin: adopt ak-hidden-text by @BeryJu in #15042
- core, web: update translations by @authentik-automation[bot] in #15043
- blueprints: add section support for organisation by @BeryJu in #15045
- core, web: update translations by @authentik-automation[bot] in #15048
- translate: Updates for file locale/en/LC_MESSAGES/django.po in es by @transifex-integration[bot] in #15047
- stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation[bot] in #15049
- web/elements: fix typo in localeComparator by @BeryJu in #15054
- web/flow: cleanup WebAuthn helper functions by @BeryJu in #14460
- website/integrations: change nextcloud scope name to avoid confusion by @Keksmo in #15050
- providers/oauth2: bug fixes from conformance testing by @BeryJu in #15056
- core: bump pydantic from 2.11.5 to 2.11.7 by @dependabot[bot] in #15063
- core: bump axllent/mailpit from v1.26.0 to v1.26.1 in /tests/e2e by @dependabot[bot] in #15060
- web: bump the eslint group across 2 directories with 2 updates by @dependabot[bot] in #15062
- web: bump @sentry/browser from 9.28.1 to 9.29.0 in /web in the sentry group across 1 directory by @dependabot[bot] in #15061
- web: bump the wdio group across 1 directory with 3 updates by @dependabot[bot] in #14593
- website: bump the eslint group in /website with 2 updates by @dependabot[bot] in #15059
- core: bump goauthentik/fips-python from 3.13.4-slim-bookworm-fips to 3.13.5-slim-bookworm-fips by @dependabot[bot] in #15058
- website/docs: postgres troubleshooting: get PGPASSWORD from POSTGRES_PASSWORD_FILE by @vonProteus in #15039
- website/docs: remove commented out config options by @BeryJu in #15064
- website/docs: release notes for
2025.6.2by @gergosimonyi in #15065 - Web/cleanup/empty state better slot handling by @kensternberg-authentik in #14289
- web/admin: remove all special cases of slug handling, replace with a "smart slug" component by @kensternberg-authentik in #14983
- website/integrations: add note to nextcloud OIDC config by @dewi-tik in #15073
- root: backport version bump
2025.6.2by @gergosimonyi in #15078 - web/common: fix uiConfig not merged correctly by @BeryJu in #15080
- web: bump API Client version by @authentik-automation[bot] in #15079
- ci: fix post-release e2e builds failing by @BeryJu in #15082
- translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration[bot] in #15075
- translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration[bot] in #15074
- web: bump the eslint group across 2 directories with 3 updates by @dependabot[bot] in #15091
- core: bump goauthentik.io/api/v3 from 3.2025061.2 to 3.2025062.1 by @dependabot[bot] in #15090
- core: bump webauthn from 2.5.2 to 2.6.0 by @dependabot[bot] in #15089
- website: bump postcss from 8.5.5 to 8.5.6 in /website by @dependabot[bot] in #15087
- website: bump @types/node from 24.0.1 to 24.0.3 in /website by @dependabot[bot] in #15086
- website: bump the eslint group in /website with 3 updates by @dependabot[bot] in #15085
- core, web: update translations by @authentik-automation[bot] in #15084
- website/docs: Add steps to troubleshoot /initial-setup/ by @melizeche in #15011
- website/integrations: zipline: add offline_access scope by @dominic-r in #15099
- website: bump @types/lodash from 4.17.17 to 4.17.18 in /website by @dependabot[bot] in #15106
- core: bump github.com/jellydator/ttlcache/v3 from 3.3.0 to 3.4.0 by @dependabot[bot] in #15105
- web: bump @sentry/browser from 9.29.0 to 9.30.0 in /web in the sentry group across 1 directory by @dependabot[bot] in #15104
- core, web: update translations by @authentik-automation[bot] in #15102
- enterprise/search: ability to use more precise search queries by @BeryJu in #7698
- web: bump API Client version by @authentik-automation[bot] in #15110
- core: bump django-redis from 5.4.0 to 6.0.0 by @dependabot[bot] in #15107
- core: bump tornado from 6.4.2 to v6.5.1 by @melizeche in #15100
- enterprise/web/admin: OSM for events by @BeryJu in #9287
- events: add option to send notifications to event user by @BeryJu in #15083
- web: bump API Client version by @authentik-automation[bot] in #15112
- website: split integrations partially by @BeryJu in #15076
- website: add netlify cache plugin by @BeryJu in #15113
- core: bump django-cte from 1.3.3 to 2.0.0 by @dependabot[bot] in #15088
- core: bump aiohttp from 3.12.8 to v3.12.13 by @melizeche in #15117
- core: bump boto3 from 1.38.29 to v1.38.38 by @melizeche in #15118
- core: bump certifi from 2025.4.26 to v2025.6.15 by @melizeche in #15119
- core: bump frozenlist from 1.6.2 to v1.7.0 by @melizeche in #15120
- core: bump kombu from 5.5.3 to v5.5.4 by @melizeche in #15123
- core: bump google-api-core from 2.25.0 to v2.25.1 by @melizeche in #15121
- core: bump msgpack from 1.1.0 to v1.1.1 by @melizeche in #15124
- core: bump multidict from 6.4.4 to v6.5.0 by @melizeche in #15125
- core: bump oauthlib from 3.2.2 to v3.3.0 by @melizeche in #15126
- core: bump opentelemetry-api from 1.34.0 to v1.34.1 by @melizeche in #15127
- core: bump propcache from 0.3.1 to v0.3.2 by @melizeche in #15128
- core: bump twisted from 24.11.0 to v25.5.0 by @melizeche in #15130
- core: bump urllib3 from 2.4.0 to v2.5.0 by @melizeche in #15131
- core: bump watchfiles from 1.0.5 to v1.1.0 by @melizeche in #15132
- core: bump yarl from 1.20.0 to v1.20.1 by @melizeche in #15133
- core: bump zipp from 3.22.0 to v3.23.0 by @melizeche in #15134
- core: bump requests from 2.32.3 to v2.32.4 by @melizeche in #15129
- core: bump google-auth from 2.40.2 to v2.40.3 by @melizeche in #15122
- web/admin: hide webhook URL by default by @BeryJu in #15136
- events: disable computation of autocomplete structure for event context by @BeryJu in #15137
- events: disable all JSON autocomplete by @BeryJu in #15138
- core: bump goauthentik.io/api/v3 from 3.2025062.1 to 3.2025062.3 by @dependabot[bot] in #15148
- core: bump python-kadmin-rs from 0.6.0 to 0.6.1 by @dependabot[bot] in #15145
- core: bump django-prometheus from 2.3.1 to 2.4.0 by @dependabot[bot] in #15147
- core: bump msgraph-sdk from 1.33.0 to 1.34.0 by @dependabot[bot] in #15146
- core, web: update translations by @authentik-automation[bot] in #15139
- web: bump @spotlightjs/spotlight from 3.0.0 to 3.0.1 in /web in the sentry group across 1 directory by @dependabot[bot] in #15144
- root: extract custom setup code by @rissson in #15150
- website: Touch up shared config. by @GirlBossRush in #15153
- events: fix map again and fix flaky tests by @BeryJu in #15154
- website: Docusaurus 3.8 shared fixes part 2 by @GirlBossRush in #15155
- website/integrations: update actual budget docs link by @theshoehorn in #15156
- sources/ldap: fix sync on empty groups by @gergosimonyi in #15158
- core: bump google-api-python-client from 2.172.0 to 2.173.0 by @dependabot[bot] in #15167
- lifecycle/aws: bump aws-cdk from 2.1018.1 to 2.1019.1 in /lifecycle/aws by @dependabot[bot] in #15162
- root: update bumpversion changed list by @gergosimonyi in #15170
- revert: web/flow: cleanup WebAuthn helper functions (#14460)" by @BeryJu in #15172
- website/docs: fix egregious maintenance fail by @tanberry in #15176
- website: bump the build group in /website with 6 updates by @dependabot[bot] in #15166
- stages/user_login: fix session binding logging by @BeryJu in #15175
- stages/authenticator_webauthn: add option to configure max attempts by @BeryJu in #15041
- web/user: fix infinite loop when no user settings flow is set by @BeryJu in #15188
- web: bump API Client version by @authentik-automation[bot] in #15193
- core, web: update translations by @authentik-automation[bot] in #15194
- website/integrations: bitwarden: fix certificate download section by @dominic-r in #15184
- core: bump axllent/mailpit from v1.26.1 to v1.26.2 in /tests/e2e by @dependabot[bot] in #15201
- core: bump goauthentik.io/api/v3 from 3.2025062.3 to 3.2025062.4 by @dependabot[bot] in #15197
- web: bump the eslint group across 2 directories with 1 update by @dependabot[bot] in #15198
- website: bump the build group in /website with 6 updates by @dependabot[bot] in #15200
- enterprise/stages/source: update outer flow with context from inner flow by @BeryJu in #15177
- root: add system check for database encoding by @BeryJu in #15186
- ci: fix CodeQL failing on cherry-pick PRs by @BeryJu in #15205
- website/docs: sys mgmt: clean up certificates and add steps to download saml certs by @dominic-r in #14497
- ci: update daily tested versions by @dominic-r in #15196
- website: bump prettier from 3.5.3 to 3.6.0 in /website by @dependabot[bot] in #15199
- web/elements: typing error when variables are not converted to string by @Leandro4002 in #15169
- web/admin: point create application to wizard by @BeryJu in #15211
- sources/scim: add group patch support by @BeryJu in #15212
- translate: Updates for file web/xliff/en.xlf in it by @transifex-integration[bot] in #15219
- website: bump the build group in /website with 6 updates by @dependabot[bot] in #15218
- core: bump astral-sh/uv from 0.7.13 to 0.7.14 by @dependabot[bot] in #15217
- website: bump the eslint group in /website with 3 updates by @dependabot[bot] in #15216
- web: bump @sentry/browser from 9.30.0 to 9.31.0 in /web in the sentry group across 1 directory by @dependabot[bot] in #15214
- core: bump github.com/getsentry/sentry-go from 0.33.0 to 0.34.0 by @dependabot[bot] in #15213
- web: bump the eslint group across 2 directories with 3 updates by @dependabot[bot] in #15215
- *: remove redundant user_logged_out signals by @rissson in #15221
- web/elements/empty-state: Fix issues with EmptyState and Loading Overlay by @kensternberg-authentik in #15152
- website/docs: add links to Customer Portal by @tanberry in #15223
- root: fix some cases of invalid data triggering exceptions by @BeryJu in #14799
- core: include more authenticator details when possible by @BeryJu in #15224
- web: bump API Client version by @authentik-automation[bot] in #15227
- providers/oauth2: add conformance tools by @BeryJu in #15228
- website/docs: enterprise: fix link for customer portal by @dominic-r in #15225
- website/docs: Fix documentation for external group write commands in hashicorp-vault integrations by @balazshasprai in #15234
- core, web: update translations by @authentik-automation[bot] in #15229
- core: bump sentry-sdk from 2.30.0 to 2.31.0 by @dependabot[bot] in #15233
- core: bump goauthentik.io/api/v3 from 3.2025062.4 to 3.2025062.5 by @dependabot[bot] in #15232
- core: bump github.com/redis/go-redis/v9 from 9.10.0 to 9.11.0 by @dependabot[bot] in #15231
- website: bump @types/node from 24.0.3 to 24.0.4 in /website by @dependabot[bot] in #15230
- core: better API validation for JSON fields by @BeryJu in #15236
- web: bump API Client version by @authentik-automation[bot] in #15237
- website/integrations: add ssh active user filter to sssd integration doc by @dewi-tik in #15203
- blueprints: add JSON tag to parse JSON from string by @BeryJu in #15235
- events: use pending_user as user when possible by @BeryJu in #15238
- core: bump pygments from 2.19.1 to v2.19.2 by @melizeche in #15243
- core: bump python-dotenv from 1.1.0 to v1.1.1 by @melizeche in #15244
- core: bump click-plugins from 1.1.1 to v1.1.1.2 by @melizeche in #15240
- core: bump multidict from 6.4.4 to v6.5.1 by @melizeche in #15241
- core: bump boto3 from 1.38.29 to v1.38.43 by @melizeche in #15239
- core: bump oauthlib from 3.2.2 to v3.3.1 by @melizeche in #15242
- website: minimalistic readme by @dominic-r in #14240
- website: add reference to "writing documentation" to readme by @dominic-r in #15245
- translate: Updates for file web/xliff/en.xlf in it by @transifex-integration[bot] in #15266
- website: bump prettier-plugin-packagejson from 2.5.15 to 2.5.16 in /website by @dependabot[bot] in #15264
- website: bump @types/lodash from 4.17.18 to 4.17.19 in /website by @dependabot[bot] in #15262
- website: bump the build group in /website with 6 updates by @dependabot[bot] in #15261
- web: bump @sentry/browser from 9.31.0 to 9.32.0 in /web in the sentry group across 1 directory by @dependabot[bot] in #15260
- core: bump django-guardian from 3.0.0 to 3.0.3 by @dependabot[bot] in #15254
- lifecycle/aws: bump aws-cdk from 2.1019.1 to 2.1019.2 in /lifecycle/aws by @dependabot[bot] in #15258
- core: bump astral-sh/uv from 0.7.14 to 0.7.15 by @dependabot[bot] in #15257
- core: bump msgraph-sdk from 1.34.0 to 1.35.0 by @dependabot[bot] in #15256
- core: bump google-api-python-client from 2.173.0 to 2.174.0 by @dependabot[bot] in #15255
- core: bump goauthentik.io/api/v3 from 3.2025062.5 to 3.2025062.6 by @dependabot[bot] in #15259
- core, web: update translations by @authentik-automation[bot] in #15251
- core: bump django-prometheus from 2.4.0 to 2.4.1 by @dependabot[bot] in #15253
- website: bump prettier from 3.6.0 to 3.6.1 in /website by @dependabot[bot] in #15263
- website/docs: add hint that flows need cookies by @lemoer in #15252
- web/packages: NPM workspace: Mini Cleanup by @GirlBossRush in #14767
- ci: more adjustable mirror options by @BeryJu in #15287
- translate: Updates for file web/xliff/en.xlf in it by @transifex-integration[bot] in #15272
- translate: Updates for file locale/en/LC_MESSAGES/django.po in it by @transifex-integration[bot] in #15273
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration[bot] in #15282
- translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration[bot] in #15283
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration[bot] in #15284
- translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration[bot] in #15285
- website/docs: updated security release procedure by @BeryJu in #15288
- security: fix CVE-2025-52553 by @BeryJu in #15289
- website: changelog for security releases by @BeryJu in #15291
- release: backport 2025.6.3 by @BeryJu in #15292
- core, web: update translations by @authentik-automation[bot] in #15278
- website: bump prettier from 3.6.1 to 3.6.2 in /website by @dependabot[bot] in #15280
- website/integrations: fix typo in actual budget by @chkpwd in #15293
- website/integrations: bookstack: fix redirect URI by @dominic-r in #15295
- website/integrations: change issuer in zulip integration documentation by @CSDUMMI in #15296
- website/integrations: add omada controller doc by @dewi-tik in #14523
- core, web: update translations by @authentik-automation[bot] in #15298
- core: bump axllent/mailpit from v1.26.2 to v1.27.0 in /tests/e2e by @dependabot[bot] in #15315
- core: bump sentry-sdk from 2.31.0 to 2.32.0 by @dependabot[bot] in #15314
- core: bump astral-sh/uv from 0.7.15 to 0.7.17 by @dependabot[bot] in #15311
- core: bump goauthentik.io/api/v3 from 3.2025062.6 to 3.2025063.1 by @dependabot[bot] in #15306
- core: bump uvicorn[standard] from 0.34.3 to 0.35.0 by @dependabot[bot] in #15312
- website: bump the eslint group in /website with 2 updates by @dependabot[bot] in #15309
- website: bump prettier-plugin-packagejson from 2.5.16 to 2.5.17 in /website by @dependabot[bot] in #15308
- website: bump @types/node from 24.0.4 to 24.0.7 in /website by @dependabot[bot] in #15307
- stages/email: remove superflous from account_confirmation template by @violoncelloCH in #15297
- core: fix missing serializer on AuthenticatedSession by @BeryJu in #15323
- web/elements: fix table search not resetting page when query changes by @BeryJu in #15324
- enterprise/search: fix search fallback for non QL queries by @BeryJu in #15325
- stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation[bot] in #15327
- website: bump the eslint group in /website with 3 updates by @dependabot[bot] in #15329
- website: bump the build group in /website with 3 updates by @dependabot[bot] in #15279
- website: bump @types/node from 24.0.7 to 24.0.8 in /website by @dependabot[bot] in #15328
- core: bump lxml from 5.4.0 to 6.0.0 by @dependabot[bot] in #15281
- website/docs: re-add gtag by @BeryJu in #15334
- website: bump the build group across 1 directory with 9 updates by @dependabot[bot] in #15332
- website/docs: enhance customization docs by @tanberry in #15081
- core: bump automat from 25.4.16 to v25.4.16 by @melizeche in #15349
- core: bump autobahn from 24.4.2 to v24.4.2 by @melizeche in #15348
- core: bump attrs from 25.3.0 to v25.3.0 by @melizeche in #15347
- core: bump asn1crypto from 1.5.1 to v1.5.1 by @melizeche in #15346
- core: bump asgiref from 3.8.1 to v3.8.1 by @melizeche in #15345
- core: bump argon2-cffi-bindings from 21.2.0 to v21.2.0 by @melizeche in #15344
- core: bump argon2-cffi from 25.1.0 to v25.1.0 by @melizeche in #15343
- core: bump anyio from 4.9.0 to v4.9.0 by @melizeche in #15342
- core: bump annotated-types from 0.7.0 to v0.7.0 by @melizeche in #15341
- core: bump amqp from 5.3.1 to v5.3.1 by @melizeche in #15340
- core: bump aiosignal from 1.3.2 to v1.3.2 by @melizeche in #15339
- core: bump aiohttp-retry from 2.9.1 to v2.9.1 by @melizeche in #15338
- core: bump aiohttp from 3.12.13 to v3.12.13 by @melizeche in #15337
- core: bump aiohappyeyeballs from 2.6.1 to v2.6.1 by @melizeche in #15336
- translate: Updates for file locale/en/LC_MESSAGES/django.po in de by @transifex-integration[bot] in #15360
- core: bump djangorestframework-guardian from 0.3.0 to 0.4.0 by @dependabot[bot] in #15354
- core: bump astral-sh/uv from 0.7.17 to 0.7.18 by @dependabot[bot] in #15359
- lifecycle/aws: bump aws-cdk from 2.1019.2 to 2.1020.0 in /lifecycle/aws by @dependabot[bot] in #15358
- website: bump @types/node from 24.0.8 to 24.0.10 in /website by @dependabot[bot] in #15357
- website: bump the eslint group in /website with 2 updates by @dependabot[bot] in #15355
- web: Upgrade Prettier import formatter by @GirlBossRush in #15276
- web: Fix issue where TypeDoc comments are arranged between imports. by @GirlBossRush in #15364
- website: Mark all URLs as external. by @GirlBossRush in #15363
- website/integrations: remove ports instructions for ABM by @BeryJu in #15370
- website/integrations: kanboard by @dominic-r in #14515
- web: bump the eslint group across 2 directories with 5 updates by @dependabot[bot] in #15371
- core: bump cryptography from 45.0.4 to 45.0.5 by @dependabot[bot] in #15369
- web: bump @sentry/browser from 9.32.0 to 9.34.0 in /web in the sentry group across 1 directory by @dependabot[bot] in #15368
- core: bump msgraph-sdk from 1.35.0 to 1.36.0 by @dependabot[bot] in #15367
- lifecycle/aws: bump aws-cdk from 2.1020.0 to 2.1020.1 in /lifecycle/aws by @dependabot[bot] in #15366
- website: bump @types/lodash from 4.17.19 to 4.17.20 in /website by @dependabot[bot] in #15356
- website/integrations: fix kanboard doc prettier by @dewi-tik in #15381
- core, web: update translations by @authentik-automation[bot] in #15377
- website/docs: clarify upgrade process by @dewi-tik in #15330
- core: bump astral-sh/uv from 0.7.18 to 0.7.19 by @dependabot[bot] in #15379
- website/integrations: add papra by @dewi-tik in #15093
- website/integrations: add planka by @dewi-tik in #15108
- web/admin: fix nested table pagination and search by @BeryJu in #15385
- core: fix set_token_key permission not declared by @BeryJu in #15384
- web/flows: fix bottom padding when loading challenge by @BeryJu in #15372
- website/docs: improve the docs about our Events and logging by @tanberry in #15270
- website/integrations: add ironclad by @dewi-tik in #14446
- core, web: update translations by @authentik-automation[bot] in #15394
- core: bump opencontainers from 0.0.14 to 0.0.15 by @dependabot[bot] in #15399
- core: bump twilio from 9.6.3 to 9.6.4 by @dependabot[bot] in #15396
- website/docs: Update index.md for Sonarr by @begunfx in #15395
- website/integrations: add OVH by @hobyte in #14664
- enterprise/search: fix schema once again by @BeryJu in #15392
- lifecycle/aws: bump aws-cdk from 2.1020.1 to 2.1020.2 in /lifecycle/aws by @dependabot[bot] in #15402
- website: bump the build group in /website with 3 updates by @dependabot[bot] in #15398
- core: bump google-api-python-client from 2.174.0 to 2.175.0 by @dependabot[bot] in #15397
- policies: Optimize policy checking for static bindings by @BeryJu in #14957
- web/flow: fix ak-flow-card layout for identification stage with source and enrollment by @BeryJu in #15404
- stages/user_login: unknown device by @BeryJu in #14459
- stages/authenticator_validate: fix WebAuthn in android during google account addition by @BeryJu in #15351
- web: Fix lack of error when setting recovery password by @GirlBossRush in #15405
- web/flow: fix flow dark theme flow footer band; user settings flow by @BeryJu in #15408
- web: bump API Client version by @authentik-automation[bot] in #15411
- translate: Updates for file web/xliff/en.xlf in de by @transifex-integration[bot] in #15410
- website/docs: configuration: cleanup postgres section by @dominic-r in #14544
- website/docs: air-gapped: Modernize for 2025.8 and address suggestions by @dominic-r in #15305
- website/integrations: add seafile by @fasonju in #14841
- brands: sort matched brand by match length by @BeryJu in #15413
- core, web: update translations by @authentik-automation[bot] in #15414
- website/docs: Re-introduce Websockets for nginx proxy manager by @HeySora in #14525
- web: rework storybook for flow components and to make the design consistent by @BeryJu in #15415
- web: bump API Client version by @authentik-automation[bot] in #15416
- translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration[bot] in #15420
- translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration[bot] in #15418
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration[bot] in #15419
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration[bot] in #15417
- core, web: update translations by @authentik-automation[bot] in #15422
- website/docs: replace single step with a bullt by @tanberry in #15428
- core: bump selenium/standalone-chrome from 137.0 to 138.0 in /tests/e2e by @dependabot[bot] in #15426
- core: bump axllent/mailpit from v1.27.0 to v1.27.1 in /tests/e2e by @dependabot[bot] in #15425
- web: bump @sentry/browser from 9.34.0 to 9.35.0 in /web in the sentry group across 1 directory by @dependabot[bot] in #15424
- website: bump the build group in /website with 3 updates by @dependabot[bot] in #15423
- website/docs: add manual RAC outpost deployment information by @dewi-tik in #15362
- website/docs: fix typo and update wordpress plugin name in wordpress integration guide by @TyphousCrane654 in #15432
- website/integrations: add zoho by @dewi-tik in #15388
- translate: Updates for file web/xliff/en.xlf in de by @transifex-integration[bot] in #15455
- translate: Updates for file locale/en/LC_MESSAGES/django.po in de by @transifex-integration[bot] in #15454
- website: bump the build group in /website with 6 updates by @dependabot[bot] in #15453
- core: bump github.com/getsentry/sentry-go from 0.34.0 to 0.34.1 by @dependabot[bot] in #15451
- core: bump txaio from 23.1.1 to v25.6.1 by @melizeche in #15448
- core: bump rpds-py from 0.25.1 to v0.26.0 by @melizeche in #15447
- core: bump msgraph-core from 1.3.4 to v1.3.5 by @melizeche in #15445
- core: bump typing-extensions from 4.14.0 to v4.14.1 by @melizeche in #15449
- core: bump microsoft-kiota-abstractions from 1.9.3 to v1.9.4 by @melizeche in #15440
- core: bump boto3 from 1.38.43 to v1.39.3 by @melizeche in #15438
- core: bump daphne from 4.2.0 to v4.2.1 by @melizeche in #15439
- core: bump microsoft-kiota-serialization-text from 1.9.3 to v1.9.4 by @melizeche in #15444
- web: bump the eslint group across 2 directories with 3 updates by @dependabot[bot] in #15450
- core: bump microsoft-kiota-serialization-multipart from 1.9.3 to v1.9.4 by @melizeche in #15443
- core: bump azure-core from 1.34.0 to v1.35.0 by @melizeche in #15437
- core: bump microsoft-kiota-serialization-json from 1.9.3 to v1.9.4 by @melizeche in #15442
- core: bump asgiref from 3.8.1 to v3.9.0 by @melizeche in #15436
- core: bump aiosignal from 1.3.2 to v1.4.0 by @melizeche in #15435
- core: bump multidict from 6.5.1 to v6.6.3 by @melizeche in #15446
- core: bump microsoft-kiota-serialization-form from 1.9.3 to v1.9.4 by @melizeche in #15441
- root: monitoring: force db connection reload before healthcheck by @rissson in #9970
- website/docs: fix small typos by @dechen-authentik in #15403
- website: bump the eslint group in /website with 3 updates by @dependabot[bot] in #15452
- website/docs: edits to latest Events docs by @tanberry in #15457
- events: fix ak_client_ip not set in notification rule policy context by @BeryJu in #15464
- web/flows: more padding fixes by @BeryJu in #15467
- core: bump msgraph-sdk from 1.36.0 to 1.37.0 by @dependabot[bot] in #15472
- website: bump @types/node from 24.0.10 to 24.0.12 in /website by @dependabot[bot] in #15470
- website: bump the build group in /website with 3 updates by @dependabot[bot] in #15469
- core, web: update translations by @authentik-automation[bot] in #15468
- core: bump google-api-python-client from 2.175.0 to 2.176.0 by @dependabot[bot] in #15471
- web: Fix dangling div. by @GirlBossRush in #15478
- website: Docusaurus 3.8 prep integrations by @GirlBossRush in #15483
- core: bump astral-sh/uv from 0.7.19 to 0.7.20 by @dependabot[bot] in #15496
- core: bump maxmind/geoipupdate from v7.1.0 to v7.1.1 by @dependabot[bot] in #15495
- core: bump golang.org/x/sync from 0.15.0 to 0.16.0 by @dependabot[bot] in #15493
- web: bump @sentry/browser from 9.35.0 to 9.36.0 in /web in the sentry group across 1 directory by @dependabot[bot] in #15492
- website/docs: troubleshooting: Fix variable for postgres database in k8s by @dominic-r in #15503
- providers/proxy: fix ingress-nginx proxy buffer size annotations by @rissson in #15506
- web: Consistent use of static styles by @GirlBossRush in #15510
- website/docs: Improved Version Picker. by @GirlBossRush in #14404
- web: Import organization by @GirlBossRush in #14696
- web: Form submission by @GirlBossRush in #15477
- web: Fix form captcha submission by @GirlBossRush in #15482
- website/docs: add noun for SSO by @tanberry in #15509
- web: Clean up file methods. by @GirlBossRush in #15479
- core, web: update translations by @authentik-automation[bot] in #15514
- web: bump @sentry/browser from 9.36.0 to 9.37.0 in /web in the sentry group across 1 directory by @dependabot[bot] in #15519
- core: bump xmlsec from 1.3.15 to 1.3.16 by @dependabot[bot] in #15518
- core: bump twilio from 9.6.4 to 9.6.5 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15517
- website: bump @reduxjs/toolkit from 1.9.7 to 2.8.2 in /website by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15516
- website: bump the build group in /website with 3 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15515
- stages/prompt: fix list policy for prompt validation failing with multiple policies by @BeryJu in https://github.com/goauthentik/authentik/pull/15522
- translate: Updates for file locale/en/LC_MESSAGES/django.po in it by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/15529
- translate: Updates for file web/xliff/en.xlf in it by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/15530
- core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15532
- translate: Updates for file locale/en/LC_MESSAGES/django.po in es by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/15534
- sources/SCIM: Full Patch support for User and Group by @BeryJu in https://github.com/goauthentik/authentik/pull/15485
- ci: fix NPM publish again by @BeryJu in https://github.com/goauthentik/authentik/pull/15535
- web: bump API Client version by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15537
- web: bump brace-expansion from 1.1.11 to 1.1.12 in /packages/eslint-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15536
- website/docs: Use Django case insensitive filter for unique emails by @pascalwei in https://github.com/goauthentik/authentik/pull/15539
- web: bump the eslint group across 3 directories with 2 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15546
- web: bump @sentry/browser from 9.37.0 to 9.38.0 in /web in the sentry group across 1 directory by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15545
- website: bump @types/node from 24.0.12 to 24.0.13 in /website by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15544
- website: bump the eslint group in /website with 2 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15542
- core: bump github.com/grafana/pyroscope-go from 1.2.2 to 1.2.3 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15540
- core: bump goauthentik.io/api/v3 from 3.2025063.3 to 3.2025063.4 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15541
- sources/oauth: add entra ID source and move logic over by @BeryJu in https://github.com/goauthentik/authentik/pull/15538
- web: bump API Client version by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15547
- website/docs: add use case, move diagram, link to ABM by @tanberry in https://github.com/goauthentik/authentik/pull/15491
- web: Fix missing TypeScript dependency when running make for first time. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15502
- web: Disable autocomplete. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15551
- website/docs: fix a typo in SSF docs by @tanberry in https://github.com/goauthentik/authentik/pull/15554
- website/docs: added enterprise label to new Logging docs by @tanberry in https://github.com/goauthentik/authentik/pull/15556
- web: Fix intermediate wizard steps propagating refresh events to parent by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15548
- website: bump the build group in /website with 6 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15568
- core: bump astral-sh/uv from 0.7.20 to 0.7.21 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15567
- web: bump the eslint group across 2 directories with 3 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15566
- stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15563
- core: bump goauthentik.io/api/v3 from 3.2025063.4 to 3.2025063.5 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15564
- core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15560
- website/docs: Fix typo in matrix documentation by @melizeche in https://github.com/goauthentik/authentik/pull/15558
- website: bump the eslint group in /website with 3 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15565
- website: Update commands. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15561
- stages/email: only update is_active on user to not overwrite external changes by @BeryJu in https://github.com/goauthentik/authentik/pull/15508
- website: Prep for 3.8 path resolution. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15575
- enterprise: fix frontend considering license valid when it isnt by @BeryJu in https://github.com/goauthentik/authentik/pull/15578
- enterprise/audit: fix diff with update_fields by @BeryJu in https://github.com/goauthentik/authentik/pull/15574
- web: Storybook v9 by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15550
- website/integrations: re-add sitemap by @BeryJu in https://github.com/goauthentik/authentik/pull/15600
- web: bump @types/react from 19.1.5 to 19.1.8 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15597
- web: bump the swc group across 1 directory with 12 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15590
- web: bump the rollup group across 1 directory with 5 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15589
- web: bump the esbuild group across 2 directories with 5 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15588
- core: bump sentry-sdk from 2.32.0 to 2.33.0 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15585
- website: bump @types/node from 24.0.13 to 24.0.14 in /website by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15584
- website: bump the build group in /website with 3 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15583
- core: bump github.com/golang-jwt/jwt/v5 from 5.2.2 to 5.2.3 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15582
- web: bump the storybook group across 1 directory with 5 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15587
- core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15580
- web: bump prettier from 3.6.1 to 3.6.2 in /packages/prettier-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15595
- web: bump prettier from 3.5.3 to 3.6.2 in /packages/docusaurus-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15594
- web: bump @types/react-dom from 19.1.5 to 19.1.6 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15596
- events: improve error formatting in events by @BeryJu in https://github.com/goauthentik/authentik/pull/15187
- web: bump @types/react from 19.1.6 to 19.1.8 in /packages/docusaurus-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15593
- web: bump @sentry/browser from 9.38.0 to 9.39.0 in /web in the sentry group across 1 directory by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15586
- web: bump @types/react-dom from 19.1.5 to 19.1.6 in /packages/docusaurus-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15592
- core: bump asgiref from 3.9.0 to v3.9.1 by @melizeche in https://github.com/goauthentik/authentik/pull/15604
- core: bump orjson from 3.10.18 to v3.11.0 by @melizeche in https://github.com/goauthentik/authentik/pull/15611
- core: bump opentelemetry-api from 1.34.1 to v1.35.0 by @melizeche in https://github.com/goauthentik/authentik/pull/15610
- core: bump microsoft-kiota-http from 1.9.3 to v1.9.4 by @melizeche in https://github.com/goauthentik/authentik/pull/15609
- core: bump microsoft-kiota-authentication-azure from 1.9.3 to v1.9.4 by @melizeche in https://github.com/goauthentik/authentik/pull/15608
- core: bump certifi from 2025.6.15 to v2025.7.14 by @melizeche in https://github.com/goauthentik/authentik/pull/15607
- core: bump boto3 from 1.39.3 to v1.39.7 by @melizeche in https://github.com/goauthentik/authentik/pull/15606
- core: bump azure-identity from 1.23.0 to v1.23.1 by @melizeche in https://github.com/goauthentik/authentik/pull/15605
- core: bump aiohttp from 3.12.13 to v3.12.14 by @melizeche in https://github.com/goauthentik/authentik/pull/15603
- providers/oauth2: Add
causeto debug issues and better tests by @BeryJu in https://github.com/goauthentik/authentik/pull/15057 - core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15612
- translate: Updates for file web/xliff/en.xlf in de by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/15628
- translate: Updates for file locale/en/LC_MESSAGES/django.po in de by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/15627
- core: bump msgraph-sdk from 1.37.0 to 1.38.0 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15624
- lifecycle/aws: bump aws-cdk from 2.1020.2 to 2.1021.0 in /lifecycle/aws by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15622
- web: bump @types/node from 22.15.19 to 24.0.14 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15621
- web: bump mermaid from 11.6.0 to 11.9.0 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15620
- web: bump @codemirror/legacy-modes from 6.4.1 to 6.5.1 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15619
- web: bump @types/dompurify from 3.0.5 to 3.2.0 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15617
- web: bump @types/node from 24.0.4 to 24.0.14 in /packages/prettier-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15616
- web: bump @types/node from 24.0.10 to 24.0.14 in /packages/esbuild-plugin-live-reload by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15613
- web: bump prettier-plugin-packagejson from 2.5.17 to 2.5.18 in /packages/esbuild-plugin-live-reload by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15614
- web: bump @codemirror/theme-one-dark from 6.1.2 to 6.1.3 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15618
- web: bump prettier-plugin-packagejson from 2.5.16 to 2.5.18 in /packages/prettier-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15615
- website: Prep for workspaces. Clean up shared deps. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15602
- root: Ignore ./media for codespell by @dominic-r in https://github.com/goauthentik/authentik/pull/15632
- website/integrations: fix typo in seafile doc by @fuad00 in https://github.com/goauthentik/authentik/pull/15633
- stages/authenticator_sms: allow custom message for twilio provider, pass request by @BeryJu in https://github.com/goauthentik/authentik/pull/15629
- core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15639
- core: bump astral-sh/uv from 0.7.21 to 0.8.0 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15649
- web: bump knip from 5.58.0 to 5.61.3 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15648
- web: bump codemirror from 6.0.1 to 6.0.2 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15647
- web: bump bootstrap from 4.6.2 to 5.3.7 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15646
- web: bump core-js from 3.42.0 to 3.44.0 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15645
- web: bump @lit/task from 1.0.2 to 1.0.3 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15644
- web: bump the swc group across 1 directory with 11 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15643
- web: bump @sentry/browser from 9.39.0 to 9.40.0 in /web in the sentry group across 1 directory by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15642
- core: bump github.com/grafana/pyroscope-go from 1.2.3 to 1.2.4 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15641
- website: bump the build group in /website with 6 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15640
- web: bump on-headers and compression in /packages/docusaurus-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15638
- web: Update license mixing types to anticipate load state. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15634
- website/docs: fix user ref typos by @dewi-tik in https://github.com/goauthentik/authentik/pull/15653
- website/docs: add e2e testing steps by @dewi-tik in https://github.com/goauthentik/authentik/pull/15656
- web: bump @eslint/plugin-kit from 0.3.1 to 0.3.3 in /packages/eslint-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15661
- providers/radius: set message authenticator by @BeryJu in https://github.com/goauthentik/authentik/pull/15635
- website/dev docs: FDE e2e: fix useless markdown lini by @dominic-r in https://github.com/goauthentik/authentik/pull/15658
- web: bump @types/node from 22.15.19 to 24.0.15 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15683
- web: bump prettier-plugin-packagejson from 2.5.18 to 2.5.19 in /packages/esbuild-plugin-live-reload by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15682
- web: bump the swc group across 1 directory with 11 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15680
- web: bump chart.js and @types/chart.js in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15679
- web: bump prettier-plugin-packagejson from 2.5.18 to 2.5.19 in /packages/prettier-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15678
- web: bump @types/node from 24.0.14 to 24.0.15 in /packages/esbuild-plugin-live-reload by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15677
- website: bump @types/node from 24.0.14 to 24.0.15 in /website by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15675
- web: bump @types/node from 24.0.14 to 24.0.15 in /packages/prettier-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15676
- web: bump the esbuild group across 2 directories with 4 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15674
- web: bump typedoc-plugin-markdown from 4.7.0 to 4.7.1 in /packages/esbuild-plugin-live-reload by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15681
- core: bump goauthentik.io/api/v3 from 3.2025063.5 to 3.2025063.6 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15671
- website/integrations: fix duplicate guacamole section by @rattencreep in https://github.com/goauthentik/authentik/pull/15684
- website: Flesh out Makefile commands, usage. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15576
- website: bump prettier-plugin-packagejson from 2.5.18 to 2.5.19 in /website by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15672
- website/docs: add force password reset guide by @dewi-tik in https://github.com/goauthentik/authentik/pull/15654
- website/docs: add notification rule expression policy examples by @dewi-tik in https://github.com/goauthentik/authentik/pull/15333
- web/a11y: Form Group by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15688
- web/a11y: Sidebar, Modals, Cards by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15690
- root: update Makefile with new commands for docs and integrations by @tanberry in https://github.com/goauthentik/authentik/pull/15689
- web: remove mdx and fix references to
@goauthentik/elementsby @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/15694 - translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/15698
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/15697
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/15695
- core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15704
- web: bump form-data from 4.0.0 to 4.0.4 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15703
- Bitwarden integration requires a bitwarden subscription by @Fuseteam in https://github.com/goauthentik/authentik/pull/15692
- website: bump the build group in /website with 6 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15673
- core: bump sentry-sdk from 2.33.0 to 2.33.1 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15714
- web: bump globals from 15.10.0 to 16.3.0 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15713
- security: fix CVE-2025-53942 by @BeryJu in https://github.com/goauthentik/authentik/pull/15719
- web: bump vite-plugin-lit-css from 2.0.0 to 2.1.0 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15712
- web: bump @floating-ui/dom from 1.6.11 to 1.7.2 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15710
- web: bump @types/codemirror from 5.60.15 to 5.60.16 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15708
- web: bump remark-mdx-frontmatter from 5.0.0 to 5.2.0 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15707
- root: backport release 2025.6.4 by @BeryJu in https://github.com/goauthentik/authentik/pull/15723
- web: bump the eslint group across 2 directories with 3 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15706
- web: bump knip from 5.61.3 to 5.62.0 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15709
- web: bump API Client version by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15724
- web/a11y: ak-form-group part 2: type clean up, Chrome warnings by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15721
- web: bump @lit/reactive-element from 2.1.0 to 2.1.1 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15711
- website/integrations: fix netbird integration by @MichaelUray in https://github.com/goauthentik/authentik/pull/15660
- web: Fix issue where base render method is not preferred. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15726
- blueprints: add File tag by @rissson in https://github.com/goauthentik/authentik/pull/15727
- website/integrations: Update Stripe docs by @VeeBack in https://github.com/goauthentik/authentik/pull/15729
- website: bump the build group in /website with 9 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15742
- core: bump channels-redis from 4.2.1 to 4.3.0 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15746
- core: bump sentry-sdk from 2.33.1 to 2.33.2 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15745
- core: bump msgraph-sdk from 1.38.0 to 1.39.0 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15744
- core: bump goauthentik.io/api/v3 from 3.2025063.6 to 3.2025064.1 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15741
- web: bump @types/node from 22.15.19 to 24.1.0 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15740
- web: bump lit from 3.3.0 to 3.3.1 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15737
- web: bump the storybook group across 1 directory with 5 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15732
- web: bump @lit/context from 1.1.5 to 1.1.6 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15739
- web: bump the swc group across 1 directory with 11 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15733
- web: bump webcomponent-qr-code from 1.2.0 to 1.3.0 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15736
- web: bump @types/node from 24.0.15 to 24.1.0 in /packages/prettier-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15735
- web: bump @types/node from 24.0.15 to 24.1.0 in /packages/esbuild-plugin-live-reload by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15734
- core: bump astral-sh/uv from 0.8.0 to 0.8.2 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15731
- website/integrations: headscale by @dominic-r in https://github.com/goauthentik/authentik/pull/14500
- website/docs: update command formattings for easier dev usage by @ConzorKingKong in https://github.com/goauthentik/authentik/pull/15430
- website: Docusaurus 3.8 by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15097
- website: bump @types/node from 24.0.15 to 24.1.0 in /website by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15743
- website: Docusaurus 3.8 Follow-up - API Docs by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15751
- website/integrations: Update Node-RED configuration by @gmag11 in https://github.com/goauthentik/authentik/pull/15488
- core: bump jsonschema from 4.24.0 to v4.25.0 by @melizeche in https://github.com/goauthentik/authentik/pull/15755
- core: bump boto3 from 1.39.7 to v1.39.11 by @melizeche in https://github.com/goauthentik/authentik/pull/15754
- core: bump microsoft-kiota-serialization-form from 1.9.4 to v1.9.5 by @melizeche in https://github.com/goauthentik/authentik/pull/15757
- core: bump msal from 1.32.3 to v1.33.0 by @melizeche in https://github.com/goauthentik/authentik/pull/15761
- core: bump microsoft-kiota-abstractions from 1.9.4 to v1.9.5 by @melizeche in https://github.com/goauthentik/authentik/pull/15756
- core: bump microsoft-kiota-serialization-multipart from 1.9.4 to v1.9.5 by @melizeche in https://github.com/goauthentik/authentik/pull/15759
- core: bump microsoft-kiota-serialization-json from 1.9.4 to v1.9.5 by @melizeche in https://github.com/goauthentik/authentik/pull/15758
- core: bump s3transfer from 0.13.0 to v0.13.1 by @melizeche in https://github.com/goauthentik/authentik/pull/15762
- core: bump microsoft-kiota-serialization-text from 1.9.4 to v1.9.5 by @melizeche in https://github.com/goauthentik/authentik/pull/15760
- website: bump the eslint group in /website with 3 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15705
- core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15764
- providers/oauth2: add support for OAuth 2.0 Authorization Server Metadata endpoint (RFC 8414) by @rissson in https://github.com/goauthentik/authentik/pull/12383
- sources/plex: add missing group connection type to flow manager by @rissson in https://github.com/goauthentik/authentik/pull/15750
- web: bump chromedriver from 136.0.3 to 138.0.3 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15767
- web: bump @fortawesome/fontawesome-free from 6.7.2 to 7.0.0 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15766
- core: bump google-api-python-client from 2.176.0 to 2.177.0 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15765
- blueprints: add FindObject tag by @rissson in https://github.com/goauthentik/authentik/pull/12415
- root: Update spellcheck ignore list. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15772
- website: Flesh out package structure. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15773
- web: Font fixes by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15581
- web: Clean up WebSocket lifecycle. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15480
- web: Update dependencies. Fix categories. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15748
- policies/reputation: fix updated for reputation not updating by @BeryJu in https://github.com/goauthentik/authentik/pull/15782
- revert: web: Font fixes (#15581) by @BeryJu in https://github.com/goauthentik/authentik/pull/15789
- core: bump twilio from 9.6.5 to 9.7.0 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15788
- lifecycle/aws: bump aws-cdk from 2.1021.0 to 2.1022.0 in /lifecycle/aws by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15787
- core: bump astral-sh/uv from 0.8.2 to 0.8.3 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15786
- web: bump @sentry/browser from 9.40.0 to 9.41.0 in /web in the sentry group across 1 directory by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15785
- website: bump the build group in /website with 3 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15784
- root: support for custom postgresql connection options by @D-Tasker207 in https://github.com/goauthentik/authentik/pull/15577
- providers/rac: fix incorrect caching by @BeryJu in https://github.com/goauthentik/authentik/pull/15779
- web: Add support for placeholder in by @melizeche in https://github.com/goauthentik/authentik/pull/15795
- web: bump @sentry/browser from 9.41.0 to 9.42.0 in /web in the sentry group across 1 directory by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15811
- web: bump ts-pattern from 5.7.1 to 5.8.0 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15810
- lifecycle/aws: bump cross-env from 7.0.3 to 10.0.0 in /lifecycle/aws by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15807
- web: bump the eslint group across 3 directories with 2 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15808
- web: bump the rollup group across 1 directory with 4 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15806
- core: bump axllent/mailpit from v1.27.1 to v1.27.2 in /tests/e2e by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15813
- web: bump typedoc from 0.28.7 to 0.28.8 in /packages/esbuild-plugin-live-reload by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15809
- website: bump the eslint group in /website with 2 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15805
- translate: Updates for file locale/en/LC_MESSAGES/django.po in es by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/15818
- website/docs: stages/mtls: Clean up stage configuration section by @dominic-r in https://github.com/goauthentik/authentik/pull/15753
- *: replace Celery with Dramatiq by @rissson in https://github.com/goauthentik/authentik/pull/13492
- web: bump API Client version by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15822
- translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/15821
- packages/django-dramatiq-postgres: broker: avoid exception on consumer final close by @rissson in https://github.com/goauthentik/authentik/pull/15824
- packages: fix codeowners by @rissson in https://github.com/goauthentik/authentik/pull/15826
- core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15827
- web/admin: improve admin UI for tasks slightly by @BeryJu in https://github.com/goauthentik/authentik/pull/15829
- translate: Updates for file web/xliff/en.xlf in es by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/15860
- core: bump goauthentik.io/api/v3 from 3.2025064.1 to 3.2025064.2 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15850
- core: bump axllent/mailpit from v1.27.2 to v1.27.3 in /tests/e2e by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15857
- core: bump channels from 4.2.2 to v4.3.0 by @melizeche in https://github.com/goauthentik/authentik/pull/15842
- core: bump boto3 from 1.39.11 to v1.39.15 by @melizeche in https://github.com/goauthentik/authentik/pull/15830
- core: bump greenlet from 3.2.2 to v3.2.3 by @melizeche in https://github.com/goauthentik/authentik/pull/15832
- core: bump maxminddb from 2.7.0 to v2.8.2 by @melizeche in https://github.com/goauthentik/authentik/pull/15833
- core: bump microsoft-kiota-authentication-azure from 1.9.4 to v1.9.5 by @melizeche in https://github.com/goauthentik/authentik/pull/15834
- core: bump microsoft-kiota-http from 1.9.4 to v1.9.5 by @melizeche in https://github.com/goauthentik/authentik/pull/15835
- core: bump rich from 14.0.0 to v14.1.0 by @melizeche in https://github.com/goauthentik/authentik/pull/15837
- core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15844
- tasks: fix rel_obj being removed when task is retried by @rissson in https://github.com/goauthentik/authentik/pull/15862
- web: bump the swc group across 1 directory with 11 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15859
- core: bump zope-event from 5.0 to v5.1.1 by @melizeche in https://github.com/goauthentik/authentik/pull/15838
- core: bump cron-converter from 1.2.1 to v1.2.2 by @melizeche in https://github.com/goauthentik/authentik/pull/15831
- lib/sync/outgoing: fix page sync task id by @rissson in https://github.com/goauthentik/authentik/pull/15828
- web: bump the goauthentik group across 4 directories with 2 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15858
- web: bump @sentry/browser from 9.42.0 to 9.42.1 in /web in the sentry group across 1 directory by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15849
- website: bump the build group in /website with 4 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15852
- web: bump the rollup group across 1 directory with 4 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15853
- core: bump orjson from 3.11.0 to v3.11.1 by @melizeche in https://github.com/goauthentik/authentik/pull/15836
- website/integrations: add profile scope to nextcloud oidc by @rattencreep in https://github.com/goauthentik/authentik/pull/15861
- tasks/schedules: fix IntegrityError on schedule update by @rissson in https://github.com/goauthentik/authentik/pull/15871
- core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15873
- web/a11y: License notice ARIA attributes. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15872
- web/a11y: Navigation Banner by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15880
- web/a11y: Form Inputs by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15878
- web/a11y: Tables & Modals by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15877
- web: bump typedoc-plugin-markdown from 4.7.1 to 4.8.0 in /packages/esbuild-plugin-live-reload by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15885
- web: bump @sentry/browser from 9.42.1 to 9.43.0 in /web in the sentry group across 1 directory by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15883
- website: bump the build group in /website with 2 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15882
- lifecycle/aws: bump aws-cdk from 2.1022.0 to 2.1023.0 in /lifecycle/aws by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15881
- web: bump the rollup group across 1 directory with 4 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15884
- website: Ignore legacy API docs. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15891
- core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15895
- core: bump astral-sh/uv from 0.8.3 to 0.8.4 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15898
- core: bump github.com/coreos/go-oidc/v3 from 3.14.1 to 3.15.0 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15897
- core: bump github.com/golang-jwt/jwt/v5 from 5.2.3 to 5.3.0 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15896
- web: bump chromedriver from 138.0.4 to 138.0.5 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15900
- web: bump @floating-ui/dom from 1.7.2 to 1.7.3 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15899
- web/flows: fix flow inspector button always showing by @BeryJu in https://github.com/goauthentik/authentik/pull/15893
- web/common: fix form element alignment by @BeryJu in https://github.com/goauthentik/authentik/pull/15904
- website/integrations: kimai: fix order and var by @dominic-r in https://github.com/goauthentik/authentik/pull/15907
- core: bump github.com/getsentry/sentry-go from 0.34.1 to 0.35.0 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15909
- stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15906
- web: bump typescript from 5.8.3 to 5.9.2 in /packages/prettier-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15916
- web: bump typescript from 5.8.3 to 5.9.2 in /packages/eslint-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15915
- web: bump typescript from 5.8.3 to 5.9.2 in /packages/esbuild-plugin-live-reload by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15914
- web: bump typescript from 5.8.3 to 5.9.2 in /packages/docusaurus-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15913
- web: bump the storybook group across 1 directory with 5 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15912
- website: bump the build group in /website with 3 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15910
- core: bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15908
- web: bump @sentry/browser from 9.43.0 to 10.0.0 in /web in the sentry group across 1 directory by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15911
- policies: fix typo by @gergosimonyi in https://github.com/goauthentik/authentik/pull/15933
- web/admin: fix variable name by @gergosimonyi in https://github.com/goauthentik/authentik/pull/15934
- core: bump opentelemetry-api from 1.35.0 to v1.36.0 by @melizeche in https://github.com/goauthentik/authentik/pull/15928
- core: bump aiohttp from 3.12.14 to v3.12.15 by @melizeche in https://github.com/goauthentik/authentik/pull/15924
- core: bump argon2-cffi-bindings from 21.2.0 to v25.1.0 by @melizeche in https://github.com/goauthentik/authentik/pull/15925
- core: bump jsii from 1.112.0 to v1.113.0 by @melizeche in https://github.com/goauthentik/authentik/pull/15927
- core: bump boto3 from 1.39.15 to v1.40.1 by @melizeche in https://github.com/goauthentik/authentik/pull/15926
- providers/saml: configuration for default NameID Policy by @BeryJu in https://github.com/goauthentik/authentik/pull/15109
- core: fix flow planner checking against wrong user when creating recovery link by @BeryJu in https://github.com/goauthentik/authentik/pull/15390
- web: bump API Client version by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15942
- packages/django-dramatiq-postgres: fix typo by @gergosimonyi in https://github.com/goauthentik/authentik/pull/15932
- core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15945
- web: Make Webdriver optional during install. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15952
- core, providers/ldap: add parent/child groups to api and ldap results by @danieladugyan in https://github.com/goauthentik/authentik/pull/14974
- core: bump goauthentik.io/api/v3 from 3.2025064.2 to 3.2025064.3 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15949
- root: Add more opencontainer labels to Dockerfiles by @dominic-r in https://github.com/goauthentik/authentik/pull/15923
- core: add updated_at field to user by @josegomezr in https://github.com/goauthentik/authentik/pull/15571
- website/integrations: add hass-openid instructions by @cavefire in https://github.com/goauthentik/authentik/pull/14672
- root: enhance custom middleware experience by @gergosimonyi in https://github.com/goauthentik/authentik/pull/15919
- website/integrations: fix build by @dominic-r in https://github.com/goauthentik/authentik/pull/15957
- website/integrations: mattermost by @dominic-r in https://github.com/goauthentik/authentik/pull/15922
- website/integrations: actual budget: add info about first login fails by @dominic-r in https://github.com/goauthentik/authentik/pull/15931
- web: Fix scroll-event induced tab crash by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15939
- website/integrations: home assistant: fix typo by @dominic-r in https://github.com/goauthentik/authentik/pull/15958
- website/docs: update instructions for Cloudflare Turnstile setup by @mike548141 in https://github.com/goauthentik/authentik/pull/15918
- web: Fix property name mismatch. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15961
- website/docs: reword Warning in Docker install docs by @tanberry in https://github.com/goauthentik/authentik/pull/15960
- core: bump goauthentik.io/api/v3 from 3.2025064.3 to 3.2025064.5 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15965
- core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15962
- translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/15973
- translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/15974
- web: bump API Client version by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15953
- providers/oauth2: backchannel logout by @melizeche in https://github.com/goauthentik/authentik/pull/15401
- web: bump API Client version by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15976
- website/docs: add tips for image optimization by @tanberry in https://github.com/goauthentik/authentik/pull/15978
- website/docs: change azure ad to entra id by @dewi-tik in https://github.com/goauthentik/authentik/pull/15691
- web: Fix stale application slug, missing error state. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15941
- stages/email: implement rate limiting for account verification by @dechen-authentik in https://github.com/goauthentik/authentik/pull/15531
- core: bump goauthentik.io/api/v3 from 3.2025064.5 to 3.2025064.6 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15997
- core: bump astral-sh/uv from 0.8.4 to 0.8.5 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15998
- core: bump boto3 from 1.40.1 to v1.40.2 by @melizeche in https://github.com/goauthentik/authentik/pull/15980
- core: bump anyio from 4.9.0 to v4.10.0 by @melizeche in https://github.com/goauthentik/authentik/pull/15979
- core: bump certifi from 2025.7.14 to v2025.8.3 by @melizeche in https://github.com/goauthentik/authentik/pull/15982
- ci: bump actions/download-artifact from 4 to 5 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15995
- web: bump API Client version by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16002
- core: bump cattrs from 24.1.3 to v25.1.1 by @melizeche in https://github.com/goauthentik/authentik/pull/15981
- core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/15985
- ci: move images from beryju/* to authentik/* by @dominic-r in https://github.com/goauthentik/authentik/pull/15321
- core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16021
- core: bump goauthentik.io/api/v3 from 3.2025064.6 to 3.2025064.7 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16024
- website: Fix Markdown link. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/16029
- website/docs: Add docs for oauth2 back-channel logout by @melizeche in https://github.com/goauthentik/authentik/pull/15845
- web: Fix initial browser color scheme. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/16028
- web: Bump package-lock. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/16018
- core: limit User search_field to pure text only by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/16020
- web/a11y: Form Errors by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15940
- web: Fix issue where
aria-ownsattribute triggers Chrome crash. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/16003 - web: Form error rendering by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15874
- website/integrations: fix outline subject mode by @YapWC in https://github.com/goauthentik/authentik/pull/16022
- web: providers/rac: Fix wizard confirmation by @dominic-r in https://github.com/goauthentik/authentik/pull/16013
- core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16032
- translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16034
- translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16035
- lifecycle/aws: bump aws-cdk from 2.1023.0 to 2.1024.0 in /lifecycle/aws by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16025
- ci: main, outpost: ignore website changes by @rissson in https://github.com/goauthentik/authentik/pull/16037
- core: bump astral-sh/uv from 0.8.5 to 0.8.6 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16033
- web: bump the sentry group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16023
- ci: revert: main, outpost: ignore website changes (#16037) by @rissson in https://github.com/goauthentik/authentik/pull/16040
- web: Fix wide inputs, label alignment by @GirlBossRush in https://github.com/goauthentik/authentik/pull/16042
- web: Fix cursor using pointer in modals. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/16009
- website: bump tmp from 0.2.3 to 0.2.4 in /website by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16012
- website: bump the eslint group in /website with 3 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15977
- web: bump tmp from 0.2.3 to 0.2.4 in /packages/esbuild-plugin-live-reload by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16008
- web: bump @types/node from 24.1.0 to 24.2.0 in /packages/prettier-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15972
- web: bump @types/node from 22.15.19 to 24.2.0 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15971
- web: bump the storybook group across 1 directory with 5 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15968
- web: bump @types/node from 24.1.0 to 24.2.0 in /packages/esbuild-plugin-live-reload by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15967
- web: bump the eslint group across 2 directories with 3 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15964
- ci: readable workflow names by @rissson in https://github.com/goauthentik/authentik/pull/16036
- web: bump react-dom and @types/react-dom in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15867
- website: bump typescript from 5.8.3 to 5.9.2 in /website by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15969
- website: bump @types/node from 24.1.0 to 24.2.0 in /website by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15970
- web: bump react-dom and @types/react-dom in /packages/docusaurus-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15864
- web: bump typedoc from 0.28.8 to 0.28.9 in /packages/esbuild-plugin-live-reload by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15951
- web: bump format-imports from 4.0.7 to 4.0.8 in /packages/prettier-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/15950
- web: Clean up ak-mdx linter warnings. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/16039
- core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16046
- website/integrations: Update netbird redirect URIs settings by @bcmmbaga in https://github.com/goauthentik/authentik/pull/16001
- outpost/proxyv2: add session cleanup for filesystem session store by @Tom3201 in https://github.com/goauthentik/authentik/pull/15798
- web/elements: fix QL autocomplete not working by @BeryJu in https://github.com/goauthentik/authentik/pull/16054
- web/flows: update default flow background by @BeryJu in https://github.com/goauthentik/authentik/pull/16056
- policies: buffered policy access view for concurrent authorization attempts when unauthenticated by @BeryJu in https://github.com/goauthentik/authentik/pull/15034
- web: bump API Client version by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16060
- web: bump tmp from 0.2.3 to 0.2.5 in /packages/prettier-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16062
- core: Prevent application creation with reserved slugs by @dominic-r in https://github.com/goauthentik/authentik/pull/15930
- packages/django-dramatiq-postgres: run worker in the same base process, use structlog by @BeryJu in https://github.com/goauthentik/authentik/pull/16061
- web: bump typedoc from 0.28.9 to 0.28.10 in /packages/esbuild-plugin-live-reload by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16083
- web: bump typescript from 5.8.3 to 5.9.2 in /packages/esbuild-plugin-live-reload by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16082
- web: bump @sentry/browser from 10.2.0 to 10.3.0 in /web in the sentry group across 1 directory by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16081
- web: bump @types/node from 24.2.0 to 24.2.1 in /packages/prettier-config by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16080
- web: bump @types/node from 24.2.0 to 24.2.1 in /packages/esbuild-plugin-live-reload by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16078
- web: bump yaml from 2.8.0 to 2.8.1 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16077
- web: bump the eslint group across 3 directories with 2 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16076
- web: bump @goauthentik/prettier-config from 1.0.5 to 3.1.0 in /web in the goauthentik group across 1 directory by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16075
- web: bump the wdio group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16074
- core: bump axllent/mailpit from v1.27.3 to v1.27.4 in /tests/e2e by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16073
- core: bump goauthentik.io/api/v3 from 3.2025064.7 to 3.2025064.8 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16072
- core: bump astral-sh/uv from 0.8.6 to 0.8.8 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16071
- core: bump goauthentik/fips-python from 3.13.5-slim-bookworm-fips to 3.13.6-slim-bookworm-fips by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16070
- website: bump the eslint group in /website with 2 updates by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16069
- website: bump @types/node from 24.2.0 to 24.2.1 in /website by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16068
- web: bump @types/node from 22.15.19 to 24.2.1 in /web by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16084
- core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16063
- translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16087
- translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16086
- packages/django-dramatiq-postgres: broker: fix infinite loop by @rissson in https://github.com/goauthentik/authentik/pull/16088
- providers/rac: fix property mapping expression not executing by @BeryJu in https://github.com/goauthentik/authentik/pull/15819
- website/docs: 2025.8 release notes by @rissson in https://github.com/goauthentik/authentik/pull/15975
- translate: Updates for file web/xliff/en.xlf in pl [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16094
- translate: Updates for file web/xliff/en.xlf in zh-Hans [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16099
- translate: Updates for file web/xliff/en.xlf in ko [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16101
- translate: Updates for file web/xliff/en.xlf in nl [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16100
- translate: Updates for file locale/en/LC_MESSAGES/django.po in it [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16102
- translate: Updates for file web/xliff/en.xlf in zh_CN [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16103
- translate: Updates for file locale/en/LC_MESSAGES/django.po in pt_BR [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16105
- translate: Updates for file locale/en/LC_MESSAGES/django.po in nl [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16111
- translate: Updates for file web/xliff/en.xlf in ru [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16114
- translate: Updates for file web/xliff/en.xlf in cs_CZ [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16104
- translate: Updates for file web/xliff/en.xlf in es [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16106
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_TW [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16107
- translate: Updates for file web/xliff/en.xlf in de [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16110
- translate: Updates for file locale/en/LC_MESSAGES/django.po in pl [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16092
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16112
- translate: Updates for file web/xliff/en.xlf in it [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16095
- translate: Updates for file locale/en/LC_MESSAGES/django.po in ru [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16090
- translate: Updates for file locale/en/LC_MESSAGES/django.po in de [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16091
- translate: Updates for file locale/en/LC_MESSAGES/django.po in tr [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16096
- translate: Updates for file web/xliff/en.xlf in fi [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16097
- translate: Updates for file web/xliff/en.xlf in tr [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16108
- translate: Updates for file web/xliff/en.xlf in zh_TW [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16113
- translate: Updates for file locale/en/LC_MESSAGES/django.po in pt [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16098
- translate: Updates for file locale/en/LC_MESSAGES/django.po in fi [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16093
- translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN [Manual Sync] by @transifex-integration[bot] in https://github.com/goauthentik/authentik/pull/16109
- lib/sync: drop sync task when triggered by users' last_login change by @BeryJu in https://github.com/goauthentik/authentik/pull/15553
- core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16116
- core, web: update translations by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16118
- outpost: proxy: handle nil HTTP response in attemptBasicAuth function by @dominic-r in https://github.com/goauthentik/authentik/pull/13781
- ci: bump actions/checkout from 4 to 5 by @dependabot[bot] in https://github.com/goauthentik/authentik/pull/16127
- packages/django-dramatiq-postgres: broker: remember previously fetched notifies by @rissson in https://github.com/goauthentik/authentik/pull/16128
- website/docs: remove slash from API reference by @melizeche in https://github.com/goauthentik/authentik/pull/16117
- root: Better version bump by @BeryJu in https://github.com/goauthentik/authentik/pull/14905
- web: Form validation regressions, consistency fixes by @GirlBossRush in https://github.com/goauthentik/authentik/pull/15894
- ci: add release branch-off workflow by @rissson in https://github.com/goauthentik/authentik/pull/16130
- root: bump version to 2025.8.0-rc1 by @rissson in https://github.com/goauthentik/authentik/pull/16135
- ci: add release bump version workflow by @rissson in https://github.com/goauthentik/authentik/pull/16136
- ci: release branch off: various fixes by @rissson in https://github.com/goauthentik/authentik/pull/16137
- ci: release branch off: use github app for branch creation by @rissson in https://github.com/goauthentik/authentik/pull/16141
- ci: release: add missing env variables by @rissson in https://github.com/goauthentik/authentik/pull/16143
- ci: setup action: uninstall man-db by @rissson in https://github.com/goauthentik/authentik/pull/16144
- ci: release branch off: fix missing migrations by @rissson in https://github.com/goauthentik/authentik/pull/16145
- core: Fix docstring for core_users_recovery_email_create and core_users_recovery_create by @LucaTheHacker in https://github.com/goauthentik/authentik/pull/16140
- web: bump API Client version by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16132
- root: fix missing uv run in makefile by @rissson in https://github.com/goauthentik/authentik/pull/16146
- website/docs: 2025.8 release notes: add changelog and API diff by @rissson in https://github.com/goauthentik/authentik/pull/16147
- ci: release bump version: run migrations by @rissson in https://github.com/goauthentik/authentik/pull/16148
- root: fix custom packages installation in docker (cherry-pick #16150) by @rissson in https://github.com/goauthentik/authentik/pull/16151
- ci: docker push: fix version missing dash (cherry-pick #16153) by @rissson in https://github.com/goauthentik/authentik/pull/16154