See https://next.goauthentik.io/docs/releases/2026.2
What's Changed
- rbac: fix object permission request (cherry-pick #20304 to version-2026.2) by @authentik-automation[bot] in #20366
- web: Flow Executor layout fixes (cherry-pick #20134 to version-2026.2) by @authentik-automation[bot] in #20331
- enterprise/providers/ws_federation: fix incorrect metadata download URL (cherry-pick #20173 to version-2026.2) by @authentik-automation[bot] in #20365
- website/docs: Fix broken link to flow executor (cherry-pick #20364 to version-2026.2) by @authentik-automation[bot] in #20370
- core: add cause to
ak_groupsdeprecation event and logs (cherry-pick #20361 to version-2026.2) by @authentik-automation[bot] in #20368 - website/docs: correct reference to overriden S3 variable (cherry-pick #20156 to version-2026.2) by @authentik-automation[bot] in #20378
- web/admin: bug: stage update forms not rendering, several modal form buttons missing (cherry-pick #20373 to version-2026.2) by @authentik-automation[bot] in #20394
- enterprise/providers/microsoft_entra: fix dangling comma (cherry-pick #20391 to version-2026.2) by @authentik-automation[bot] in #20395
- ci: pull latest changes before tagging new version (cherry-pick #20413 to version-2026.2) by @rissson in #20414
- enterprise/providers/microsoft_entra: only check upn when set (cherry-pick #20441 to version-2026.2) by @authentik-automation[bot] in #20442
- stages/user_login: log correct user when session binding is broken (cherry-pick #20094 to version-2026.2) by @authentik-automation[bot] in #20453
- enterprise: monkey patch pyjwt to accept mismatching key (cherry-pick #20402 to version-2026.2) by @authentik-automation[bot] in #20474
- enterprise/lifecycle: use datetime instead of date to track review cycles (cherry-pick #20283 to version-2026.2) by @authentik-automation[bot] in #20473
- policies: measure policy process from manager (cherry-pick #20477 to version-2026.2) by @authentik-automation[bot] in #20481
- providers/proxy: preserve URL-encoded path characters in redirect (cherry-pick #20476 to version-2026.2) by @authentik-automation[bot] in #20482
- web: Center footer links. (cherry-pick #20345 to version-2026.2) by @authentik-automation[bot] in #20425
- website/docs: add info about make install and recovery key (cherry-pick #20447 to version-2026.2) by @authentik-automation[bot] in #20486
- providers/oauth2: device code flow client id via auth header (cherry-pick #20457 to version-2026.2) by @authentik-automation[bot] in #20503
Full Changelog: version/2026.2.0-rc4...version/2026.2.0-rc5