See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202626
What's Changed
- tests/openid_conformance: migrate to upstream images (cherry-pick #23828 to version-2026.2) by @authentik-cherry-pick[bot] in #23835
- lib/sync/outgoing: fix discover running for each page (cherry-pick #24016 to version-2026.2) by @authentik-cherry-pick[bot] in #24018
- sources/oauth: improve id_token validation for apple source (cherry-pick #24017 to version-2026.2) by @authentik-cherry-pick[bot] in #24021
- packages/django-dramatiq-postgres/broker: close unusable PostgreSQL connections (cherry-pick #24023 to version-2026.2) by @authentik-cherry-pick[bot] in #24034
- security: automated internal backport of patch 1919.sec.patch to authentik-2026.2 by @authentik-automation[bot] in #24056
- security: automated internal backport of patch 1822.sec.patch to authentik-2026.2 by @authentik-automation[bot] in #24054
- security: automated internal backport of patch 1934.sec.patch to authentik-2026.2 by @authentik-automation[bot] in #24057
- security: automated internal backport of patch 1887.sec.patch to authentik-2026.2 by @authentik-automation[bot] in #24055
- security: automated internal backport of patch 1817.sec.patch to authentik-2026.2 by @authentik-automation[bot] in #24053
- website/docs: release notes for 2026.2.6 (cherry-pick #24069 to version-2026.2) by @authentik-cherry-pick[bot] in #24072
Full Changelog: version/2026.2.5...version/2026.2.6