See https://docs.goauthentik.io/docs/releases/2026.8#fixed-in-202685 What's Changed endpoints: fix MultipleObjectsReturned (cherry-pick #26971 to version-2026.8) (#26972) enterprise/providers/microsoft_entra: skip members already in the group (cherry-pick #26891 to version-2026.8) (#26952) root: bump cert-related deps due to emudhra (cherry-pick #27068 to version-2026.8) (#27071) web/stages: Fix s…
See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202658 What's Changed ci: remove the Google Chrome apt source in setup (cherry-pick #25990 to version-2026.5) by @authentik-cherry-pick[bot] in #26011 lib/expression: fix PickleError due to resolver match when using ak_call_policy (cherry-pick #25763 to version-2026.5) by @authentik-cherry-pick[bot] in #26071 web/source/flows: fix flick…
See https://docs.goauthentik.io/docs/releases/2026.8#fixed-in-202684 What Changed in 2026.8.4 common/saml: Fix metadata to serve only the leaf of a PEM chain (#26273) core: handle overflow in duration validation (#26680) endpoints: fix error during device lookup with one identifier missing (#26902) endpoints: retain last fact snapshot (#26343) enterprise/requests: show message after successful req…
See https://docs.goauthentik.io/docs/releases/2026.8#fixed-in-202683 What's Changed admin/files: make file search case-insensitive (#25736) api: include JSON field relation models in search autocomplete (#26153) blueprints: fix employee_department typo (#26046) change docker compose to compose (#26087) core: fix migrations (version-2026.8) (cherry-pick #26208) (#26209) events: Note in logs when an…
See https://docs.goauthentik.io/docs/releases/2026.8#fixed-in-202682
See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202657 What's Changed ci: add working dir prefix to file paths (cherry-pick #24319 to version-2026.5) by @authentik-cherry-pick[bot] in #24322 endpoints/connectors/agent: fix auth schema correctly (cherry-pick #24327 to version-2026.5) by @authentik-cherry-pick[bot] in #24330 enterprise/endpoints/connectors/fleet: fix exception when hos…
See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202627 What's Changed lifecycle/container: drop curl and runit (cherry-pick #24008 to version-2026.2) by @authentik-cherry-pick[bot] in #24113 policies: filter policy engine (cherry-pick #24025 to version-2026.2) by @authentik-cherry-pick[bot] in #24169 ci: add working dir prefix to file paths (cherry-pick #24319 to version-2026.2) by @…
See https://docs.goauthentik.io/docs/releases/2026.8#fixed-in-202681
See https://docs.goauthentik.io/docs/releases/2026.8 What's Changed blueprints: emit draft-07 definitions instead of $defs (cherry-pick #24981 to version-2026.8) by @authentik-cherry-pick[bot] in #24985 website/docs: add object attributes doc (cherry-pick #24437 to version-2026.8) by @authentik-cherry-pick[bot] in #24988 providers/oauth2: fix dcr missing csrf_exempt (cherry-pick #24983 to version-…
See https://next.goauthentik.io/docs/releases/2026.8 What's Changed core: Actors (cherry-pick #24353 to version-2026.8) by @authentik-cherry-pick[bot] in #24709 website/docs: document API scope and domain join required by the authentik Agent (cherry-pick #24599 to version-2026.8) by @authentik-cherry-pick[bot] in #24715 website/docs: Add feedback from previous agent pr (cherry-pick #24713 to versi…
See https://next.goauthentik.io/docs/releases/2026.8 What's Changed stages/authenticator_validate: fix intermittnetly failing throttling test (cherry-pick #24568 to version-2026.8) by @authentik-cherry-pick[bot] in #24708 ci: sentry-release needs access to metadata. (cherry-pick #24710 to version-2026.8) by @authentik-cherry-pick[bot] in #24711 Full Changelog: version/2026.8.0-rc5...version/2026.8…
See https://next.goauthentik.io/docs/releases/2026.8 What's Changed ci: release publish: fix image attestation by @rissson in #24706 Full Changelog: version/2026.8.0-rc4...version/2026.8.0-rc5
See https://next.goauthentik.io/docs/releases/2026.8 What's Changed website/docs: fix sidebar titles and ordering (cherry-pick #24051 to version-2026.8) by @authentik-cherry-pick[bot] in #24700 ci: release publish: fix metadata parsing by @rissson in #24703 Full Changelog: version/2026.8.0-rc3...version/2026.8.0-rc4
See https://next.goauthentik.io/docs/releases/2026.8 What's Changed lib/sync/outgoing: allow discovery to be deactivated (cherry-pick #24667 to version-2026.8) by @authentik-cherry-pick[bot] in #24678 website/docs: Mark the release notes for 2026.8 as 'beta' (cherry-pick #24682 to version-2026.8) by @authentik-cherry-pick[bot] in #24686 ci: release tag: add validation that the workflow was started…
See https://next.goauthentik.io/docs/releases/2026.8 What's Changed root: limit request body size (cherry-pick #24666 to version-2026.8) by @authentik-cherry-pick[bot] in #24671 core: fix group source connection source object (cherry-pick #24626 to version-2026.8) by @authentik-cherry-pick[bot] in #24673 providers/scim: rework discovery with pageSize (cherry-pick #24490 to version-2026.8) by @auth…
See https://next.goauthentik.io/docs/releases/2026.8
See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202656 What's Changed web/flow: revert locale-driven flow re-request from FlowExecutor (cherry-pick #24050 to version-2026.5) by @authentik-cherry-pick[bot] in #24068 lifecycle/container: drop curl and runit (cherry-pick #24008 to version-2026.5) by @authentik-cherry-pick[bot] in #24114 enterprise/endpoints/connectors/fleet: pass popula…
See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202655 What's Changed tests/openid_conformance: migrate to upstream images (cherry-pick #23828 to version-2026.5) by @authentik-cherry-pick[bot] in #23834 endpoints: handle exception in connector controller sync setup (cherry-pick #23852 to version-2026.5) by @authentik-cherry-pick[bot] in #23854 web/flows: fix race condition in continu…
See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202626 What's Changed tests/openid_conformance: migrate to upstream images (cherry-pick #23828 to version-2026.2) by @authentik-cherry-pick[bot] in #23835 lib/sync/outgoing: fix discover running for each page (cherry-pick #24016 to version-2026.2) by @authentik-cherry-pick[bot] in #24018 sources/oauth: improve id_token validation for ap…
See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202654 What's Changed website/integrations: dokuwiki: add post logout and logout urls (cherry-pick #22984 to version-2026.5) by @authentik-automation[bot] in #22985 website/docs: additional scim provider docs (cherry-pick #22135 to version-2026.5) by @authentik-automation[bot] in #23003 root: bump pyo3 (cherry-pick #23036 to version-202…
See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202625 What's Changed website/docs: 2026.2.4 release notes (cherry-pick #22720 to version-2026.2) by @authentik-automation[bot] in #22737 website/docs: 2025.12.6 release notes (cherry-pick #22719 to version-2026.2) by @authentik-automation[bot] in #22740 tests/e2e: fix proxy tests failing due to in-use port (cherry-pick #22785 to versio…
See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202653 What's Changed website/docs: 2026.5.2 release notes (cherry-pick #22721 to version-2026.5) by @authentik-automation[bot] in #22736 website/docs: 2026.2.4 release notes (cherry-pick #22720 to version-2026.5) by @authentik-automation[bot] in #22738 website/docs: 2025.12.6 release notes (cherry-pick #22719 to version-2026.5) by @aut…
See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202652 What's Changed website/docs: Fix release notes cards (cherry-pick #22554 to version-2026.5) by @authentik-automation[bot] in #22555 root: update security release versions (cherry-pick #22583 to version-2026.5) by @authentik-automation[bot] in #22591 endpoints/connectors/agent: allow federated auth via ssh hostkey lookup (cherry-p…
See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202624 What's Changed endpoints: remove print line (cherry-pick #22325 to version-2026.2) by @authentik-automation[bot] in #22326 website/docs: fix email link in CVE-2026-40166 (cherry-pick #22331 to version-2026.2) by @authentik-automation[bot] in #22333 enterprise/stages/mtls: freeze time for expired certs (cherry-pick #22411 to versi…
See https://docs.goauthentik.io/docs/releases/2025.12#fixed-in-2025126 What's Changed website/docs: fix email link in CVE-2026-40166 (cherry-pick #22331 to version-2025.12) by @authentik-automation[bot] in #22332 enterprise/stages/mtls: freeze time for expired certs (cherry-pick #22411 to version-2025.12) by @authentik-automation[bot] in #22413 root: configure freezegun to exclude cryptography (ch…
See https://docs.goauthentik.io/docs/releases/2026.5 What's Changed endpoints: remove print line (cherry-pick #22325 to version-2026.5) by @authentik-automation[bot] in #22327 website/docs: release notes 2026.5: add section about package reduction (cherry-pick #22308 to version-2026.5) by @authentik-automation[bot] in #22324 website/docs: fix email link in CVE-2026-40166 (cherry-pick #22331 to ver…
See https://next.goauthentik.io/docs/releases/2026.5 What's Changed core: bump python-kadmin-rs from 0.7.1 to 0.7.2 (cherry-pick #22234 to version-2026.5) by @authentik-automation[bot] in #22238 web/admin: User wizard label adjust and deactivate navigation when wizard is finished (cherry-pick #22133 to version-2026.5) by @authentik-automation[bot] in #22191 web/admin: fix user wizard close button…
See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202623 What's Changed core: bump django from v5.2.12 to 5.2.13 (cherry-pick #21520 to version-2026.2) by @authentik-automation[bot] in #21526 endpoints: fix tasks failing (cherry-pick #20904 to version-2026.2) by @authentik-automation[bot] in #21538 website/docs: add another sentence to First Steps about restricting access to apps (cher…
See https://docs.goauthentik.io/docs/releases/2025.12#fixed-in-2025125 What's Changed website/docs: 2025.10.4 release notes (cherry-pick #20242 to version-2025.12) by @authentik-automation[bot] in #20250 website/docs: 2025.12.4 release notes (cherry-pick #20226 to version-2025.12) by @authentik-automation[bot] in #20252 website/docs: 2025.8.6 release notes (cherry-pick #20243 to version-2025.12) b…
See https://next.goauthentik.io/docs/releases/2026.5 What's Changed admin: system api: fix FIPS status schema by @rissson in #10110 web: bump API Client version by @authentik-automation[bot] in #10113 policies/reputation: fix existing reputation update by @rissson in #10124 stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation[bot] in #10119 translate: Upd…