* main: (43 commits)
  web/maintenance: no missing element type definitions (#18950)
  core: add prettier failure on duplicate group names (#18941)
  website/integrations: make grafana terraform section expand (#19192)
  lib: update error logging (#18628)
  core, web: update translations (#19179)
  web: bump @formatjs/intl-listformat from 8.1.0 to 8.1.1 in /web (#19182)
  ci: bump getsentry/action-release from 3.4.0 to 3.5.0 (#19183)
  web: bump knip from 5.78.0 to 5.79.0 in /web (#19181)
  lifecycle: fix migration conn_options for psycopg connection (#19134)
  website/docs: remove duplicates in slo docs (#19170)
  web/admin: adjust sync threshold, add tooltip (#19131)
  web: Fix user library colors, modal z-indexes, table progress bars (#19152)
  web: fix slug auto-updating when editing existing applications (#19169)
  core: handle deserialization errors from FileField migration (#19067)
  stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (#19137)
  website/integrations: vaultwarden: add custom email scope (#19160)
  ci: bump int128/docker-manifest-create-action from 2.10.0 to 2.12.0 (#19138)
  core, web: update translations (#19135)
  web: bump globals from 16.5.0 to 17.0.0 in /web (#19154)
  web/user: fix consent delete form missing details (#19147)
  ...

* main: (38 commits)
  web/maintenance: no missing element type definitions (#18950)
  core: add prettier failure on duplicate group names (#18941)
  website/integrations: make grafana terraform section expand (#19192)
  lib: update error logging (#18628)
  core, web: update translations (#19179)
  web: bump @formatjs/intl-listformat from 8.1.0 to 8.1.1 in /web (#19182)
  ci: bump getsentry/action-release from 3.4.0 to 3.5.0 (#19183)
  web: bump knip from 5.78.0 to 5.79.0 in /web (#19181)
  lifecycle: fix migration conn_options for psycopg connection (#19134)
  website/docs: remove duplicates in slo docs (#19170)
  web/admin: adjust sync threshold, add tooltip (#19131)
  web: Fix user library colors, modal z-indexes, table progress bars (#19152)
  web: fix slug auto-updating when editing existing applications (#19169)
  core: handle deserialization errors from FileField migration (#19067)
  stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (#19137)
  website/integrations: vaultwarden: add custom email scope (#19160)
  ci: bump int128/docker-manifest-create-action from 2.10.0 to 2.12.0 (#19138)
  core, web: update translations (#19135)
  web: bump globals from 16.5.0 to 17.0.0 in /web (#19154)
  web/user: fix consent delete form missing details (#19147)
  ...

* main: (24 commits)
  web/maintenance: no missing element type definitions (#18950)
  core: add prettier failure on duplicate group names (#18941)
  website/integrations: make grafana terraform section expand (#19192)
  lib: update error logging (#18628)
  core, web: update translations (#19179)
  web: bump @formatjs/intl-listformat from 8.1.0 to 8.1.1 in /web (#19182)
  ci: bump getsentry/action-release from 3.4.0 to 3.5.0 (#19183)
  web: bump knip from 5.78.0 to 5.79.0 in /web (#19181)
  lifecycle: fix migration conn_options for psycopg connection (#19134)
  website/docs: remove duplicates in slo docs (#19170)
  web/admin: adjust sync threshold, add tooltip (#19131)
  web: Fix user library colors, modal z-indexes, table progress bars (#19152)
  web: fix slug auto-updating when editing existing applications (#19169)
  core: handle deserialization errors from FileField migration (#19067)
  stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (#19137)
  website/integrations: vaultwarden: add custom email scope (#19160)
  ci: bump int128/docker-manifest-create-action from 2.10.0 to 2.12.0 (#19138)
  core, web: update translations (#19135)
  web: bump globals from 16.5.0 to 17.0.0 in /web (#19154)
  web/user: fix consent delete form missing details (#19147)
  ...

* web: Add InvalidationFlow to Radius Provider dialogues

## What

- Bugfix: adds the InvalidationFlow to the Radius Provider dialogues
  - Repairs: `{"invalidation_flow":["This field is required."]}` message, which was *not* propagated
    to the Notification.
- Nitpick: Pretties `?foo=${true}` expressions: `s/\?([^=]+)=\$\{true\}/\1/`

## Note

Yes, I know I'm going to have to do more magic when we harmonize the forms, and no, I didn't add the
Property Mappings to the wizard, and yes, I know I'm going to have pain with the *new* version of
the wizard. But this is a serious bug; you can't make Radius servers with *either* of the current
dialogues at the moment.

* This (temporary) change is needed to prevent the unit tests from failing.

\# What

\# Why

\# How

\# Designs

\# Test Steps

\# Other Notes

* Revert "This (temporary) change is needed to prevent the unit tests from failing."

This reverts commit dddde09.

* website: fix bad escaping of URLs in release notes

## What

Fixes bad escaping of URLs in the release notes that resulted in mangled output.

v2024.6.4 had entries that looked like this:

```
##### `GET` /providers/google_workspace/{#123;id}#125;/
```

v2025.4.md had entries that looked like this:

```
##### `GET` /policies/unique_password/{#125;#123;policy_uuid}/
```

A couple of straightforward search-and-replaces has fixed the issue.

## Notes

Two of the release notes had bad escaping of URLs. I'm not sure how the error was made or got past,
but it was obvious when visiting the page.

@BeryJu suggested that the bug is due to our using `{...}` to symbolize parameters in a URL while
Docusaurus wants to interpret `{...}` as an internal template instruction, resulting in odd
behavior. In either case, docusarus interpreted the hashtagged entries as links to unrelated issues
in Github (the same two issues, which were "bump version of pylint" and "bump version of sentry"),
which could be very confusing.

The inconsistencies between the two releases, and the working releases, suggests that the error was
introduced manually.

* web/maintenance: lint pass to add missing HTMLElementTagNameMap entries

# What

This code mechanically adds HTMLElementTagNameMap entries to those files that were missing it.

Every entry in the report is in this format:

    ./src/elements/ak-table/stories/ak-select-table.stories.ts

        'ak-select-table-test-sort' has not been registered on HTMLElementTagNameMap
        84:  export class SimpleTableSortTest extends LitElem
        no-missing-element-type-definition

It was trivial to create a Perl script that extracted the file name, the tag name, and the class name, and turn that into a “Open this file and append the HTMLElementTagNameMap definition to the end,” then run `prettier` and `build` to validate that nothing broke.

I also had to hand-edit the JSDoc for `Form`. It is not, by itself, an element. It is an abstract class from which you can derive elements. The `@element` tag there confused lit-analyze, and lit-analyze was correct to call it out.

# Why

These entries help Typescript & Lit-Analyze lint our product, validating that each element is being used correctly and that the types being passed to it are correct.

* web: Add InvalidationFlow to Radius Provider dialogues

## What

- Bugfix: adds the InvalidationFlow to the Radius Provider dialogues
  - Repairs: `{"invalidation_flow":["This field is required."]}` message, which was *not* propagated
    to the Notification.
- Nitpick: Pretties `?foo=${true}` expressions: `s/\?([^=]+)=\$\{true\}/\1/`

## Note

Yes, I know I'm going to have to do more magic when we harmonize the forms, and no, I didn't add the
Property Mappings to the wizard, and yes, I know I'm going to have pain with the *new* version of
the wizard. But this is a serious bug; you can't make Radius servers with *either* of the current
dialogues at the moment.

* This (temporary) change is needed to prevent the unit tests from failing.

\# What

\# Why

\# How

\# Designs

\# Test Steps

\# Other Notes

* Revert "This (temporary) change is needed to prevent the unit tests from failing."

This reverts commit dddde09.

* website: fix bad escaping of URLs in release notes

## What

Fixes bad escaping of URLs in the release notes that resulted in mangled output.

v2024.6.4 had entries that looked like this:

```
##### `GET` /providers/google_workspace/{#123;id}#125;/
```

v2025.4.md had entries that looked like this:

```
##### `GET` /policies/unique_password/{#125;#123;policy_uuid}/
```

A couple of straightforward search-and-replaces has fixed the issue.

## Notes

Two of the release notes had bad escaping of URLs. I'm not sure how the error was made or got past,
but it was obvious when visiting the page.

@BeryJu suggested that the bug is due to our using `{...}` to symbolize parameters in a URL while
Docusaurus wants to interpret `{...}` as an internal template instruction, resulting in odd
behavior. In either case, docusarus interpreted the hashtagged entries as links to unrelated issues
in Github (the same two issues, which were "bump version of pylint" and "bump version of sentry"),
which could be very confusing.

The inconsistencies between the two releases, and the working releases, suggests that the error was
introduced manually.

* web/maintenance: lint pass to add missing HTMLElementTagNameMap entries

# What

This code mechanically adds HTMLElementTagNameMap entries to those files that were missing it.

Every entry in the report is in this format:

    ./src/elements/ak-table/stories/ak-select-table.stories.ts

        'ak-select-table-test-sort' has not been registered on HTMLElementTagNameMap
        84:  export class SimpleTableSortTest extends LitElem
        no-missing-element-type-definition

It was trivial to create a Perl script that extracted the file name, the tag name, and the class name, and turn that into a “Open this file and append the HTMLElementTagNameMap definition to the end,” then run `prettier` and `build` to validate that nothing broke.

I also had to hand-edit the JSDoc for `Form`. It is not, by itself, an element. It is an abstract class from which you can derive elements. The `@element` tag there confused lit-analyze, and lit-analyze was correct to call it out.

# Why

These entries help Typescript & Lit-Analyze lint our product, validating that each element is being used correctly and that the types being passed to it are correct.

* web: Add InvalidationFlow to Radius Provider dialogues

## What

- Bugfix: adds the InvalidationFlow to the Radius Provider dialogues
  - Repairs: `{"invalidation_flow":["This field is required."]}` message, which was *not* propagated
    to the Notification.
- Nitpick: Pretties `?foo=${true}` expressions: `s/\?([^=]+)=\$\{true\}/\1/`

## Note

Yes, I know I'm going to have to do more magic when we harmonize the forms, and no, I didn't add the
Property Mappings to the wizard, and yes, I know I'm going to have pain with the *new* version of
the wizard. But this is a serious bug; you can't make Radius servers with *either* of the current
dialogues at the moment.

* This (temporary) change is needed to prevent the unit tests from failing.

\# What

\# Why

\# How

\# Designs

\# Test Steps

\# Other Notes

* Revert "This (temporary) change is needed to prevent the unit tests from failing."

This reverts commit dddde09.

* website: fix bad escaping of URLs in release notes

## What

Fixes bad escaping of URLs in the release notes that resulted in mangled output.

v2024.6.4 had entries that looked like this:

```
##### `GET` /providers/google_workspace/{#123;id}#125;/
```

v2025.4.md had entries that looked like this:

```
##### `GET` /policies/unique_password/{#125;#123;policy_uuid}/
```

A couple of straightforward search-and-replaces has fixed the issue.

## Notes

Two of the release notes had bad escaping of URLs. I'm not sure how the error was made or got past,
but it was obvious when visiting the page.

@BeryJu suggested that the bug is due to our using `{...}` to symbolize parameters in a URL while
Docusaurus wants to interpret `{...}` as an internal template instruction, resulting in odd
behavior. In either case, docusarus interpreted the hashtagged entries as links to unrelated issues
in Github (the same two issues, which were "bump version of pylint" and "bump version of sentry"),
which could be very confusing.

The inconsistencies between the two releases, and the working releases, suggests that the error was
introduced manually.

* web/maintenance: lint pass to add missing HTMLElementTagNameMap entries

# What

This code mechanically adds HTMLElementTagNameMap entries to those files that were missing it.

Every entry in the report is in this format:

    ./src/elements/ak-table/stories/ak-select-table.stories.ts

        'ak-select-table-test-sort' has not been registered on HTMLElementTagNameMap
        84:  export class SimpleTableSortTest extends LitElem
        no-missing-element-type-definition

It was trivial to create a Perl script that extracted the file name, the tag name, and the class name, and turn that into a “Open this file and append the HTMLElementTagNameMap definition to the end,” then run `prettier` and `build` to validate that nothing broke.

I also had to hand-edit the JSDoc for `Form`. It is not, by itself, an element. It is an abstract class from which you can derive elements. The `@element` tag there confused lit-analyze, and lit-analyze was correct to call it out.

# Why

These entries help Typescript & Lit-Analyze lint our product, validating that each element is being used correctly and that the types being passed to it are correct.

* web: Add InvalidationFlow to Radius Provider dialogues

## What

- Bugfix: adds the InvalidationFlow to the Radius Provider dialogues
  - Repairs: `{"invalidation_flow":["This field is required."]}` message, which was *not* propagated
    to the Notification.
- Nitpick: Pretties `?foo=${true}` expressions: `s/\?([^=]+)=\$\{true\}/\1/`

## Note

Yes, I know I'm going to have to do more magic when we harmonize the forms, and no, I didn't add the
Property Mappings to the wizard, and yes, I know I'm going to have pain with the *new* version of
the wizard. But this is a serious bug; you can't make Radius servers with *either* of the current
dialogues at the moment.

* This (temporary) change is needed to prevent the unit tests from failing.

\# What

\# Why

\# How

\# Designs

\# Test Steps

\# Other Notes

* Revert "This (temporary) change is needed to prevent the unit tests from failing."

This reverts commit dddde09.

* website: fix bad escaping of URLs in release notes

## What

Fixes bad escaping of URLs in the release notes that resulted in mangled output.

v2024.6.4 had entries that looked like this:

```
##### `GET` /providers/google_workspace/{#123;id}#125;/
```

v2025.4.md had entries that looked like this:

```
##### `GET` /policies/unique_password/{#125;#123;policy_uuid}/
```

A couple of straightforward search-and-replaces has fixed the issue.

## Notes

Two of the release notes had bad escaping of URLs. I'm not sure how the error was made or got past,
but it was obvious when visiting the page.

@BeryJu suggested that the bug is due to our using `{...}` to symbolize parameters in a URL while
Docusaurus wants to interpret `{...}` as an internal template instruction, resulting in odd
behavior. In either case, docusarus interpreted the hashtagged entries as links to unrelated issues
in Github (the same two issues, which were "bump version of pylint" and "bump version of sentry"),
which could be very confusing.

The inconsistencies between the two releases, and the working releases, suggests that the error was
introduced manually.

* web/maintenance: lint pass to add missing HTMLElementTagNameMap entries

# What

This code mechanically adds HTMLElementTagNameMap entries to those files that were missing it.

Every entry in the report is in this format:

    ./src/elements/ak-table/stories/ak-select-table.stories.ts

        'ak-select-table-test-sort' has not been registered on HTMLElementTagNameMap
        84:  export class SimpleTableSortTest extends LitElem
        no-missing-element-type-definition

It was trivial to create a Perl script that extracted the file name, the tag name, and the class name, and turn that into a “Open this file and append the HTMLElementTagNameMap definition to the end,” then run `prettier` and `build` to validate that nothing broke.

I also had to hand-edit the JSDoc for `Form`. It is not, by itself, an element. It is an abstract class from which you can derive elements. The `@element` tag there confused lit-analyze, and lit-analyze was correct to call it out.

# Why

These entries help Typescript & Lit-Analyze lint our product, validating that each element is being used correctly and that the types being passed to it are correct.

* web: Add InvalidationFlow to Radius Provider dialogues

## What

- Bugfix: adds the InvalidationFlow to the Radius Provider dialogues
  - Repairs: `{"invalidation_flow":["This field is required."]}` message, which was *not* propagated
    to the Notification.
- Nitpick: Pretties `?foo=${true}` expressions: `s/\?([^=]+)=\$\{true\}/\1/`

## Note

Yes, I know I'm going to have to do more magic when we harmonize the forms, and no, I didn't add the
Property Mappings to the wizard, and yes, I know I'm going to have pain with the *new* version of
the wizard. But this is a serious bug; you can't make Radius servers with *either* of the current
dialogues at the moment.

* This (temporary) change is needed to prevent the unit tests from failing.

\# What

\# Why

\# How

\# Designs

\# Test Steps

\# Other Notes

* Revert "This (temporary) change is needed to prevent the unit tests from failing."

This reverts commit dddde09.

* website: fix bad escaping of URLs in release notes

## What

Fixes bad escaping of URLs in the release notes that resulted in mangled output.

v2024.6.4 had entries that looked like this:

```
##### `GET` /providers/google_workspace/{#123;id}#125;/
```

v2025.4.md had entries that looked like this:

```
##### `GET` /policies/unique_password/{#125;#123;policy_uuid}/
```

A couple of straightforward search-and-replaces has fixed the issue.

## Notes

Two of the release notes had bad escaping of URLs. I'm not sure how the error was made or got past,
but it was obvious when visiting the page.

@BeryJu suggested that the bug is due to our using `{...}` to symbolize parameters in a URL while
Docusaurus wants to interpret `{...}` as an internal template instruction, resulting in odd
behavior. In either case, docusarus interpreted the hashtagged entries as links to unrelated issues
in Github (the same two issues, which were "bump version of pylint" and "bump version of sentry"),
which could be very confusing.

The inconsistencies between the two releases, and the working releases, suggests that the error was
introduced manually.

* web/maintenance: lint pass to add missing HTMLElementTagNameMap entries

# What

This code mechanically adds HTMLElementTagNameMap entries to those files that were missing it.

Every entry in the report is in this format:

    ./src/elements/ak-table/stories/ak-select-table.stories.ts

        'ak-select-table-test-sort' has not been registered on HTMLElementTagNameMap
        84:  export class SimpleTableSortTest extends LitElem
        no-missing-element-type-definition

It was trivial to create a Perl script that extracted the file name, the tag name, and the class name, and turn that into a “Open this file and append the HTMLElementTagNameMap definition to the end,” then run `prettier` and `build` to validate that nothing broke.

I also had to hand-edit the JSDoc for `Form`. It is not, by itself, an element. It is an abstract class from which you can derive elements. The `@element` tag there confused lit-analyze, and lit-analyze was correct to call it out.

# Why

These entries help Typescript & Lit-Analyze lint our product, validating that each element is being used correctly and that the types being passed to it are correct.

 to version-2025.12) (#19638)

web/maintenance: no missing element type definitions (#18950)

* web: Add InvalidationFlow to Radius Provider dialogues

## What

- Bugfix: adds the InvalidationFlow to the Radius Provider dialogues
  - Repairs: `{"invalidation_flow":["This field is required."]}` message, which was *not* propagated
    to the Notification.
- Nitpick: Pretties `?foo=${true}` expressions: `s/\?([^=]+)=\$\{true\}/\1/`

## Note

Yes, I know I'm going to have to do more magic when we harmonize the forms, and no, I didn't add the
Property Mappings to the wizard, and yes, I know I'm going to have pain with the *new* version of
the wizard. But this is a serious bug; you can't make Radius servers with *either* of the current
dialogues at the moment.

* This (temporary) change is needed to prevent the unit tests from failing.

\# What

\# Why

\# How

\# Designs

\# Test Steps

\# Other Notes

* Revert "This (temporary) change is needed to prevent the unit tests from failing."

This reverts commit dddde09.

* website: fix bad escaping of URLs in release notes

## What

Fixes bad escaping of URLs in the release notes that resulted in mangled output.

v2024.6.4 had entries that looked like this:

```
##### `GET` /providers/google_workspace/{#123;id}#125;/
```

v2025.4.md had entries that looked like this:

```
##### `GET` /policies/unique_password/{#125;#123;policy_uuid}/
```

A couple of straightforward search-and-replaces has fixed the issue.

## Notes

Two of the release notes had bad escaping of URLs. I'm not sure how the error was made or got past,
but it was obvious when visiting the page.

@BeryJu suggested that the bug is due to our using `{...}` to symbolize parameters in a URL while
Docusaurus wants to interpret `{...}` as an internal template instruction, resulting in odd
behavior. In either case, docusarus interpreted the hashtagged entries as links to unrelated issues
in Github (the same two issues, which were "bump version of pylint" and "bump version of sentry"),
which could be very confusing.

The inconsistencies between the two releases, and the working releases, suggests that the error was
introduced manually.

* web/maintenance: lint pass to add missing HTMLElementTagNameMap entries

# What

This code mechanically adds HTMLElementTagNameMap entries to those files that were missing it.

Every entry in the report is in this format:

    ./src/elements/ak-table/stories/ak-select-table.stories.ts

        'ak-select-table-test-sort' has not been registered on HTMLElementTagNameMap
        84:  export class SimpleTableSortTest extends LitElem
        no-missing-element-type-definition

It was trivial to create a Perl script that extracted the file name, the tag name, and the class name, and turn that into a “Open this file and append the HTMLElementTagNameMap definition to the end,” then run `prettier` and `build` to validate that nothing broke.

I also had to hand-edit the JSDoc for `Form`. It is not, by itself, an element. It is an abstract class from which you can derive elements. The `@element` tag there confused lit-analyze, and lit-analyze was correct to call it out.

# Why

These entries help Typescript & Lit-Analyze lint our product, validating that each element is being used correctly and that the types being passed to it are correct.

Co-authored-by: Ken Sternberg <133134217+kensternberg-authentik@users.noreply.github.com>

> ℹ️ **Note**
> 
> This PR body was truncated due to platform limits.

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [authentik](https://goauthentik.io)
([source](https://redirect.github.com/goauthentik/helm)) | major |
`2025.12.4` → `2026.2.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/1) for more information.

---

### Release Notes

<details>
<summary>goauthentik/helm (authentik)</summary>

###
[`v2026.2.0`](https://redirect.github.com/goauthentik/helm/releases/tag/authentik-2026.2.0)

[Compare
Source](https://redirect.github.com/goauthentik/helm/compare/authentik-2025.12.4...authentik-2026.2.0)

authentik is an open-source Identity Provider focused on flexibility and
versatility

#### What's Changed

- charts/authentik: add fields auto-added by Kubernetes to httproute by
[@&#8203;cfi2017](https://redirect.github.com/cfi2017) in
[#&#8203;453](https://redirect.github.com/goauthentik/helm/pull/453)
- chore(deps): update helm/kind-action action to v1.14.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;454](https://redirect.github.com/goauthentik/helm/pull/454)
- charts/authentik: add note how to set version by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[#&#8203;456](https://redirect.github.com/goauthentik/helm/pull/456)
- charts/authentik: bump to 2026.2.0 by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in [#&#8203;457](https://redirect.github.com/goauthentik/helm/pull/457)

#### New Contributors

- [@&#8203;cfi2017](https://redirect.github.com/cfi2017) made their
first contribution in
[#&#8203;453](https://redirect.github.com/goauthentik/helm/pull/453)

**Full Changelog**:
<https://github.com/goauthentik/helm/compare/authentik-2025.12.4...authentik-2026.2.0>

***

### Full release notes for authentik

See <https://docs.goauthentik.io/docs/releases/2026.2>

#### What's Changed

- root: bump version to 2026.2.0-rc1 by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#18794](https://redirect.github.com/goauthentik/authentik/pull/18794)
- tests/e2e: retry detached shadow roots by
[@&#8203;melizeche](https://redirect.github.com/melizeche) in
[goauthentik/authentik#18796](https://redirect.github.com/goauthentik/authentik/pull/18796)
- website/release notes: Update v2025.12 release notes by
[@&#8203;melizeche](https://redirect.github.com/melizeche) in
[goauthentik/authentik#18797](https://redirect.github.com/goauthentik/authentik/pull/18797)
- web/admin: fix read-only provider selection for application form by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#18768](https://redirect.github.com/goauthentik/authentik/pull/18768)
- web: bump the react group across 1 directory with 2 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18775](https://redirect.github.com/goauthentik/authentik/pull/18775)
- web: bump chromedriver from 143.0.0 to 143.0.1 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18776](https://redirect.github.com/goauthentik/authentik/pull/18776)
- web: bump the storybook group across 1 directory with 5 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18774](https://redirect.github.com/goauthentik/authentik/pull/18774)
- internal: don't warn on empty outpost for embedded by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18786](https://redirect.github.com/goauthentik/authentik/pull/18786)
- lifecycle/aws: bump aws-cdk from 2.1033.0 to 2.1034.0 in
/lifecycle/aws by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18771](https://redirect.github.com/goauthentik/authentik/pull/18771)
- core, web: update translations by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#18804](https://redirect.github.com/goauthentik/authentik/pull/18804)
- root: Add macOS support for sed in Makefile by
[@&#8203;melizeche](https://redirect.github.com/melizeche) in
[goauthentik/authentik#18795](https://redirect.github.com/goauthentik/authentik/pull/18795)
- ci: bump astral-sh/setup-uv from 7.1.5 to 7.1.6 in
/.github/actions/setup by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18826](https://redirect.github.com/goauthentik/authentik/pull/18826)
- ci: bump actions/upload-artifact from 5.0.0 to 6.0.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18824](https://redirect.github.com/goauthentik/authentik/pull/18824)
- core: bump goauthentik/fips-debian from `07f41ce` to `c10cd2c` by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18822](https://redirect.github.com/goauthentik/authentik/pull/18822)
- ci: bump actions/download-artifact from 6.0.0 to 7.0.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18825](https://redirect.github.com/goauthentik/authentik/pull/18825)
- ci: bump actions/cache from 5.0.0 to 5.0.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18823](https://redirect.github.com/goauthentik/authentik/pull/18823)
- core: list applications fix by
[@&#8203;ryanpesek](https://redirect.github.com/ryanpesek) in
[goauthentik/authentik#18798](https://redirect.github.com/goauthentik/authentik/pull/18798)
- website/docs: add icon info to style guide by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#18832](https://redirect.github.com/goauthentik/authentik/pull/18832)
- core: remove superuser check from `Token` list by
[@&#8203;gergosimonyi](https://redirect.github.com/gergosimonyi) in
[goauthentik/authentik#18684](https://redirect.github.com/goauthentik/authentik/pull/18684)
- packages/django-dramatiq-postgres: broker: close django connections on
consumer close by [@&#8203;rissson](https://redirect.github.com/rissson)
in
[goauthentik/authentik#18833](https://redirect.github.com/goauthentik/authentik/pull/18833)
- core: bump goauthentik.io/api/v3 from 3.2025120.26 to 3.2026020.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18815](https://redirect.github.com/goauthentik/authentik/pull/18815)
- admin/files: revert add check for /media existence
([#&#8203;18636](https://redirect.github.com/goauthentik/helm/issues/18636))
by [@&#8203;rissson](https://redirect.github.com/rissson) in
[goauthentik/authentik#18829](https://redirect.github.com/goauthentik/authentik/pull/18829)
- website/docs: add jellyseer integration doc by
[@&#8203;gabay](https://redirect.github.com/gabay) in
[goauthentik/authentik#18812](https://redirect.github.com/goauthentik/authentik/pull/18812)
- crypto: Store details parsed from includeDetails in database instead
by [@&#8203;PeshekDotDev](https://redirect.github.com/PeshekDotDev) in
[goauthentik/authentik#18013](https://redirect.github.com/goauthentik/authentik/pull/18013)
- core: skip s3 tests if endpoint isn't available by
[@&#8203;melizeche](https://redirect.github.com/melizeche) in
[goauthentik/authentik#18841](https://redirect.github.com/goauthentik/authentik/pull/18841)
- admin/files: fix get\_objects\_for\_user queryset argument in
FileUsedByView by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#18845](https://redirect.github.com/goauthentik/authentik/pull/18845)
- core: bump goauthentik/fips-debian from `c10cd2c` to `2f19fc1` by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18856](https://redirect.github.com/goauthentik/authentik/pull/18856)
- ci: replace codecov test-results action by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18862](https://redirect.github.com/goauthentik/authentik/pull/18862)
- core: add skip s3\_test\_server\_available to
TestResolveFileUrlS3Backend by
[@&#8203;melizeche](https://redirect.github.com/melizeche) in
[goauthentik/authentik#18858](https://redirect.github.com/goauthentik/authentik/pull/18858)
- rbac: alter migrated direct permission roles by
[@&#8203;gergosimonyi](https://redirect.github.com/gergosimonyi) in
[goauthentik/authentik#18860](https://redirect.github.com/goauthentik/authentik/pull/18860)
- core: bump library/golang from `5d35fb8` to `8e8f9c8` by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18855](https://redirect.github.com/goauthentik/authentik/pull/18855)
- web/admin/rbac: misc object permission fixes by
[@&#8203;gergosimonyi](https://redirect.github.com/gergosimonyi) in
[goauthentik/authentik#18859](https://redirect.github.com/goauthentik/authentik/pull/18859)
- outposts: fix permission errors for related certificates by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18861](https://redirect.github.com/goauthentik/authentik/pull/18861)
- website/docs: adjust RBAC-related details in 2025.12 release notes by
[@&#8203;gergosimonyi](https://redirect.github.com/gergosimonyi) in
[goauthentik/authentik#18863](https://redirect.github.com/goauthentik/authentik/pull/18863)
- website/docs: Add docs for passkey autofill (WebauthN Conditional UI)
by [@&#8203;melizeche](https://redirect.github.com/melizeche) in
[goauthentik/authentik#18805](https://redirect.github.com/goauthentik/authentik/pull/18805)
- website/docs: 2025.10.3 release notes by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18868](https://redirect.github.com/goauthentik/authentik/pull/18868)
- web: add custom message with links for empty data export list by
[@&#8203;atereshkin](https://redirect.github.com/atereshkin) in
[goauthentik/authentik#18830](https://redirect.github.com/goauthentik/authentik/pull/18830)
- web: fix notification counter by
[@&#8203;atereshkin](https://redirect.github.com/atereshkin) in
[goauthentik/authentik#18781](https://redirect.github.com/goauthentik/authentik/pull/18781)
- web: bump vite from 7.2.7 to 7.3.0 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18854](https://redirect.github.com/goauthentik/authentik/pull/18854)
- stages/authenticator\_\*: fix code input field not string by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18875](https://redirect.github.com/goauthentik/authentik/pull/18875)
- web: fix file upload form by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#18808](https://redirect.github.com/goauthentik/authentik/pull/18808)
- web/admin: endpoint: change wording and add helper text by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#18871](https://redirect.github.com/goauthentik/authentik/pull/18871)
- core, web: update translations by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#18807](https://redirect.github.com/goauthentik/authentik/pull/18807)
- website/integrations: bookstack: fix redir url by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#18891](https://redirect.github.com/goauthentik/authentik/pull/18891)
- core: bump astral-sh/uv from 0.9.17 to 0.9.18 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18898](https://redirect.github.com/goauthentik/authentik/pull/18898)
- core: bump goauthentik/fips-debian from `2f19fc1` to `189345a` by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18897](https://redirect.github.com/goauthentik/authentik/pull/18897)
- web: bump knip from 5.73.3 to 5.74.0 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18896](https://redirect.github.com/goauthentik/authentik/pull/18896)
- web: bump [@&#8203;types/node](https://redirect.github.com/types/node)
from 25.0.0 to 25.0.3 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18895](https://redirect.github.com/goauthentik/authentik/pull/18895)
- web: bump the rollup group across 1 directory with 4 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18852](https://redirect.github.com/goauthentik/authentik/pull/18852)
- web: bump the bundler group across 1 directory with 7 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18894](https://redirect.github.com/goauthentik/authentik/pull/18894)
- web: bump
[@&#8203;sentry/browser](https://redirect.github.com/sentry/browser)
from 10.30.0 to 10.31.0 in /web in the sentry group across 1 directory
by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18893](https://redirect.github.com/goauthentik/authentik/pull/18893)
- lifecycle/aws: bump aws-cdk from 2.1034.0 to 2.1100.0 in
/lifecycle/aws by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18850](https://redirect.github.com/goauthentik/authentik/pull/18850)
- web: bump the goauthentik group across 1 directory with 3 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18819](https://redirect.github.com/goauthentik/authentik/pull/18819)
- web: bump the swc group across 1 directory with 11 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18818](https://redirect.github.com/goauthentik/authentik/pull/18818)
- web: bump the eslint group across 1 directory with 5 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18851](https://redirect.github.com/goauthentik/authentik/pull/18851)
- core: bump goauthentik.io/api/v3 from 3.2026020.1 to 3.2026020.3 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18892](https://redirect.github.com/goauthentik/authentik/pull/18892)
- tasks/middleware: close connections on worker status update database
error by [@&#8203;rissson](https://redirect.github.com/rissson) in
[goauthentik/authentik#18881](https://redirect.github.com/goauthentik/authentik/pull/18881)
- website/docs: added list of Int Guide contributors (also edited
frontmatter) by [@&#8203;tanberry](https://redirect.github.com/tanberry)
in
[goauthentik/authentik#18888](https://redirect.github.com/goauthentik/authentik/pull/18888)
- api: fix page\_size with invalid query param by
[@&#8203;rissson](https://redirect.github.com/rissson) in
[goauthentik/authentik#18879](https://redirect.github.com/goauthentik/authentik/pull/18879)
- ci/release-tag: checkout correct branch for make test-docker by
[@&#8203;rissson](https://redirect.github.com/rissson) in
[goauthentik/authentik#18880](https://redirect.github.com/goauthentik/authentik/pull/18880)
- api: fix latest version for public schema by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18902](https://redirect.github.com/goauthentik/authentik/pull/18902)
- website/docs: 2025.12: remove superfluous changes by
[@&#8203;rissson](https://redirect.github.com/rissson) in
[goauthentik/authentik#18910](https://redirect.github.com/goauthentik/authentik/pull/18910)
- web/admin: reword some things on the device view page by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18785](https://redirect.github.com/goauthentik/authentik/pull/18785)
- core/groups: optimize prefetch queries to fetch only required fields
by [@&#8203;joaocfernandes](https://redirect.github.com/joaocfernandes)
in
[goauthentik/authentik#18448](https://redirect.github.com/goauthentik/authentik/pull/18448)
- root: fix docker-compose data mount by
[@&#8203;rissson](https://redirect.github.com/rissson) in
[goauthentik/authentik#18903](https://redirect.github.com/goauthentik/authentik/pull/18903)
- web/admin: add UI copy to RBAC modal by
[@&#8203;tanberry](https://redirect.github.com/tanberry) in
[goauthentik/authentik#18917](https://redirect.github.com/goauthentik/authentik/pull/18917)
- tests/e2e: handle StaleElementReferenceException in
parse\_json\_content by
[@&#8203;melizeche](https://redirect.github.com/melizeche) in
[goauthentik/authentik#18842](https://redirect.github.com/goauthentik/authentik/pull/18842)
- core: bump goauthentik/fips-debian from `189345a` to `10dadf1` by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18927](https://redirect.github.com/goauthentik/authentik/pull/18927)
- web: bump chromedriver from 143.0.1 to 143.0.2 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18926](https://redirect.github.com/goauthentik/authentik/pull/18926)
- web: bump knip from 5.74.0 to 5.75.1 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18924](https://redirect.github.com/goauthentik/authentik/pull/18924)
- core, web: update translations by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#18920](https://redirect.github.com/goauthentik/authentik/pull/18920)
- lifecycle/aws: bump aws-cdk from 2.1100.0 to 2.1100.1 in
/lifecycle/aws by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18922](https://redirect.github.com/goauthentik/authentik/pull/18922)
- web: bump the swc group across 1 directory with 11 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18923](https://redirect.github.com/goauthentik/authentik/pull/18923)
- web: bump the storybook group across 1 directory with 5 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18817](https://redirect.github.com/goauthentik/authentik/pull/18817)
- stages: remove more global state by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18641](https://redirect.github.com/goauthentik/authentik/pull/18641)
- packages/ak-guardian: cast safely by
[@&#8203;gergosimonyi](https://redirect.github.com/gergosimonyi) in
[goauthentik/authentik#18929](https://redirect.github.com/goauthentik/authentik/pull/18929)
- web/flow: Fix spurious double submit on ak-stage-autosubmit by
[@&#8203;dminuoso](https://redirect.github.com/dminuoso) in
[goauthentik/authentik#18727](https://redirect.github.com/goauthentik/authentik/pull/18727)
- website/integrations: Add launch URL for Immich by
[@&#8203;optix2000](https://redirect.github.com/optix2000) in
[goauthentik/authentik#18921](https://redirect.github.com/goauthentik/authentik/pull/18921)
- crypto: fix extra cert data in db migration by
[@&#8203;rissson](https://redirect.github.com/rissson) in
[goauthentik/authentik#18937](https://redirect.github.com/goauthentik/authentik/pull/18937)
- web/elements: progress-bar and table loading header by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18934](https://redirect.github.com/goauthentik/authentik/pull/18934)
- stages/identification: replace sleep with make\_password by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18883](https://redirect.github.com/goauthentik/authentik/pull/18883)
- website/docs: endpoint devices by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#18634](https://redirect.github.com/goauthentik/authentik/pull/18634)
- website/docs: Fix labels, Pre-Release detection by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#18945](https://redirect.github.com/goauthentik/authentik/pull/18945)
- website/docs: release notes: add endpoint device links to 2025.12
notes by [@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#18940](https://redirect.github.com/goauthentik/authentik/pull/18940)
- website/docs: Fix version parsing. by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#18948](https://redirect.github.com/goauthentik/authentik/pull/18948)
- web/admin: fix endpoints user binding by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18935](https://redirect.github.com/goauthentik/authentik/pull/18935)
- flows/executor: fix KeyError when session has no existing plan by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#18951](https://redirect.github.com/goauthentik/authentik/pull/18951)
- root: move docker files to lifecycle/containers and change
docker-compose to compose by
[@&#8203;PeshekDotDev](https://redirect.github.com/PeshekDotDev) in
[goauthentik/authentik#16624](https://redirect.github.com/goauthentik/authentik/pull/16624)
- core: bump goauthentik.io/api/v3 from 3.2026020.3 to 3.2026020.4 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18956](https://redirect.github.com/goauthentik/authentik/pull/18956)
- web: bump chromedriver from 143.0.2 to 143.0.3 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18959](https://redirect.github.com/goauthentik/authentik/pull/18959)
- web: bump the swc group across 1 directory with 11 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18958](https://redirect.github.com/goauthentik/authentik/pull/18958)
- web: bump
[@&#8203;sentry/browser](https://redirect.github.com/sentry/browser)
from 10.31.0 to 10.32.0 in /web in the sentry group across 1 directory
by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18957](https://redirect.github.com/goauthentik/authentik/pull/18957)
- ci: bump actions/attest-build-provenance from 3.0.0 to 3.1.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18960](https://redirect.github.com/goauthentik/authentik/pull/18960)
- website/docs: add note to active directory source doc by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#18787](https://redirect.github.com/goauthentik/authentik/pull/18787)
- web/maintenance: fix missing custom web component imports by
[@&#8203;kensternberg-authentik](https://redirect.github.com/kensternberg-authentik)
in
[goauthentik/authentik#18942](https://redirect.github.com/goauthentik/authentik/pull/18942)
- web/maintenance: no unknown tag names by
[@&#8203;kensternberg-authentik](https://redirect.github.com/kensternberg-authentik)
in
[goauthentik/authentik#18944](https://redirect.github.com/goauthentik/authentik/pull/18944)
- website/integrations: Fix path for Cloudflare Access by
[@&#8203;stijn220](https://redirect.github.com/stijn220) in
[goauthentik/authentik#18979](https://redirect.github.com/goauthentik/authentik/pull/18979)
- blueprints: add InternallyManagedMixin instead of large list by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18983](https://redirect.github.com/goauthentik/authentik/pull/18983)
- web/admin: fix dark theme on map by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18985](https://redirect.github.com/goauthentik/authentik/pull/18985)
- web/admin: Fix haveibeenpwned link in PasswordPolicyForm by
[@&#8203;hskrtich](https://redirect.github.com/hskrtich) in
[goauthentik/authentik#18984](https://redirect.github.com/goauthentik/authentik/pull/18984)
- events: notifications live update by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18980](https://redirect.github.com/goauthentik/authentik/pull/18980)
- web: fix Open button selecting row instead of navigating by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#18992](https://redirect.github.com/goauthentik/authentik/pull/18992)
- blueprints: fix flaky tests by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19002](https://redirect.github.com/goauthentik/authentik/pull/19002)
- ci: bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18999](https://redirect.github.com/goauthentik/authentik/pull/18999)
- providers/oauth2: Automated OpenID Conformance tests by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#14785](https://redirect.github.com/goauthentik/authentik/pull/14785)
- enterprise/reports: improve export list, confirmation by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18981](https://redirect.github.com/goauthentik/authentik/pull/18981)
- enterprise/search: add static autocomplete structure by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19008](https://redirect.github.com/goauthentik/authentik/pull/19008)
- website/docs: improve endpoint devices docs by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#19007](https://redirect.github.com/goauthentik/authentik/pull/19007)
- web: bump the rollup group across 1 directory with 4 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18994](https://redirect.github.com/goauthentik/authentik/pull/18994)
- core: bump openapitools/openapi-generator-cli from v7.16.0 to v7.18.0
in /scripts/api by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19018](https://redirect.github.com/goauthentik/authentik/pull/19018)
- web: bump globby from 16.0.0 to 16.1.0 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18995](https://redirect.github.com/goauthentik/authentik/pull/18995)
- api: rework schema generation by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18977](https://redirect.github.com/goauthentik/authentik/pull/18977)
- web/admin: prevent file upload attempt when backend not managed by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18646](https://redirect.github.com/goauthentik/authentik/pull/18646)
- web: bump the eslint group across 1 directory with 3 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19019](https://redirect.github.com/goauthentik/authentik/pull/19019)
- core: bump goauthentik.io/api/v3 from 3.2026020.4 to 3.2026020.5 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19017](https://redirect.github.com/goauthentik/authentik/pull/19017)
- website/docs: Prioritize "Release Candidate" over "Current Release" by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#18975](https://redirect.github.com/goauthentik/authentik/pull/18975)
- web: Locale selector UI fixes by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#18972](https://redirect.github.com/goauthentik/authentik/pull/18972)
- web: Fix Storybook package resolution with `npm link` by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#19016](https://redirect.github.com/goauthentik/authentik/pull/19016)
- core: use chunked\_queryset for expired message deletion by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19028](https://redirect.github.com/goauthentik/authentik/pull/19028)
- web/admin: use consistent icon for inactive user status by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19032](https://redirect.github.com/goauthentik/authentik/pull/19032)
- web: bump lit from 3.3.1 to 3.3.2 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19038](https://redirect.github.com/goauthentik/authentik/pull/19038)
- web: bump
[@&#8203;lit/reactive-element](https://redirect.github.com/lit/reactive-element)
from 2.1.1 to 2.1.2 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19037](https://redirect.github.com/goauthentik/authentik/pull/19037)
- web: bump knip from 5.75.1 to 5.77.0 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19041](https://redirect.github.com/goauthentik/authentik/pull/19041)
- core: bump goauthentik.io/api/v3 from 3.2026020.5 to 3.2026020.6 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19036](https://redirect.github.com/goauthentik/authentik/pull/19036)
- docs/release notes: update 2025.12 release notes by
[@&#8203;melizeche](https://redirect.github.com/melizeche) in
[goauthentik/authentik#19043](https://redirect.github.com/goauthentik/authentik/pull/19043)
- lib/sync: fix sync\_dispatch by
[@&#8203;krejcar25](https://redirect.github.com/krejcar25) in
[goauthentik/authentik#19053](https://redirect.github.com/goauthentik/authentik/pull/19053)
- endpoints/devices: cleanup by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19047](https://redirect.github.com/goauthentik/authentik/pull/19047)
- blueprints: set enrollment token key by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19061](https://redirect.github.com/goauthentik/authentik/pull/19061)
- website/integrations: Add Wallos by
[@&#8203;0skater0](https://redirect.github.com/0skater0) in
[goauthentik/authentik#19013](https://redirect.github.com/goauthentik/authentik/pull/19013)
- website/docs: FreeIPA documentation updates by
[@&#8203;borutmrak](https://redirect.github.com/borutmrak) in
[goauthentik/authentik#15183](https://redirect.github.com/goauthentik/authentik/pull/15183)
- \*: Auto compress images by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#19065](https://redirect.github.com/goauthentik/authentik/pull/19065)
- blueprints: fix deadlock and task context error in MetaApplyBlueprint
by [@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19033](https://redirect.github.com/goauthentik/authentik/pull/19033)
- web: fix file search input not resetting results properly by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19034](https://redirect.github.com/goauthentik/authentik/pull/19034)
- website/integrations: owncloud: fix php by
[@&#8203;ocmateusz](https://redirect.github.com/ocmateusz) in
[goauthentik/authentik#19073](https://redirect.github.com/goauthentik/authentik/pull/19073)
- tests/e2e: add endpoint tests by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19072](https://redirect.github.com/goauthentik/authentik/pull/19072)
- core, web: update translations by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#18991](https://redirect.github.com/goauthentik/authentik/pull/18991)
- web: bump knip from 5.77.0 to 5.77.1 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19049](https://redirect.github.com/goauthentik/authentik/pull/19049)
- web: bump
[@&#8203;lit/localize-tools](https://redirect.github.com/lit/localize-tools)
from 0.8.0 to 0.8.1 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19040](https://redirect.github.com/goauthentik/authentik/pull/19040)
- internal: update TLS Suite by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19076](https://redirect.github.com/goauthentik/authentik/pull/19076)
- web: bump
[@&#8203;formatjs/intl-listformat](https://redirect.github.com/formatjs/intl-listformat)
from 7.7.13 to 8.1.0 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19054](https://redirect.github.com/goauthentik/authentik/pull/19054)
- web/admin: fix button alignment on user view page by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19079](https://redirect.github.com/goauthentik/authentik/pull/19079)
- website/docs: endpoints: mention connector key required for stage to
work by [@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19084](https://redirect.github.com/goauthentik/authentik/pull/19084)
- website/docs: rel notes .12: add wallos by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19063](https://redirect.github.com/goauthentik/authentik/pull/19063)
- website/docs: endpoint devices: update features table by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#19094](https://redirect.github.com/goauthentik/authentik/pull/19094)
- website/docs: endpoint devices: add path to macos setup by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#19093](https://redirect.github.com/goauthentik/authentik/pull/19093)
- web: bump knip from 5.77.1 to 5.78.0 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19090](https://redirect.github.com/goauthentik/authentik/pull/19090)
- web: fix promoted source button hover losing blue color by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19048](https://redirect.github.com/goauthentik/authentik/pull/19048)
- web: Fix stale flow background by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19015](https://redirect.github.com/goauthentik/authentik/pull/19015)
- Update Vaultwarden documentation by removing warning by
[@&#8203;austin-dudzik](https://redirect.github.com/austin-dudzik) in
[goauthentik/authentik#19102](https://redirect.github.com/goauthentik/authentik/pull/19102)
- web/maintenance/no unknown attributes (part 1) by
[@&#8203;kensternberg-authentik](https://redirect.github.com/kensternberg-authentik)
in
[goauthentik/authentik#18970](https://redirect.github.com/goauthentik/authentik/pull/18970)
- website/integrations: Add Pulse by
[@&#8203;0skater0](https://redirect.github.com/0skater0) in
[goauthentik/authentik#19105](https://redirect.github.com/goauthentik/authentik/pull/19105)
- website/integrations: Add Audiobookshelf by
[@&#8203;0skater0](https://redirect.github.com/0skater0) in
[goauthentik/authentik#19104](https://redirect.github.com/goauthentik/authentik/pull/19104)
- website/docs: release notes: Add more integrations by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19109](https://redirect.github.com/goauthentik/authentik/pull/19109)
- web: bump the storybook group across 1 directory with 5 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19111](https://redirect.github.com/goauthentik/authentik/pull/19111)
- core: bump library/nginx from `fb01117` to `ad85427` in /website by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19112](https://redirect.github.com/goauthentik/authentik/pull/19112)
- web: bump the eslint group across 1 directory with 3 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19110](https://redirect.github.com/goauthentik/authentik/pull/19110)
- web: Fix Impersonation, Lit Reactive Controller Contexts by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#19114](https://redirect.github.com/goauthentik/authentik/pull/19114)
- web: Capitalize language display names, code owner fix by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#19119](https://redirect.github.com/goauthentik/authentik/pull/19119)
- core: bump library/nginx from `ad85427` to `ca871a8` in /website by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19126](https://redirect.github.com/goauthentik/authentik/pull/19126)
- web: bump the swc group across 1 directory with 11 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19124](https://redirect.github.com/goauthentik/authentik/pull/19124)
- core: bump github.com/jackc/pgx/v5 from 5.7.6 to 5.8.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19088](https://redirect.github.com/goauthentik/authentik/pull/19088)
- core: bump library/node from `ccfd9da` to `03729a7` in /website by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19125](https://redirect.github.com/goauthentik/authentik/pull/19125)
- core, web: bump qs from 6.14.0 to 6.14.1 in
/packages/docusaurus-config by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19130](https://redirect.github.com/goauthentik/authentik/pull/19130)
- website/integrations: karakeep: don't hardcode wellknown's slug by
[@&#8203;pippo73](https://redirect.github.com/pippo73) in
[goauthentik/authentik#19127](https://redirect.github.com/goauthentik/authentik/pull/19127)
- web: disable user settings fields when changes are not allowed by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19132](https://redirect.github.com/goauthentik/authentik/pull/19132)
- website/docs: endpoint agent release notes by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19042](https://redirect.github.com/goauthentik/authentik/pull/19042)
- website/docs: fix build by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19148](https://redirect.github.com/goauthentik/authentik/pull/19148)
- web: Token Form Fixes by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#19121](https://redirect.github.com/goauthentik/authentik/pull/19121)
- web/user: fix consent delete form missing details by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19147](https://redirect.github.com/goauthentik/authentik/pull/19147)
- web: bump globals from 16.5.0 to 17.0.0 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19154](https://redirect.github.com/goauthentik/authentik/pull/19154)
- core, web: update translations by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#19135](https://redirect.github.com/goauthentik/authentik/pull/19135)
- ci: bump int128/docker-manifest-create-action from 2.10.0 to 2.12.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19138](https://redirect.github.com/goauthentik/authentik/pull/19138)
- website/integrations: vaultwarden: add custom email scope by
[@&#8203;williamkray](https://redirect.github.com/williamkray) in
[goauthentik/authentik#19160](https://redirect.github.com/goauthentik/authentik/pull/19160)
- stages/authenticator\_webauthn: Update FIDO MDS3 & Passkey aaguid
blobs by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#19137](https://redirect.github.com/goauthentik/authentik/pull/19137)
- core: handle deserialization errors from FileField migration by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19067](https://redirect.github.com/goauthentik/authentik/pull/19067)
- web: fix slug auto-updating when editing existing applications by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19169](https://redirect.github.com/goauthentik/authentik/pull/19169)
- web: Fix user library colors, modal z-indexes, table progress bars by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#19152](https://redirect.github.com/goauthentik/authentik/pull/19152)
- web/admin: adjust sync threshold, add tooltip by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19131](https://redirect.github.com/goauthentik/authentik/pull/19131)
- website/docs: remove duplicates in slo docs by
[@&#8203;nmasnadithya](https://redirect.github.com/nmasnadithya) in
[goauthentik/authentik#19170](https://redirect.github.com/goauthentik/authentik/pull/19170)
- lifecycle: fix migration conn\_options for psycopg connection by
[@&#8203;D-Tasker207](https://redirect.github.com/D-Tasker207) in
[goauthentik/authentik#19134](https://redirect.github.com/goauthentik/authentik/pull/19134)
- web: bump knip from 5.78.0 to 5.79.0 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19181](https://redirect.github.com/goauthentik/authentik/pull/19181)
- ci: bump getsentry/action-release from 3.4.0 to 3.5.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19183](https://redirect.github.com/goauthentik/authentik/pull/19183)
- web: bump
[@&#8203;formatjs/intl-listformat](https://redirect.github.com/formatjs/intl-listformat)
from 8.1.0 to 8.1.1 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19182](https://redirect.github.com/goauthentik/authentik/pull/19182)
- core, web: update translations by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#19179](https://redirect.github.com/goauthentik/authentik/pull/19179)
- lib: update error logging by
[@&#8203;PeshekDotDev](https://redirect.github.com/PeshekDotDev) in
[goauthentik/authentik#18628](https://redirect.github.com/goauthentik/authentik/pull/18628)
- website/integrations: make grafana terraform section expand by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19192](https://redirect.github.com/goauthentik/authentik/pull/19192)
- core: add prettier failure on duplicate group names by
[@&#8203;gergosimonyi](https://redirect.github.com/gergosimonyi) in
[goauthentik/authentik#18941](https://redirect.github.com/goauthentik/authentik/pull/18941)
- web/maintenance: no missing element type definitions by
[@&#8203;kensternberg-authentik](https://redirect.github.com/kensternberg-authentik)
in
[goauthentik/authentik#18950](https://redirect.github.com/goauthentik/authentik/pull/18950)
- root: codespell: ignore Python virtual env, group patterns. by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#19180](https://redirect.github.com/goauthentik/authentik/pull/19180)
- web: Merge branch -- Stale notifications, synchronized context
objects, rendering fixes by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#19141](https://redirect.github.com/goauthentik/authentik/pull/19141)
- website/docs: Add docs for roles by
[@&#8203;PeshekDotDev](https://redirect.github.com/PeshekDotDev) in
[goauthentik/authentik#19196](https://redirect.github.com/goauthentik/authentik/pull/19196)
- web: Defer table refresh, visibility checks. by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#19194](https://redirect.github.com/goauthentik/authentik/pull/19194)
- rbac: Add show all to roles tab, add role tab to groups by
[@&#8203;PeshekDotDev](https://redirect.github.com/PeshekDotDev) in
[goauthentik/authentik#19097](https://redirect.github.com/goauthentik/authentik/pull/19097)
- website/docs: rewrite section about users and perms by
[@&#8203;tanberry](https://redirect.github.com/tanberry) in
[goauthentik/authentik#19195](https://redirect.github.com/goauthentik/authentik/pull/19195)
- core: add last\_login filter to users API by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#18993](https://redirect.github.com/goauthentik/authentik/pull/18993)
- web: bump the eslint group across 1 directory with 3 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19205](https://redirect.github.com/goauthentik/authentik/pull/19205)
- admin/files: support %(theme)s variable in media file paths by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19108](https://redirect.github.com/goauthentik/authentik/pull/19108)
- website/integrations: glpi: add step by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#19208](https://redirect.github.com/goauthentik/authentik/pull/19208)
- web: bump knip from 5.79.0 to 5.80.0 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19207](https://redirect.github.com/goauthentik/authentik/pull/19207)
- core: bump axllent/mailpit from v1.28.0 to v1.28.1 in /tests/e2e by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19204](https://redirect.github.com/goauthentik/authentik/pull/19204)
- lifecycle/aws: bump aws-cdk from 2.1100.1 to 2.1100.2 in
/lifecycle/aws by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19203](https://redirect.github.com/goauthentik/authentik/pull/19203)
- core: bump goauthentik.io/api/v3 from 3.2026020.6 to 3.2026020.7 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19202](https://redirect.github.com/goauthentik/authentik/pull/19202)
- translate: Updates for project authentik and language pt\_BR by
[@&#8203;transifex-integration](https://redirect.github.com/transifex-integration)\[bot]
in
[goauthentik/authentik#19082](https://redirect.github.com/goauthentik/authentik/pull/19082)
- web/maintenance: lint pass to add missing HTMLElementEventMap entries
by
[@&#8203;kensternberg-authentik](https://redirect.github.com/kensternberg-authentik)
in
[goauthentik/authentik#18953](https://redirect.github.com/goauthentik/authentik/pull/18953)
- outpost/proxyv2: reduce max number of postgres connections by
[@&#8203;rissson](https://redirect.github.com/rissson) in
[goauthentik/authentik#19211](https://redirect.github.com/goauthentik/authentik/pull/19211)
- core, web: update translations by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#19200](https://redirect.github.com/goauthentik/authentik/pull/19200)
- website/docs: revisit endpoint docs the nth by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19116](https://redirect.github.com/goauthentik/authentik/pull/19116)
- ci: bump astral-sh/setup-uv from 7.1.6 to 7.2.0 in
/.github/actions/setup by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19221](https://redirect.github.com/goauthentik/authentik/pull/19221)
- endpoints: include license status in agent config by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19227](https://redirect.github.com/goauthentik/authentik/pull/19227)
- web: bump
[@&#8203;formatjs/intl-listformat](https://redirect.github.com/formatjs/intl-listformat)
from 8.1.1 to 8.1.2 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19220](https://redirect.github.com/goauthentik/authentik/pull/19220)
- lifecycle/aws: bump aws-cdk from 2.1100.2 to 2.1100.3 in
/lifecycle/aws by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19219](https://redirect.github.com/goauthentik/authentik/pull/19219)
- core: bump goauthentik.io/api/v3 from 3.2026020.7 to 3.2026020.8 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19218](https://redirect.github.com/goauthentik/authentik/pull/19218)
- stages/authenticator\_static: set max token length to 100 chars by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19162](https://redirect.github.com/goauthentik/authentik/pull/19162)
- website/glossary: improve by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#18969](https://redirect.github.com/goauthentik/authentik/pull/18969)
- core: fix read replica routing during transactions by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19086](https://redirect.github.com/goauthentik/authentik/pull/19086)
- website: Fix typos. by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19243](https://redirect.github.com/goauthentik/authentik/pull/19243)
- core: bump goauthentik.io/api/v3 from 3.2026020.8 to 3.2026020.10 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19242](https://redirect.github.com/goauthentik/authentik/pull/19242)
- website/integrations: update AWS by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#17861](https://redirect.github.com/goauthentik/authentik/pull/17861)
- website/docs: update github social login script example by
[@&#8203;busybox11](https://redirect.github.com/busybox11) in
[goauthentik/authentik#19246](https://redirect.github.com/goauthentik/authentik/pull/19246)
- web: bump vite from 7.3.0 to 7.3.1 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19245](https://redirect.github.com/goauthentik/authentik/pull/19245)
- web: bump the rollup group across 1 directory with 4 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19206](https://redirect.github.com/goauthentik/authentik/pull/19206)
- stages/prompt: optimize API endpoints by
[@&#8203;rissson](https://redirect.github.com/rissson) in
[goauthentik/authentik#19251](https://redirect.github.com/goauthentik/authentik/pull/19251)
- website/docs: update entra id provider docs by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#18366](https://redirect.github.com/goauthentik/authentik/pull/18366)
- website/integations: fix aws spelling by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#19253](https://redirect.github.com/goauthentik/authentik/pull/19253)
- stages/password: replace session-based retries with reputation by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18643](https://redirect.github.com/goauthentik/authentik/pull/18643)
- web: bump chromedriver from 143.0.3 to 143.0.4 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19244](https://redirect.github.com/goauthentik/authentik/pull/19244)
- web/admin: add banner to flow import form by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19288](https://redirect.github.com/goauthentik/authentik/pull/19288)
- core: bump django from v5.2.9 to 5.2.10 by
[@&#8203;melizeche](https://redirect.github.com/melizeche) in
[goauthentik/authentik#19290](https://redirect.github.com/goauthentik/authentik/pull/19290)
- endpoints: show agent version by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19239](https://redirect.github.com/goauthentik/authentik/pull/19239)
- core: bump urllib3 from 2.5.0 to v2.6.3 by
[@&#8203;melizeche](https://redirect.github.com/melizeche) in
[goauthentik/authentik#19287](https://redirect.github.com/goauthentik/authentik/pull/19287)
- web: bump knip from 5.80.0 to 5.80.1 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19301](https://redirect.github.com/goauthentik/authentik/pull/19301)
- web: Fix flow inspector advancement event. by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#19309](https://redirect.github.com/goauthentik/authentik/pull/19309)
- core, web: update translations by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#19237](https://redirect.github.com/goauthentik/authentik/pull/19237)
- website/docs: deprecate GCDT auth stage by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#19306](https://redirect.github.com/goauthentik/authentik/pull/19306)
- website/docs: Fix typo in GitHub OAuth Source instructions by
[@&#8203;tcrasset](https://redirect.github.com/tcrasset) in
[goauthentik/authentik#18936](https://redirect.github.com/goauthentik/authentik/pull/18936)
- website/docs: update m2m doc by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#18963](https://redirect.github.com/goauthentik/authentik/pull/18963)
- website/docs: Fix documentation example for
`app_entitlements_attributes`. by
[@&#8203;sebastianw](https://redirect.github.com/sebastianw) in
[goauthentik/authentik#19316](https://redirect.github.com/goauthentik/authentik/pull/19316)
- website/docs: add flow import warnings by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#19307](https://redirect.github.com/goauthentik/authentik/pull/19307)
- web: bump pino from 10.1.0 to 10.1.1 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19333](https://redirect.github.com/goauthentik/authentik/pull/19333)
- web: bump knip from 5.80.1 to 5.80.2 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19332](https://redirect.github.com/goauthentik/authentik/pull/19332)
- core: bump axllent/mailpit from v1.28.1 to v1.28.2 in /tests/e2e by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19329](https://redirect.github.com/goauthentik/authentik/pull/19329)
- web: bump [@&#8203;types/node](https://redirect.github.com/types/node)
from 25.0.3 to 25.0.6 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19331](https://redirect.github.com/goauthentik/authentik/pull/19331)
- core: bump library/nginx from `ca871a8` to `7272239` in /website by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19334](https://redirect.github.com/goauthentik/authentik/pull/19334)
- website/docs: update unique email policy by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#19305](https://redirect.github.com/goauthentik/authentik/pull/19305)
- web: bump
[@&#8203;types/react](https://redirect.github.com/types/react) from
19.2.7 to 19.2.8 in /web in the react group across 1 directory by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19330](https://redirect.github.com/goauthentik/authentik/pull/19330)
- web: Images styles, theming by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#19233](https://redirect.github.com/goauthentik/authentik/pull/19233)
- website/docs: update LDAP provider docs by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#18272](https://redirect.github.com/goauthentik/authentik/pull/18272)
- web: Flow info, localization, back button. by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#19234](https://redirect.github.com/goauthentik/authentik/pull/19234)
- web: bump type-fest from 5.3.1 to 5.4.0 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19354](https://redirect.github.com/goauthentik/authentik/pull/19354)
- core: bump goauthentik.io/api/v3 from 3.2026020.10 to 3.2026020.11 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19300](https://redirect.github.com/goauthentik/authentik/pull/19300)
- ci: bump actions/setup-go from 6.1.0 to 6.2.0 in
/.github/actions/setup by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19352](https://redirect.github.com/goauthentik/authentik/pull/19352)
- web: bump the bundler group across 1 directory with 3 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19349](https://redirect.github.com/goauthentik/authentik/pull/19349)
- ci: bump actions/setup-go from 6.1.0 to 6.2.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19351](https://redirect.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "every weekend" in timezone
America/New_York, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/enchantednatures/HomeCluster).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zNi4yIiwidXBkYXRlZEluVmVyIjoiNDMuMzYuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvaGVsbSIsInR5cGUvbWFqb3IiXX0=-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

> ℹ️ **Note**
> 
> This PR body was truncated due to platform limits.

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [authentik](https://goauthentik.io)
([source](https://redirect.github.com/goauthentik/helm)) | major |
`^2025.0.0` → `^2026.0.0` |

---

### Release Notes

<details>
<summary>goauthentik/helm (authentik)</summary>

###
[`v2026.2.1`](https://redirect.github.com/goauthentik/helm/releases/tag/authentik-2026.2.1)

[Compare
Source](https://redirect.github.com/goauthentik/helm/compare/authentik-2026.2.0...authentik-2026.2.1)

authentik is an open-source Identity Provider focused on flexibility and
versatility

#### What's Changed

- charts/authentik: Add weight to http route service by
[@&#8203;flipper](https://redirect.github.com/flipper) in
[#&#8203;458](https://redirect.github.com/goauthentik/helm/pull/458)
- chore(deps): update docker.io/library/postgres docker tag to v17.9 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;452](https://redirect.github.com/goauthentik/helm/pull/452)
- chore(deps): update prometheuscommunity/postgres-exporter docker tag
to v0.19.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;445](https://redirect.github.com/goauthentik/helm/pull/445)
- charts/authentik: bump to 2026.2.1 by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in [#&#8203;459](https://redirect.github.com/goauthentik/helm/pull/459)

#### New Contributors

- [@&#8203;flipper](https://redirect.github.com/flipper) made their
first contribution in
[#&#8203;458](https://redirect.github.com/goauthentik/helm/pull/458)

**Full Changelog**:
<https://github.com/goauthentik/helm/compare/authentik-2026.2.0...authentik-2026.2.1>

***

### Full release notes for authentik

See <https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202621>

#### What's Changed

- website/docs: update supported versions (cherry-pick
[#&#8203;20534](https://redirect.github.com/goauthentik/helm/issues/20534)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20535](https://redirect.github.com/goauthentik/authentik/pull/20535)
- website/docs: fix upgrade link in `2026.2` release notes (cherry-pick
[#&#8203;20539](https://redirect.github.com/goauthentik/helm/issues/20539)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20542](https://redirect.github.com/goauthentik/authentik/pull/20542)
- website/docs: remove bad logs redirect (cherry-pick
[#&#8203;20522](https://redirect.github.com/goauthentik/helm/issues/20522)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20548](https://redirect.github.com/goauthentik/authentik/pull/20548)
- website/docs: revamp enterprise section (cherry-pick
[#&#8203;20379](https://redirect.github.com/goauthentik/helm/issues/20379)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20546](https://redirect.github.com/goauthentik/authentik/pull/20546)
- docs: fix typos and wording in docs and integrations (cherry-pick
[#&#8203;20550](https://redirect.github.com/goauthentik/helm/issues/20550)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20563](https://redirect.github.com/goauthentik/authentik/pull/20563)
- ci: add `reason` change to versions repo bump (cherry-pick
[#&#8203;20562](https://redirect.github.com/goauthentik/helm/issues/20562)
to version-2026.2) by
[@&#8203;gergosimonyi](https://redirect.github.com/gergosimonyi) in
[goauthentik/authentik#20569](https://redirect.github.com/goauthentik/authentik/pull/20569)
- internal: make http timeouts configurable (cherry-pick
[#&#8203;20472](https://redirect.github.com/goauthentik/helm/issues/20472)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20567](https://redirect.github.com/goauthentik/authentik/pull/20567)
- packages/django-dramatiq-postgres: use fork (cherry-pick
[#&#8203;20606](https://redirect.github.com/goauthentik/helm/issues/20606)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20608](https://redirect.github.com/goauthentik/authentik/pull/20608)
- web/flows: fix source icons being always inverted (cherry-pick
[#&#8203;20419](https://redirect.github.com/goauthentik/helm/issues/20419)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20607](https://redirect.github.com/goauthentik/authentik/pull/20607)
- crypto: fix kid legacy signal (cherry-pick
[#&#8203;20627](https://redirect.github.com/goauthentik/helm/issues/20627)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20628](https://redirect.github.com/goauthentik/authentik/pull/20628)
- sources/ldap: add connection logging & downgrade message (cherry-pick
[#&#8203;20519](https://redirect.github.com/goauthentik/helm/issues/20519)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20636](https://redirect.github.com/goauthentik/authentik/pull/20636)
- packages/django-dramatiq-postgres: fix worker startup on macos
(cherry-pick
[#&#8203;20637](https://redirect.github.com/goauthentik/helm/issues/20637)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20641](https://redirect.github.com/goauthentik/authentik/pull/20641)
- enterprise/wsfed: Fix metadata export and signing logic (cherry-pick
[#&#8203;20643](https://redirect.github.com/goauthentik/helm/issues/20643)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20649](https://redirect.github.com/goauthentik/authentik/pull/20649)
- website/docs: entra id provider: add custom email domain info
(cherry-pick
[#&#8203;20444](https://redirect.github.com/goauthentik/helm/issues/20444)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20660](https://redirect.github.com/goauthentik/authentik/pull/20660)
- website/docs: kerberos: add note about caching (cherry-pick
[#&#8203;20663](https://redirect.github.com/goauthentik/helm/issues/20663)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20664](https://redirect.github.com/goauthentik/authentik/pull/20664)
- core: fix get\_provider returning base Provider instead of subclass
(cherry-pick
[#&#8203;19064](https://redirect.github.com/goauthentik/helm/issues/19064)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20670](https://redirect.github.com/goauthentik/authentik/pull/20670)
- packages/django-channels-postgres: eagerly delete messages
(cherry-pick
[#&#8203;20687](https://redirect.github.com/goauthentik/helm/issues/20687)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20688](https://redirect.github.com/goauthentik/authentik/pull/20688)
- outpost/proxyv2: prevent panic in handleSignOut (cherry-pick
[#&#8203;20097](https://redirect.github.com/goauthentik/helm/issues/20097)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20689](https://redirect.github.com/goauthentik/authentik/pull/20689)
- website/docs: add 2025 pentest (cherry-pick
[#&#8203;20626](https://redirect.github.com/goauthentik/helm/issues/20626)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20691](https://redirect.github.com/goauthentik/authentik/pull/20691)
- web: fix identification stage styling in compatibility mode
(cherry-pick
[#&#8203;20684](https://redirect.github.com/goauthentik/helm/issues/20684)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20694](https://redirect.github.com/goauthentik/authentik/pull/20694)
- providers/proxy: move search path to query instead of runtime
parameter (cherry-pick
[#&#8203;20662](https://redirect.github.com/goauthentik/helm/issues/20662)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20693](https://redirect.github.com/goauthentik/authentik/pull/20693)
- website/docs: add release notes for `2026.2.1` (cherry-pick
[#&#8203;20659](https://redirect.github.com/goauthentik/helm/issues/20659)
to version-2026.2) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#20695](https://redirect.github.com/goauthentik/authentik/pull/20695)

**Full Changelog**:
<https://github.com/goauthentik/authentik/compare/version/2026.2.0...version/2026.2.1>

###
[`v2026.2.0`](https://redirect.github.com/goauthentik/helm/releases/tag/authentik-2026.2.0)

[Compare
Source](https://redirect.github.com/goauthentik/helm/compare/authentik-2025.12.4...authentik-2026.2.0)

authentik is an open-source Identity Provider focused on flexibility and
versatility

#### What's Changed

- charts/authentik: add fields auto-added by Kubernetes to httproute by
[@&#8203;cfi2017](https://redirect.github.com/cfi2017) in
[#&#8203;453](https://redirect.github.com/goauthentik/helm/pull/453)
- chore(deps): update helm/kind-action action to v1.14.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;454](https://redirect.github.com/goauthentik/helm/pull/454)
- charts/authentik: add note how to set version by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[#&#8203;456](https://redirect.github.com/goauthentik/helm/pull/456)
- charts/authentik: bump to 2026.2.0 by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in [#&#8203;457](https://redirect.github.com/goauthentik/helm/pull/457)

#### New Contributors

- [@&#8203;cfi2017](https://redirect.github.com/cfi2017) made their
first contribution in
[#&#8203;453](https://redirect.github.com/goauthentik/helm/pull/453)

**Full Changelog**:
<https://github.com/goauthentik/helm/compare/authentik-2025.12.4...authentik-2026.2.0>

***

### Full release notes for authentik

See <https://docs.goauthentik.io/docs/releases/2026.2>

#### What's Changed

- root: bump version to 2026.2.0-rc1 by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#18794](https://redirect.github.com/goauthentik/authentik/pull/18794)
- tests/e2e: retry detached shadow roots by
[@&#8203;melizeche](https://redirect.github.com/melizeche) in
[goauthentik/authentik#18796](https://redirect.github.com/goauthentik/authentik/pull/18796)
- website/release notes: Update v2025.12 release notes by
[@&#8203;melizeche](https://redirect.github.com/melizeche) in
[goauthentik/authentik#18797](https://redirect.github.com/goauthentik/authentik/pull/18797)
- web/admin: fix read-only provider selection for application form by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#18768](https://redirect.github.com/goauthentik/authentik/pull/18768)
- web: bump the react group across 1 directory with 2 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18775](https://redirect.github.com/goauthentik/authentik/pull/18775)
- web: bump chromedriver from 143.0.0 to 143.0.1 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18776](https://redirect.github.com/goauthentik/authentik/pull/18776)
- web: bump the storybook group across 1 directory with 5 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18774](https://redirect.github.com/goauthentik/authentik/pull/18774)
- internal: don't warn on empty outpost for embedded by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18786](https://redirect.github.com/goauthentik/authentik/pull/18786)
- lifecycle/aws: bump aws-cdk from 2.1033.0 to 2.1034.0 in
/lifecycle/aws by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18771](https://redirect.github.com/goauthentik/authentik/pull/18771)
- core, web: update translations by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#18804](https://redirect.github.com/goauthentik/authentik/pull/18804)
- root: Add macOS support for sed in Makefile by
[@&#8203;melizeche](https://redirect.github.com/melizeche) in
[goauthentik/authentik#18795](https://redirect.github.com/goauthentik/authentik/pull/18795)
- ci: bump astral-sh/setup-uv from 7.1.5 to 7.1.6 in
/.github/actions/setup by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18826](https://redirect.github.com/goauthentik/authentik/pull/18826)
- ci: bump actions/upload-artifact from 5.0.0 to 6.0.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18824](https://redirect.github.com/goauthentik/authentik/pull/18824)
- core: bump goauthentik/fips-debian from `07f41ce` to `c10cd2c` by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18822](https://redirect.github.com/goauthentik/authentik/pull/18822)
- ci: bump actions/download-artifact from 6.0.0 to 7.0.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18825](https://redirect.github.com/goauthentik/authentik/pull/18825)
- ci: bump actions/cache from 5.0.0 to 5.0.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18823](https://redirect.github.com/goauthentik/authentik/pull/18823)
- core: list applications fix by
[@&#8203;ryanpesek](https://redirect.github.com/ryanpesek) in
[goauthentik/authentik#18798](https://redirect.github.com/goauthentik/authentik/pull/18798)
- website/docs: add icon info to style guide by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#18832](https://redirect.github.com/goauthentik/authentik/pull/18832)
- core: remove superuser check from `Token` list by
[@&#8203;gergosimonyi](https://redirect.github.com/gergosimonyi) in
[goauthentik/authentik#18684](https://redirect.github.com/goauthentik/authentik/pull/18684)
- packages/django-dramatiq-postgres: broker: close django connections on
consumer close by [@&#8203;rissson](https://redirect.github.com/rissson)
in
[goauthentik/authentik#18833](https://redirect.github.com/goauthentik/authentik/pull/18833)
- core: bump goauthentik.io/api/v3 from 3.2025120.26 to 3.2026020.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18815](https://redirect.github.com/goauthentik/authentik/pull/18815)
- admin/files: revert add check for /media existence
([#&#8203;18636](https://redirect.github.com/goauthentik/helm/issues/18636))
by [@&#8203;rissson](https://redirect.github.com/rissson) in
[goauthentik/authentik#18829](https://redirect.github.com/goauthentik/authentik/pull/18829)
- website/docs: add jellyseer integration doc by
[@&#8203;gabay](https://redirect.github.com/gabay) in
[goauthentik/authentik#18812](https://redirect.github.com/goauthentik/authentik/pull/18812)
- crypto: Store details parsed from includeDetails in database instead
by [@&#8203;PeshekDotDev](https://redirect.github.com/PeshekDotDev) in
[goauthentik/authentik#18013](https://redirect.github.com/goauthentik/authentik/pull/18013)
- core: skip s3 tests if endpoint isn't available by
[@&#8203;melizeche](https://redirect.github.com/melizeche) in
[goauthentik/authentik#18841](https://redirect.github.com/goauthentik/authentik/pull/18841)
- admin/files: fix get\_objects\_for\_user queryset argument in
FileUsedByView by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#18845](https://redirect.github.com/goauthentik/authentik/pull/18845)
- core: bump goauthentik/fips-debian from `c10cd2c` to `2f19fc1` by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18856](https://redirect.github.com/goauthentik/authentik/pull/18856)
- ci: replace codecov test-results action by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18862](https://redirect.github.com/goauthentik/authentik/pull/18862)
- core: add skip s3\_test\_server\_available to
TestResolveFileUrlS3Backend by
[@&#8203;melizeche](https://redirect.github.com/melizeche) in
[goauthentik/authentik#18858](https://redirect.github.com/goauthentik/authentik/pull/18858)
- rbac: alter migrated direct permission roles by
[@&#8203;gergosimonyi](https://redirect.github.com/gergosimonyi) in
[goauthentik/authentik#18860](https://redirect.github.com/goauthentik/authentik/pull/18860)
- core: bump library/golang from `5d35fb8` to `8e8f9c8` by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18855](https://redirect.github.com/goauthentik/authentik/pull/18855)
- web/admin/rbac: misc object permission fixes by
[@&#8203;gergosimonyi](https://redirect.github.com/gergosimonyi) in
[goauthentik/authentik#18859](https://redirect.github.com/goauthentik/authentik/pull/18859)
- outposts: fix permission errors for related certificates by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18861](https://redirect.github.com/goauthentik/authentik/pull/18861)
- website/docs: adjust RBAC-related details in 2025.12 release notes by
[@&#8203;gergosimonyi](https://redirect.github.com/gergosimonyi) in
[goauthentik/authentik#18863](https://redirect.github.com/goauthentik/authentik/pull/18863)
- website/docs: Add docs for passkey autofill (WebauthN Conditional UI)
by [@&#8203;melizeche](https://redirect.github.com/melizeche) in
[goauthentik/authentik#18805](https://redirect.github.com/goauthentik/authentik/pull/18805)
- website/docs: 2025.10.3 release notes by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18868](https://redirect.github.com/goauthentik/authentik/pull/18868)
- web: add custom message with links for empty data export list by
[@&#8203;atereshkin](https://redirect.github.com/atereshkin) in
[goauthentik/authentik#18830](https://redirect.github.com/goauthentik/authentik/pull/18830)
- web: fix notification counter by
[@&#8203;atereshkin](https://redirect.github.com/atereshkin) in
[goauthentik/authentik#18781](https://redirect.github.com/goauthentik/authentik/pull/18781)
- web: bump vite from 7.2.7 to 7.3.0 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18854](https://redirect.github.com/goauthentik/authentik/pull/18854)
- stages/authenticator\_\*: fix code input field not string by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18875](https://redirect.github.com/goauthentik/authentik/pull/18875)
- web: fix file upload form by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#18808](https://redirect.github.com/goauthentik/authentik/pull/18808)
- web/admin: endpoint: change wording and add helper text by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#18871](https://redirect.github.com/goauthentik/authentik/pull/18871)
- core, web: update translations by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#18807](https://redirect.github.com/goauthentik/authentik/pull/18807)
- website/integrations: bookstack: fix redir url by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#18891](https://redirect.github.com/goauthentik/authentik/pull/18891)
- core: bump astral-sh/uv from 0.9.17 to 0.9.18 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18898](https://redirect.github.com/goauthentik/authentik/pull/18898)
- core: bump goauthentik/fips-debian from `2f19fc1` to `189345a` by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18897](https://redirect.github.com/goauthentik/authentik/pull/18897)
- web: bump knip from 5.73.3 to 5.74.0 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18896](https://redirect.github.com/goauthentik/authentik/pull/18896)
- web: bump [@&#8203;types/node](https://redirect.github.com/types/node)
from 25.0.0 to 25.0.3 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18895](https://redirect.github.com/goauthentik/authentik/pull/18895)
- web: bump the rollup group across 1 directory with 4 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18852](https://redirect.github.com/goauthentik/authentik/pull/18852)
- web: bump the bundler group across 1 directory with 7 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18894](https://redirect.github.com/goauthentik/authentik/pull/18894)
- web: bump
[@&#8203;sentry/browser](https://redirect.github.com/sentry/browser)
from 10.30.0 to 10.31.0 in /web in the sentry group across 1 directory
by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18893](https://redirect.github.com/goauthentik/authentik/pull/18893)
- lifecycle/aws: bump aws-cdk from 2.1034.0 to 2.1100.0 in
/lifecycle/aws by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18850](https://redirect.github.com/goauthentik/authentik/pull/18850)
- web: bump the goauthentik group across 1 directory with 3 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18819](https://redirect.github.com/goauthentik/authentik/pull/18819)
- web: bump the swc group across 1 directory with 11 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18818](https://redirect.github.com/goauthentik/authentik/pull/18818)
- web: bump the eslint group across 1 directory with 5 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18851](https://redirect.github.com/goauthentik/authentik/pull/18851)
- core: bump goauthentik.io/api/v3 from 3.2026020.1 to 3.2026020.3 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18892](https://redirect.github.com/goauthentik/authentik/pull/18892)
- tasks/middleware: close connections on worker status update database
error by [@&#8203;rissson](https://redirect.github.com/rissson) in
[goauthentik/authentik#18881](https://redirect.github.com/goauthentik/authentik/pull/18881)
- website/docs: added list of Int Guide contributors (also edited
frontmatter) by [@&#8203;tanberry](https://redirect.github.com/tanberry)
in
[goauthentik/authentik#18888](https://redirect.github.com/goauthentik/authentik/pull/18888)
- api: fix page\_size with invalid query param by
[@&#8203;rissson](https://redirect.github.com/rissson) in
[goauthentik/authentik#18879](https://redirect.github.com/goauthentik/authentik/pull/18879)
- ci/release-tag: checkout correct branch for make test-docker by
[@&#8203;rissson](https://redirect.github.com/rissson) in
[goauthentik/authentik#18880](https://redirect.github.com/goauthentik/authentik/pull/18880)
- api: fix latest version for public schema by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18902](https://redirect.github.com/goauthentik/authentik/pull/18902)
- website/docs: 2025.12: remove superfluous changes by
[@&#8203;rissson](https://redirect.github.com/rissson) in
[goauthentik/authentik#18910](https://redirect.github.com/goauthentik/authentik/pull/18910)
- web/admin: reword some things on the device view page by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18785](https://redirect.github.com/goauthentik/authentik/pull/18785)
- core/groups: optimize prefetch queries to fetch only required fields
by [@&#8203;joaocfernandes](https://redirect.github.com/joaocfernandes)
in
[goauthentik/authentik#18448](https://redirect.github.com/goauthentik/authentik/pull/18448)
- root: fix docker-compose data mount by
[@&#8203;rissson](https://redirect.github.com/rissson) in
[goauthentik/authentik#18903](https://redirect.github.com/goauthentik/authentik/pull/18903)
- web/admin: add UI copy to RBAC modal by
[@&#8203;tanberry](https://redirect.github.com/tanberry) in
[goauthentik/authentik#18917](https://redirect.github.com/goauthentik/authentik/pull/18917)
- tests/e2e: handle StaleElementReferenceException in
parse\_json\_content by
[@&#8203;melizeche](https://redirect.github.com/melizeche) in
[goauthentik/authentik#18842](https://redirect.github.com/goauthentik/authentik/pull/18842)
- core: bump goauthentik/fips-debian from `189345a` to `10dadf1` by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18927](https://redirect.github.com/goauthentik/authentik/pull/18927)
- web: bump chromedriver from 143.0.1 to 143.0.2 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18926](https://redirect.github.com/goauthentik/authentik/pull/18926)
- web: bump knip from 5.74.0 to 5.75.1 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18924](https://redirect.github.com/goauthentik/authentik/pull/18924)
- core, web: update translations by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#18920](https://redirect.github.com/goauthentik/authentik/pull/18920)
- lifecycle/aws: bump aws-cdk from 2.1100.0 to 2.1100.1 in
/lifecycle/aws by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18922](https://redirect.github.com/goauthentik/authentik/pull/18922)
- web: bump the swc group across 1 directory with 11 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18923](https://redirect.github.com/goauthentik/authentik/pull/18923)
- web: bump the storybook group across 1 directory with 5 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18817](https://redirect.github.com/goauthentik/authentik/pull/18817)
- stages: remove more global state by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18641](https://redirect.github.com/goauthentik/authentik/pull/18641)
- packages/ak-guardian: cast safely by
[@&#8203;gergosimonyi](https://redirect.github.com/gergosimonyi) in
[goauthentik/authentik#18929](https://redirect.github.com/goauthentik/authentik/pull/18929)
- web/flow: Fix spurious double submit on ak-stage-autosubmit by
[@&#8203;dminuoso](https://redirect.github.com/dminuoso) in
[goauthentik/authentik#18727](https://redirect.github.com/goauthentik/authentik/pull/18727)
- website/integrations: Add launch URL for Immich by
[@&#8203;optix2000](https://redirect.github.com/optix2000) in
[goauthentik/authentik#18921](https://redirect.github.com/goauthentik/authentik/pull/18921)
- crypto: fix extra cert data in db migration by
[@&#8203;rissson](https://redirect.github.com/rissson) in
[goauthentik/authentik#18937](https://redirect.github.com/goauthentik/authentik/pull/18937)
- web/elements: progress-bar and table loading header by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18934](https://redirect.github.com/goauthentik/authentik/pull/18934)
- stages/identification: replace sleep with make\_password by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18883](https://redirect.github.com/goauthentik/authentik/pull/18883)
- website/docs: endpoint devices by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#18634](https://redirect.github.com/goauthentik/authentik/pull/18634)
- website/docs: Fix labels, Pre-Release detection by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#18945](https://redirect.github.com/goauthentik/authentik/pull/18945)
- website/docs: release notes: add endpoint device links to 2025.12
notes by [@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#18940](https://redirect.github.com/goauthentik/authentik/pull/18940)
- website/docs: Fix version parsing. by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#18948](https://redirect.github.com/goauthentik/authentik/pull/18948)
- web/admin: fix endpoints user binding by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18935](https://redirect.github.com/goauthentik/authentik/pull/18935)
- flows/executor: fix KeyError when session has no existing plan by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#18951](https://redirect.github.com/goauthentik/authentik/pull/18951)
- root: move docker files to lifecycle/containers and change
docker-compose to compose by
[@&#8203;PeshekDotDev](https://redirect.github.com/PeshekDotDev) in
[goauthentik/authentik#16624](https://redirect.github.com/goauthentik/authentik/pull/16624)
- core: bump goauthentik.io/api/v3 from 3.2026020.3 to 3.2026020.4 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18956](https://redirect.github.com/goauthentik/authentik/pull/18956)
- web: bump chromedriver from 143.0.2 to 143.0.3 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18959](https://redirect.github.com/goauthentik/authentik/pull/18959)
- web: bump the swc group across 1 directory with 11 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18958](https://redirect.github.com/goauthentik/authentik/pull/18958)
- web: bump
[@&#8203;sentry/browser](https://redirect.github.com/sentry/browser)
from 10.31.0 to 10.32.0 in /web in the sentry group across 1 directory
by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18957](https://redirect.github.com/goauthentik/authentik/pull/18957)
- ci: bump actions/attest-build-provenance from 3.0.0 to 3.1.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18960](https://redirect.github.com/goauthentik/authentik/pull/18960)
- website/docs: add note to active directory source doc by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#18787](https://redirect.github.com/goauthentik/authentik/pull/18787)
- web/maintenance: fix missing custom web component imports by
[@&#8203;kensternberg-authentik](https://redirect.github.com/kensternberg-authentik)
in
[goauthentik/authentik#18942](https://redirect.github.com/goauthentik/authentik/pull/18942)
- web/maintenance: no unknown tag names by
[@&#8203;kensternberg-authentik](https://redirect.github.com/kensternberg-authentik)
in
[goauthentik/authentik#18944](https://redirect.github.com/goauthentik/authentik/pull/18944)
- website/integrations: Fix path for Cloudflare Access by
[@&#8203;stijn220](https://redirect.github.com/stijn220) in
[goauthentik/authentik#18979](https://redirect.github.com/goauthentik/authentik/pull/18979)
- blueprints: add InternallyManagedMixin instead of large list by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18983](https://redirect.github.com/goauthentik/authentik/pull/18983)
- web/admin: fix dark theme on map by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18985](https://redirect.github.com/goauthentik/authentik/pull/18985)
- web/admin: Fix haveibeenpwned link in PasswordPolicyForm by
[@&#8203;hskrtich](https://redirect.github.com/hskrtich) in
[goauthentik/authentik#18984](https://redirect.github.com/goauthentik/authentik/pull/18984)
- events: notifications live update by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18980](https://redirect.github.com/goauthentik/authentik/pull/18980)
- web: fix Open button selecting row instead of navigating by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#18992](https://redirect.github.com/goauthentik/authentik/pull/18992)
- blueprints: fix flaky tests by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19002](https://redirect.github.com/goauthentik/authentik/pull/19002)
- ci: bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18999](https://redirect.github.com/goauthentik/authentik/pull/18999)
- providers/oauth2: Automated OpenID Conformance tests by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#14785](https://redirect.github.com/goauthentik/authentik/pull/14785)
- enterprise/reports: improve export list, confirmation by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18981](https://redirect.github.com/goauthentik/authentik/pull/18981)
- enterprise/search: add static autocomplete structure by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19008](https://redirect.github.com/goauthentik/authentik/pull/19008)
- website/docs: improve endpoint devices docs by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#19007](https://redirect.github.com/goauthentik/authentik/pull/19007)
- web: bump the rollup group across 1 directory with 4 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18994](https://redirect.github.com/goauthentik/authentik/pull/18994)
- core: bump openapitools/openapi-generator-cli from v7.16.0 to v7.18.0
in /scripts/api by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19018](https://redirect.github.com/goauthentik/authentik/pull/19018)
- web: bump globby from 16.0.0 to 16.1.0 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#18995](https://redirect.github.com/goauthentik/authentik/pull/18995)
- api: rework schema generation by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18977](https://redirect.github.com/goauthentik/authentik/pull/18977)
- web/admin: prevent file upload attempt when backend not managed by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#18646](https://redirect.github.com/goauthentik/authentik/pull/18646)
- web: bump the eslint group across 1 directory with 3 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19019](https://redirect.github.com/goauthentik/authentik/pull/19019)
- core: bump goauthentik.io/api/v3 from 3.2026020.4 to 3.2026020.5 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19017](https://redirect.github.com/goauthentik/authentik/pull/19017)
- website/docs: Prioritize "Release Candidate" over "Current Release" by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#18975](https://redirect.github.com/goauthentik/authentik/pull/18975)
- web: Locale selector UI fixes by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#18972](https://redirect.github.com/goauthentik/authentik/pull/18972)
- web: Fix Storybook package resolution with `npm link` by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#19016](https://redirect.github.com/goauthentik/authentik/pull/19016)
- core: use chunked\_queryset for expired message deletion by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19028](https://redirect.github.com/goauthentik/authentik/pull/19028)
- web/admin: use consistent icon for inactive user status by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19032](https://redirect.github.com/goauthentik/authentik/pull/19032)
- web: bump lit from 3.3.1 to 3.3.2 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19038](https://redirect.github.com/goauthentik/authentik/pull/19038)
- web: bump
[@&#8203;lit/reactive-element](https://redirect.github.com/lit/reactive-element)
from 2.1.1 to 2.1.2 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19037](https://redirect.github.com/goauthentik/authentik/pull/19037)
- web: bump knip from 5.75.1 to 5.77.0 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19041](https://redirect.github.com/goauthentik/authentik/pull/19041)
- core: bump goauthentik.io/api/v3 from 3.2026020.5 to 3.2026020.6 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19036](https://redirect.github.com/goauthentik/authentik/pull/19036)
- docs/release notes: update 2025.12 release notes by
[@&#8203;melizeche](https://redirect.github.com/melizeche) in
[goauthentik/authentik#19043](https://redirect.github.com/goauthentik/authentik/pull/19043)
- lib/sync: fix sync\_dispatch by
[@&#8203;krejcar25](https://redirect.github.com/krejcar25) in
[goauthentik/authentik#19053](https://redirect.github.com/goauthentik/authentik/pull/19053)
- endpoints/devices: cleanup by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19047](https://redirect.github.com/goauthentik/authentik/pull/19047)
- blueprints: set enrollment token key by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19061](https://redirect.github.com/goauthentik/authentik/pull/19061)
- website/integrations: Add Wallos by
[@&#8203;0skater0](https://redirect.github.com/0skater0) in
[goauthentik/authentik#19013](https://redirect.github.com/goauthentik/authentik/pull/19013)
- website/docs: FreeIPA documentation updates by
[@&#8203;borutmrak](https://redirect.github.com/borutmrak) in
[goauthentik/authentik#15183](https://redirect.github.com/goauthentik/authentik/pull/15183)
- \*: Auto compress images by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#19065](https://redirect.github.com/goauthentik/authentik/pull/19065)
- blueprints: fix deadlock and task context error in MetaApplyBlueprint
by [@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19033](https://redirect.github.com/goauthentik/authentik/pull/19033)
- web: fix file search input not resetting results properly by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19034](https://redirect.github.com/goauthentik/authentik/pull/19034)
- website/integrations: owncloud: fix php by
[@&#8203;ocmateusz](https://redirect.github.com/ocmateusz) in
[goauthentik/authentik#19073](https://redirect.github.com/goauthentik/authentik/pull/19073)
- tests/e2e: add endpoint tests by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19072](https://redirect.github.com/goauthentik/authentik/pull/19072)
- core, web: update translations by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#18991](https://redirect.github.com/goauthentik/authentik/pull/18991)
- web: bump knip from 5.77.0 to 5.77.1 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19049](https://redirect.github.com/goauthentik/authentik/pull/19049)
- web: bump
[@&#8203;lit/localize-tools](https://redirect.github.com/lit/localize-tools)
from 0.8.0 to 0.8.1 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19040](https://redirect.github.com/goauthentik/authentik/pull/19040)
- internal: update TLS Suite by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19076](https://redirect.github.com/goauthentik/authentik/pull/19076)
- web: bump
[@&#8203;formatjs/intl-listformat](https://redirect.github.com/formatjs/intl-listformat)
from 7.7.13 to 8.1.0 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19054](https://redirect.github.com/goauthentik/authentik/pull/19054)
- web/admin: fix button alignment on user view page by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19079](https://redirect.github.com/goauthentik/authentik/pull/19079)
- website/docs: endpoints: mention connector key required for stage to
work by [@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19084](https://redirect.github.com/goauthentik/authentik/pull/19084)
- website/docs: rel notes .12: add wallos by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19063](https://redirect.github.com/goauthentik/authentik/pull/19063)
- website/docs: endpoint devices: update features table by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#19094](https://redirect.github.com/goauthentik/authentik/pull/19094)
- website/docs: endpoint devices: add path to macos setup by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#19093](https://redirect.github.com/goauthentik/authentik/pull/19093)
- web: bump knip from 5.77.1 to 5.78.0 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19090](https://redirect.github.com/goauthentik/authentik/pull/19090)
- web: fix promoted source button hover losing blue color by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19048](https://redirect.github.com/goauthentik/authentik/pull/19048)
- web: Fix stale flow background by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19015](https://redirect.github.com/goauthentik/authentik/pull/19015)
- Update Vaultwarden documentation by removing warning by
[@&#8203;austin-dudzik](https://redirect.github.com/austin-dudzik) in
[goauthentik/authentik#19102](https://redirect.github.com/goauthentik/authentik/pull/19102)
- web/maintenance/no unknown attributes (part 1) by
[@&#8203;kensternberg-authentik](https://redirect.github.com/kensternberg-authentik)
in
[goauthentik/authentik#18970](https://redirect.github.com/goauthentik/authentik/pull/18970)
- website/integrations: Add Pulse by
[@&#8203;0skater0](https://redirect.github.com/0skater0) in
[goauthentik/authentik#19105](https://redirect.github.com/goauthentik/authentik/pull/19105)
- website/integrations: Add Audiobookshelf by
[@&#8203;0skater0](https://redirect.github.com/0skater0) in
[goauthentik/authentik#19104](https://redirect.github.com/goauthentik/authentik/pull/19104)
- website/docs: release notes: Add more integrations by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19109](https://redirect.github.com/goauthentik/authentik/pull/19109)
- web: bump the storybook group across 1 directory with 5 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19111](https://redirect.github.com/goauthentik/authentik/pull/19111)
- core: bump library/nginx from `fb01117` to `ad85427` in /website by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19112](https://redirect.github.com/goauthentik/authentik/pull/19112)
- web: bump the eslint group across 1 directory with 3 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19110](https://redirect.github.com/goauthentik/authentik/pull/19110)
- web: Fix Impersonation, Lit Reactive Controller Contexts by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#19114](https://redirect.github.com/goauthentik/authentik/pull/19114)
- web: Capitalize language display names, code owner fix by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#19119](https://redirect.github.com/goauthentik/authentik/pull/19119)
- core: bump library/nginx from `ad85427` to `ca871a8` in /website by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19126](https://redirect.github.com/goauthentik/authentik/pull/19126)
- web: bump the swc group across 1 directory with 11 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19124](https://redirect.github.com/goauthentik/authentik/pull/19124)
- core: bump github.com/jackc/pgx/v5 from 5.7.6 to 5.8.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19088](https://redirect.github.com/goauthentik/authentik/pull/19088)
- core: bump library/node from `ccfd9da` to `03729a7` in /website by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19125](https://redirect.github.com/goauthentik/authentik/pull/19125)
- core, web: bump qs from 6.14.0 to 6.14.1 in
/packages/docusaurus-config by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19130](https://redirect.github.com/goauthentik/authentik/pull/19130)
- website/integrations: karakeep: don't hardcode wellknown's slug by
[@&#8203;pippo73](https://redirect.github.com/pippo73) in
[goauthentik/authentik#19127](https://redirect.github.com/goauthentik/authentik/pull/19127)
- web: disable user settings fields when changes are not allowed by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19132](https://redirect.github.com/goauthentik/authentik/pull/19132)
- website/docs: endpoint agent release notes by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19042](https://redirect.github.com/goauthentik/authentik/pull/19042)
- website/docs: fix build by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19148](https://redirect.github.com/goauthentik/authentik/pull/19148)
- web: Token Form Fixes by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#19121](https://redirect.github.com/goauthentik/authentik/pull/19121)
- web/user: fix consent delete form missing details by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19147](https://redirect.github.com/goauthentik/authentik/pull/19147)
- web: bump globals from 16.5.0 to 17.0.0 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19154](https://redirect.github.com/goauthentik/authentik/pull/19154)
- core, web: update translations by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#19135](https://redirect.github.com/goauthentik/authentik/pull/19135)
- ci: bump int128/docker-manifest-create-action from 2.10.0 to 2.12.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19138](https://redirect.github.com/goauthentik/authentik/pull/19138)
- website/integrations: vaultwarden: add custom email scope by
[@&#8203;williamkray](https://redirect.github.com/williamkray) in
[goauthentik/authentik#19160](https://redirect.github.com/goauthentik/authentik/pull/19160)
- stages/authenticator\_webauthn: Update FIDO MDS3 & Passkey aaguid
blobs by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#19137](https://redirect.github.com/goauthentik/authentik/pull/19137)
- core: handle deserialization errors from FileField migration by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19067](https://redirect.github.com/goauthentik/authentik/pull/19067)
- web: fix slug auto-updating when editing existing applications by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19169](https://redirect.github.com/goauthentik/authentik/pull/19169)
- web: Fix user library colors, modal z-indexes, table progress bars by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#19152](https://redirect.github.com/goauthentik/authentik/pull/19152)
- web/admin: adjust sync threshold, add tooltip by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19131](https://redirect.github.com/goauthentik/authentik/pull/19131)
- website/docs: remove duplicates in slo docs by
[@&#8203;nmasnadithya](https://redirect.github.com/nmasnadithya) in
[goauthentik/authentik#19170](https://redirect.github.com/goauthentik/authentik/pull/19170)
- lifecycle: fix migration conn\_options for psycopg connection by
[@&#8203;D-Tasker207](https://redirect.github.com/D-Tasker207) in
[goauthentik/authentik#19134](https://redirect.github.com/goauthentik/authentik/pull/19134)
- web: bump knip from 5.78.0 to 5.79.0 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19181](https://redirect.github.com/goauthentik/authentik/pull/19181)
- ci: bump getsentry/action-release from 3.4.0 to 3.5.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19183](https://redirect.github.com/goauthentik/authentik/pull/19183)
- web: bump
[@&#8203;formatjs/intl-listformat](https://redirect.github.com/formatjs/intl-listformat)
from 8.1.0 to 8.1.1 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19182](https://redirect.github.com/goauthentik/authentik/pull/19182)
- core, web: update translations by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#19179](https://redirect.github.com/goauthentik/authentik/pull/19179)
- lib: update error logging by
[@&#8203;PeshekDotDev](https://redirect.github.com/PeshekDotDev) in
[goauthentik/authentik#18628](https://redirect.github.com/goauthentik/authentik/pull/18628)
- website/integrations: make grafana terraform section expand by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19192](https://redirect.github.com/goauthentik/authentik/pull/19192)
- core: add prettier failure on duplicate group names by
[@&#8203;gergosimonyi](https://redirect.github.com/gergosimonyi) in
[goauthentik/authentik#18941](https://redirect.github.com/goauthentik/authentik/pull/18941)
- web/maintenance: no missing element type definitions by
[@&#8203;kensternberg-authentik](https://redirect.github.com/kensternberg-authentik)
in
[goauthentik/authentik#18950](https://redirect.github.com/goauthentik/authentik/pull/18950)
- root: codespell: ignore Python virtual env, group patterns. by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#19180](https://redirect.github.com/goauthentik/authentik/pull/19180)
- web: Merge branch -- Stale notifications, synchronized context
objects, rendering fixes by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#19141](https://redirect.github.com/goauthentik/authentik/pull/19141)
- website/docs: Add docs for roles by
[@&#8203;PeshekDotDev](https://redirect.github.com/PeshekDotDev) in
[goauthentik/authentik#19196](https://redirect.github.com/goauthentik/authentik/pull/19196)
- web: Defer table refresh, visibility checks. by
[@&#8203;GirlBossRush](https://redirect.github.com/GirlBossRush) in
[goauthentik/authentik#19194](https://redirect.github.com/goauthentik/authentik/pull/19194)
- rbac: Add show all to roles tab, add role tab to groups by
[@&#8203;PeshekDotDev](https://redirect.github.com/PeshekDotDev) in
[goauthentik/authentik#19097](https://redirect.github.com/goauthentik/authentik/pull/19097)
- website/docs: rewrite section about users and perms by
[@&#8203;tanberry](https://redirect.github.com/tanberry) in
[goauthentik/authentik#19195](https://redirect.github.com/goauthentik/authentik/pull/19195)
- core: add last\_login filter to users API by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#18993](https://redirect.github.com/goauthentik/authentik/pull/18993)
- web: bump the eslint group across 1 directory with 3 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19205](https://redirect.github.com/goauthentik/authentik/pull/19205)
- admin/files: support %(theme)s variable in media file paths by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19108](https://redirect.github.com/goauthentik/authentik/pull/19108)
- website/integrations: glpi: add step by
[@&#8203;dewi-tik](https://redirect.github.com/dewi-tik) in
[goauthentik/authentik#19208](https://redirect.github.com/goauthentik/authentik/pull/19208)
- web: bump knip from 5.79.0 to 5.80.0 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19207](https://redirect.github.com/goauthentik/authentik/pull/19207)
- core: bump axllent/mailpit from v1.28.0 to v1.28.1 in /tests/e2e by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19204](https://redirect.github.com/goauthentik/authentik/pull/19204)
- lifecycle/aws: bump aws-cdk from 2.1100.1 to 2.1100.2 in
/lifecycle/aws by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19203](https://redirect.github.com/goauthentik/authentik/pull/19203)
- core: bump goauthentik.io/api/v3 from 3.2026020.6 to 3.2026020.7 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19202](https://redirect.github.com/goauthentik/authentik/pull/19202)
- translate: Updates for project authentik and language pt\_BR by
[@&#8203;transifex-integration](https://redirect.github.com/transifex-integration)\[bot]
in
[goauthentik/authentik#19082](https://redirect.github.com/goauthentik/authentik/pull/19082)
- web/maintenance: lint pass to add missing HTMLElementEventMap entries
by
[@&#8203;kensternberg-authentik](https://redirect.github.com/kensternberg-authentik)
in
[goauthentik/authentik#18953](https://redirect.github.com/goauthentik/authentik/pull/18953)
- outpost/proxyv2: reduce max number of postgres connections by
[@&#8203;rissson](https://redirect.github.com/rissson) in
[goauthentik/authentik#19211](https://redirect.github.com/goauthentik/authentik/pull/19211)
- core, web: update translations by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#19200](https://redirect.github.com/goauthentik/authentik/pull/19200)
- website/docs: revisit endpoint docs the nth by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19116](https://redirect.github.com/goauthentik/authentik/pull/19116)
- ci: bump astral-sh/setup-uv from 7.1.6 to 7.2.0 in
/.github/actions/setup by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19221](https://redirect.github.com/goauthentik/authentik/pull/19221)
- endpoints: include license status in agent config by
[@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19227](https://redirect.github.com/goauthentik/authentik/pull/19227)
- web: bump
[@&#8203;formatjs/intl-listformat](https://redirect.github.com/formatjs/intl-listformat)
from 8.1.1 to 8.1.2 in /web by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[goauthentik/authentik#19220](https://redirect.github.com/goauthentik/authentik/pull/19220)
- lifecycle/aws: bump aws-cdk from 2.1100.2 to 2.1100.3 in
/lifecycle/aws by [@

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Only on Sunday and Saturday ( * * * *
0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/fgeck/homelab-k3s).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My40My4yIiwidXBkYXRlZEluVmVyIjoiNDMuNDguMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvaGVsbSIsInR5cGUvbWFqb3IiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>