Skip to content

web: fix Brand CSS not applied to nested Shadow DOM components (cherry-pick #19892 to version-2025.12)#19900

Merged
BeryJu merged 1 commit intoversion-2025.12from
cherry-pick/19892-to-version-2025.12
Feb 1, 2026
Merged

web: fix Brand CSS not applied to nested Shadow DOM components (cherry-pick #19892 to version-2025.12)#19900
BeryJu merged 1 commit intoversion-2025.12from
cherry-pick/19892-to-version-2025.12

Conversation

@authentik-automation
Copy link
Contributor

Cherry-pick of #19892 to version-2025.12 branch.

Original PR: #19892
Original Author: @Mmx233
Cherry-picked commit: 54fad67

@netlify
Copy link

netlify bot commented Feb 1, 2026

Deploy Preview for authentik-integrations ready!

Name Link
🔨 Latest commit 65a95a2
🔍 Latest deploy log https://app.netlify.com/projects/authentik-integrations/deploys/697fbfee2aebc00008103628
😎 Deploy Preview https://deploy-preview-19900--authentik-integrations.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@codecov
Copy link

codecov bot commented Feb 1, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.27%. Comparing base (eaea324) to head (65a95a2).
⚠️ Report is 1 commits behind head on version-2025.12.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@                 Coverage Diff                 @@
##           version-2025.12   #19900      +/-   ##
===================================================
+ Coverage            92.97%   93.27%   +0.29%     
===================================================
  Files                  947      947              
  Lines                52545    52545              
===================================================
+ Hits                 48852    49009     +157     
+ Misses                3693     3536     -157     
Flag Coverage Δ
e2e 44.39% <ø> (+1.09%) ⬆️
integration 23.53% <ø> (+<0.01%) ⬆️
unit 91.57% <ø> (ø)
unit-migrate 91.61% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

* web: fix Brand CSS not applied to nested Shadow DOM components

After PR #17444, Brand CSS was only applied when ThemeChangeEvent fired.
Components created after the initial event never received the custom styles.

This fix immediately applies Brand CSS when a style root is set, ensuring
all nested Shadow DOM components (like flow stages) receive brand styling
regardless of when they are created.

* Update web/src/elements/Base.ts

Signed-off-by: Teffen Ellis <592134+GirlBossRush@users.noreply.github.com>

* Clarify.

---------

Signed-off-by: Teffen Ellis <592134+GirlBossRush@users.noreply.github.com>
Co-authored-by: Teffen Ellis <592134+GirlBossRush@users.noreply.github.com>
@GirlBossRush GirlBossRush force-pushed the cherry-pick/19892-to-version-2025.12 branch from 08598a2 to 65a95a2 Compare February 1, 2026 21:04
@GirlBossRush GirlBossRush added this to the Release 2025.12.2 milestone Feb 1, 2026
@github-actions
Copy link
Contributor

github-actions bot commented Feb 1, 2026

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-65a95a2591fe70092b5350335f2ff2ed93355d47
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-65a95a2591fe70092b5350335f2ff2ed93355d47

Afterwards, run the upgrade commands from the latest release notes.

@BeryJu BeryJu merged commit cbcd619 into version-2025.12 Feb 1, 2026
128 of 130 checks passed
@BeryJu BeryJu deleted the cherry-pick/19892-to-version-2025.12 branch February 1, 2026 22:43
enchantednatures pushed a commit to enchantednatures/HomeCluster that referenced this pull request Feb 9, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[authentik](https://registry.terraform.io/providers/goauthentik/authentik)
([source](https://redirect.github.com/goauthentik/terraform-provider-authentik))
| required_provider | patch | `2025.12.0` → `2025.12.1` |
| [authentik](https://goauthentik.io)
([source](https://redirect.github.com/goauthentik/helm)) | | patch |
`2025.12.2` → `2025.12.3` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>goauthentik/terraform-provider-authentik (authentik)</summary>

###
[`v2025.12.1`](https://redirect.github.com/goauthentik/terraform-provider-authentik/releases/tag/v2025.12.1)

[Compare
Source](https://redirect.github.com/goauthentik/terraform-provider-authentik/compare/v2025.12.0...v2025.12.1)

##### Changelog

-
[`a19acb4`](https://redirect.github.com/goauthentik/terraform-provider-authentik/commit/a19acb417fb54a542a6476bda37775684ae8574a):
fix int conversion for outpost provider attachment
([#&#8203;832](https://redirect.github.com/goauthentik/terraform-provider-authentik/issues/832))
([@&#8203;BeryJu](https://redirect.github.com/BeryJu))
-
[`a923cda`](https://redirect.github.com/goauthentik/terraform-provider-authentik/commit/a923cda4bf2f0ec295be296dcbbebe8f7ada11d1):
fix: Support path-based Authentik deployments in URL configuration
([#&#8203;829](https://redirect.github.com/goauthentik/terraform-provider-authentik/issues/829))
([@&#8203;StefanMarkmann](https://redirect.github.com/StefanMarkmann))
-
[`8edeec9`](https://redirect.github.com/goauthentik/terraform-provider-authentik/commit/8edeec9805f126d1deb1ad5aa1a50740c5aaadfd):
Bump github.com/getsentry/sentry-go from 0.40.0 to 0.41.0
([#&#8203;834](https://redirect.github.com/goauthentik/terraform-provider-authentik/issues/834))
([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot])
-
[`e10b039`](https://redirect.github.com/goauthentik/terraform-provider-authentik/commit/e10b039884fb2fbe8ff34a6557dc38d4e714ae96):
Bump actions/checkout from 6.0.1 to 6.0.2
([#&#8203;836](https://redirect.github.com/goauthentik/terraform-provider-authentik/issues/836))
([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot])
-
[`aa73b84`](https://redirect.github.com/goauthentik/terraform-provider-authentik/commit/aa73b84a5653eeb68633f9334cf7836d9112bbbc):
Bump github.com/getsentry/sentry-go from 0.41.0 to 0.42.0
([#&#8203;842](https://redirect.github.com/goauthentik/terraform-provider-authentik/issues/842))
([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot])
-
[`4553f1d`](https://redirect.github.com/goauthentik/terraform-provider-authentik/commit/4553f1dba852ed64819277f3426aaf1cf449c25e):
Bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.38.1 to 2.38.2
([#&#8203;844](https://redirect.github.com/goauthentik/terraform-provider-authentik/issues/844))
([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot])
-
[`749d807`](https://redirect.github.com/goauthentik/terraform-provider-authentik/commit/749d807758f8d4f5a0dd2f5b4a52ad54827ac28b):
fix: paginate RbacPermissionsList to find all role permissions
([#&#8203;841](https://redirect.github.com/goauthentik/terraform-provider-authentik/issues/841))
([@&#8203;dominic-r](https://redirect.github.com/dominic-r))

</details>

<details>
<summary>goauthentik/helm (authentik)</summary>

###
[`v2025.12.3`](https://redirect.github.com/goauthentik/helm/releases/tag/authentik-2025.12.3)

[Compare
Source](https://redirect.github.com/goauthentik/helm/compare/authentik-2025.12.2...authentik-2025.12.3)

authentik is an open-source Identity Provider focused on flexibility and
versatility

#### What's Changed

- charts/authentik: bump to 2025.12.3 by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in [#&#8203;444](https://redirect.github.com/goauthentik/helm/pull/444)
- 2025.12: Revert bulk revoke added by accident in release branch by
[@&#8203;dominic-r](https://redirect.github.com/dominic-r) in
[goauthentik/authentik#19870](https://redirect.github.com/goauthentik/authentik/pull/19870)
- web/admin: fix toggle-group for bindings now showing up (cherry-pick
[#&#8203;19820](https://redirect.github.com/goauthentik/helm/issues/19820)
to version-2025.12) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#19895](https://redirect.github.com/goauthentik/authentik/pull/19895)
- web: fix Brand CSS not applied to nested Shadow DOM components
(cherry-pick
[#&#8203;19892](https://redirect.github.com/goauthentik/helm/issues/19892)
to version-2025.12) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#19900](https://redirect.github.com/goauthentik/authentik/pull/19900)
- ci: always generate API clients
([#&#8203;19906](https://redirect.github.com/goauthentik/helm/issues/19906))
by [@&#8203;BeryJu](https://redirect.github.com/BeryJu) in
[goauthentik/authentik#19932](https://redirect.github.com/goauthentik/authentik/pull/19932)
- lifecycle/ak: make sure /data has the correct permissions (cherry-pick
[#&#8203;19935](https://redirect.github.com/goauthentik/helm/issues/19935)
to version-2025.12) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#19940](https://redirect.github.com/goauthentik/authentik/pull/19940)
- lifecycle/aws: add /data volume (cherry-pick
[#&#8203;19936](https://redirect.github.com/goauthentik/helm/issues/19936)
to version-2025.12) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#19938](https://redirect.github.com/goauthentik/authentik/pull/19938)
- core: fix non-expiring service accounts and app passwords (cherry-pick
[#&#8203;19913](https://redirect.github.com/goauthentik/helm/issues/19913)
to version-2025.12) by
[@&#8203;authentik-automation](https://redirect.github.com/authentik-automation)\[bot]
in
[goauthentik/authentik#19941](https://redirect.github.com/goauthentik/authentik/pull/19941)

**Full Changelog**:
<goauthentik/authentik@version/2025.12.2...version/2025.12.3>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "every weekend" in timezone
America/New_York, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/enchantednatures/HomeCluster).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45NS4yIiwidXBkYXRlZEluVmVyIjoiNDIuOTUuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvaGVsbSIsInR5cGUvcGF0Y2giXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants