web/flows: fix source icons being always inverted (cherry-pick #20419 to version-2026.2) by authentik-automation[bot] · Pull Request #20607 · goauthentik/authentik

authentik-automation · 2026-02-26T17:41:36Z

Cherry-pick of #20419 to version-2026.2 branch.

Original PR: #20419
Original Author: @BeryJu
Cherry-picked commit: 7c9bc2a

* web/flows: fix inverted source icons Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix actually Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Jens Langhammer <jens@goauthentik.io>

netlify · 2026-02-26T17:43:03Z

✅ Deploy Preview for authentik-integrations ready!

Name	Link
🔨 Latest commit	`4017ee3`
🔍 Latest deploy log	https://app.netlify.com/projects/authentik-integrations/deploys/69a085d481dd85000862e658
😎 Deploy Preview	https://deploy-preview-20607--authentik-integrations.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

codecov · 2026-02-26T17:55:41Z

❌ 1 Tests Failed:

Tests completed	Failed	Passed	Skipped
3026	1	3025	4

View the top 1 failed test(s) by shortest run time

tests.e2e.test_source_scim.TestSourceSCIM::test_scim_conformance

Stack Traces | 590s run time

self = <unittest.case._Outcome object at 0x7f682896cd70>
test_case = <tests.e2e.test_source_scim.TestSourceSCIM testMethod=test_scim_conformance>
subTest = False

    @contextlib.contextmanager
    def testPartExecutor(self, test_case, subTest=False):
        old_success = self.success
        self.success = True
        try:
>           yield

.../hostedtoolcache/Python/3.14.3........./x64/lib/python3.14/unittest/case.py:58: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

self = <tests.e2e.test_source_scim.TestSourceSCIM testMethod=test_scim_conformance>
result = <TestCaseFunction test_scim_conformance>

    def run(self, result=None):
        if result is None:
            result = self.defaultTestResult()
            startTestRun = getattr(result, 'startTestRun', None)
            stopTestRun = getattr(result, 'stopTestRun', None)
            if startTestRun is not None:
                startTestRun()
        else:
            stopTestRun = None
    
        result.startTest(self)
        try:
            testMethod = getattr(self, self._testMethodName)
            if (getattr(self.__class__, "__unittest_skip__", False) or
                getattr(testMethod, "__unittest_skip__", False)):
                # If the class or method was skipped.
                skip_why = (getattr(self.__class__, '__unittest_skip_why__', '')
                            or getattr(testMethod, '__unittest_skip_why__', ''))
                _addSkip(result, self, skip_why)
                return result
    
            expecting_failure = (
                getattr(self, "__unittest_expecting_failure__", False) or
                getattr(testMethod, "__unittest_expecting_failure__", False)
            )
            outcome = _Outcome(result)
            start_time = time.perf_counter()
            try:
                self._outcome = outcome
    
                with outcome.testPartExecutor(self):
                    self._callSetUp()
                if outcome.success:
                    outcome.expecting_failure = expecting_failure
                    with outcome.testPartExecutor(self):
                        self._callTestMethod(testMethod)
                    outcome.expecting_failure = False
                    with outcome.testPartExecutor(self):
>                       self._callTearDown()

.../hostedtoolcache/Python/3.14.3........./x64/lib/python3.14/unittest/case.py:672: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

self = <tests.e2e.test_source_scim.TestSourceSCIM testMethod=test_scim_conformance>

    def _callTearDown(self):
>       self.tearDown()

.../hostedtoolcache/Python/3.14.3........./x64/lib/python3.14/unittest/case.py:629: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

self = <tests.e2e.test_source_scim.TestSourceSCIM testMethod=test_scim_conformance>

    def tearDown(self):
        if IS_CI:
            print("::endgroup::", file=stderr)
        super().tearDown()
        if IS_CI:
            print("::group::Browser logs")
        # Very verbose way to get browser logs
        # https://github..../selenium/pull/15641
        # for some reason this removes the `get_log` API from Remote Webdriver
        # and only keeps it on the local Chrome web driver, even when using
        # a remote chrome driver...? (nvm the fact this was released as a minor version)
>       for line in self.driver.execute(Command.GET_LOG, {"type": "browser"})["value"]:
                    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

tests/e2e/utils.py:158: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

self = <selenium.webdriver.remote.webdriver.WebDriver (session="2543525fc0ee776fd4b4615060cb7242")>
driver_command = 'getLog', params = {'type': 'browser'}

    def execute(self, driver_command: str, params: dict[str, Any] | None = None) -> dict[str, Any]:
        """Sends a command to be executed by a command.CommandExecutor.
    
        Args:
            driver_command: The name of the command to execute as a string.
            params: A dictionary of named parameters to send with the command.
    
        Returns:
            The command's JSON response loaded into a dictionary object.
        """
        params = self._wrap_value(params)
    
        if self.session_id:
            if not params:
                params = {"sessionId": self.session_id}
            elif "sessionId" not in params:
                params["sessionId"] = self.session_id
    
        response = cast(RemoteConnection, self.command_executor).execute(driver_command, params)
    
        if response:
>           self.error_handler.check_response(response)

.venv/lib/python3.14.../webdriver/remote/webdriver.py:432: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

self = <selenium.webdriver.remote.errorhandler.ErrorHandler object at 0x7f682896c1a0>
response = {'status': 404, 'value': '{\n  "value": {\n    "message": "Unable to find session with ID: 2543525fc0ee776fd4b4615060c...a:642)\\n\\tat java.base\\u002fjava.lang.Thread.run(Thread.java:1583)\\n",\n    "error": "invalid session id"\n  }\n}'}

    def check_response(self, response: dict[str, Any]) -> None:
        """Check that a JSON response from the WebDriver does not have an error.
    
        Args:
            response: The JSON response from the WebDriver server as a dictionary
                object.
    
        Raises:
            WebDriverException: If the response contains an error message.
        """
        status = response.get("status", None)
        if not status or status == ErrorCode.SUCCESS:
            return
        value = None
        message = response.get("message", "")
        screen: str = response.get("screen", "")
        stacktrace = None
        if isinstance(status, int):
            value_json = response.get("value", None)
            if value_json and isinstance(value_json, str):
                try:
                    value = json.loads(value_json)
                    if isinstance(value, dict):
                        if len(value) == 1:
                            value = value["value"]
                        status = value.get("error", None)
                        if not status:
                            status = value.get("status", ErrorCode.UNKNOWN_ERROR)
                            message = value.get("value") or value.get("message")
                            if not isinstance(message, str):
                                value = message
                                message = message.get("message") if isinstance(message, dict) else None
                        else:
                            message = value.get("message", None)
                except ValueError:
                    pass
    
        exception_class: type[WebDriverException]
        e = ErrorCode()
        error_codes = [item for item in dir(e) if not item.startswith("__")]
        for error_code in error_codes:
            error_info = getattr(ErrorCode, error_code)
            if isinstance(error_info, list) and status in error_info:
                exception_class = getattr(ExceptionMapping, error_code, WebDriverException)
                break
        else:
            exception_class = WebDriverException
    
        if not value:
            value = response["value"]
        if isinstance(value, str):
            raise exception_class(value)
        if message == "" and "message" in value:
            message = value["message"]
    
        screen = None  # type: ignore[assignment]
        if "screen" in value:
            screen = value["screen"]
    
        stacktrace = None
        st_value = value.get("stackTrace") or value.get("stacktrace")
        if st_value:
            if isinstance(st_value, str):
                stacktrace = st_value.split("\n")
            else:
                stacktrace = []
                try:
                    for frame in st_value:
                        line = frame.get("lineNumber", "")
                        file = frame.get("fileName", "<anonymous>")
                        if line:
                            file = f"{file}:{line}"
                        meth = frame.get("methodName", "<anonymous>")
                        if "className" in frame:
                            meth = f"{frame['className']}.{meth}"
                        msg = "    at %s (%s)"
                        msg = msg % (meth, file)
                        stacktrace.append(msg)
                except TypeError:
                    pass
        if exception_class == UnexpectedAlertPresentException:
            alert_text = None
            if "data" in value:
                alert_text = value["data"].get("text")
            elif "alert" in value:
                alert_text = value["alert"].get("text")
            raise exception_class(message, screen, stacktrace, alert_text)  # type: ignore[call-arg]  # mypy is not smart enough here
>       raise exception_class(message, screen, stacktrace)
E       selenium.common.exceptions.InvalidSessionIdException: Message: Unable to find session with ID: 2543525fc0ee776fd4b4615060cb7242. Session was removed at 2026-02-26T17:54:07.947765492Z (130 seconds ago), reason: session timed out due to inactivity, node: http://10.1.0.143:4444
E       Build info: version: '4.40.0', revision: 'b3333f1'
E       System info: os.name: 'Linux', os.arch: 'amd64', os.version: '6.14.0-1017-azure', java.version: '21.0.10'
E       Driver info: driver.version: unknown; For documentation on this error, please visit: https://www.selenium..../webdriver/troubleshooting/errors#invalidsessionidexception
E       Stacktrace:
E       org.openqa.selenium.NoSuchSessionException: Unable to find session with ID: 2543525fc0ee776fd4b4615060cb7242. Session was removed at 2026-02-26T17:54:07.947765492Z (130 seconds ago), reason: session timed out due to inactivity, node: http://10.1.0.143:4444
E       Build info: version: '4.40.0', revision: 'b3333f1'
E       System info: os.name: 'Linux', os.arch: 'amd64', os.version: '6.14.0-1017-azure', java.version: '21.0.10'
E       Driver info: driver.version: unknown
E       	at org.openqa.selenium.grid.sessionmap.local.LocalSessionMap.get(LocalSessionMap.java:138)
E       	at org.openqa.selenium.grid.sessionmap.SessionMap.getUri(SessionMap.java:84)
E       	at org.openqa.selenium.grid.router.HandleSession.lambda$loadSessionId$5(HandleSession.java:231)
E       	at org.openqa.selenium.grid.router.HandleSession.execute(HandleSession.java:188)
E       	at org.openqa.selenium.remote.http.Route$PredicatedRoute.handle(Route.java:398)
E       	at org.openqa.selenium.remote.http.Route.execute(Route.java:69)
E       	at org.openqa.selenium.remote.http.Route$CombinedRoute.handle(Route.java:361)
E       	at org.openqa.selenium.remote.http.Route.execute(Route.java:69)
E       	at org.openqa.selenium.grid.router.Router.execute(Router.java:89)
E       	at org.openqa.selenium.grid.web.EnsureSpecCompliantResponseHeaders.lambda$apply$0(EnsureSpecCompliantResponseHeaders.java:34)
E       	at org.openqa.selenium.remote.http.Filter$1.execute(Filter.java:63)
E       	at org.openqa.selenium.remote.http.Route$CombinedRoute.handle(Route.java:361)
E       	at org.openqa.selenium.remote.http.Route.execute(Route.java:69)
E       	at org.openqa.selenium.remote.http.Route$NestedRoute.handle(Route.java:271)
E       	at org.openqa.selenium.remote.http.Route.execute(Route.java:69)
E       	at org.openqa.selenium.remote.http.Route$CombinedRoute.handle(Route.java:361)
E       	at org.openqa.selenium.remote.http.Route.execute(Route.java:69)
E       	at org.openqa.selenium.remote.AddWebDriverSpecHeaders.lambda$apply$0(AddWebDriverSpecHeaders.java:35)
E       	at org.openqa.selenium.remote.ErrorFilter.lambda$apply$0(ErrorFilter.java:44)
E       	at org.openqa.selenium.remote.http.Filter$1.execute(Filter.java:63)
E       	at org.openqa.selenium.remote.ErrorFilter.lambda$apply$0(ErrorFilter.java:44)
E       	at org.openqa.selenium.remote.http.Filter$1.execute(Filter.java:63)
E       	at org.openqa.selenium.netty.server.SeleniumHandler.lambda$channelRead0$0(SeleniumHandler.java:49)
E       	at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:572)
E       	at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317)
E       	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
E       	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
E       	at java.base/java.lang.Thread.run(Thread.java:1583)

.venv/lib/python3.14.../webdriver/remote/errorhandler.py:232: InvalidSessionIdException

To view more test analytics, go to the Test Analytics Dashboard
_{📋 Got 3 mins? Take this short survey to help us improve Test Analytics.}

> ℹ️ **Note** > > This PR body was truncated due to platform limits. This PR contains the following updates: | Package | Update | Change | |---|---|---| | [authentik](https://goauthentik.io) ([source](https://redirect.github.com/goauthentik/helm)) | major | `^2025.0.0` → `^2026.0.0` | --- ### Release Notes <details> <summary>goauthentik/helm (authentik)</summary> ### [`v2026.2.1`](https://redirect.github.com/goauthentik/helm/releases/tag/authentik-2026.2.1) [Compare Source](https://redirect.github.com/goauthentik/helm/compare/authentik-2026.2.0...authentik-2026.2.1) authentik is an open-source Identity Provider focused on flexibility and versatility #### What's Changed - charts/authentik: Add weight to http route service by [@flipper](https://redirect.github.com/flipper) in [#458](https://redirect.github.com/goauthentik/helm/pull/458) - chore(deps): update docker.io/library/postgres docker tag to v17.9 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#452](https://redirect.github.com/goauthentik/helm/pull/452) - chore(deps): update prometheuscommunity/postgres-exporter docker tag to v0.19.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#445](https://redirect.github.com/goauthentik/helm/pull/445) - charts/authentik: bump to 2026.2.1 by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [#459](https://redirect.github.com/goauthentik/helm/pull/459) #### New Contributors - [@flipper](https://redirect.github.com/flipper) made their first contribution in [#458](https://redirect.github.com/goauthentik/helm/pull/458) **Full Changelog**: <https://github.com/goauthentik/helm/compare/authentik-2026.2.0...authentik-2026.2.1> *** ### Full release notes for authentik See <https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202621> #### What's Changed - website/docs: update supported versions (cherry-pick [#20534](https://redirect.github.com/goauthentik/helm/issues/20534) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20535](https://redirect.github.com/goauthentik/authentik/pull/20535) - website/docs: fix upgrade link in `2026.2` release notes (cherry-pick [#20539](https://redirect.github.com/goauthentik/helm/issues/20539) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20542](https://redirect.github.com/goauthentik/authentik/pull/20542) - website/docs: remove bad logs redirect (cherry-pick [#20522](https://redirect.github.com/goauthentik/helm/issues/20522) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20548](https://redirect.github.com/goauthentik/authentik/pull/20548) - website/docs: revamp enterprise section (cherry-pick [#20379](https://redirect.github.com/goauthentik/helm/issues/20379) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20546](https://redirect.github.com/goauthentik/authentik/pull/20546) - docs: fix typos and wording in docs and integrations (cherry-pick [#20550](https://redirect.github.com/goauthentik/helm/issues/20550) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20563](https://redirect.github.com/goauthentik/authentik/pull/20563) - ci: add `reason` change to versions repo bump (cherry-pick [#20562](https://redirect.github.com/goauthentik/helm/issues/20562) to version-2026.2) by [@gergosimonyi](https://redirect.github.com/gergosimonyi) in [goauthentik/authentik#20569](https://redirect.github.com/goauthentik/authentik/pull/20569) - internal: make http timeouts configurable (cherry-pick [#20472](https://redirect.github.com/goauthentik/helm/issues/20472) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20567](https://redirect.github.com/goauthentik/authentik/pull/20567) - packages/django-dramatiq-postgres: use fork (cherry-pick [#20606](https://redirect.github.com/goauthentik/helm/issues/20606) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20608](https://redirect.github.com/goauthentik/authentik/pull/20608) - web/flows: fix source icons being always inverted (cherry-pick [#20419](https://redirect.github.com/goauthentik/helm/issues/20419) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20607](https://redirect.github.com/goauthentik/authentik/pull/20607) - crypto: fix kid legacy signal (cherry-pick [#20627](https://redirect.github.com/goauthentik/helm/issues/20627) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20628](https://redirect.github.com/goauthentik/authentik/pull/20628) - sources/ldap: add connection logging & downgrade message (cherry-pick [#20519](https://redirect.github.com/goauthentik/helm/issues/20519) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20636](https://redirect.github.com/goauthentik/authentik/pull/20636) - packages/django-dramatiq-postgres: fix worker startup on macos (cherry-pick [#20637](https://redirect.github.com/goauthentik/helm/issues/20637) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20641](https://redirect.github.com/goauthentik/authentik/pull/20641) - enterprise/wsfed: Fix metadata export and signing logic (cherry-pick [#20643](https://redirect.github.com/goauthentik/helm/issues/20643) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20649](https://redirect.github.com/goauthentik/authentik/pull/20649) - website/docs: entra id provider: add custom email domain info (cherry-pick [#20444](https://redirect.github.com/goauthentik/helm/issues/20444) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20660](https://redirect.github.com/goauthentik/authentik/pull/20660) - website/docs: kerberos: add note about caching (cherry-pick [#20663](https://redirect.github.com/goauthentik/helm/issues/20663) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20664](https://redirect.github.com/goauthentik/authentik/pull/20664) - core: fix get\_provider returning base Provider instead of subclass (cherry-pick [#19064](https://redirect.github.com/goauthentik/helm/issues/19064) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20670](https://redirect.github.com/goauthentik/authentik/pull/20670) - packages/django-channels-postgres: eagerly delete messages (cherry-pick [#20687](https://redirect.github.com/goauthentik/helm/issues/20687) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20688](https://redirect.github.com/goauthentik/authentik/pull/20688) - outpost/proxyv2: prevent panic in handleSignOut (cherry-pick [#20097](https://redirect.github.com/goauthentik/helm/issues/20097) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20689](https://redirect.github.com/goauthentik/authentik/pull/20689) - website/docs: add 2025 pentest (cherry-pick [#20626](https://redirect.github.com/goauthentik/helm/issues/20626) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20691](https://redirect.github.com/goauthentik/authentik/pull/20691) - web: fix identification stage styling in compatibility mode (cherry-pick [#20684](https://redirect.github.com/goauthentik/helm/issues/20684) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20694](https://redirect.github.com/goauthentik/authentik/pull/20694) - providers/proxy: move search path to query instead of runtime parameter (cherry-pick [#20662](https://redirect.github.com/goauthentik/helm/issues/20662) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20693](https://redirect.github.com/goauthentik/authentik/pull/20693) - website/docs: add release notes for `2026.2.1` (cherry-pick [#20659](https://redirect.github.com/goauthentik/helm/issues/20659) to version-2026.2) by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#20695](https://redirect.github.com/goauthentik/authentik/pull/20695) **Full Changelog**: <https://github.com/goauthentik/authentik/compare/version/2026.2.0...version/2026.2.1> ### [`v2026.2.0`](https://redirect.github.com/goauthentik/helm/releases/tag/authentik-2026.2.0) [Compare Source](https://redirect.github.com/goauthentik/helm/compare/authentik-2025.12.4...authentik-2026.2.0) authentik is an open-source Identity Provider focused on flexibility and versatility #### What's Changed - charts/authentik: add fields auto-added by Kubernetes to httproute by [@cfi2017](https://redirect.github.com/cfi2017) in [#453](https://redirect.github.com/goauthentik/helm/pull/453) - chore(deps): update helm/kind-action action to v1.14.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#454](https://redirect.github.com/goauthentik/helm/pull/454) - charts/authentik: add note how to set version by [@BeryJu](https://redirect.github.com/BeryJu) in [#456](https://redirect.github.com/goauthentik/helm/pull/456) - charts/authentik: bump to 2026.2.0 by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [#457](https://redirect.github.com/goauthentik/helm/pull/457) #### New Contributors - [@cfi2017](https://redirect.github.com/cfi2017) made their first contribution in [#453](https://redirect.github.com/goauthentik/helm/pull/453) **Full Changelog**: <https://github.com/goauthentik/helm/compare/authentik-2025.12.4...authentik-2026.2.0> *** ### Full release notes for authentik See <https://docs.goauthentik.io/docs/releases/2026.2> #### What's Changed - root: bump version to 2026.2.0-rc1 by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#18794](https://redirect.github.com/goauthentik/authentik/pull/18794) - tests/e2e: retry detached shadow roots by [@melizeche](https://redirect.github.com/melizeche) in [goauthentik/authentik#18796](https://redirect.github.com/goauthentik/authentik/pull/18796) - website/release notes: Update v2025.12 release notes by [@melizeche](https://redirect.github.com/melizeche) in [goauthentik/authentik#18797](https://redirect.github.com/goauthentik/authentik/pull/18797) - web/admin: fix read-only provider selection for application form by [@dominic-r](https://redirect.github.com/dominic-r) in [goauthentik/authentik#18768](https://redirect.github.com/goauthentik/authentik/pull/18768) - web: bump the react group across 1 directory with 2 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18775](https://redirect.github.com/goauthentik/authentik/pull/18775) - web: bump chromedriver from 143.0.0 to 143.0.1 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18776](https://redirect.github.com/goauthentik/authentik/pull/18776) - web: bump the storybook group across 1 directory with 5 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18774](https://redirect.github.com/goauthentik/authentik/pull/18774) - internal: don't warn on empty outpost for embedded by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#18786](https://redirect.github.com/goauthentik/authentik/pull/18786) - lifecycle/aws: bump aws-cdk from 2.1033.0 to 2.1034.0 in /lifecycle/aws by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18771](https://redirect.github.com/goauthentik/authentik/pull/18771) - core, web: update translations by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#18804](https://redirect.github.com/goauthentik/authentik/pull/18804) - root: Add macOS support for sed in Makefile by [@melizeche](https://redirect.github.com/melizeche) in [goauthentik/authentik#18795](https://redirect.github.com/goauthentik/authentik/pull/18795) - ci: bump astral-sh/setup-uv from 7.1.5 to 7.1.6 in /.github/actions/setup by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18826](https://redirect.github.com/goauthentik/authentik/pull/18826) - ci: bump actions/upload-artifact from 5.0.0 to 6.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18824](https://redirect.github.com/goauthentik/authentik/pull/18824) - core: bump goauthentik/fips-debian from `07f41ce` to `c10cd2c` by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18822](https://redirect.github.com/goauthentik/authentik/pull/18822) - ci: bump actions/download-artifact from 6.0.0 to 7.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18825](https://redirect.github.com/goauthentik/authentik/pull/18825) - ci: bump actions/cache from 5.0.0 to 5.0.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18823](https://redirect.github.com/goauthentik/authentik/pull/18823) - core: list applications fix by [@ryanpesek](https://redirect.github.com/ryanpesek) in [goauthentik/authentik#18798](https://redirect.github.com/goauthentik/authentik/pull/18798) - website/docs: add icon info to style guide by [@dewi-tik](https://redirect.github.com/dewi-tik) in [goauthentik/authentik#18832](https://redirect.github.com/goauthentik/authentik/pull/18832) - core: remove superuser check from `Token` list by [@gergosimonyi](https://redirect.github.com/gergosimonyi) in [goauthentik/authentik#18684](https://redirect.github.com/goauthentik/authentik/pull/18684) - packages/django-dramatiq-postgres: broker: close django connections on consumer close by [@rissson](https://redirect.github.com/rissson) in [goauthentik/authentik#18833](https://redirect.github.com/goauthentik/authentik/pull/18833) - core: bump goauthentik.io/api/v3 from 3.2025120.26 to 3.2026020.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18815](https://redirect.github.com/goauthentik/authentik/pull/18815) - admin/files: revert add check for /media existence ([#18636](https://redirect.github.com/goauthentik/helm/issues/18636)) by [@rissson](https://redirect.github.com/rissson) in [goauthentik/authentik#18829](https://redirect.github.com/goauthentik/authentik/pull/18829) - website/docs: add jellyseer integration doc by [@gabay](https://redirect.github.com/gabay) in [goauthentik/authentik#18812](https://redirect.github.com/goauthentik/authentik/pull/18812) - crypto: Store details parsed from includeDetails in database instead by [@PeshekDotDev](https://redirect.github.com/PeshekDotDev) in [goauthentik/authentik#18013](https://redirect.github.com/goauthentik/authentik/pull/18013) - core: skip s3 tests if endpoint isn't available by [@melizeche](https://redirect.github.com/melizeche) in [goauthentik/authentik#18841](https://redirect.github.com/goauthentik/authentik/pull/18841) - admin/files: fix get\_objects\_for\_user queryset argument in FileUsedByView by [@dominic-r](https://redirect.github.com/dominic-r) in [goauthentik/authentik#18845](https://redirect.github.com/goauthentik/authentik/pull/18845) - core: bump goauthentik/fips-debian from `c10cd2c` to `2f19fc1` by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18856](https://redirect.github.com/goauthentik/authentik/pull/18856) - ci: replace codecov test-results action by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#18862](https://redirect.github.com/goauthentik/authentik/pull/18862) - core: add skip s3\_test\_server\_available to TestResolveFileUrlS3Backend by [@melizeche](https://redirect.github.com/melizeche) in [goauthentik/authentik#18858](https://redirect.github.com/goauthentik/authentik/pull/18858) - rbac: alter migrated direct permission roles by [@gergosimonyi](https://redirect.github.com/gergosimonyi) in [goauthentik/authentik#18860](https://redirect.github.com/goauthentik/authentik/pull/18860) - core: bump library/golang from `5d35fb8` to `8e8f9c8` by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18855](https://redirect.github.com/goauthentik/authentik/pull/18855) - web/admin/rbac: misc object permission fixes by [@gergosimonyi](https://redirect.github.com/gergosimonyi) in [goauthentik/authentik#18859](https://redirect.github.com/goauthentik/authentik/pull/18859) - outposts: fix permission errors for related certificates by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#18861](https://redirect.github.com/goauthentik/authentik/pull/18861) - website/docs: adjust RBAC-related details in 2025.12 release notes by [@gergosimonyi](https://redirect.github.com/gergosimonyi) in [goauthentik/authentik#18863](https://redirect.github.com/goauthentik/authentik/pull/18863) - website/docs: Add docs for passkey autofill (WebauthN Conditional UI) by [@melizeche](https://redirect.github.com/melizeche) in [goauthentik/authentik#18805](https://redirect.github.com/goauthentik/authentik/pull/18805) - website/docs: 2025.10.3 release notes by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#18868](https://redirect.github.com/goauthentik/authentik/pull/18868) - web: add custom message with links for empty data export list by [@atereshkin](https://redirect.github.com/atereshkin) in [goauthentik/authentik#18830](https://redirect.github.com/goauthentik/authentik/pull/18830) - web: fix notification counter by [@atereshkin](https://redirect.github.com/atereshkin) in [goauthentik/authentik#18781](https://redirect.github.com/goauthentik/authentik/pull/18781) - web: bump vite from 7.2.7 to 7.3.0 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18854](https://redirect.github.com/goauthentik/authentik/pull/18854) - stages/authenticator\_\*: fix code input field not string by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#18875](https://redirect.github.com/goauthentik/authentik/pull/18875) - web: fix file upload form by [@dominic-r](https://redirect.github.com/dominic-r) in [goauthentik/authentik#18808](https://redirect.github.com/goauthentik/authentik/pull/18808) - web/admin: endpoint: change wording and add helper text by [@dewi-tik](https://redirect.github.com/dewi-tik) in [goauthentik/authentik#18871](https://redirect.github.com/goauthentik/authentik/pull/18871) - core, web: update translations by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#18807](https://redirect.github.com/goauthentik/authentik/pull/18807) - website/integrations: bookstack: fix redir url by [@dominic-r](https://redirect.github.com/dominic-r) in [goauthentik/authentik#18891](https://redirect.github.com/goauthentik/authentik/pull/18891) - core: bump astral-sh/uv from 0.9.17 to 0.9.18 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18898](https://redirect.github.com/goauthentik/authentik/pull/18898) - core: bump goauthentik/fips-debian from `2f19fc1` to `189345a` by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18897](https://redirect.github.com/goauthentik/authentik/pull/18897) - web: bump knip from 5.73.3 to 5.74.0 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18896](https://redirect.github.com/goauthentik/authentik/pull/18896) - web: bump [@types/node](https://redirect.github.com/types/node) from 25.0.0 to 25.0.3 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18895](https://redirect.github.com/goauthentik/authentik/pull/18895) - web: bump the rollup group across 1 directory with 4 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18852](https://redirect.github.com/goauthentik/authentik/pull/18852) - web: bump the bundler group across 1 directory with 7 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18894](https://redirect.github.com/goauthentik/authentik/pull/18894) - web: bump [@sentry/browser](https://redirect.github.com/sentry/browser) from 10.30.0 to 10.31.0 in /web in the sentry group across 1 directory by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18893](https://redirect.github.com/goauthentik/authentik/pull/18893) - lifecycle/aws: bump aws-cdk from 2.1034.0 to 2.1100.0 in /lifecycle/aws by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18850](https://redirect.github.com/goauthentik/authentik/pull/18850) - web: bump the goauthentik group across 1 directory with 3 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18819](https://redirect.github.com/goauthentik/authentik/pull/18819) - web: bump the swc group across 1 directory with 11 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18818](https://redirect.github.com/goauthentik/authentik/pull/18818) - web: bump the eslint group across 1 directory with 5 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18851](https://redirect.github.com/goauthentik/authentik/pull/18851) - core: bump goauthentik.io/api/v3 from 3.2026020.1 to 3.2026020.3 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18892](https://redirect.github.com/goauthentik/authentik/pull/18892) - tasks/middleware: close connections on worker status update database error by [@rissson](https://redirect.github.com/rissson) in [goauthentik/authentik#18881](https://redirect.github.com/goauthentik/authentik/pull/18881) - website/docs: added list of Int Guide contributors (also edited frontmatter) by [@tanberry](https://redirect.github.com/tanberry) in [goauthentik/authentik#18888](https://redirect.github.com/goauthentik/authentik/pull/18888) - api: fix page\_size with invalid query param by [@rissson](https://redirect.github.com/rissson) in [goauthentik/authentik#18879](https://redirect.github.com/goauthentik/authentik/pull/18879) - ci/release-tag: checkout correct branch for make test-docker by [@rissson](https://redirect.github.com/rissson) in [goauthentik/authentik#18880](https://redirect.github.com/goauthentik/authentik/pull/18880) - api: fix latest version for public schema by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#18902](https://redirect.github.com/goauthentik/authentik/pull/18902) - website/docs: 2025.12: remove superfluous changes by [@rissson](https://redirect.github.com/rissson) in [goauthentik/authentik#18910](https://redirect.github.com/goauthentik/authentik/pull/18910) - web/admin: reword some things on the device view page by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#18785](https://redirect.github.com/goauthentik/authentik/pull/18785) - core/groups: optimize prefetch queries to fetch only required fields by [@joaocfernandes](https://redirect.github.com/joaocfernandes) in [goauthentik/authentik#18448](https://redirect.github.com/goauthentik/authentik/pull/18448) - root: fix docker-compose data mount by [@rissson](https://redirect.github.com/rissson) in [goauthentik/authentik#18903](https://redirect.github.com/goauthentik/authentik/pull/18903) - web/admin: add UI copy to RBAC modal by [@tanberry](https://redirect.github.com/tanberry) in [goauthentik/authentik#18917](https://redirect.github.com/goauthentik/authentik/pull/18917) - tests/e2e: handle StaleElementReferenceException in parse\_json\_content by [@melizeche](https://redirect.github.com/melizeche) in [goauthentik/authentik#18842](https://redirect.github.com/goauthentik/authentik/pull/18842) - core: bump goauthentik/fips-debian from `189345a` to `10dadf1` by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18927](https://redirect.github.com/goauthentik/authentik/pull/18927) - web: bump chromedriver from 143.0.1 to 143.0.2 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18926](https://redirect.github.com/goauthentik/authentik/pull/18926) - web: bump knip from 5.74.0 to 5.75.1 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18924](https://redirect.github.com/goauthentik/authentik/pull/18924) - core, web: update translations by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#18920](https://redirect.github.com/goauthentik/authentik/pull/18920) - lifecycle/aws: bump aws-cdk from 2.1100.0 to 2.1100.1 in /lifecycle/aws by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18922](https://redirect.github.com/goauthentik/authentik/pull/18922) - web: bump the swc group across 1 directory with 11 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18923](https://redirect.github.com/goauthentik/authentik/pull/18923) - web: bump the storybook group across 1 directory with 5 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18817](https://redirect.github.com/goauthentik/authentik/pull/18817) - stages: remove more global state by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#18641](https://redirect.github.com/goauthentik/authentik/pull/18641) - packages/ak-guardian: cast safely by [@gergosimonyi](https://redirect.github.com/gergosimonyi) in [goauthentik/authentik#18929](https://redirect.github.com/goauthentik/authentik/pull/18929) - web/flow: Fix spurious double submit on ak-stage-autosubmit by [@dminuoso](https://redirect.github.com/dminuoso) in [goauthentik/authentik#18727](https://redirect.github.com/goauthentik/authentik/pull/18727) - website/integrations: Add launch URL for Immich by [@optix2000](https://redirect.github.com/optix2000) in [goauthentik/authentik#18921](https://redirect.github.com/goauthentik/authentik/pull/18921) - crypto: fix extra cert data in db migration by [@rissson](https://redirect.github.com/rissson) in [goauthentik/authentik#18937](https://redirect.github.com/goauthentik/authentik/pull/18937) - web/elements: progress-bar and table loading header by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#18934](https://redirect.github.com/goauthentik/authentik/pull/18934) - stages/identification: replace sleep with make\_password by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#18883](https://redirect.github.com/goauthentik/authentik/pull/18883) - website/docs: endpoint devices by [@dewi-tik](https://redirect.github.com/dewi-tik) in [goauthentik/authentik#18634](https://redirect.github.com/goauthentik/authentik/pull/18634) - website/docs: Fix labels, Pre-Release detection by [@GirlBossRush](https://redirect.github.com/GirlBossRush) in [goauthentik/authentik#18945](https://redirect.github.com/goauthentik/authentik/pull/18945) - website/docs: release notes: add endpoint device links to 2025.12 notes by [@dewi-tik](https://redirect.github.com/dewi-tik) in [goauthentik/authentik#18940](https://redirect.github.com/goauthentik/authentik/pull/18940) - website/docs: Fix version parsing. by [@GirlBossRush](https://redirect.github.com/GirlBossRush) in [goauthentik/authentik#18948](https://redirect.github.com/goauthentik/authentik/pull/18948) - web/admin: fix endpoints user binding by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#18935](https://redirect.github.com/goauthentik/authentik/pull/18935) - flows/executor: fix KeyError when session has no existing plan by [@dominic-r](https://redirect.github.com/dominic-r) in [goauthentik/authentik#18951](https://redirect.github.com/goauthentik/authentik/pull/18951) - root: move docker files to lifecycle/containers and change docker-compose to compose by [@PeshekDotDev](https://redirect.github.com/PeshekDotDev) in [goauthentik/authentik#16624](https://redirect.github.com/goauthentik/authentik/pull/16624) - core: bump goauthentik.io/api/v3 from 3.2026020.3 to 3.2026020.4 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18956](https://redirect.github.com/goauthentik/authentik/pull/18956) - web: bump chromedriver from 143.0.2 to 143.0.3 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18959](https://redirect.github.com/goauthentik/authentik/pull/18959) - web: bump the swc group across 1 directory with 11 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18958](https://redirect.github.com/goauthentik/authentik/pull/18958) - web: bump [@sentry/browser](https://redirect.github.com/sentry/browser) from 10.31.0 to 10.32.0 in /web in the sentry group across 1 directory by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18957](https://redirect.github.com/goauthentik/authentik/pull/18957) - ci: bump actions/attest-build-provenance from 3.0.0 to 3.1.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18960](https://redirect.github.com/goauthentik/authentik/pull/18960) - website/docs: add note to active directory source doc by [@dewi-tik](https://redirect.github.com/dewi-tik) in [goauthentik/authentik#18787](https://redirect.github.com/goauthentik/authentik/pull/18787) - web/maintenance: fix missing custom web component imports by [@kensternberg-authentik](https://redirect.github.com/kensternberg-authentik) in [goauthentik/authentik#18942](https://redirect.github.com/goauthentik/authentik/pull/18942) - web/maintenance: no unknown tag names by [@kensternberg-authentik](https://redirect.github.com/kensternberg-authentik) in [goauthentik/authentik#18944](https://redirect.github.com/goauthentik/authentik/pull/18944) - website/integrations: Fix path for Cloudflare Access by [@stijn220](https://redirect.github.com/stijn220) in [goauthentik/authentik#18979](https://redirect.github.com/goauthentik/authentik/pull/18979) - blueprints: add InternallyManagedMixin instead of large list by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#18983](https://redirect.github.com/goauthentik/authentik/pull/18983) - web/admin: fix dark theme on map by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#18985](https://redirect.github.com/goauthentik/authentik/pull/18985) - web/admin: Fix haveibeenpwned link in PasswordPolicyForm by [@hskrtich](https://redirect.github.com/hskrtich) in [goauthentik/authentik#18984](https://redirect.github.com/goauthentik/authentik/pull/18984) - events: notifications live update by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#18980](https://redirect.github.com/goauthentik/authentik/pull/18980) - web: fix Open button selecting row instead of navigating by [@dominic-r](https://redirect.github.com/dominic-r) in [goauthentik/authentik#18992](https://redirect.github.com/goauthentik/authentik/pull/18992) - blueprints: fix flaky tests by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#19002](https://redirect.github.com/goauthentik/authentik/pull/19002) - ci: bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18999](https://redirect.github.com/goauthentik/authentik/pull/18999) - providers/oauth2: Automated OpenID Conformance tests by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#14785](https://redirect.github.com/goauthentik/authentik/pull/14785) - enterprise/reports: improve export list, confirmation by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#18981](https://redirect.github.com/goauthentik/authentik/pull/18981) - enterprise/search: add static autocomplete structure by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#19008](https://redirect.github.com/goauthentik/authentik/pull/19008) - website/docs: improve endpoint devices docs by [@dewi-tik](https://redirect.github.com/dewi-tik) in [goauthentik/authentik#19007](https://redirect.github.com/goauthentik/authentik/pull/19007) - web: bump the rollup group across 1 directory with 4 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18994](https://redirect.github.com/goauthentik/authentik/pull/18994) - core: bump openapitools/openapi-generator-cli from v7.16.0 to v7.18.0 in /scripts/api by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19018](https://redirect.github.com/goauthentik/authentik/pull/19018) - web: bump globby from 16.0.0 to 16.1.0 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#18995](https://redirect.github.com/goauthentik/authentik/pull/18995) - api: rework schema generation by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#18977](https://redirect.github.com/goauthentik/authentik/pull/18977) - web/admin: prevent file upload attempt when backend not managed by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#18646](https://redirect.github.com/goauthentik/authentik/pull/18646) - web: bump the eslint group across 1 directory with 3 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19019](https://redirect.github.com/goauthentik/authentik/pull/19019) - core: bump goauthentik.io/api/v3 from 3.2026020.4 to 3.2026020.5 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19017](https://redirect.github.com/goauthentik/authentik/pull/19017) - website/docs: Prioritize "Release Candidate" over "Current Release" by [@GirlBossRush](https://redirect.github.com/GirlBossRush) in [goauthentik/authentik#18975](https://redirect.github.com/goauthentik/authentik/pull/18975) - web: Locale selector UI fixes by [@GirlBossRush](https://redirect.github.com/GirlBossRush) in [goauthentik/authentik#18972](https://redirect.github.com/goauthentik/authentik/pull/18972) - web: Fix Storybook package resolution with `npm link` by [@GirlBossRush](https://redirect.github.com/GirlBossRush) in [goauthentik/authentik#19016](https://redirect.github.com/goauthentik/authentik/pull/19016) - core: use chunked\_queryset for expired message deletion by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#19028](https://redirect.github.com/goauthentik/authentik/pull/19028) - web/admin: use consistent icon for inactive user status by [@dominic-r](https://redirect.github.com/dominic-r) in [goauthentik/authentik#19032](https://redirect.github.com/goauthentik/authentik/pull/19032) - web: bump lit from 3.3.1 to 3.3.2 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19038](https://redirect.github.com/goauthentik/authentik/pull/19038) - web: bump [@lit/reactive-element](https://redirect.github.com/lit/reactive-element) from 2.1.1 to 2.1.2 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19037](https://redirect.github.com/goauthentik/authentik/pull/19037) - web: bump knip from 5.75.1 to 5.77.0 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19041](https://redirect.github.com/goauthentik/authentik/pull/19041) - core: bump goauthentik.io/api/v3 from 3.2026020.5 to 3.2026020.6 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19036](https://redirect.github.com/goauthentik/authentik/pull/19036) - docs/release notes: update 2025.12 release notes by [@melizeche](https://redirect.github.com/melizeche) in [goauthentik/authentik#19043](https://redirect.github.com/goauthentik/authentik/pull/19043) - lib/sync: fix sync\_dispatch by [@krejcar25](https://redirect.github.com/krejcar25) in [goauthentik/authentik#19053](https://redirect.github.com/goauthentik/authentik/pull/19053) - endpoints/devices: cleanup by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#19047](https://redirect.github.com/goauthentik/authentik/pull/19047) - blueprints: set enrollment token key by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#19061](https://redirect.github.com/goauthentik/authentik/pull/19061) - website/integrations: Add Wallos by [@0skater0](https://redirect.github.com/0skater0) in [goauthentik/authentik#19013](https://redirect.github.com/goauthentik/authentik/pull/19013) - website/docs: FreeIPA documentation updates by [@borutmrak](https://redirect.github.com/borutmrak) in [goauthentik/authentik#15183](https://redirect.github.com/goauthentik/authentik/pull/15183) - \*: Auto compress images by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#19065](https://redirect.github.com/goauthentik/authentik/pull/19065) - blueprints: fix deadlock and task context error in MetaApplyBlueprint by [@dominic-r](https://redirect.github.com/dominic-r) in [goauthentik/authentik#19033](https://redirect.github.com/goauthentik/authentik/pull/19033) - web: fix file search input not resetting results properly by [@dominic-r](https://redirect.github.com/dominic-r) in [goauthentik/authentik#19034](https://redirect.github.com/goauthentik/authentik/pull/19034) - website/integrations: owncloud: fix php by [@ocmateusz](https://redirect.github.com/ocmateusz) in [goauthentik/authentik#19073](https://redirect.github.com/goauthentik/authentik/pull/19073) - tests/e2e: add endpoint tests by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#19072](https://redirect.github.com/goauthentik/authentik/pull/19072) - core, web: update translations by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#18991](https://redirect.github.com/goauthentik/authentik/pull/18991) - web: bump knip from 5.77.0 to 5.77.1 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19049](https://redirect.github.com/goauthentik/authentik/pull/19049) - web: bump [@lit/localize-tools](https://redirect.github.com/lit/localize-tools) from 0.8.0 to 0.8.1 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19040](https://redirect.github.com/goauthentik/authentik/pull/19040) - internal: update TLS Suite by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#19076](https://redirect.github.com/goauthentik/authentik/pull/19076) - web: bump [@formatjs/intl-listformat](https://redirect.github.com/formatjs/intl-listformat) from 7.7.13 to 8.1.0 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19054](https://redirect.github.com/goauthentik/authentik/pull/19054) - web/admin: fix button alignment on user view page by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#19079](https://redirect.github.com/goauthentik/authentik/pull/19079) - website/docs: endpoints: mention connector key required for stage to work by [@dominic-r](https://redirect.github.com/dominic-r) in [goauthentik/authentik#19084](https://redirect.github.com/goauthentik/authentik/pull/19084) - website/docs: rel notes .12: add wallos by [@dominic-r](https://redirect.github.com/dominic-r) in [goauthentik/authentik#19063](https://redirect.github.com/goauthentik/authentik/pull/19063) - website/docs: endpoint devices: update features table by [@dewi-tik](https://redirect.github.com/dewi-tik) in [goauthentik/authentik#19094](https://redirect.github.com/goauthentik/authentik/pull/19094) - website/docs: endpoint devices: add path to macos setup by [@dewi-tik](https://redirect.github.com/dewi-tik) in [goauthentik/authentik#19093](https://redirect.github.com/goauthentik/authentik/pull/19093) - web: bump knip from 5.77.1 to 5.78.0 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19090](https://redirect.github.com/goauthentik/authentik/pull/19090) - web: fix promoted source button hover losing blue color by [@dominic-r](https://redirect.github.com/dominic-r) in [goauthentik/authentik#19048](https://redirect.github.com/goauthentik/authentik/pull/19048) - web: Fix stale flow background by [@dominic-r](https://redirect.github.com/dominic-r) in [goauthentik/authentik#19015](https://redirect.github.com/goauthentik/authentik/pull/19015) - Update Vaultwarden documentation by removing warning by [@austin-dudzik](https://redirect.github.com/austin-dudzik) in [goauthentik/authentik#19102](https://redirect.github.com/goauthentik/authentik/pull/19102) - web/maintenance/no unknown attributes (part 1) by [@kensternberg-authentik](https://redirect.github.com/kensternberg-authentik) in [goauthentik/authentik#18970](https://redirect.github.com/goauthentik/authentik/pull/18970) - website/integrations: Add Pulse by [@0skater0](https://redirect.github.com/0skater0) in [goauthentik/authentik#19105](https://redirect.github.com/goauthentik/authentik/pull/19105) - website/integrations: Add Audiobookshelf by [@0skater0](https://redirect.github.com/0skater0) in [goauthentik/authentik#19104](https://redirect.github.com/goauthentik/authentik/pull/19104) - website/docs: release notes: Add more integrations by [@dominic-r](https://redirect.github.com/dominic-r) in [goauthentik/authentik#19109](https://redirect.github.com/goauthentik/authentik/pull/19109) - web: bump the storybook group across 1 directory with 5 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19111](https://redirect.github.com/goauthentik/authentik/pull/19111) - core: bump library/nginx from `fb01117` to `ad85427` in /website by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19112](https://redirect.github.com/goauthentik/authentik/pull/19112) - web: bump the eslint group across 1 directory with 3 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19110](https://redirect.github.com/goauthentik/authentik/pull/19110) - web: Fix Impersonation, Lit Reactive Controller Contexts by [@GirlBossRush](https://redirect.github.com/GirlBossRush) in [goauthentik/authentik#19114](https://redirect.github.com/goauthentik/authentik/pull/19114) - web: Capitalize language display names, code owner fix by [@GirlBossRush](https://redirect.github.com/GirlBossRush) in [goauthentik/authentik#19119](https://redirect.github.com/goauthentik/authentik/pull/19119) - core: bump library/nginx from `ad85427` to `ca871a8` in /website by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19126](https://redirect.github.com/goauthentik/authentik/pull/19126) - web: bump the swc group across 1 directory with 11 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19124](https://redirect.github.com/goauthentik/authentik/pull/19124) - core: bump github.com/jackc/pgx/v5 from 5.7.6 to 5.8.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19088](https://redirect.github.com/goauthentik/authentik/pull/19088) - core: bump library/node from `ccfd9da` to `03729a7` in /website by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19125](https://redirect.github.com/goauthentik/authentik/pull/19125) - core, web: bump qs from 6.14.0 to 6.14.1 in /packages/docusaurus-config by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19130](https://redirect.github.com/goauthentik/authentik/pull/19130) - website/integrations: karakeep: don't hardcode wellknown's slug by [@pippo73](https://redirect.github.com/pippo73) in [goauthentik/authentik#19127](https://redirect.github.com/goauthentik/authentik/pull/19127) - web: disable user settings fields when changes are not allowed by [@dominic-r](https://redirect.github.com/dominic-r) in [goauthentik/authentik#19132](https://redirect.github.com/goauthentik/authentik/pull/19132) - website/docs: endpoint agent release notes by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#19042](https://redirect.github.com/goauthentik/authentik/pull/19042) - website/docs: fix build by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#19148](https://redirect.github.com/goauthentik/authentik/pull/19148) - web: Token Form Fixes by [@GirlBossRush](https://redirect.github.com/GirlBossRush) in [goauthentik/authentik#19121](https://redirect.github.com/goauthentik/authentik/pull/19121) - web/user: fix consent delete form missing details by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#19147](https://redirect.github.com/goauthentik/authentik/pull/19147) - web: bump globals from 16.5.0 to 17.0.0 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19154](https://redirect.github.com/goauthentik/authentik/pull/19154) - core, web: update translations by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#19135](https://redirect.github.com/goauthentik/authentik/pull/19135) - ci: bump int128/docker-manifest-create-action from 2.10.0 to 2.12.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19138](https://redirect.github.com/goauthentik/authentik/pull/19138) - website/integrations: vaultwarden: add custom email scope by [@williamkray](https://redirect.github.com/williamkray) in [goauthentik/authentik#19160](https://redirect.github.com/goauthentik/authentik/pull/19160) - stages/authenticator\_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#19137](https://redirect.github.com/goauthentik/authentik/pull/19137) - core: handle deserialization errors from FileField migration by [@dominic-r](https://redirect.github.com/dominic-r) in [goauthentik/authentik#19067](https://redirect.github.com/goauthentik/authentik/pull/19067) - web: fix slug auto-updating when editing existing applications by [@dominic-r](https://redirect.github.com/dominic-r) in [goauthentik/authentik#19169](https://redirect.github.com/goauthentik/authentik/pull/19169) - web: Fix user library colors, modal z-indexes, table progress bars by [@GirlBossRush](https://redirect.github.com/GirlBossRush) in [goauthentik/authentik#19152](https://redirect.github.com/goauthentik/authentik/pull/19152) - web/admin: adjust sync threshold, add tooltip by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#19131](https://redirect.github.com/goauthentik/authentik/pull/19131) - website/docs: remove duplicates in slo docs by [@nmasnadithya](https://redirect.github.com/nmasnadithya) in [goauthentik/authentik#19170](https://redirect.github.com/goauthentik/authentik/pull/19170) - lifecycle: fix migration conn\_options for psycopg connection by [@D-Tasker207](https://redirect.github.com/D-Tasker207) in [goauthentik/authentik#19134](https://redirect.github.com/goauthentik/authentik/pull/19134) - web: bump knip from 5.78.0 to 5.79.0 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19181](https://redirect.github.com/goauthentik/authentik/pull/19181) - ci: bump getsentry/action-release from 3.4.0 to 3.5.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19183](https://redirect.github.com/goauthentik/authentik/pull/19183) - web: bump [@formatjs/intl-listformat](https://redirect.github.com/formatjs/intl-listformat) from 8.1.0 to 8.1.1 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19182](https://redirect.github.com/goauthentik/authentik/pull/19182) - core, web: update translations by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#19179](https://redirect.github.com/goauthentik/authentik/pull/19179) - lib: update error logging by [@PeshekDotDev](https://redirect.github.com/PeshekDotDev) in [goauthentik/authentik#18628](https://redirect.github.com/goauthentik/authentik/pull/18628) - website/integrations: make grafana terraform section expand by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#19192](https://redirect.github.com/goauthentik/authentik/pull/19192) - core: add prettier failure on duplicate group names by [@gergosimonyi](https://redirect.github.com/gergosimonyi) in [goauthentik/authentik#18941](https://redirect.github.com/goauthentik/authentik/pull/18941) - web/maintenance: no missing element type definitions by [@kensternberg-authentik](https://redirect.github.com/kensternberg-authentik) in [goauthentik/authentik#18950](https://redirect.github.com/goauthentik/authentik/pull/18950) - root: codespell: ignore Python virtual env, group patterns. by [@GirlBossRush](https://redirect.github.com/GirlBossRush) in [goauthentik/authentik#19180](https://redirect.github.com/goauthentik/authentik/pull/19180) - web: Merge branch -- Stale notifications, synchronized context objects, rendering fixes by [@GirlBossRush](https://redirect.github.com/GirlBossRush) in [goauthentik/authentik#19141](https://redirect.github.com/goauthentik/authentik/pull/19141) - website/docs: Add docs for roles by [@PeshekDotDev](https://redirect.github.com/PeshekDotDev) in [goauthentik/authentik#19196](https://redirect.github.com/goauthentik/authentik/pull/19196) - web: Defer table refresh, visibility checks. by [@GirlBossRush](https://redirect.github.com/GirlBossRush) in [goauthentik/authentik#19194](https://redirect.github.com/goauthentik/authentik/pull/19194) - rbac: Add show all to roles tab, add role tab to groups by [@PeshekDotDev](https://redirect.github.com/PeshekDotDev) in [goauthentik/authentik#19097](https://redirect.github.com/goauthentik/authentik/pull/19097) - website/docs: rewrite section about users and perms by [@tanberry](https://redirect.github.com/tanberry) in [goauthentik/authentik#19195](https://redirect.github.com/goauthentik/authentik/pull/19195) - core: add last\_login filter to users API by [@dominic-r](https://redirect.github.com/dominic-r) in [goauthentik/authentik#18993](https://redirect.github.com/goauthentik/authentik/pull/18993) - web: bump the eslint group across 1 directory with 3 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19205](https://redirect.github.com/goauthentik/authentik/pull/19205) - admin/files: support %(theme)s variable in media file paths by [@dominic-r](https://redirect.github.com/dominic-r) in [goauthentik/authentik#19108](https://redirect.github.com/goauthentik/authentik/pull/19108) - website/integrations: glpi: add step by [@dewi-tik](https://redirect.github.com/dewi-tik) in [goauthentik/authentik#19208](https://redirect.github.com/goauthentik/authentik/pull/19208) - web: bump knip from 5.79.0 to 5.80.0 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19207](https://redirect.github.com/goauthentik/authentik/pull/19207) - core: bump axllent/mailpit from v1.28.0 to v1.28.1 in /tests/e2e by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19204](https://redirect.github.com/goauthentik/authentik/pull/19204) - lifecycle/aws: bump aws-cdk from 2.1100.1 to 2.1100.2 in /lifecycle/aws by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19203](https://redirect.github.com/goauthentik/authentik/pull/19203) - core: bump goauthentik.io/api/v3 from 3.2026020.6 to 3.2026020.7 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19202](https://redirect.github.com/goauthentik/authentik/pull/19202) - translate: Updates for project authentik and language pt\_BR by [@transifex-integration](https://redirect.github.com/transifex-integration)\[bot] in [goauthentik/authentik#19082](https://redirect.github.com/goauthentik/authentik/pull/19082) - web/maintenance: lint pass to add missing HTMLElementEventMap entries by [@kensternberg-authentik](https://redirect.github.com/kensternberg-authentik) in [goauthentik/authentik#18953](https://redirect.github.com/goauthentik/authentik/pull/18953) - outpost/proxyv2: reduce max number of postgres connections by [@rissson](https://redirect.github.com/rissson) in [goauthentik/authentik#19211](https://redirect.github.com/goauthentik/authentik/pull/19211) - core, web: update translations by [@authentik-automation](https://redirect.github.com/authentik-automation)\[bot] in [goauthentik/authentik#19200](https://redirect.github.com/goauthentik/authentik/pull/19200) - website/docs: revisit endpoint docs the nth by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#19116](https://redirect.github.com/goauthentik/authentik/pull/19116) - ci: bump astral-sh/setup-uv from 7.1.6 to 7.2.0 in /.github/actions/setup by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19221](https://redirect.github.com/goauthentik/authentik/pull/19221) - endpoints: include license status in agent config by [@BeryJu](https://redirect.github.com/BeryJu) in [goauthentik/authentik#19227](https://redirect.github.com/goauthentik/authentik/pull/19227) - web: bump [@formatjs/intl-listformat](https://redirect.github.com/formatjs/intl-listformat) from 8.1.1 to 8.1.2 in /web by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [goauthentik/authentik#19220](https://redirect.github.com/goauthentik/authentik/pull/19220) - lifecycle/aws: bump aws-cdk from 2.1100.2 to 2.1100.3 in /lifecycle/aws by [@ </details> --- ### Configuration 📅 **Schedule**: Branch creation - Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/fgeck/homelab-k3s).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

web/flows: fix source icons being always inverted (#20419)

4017ee3

* web/flows: fix inverted source icons Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix actually Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Jens Langhammer <jens@goauthentik.io>

authentik-automation bot requested a review from a team as a code owner February 26, 2026 17:41

authentik-automation bot added the cherry-pick label Feb 26, 2026

authentik-automation bot assigned BeryJu Feb 26, 2026

authentik-automation bot mentioned this pull request Feb 26, 2026

web/flows: fix source icons being always inverted #20419

Merged

BeryJu merged commit d686932 into version-2026.2 Feb 26, 2026
87 of 90 checks passed

BeryJu deleted the cherry-pick/20419-to-version-2026.2 branch February 26, 2026 20:14

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

web/flows: fix source icons being always inverted (cherry-pick #20419 to version-2026.2)#20607

web/flows: fix source icons being always inverted (cherry-pick #20419 to version-2026.2)#20607
BeryJu merged 1 commit intoversion-2026.2from
cherry-pick/20419-to-version-2026.2

authentik-automation bot commented Feb 26, 2026

Uh oh!

netlify bot commented Feb 26, 2026

Uh oh!

codecov bot commented Feb 26, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

authentik-automation bot commented Feb 26, 2026

Uh oh!

netlify bot commented Feb 26, 2026

✅ Deploy Preview for authentik-integrations ready!

Uh oh!

codecov bot commented Feb 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌ 1 Tests Failed:

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

codecov bot commented Feb 26, 2026 •

edited

Loading