eliott/authentik
1
0
Fork 0
mirror of https://github.com/goauthentik/authentik synced 2026-05-11 17:36:35 +02:00
Code Issues Packages Projects Releases Wiki Activity
21,675 Commits 344 Branches 441 Tags
e7fcfb7e67d5df3e8a8a5da170f18fa4c6b98731
Commit Graph

21675 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jens L.
244962dbff root: adjust makefile for non-brew macos (#19479) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2026-01-15 14:14:27 +01:00
Jean-Marc Le Roux
3e37821eb7 providers/oauth2: allow property mappings to override scope claim in access tokens (#19226) 
* test(oauth2): add failing test for scope claim override via property mapping

Reproduces issue #19224 where property mappings cannot override the scope claim.

* fix(oauth2): allow property mappings to override scope claim in access tokens

Previously, the scope claim in access tokens was unconditionally set to
the requested scopes, ignoring any custom scope value returned by
property mappings.

This change uses setdefault() instead of direct assignment, so the
default scope is only set if no custom scope was provided by property
mappings.

Fixes #19224
 2026-01-15 14:06:15 +01:00
Jens L.
4f5b65bb2f revert: lib: use orjson for structlog json (#19478) 
Revert "lib: use orjson for structlog json (#19462)"

This reverts commit 51a7eb96fb.
 2026-01-15 13:59:21 +01:00
authentik-automation[bot]
d4f3bb1d41 stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (#19464) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
 2026-01-15 13:47:49 +01:00
dependabot[bot]
41e99b5d16 core: bump library/nginx from e3a22a7 to c881927 in /website (#19469) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-15 12:18:40 +00:00
dependabot[bot]
6e46b1ff3b core: bump library/node from 25.2.1-trixie to 25.3.0-trixie in /website (#19468) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-15 12:56:21 +01:00
dependabot[bot]
807399d4a7 web: bump prettier from 3.7.4 to 3.8.0 in /web (#19471) 
Bumps [prettier](https://github.com/prettier/prettier) from 3.7.4 to 3.8.0.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.7.4...3.8.0)

---
updated-dependencies:
- dependency-name: prettier
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-15 12:51:20 +01:00
Fredouye
adee431d64 website/integrations: add MinIO AIStor configuration via environment variables (#19337) 
* Add MinIO AIStor configuration via environment variables

Signed-off-by: Fredouye <frederic.mangeant@gmail.com>

* Minor changes

* Change website URL

* Apply suggestions

---------

Signed-off-by: Fredouye <frederic.mangeant@gmail.com>
Co-authored-by: dewi-tik <dewi@goauthentik.io>
 2026-01-15 02:22:44 +00:00
Jens L.
06ed43002f root: upgrade ruff lint for 3.14 (#19461) 
* root: upgrade ruff lint for 3.14

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* redo makefile

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* format

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2026-01-15 03:15:02 +01:00
Jens L.
51a7eb96fb lib: use orjson for structlog json (#19462) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2026-01-15 02:55:08 +01:00
Simonyi Gergő
37a18645fe ci: fix checkout stable (for 2025.12) (#19448) 
* ci: fix checkout stable (again)

Fixes the fix at https://github.com/goauthentik/authentik/pull/18303

This fails on version branches that already have releases, because the
version tag is named `version/${numbers}`, not just `${numbers}`.

* lint by human

Thank you <3

Co-authored-by: Jens L. <jens@goauthentik.io>
Signed-off-by: Simonyi Gergő <28359278+gergosimonyi@users.noreply.github.com>

---------

Signed-off-by: Simonyi Gergő <28359278+gergosimonyi@users.noreply.github.com>
Co-authored-by: Jens L. <jens@goauthentik.io>
 2026-01-15 02:12:18 +01:00
Jens L.
885f3b68b2 root: Python 3.14 (#17313) 
* root: Python 3.14

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update pydantic

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* bump kadmin

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add krb5 stuff to compile on macos?

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* re-lock

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* trigger build

* lock uv

* bump to 3.14.2

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* output container logs if it failed to start

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* relock

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* target black and ruff to python 3.14

* upgrade pydatic from 2.11.7 to 2.12.5

* revert ruff to python 3.13 ruff checks

* bump docs

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix makefile

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Signed-off-by: Marcelo Elizeche Landó <marcelo@goauthentik.io>
Co-authored-by: Marcelo Elizeche Landó <marcelo@goauthentik.io>
 2026-01-15 02:08:17 +01:00
dependabot[bot]
5f4ba1a4ac core: bump channels from 4.3.1 to 4.3.2 (#19458) 
Bumps [channels](https://github.com/django/channels) from 4.3.1 to 4.3.2.
- [Changelog](https://github.com/django/channels/blob/main/CHANGELOG.txt)
- [Commits](https://github.com/django/channels/compare/4.3.1...4.3.2)

---
updated-dependencies:
- dependency-name: channels
  dependency-version: 4.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-15 00:31:50 +01:00
dependabot[bot]
c9f82984ba core: bump mypy from 1.18.2 to 1.19.1 (#19457) 
Bumps [mypy](https://github.com/python/mypy) from 1.18.2 to 1.19.1.
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](https://github.com/python/mypy/compare/v1.18.2...v1.19.1)

---
updated-dependencies:
- dependency-name: mypy
  dependency-version: 1.19.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-15 00:31:36 +01:00
dependabot[bot]
2e4747a68f core: bump google-api-python-client from 2.177.0 to 2.188.0 (#19443) 
Bumps [google-api-python-client](https://github.com/googleapis/google-api-python-client) from 2.177.0 to 2.188.0.
- [Release notes](https://github.com/googleapis/google-api-python-client/releases)
- [Commits](https://github.com/googleapis/google-api-python-client/compare/v2.177.0...v2.188.0)

---
updated-dependencies:
- dependency-name: google-api-python-client
  dependency-version: 2.188.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 23:57:53 +01:00
dependabot[bot]
d081514317 core: bump selenium from 4.32.0 to 4.39.0 (#19455) 
Bumps [selenium](https://github.com/SeleniumHQ/Selenium) from 4.32.0 to 4.39.0.
- [Release notes](https://github.com/SeleniumHQ/Selenium/releases)
- [Commits](https://github.com/SeleniumHQ/Selenium/compare/selenium-4.32.0...selenium-4.39.0)

---
updated-dependencies:
- dependency-name: selenium
  dependency-version: 4.39.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 23:57:38 +01:00
dependabot[bot]
afde3b2ff4 core: bump msgraph-sdk from 1.39.0 to 1.52.0 (#19454) 
Bumps [msgraph-sdk](https://github.com/microsoftgraph/msgraph-sdk-python) from 1.39.0 to 1.52.0.
- [Release notes](https://github.com/microsoftgraph/msgraph-sdk-python/releases)
- [Changelog](https://github.com/microsoftgraph/msgraph-sdk-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/microsoftgraph/msgraph-sdk-python/compare/v1.39.0...v1.52.0)

---
updated-dependencies:
- dependency-name: msgraph-sdk
  dependency-version: 1.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 23:57:27 +01:00
dependabot[bot]
f7fb04fd51 core: bump constructs from 10.4.2 to 10.4.4 (#19451) 
Bumps [constructs](https://github.com/aws/constructs) from 10.4.2 to 10.4.4.
- [Release notes](https://github.com/aws/constructs/releases)
- [Commits](https://github.com/aws/constructs/compare/v10.4.2...v10.4.4)

---
updated-dependencies:
- dependency-name: constructs
  dependency-version: 10.4.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 23:57:17 +01:00
dependabot[bot]
a60cc68f94 core: bump structlog from 25.4.0 to 25.5.0 (#19450) 
Bumps [structlog](https://github.com/hynek/structlog) from 25.4.0 to 25.5.0.
- [Release notes](https://github.com/hynek/structlog/releases)
- [Changelog](https://github.com/hynek/structlog/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hynek/structlog/compare/25.4.0...25.5.0)

---
updated-dependencies:
- dependency-name: structlog
  dependency-version: 25.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 23:55:42 +01:00
dependabot[bot]
21ee3fdd64 core: bump pytest-randomly from 3.16.0 to 4.0.1 (#19456) 
Bumps [pytest-randomly](https://github.com/pytest-dev/pytest-randomly) from 3.16.0 to 4.0.1.
- [Changelog](https://github.com/pytest-dev/pytest-randomly/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest-randomly/compare/3.16.0...4.0.1)

---
updated-dependencies:
- dependency-name: pytest-randomly
  dependency-version: 4.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 23:55:27 +01:00
dependabot[bot]
de15279c53 core: bump djangorestframework-stubs[compatible-mypy] from 3.16.3 to 3.16.7 (#19449) 
core: bump djangorestframework-stubs[compatible-mypy]

Bumps [djangorestframework-stubs[compatible-mypy]](https://github.com/sponsors/typeddjango) from 3.16.3 to 3.16.7.
- [Commits](https://github.com/sponsors/typeddjango/commits)

---
updated-dependencies:
- dependency-name: djangorestframework-stubs[compatible-mypy]
  dependency-version: 3.16.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 23:54:49 +01:00
dependabot[bot]
138910e36e core: bump psycopg[c,pool] from 3.2.9 to 3.3.2 (#19452) 
Bumps [psycopg[c,pool]](https://github.com/psycopg/psycopg) from 3.2.9 to 3.3.2.
- [Changelog](https://github.com/psycopg/psycopg/blob/master/docs/news.rst)
- [Commits](https://github.com/psycopg/psycopg/compare/3.2.9...3.3.2)

---
updated-dependencies:
- dependency-name: psycopg[c,pool]
  dependency-version: 3.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 23:54:39 +01:00
dependabot[bot]
fa4616bbe5 core: bump uvicorn[standard] from 0.35.0 to 0.40.0 (#19453) 
Bumps [uvicorn[standard]](https://github.com/Kludex/uvicorn) from 0.35.0 to 0.40.0.
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](https://github.com/Kludex/uvicorn/compare/0.35.0...0.40.0)

---
updated-dependencies:
- dependency-name: uvicorn[standard]
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 23:54:25 +01:00
dependabot[bot]
7ab875767c core: bump webauthn from 2.6.0 to 2.7.0 (#19442) 
Bumps [webauthn](https://github.com/duo-labs/py_webauthn) from 2.6.0 to 2.7.0.
- [Release notes](https://github.com/duo-labs/py_webauthn/releases)
- [Changelog](https://github.com/duo-labs/py_webauthn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/duo-labs/py_webauthn/compare/v2.6.0...v2.7.0)

---
updated-dependencies:
- dependency-name: webauthn
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 23:27:56 +01:00
dependabot[bot]
44d718f51f core: bump fido2 from 2.0.0 to 2.1.0 (#19445) 
Bumps [fido2](https://github.com/Yubico/python-fido2) from 2.0.0 to 2.1.0.
- [Release notes](https://github.com/Yubico/python-fido2/releases)
- [Changelog](https://github.com/Yubico/python-fido2/blob/main/NEWS)
- [Commits](https://github.com/Yubico/python-fido2/compare/2.0.0...2.1.0)

---
updated-dependencies:
- dependency-name: fido2
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 23:27:07 +01:00
dependabot[bot]
0f3138d8bc core: bump gssapi from 1.9.0 to 1.10.1 (#19436) 
Bumps [gssapi](https://github.com/pythongssapi/python-gssapi) from 1.9.0 to 1.10.1.
- [Release notes](https://github.com/pythongssapi/python-gssapi/releases)
- [Commits](https://github.com/pythongssapi/python-gssapi/compare/v1.9.0...v1.10.1)

---
updated-dependencies:
- dependency-name: gssapi
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 23:26:54 +01:00
dependabot[bot]
1dfcea086e core: bump paramiko from 3.5.1 to 4.0.0 (#19440) 2026-01-14 22:37:00 +01:00
dependabot[bot]
3f4dab1b67 core: bump django-filter from 25.1 to 25.2 (#19444) 2026-01-14 22:32:39 +01:00
dependabot[bot]
4b11432add core: bump setproctitle from 1.3.6 to 1.3.7 (#19447) 2026-01-14 22:31:25 +01:00
dependabot[bot]
6e9067a2be core: bump coverage[toml] from 7.8.0 to 7.13.1 (#19446) 2026-01-14 22:30:42 +01:00
dependabot[bot]
0ceb02a525 core: bump sentry-sdk from 2.33.2 to 2.49.0 (#19441) 
Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from 2.33.2 to 2.49.0.
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-python/compare/2.33.2...2.49.0)

---
updated-dependencies:
- dependency-name: sentry-sdk
  dependency-version: 2.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 21:35:59 +01:00
dependabot[bot]
9e4243570e core: bump twilio from 9.7.0 to 9.9.1 (#19434) 
Bumps [twilio](https://github.com/twilio/twilio-python) from 9.7.0 to 9.9.1.
- [Release notes](https://github.com/twilio/twilio-python/releases)
- [Changelog](https://github.com/twilio/twilio-python/blob/main/CHANGES.md)
- [Commits](https://github.com/twilio/twilio-python/compare/9.7.0...9.9.1)

---
updated-dependencies:
- dependency-name: twilio
  dependency-version: 9.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 21:26:41 +01:00
dependabot[bot]
46401eeec9 core: bump pydantic from 2.11.7 to 2.12.5 (#19435) 
Bumps [pydantic](https://github.com/pydantic/pydantic) from 2.11.7 to 2.12.5.
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/compare/v2.11.7...v2.12.5)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.12.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 21:26:29 +01:00
dependabot[bot]
5c3f3303e1 core: bump cryptography from 45.0.5 to 46.0.3 (#19439) 
Bumps [cryptography](https://github.com/pyca/cryptography) from 45.0.5 to 46.0.3.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/45.0.5...46.0.3)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 46.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 21:25:02 +01:00
dependabot[bot]
89c8f570ec core: bump django-pglock from 1.7.2 to 1.8.0 (#19437) 
Bumps [django-pglock](https://github.com/AmbitionEng/django-pglock) from 1.7.2 to 1.8.0.
- [Release notes](https://github.com/AmbitionEng/django-pglock/releases)
- [Changelog](https://github.com/AmbitionEng/django-pglock/blob/main/CHANGELOG.md)
- [Commits](https://github.com/AmbitionEng/django-pglock/compare/1.7.2...1.8.0)

---
updated-dependencies:
- dependency-name: django-pglock
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 21:23:35 +01:00
dependabot[bot]
7c276b368a core: bump types-ldap3 from 2.9.13.20250622 to 2.9.13.20251121 (#19438) 
Bumps [types-ldap3](https://github.com/typeshed-internal/stub_uploader) from 2.9.13.20250622 to 2.9.13.20251121.
- [Commits](https://github.com/typeshed-internal/stub_uploader/commits)

---
updated-dependencies:
- dependency-name: types-ldap3
  dependency-version: 2.9.13.20251121
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 21:23:24 +01:00
dependabot[bot]
937736ac5e core: bump pytest from 8.3.5 to 9.0.2 (#19425) 
Bumps [pytest](https://github.com/pytest-dev/pytest) from 8.3.5 to 9.0.2.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/8.3.5...9.0.2)

---
updated-dependencies:
- dependency-name: pytest
  dependency-version: 9.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 21:23:05 +01:00
dependabot[bot]
5f433b2623 core: bump aws-cdk-lib from 2.188.0 to 2.234.1 (#19427) 
Bumps [aws-cdk-lib](https://github.com/aws/aws-cdk) from 2.188.0 to 2.234.1.
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/compare/v2.188.0...v2.234.1)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.234.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 21:22:59 +01:00
dependabot[bot]
6a618688e0 core: bump django-pgtrigger from 4.15.2 to 4.17.0 (#19428) 
Bumps [django-pgtrigger](https://github.com/AmbitionEng/django-pgtrigger) from 4.15.2 to 4.17.0.
- [Release notes](https://github.com/AmbitionEng/django-pgtrigger/releases)
- [Changelog](https://github.com/AmbitionEng/django-pgtrigger/blob/main/CHANGELOG.md)
- [Commits](https://github.com/AmbitionEng/django-pgtrigger/compare/4.15.2...4.17.0)

---
updated-dependencies:
- dependency-name: django-pgtrigger
  dependency-version: 4.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 20:23:53 +01:00
dependabot[bot]
b43a7de434 core: bump django-stubs[compatible-mypy] from 5.2.5 to 5.2.8 (#19424) 
Bumps [django-stubs[compatible-mypy]](https://github.com/sponsors/typeddjango) from 5.2.5 to 5.2.8.
- [Commits](https://github.com/sponsors/typeddjango/commits)

---
updated-dependencies:
- dependency-name: django-stubs[compatible-mypy]
  dependency-version: 5.2.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 20:23:08 +01:00
dependabot[bot]
e8356cbc69 core: bump pyyaml from 6.0.2 to 6.0.3 (#19426) 
Bumps [pyyaml](https://github.com/yaml/pyyaml) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](https://github.com/yaml/pyyaml/compare/6.0.2...6.0.3)

---
updated-dependencies:
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 20:22:33 +01:00
dependabot[bot]
6ff625cd4d core: bump bandit from 1.8.3 to 1.9.2 (#19422) 
Bumps [bandit](https://github.com/PyCQA/bandit) from 1.8.3 to 1.9.2.
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](https://github.com/PyCQA/bandit/compare/1.8.3...1.9.2)

---
updated-dependencies:
- dependency-name: bandit
  dependency-version: 1.9.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 20:22:23 +01:00
dependabot[bot]
2a625eed2d core: bump freezegun from 1.5.1 to 1.5.5 (#19423) 
Bumps [freezegun](https://github.com/spulec/freezegun) from 1.5.1 to 1.5.5.
- [Release notes](https://github.com/spulec/freezegun/releases)
- [Changelog](https://github.com/spulec/freezegun/blob/master/CHANGELOG)
- [Commits](https://github.com/spulec/freezegun/compare/1.5.1...1.5.5)

---
updated-dependencies:
- dependency-name: freezegun
  dependency-version: 1.5.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 20:22:19 +01:00
Ken Sternberg
4a3555806c web/startup: deprecated theme names break theming (#19431) 
* web: Add InvalidationFlow to Radius Provider dialogues

## What

- Bugfix: adds the InvalidationFlow to the Radius Provider dialogues
  - Repairs: `{"invalidation_flow":["This field is required."]}` message, which was *not* propagated
    to the Notification.
- Nitpick: Pretties `?foo=${true}` expressions: `s/\?([^=]+)=\$\{true\}/\1/`

## Note

Yes, I know I'm going to have to do more magic when we harmonize the forms, and no, I didn't add the
Property Mappings to the wizard, and yes, I know I'm going to have pain with the *new* version of
the wizard. But this is a serious bug; you can't make Radius servers with *either* of the current
dialogues at the moment.

* This (temporary) change is needed to prevent the unit tests from failing.

\# What

\# Why

\# How

\# Designs

\# Test Steps

\# Other Notes

* Revert "This (temporary) change is needed to prevent the unit tests from failing."

This reverts commit dddde09be5.

* website: fix bad escaping of URLs in release notes

## What

Fixes bad escaping of URLs in the release notes that resulted in mangled output.

v2024.6.4 had entries that looked like this:

```
##### `GET` /providers/google_workspace/{#123;id}#125;/
```

v2025.4.md had entries that looked like this:

```
##### `GET` /policies/unique_password/{#125;#123;policy_uuid}/
```

A couple of straightforward search-and-replaces has fixed the issue.

## Notes

Two of the release notes had bad escaping of URLs. I'm not sure how the error was made or got past,
but it was obvious when visiting the page.

@Beryju suggested that the bug is due to our using `{...}` to symbolize parameters in a URL while
Docusaurus wants to interpret `{...}` as an internal template instruction, resulting in odd
behavior. In either case, docusarus interpreted the hashtagged entries as links to unrelated issues
in Github (the same two issues, which were "bump version of pylint" and "bump version of sentry"),
which could be very confusing.

The inconsistencies between the two releases, and the working releases, suggests that the error was
introduced manually.

* web: fix early theme identification

# What

Upon initial load of the HTML, even before the Javascript VM has started loading the admin interface, check if the user has a theme name in localstorage and validate it before proceeding.

# Issue

[Leftover localStorage.theme breaks UI after update to 2025.12.0](https://github.com/goauthentik/authentik/issues/19387)

Reported: 2025-01-13 By: Github user @WIPocket

# Why

We’ve changed our theme names to the more customary “light” and “dark”; older installs may have our earlier keys, “light-theme” or “dark-theme”, and those can break the read, resulting in the theme not being loaded at all.
 2026-01-14 20:20:43 +01:00
dependabot[bot]
5014dea495 core: bump importlib-metadata from 8.6.1 to 8.7.1 (#19430) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 15:59:45 +00:00
dependabot[bot]
79329feea6 core: bump geoip2 from 5.1.0 to 5.2.0 (#19429) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 15:58:10 +00:00
dependabot[bot]
8c217b5b6c core: bump debugpy from 1.8.14 to 1.8.19 (#19414) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 15:07:40 +00:00
Marc 'risson' Schmitt
c81f6c5b6f core: remove session migration (#14568) 2026-01-14 15:06:00 +00:00
Simonyi Gergő
68e982b536 website/docs: add 2026.2 release notes draft page (#19418) 
Any PR should include a note here if it's relevant enough.
 2026-01-14 16:04:36 +01:00
dependabot[bot]
7110a9027c core: bump wsproto from 1.2.0 to 1.3.2 (#19417) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-14 14:53:08 +00:00