release: 2025.8.0-rc5

root: fix custom packages installation in docker (cherry-pick #16157 ) (#16158 )
release: 2025.8.0-rc4
2026-05-05 22:52:42 +02:00 · 2025-08-13 00:21:34 +00:00 · 2025-08-13 02:08:56 +02:00 · 2025-08-12 22:26:57 +00:00 · 2025-08-13 00:20:52 +02:00 · 2025-08-12 21:49:51 +00:00
15 changed files with 25 additions and 19 deletions
--- a/.github/actions/docker-push-variables/push_vars.py
+++ b/.github/actions/docker-push-variables/push_vars.py
@@ -1,10 +1,11 @@
 """Helper script to get the actual branch name, docker safe"""

 import os
-from importlib.metadata import version as package_version
 from json import dumps
 from time import time

+from authentik import authentik_version
+
 # Decide if we should push the image or not
 should_push = True
 if len(os.environ.get("DOCKER_USERNAME", "")) < 1:
@@ -28,7 +29,7 @@ is_release = "dev" not in image_names[0]
 sha = os.environ["GITHUB_SHA"] if not is_pull_request else os.getenv("PR_HEAD_SHA")

 # 2042.1.0 or 2042.1.0-rc1
-version = package_version("authentik")
+version = authentik_version()
 # 2042.1
 version_family = ".".join(version.split("-", 1)[0].split(".")[:-1])
 prerelease = "-" in version
--- a/.github/workflows/release-publish.yml
+++ b/.github/workflows/release-publish.yml
@@ -10,6 +10,7 @@ jobs:
    uses: ./.github/workflows/_reusable-docker-build.yaml
    secrets: inherit
    permissions:
+      contents: read
      # Needed to upload container images to ghcr.io
      packages: write
      # Needed for attestation
@@ -23,6 +24,7 @@ jobs:
  build-docs:
    runs-on: ubuntu-latest
    permissions:
+      contents: read
      # Needed to upload container images to ghcr.io
      packages: write
      # Needed for attestation
@@ -66,6 +68,7 @@ jobs:
  build-outpost:
    runs-on: ubuntu-latest
    permissions:
+      contents: read
      # Needed to upload container images to ghcr.io
      packages: write
      # Needed for attestation
--- a/1
+++ b/1
@@ -175,6 +175,7 @@ COPY ./lifecycle/ /lifecycle
 COPY ./authentik/sources/kerberos/krb5.conf /etc/krb5.conf
 COPY --from=go-builder /go/authentik /bin/authentik
 COPY ./packages/ /ak-root/packages
+RUN  ln -s /ak-root/packages /packages
 COPY --from=python-deps /ak-root/.venv /ak-root/.venv
 COPY --from=node-builder /work/web/dist/ /web/dist/
 COPY --from=node-builder /work/web/authentik/ /web/authentik/
--- a/authentik/init.py
+++ b/authentik/init.py
@@ -3,7 +3,7 @@
 from functools import lru_cache
 from os import environ

-VERSION = "2025.8.0-rc1"
+VERSION = "2025.8.0-rc5"
 ENV_GIT_HASH_KEY = "GIT_BUILD_HASH"


--- a/blueprints/schema.json
+++ b/blueprints/schema.json
@@ -2,7 +2,7 @@
    "$schema": "http://json-schema.org/draft-07/schema",
    "$id": "https://goauthentik.io/blueprints/schema.json",
    "type": "object",
-    "title": "authentik 2025.8.0-rc1 Blueprint schema",
+    "title": "authentik 2025.8.0-rc5 Blueprint schema",
    "required": [
        "version",
        "entries"
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -48,7 +48,7 @@ services:
      AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
      AUTHENTIK_REDIS__HOST: redis
      AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:?secret key required}
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.8.0-rc1}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.8.0-rc5}
    ports:
    - ${COMPOSE_PORT_HTTP:-9000}:9000
    - ${COMPOSE_PORT_HTTPS:-9443}:9443
@@ -72,7 +72,7 @@ services:
      AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
      AUTHENTIK_REDIS__HOST: redis
      AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:?secret key required}
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.8.0-rc1}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.8.0-rc5}
    restart: unless-stopped
    user: root
    volumes:
--- a/internal/constants/VERSION
+++ b/internal/constants/VERSION
@@ -1 +1 @@
-2025.8.0-rc1
+2025.8.0-rc5
--- a/lifecycle/aws/template.yaml
+++ b/lifecycle/aws/template.yaml
@@ -26,7 +26,7 @@ Parameters:
    Description: authentik Docker image
  AuthentikVersion:
    Type: String
-    Default: 2025.8.0-rc1
+    Default: 2025.8.0-rc5
    Description: authentik Docker image tag
  AuthentikServerCPU:
    Type: Number
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
    "name": "@goauthentik/authentik",
-    "version": "2025.8.0-rc1",
+    "version": "2025.8.0-rc5",
    "lockfileVersion": 3,
    "requires": true,
    "packages": {
        "": {
            "name": "@goauthentik/authentik",
-            "version": "2025.8.0-rc1",
+            "version": "2025.8.0-rc5",
            "dependencies": {
                "@eslint/js": "^9.31.0",
                "@typescript-eslint/eslint-plugin": "^8.38.0",
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
    "name": "@goauthentik/authentik",
-    "version": "2025.8.0-rc1",
+    "version": "2025.8.0-rc5",
    "private": true,
    "type": "module",
    "dependencies": {
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "authentik"
-version = "2025.8.0-rc1"
+version = "2025.8.0-rc5"
 description = ""
 authors = [{ name = "authentik Team", email = "hello@goauthentik.io" }]
 requires-python = "==3.13.*"
--- a/schema.yml
+++ b/schema.yml
@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
  title: authentik
-  version: 2025.8.0-rc1
+  version: 2025.8.0-rc5
  description: Making authentication simple.
  contact:
    email: hello@goauthentik.io
@@ -6057,7 +6057,8 @@ paths:
  /core/users/{id}/recovery_email/:
    post:
      operationId: core_users_recovery_email_create
-      description: Send an email with a temporary link that a user can use to recover their account
+      description: Send an email with a temporary link that a user can use to recover
+        their account
      parameters:
      - in: query
        name: email_stage
--- a/uv.lock
+++ b/uv.lock
@@ -1,5 +1,5 @@
 version = 1
-revision = 2
+revision = 3
 requires-python = "==3.13.*"

 [manifest]
@@ -159,7 +159,7 @@ wheels = [

 [[package]]
 name = "authentik"
-version = "2025.8.0rc1"
+version = "2025.8.0rc5"
 source = { editable = "." }
 dependencies = [
    { name = "argon2-cffi" },
--- a/web/package-lock.json
+++ b/web/package-lock.json
@@ -1,12 +1,12 @@
 {
    "name": "@goauthentik/web",
-    "version": "2025.8.0-rc1",
+    "version": "2025.8.0-rc5",
    "lockfileVersion": 3,
    "requires": true,
    "packages": {
        "": {
            "name": "@goauthentik/web",
-            "version": "2025.8.0-rc1",
+            "version": "2025.8.0-rc5",
            "license": "MIT",
            "workspaces": [
                "./packages/*"
--- a/web/package.json
+++ b/web/package.json
@@ -1,6 +1,6 @@
 {
    "name": "@goauthentik/web",
-    "version": "2025.8.0-rc1",
+    "version": "2025.8.0-rc5",
    "license": "MIT",
    "private": true,
    "scripts": {
Author	SHA1	Message	Date
authentik-automation[bot]	e0fe99d0b8	release: 2025.8.0-rc5	2025-08-13 00:21:34 +00:00
Marc 'risson' Schmitt	c1acf53585	root: fix custom packages installation in docker (cherry-pick #16157 ) (#16158 )	2025-08-13 02:08:56 +02:00
authentik-automation[bot]	baf4eed0d9	release: 2025.8.0-rc4	2025-08-12 22:26:57 +00:00
Marc 'risson' Schmitt	60e1192a7a	ci: release publish: fix missing permissions (cherry-pick #16155 ) (#16156 )	2025-08-13 00:20:52 +02:00
authentik-automation[bot]	2608e02d6e	release: 2025.8.0-rc3	2025-08-12 21:49:51 +00:00
Marc 'risson' Schmitt	0a5928fbcb	ci: docker push: fix version missing dash (cherry-pick #16153 ) (#16154 )	2025-08-12 23:44:01 +02:00
authentik-automation[bot]	7b99b02b4a	release: 2025.8.0-rc2	2025-08-12 21:12:07 +00:00
Marc 'risson' Schmitt	dfeadc9ebe	root: fix custom packages installation in docker (cherry-pick #16150 ) (#16151 )	2025-08-12 23:08:40 +02:00
authentik-automation[bot]	7ff64fbd09	release: 2025.8.0-rc1	2025-08-12 20:31:40 +00:00