Github/authentik
1
0
Fork 0
mirror of https://github.com/goauthentik/authentik.git synced 2026-08-30 18:51:39 -07:00
Code Issues Packages Projects Releases Wiki Activity
23,853 Commits 422 Branches 462 Tags
dominic/wg-integr
Commit Graph

23853 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Dominic R
cc1dd69527 website/integrations: add wg-easy 2026-08-27 16:46:21 -04:00
Marcelo Elizeche Landó
8890ee26ce website/docs: expand hardening docs (#25200) 
* expand hardening recommendations

* soften wording

* verify claims

* simplify wording and reorder

* make claims more accurate

* remove bad advice

* improve wording, add propmts endpoint

* remove incorrect claim

* improve wording and remove incorrect claim

* implement review fixes

* better wording, remove cookie rec

* improve wording, remove update rec

* Apply suggestions from code review

Co-authored-by: Simonyi Gergő <28359278+gergosimonyi@users.noreply.github.com>
Signed-off-by: Marcelo Elizeche Landó <marce@melizeche.com>

* wip

* Update website/docs/security/security-hardening.mdx

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>

---------

Signed-off-by: Marcelo Elizeche Landó <marce@melizeche.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Simonyi Gergő <28359278+gergosimonyi@users.noreply.github.com>
Co-authored-by: Dominic R <dominic@goauthentik.io>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
 2026-08-27 11:35:40 -03:00
authentik-automation[bot]
c42eb839c3 core, web: update translations (#25528) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-08-27 09:26:51 +02:00
dependabot[bot]
ef935ba13b ci: bump taiki-e/install-action from 2.86.6 to 2.86.7 in /.github/actions/setup (#25534) 
ci: bump taiki-e/install-action in /.github/actions/setup

Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.86.6 to 2.86.7.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](6cd1350889...b6ff580856)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.86.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-27 09:18:05 +02:00
Teffen Ellis
9bd8fab3de web: Fix imports when in compatibility mode. (#25526) 2026-08-27 02:30:03 +01:00
Jens L.
95e758670a ci: bump golangci lint (#25513) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2026-08-26 20:06:45 +01:00
Teffen Ellis
2e4bcf8b30 web/admin/stages: use ak-text-input for stage name field (#23865) 
* web: Tidy form explainer, formatting.

* web/admin/stages: use ak-text-input for stage name field

Replace the hand-rolled ak-form-element-horizontal + input name field
with the shared ak-text-input component across the stage forms, and give
the label and placeholder shared message IDs (stage.name.*).

Co-Authored-By: Playpen Agent <279763771+playpen-agent@users.noreply.github.com>

---------

Co-authored-by: Playpen Agent <279763771+playpen-agent@users.noreply.github.com>
 2026-08-26 16:50:45 +00:00
Jens L.
f7445f2d33 crypto: don't dispatch discovery if one is queued (#25483) 
* cryto: don't dispatch discovery if one is queued

* Update tasks.py

Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
Signed-off-by: Jens L. <jens@beryju.org>

* lint

Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>

---------

Signed-off-by: Jens L. <jens@beryju.org>
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
 2026-08-26 15:49:06 +01:00
tfahn
91bdd653cc server/core: relay negotiated websocket subprotocol and stop offering extensions upstream (#25487) 
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
 2026-08-26 16:39:35 +02:00
Teffen Ellis
64b0567fbe web: bump package lock (#25505) 2026-08-26 13:51:27 +00:00
Emil Burzo
91ffd11d70 core: bump goauthentik/fips-debian from f18dbc4 to ed780d in /lifecycle/container (#25503) 
core: bump goauthentik/fips-python from f18dbc4 to ed780d in /lifecycle/container
 2026-08-26 13:46:13 +00:00
Emil Burzo
9ed05cdab4 core: bump goauthentik/fips-python from 6abe1b to 3ebb7c in /lifecycle/container (#25504) 
core: bump goauthentik/fips-debian from 6abe1b to 3ebb7c in /lifecycle/container
 2026-08-26 13:40:06 +00:00
Severin Schoepke
4d1069f545 website/docs: document ak_call_policy gotchas (#25461) 
* website/docs: document ak_call_policy error handling and context mutation

* chore: remove the context override warning since it is fixed in a separate PR

---------

Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
 2026-08-26 12:44:21 +00:00
Dominic Roy
65c77dca29 website/plugins: add mdx-only (#25480) 
* website/plugins: add mdx-only

Followup to migration PR

* agents
 2026-08-26 12:20:52 +00:00
authentik-automation[bot]
f66b657ae0 core, web: update translations (#25488) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
 2026-08-26 11:40:27 +01:00
dependabot[bot]
9918888b3e core: bump types-docker from 7.2.0.20260813 to 7.2.0.20260819 in the types group (#25489) 
core: bump types-docker in the types group

Bumps the types group with 1 update: [types-docker](https://github.com/python/typeshed).


Updates `types-docker` from 7.2.0.20260813 to 7.2.0.20260819
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: types-docker
  dependency-version: 7.2.0.20260819
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: types
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-26 11:40:15 +01:00
dependabot[bot]
fe43e428c7 core: bump gunicorn from 26.0.0 to 26.1.0 (#25490) 
Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 26.0.0 to 26.1.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/26.0.0...26.1.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 26.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-26 11:40:04 +01:00
dependabot[bot]
90e7fc9689 ci: bump regclient/actions/regctl-login from 78eb729dbdb4ef6480e85ff697b4410e22112583 to f9ceff9bbbc63cd1008e60cec2b27627eedc7322 (#25492) 
ci: bump regclient/actions/regctl-login

Bumps [regclient/actions/regctl-login](https://github.com/regclient/actions) from 78eb729dbdb4ef6480e85ff697b4410e22112583 to f9ceff9bbbc63cd1008e60cec2b27627eedc7322.
- [Release notes](https://github.com/regclient/actions/releases)
- [Changelog](https://github.com/regclient/actions/blob/main/RELEASE.md)
- [Commits](78eb729dbd...f9ceff9bbb)

---
updated-dependencies:
- dependency-name: regclient/actions/regctl-login
  dependency-version: f9ceff9bbbc63cd1008e60cec2b27627eedc7322
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-26 11:39:52 +01:00
dependabot[bot]
47e7852f11 ci: bump regclient/actions/regctl-installer from 78eb729dbdb4ef6480e85ff697b4410e22112583 to f9ceff9bbbc63cd1008e60cec2b27627eedc7322 (#25493) 
ci: bump regclient/actions/regctl-installer

Bumps [regclient/actions/regctl-installer](https://github.com/regclient/actions) from 78eb729dbdb4ef6480e85ff697b4410e22112583 to f9ceff9bbbc63cd1008e60cec2b27627eedc7322.
- [Release notes](https://github.com/regclient/actions/releases)
- [Changelog](https://github.com/regclient/actions/blob/main/RELEASE.md)
- [Commits](78eb729dbd...f9ceff9bbb)

---
updated-dependencies:
- dependency-name: regclient/actions/regctl-installer
  dependency-version: f9ceff9bbbc63cd1008e60cec2b27627eedc7322
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-26 11:39:44 +01:00
dependabot[bot]
833c38f38a ci: bump taiki-e/install-action from 2.86.5 to 2.86.6 in /.github/actions/setup (#25494) 
ci: bump taiki-e/install-action in /.github/actions/setup

Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.86.5 to 2.86.6.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](ba47c86ac3...6cd1350889)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.86.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-26 11:39:28 +01:00
dependabot[bot]
f29a60e101 core: bump cryptography from 50.0.0 to 50.0.1 (#25491) 
Bumps [cryptography](https://github.com/pyca/cryptography) from 50.0.0 to 50.0.1.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/50.0.0...50.0.1)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 50.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-26 11:37:33 +01:00
Ryan Pesek
bbe12d05d8 stages/identification: dynamic captcha keys when stage embedded in identification stage (#24079) 
support dynamic captcha keys when embedded in identification stage

Co-authored-by: Jens L. <jens@goauthentik.io>
 2026-08-26 10:23:01 +00:00
Abhishek Sharma
b2a50acfb4 website/docs: show how to handle an object-shaped groups claim (#25396) 
* website/docs: show how to handle an object-shaped `groups` claim

#25208 made an unusable group identifier a skip rather than an HTTP 500,
and documented that entries which are not simple values are dropped. It
did not say what an affected operator should do instead, so the docs
stop at describing the loss.

@rissson's point on #25396 is the right one: there is no standard for
what a `groups` claim contains, so authentik should not guess at it, and
the extension point for this is property mappings. That works today — a
user property mapping runs before the identifiers are read, so it can
reduce object entries itself.

Documents both halves of the recipe: reducing entries to identifiers in a
user property mapping, and recovering the provider's own group names in a
group property mapping, which receives `group_id` alongside the claim.

Both snippets were run against a source with an object-shaped claim
before being written down:

  input:  [{"id": "g1", "name": "Admins"},
           {"value": "g2", "display": "Devs"},
           "plain"]
  result: {"g1": {"name": "Admins"}, "g2": {"name": "Devs"},
           "plain": {"name": "plain"}}

covering the `id`/`name` and SCIM `value`/`display` shapes and leaving a
plain string entry untouched.

* Update index.md

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>

* Update website/docs/users-sources/sources/property-mappings/index.md

Co-authored-by: Dominic Roy <dominic@goauthentik.io>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>

---------

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Dominic Roy <dominic@goauthentik.io>
 2026-08-25 18:39:55 +00:00
Dominic Roy
15aa5e86a9 website: mdx (#25246) 
* website: mdx

* oh right

* fixup
 2026-08-25 15:50:06 +00:00
Teffen Ellis
3fb3e3e0a3 web: Fix Sentry Initialization (#25450) 
web: let the error-reporting setting govern Sentry in production

`init({ enabled: process.env.NODE_ENV !== "production" })` disabled the
SDK in exactly the builds that ship: the container's web stage sets
`NODE_ENV=production` (lifecycle/container/Dockerfile), and the bundler
inlines it. An administrator who turned error reporting on in their
config therefore received nothing, while `browserTracingIntegration` was
registered only in production — the opposite polarity — so development
had the SDK on with no tracing integration behind it.

Consolidates the decision into `sentryEnabled(cfg, debug)`:

- The administrator's `errorReporting.enabled` decides, in every
  environment; `CanDebug` still forces it on.
- Development additionally honors `?disable-sentry`, so a noisy local
  session can opt out for one load without a rebuild.
- The tracing integration is registered whenever the SDK runs. It has
  always been configured with the automatic instrumentation off, since
  the router opens the spans itself.

`enabled: true` stays on the `init` call so the decision is readable off
the client, which is how the router outlets gate their spans.

Tidy.
 2026-08-25 16:22:56 +01:00
Marc 'risson' Schmitt
63026fa791 outpost/event: fix websocket connection with AUTHENTIK_INSECURE=true (#25472) 
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
 2026-08-25 16:03:11 +02:00
Dominic Roy
2172b4e9e5 website/integrations: add cml (#25402) 
* website/integrations: add cml

* oops

* huh copilot is useful maybe? (#25405)

Added instructions for configuring LDAPS and creating LDAP outposts, including certificate generation and resource pool assignment.

Signed-off-by: Henry <166068791+KingHenry6666@users.noreply.github.com>

* ldap group fix (#25407)

i completely forgot about this

Signed-off-by: Henry <166068791+KingHenry6666@users.noreply.github.com>

* cleanip

---------

Signed-off-by: Henry <166068791+KingHenry6666@users.noreply.github.com>
Co-authored-by: Henry <166068791+KingHenry6666@users.noreply.github.com>
 2026-08-25 14:33:54 +01:00
Dominic Roy
7a2c67a510 website/integrations: add nutanix-ahv (#25403) 
* website/integrations: add nutanix-ahv

* oops

* wip
 2026-08-25 13:31:23 +00:00
Jens L.
378a7c6c69 lib/expression: fix policy request context pollution (#25462) 2026-08-25 13:33:51 +01:00
authentik-automation[bot]
b8c989e516 core, web: update translations (#25452) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
 2026-08-25 14:30:42 +02:00
Dominic Roy
8b94143de9 website/integrations: add vcf9 (#25404) 
* website/integrations: add vcf9

* cleanup

* Update website/integrations/hypervisors-orchestrators/vmware-cloud-foundation/index.mdx

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>

---------

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
 2026-08-25 12:25:47 +00:00
Anslem
939631bbd5 lib/expression: use literal fallback in ak_obj_attr (#25414) 
* fix: use literal fallback in ak_obj_attr

* fix: use literal fallback in ak_obj_attr

* fix check

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: ace2016 <ace2016@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
 2026-08-25 13:24:19 +01:00
Abhishek Sharma
9e4fffccf6 stages/authenticator_duo: return a descriptive error when the Duo API is unreachable (#24965) 
* stages/authenticator_duo: return a descriptive error when the Duo API is unreachable

`_duo_import_devices` caught only `RuntimeError`, but `duo_client` surfaces
transport failures as the underlying socket/TLS error. `SSLCertVerificationError`
is an `OSError`, not a `RuntimeError`, so a Duo endpoint behind an untrusted
certificate escaped the handler entirely and the request finished as a bare 405
with no actionable error.

`OSError` is also in `authentik.lib.sentry.ignored_classes`, so the exception was
dropped from error reporting too, leaving nothing to diagnose from.

Catch the transport failures explicitly and map them to the documented 400 with a
descriptive message, ordered narrowest-first since
SSLCertVerificationError < SSLError < OSError:

- certificate verification failure -> "TLS certificate verification failed."
- any other TLS failure            -> "TLS error."
- any other connection failure     -> "Failed to connect to Duo."

The messages stay categorical and do not echo exception text, keeping the
existing behaviour of not leaking internals to the API caller.

closes #22896

* translate

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
 2026-08-25 12:54:04 +01:00
dependabot[bot]
a3b6e1930e core: bump github.com/go-openapi/runtime from 0.33.0 to 0.33.1 (#25456) 
Bumps [github.com/go-openapi/runtime](https://github.com/go-openapi/runtime) from 0.33.0 to 0.33.1.
- [Release notes](https://github.com/go-openapi/runtime/releases)
- [Commits](https://github.com/go-openapi/runtime/compare/v0.33.0...v0.33.1)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/runtime
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 12:11:42 +01:00
dependabot[bot]
e07c65be1d core: bump axllent/mailpit from v1.30.7 to v1.31.0 in /tests/e2e (#25457) 
Bumps axllent/mailpit from v1.30.7 to v1.31.0.

---
updated-dependencies:
- dependency-name: axllent/mailpit
  dependency-version: v1.31.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 12:11:33 +01:00
dependabot[bot]
3f475cf5a0 web: bump the swc group across 2 directories with 11 updates (#25460) 
Bumps the swc group with 11 updates in the /web directory:

| Package | From | To |
| --- | --- | --- |
| [@swc/core](https://github.com/swc-project/swc/tree/HEAD/packages/core) | `1.16.0` | `1.16.1` |
| [@swc/core-darwin-arm64](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |
| [@swc/core-darwin-x64](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |
| [@swc/core-linux-arm-gnueabihf](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |
| [@swc/core-linux-arm64-gnu](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |
| [@swc/core-linux-arm64-musl](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |
| [@swc/core-linux-x64-gnu](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |
| [@swc/core-linux-x64-musl](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |
| [@swc/core-win32-arm64-msvc](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |
| [@swc/core-win32-ia32-msvc](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |
| [@swc/core-win32-x64-msvc](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |

Bumps the swc group with 11 updates in the /web/packages/sfe directory:

| Package | From | To |
| --- | --- | --- |
| [@swc/core](https://github.com/swc-project/swc/tree/HEAD/packages/core) | `1.16.0` | `1.16.1` |
| [@swc/core-darwin-arm64](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |
| [@swc/core-darwin-x64](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |
| [@swc/core-linux-arm-gnueabihf](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |
| [@swc/core-linux-arm64-gnu](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |
| [@swc/core-linux-arm64-musl](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |
| [@swc/core-linux-x64-gnu](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |
| [@swc/core-linux-x64-musl](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |
| [@swc/core-win32-arm64-msvc](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |
| [@swc/core-win32-ia32-msvc](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |
| [@swc/core-win32-x64-msvc](https://github.com/swc-project/swc) | `1.16.0` | `1.16.1` |



Updates `@swc/core` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/commits/v1.16.1/packages/core)

Updates `@swc/core-darwin-arm64` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

Updates `@swc/core-darwin-x64` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

Updates `@swc/core-linux-arm-gnueabihf` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

Updates `@swc/core-linux-arm64-gnu` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

Updates `@swc/core-linux-arm64-musl` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

Updates `@swc/core-linux-x64-gnu` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

Updates `@swc/core-linux-x64-musl` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

Updates `@swc/core-win32-arm64-msvc` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

Updates `@swc/core-win32-ia32-msvc` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

Updates `@swc/core-win32-x64-msvc` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

Updates `@swc/core` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/commits/v1.16.1/packages/core)

Updates `@swc/core-darwin-arm64` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

Updates `@swc/core-darwin-x64` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

Updates `@swc/core-linux-arm-gnueabihf` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

Updates `@swc/core-linux-arm64-gnu` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

Updates `@swc/core-linux-arm64-musl` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

Updates `@swc/core-linux-x64-gnu` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

Updates `@swc/core-linux-x64-musl` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

Updates `@swc/core-win32-arm64-msvc` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

Updates `@swc/core-win32-ia32-msvc` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

Updates `@swc/core-win32-x64-msvc` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.16.0...v1.16.1)

---
updated-dependencies:
- dependency-name: "@swc/core"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-darwin-arm64"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-darwin-x64"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-linux-arm-gnueabihf"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-linux-arm64-gnu"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-linux-arm64-musl"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-linux-x64-gnu"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-linux-x64-musl"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-win32-arm64-msvc"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-win32-ia32-msvc"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-win32-x64-msvc"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-darwin-arm64"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-darwin-x64"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-linux-arm-gnueabihf"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-linux-arm64-gnu"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-linux-arm64-musl"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-linux-x64-gnu"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-linux-x64-musl"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-win32-arm64-msvc"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-win32-ia32-msvc"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
- dependency-name: "@swc/core-win32-x64-msvc"
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: swc
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 12:11:19 +01:00
dependabot[bot]
2362577af3 ci: bump re-actors/alls-green from 1.2.2 to 1.3.0 (#25459) 
Bumps [re-actors/alls-green](https://github.com/re-actors/alls-green) from 1.2.2 to 1.3.0.
- [Release notes](https://github.com/re-actors/alls-green/releases)
- [Commits](05ac9388f0...b5b5b37504)

---
updated-dependencies:
- dependency-name: re-actors/alls-green
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 12:11:09 +01:00
Dominic Roy
1a6df82afe website/integrations: add buildbuddy (#25455) 
:wq
 2026-08-25 09:51:11 +01:00
Teffen Ellis
e964e54522 web: Fix issues surrounding text field focus behavior. (#25159) 2026-08-24 15:15:00 -07:00
kxtzownsu
1b0675a6b1 website/docs: use new compose.yml file name (#25446) 
The file is now `compose.yml` rather than `docker-compose.yml` as of commit 646a0d3692

Signed-off-by: kxtzownsu <kxtzownsu@gmail.com>
 2026-08-24 21:55:52 +00:00
Teffen Ellis
220eb26e5f web: MDX without React (#21949) 
* packages/theme: add the @goauthentik/theme design-system package (#23341)

* packages/fonts: add @goauthentik/fonts package

Extract the bundled web fonts out of web/ into a dedicated
@goauthentik/fonts workspace package: the RedHat variable faces, the
PatternFly pficon icon face, and the FontAwesome Free solid face, each
with its upstream license recorded under licenses/.

web/ now pulls the faces and icons from the package's
@goauthentik/fonts/faces.css and @goauthentik/fonts/icons.css entry
points instead of the old #fonts/* import and the inlined pficon.scss
vendor sheet.

Anchor esbuild's [dir] at the monorepo root via outbase so assets pulled
from the out-of-web package no longer resolve to a "_.._" segment, which
Go's //go:embed silently drops from the embedded outpost build.

Co-Authored-By: Ken Sternberg <ken@goauthentik.io>

* packages/theme: add @goauthentik/theme design-system package

Add @goauthentik/theme, which defines authentik's design tokens (color,
typography, fonts, spacing, shape, shadow, motion, z-index) in TypeScript
and builds them into CSS via styleframe.

Token names carry a distinct separator per category so the token type is
recoverable from the name alone. That is worth the verbosity: it keeps
the DX legible and leaves room for automatic theme management and future
tooling built on top of the token set.

Co-Authored-By: Ken Sternberg <ken@goauthentik.io>

* web/theme: add a demo page for the theme tokens

Add a self-contained demo page, built by build-demo.mjs, that renders
every theme token — colors, typography, spacing, shape, shadow, motion —
so the design system can be eyeballed in isolation while it evolves.

Co-Authored-By: Ken Sternberg <ken@goauthentik.io>

* Heal lockfile.

* Fix spelling.

* Fix grouping.

---------

Co-authored-by: Ken Sternberg <ken@goauthentik.io>

* web/elements/ak-mdx: drop React + runtime MDX eval, use unified pipeline

Replace `@mdx-js/mdx`'s `evaluate`/`run` (which depends on `'unsafe-eval'`
in the page CSP) with a pure `unified`/remark/rehype pipeline. URL-mode
content now arrives from the build-time `mdx-plugin` as pre-rendered HTML
and is stamped through a Trusted Types passthrough policy
(`CompiledMarkdownTrustPolicy`) so admin-side custom elements like
`<ak-alert>` and `<ak-md-a>` survive. Content-mode (admin-supplied
markdown) is compiled in-browser via `compileRuntimeMarkdown` and routed
through the existing `BrandedHTMLPolicy` (DOMPurify).

`<ak-md-a>` replaces the React `MDXAnchor`/`MDXWrapper` pair: a tiny Lit
custom element with `display: contents` that intercepts in-doc fragment
clicks for shadow-root scrolling. The remark plugins gain `caution` and
`tip` admonition types and promote `:::name[Title]` directive labels to
`<strong>`. `one-dark.css` learns `:host` so syntax-highlighted code
blocks inherit the palette inside `<ak-mdx>`'s shadow tree.

Removes `@mdx-js/mdx`, `react`, `react-dom`, `rehype-mermaid`, and
`remark-mdx-frontmatter`. Adds `unified`, `remark-parse`, `remark-rehype`,
and `mdast-util-to-string`.

Co-Authored-By: Agent <279763771+playpen-agent@users.noreply.github.com>

* web/bundler/mdx-plugin: pre-render markdown to HTML at build time

Compile each `.md` / `.mdx` file through a build-time `unified` pipeline
(remark-parse, GFM, frontmatter, directives, custom admonition/headings/
lists transforms; rehype-rehype, anchor wrapping, syntax highlighting,
mermaid extraction) and emit a JSON envelope of
`{ content: HTML, frontmatter, publicPath, publicDirectory }`. The
on-load result still ships via the `file` loader so the runtime side
keeps its existing fetch path. The compiled HTML uses `<ak-md-a>` and
`<ak-alert>` custom elements so `<ak-mdx>` can stamp it directly into
shadow DOM with no client-side JavaScript evaluation.

Plugin is split across four sibling files (`node.js`, `compile.js`,
`remark.js`, `rehype.js`) so each concern lives in its own module. The
title/wrapper HTML is built as a hast tree and serialized through
`hast-util-to-html` rather than string-concatenated, dropping the
hand-rolled `escapeHTML` helper and unifying escape semantics with the
rest of the document.

Co-Authored-By: Agent <279763771+playpen-agent@users.noreply.github.com>

* web/test: e2e ak-mdx pipeline via OAuth2 provider docs

The OAuth2 provider docs page exercises the full pipeline in one place:
frontmatter title, multiple H2 slugs, `:::caution`/`:::info` admonitions
(with and without titles), relative-doc links, external links, and an
embedded mermaid sequence diagram. Tests boot the admin UI, provision a
fresh OAuth2 provider, navigate to its view page, and assert against the
compiled DOM inside `<ak-mdx>`'s shadow root.

Co-Authored-By: Agent <279763771+playpen-agent@users.noreply.github.com>

* web/elements/ak-mdx: sanitize replacer output, note pipeline drift

Address PR review feedback on the URL-mode trust boundary. `<ak-mdx>`'s
`replacers` hook runs over pre-rendered build-time HTML before it is
stamped into the DOM, and consumers (e.g. `ProxyProviderViewPage`) splice
admin-controlled values such as `provider.externalHost` into it. The old
React pipeline ran replacers on raw markdown that was then compiled, so
those values were HTML-escaped on serialization; the new URL mode passed
the post-replacer HTML straight through, dropping that guarantee.

Replace the passthrough `CompiledMarkdownTrustPolicy` with
`CompiledMarkdownSanitizePolicy`: a DOMPurify policy that whitelists the
custom elements (`<ak-alert>`, `<ak-md-a>`, `<ak-diagram>`) and the
`part`/`level` attributes our pipeline emits, and strips anything else a
replacer could inject.

Also add a reciprocal drift note to the runtime `markdown.ts` pointing at
`bundler/mdx-plugin/`, mirroring the existing note on the bundler side.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* Fix anchor slugification.

* Spellcheck.

---------

Co-authored-by: Ken Sternberg <ken@goauthentik.io>
Co-authored-by: Agent <279763771+playpen-agent@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-08-24 22:55:37 +01:00
Dewi Roberts
c2279e175e root: add sponsor link (#25227) 
Update FUNDING.yml

Add github sponsor link

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
 2026-08-24 17:38:27 +01:00
Connor Peshek
e937922ffe providers/saml: remove redundant backchannel logout call (#25086) 2026-08-24 10:47:54 -05:00
Connor Peshek
9a74660ccb admin/events: Allow selecting public cert only on transport form verification (#24771) 2026-08-24 16:42:07 +01:00
yzxcj797
0b46c6c0e5 packages/ak-axum: extract the rightmost untrusted IP from X-Forwarded-For (#25397) 
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
 2026-08-24 14:24:18 +00:00
Marc 'risson' Schmitt
a467953e39 outpost/proxy: avoid breaking header parsing in non-compliant backends (#25439) 
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
 2026-08-24 15:13:09 +02:00
Natalie Landsberg
a65f481cd6 core: fix Provider serializer optional fields (#20289) 
core/api: fix Provider serializer optional fields

Fixes #9787

The assigned_backchannel_application_slug and assigned_backchannel_application_name
fields in the Provider serializer were causing Pydantic validation errors in the
Python client when these fields returned None values.

Added required=False to these ReadOnlyField definitions to correctly mark them
as optional in the OpenAPI schema, allowing the Python client to handle None values.

Also applied the same fix to assigned_application_slug and assigned_application_name
for consistency.

Co-authored-by: Natalie Landsberg <natalie.landsberg@ericsson.com>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
 2026-08-24 12:33:09 +00:00
dependabot[bot]
61d4bf80c8 web: bump the storybook group across 1 directory with 5 updates (#25433) 
Bumps the storybook group with 5 updates in the /web directory:

| Package | From | To |
| --- | --- | --- |
| [@storybook/addon-docs](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/docs) | `10.5.8` | `10.5.10` |
| [@storybook/addon-links](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/links) | `10.5.8` | `10.5.10` |
| [@storybook/web-components](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/web-components) | `10.5.8` | `10.5.10` |
| [@storybook/web-components-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/web-components-vite) | `10.5.8` | `10.5.10` |
| [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `10.5.8` | `10.5.10` |



Updates `@storybook/addon-docs` from 10.5.8 to 10.5.10
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.10/code/addons/docs)

Updates `@storybook/addon-links` from 10.5.8 to 10.5.10
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.10/code/addons/links)

Updates `@storybook/web-components` from 10.5.8 to 10.5.10
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.10/code/renderers/web-components)

Updates `@storybook/web-components-vite` from 10.5.8 to 10.5.10
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.10/code/frameworks/web-components-vite)

Updates `storybook` from 10.5.8 to 10.5.10
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.10/code/core)

---
updated-dependencies:
- dependency-name: "@storybook/addon-docs"
  dependency-version: 10.5.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: storybook
- dependency-name: "@storybook/addon-links"
  dependency-version: 10.5.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: storybook
- dependency-name: "@storybook/web-components"
  dependency-version: 10.5.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: storybook
- dependency-name: "@storybook/web-components-vite"
  dependency-version: 10.5.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: storybook
- dependency-name: storybook
  dependency-version: 10.5.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: storybook
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-24 10:53:43 +01:00
dependabot[bot]
6e3941d5ec web: bump the swc group across 2 directories with 11 updates (#25435) 
Bumps the swc group with 11 updates in the /web directory:

| Package | From | To |
| --- | --- | --- |
| [@swc/core](https://github.com/swc-project/swc/tree/HEAD/packages/core) | `1.15.47` | `1.16.0` |
| [@swc/core-darwin-arm64](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |
| [@swc/core-darwin-x64](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |
| [@swc/core-linux-arm-gnueabihf](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |
| [@swc/core-linux-arm64-gnu](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |
| [@swc/core-linux-arm64-musl](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |
| [@swc/core-linux-x64-gnu](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |
| [@swc/core-linux-x64-musl](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |
| [@swc/core-win32-arm64-msvc](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |
| [@swc/core-win32-ia32-msvc](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |
| [@swc/core-win32-x64-msvc](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |

Bumps the swc group with 11 updates in the /web/packages/sfe directory:

| Package | From | To |
| --- | --- | --- |
| [@swc/core](https://github.com/swc-project/swc/tree/HEAD/packages/core) | `1.15.47` | `1.16.0` |
| [@swc/core-darwin-arm64](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |
| [@swc/core-darwin-x64](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |
| [@swc/core-linux-arm-gnueabihf](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |
| [@swc/core-linux-arm64-gnu](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |
| [@swc/core-linux-arm64-musl](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |
| [@swc/core-linux-x64-gnu](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |
| [@swc/core-linux-x64-musl](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |
| [@swc/core-win32-arm64-msvc](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |
| [@swc/core-win32-ia32-msvc](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |
| [@swc/core-win32-x64-msvc](https://github.com/swc-project/swc) | `1.15.47` | `1.16.0` |



Updates `@swc/core` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/commits/v1.16.0/packages/core)

Updates `@swc/core-darwin-arm64` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

Updates `@swc/core-darwin-x64` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

Updates `@swc/core-linux-arm-gnueabihf` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

Updates `@swc/core-linux-arm64-gnu` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

Updates `@swc/core-linux-arm64-musl` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

Updates `@swc/core-linux-x64-gnu` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

Updates `@swc/core-linux-x64-musl` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

Updates `@swc/core-win32-arm64-msvc` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

Updates `@swc/core-win32-ia32-msvc` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

Updates `@swc/core-win32-x64-msvc` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

Updates `@swc/core` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/commits/v1.16.0/packages/core)

Updates `@swc/core-darwin-arm64` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

Updates `@swc/core-darwin-x64` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

Updates `@swc/core-linux-arm-gnueabihf` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

Updates `@swc/core-linux-arm64-gnu` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

Updates `@swc/core-linux-arm64-musl` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

Updates `@swc/core-linux-x64-gnu` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

Updates `@swc/core-linux-x64-musl` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

Updates `@swc/core-win32-arm64-msvc` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

Updates `@swc/core-win32-ia32-msvc` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

Updates `@swc/core-win32-x64-msvc` from 1.15.47 to 1.16.0
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/compare/v1.15.47...v1.16.0)

---
updated-dependencies:
- dependency-name: "@swc/core"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-darwin-arm64"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-darwin-x64"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-linux-arm-gnueabihf"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-linux-arm64-gnu"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-linux-arm64-musl"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-linux-x64-gnu"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-linux-x64-musl"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-win32-arm64-msvc"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-win32-ia32-msvc"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-win32-x64-msvc"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-darwin-arm64"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-darwin-x64"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-linux-arm-gnueabihf"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-linux-arm64-gnu"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-linux-arm64-musl"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-linux-x64-gnu"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-linux-x64-musl"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-win32-arm64-msvc"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-win32-ia32-msvc"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
- dependency-name: "@swc/core-win32-x64-msvc"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: swc
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-24 10:53:12 +01:00
dependabot[bot]
9308797c1b core: bump ruff from 0.16.3 to 0.16.4 (#25428) 
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.16.3 to 0.16.4.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.16.3...0.16.4)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.16.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-24 07:11:25 +02:00