23866 Commits

Author SHA1 Message Date
Marc 'risson' Schmitt
54f4047f94 root: add AI policy to PR templates (#25240)
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2026-08-20 12:24:31 +00:00
Emil Burzo
9708d69543 root: update SECURITY.md supported versions (#25351) 2026-08-20 12:21:01 +00:00
cbmn1987
6d5f261a25 core/sources: reuse group property mapping manager across groups (#24699) 2026-08-20 14:19:59 +02:00
Jens L.
57c36af9cd ci: downgrade golangci to fix panic (#25354) 2026-08-20 12:43:09 +01:00
dependabot[bot]
91d6884f9f ci: bump docker/setup-buildx-action from 4.2.0 to 4.3.0 (#25346)
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](bb05f3f551...37fe631027)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-20 12:23:48 +01:00
dependabot[bot]
8c1f8752bb ci: bump taiki-e/install-action from 2.86.1 to 2.86.2 in /.github/actions/setup (#25347)
ci: bump taiki-e/install-action in /.github/actions/setup

Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.86.1 to 2.86.2.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](288e746965...b6b84cf49e)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.86.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-20 12:23:27 +01:00
dependabot[bot]
d5fb1e507d core: bump types-docker from 7.2.0.20260811 to 7.2.0.20260813 in the types group (#25343)
core: bump types-docker in the types group

Bumps the types group with 1 update: [types-docker](https://github.com/python/typeshed).


Updates `types-docker` from 7.2.0.20260811 to 7.2.0.20260813
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: types-docker
  dependency-version: 7.2.0.20260813
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: types
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-20 12:23:17 +01:00
dependabot[bot]
c41eff0d90 core: bump lxml from 6.1.1 to 6.1.2 (#25344)
Bumps [lxml](https://github.com/lxml/lxml) from 6.1.1 to 6.1.2.
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](https://github.com/lxml/lxml/compare/lxml-6.1.1...lxml-6.1.2)

---
updated-dependencies:
- dependency-name: lxml
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-20 12:14:51 +01:00
Dominic Roy
f719167003 web: keep sticky form actions below nav menus (#25336) 2026-08-20 05:46:39 +01:00
Jens L.
254d60c932 endpoints/connectors: fix integrity error when device with same name exists already (#25237)
* endpoints/connectors: fix integrity error when device with same name exists already

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fine, our own wrapper

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* sigh

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2026-08-19 20:27:10 +01:00
Jens L.
dbe716c270 core: declare authorization_flow and invalidation_flow as nullable in root provider list (#25243)
* core: declare authorization_flow and invalidation_flow as nullable in root provider list

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* format

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2026-08-19 19:47:08 +01:00
Marc 'risson' Schmitt
c92fd5b43c outpost/proxy: fix double host sent on token introspection (#25234)
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2026-08-19 18:31:57 +02:00
Simonyi Gergő
65dd9fcf54 core: add user type-active-username index (#25223)
add user type-active-username index

This is specifically aimed to help the enterprise license check, which
counts users by type and discards the anonymous user by username.
2026-08-19 18:03:34 +02:00
Dewi Roberts
10f5dc218a ci: flatten image merge output to prevent podman pull issues (#25231)
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
2026-08-19 16:05:53 +02:00
dependabot[bot]
4d5b19412e web: bump deepmerge-ts from 7.1.5 to 8.0.0 in /web (#25153)
Bumps [deepmerge-ts](https://github.com/RebeccaStevens/deepmerge-ts) from 7.1.5 to 8.0.0.
- [Changelog](https://github.com/RebeccaStevens/deepmerge-ts/blob/main/CHANGELOG.md)
- [Commits](https://github.com/RebeccaStevens/deepmerge-ts/compare/v7.1.5...v8.0.0)

---
updated-dependencies:
- dependency-name: deepmerge-ts
  dependency-version: 8.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens L. <jens@goauthentik.io>
2026-08-19 14:29:06 +01:00
dependabot[bot]
598be8b67b core: bump pnpm/pnpm from 11.21.0 to 11.22.0 in /lifecycle/container (#25215)
Bumps pnpm/pnpm from 11.21.0 to 11.22.0.

---
updated-dependencies:
- dependency-name: pnpm/pnpm
  dependency-version: 11.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-19 14:28:49 +01:00
dependabot[bot]
c748230e9b core: bump pnpm/pnpm from 11.21.0 to 11.22.0 in /website (#25216)
Bumps pnpm/pnpm from 11.21.0 to 11.22.0.

---
updated-dependencies:
- dependency-name: pnpm/pnpm
  dependency-version: 11.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-19 14:28:25 +01:00
dependabot[bot]
e920e9c631 core: bump goauthentik/fips-python from fe76ac9 to 6abe1b4 in /lifecycle/container (#25214)
core: bump goauthentik/fips-python in /lifecycle/container

Bumps goauthentik/fips-python from `fe76ac9` to `6abe1b4`.

---
updated-dependencies:
- dependency-name: goauthentik/fips-python
  dependency-version: 3.14.7-slim-trixie-fips
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-19 14:27:52 +01:00
dependabot[bot]
a2df084baf core: bump goauthentik/selenium from 150.0-ak-0.60.0 to 150.0-ak-0.60.1 in /tests/e2e (#25213)
core: bump goauthentik/selenium in /tests/e2e

Bumps [goauthentik/selenium](https://github.com/SeleniumHQ/docker-selenium) from 150.0-ak-0.60.0 to 150.0-ak-0.60.1.
- [Release notes](https://github.com/SeleniumHQ/docker-selenium/releases)
- [Commits](https://github.com/SeleniumHQ/docker-selenium/commits)

---
updated-dependencies:
- dependency-name: goauthentik/selenium
  dependency-version: 150.0-ak-0.60.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-19 14:21:56 +01:00
dependabot[bot]
17233f8176 core: bump twilio from 9.10.9 to 9.11.0 (#25217)
Bumps [twilio](https://github.com/twilio/twilio-python) from 9.10.9 to 9.11.0.
- [Release notes](https://github.com/twilio/twilio-python/releases)
- [Changelog](https://github.com/twilio/twilio-python/blob/main/CHANGES.md)
- [Commits](https://github.com/twilio/twilio-python/compare/9.10.9...9.11.0)

---
updated-dependencies:
- dependency-name: twilio
  dependency-version: 9.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-19 12:00:24 +01:00
Gabriel Vélez Schrod
1ee5cbafd9 website/docs: 2026.8 release notes: fix commands (#25218)
* Release notes fix, update docker-compose download link to v2026.8

Updated the download link for the docker-compose file to version 2026.8.

Signed-off-by: Gabriel Vélez Schrod <gabryvelez@gmail.com>

* Update kubernetes command

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>

---------

Signed-off-by: Gabriel Vélez Schrod <gabryvelez@gmail.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
2026-08-19 10:25:38 +00:00
Dominic Roy
16047ba31e website/docs: release 2026.8: clarify hash_password prompt wording (#25207)
docs: clarify hash_password prompt wording

Signed-off-by: Dominic Roy <dominic@goauthentik.io>
2026-08-19 10:10:51 +01:00
dependabot[bot]
785460860a web: bump deepmerge-ts from 7.1.5 to 8.0.0 (#25154)
Bumps [deepmerge-ts](https://github.com/RebeccaStevens/deepmerge-ts) from 7.1.5 to 8.0.0.
- [Changelog](https://github.com/RebeccaStevens/deepmerge-ts/blob/main/CHANGELOG.md)
- [Commits](https://github.com/RebeccaStevens/deepmerge-ts/compare/v7.1.5...v8.0.0)

---
updated-dependencies:
- dependency-name: deepmerge-ts
  dependency-version: 8.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens L. <jens@goauthentik.io>
2026-08-18 21:17:26 +01:00
Jens L.
9f7eb030b9 website/docs: finalize 2026.8 docs (#25202)
* website/docs: finalize 2026.8 docs

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* stupid linter keeps indenting this line more and more and I cba, no one reads these anyways

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2026-08-18 21:15:53 +01:00
Dewi Roberts
e1bdd8236d website/docs: 2026.8 release notes: add features and links to docs (#25194)
* Add release notes and links to docs

* link fix
2026-08-18 19:34:16 +00:00
Jens L.
e56f419caa enterprise: increase cache duration and ensure summary is cached (#25187)
* enterprise: increase cache duration and ensure summary is cached

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* bump & fix

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2026-08-18 20:14:58 +01:00
Jens L.
992dc6b0a1 providers/radius: allow empty message authenticator (#25097)
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2026-08-18 18:21:25 +01:00
Dewi Roberts
113d2e72a5 website/docs: add OBO (#25149)
* Initial

* Add sidebar positions

* Suggestions from Jens

* Apply suggestions from code review

Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>

* Apply suggestion from @dewi-tik

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>

---------

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
2026-08-18 17:29:51 +01:00
Marcelo Elizeche Landó
02153b546a stages/email: fix test_email ignoring the given stage (#25166)
fix test_email ignoring the given stage
2026-08-18 12:22:57 -03:00
Dewi Roberts
7f2689a965 website/docs: sidebar: ordering (#25151)
* Add category files and sidebar position metadata to docs

* spelling

---------

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
2026-08-18 15:08:23 +00:00
dependabot[bot]
c47570f043 core: bump goauthentik/selenium from 150.0-ak-0.50.5 to 150.0-ak-0.60.0 in /tests/e2e (#25168)
Co-authored-by: Jens L. <jens@goauthentik.io>
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
Signed-off-by: dependabot[bot] <support@github.com>
2026-08-18 13:46:50 +00:00
dependabot[bot]
68fda76b3c core: bump selenium from 4.46.0 to 4.47.0 (#25175)
Bumps [selenium](https://github.com/SeleniumHQ/Selenium) from 4.46.0 to 4.47.0.
- [Release notes](https://github.com/SeleniumHQ/Selenium/releases)
- [Commits](https://github.com/SeleniumHQ/Selenium/compare/selenium-4.46.0...selenium-4.47.0)

---
updated-dependencies:
- dependency-name: selenium
  dependency-version: 4.47.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2026-08-18 14:44:35 +01:00
Emil Burzo
a6798f7e85 core: bump h2 from 0.4.15 to 0.4.16 (#25183) 2026-08-18 12:36:15 +00:00
dependabot[bot]
1176267ecb core: bump openid/conformance-suite/nginx from release-v5.2.2 to release-v5.2.3 in /tests/openid_conformance (#25170)
core: bump openid/conformance-suite/nginx in /tests/openid_conformance

Bumps openid/conformance-suite/nginx from release-v5.2.2 to release-v5.2.3.

---
updated-dependencies:
- dependency-name: openid/conformance-suite/nginx
  dependency-version: release-v5.2.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 13:22:10 +01:00
dependabot[bot]
921b2e721e core: bump openid/conformance-suite from release-v5.2.2 to release-v5.2.3 in /tests/openid_conformance (#25169)
core: bump openid/conformance-suite in /tests/openid_conformance

Bumps openid/conformance-suite from release-v5.2.2 to release-v5.2.3.

---
updated-dependencies:
- dependency-name: openid/conformance-suite
  dependency-version: release-v5.2.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 13:21:54 +01:00
dependabot[bot]
ef46091e4c core: bump goauthentik/fips-python from f2391bb to fe76ac9 in /lifecycle/container (#25173)
core: bump goauthentik/fips-python in /lifecycle/container

Bumps goauthentik/fips-python from `f2391bb` to `fe76ac9`.

---
updated-dependencies:
- dependency-name: goauthentik/fips-python
  dependency-version: 3.14.7-slim-trixie-fips
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 13:15:41 +01:00
dependabot[bot]
1da7a7bf35 core: bump pytest-django from 4.13.0 to 4.14.0 (#25176)
Bumps [pytest-django](https://github.com/pytest-dev/pytest-django) from 4.13.0 to 4.14.0.
- [Release notes](https://github.com/pytest-dev/pytest-django/releases)
- [Changelog](https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst)
- [Commits](https://github.com/pytest-dev/pytest-django/compare/v4.13.0...v4.14.0)

---
updated-dependencies:
- dependency-name: pytest-django
  dependency-version: 4.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 12:53:01 +01:00
dependabot[bot]
fc793c2bdd core: bump aws-cdk-lib from 2.263.0 to 2.264.0 (#25179)
Bumps [aws-cdk-lib](https://github.com/aws/aws-cdk) from 2.263.0 to 2.264.0.
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/compare/v2.263.0...v2.264.0)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.264.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 12:52:37 +01:00
dependabot[bot]
35c04d98e0 ci: bump taiki-e/install-action from 2.85.13 to 2.86.1 in /.github/actions/setup (#25180)
ci: bump taiki-e/install-action in /.github/actions/setup

Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.85.13 to 2.86.1.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](82cd3e7658...288e746965)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.86.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 12:51:45 +01:00
dependabot[bot]
d2a3a68dfe core: bump types-docker from 7.2.0.20260806 to 7.2.0.20260811 in the types group (#25172)
core: bump types-docker in the types group

Bumps the types group with 1 update: [types-docker](https://github.com/python/typeshed).


Updates `types-docker` from 7.2.0.20260806 to 7.2.0.20260811
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: types-docker
  dependency-version: 7.2.0.20260811
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: types
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 12:51:30 +01:00
dependabot[bot]
c38d979a23 core: bump astral-sh/uv from 0.12.4 to 0.12.5 in /lifecycle/container (#25171)
Bumps [astral-sh/uv](https://github.com/astral-sh/uv) from 0.12.4 to 0.12.5.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/uv/compare/0.12.4...0.12.5)

---
updated-dependencies:
- dependency-name: astral-sh/uv
  dependency-version: 0.12.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 12:51:20 +01:00
dependabot[bot]
bd7dd1b9d4 core: bump uuid from 1.24.0 to 1.24.1 (#25177)
Bumps [uuid](https://github.com/uuid-rs/uuid) from 1.24.0 to 1.24.1.
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](https://github.com/uuid-rs/uuid/compare/v1.24.0...v1.24.1)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 1.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 12:50:55 +01:00
dependabot[bot]
c5e951c92a core: bump mypy from 2.3.0 to 2.3.1 (#25178)
Bumps [mypy](https://github.com/python/mypy) from 2.3.0 to 2.3.1.
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](https://github.com/python/mypy/compare/v2.3.0...v2.3.1)

---
updated-dependencies:
- dependency-name: mypy
  dependency-version: 2.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 12:50:47 +01:00
dependabot[bot]
4e209c6180 core: bump sentry-sdk from 2.66.1 to 2.67.1 (#25174)
Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from 2.66.1 to 2.67.1.
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/2.67.1/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-python/compare/2.66.1...2.67.1)

---
updated-dependencies:
- dependency-name: sentry-sdk
  dependency-version: 2.67.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 12:50:08 +01:00
dependabot[bot]
f645d84a10 core: bump sqlparse from 0.5.5 to 0.6.0 (#25165)
Bumps [sqlparse](https://github.com/andialbrecht/sqlparse) from 0.5.5 to 0.6.0.
- [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG)
- [Commits](https://github.com/andialbrecht/sqlparse/compare/0.5.5...0.6.0)

---
updated-dependencies:
- dependency-name: sqlparse
  dependency-version: 0.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 12:43:23 +01:00
Marcelo Elizeche Landó
2ccb65cc7e root: Update datastore tooling information in AGENTS.md (#25163)
docs: Update datastore tooling information in AGENTS.md

Removed Redis mention from datastore tooling section.

Signed-off-by: Marcelo Elizeche Landó <marcelo@goauthentik.io>
2026-08-17 19:16:09 +00:00
Dewi Roberts
75bc3385ce website/docs: add access requests doc (#24457)
* Initial push, WIP

* Fix links

* Applied suggestions

* fix link

* Apply suggestions

* Update website/docs/add-secure-apps/access-requests/index.mdx

Co-authored-by: Dominic Roy <dominic@goauthentik.io>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>

* Suggestions

---------

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Dominic Roy <dominic@goauthentik.io>
2026-08-17 18:50:23 +01:00
dependabot[bot]
cfc815985e web: bump the storybook group across 1 directory with 5 updates (#25144)
Bumps the storybook group with 5 updates in the /web directory:

| Package | From | To |
| --- | --- | --- |
| [@storybook/addon-docs](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/docs) | `10.5.7` | `10.5.8` |
| [@storybook/addon-links](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/links) | `10.5.7` | `10.5.8` |
| [@storybook/web-components](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/web-components) | `10.5.7` | `10.5.8` |
| [@storybook/web-components-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/web-components-vite) | `10.5.7` | `10.5.8` |
| [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `10.5.7` | `10.5.8` |



Updates `@storybook/addon-docs` from 10.5.7 to 10.5.8
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.8/code/addons/docs)

Updates `@storybook/addon-links` from 10.5.7 to 10.5.8
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.8/code/addons/links)

Updates `@storybook/web-components` from 10.5.7 to 10.5.8
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.8/code/renderers/web-components)

Updates `@storybook/web-components-vite` from 10.5.7 to 10.5.8
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.8/code/frameworks/web-components-vite)

Updates `storybook` from 10.5.7 to 10.5.8
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.8/code/core)

---
updated-dependencies:
- dependency-name: "@storybook/addon-docs"
  dependency-version: 10.5.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: storybook
- dependency-name: "@storybook/addon-links"
  dependency-version: 10.5.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: storybook
- dependency-name: "@storybook/web-components"
  dependency-version: 10.5.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: storybook
- dependency-name: "@storybook/web-components-vite"
  dependency-version: 10.5.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: storybook
- dependency-name: storybook
  dependency-version: 10.5.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: storybook
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 14:21:26 +01:00
Chandan P
e1902ed532 sources/scim: return a SCIM error for unsupported filters (#25095)
* fix(sources/scim): return a SCIM error for unsupported filters

The `members` attribute was mapped to the `group__users` relation itself, so
`members eq "<id>"` transpiled to `group__users__iexact`, which Django rejects
with a FieldError and which surfaced as an HTML 500 page. Map `members` to the
related user's `uuid` field instead, and map `id` for both users and groups so
that filters combining an ID and a member resolve correctly. Filters that can't
be parsed or can't be mapped to any field now raise a SCIM `invalidFilter`
error with status 400 instead of crashing.

Closes #23211

* fix(sources/scim): give each user in the filter test a unique external ID

test_user_list_filter created two SCIMSourceUser rows on the same source
without setting external_id. That field has no default, so both rows got an
empty string and the second insert hit the unique_together constraint on
(external_id, source), failing the test with an IntegrityError. Set a distinct
external_id on each row, matching the group filter tests.

---------

Co-authored-by: Jens L. <jens@goauthentik.io>
2026-08-17 14:20:57 +01:00
Alex Kulikov
6bbacf048f sources/telegram: restore next= redirect after pre_authentication_flow (#22762)
When a first-time user authenticates via Telegram inside an OIDC
authorization flow, SESSION_KEY_GET gets overwritten with an empty dict
when the browser follows the redirect to the pre_authentication_flow
executor (which carries no query string). By the time
TelegramLoginView.challenge_valid() runs, the flow manager falls back to
"authentik_core:if-user" instead of the original application callback URL.

Fix: restore SESSION_KEY_GET from PLAN_CONTEXT_REDIRECT in the current
plan context before constructing TelegramSourceFlowManager.
TelegramStartView already saved the correct redirect there before the
overwrite. Mirrors the identical fix in the SAML source's ACSView.

Fixes #18450

Co-authored-by: Jens L. <jens@goauthentik.io>
2026-08-17 14:20:38 +01:00