dependabot[bot]
6c1e5135c4
website: bump openapi-to-postmanv2 from 6.3.2 to 6.3.3 in /website ( #25126 )
...
Bumps [openapi-to-postmanv2](https://github.com/postmanlabs/openapi-to-postman ) from 6.3.2 to 6.3.3.
- [Release notes](https://github.com/postmanlabs/openapi-to-postman/releases )
- [Changelog](https://github.com/postmanlabs/openapi-to-postman/blob/develop/CHANGELOG.md )
- [Commits](https://github.com/postmanlabs/openapi-to-postman/compare/v6.3.2...v6.3.3 )
---
updated-dependencies:
- dependency-name: openapi-to-postmanv2
dependency-version: 6.3.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 13:36:31 +01:00
dependabot[bot]
517f96d3f5
website: bump the build group across 1 directory with 3 updates ( #25125 )
...
Bumps the build group with 3 updates in the /website directory: [@rspack/binding-darwin-arm64](https://github.com/web-infra-dev/rspack/tree/HEAD/packages/rspack ), [@rspack/binding-linux-arm64-gnu](https://github.com/web-infra-dev/rspack/tree/HEAD/packages/rspack ) and [@rspack/binding-linux-x64-gnu](https://github.com/web-infra-dev/rspack/tree/HEAD/packages/rspack ).
Updates `@rspack/binding-darwin-arm64` from 2.1.8 to 2.1.10
- [Release notes](https://github.com/web-infra-dev/rspack/releases )
- [Commits](https://github.com/web-infra-dev/rspack/commits/v2.1.10/packages/rspack )
Updates `@rspack/binding-linux-arm64-gnu` from 2.1.8 to 2.1.10
- [Release notes](https://github.com/web-infra-dev/rspack/releases )
- [Commits](https://github.com/web-infra-dev/rspack/commits/v2.1.10/packages/rspack )
Updates `@rspack/binding-linux-x64-gnu` from 2.1.8 to 2.1.10
- [Release notes](https://github.com/web-infra-dev/rspack/releases )
- [Commits](https://github.com/web-infra-dev/rspack/commits/v2.1.10/packages/rspack )
---
updated-dependencies:
- dependency-name: "@rspack/binding-darwin-arm64"
dependency-version: 2.1.10
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: build
- dependency-name: "@rspack/binding-linux-arm64-gnu"
dependency-version: 2.1.10
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: build
- dependency-name: "@rspack/binding-linux-x64-gnu"
dependency-version: 2.1.10
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: build
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 13:35:35 +01:00
dependabot[bot]
58a1adab3d
core: bump futures from 0.3.33 to 0.3.34 ( #25137 )
...
Bumps [futures](https://github.com/rust-lang/futures-rs ) from 0.3.33 to 0.3.34.
- [Release notes](https://github.com/rust-lang/futures-rs/releases )
- [Changelog](https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/futures-rs/compare/0.3.33...0.3.34 )
---
updated-dependencies:
- dependency-name: futures
dependency-version: 0.3.34
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 13:35:23 +01:00
dependabot[bot]
c6bddeeca7
web: bump @sentry/browser from 10.69.0 to 10.70.0 in /web in the sentry group across 1 directory ( #25147 )
...
web: bump @sentry/browser in /web in the sentry group across 1 directory
Bumps the sentry group with 1 update in the /web directory: [@sentry/browser](https://github.com/getsentry/sentry-javascript ).
Updates `@sentry/browser` from 10.69.0 to 10.70.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases )
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.70.0/CHANGELOG.md )
- [Commits](https://github.com/getsentry/sentry-javascript/compare/10.69.0...10.70.0 )
---
updated-dependencies:
- dependency-name: "@sentry/browser"
dependency-version: 10.70.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: sentry
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 13:34:52 +01:00
Dewi Roberts
38bd281334
website/docs: agents: add doc ( #24826 )
...
* Initial
* Remove category file
* Update docs
* Update
* Spelling
* RBAC changes
* Fix links
* More links
* Apply suggestions
* Apply suggestions
* Update website/docs/static/_redirects
Co-authored-by: Dominic Roy <dominic@goauthentik.io >
Signed-off-by: Dewi Roberts <dewi@goauthentik.io >
* Apply suggestions
* Apply suggestions
* Apply suggestions
* Apply suggestions
* Spelling
* Suggestions
* Apply suggestions
* Update website/docs/users-sources/user/account-types/agent-accounts.md
Co-authored-by: Dominic Roy <dominic@goauthentik.io >
Signed-off-by: Dewi Roberts <dewi@goauthentik.io >
* Apply suggestions
* Apply Jens' suggestion
---------
Signed-off-by: Dewi Roberts <dewi@goauthentik.io >
Co-authored-by: Dominic Roy <dominic@goauthentik.io >
2026-08-17 12:33:06 +00:00
dependabot[bot]
64d4b97dbd
ci: bump taiki-e/install-action from 2.85.11 to 2.85.13 in /.github/actions/setup ( #25143 )
...
ci: bump taiki-e/install-action in /.github/actions/setup
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action ) from 2.85.11 to 2.85.13.
- [Release notes](https://github.com/taiki-e/install-action/releases )
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md )
- [Commits](7f4eb89902...82cd3e7658support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:56:12 +01:00
dependabot[bot]
6372937840
core: bump github.com/stretchr/testify from 1.11.1 to 1.12.0 ( #25146 )
...
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify ) from 1.11.1 to 1.12.0.
- [Release notes](https://github.com/stretchr/testify/releases )
- [Commits](https://github.com/stretchr/testify/compare/v1.11.1...v1.12.0 )
---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
dependency-version: 1.12.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:55:57 +01:00
dependabot[bot]
5fe91dab50
ci: bump github/codeql-action/autobuild from 4.37.6 to 4.37.7 ( #25136 )
...
Bumps [github/codeql-action/autobuild](https://github.com/github/codeql-action ) from 4.37.6 to 4.37.7.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](5595ccaf91...ff2f1c621bsupport@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:55:47 +01:00
DrummyFloyd
f93f230949
blueprints: add possibility enable/disable default brand ( #11738 )
...
feat(blueprints): add possibility enable/disable default brand
Co-authored-by: Jens L. <jens@goauthentik.io >
2026-08-17 12:46:26 +01:00
dependabot[bot]
6ae2d96e92
ci: bump github/codeql-action/init from 4.37.6 to 4.37.7 ( #25135 )
...
* ci: bump github/codeql-action/init from 4.37.6 to 4.37.7
Bumps [github/codeql-action/init](https://github.com/github/codeql-action ) from 4.37.6 to 4.37.7.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](5595ccaf91...ff2f1c621bsupport@github.com >
* group gha update
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens@goauthentik.io >
2026-08-17 12:20:07 +01:00
dependabot[bot]
e43d5ead91
core: bump uvicorn[standard] from 0.52.1 to 0.52.3 ( #25128 )
...
Bumps [uvicorn[standard]](https://github.com/Kludex/uvicorn ) from 0.52.1 to 0.52.3.
- [Release notes](https://github.com/Kludex/uvicorn/releases )
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md )
- [Commits](https://github.com/Kludex/uvicorn/compare/0.52.1...0.52.3 )
---
updated-dependencies:
- dependency-name: uvicorn[standard]
dependency-version: 0.52.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:18:37 +01:00
dependabot[bot]
8c0cfae208
core: bump djangorestframework from 3.17.2 to 3.18.0 ( #25129 )
...
Bumps [djangorestframework](https://github.com/encode/django-rest-framework ) from 3.17.2 to 3.18.0.
- [Release notes](https://github.com/encode/django-rest-framework/releases )
- [Commits](https://github.com/encode/django-rest-framework/compare/3.17.2...3.18.0 )
---
updated-dependencies:
- dependency-name: djangorestframework
dependency-version: 3.18.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:18:32 +01:00
dependabot[bot]
d876abae50
core: bump ruff from 0.16.2 to 0.16.3 ( #25130 )
...
Bumps [ruff](https://github.com/astral-sh/ruff ) from 0.16.2 to 0.16.3.
- [Release notes](https://github.com/astral-sh/ruff/releases )
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md )
- [Commits](https://github.com/astral-sh/ruff/compare/0.16.2...0.16.3 )
---
updated-dependencies:
- dependency-name: ruff
dependency-version: 0.16.3
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:18:28 +01:00
dependabot[bot]
044d78a408
core: bump goauthentik/fips-python from a9a6b8f to f2391bb in /lifecycle/container ( #25131 )
...
core: bump goauthentik/fips-python in /lifecycle/container
Bumps goauthentik/fips-python from `a9a6b8f` to `f2391bb`.
---
updated-dependencies:
- dependency-name: goauthentik/fips-python
dependency-version: 3.14.7-slim-trixie-fips
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:18:24 +01:00
dependabot[bot]
2d05a72a19
core: bump astral-sh/uv from 0.12.3 to 0.12.4 in /lifecycle/container ( #25132 )
...
Bumps [astral-sh/uv](https://github.com/astral-sh/uv ) from 0.12.3 to 0.12.4.
- [Release notes](https://github.com/astral-sh/uv/releases )
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md )
- [Commits](https://github.com/astral-sh/uv/compare/0.12.3...0.12.4 )
---
updated-dependencies:
- dependency-name: astral-sh/uv
dependency-version: 0.12.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:18:20 +01:00
dependabot[bot]
a7f0e4e2a7
core: bump library/golang from 1.27rc2-trixie to 1.27rc3-trixie in /lifecycle/container ( #25133 )
...
core: bump library/golang in /lifecycle/container
Bumps library/golang from 1.27rc2-trixie to 1.27rc3-trixie.
---
updated-dependencies:
- dependency-name: library/golang
dependency-version: 1.27rc3-trixie
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:18:16 +01:00
dependabot[bot]
e8c393b156
core: bump python-kadmin-rs from 0.7.3 to 0.7.4 ( #25134 )
...
Bumps [python-kadmin-rs](https://github.com/authentik-labs/kadmin-rs ) from 0.7.3 to 0.7.4.
- [Release notes](https://github.com/authentik-labs/kadmin-rs/releases )
- [Commits](https://github.com/authentik-labs/kadmin-rs/compare/kadmin/version/0.7.3...kadmin/version/0.7.4 )
---
updated-dependencies:
- dependency-name: python-kadmin-rs
dependency-version: 0.7.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:18:12 +01:00
dependabot[bot]
773c548b32
core: bump http-body-util from 0.1.4 to 0.1.5 ( #25138 )
...
Bumps [http-body-util](https://github.com/hyperium/http-body ) from 0.1.4 to 0.1.5.
- [Release notes](https://github.com/hyperium/http-body/releases )
- [Commits](https://github.com/hyperium/http-body/compare/http-body-util-v0.1.4...http-body-util-v0.1.5 )
---
updated-dependencies:
- dependency-name: http-body-util
dependency-version: 0.1.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:18:03 +01:00
dependabot[bot]
278a048891
core: bump serde_with from 3.21.0 to 3.22.0 ( #25139 )
...
Bumps [serde_with](https://github.com/jonasbb/serde_with ) from 3.21.0 to 3.22.0.
- [Release notes](https://github.com/jonasbb/serde_with/releases )
- [Commits](https://github.com/jonasbb/serde_with/compare/v3.21.0...v3.22.0 )
---
updated-dependencies:
- dependency-name: serde_with
dependency-version: 3.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:18:00 +01:00
dependabot[bot]
b1db9e199a
core: bump eyre from 0.6.12 to 0.6.14 ( #25140 )
...
Bumps [eyre](https://github.com/eyre-rs/eyre ) from 0.6.12 to 0.6.14.
- [Commits](https://github.com/eyre-rs/eyre/compare/eyre-v0.6.12...v0.6.14 )
---
updated-dependencies:
- dependency-name: eyre
dependency-version: 0.6.14
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:17:56 +01:00
dependabot[bot]
348fb58972
ci: bump github/codeql-action/analyze from 4.37.6 to 4.37.7 ( #25141 )
...
Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action ) from 4.37.6 to 4.37.7.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](5595ccaf91...ff2f1c621bsupport@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:17:51 +01:00
dependabot[bot]
df65c5027b
ci: bump astral-sh/setup-uv from 9.0.0 to 10.0.1 in /.github/actions/setup ( #25142 )
...
ci: bump astral-sh/setup-uv in /.github/actions/setup
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv ) from 9.0.0 to 10.0.1.
- [Release notes](https://github.com/astral-sh/setup-uv/releases )
- [Commits](c771a70e62...20cfd1bf94support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:17:46 +01:00
Chandan P
f758220c4a
core: scope user path_startswith filter to the path subtree ( #25093 )
...
fix(core): scope user path_startswith filter to the path subtree
The `path_startswith` user filter used a plain `startswith` lookup, so
selecting a node in the user path tree also matched sibling paths that
share the same textual prefix: filtering on `users/group1` returned users
in `users/group11` as well. Match the path exactly or as a prefix followed
by the path separator instead.
Closes #23212
2026-08-17 12:05:15 +01:00
Antonia Schwennesen
4837f02206
website/integrations: Paperless-ngx: update docs link ( #25123 )
...
update Paperless-ngx docs link
Signed-off-by: Antonia Schwennesen <53372671+zophiana@users.noreply.github.com >
Co-authored-by: Dominic Roy <dominic@goauthentik.io >
2026-08-17 01:37:03 +00:00
Jens L.
b2ef513574
enterprise/endpoints/connectors/agent: add login_hint to auth_ia ( #25122 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2026-08-16 22:14:42 +01:00
authentik-automation[bot]
9d92d7a479
stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs ( #25119 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
2026-08-15 13:26:53 +01:00
Jens L.
ec3e953aa3
web/user: fix request access URL from agent not working ( #25113 )
2026-08-15 00:29:05 +01:00
Teffen Ellis
189a2804c2
packages/theme: add the @goauthentik/theme design-system package ( #23341 )
...
* packages/fonts: add @goauthentik/fonts package
Extract the bundled web fonts out of web/ into a dedicated
@goauthentik/fonts workspace package: the RedHat variable faces, the
PatternFly pficon icon face, and the FontAwesome Free solid face, each
with its upstream license recorded under licenses/.
web/ now pulls the faces and icons from the package's
@goauthentik/fonts/faces.css and @goauthentik/fonts/icons.css entry
points instead of the old #fonts/* import and the inlined pficon.scss
vendor sheet.
Anchor esbuild's [dir] at the monorepo root via outbase so assets pulled
from the out-of-web package no longer resolve to a "_.._" segment, which
Go's //go:embed silently drops from the embedded outpost build.
Co-Authored-By: Ken Sternberg <ken@goauthentik.io >
* packages/theme: add @goauthentik/theme design-system package
Add @goauthentik/theme, which defines authentik's design tokens (color,
typography, fonts, spacing, shape, shadow, motion, z-index) in TypeScript
and builds them into CSS via styleframe.
Token names carry a distinct separator per category so the token type is
recoverable from the name alone. That is worth the verbosity: it keeps
the DX legible and leaves room for automatic theme management and future
tooling built on top of the token set.
Co-Authored-By: Ken Sternberg <ken@goauthentik.io >
* web/theme: add a demo page for the theme tokens
Add a self-contained demo page, built by build-demo.mjs, that renders
every theme token — colors, typography, spacing, shape, shadow, motion —
so the design system can be eyeballed in isolation while it evolves.
Co-Authored-By: Ken Sternberg <ken@goauthentik.io >
* Heal lockfile.
* Fix spelling.
* Fix grouping.
---------
Co-authored-by: Ken Sternberg <ken@goauthentik.io >
2026-08-15 00:16:34 +01:00
Jens L.
30b2c129b6
providers/oauth2: fix token exchange provider lookup for actor/subject ( #25110 )
...
* providers/oauth2: fix token exchange provider lookup for actor/subject
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* format
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* comment
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2026-08-15 00:03:53 +01:00
YEONGCHANG YUN
74e15780af
providers/scim: accept a service provider that reports bulk as unsupported ( #25057 )
...
* providers/scim: accept a service provider that reports bulk as unsupported
RFC 7644 Section 5 defines the bulk limits alongside bulk support, so a
provider answering `"bulk": {"supported": false}` and nothing else is
conforming. Requiring maxOperations made that response fail validation,
and get_service_provider_config() fell back to a configuration reporting
patch and filter as unsupported no matter what the provider advertised.
The effect shows up far from the parse. SCIMGroupClient.update() takes
its PUT branch instead of PATCH, and SCIMUserClient.create() skips the
409 recovery guarded by filter.supported, so an object that already
exists remotely can never be adopted and the create retries forever.
0 is what ServiceProviderConfiguration.default() already passes, and
_patch_chunked() already reads anything below 1 as no declared limit.
* fix incorrect test
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: YEONGCHANG YUN <2026stobleague@gmail.com >
Co-authored-by: Jens Langhammer <jens@goauthentik.io >
2026-08-14 23:01:04 +01:00
Jens L.
a7e95e07b5
enterprise/requests: fix API schema for grant requests ( #25111 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2026-08-14 18:45:39 +01:00
Connor Peshek
5b70bc51ba
providers/oauth2: send back-channel logout requests when a user is deactivated ( #24718 )
...
* providers/oauth2: send back-channel logout requests when a user is deactivated
* prevent deleting access tokens until deactivated user is logged out
* update tests
* improve tests
* update tests
* only skip deleting backchannel logout tokens
2026-08-14 16:36:04 +00:00
Marc 'risson' Schmitt
8739e3c541
packages/django-dramatiq-postgres/broker: chunked purge queryset ( #25102 )
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2026-08-14 16:41:40 +02:00
Connor Peshek
7329df2984
core: delete all user sessions when user is deactivated ( #25088 )
...
* core: delete all user sessions when user is deactivated
* add token deletion prevention
2026-08-14 09:22:20 -05:00
dependabot[bot]
7a3005337a
core: bump types-docker from 7.2.0.20260728 to 7.2.0.20260806 in the types group ( #25090 )
...
core: bump types-docker in the types group
Bumps the types group with 1 update: [types-docker](https://github.com/python/typeshed ).
Updates `types-docker` from 7.2.0.20260728 to 7.2.0.20260806
- [Commits](https://github.com/python/typeshed/commits )
---
updated-dependencies:
- dependency-name: types-docker
dependency-version: 7.2.0.20260806
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: types
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-14 11:27:52 +01:00
dependabot[bot]
b829ce0077
core: bump library/golang from 6f70a24 to 2db0e0e in /lifecycle/container ( #25091 )
...
core: bump library/golang in /lifecycle/container
Bumps library/golang from `6f70a24` to `2db0e0e`.
---
updated-dependencies:
- dependency-name: library/golang
dependency-version: 1.27rc2-trixie
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-14 11:27:28 +01:00
dependabot[bot]
a501611ff3
core: bump rcgen from 0.14.8 to 0.14.9 ( #25092 )
...
Bumps [rcgen](https://github.com/rustls/rcgen ) from 0.14.8 to 0.14.9.
- [Release notes](https://github.com/rustls/rcgen/releases )
- [Commits](https://github.com/rustls/rcgen/compare/v0.14.8...v/0.14.9 )
---
updated-dependencies:
- dependency-name: rcgen
dependency-version: 0.14.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-14 11:26:54 +01:00
dependabot[bot]
ee06c7036d
core: bump goauthentik/fips-python from 46b43f8 to a9a6b8f in /lifecycle/container ( #25089 )
...
core: bump goauthentik/fips-python in /lifecycle/container
Bumps goauthentik/fips-python from `46b43f8` to `a9a6b8f`.
---
updated-dependencies:
- dependency-name: goauthentik/fips-python
dependency-version: 3.14.7-slim-trixie-fips
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-14 11:26:33 +01:00
Dominic Roy
ab5bc63f9a
website/docs: update source field labels renamed in 2026.8 ( #25072 )
...
Two SAML and LDAP source fields were renamed in 2026.8 and some guides
still name the old labels.
The SAML source field is now Issuer override, and it defaults to the
metadata URL, so setting it to that value is optional rather than a
required step. The canonical SAML source page was already updated; the
Google Workspace, Keycloak, and Shibboleth guides were not.
The LDAP source field is now Additional Parent Group. That rename came
from the same change that added Sync Group Parents, which the LDAP page
did pick up on the line directly above.
Signed-off-by: Dewi Roberts <dewi@goauthentik.io >
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
Co-authored-by: Dewi Roberts <dewi@goauthentik.io >
2026-08-13 20:07:33 +00:00
Dominic Roy
b51d3b778e
website/docs: match UI label capitalization and add a style rule ( #25080 )
...
Bolded references to UI elements are meant to help a reader find a
control on screen, so they should reproduce the on-screen string exactly.
Across the docs, 86 distinct labels differed from the product only in
capitalization, in both directions.
Adds the rule to the style guide, since it did not previously say
anything about case for UI references, and corrects the existing
occurrences against the current forms.
Occurrences that refer to a third-party console rather than authentik are
deliberately left alone.
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-08-13 20:23:33 +01:00
Dominic Roy
335c28d836
website/docs: mark deprecated PostgreSQL options and fix listen settings ( #25074 )
...
The CONN_OPTIONS family was deprecated in 2026.5 but the configuration
reference still documented all four members as ordinary settings. The
Deprecated Settings section only covers USE_PGBOUNCER and USE_PGPOOL.
Also documents AUTHENTIK_LISTEN__RADIUS, which the RADIUS outpost reads
but which was missing from the listen settings, and narrows the scope of
AUTHENTIK_LISTEN__DEBUG. Since the server and proxy outpost were
rewritten in Rust, only the LDAP, RADIUS, and RAC outposts still serve
the Go debug listener.
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-08-13 12:03:33 -04:00
Dominic Roy
498e3e33eb
website/docs: correct proxy unauthenticated path regex reference ( #25077 )
...
The shipped proxy outpost is the Rust binary, so unauthenticated path and
URL patterns are compiled by the Rust regex crate rather than Go's parser.
Also documents that a pattern which fails to compile is skipped with a
warning instead of raising an error, since that means a typo quietly
leaves a path authenticated.
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-08-13 12:02:43 -04:00
Marc 'risson' Schmitt
81cb6a90f2
ci: require test-rust to pass ( #25066 )
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2026-08-13 14:28:38 +00:00
dependabot[bot]
c8319956b2
core: bump pnpm/pnpm from 11.20.0 to 11.21.0 in /website ( #25050 )
...
Bumps pnpm/pnpm from 11.20.0 to 11.21.0.
---
updated-dependencies:
- dependency-name: pnpm/pnpm
dependency-version: 11.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-13 15:28:28 +01:00
Dominic Roy
efeee20ddc
providers/scim: fix group membership removals ( #25024 )
...
* providers/scim: mark the fallback service provider config as a fallback
* providers/scim: fix group member removals without PATCH support
* providers/scim: build the group update payload once
2026-08-13 10:10:42 -04:00
Teffen Ellis
df3d1cf6c3
web: Fix mangled nested CSS in compatibility mode. ( #25053 )
...
* web: Fix mangled nested CSS in compatibility mode.
* Improve alignment.
2026-08-13 14:24:17 +01:00
authentik-automation[bot]
aa87ac8b28
core, web: update translations ( #25042 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
2026-08-13 15:23:39 +02:00
dependabot[bot]
5f8991897c
core: bump pytest-django from 4.12.0 to 4.13.0 ( #25051 )
...
Bumps [pytest-django](https://github.com/pytest-dev/pytest-django ) from 4.12.0 to 4.13.0.
- [Release notes](https://github.com/pytest-dev/pytest-django/releases )
- [Changelog](https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst )
- [Commits](https://github.com/pytest-dev/pytest-django/compare/v4.12.0...v4.13.0 )
---
updated-dependencies:
- dependency-name: pytest-django
dependency-version: 4.13.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-13 14:23:35 +01:00
dependabot[bot]
db0aea2ca3
core: bump pnpm/pnpm from 11.20.0 to 11.21.0 in /lifecycle/container ( #25046 )
...
Bumps pnpm/pnpm from 11.20.0 to 11.21.0.
---
updated-dependencies:
- dependency-name: pnpm/pnpm
dependency-version: 11.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-13 14:02:31 +01:00
dependabot[bot]
e9e7ed0f4e
core: bump msgraph-sdk from 1.60.0 to 1.61.0 ( #25047 )
...
Bumps [msgraph-sdk](https://github.com/microsoftgraph/msgraph-sdk-python ) from 1.60.0 to 1.61.0.
- [Release notes](https://github.com/microsoftgraph/msgraph-sdk-python/releases )
- [Changelog](https://github.com/microsoftgraph/msgraph-sdk-python/blob/main/CHANGELOG.md )
- [Commits](https://github.com/microsoftgraph/msgraph-sdk-python/compare/v1.60.0...v1.61.0 )
---
updated-dependencies:
- dependency-name: msgraph-sdk
dependency-version: 1.61.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-13 14:50:03 +02:00
