205hlab-mirrors/authentik
2
0
Fork 0
mirror of https://github.com/goauthentik/authentik.git synced 2026-06-17 19:09:11 +03:00
Code Issues Packages Projects Releases Wiki Activity

website/docs: release notes 2026.5: add section about package reduction (#22308)

Browse Source 
* Add section about package reduction

* Suggestion from marc

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>

---------

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
This commit is contained in:
Dewi Roberts
2026-05-13 08:27:24 +01:00
committed by GitHub
parent 046dbdabe2
commit 68a6b04749
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
website/docs/releases/2026/v2026.5.md
+4
View File
@@ -114,6 +114,10 @@ The worker status reporting change also uses one fewer PostgreSQL connection per
The Admin interface is also less resource-intensive in the browser due to lazy-loaded modals.
### Fewer packages, smaller attack surface
We’ve removed 17 packages, trimming bloat and tightening security in one move. Fewer components mean fewer potential vulnerabilities, helping keep your authentik deployments faster, lighter, and more resilient.
### OAuth2 configurable grant types
[OAuth2 providers](../../add-secure-apps/providers/oauth2/index.mdx#oauth-20-flows-and-grant-types) now have a **Grant Types** setting that lets admins explicitly choose which grant types a given provider may use. The available options are Authorization Code, Implicit, Hybrid, Refresh token, Client credentials, Password, and Device-code. Existing providers default to having all grant types enabled to preserve current behavior, but you can now disable any grant types you don't want a particular client to use — useful for tightening security on individual integrations and disabling legacy flows like Implicit or Password where they aren't needed.