From ee4ecf929f31ba66fa538a67d01a7ebb129bd3a5 Mon Sep 17 00:00:00 2001
From: "authentik-automation[bot]"
 <135050075+authentik-automation[bot]@users.noreply.github.com>
Date: Wed, 17 Dec 2025 22:03:04 +0000
Subject: [PATCH] release: 2025.12.0-rc2

---
 authentik/__init__.py       | 2 +-
 blueprints/schema.json      | 2 +-
 docker-compose.yml          | 4 ++--
 internal/constants/VERSION  | 2 +-
 lifecycle/aws/template.yaml | 2 +-
 package-lock.json           | 4 ++--
 package.json                | 2 +-
 pyproject.toml              | 2 +-
 schema.yml                  | 2 +-
 uv.lock                     | 2 +-
 web/package-lock.json       | 4 ++--
 web/package.json            | 2 +-
 12 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/authentik/__init__.py b/authentik/__init__.py
index bc272bf74c..f49ee49033 100644
--- a/authentik/__init__.py
+++ b/authentik/__init__.py
@@ -3,7 +3,7 @@
 from functools import lru_cache
 from os import environ
 
-VERSION = "2025.12.0-rc1"
+VERSION = "2025.12.0-rc2"
 ENV_GIT_HASH_KEY = "GIT_BUILD_HASH"
 
 
diff --git a/blueprints/schema.json b/blueprints/schema.json
index 12aef78a7d..6be48f9b01 100644
--- a/blueprints/schema.json
+++ b/blueprints/schema.json
@@ -2,7 +2,7 @@
     "$schema": "http://json-schema.org/draft-07/schema",
     "$id": "https://goauthentik.io/blueprints/schema.json",
     "type": "object",
-    "title": "authentik 2025.12.0-rc1 Blueprint schema",
+    "title": "authentik 2025.12.0-rc2 Blueprint schema",
     "required": [
         "version",
         "entries"
diff --git a/docker-compose.yml b/docker-compose.yml
index cf89096415..6418666721 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -31,7 +31,7 @@ services:
       AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
       AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
       AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:?secret key required}
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.12.0-rc1}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.12.0-rc2}
     ports:
     - ${COMPOSE_PORT_HTTP:-9000}:9000
     - ${COMPOSE_PORT_HTTPS:-9443}:9443
@@ -52,7 +52,7 @@ services:
       AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
       AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
       AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY:?secret key required}
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.12.0-rc1}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.12.0-rc2}
     restart: unless-stopped
     user: root
     volumes:
diff --git a/internal/constants/VERSION b/internal/constants/VERSION
index 5a2b185bee..a118db876e 100644
--- a/internal/constants/VERSION
+++ b/internal/constants/VERSION
@@ -1 +1 @@
-2025.12.0-rc1
\ No newline at end of file
+2025.12.0-rc2
\ No newline at end of file
diff --git a/lifecycle/aws/template.yaml b/lifecycle/aws/template.yaml
index 88a6a92740..bd3a4cc4ca 100644
--- a/lifecycle/aws/template.yaml
+++ b/lifecycle/aws/template.yaml
@@ -18,7 +18,7 @@ Parameters:
     Description: authentik Docker image
   AuthentikVersion:
     Type: String
-    Default: 2025.12.0-rc1
+    Default: 2025.12.0-rc2
     Description: authentik Docker image tag
   AuthentikServerCPU:
     Type: Number
diff --git a/package-lock.json b/package-lock.json
index 63139873c2..680983ce5a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
     "name": "@goauthentik/authentik",
-    "version": "2025.12.0-rc1",
+    "version": "2025.12.0-rc2",
     "lockfileVersion": 3,
     "requires": true,
     "packages": {
         "": {
             "name": "@goauthentik/authentik",
-            "version": "2025.12.0-rc1",
+            "version": "2025.12.0-rc2",
             "dependencies": {
                 "@eslint/js": "^9.39.1",
                 "@goauthentik/eslint-config": "./packages/eslint-config",
diff --git a/package.json b/package.json
index abd91c2546..c90d5f9033 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@goauthentik/authentik",
-    "version": "2025.12.0-rc1",
+    "version": "2025.12.0-rc2",
     "private": true,
     "type": "module",
     "dependencies": {
diff --git a/pyproject.toml b/pyproject.toml
index 733f3d7aa3..f1bf5b9e18 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "authentik"
-version = "2025.12.0-rc1"
+version = "2025.12.0-rc2"
 description = ""
 authors = [{ name = "authentik Team", email = "hello@goauthentik.io" }]
 requires-python = "==3.13.*"
diff --git a/schema.yml b/schema.yml
index b870898091..f1ba19fc08 100644
--- a/schema.yml
+++ b/schema.yml
@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: authentik
-  version: 2025.12.0-rc1
+  version: 2025.12.0-rc2
   description: Making authentication simple.
   contact:
     email: hello@goauthentik.io
diff --git a/uv.lock b/uv.lock
index 046c46c5e4..bc0e046923 100644
--- a/uv.lock
+++ b/uv.lock
@@ -185,7 +185,7 @@ wheels = [
 
 [[package]]
 name = "authentik"
-version = "2025.12.0rc1"
+version = "2025.12.0rc2"
 source = { editable = "." }
 dependencies = [
     { name = "ak-guardian" },
diff --git a/web/package-lock.json b/web/package-lock.json
index e9705c6b10..4017e6a54d 100644
--- a/web/package-lock.json
+++ b/web/package-lock.json
@@ -1,12 +1,12 @@
 {
     "name": "@goauthentik/web",
-    "version": "2025.12.0-rc1",
+    "version": "2025.12.0-rc2",
     "lockfileVersion": 3,
     "requires": true,
     "packages": {
         "": {
             "name": "@goauthentik/web",
-            "version": "2025.12.0-rc1",
+            "version": "2025.12.0-rc2",
             "license": "MIT",
             "workspaces": [
                 "./packages/*"
diff --git a/web/package.json b/web/package.json
index 2ea9bf5715..930e65f96b 100644
--- a/web/package.json
+++ b/web/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@goauthentik/web",
-    "version": "2025.12.0-rc1",
+    "version": "2025.12.0-rc2",
     "license": "MIT",
     "private": true,
     "scripts": {