22491 Commits

Author SHA1 Message Date
Marc 'risson' Schmitt 461f9b4cf2 packages/ak-common/db: fix certificates options not allowing file paths (#22680)
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2026-05-27 19:43:27 +02:00
Marc 'risson' Schmitt 5c1eb0e449 packages/ak-common/db: fix conn_max_age causing spinning (#22679)
* packages/ak-common/config: fix option int parsing, specifically for conn_max_age

Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>

* packages/ak-common/db: fix conn_max_age usage

Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>

---------

Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2026-05-27 19:43:13 +02:00
Connor Peshek ed5b7d17b1 root: make tests run when running make all (#22186)
Root: make tests run when running make all
2026-05-27 13:13:09 +02:00
Connor Peshek aa41ac57e3 root: fix make gen-diff command (#22548) 2026-05-27 05:37:19 -05:00
Jens L. 7f31c4cf56 events: fix Event.log_deprecation not checking that cause is a string (#22598) 2026-05-27 12:36:55 +02:00
transifex-integration[bot] 17399f3026 translate: Updates for project authentik and language no_NO (#22643) 2026-05-27 10:30:13 +00:00
dependabot[bot] 3584674ab6 core: bump black from 26.5.0 to 26.5.1 (#22649)
Bumps [black](https://github.com/psf/black) from 26.5.0 to 26.5.1.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/26.5.0...26.5.1)

---
updated-dependencies:
- dependency-name: black
  dependency-version: 26.5.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-27 12:01:27 +02:00
dependabot[bot] f1db47fbd7 web: bump yaml from 2.8.4 to 2.9.0 in /web (#22475)
Bumps [yaml](https://github.com/eemeli/yaml) from 2.8.4 to 2.9.0.
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](https://github.com/eemeli/yaml/compare/v2.8.4...v2.9.0)

---
updated-dependencies:
- dependency-name: yaml
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 22:06:28 +02:00
dependabot[bot] bc4963e697 lifecycle/aws: bump aws-cdk from 2.1122.0 to 2.1123.0 in /lifecycle/aws (#22665)
Bumps [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk) from 2.1122.0 to 2.1123.0.
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1123.0/packages/aws-cdk)

---
updated-dependencies:
- dependency-name: aws-cdk
  dependency-version: 2.1123.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 22:05:53 +02:00
dependabot[bot] 19aedc8e1b core: bump goauthentik/selenium from 147.0-ak-0.43.0 to 148.0-ak-0.43.0 in /tests/e2e (#22664)
core: bump goauthentik/selenium in /tests/e2e

Bumps [goauthentik/selenium](https://github.com/SeleniumHQ/docker-selenium) from 147.0-ak-0.43.0 to 148.0-ak-0.43.0.
- [Release notes](https://github.com/SeleniumHQ/docker-selenium/releases)
- [Commits](https://github.com/SeleniumHQ/docker-selenium/commits)

---
updated-dependencies:
- dependency-name: goauthentik/selenium
  dependency-version: 148.0-ak-0.43.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 22:05:30 +02:00
dependabot[bot] 5fad9715f8 core: bump aws-cdk-lib from 2.254.0 to 2.255.0 (#22668)
Bumps [aws-cdk-lib](https://github.com/aws/aws-cdk) from 2.254.0 to 2.255.0.
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/compare/v2.254.0...v2.255.0)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.255.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 22:05:12 +02:00
dependabot[bot] 8fd9bab3fa core: bump the types group with 5 updates (#22667)
Bumps the types group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [types-channels](https://github.com/python/typeshed) | `4.3.0.20260508` | `4.3.0.20260518` |
| [types-docker](https://github.com/python/typeshed) | `7.1.0.20260512` | `7.1.0.20260518` |
| [types-jwcrypto](https://github.com/python/typeshed) | `1.5.7.20260513` | `1.5.7.20260518` |
| [types-ldap3](https://github.com/python/typeshed) | `2.9.13.20260508` | `2.9.13.20260518` |
| [types-requests](https://github.com/python/typeshed) | `2.33.0.20260513` | `2.33.0.20260518` |


Updates `types-channels` from 4.3.0.20260508 to 4.3.0.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-docker` from 7.1.0.20260512 to 7.1.0.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-jwcrypto` from 1.5.7.20260513 to 1.5.7.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-ldap3` from 2.9.13.20260508 to 2.9.13.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-requests` from 2.33.0.20260513 to 2.33.0.20260518
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: types-channels
  dependency-version: 4.3.0.20260518
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: types
- dependency-name: types-docker
  dependency-version: 7.1.0.20260518
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: types
- dependency-name: types-jwcrypto
  dependency-version: 1.5.7.20260518
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: types
- dependency-name: types-ldap3
  dependency-version: 2.9.13.20260518
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: types
- dependency-name: types-requests
  dependency-version: 2.33.0.20260518
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: types
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 19:20:24 +02:00
transifex-integration[bot] cd2716be33 translate: Updates for project authentik and language fr_FR (#22638) 2026-05-26 15:45:04 +00:00
dependabot[bot] 75b8694bbf core: bump types-zxcvbn from 4.5.0.20260508 to 4.5.0.20260518 (#22652)
* core: bump types-zxcvbn from 4.5.0.20260508 to 4.5.0.20260518

Bumps [types-zxcvbn](https://github.com/python/typeshed) from 4.5.0.20260508 to 4.5.0.20260518.
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: types-zxcvbn
  dependency-version: 4.5.0.20260518
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* merge types updates

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
2026-05-26 17:25:26 +02:00
dependabot[bot] e138cbd85f core: bump goauthentik/fips-python from 85dbb3a to 33d1ed9 in /lifecycle/container (#22654)
core: bump goauthentik/fips-python in /lifecycle/container

Bumps goauthentik/fips-python from `85dbb3a` to `33d1ed9`.

---
updated-dependencies:
- dependency-name: goauthentik/fips-python
  dependency-version: 3.14.5-slim-trixie-fips
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 17:07:54 +02:00
dependabot[bot] f1c542e2e4 web: bump @formatjs/intl-listformat from 8.3.5 to 8.3.8 in /web (#22656)
Bumps [@formatjs/intl-listformat](https://github.com/formatjs/formatjs) from 8.3.5 to 8.3.8.
- [Release notes](https://github.com/formatjs/formatjs/releases)
- [Commits](https://github.com/formatjs/formatjs/compare/@formatjs/intl-listformat@8.3.5...@formatjs/intl-listformat@8.3.8)

---
updated-dependencies:
- dependency-name: "@formatjs/intl-listformat"
  dependency-version: 8.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 17:07:24 +02:00
dependabot[bot] 4d5d7bf135 ci: bump taiki-e/install-action from 2.79.5 to 2.79.6 in /.github/actions/setup (#22655)
* ci: bump taiki-e/install-action in /.github/actions/setup

Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.79.5 to 2.79.6.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/install-action/compare/6c1f7cf125e42770ff087ea443901b487cc5471a...f48d2f8ba2b452934c948b7be1a768079c3632ff)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.79.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* re-lock

* sigh

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
2026-05-26 17:06:53 +02:00
NiceDevil 181c0a2a4b website/integrations: Personio (#22634)
* website/integrations: Personio

Add an integration guide for Personio with OIDC SSO against authentik,
covering the confidential OAuth2/OpenID Connect provider configuration
in authentik and the Personio OIDC settings (issuer, authorization,
token, userinfo, and JWKS endpoints, scopes, client credentials, and
the email claim mapping). Tested with Personio (SaaS) and authentik
2026.5.0.

Also add Personio to the integrations spell-check dictionary.

* website/integrations: Personio: cleanup

Refresh the Personio OIDC guide to match the integration template and current Personio setup flow.

Agent-thread: https://sdko.org/internal/threads/019e610a-5c59-7050-88e7-3c9569491cf2

Co-authored-by: Agent <agent@svc.sdko.net>

---------

Co-authored-by: nicedevil007 <nicedevil007@users.noreply.github.com>
Co-authored-by: Dominic R <dominic@goauthentik.io>
Co-authored-by: Agent <agent@svc.sdko.net>
2026-05-26 13:02:38 +02:00
dependabot[bot] e4f71e2479 lifecycle/aws: bump aws-cdk from 2.1121.0 to 2.1122.0 in /lifecycle/aws (#22558)
Bumps [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk) from 2.1121.0 to 2.1122.0.
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1122.0/packages/aws-cdk)

---
updated-dependencies:
- dependency-name: aws-cdk
  dependency-version: 2.1122.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2026-05-26 11:36:02 +02:00
dependabot[bot] d9fa1dbd89 core: bump astral-sh/uv from 0.11.15 to 0.11.16 in /lifecycle/container (#22564)
Bumps [astral-sh/uv](https://github.com/astral-sh/uv) from 0.11.15 to 0.11.16.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/uv/compare/0.11.15...0.11.16)

---
updated-dependencies:
- dependency-name: astral-sh/uv
  dependency-version: 0.11.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2026-05-26 11:35:48 +02:00
dependabot[bot] 9c6315f691 website: bump semver from 7.8.0 to 7.8.1 in /website (#22613)
Bumps [semver](https://github.com/npm/node-semver) from 7.8.0 to 7.8.1.
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v7.8.0...v7.8.1)

---
updated-dependencies:
- dependency-name: semver
  dependency-version: 7.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 11:35:18 +02:00
dependabot[bot] ab4efb8e86 core: bump github.com/go-openapi/runtime from 0.30.0 to 0.31.0 (#22615)
Bumps [github.com/go-openapi/runtime](https://github.com/go-openapi/runtime) from 0.30.0 to 0.31.0.
- [Release notes](https://github.com/go-openapi/runtime/releases)
- [Commits](https://github.com/go-openapi/runtime/compare/v0.30.0...v0.31.0)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/runtime
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 11:35:06 +02:00
dependabot[bot] 4443c5c826 core: bump beryju.io/radius-eap from 0.1.0 to 0.1.1 (#22614)
Signed-off-by: dependabot[bot] <support@github.com>
2026-05-26 09:34:44 +00:00
dependabot[bot] c09742e98e core: bump goauthentik/selenium from 145.0-ak-0.40.5 to 147.0-ak-0.43.0 in /tests/e2e (#22617)
core: bump goauthentik/selenium in /tests/e2e

Bumps [goauthentik/selenium](https://github.com/SeleniumHQ/docker-selenium) from 145.0-ak-0.40.5 to 147.0-ak-0.43.0.
- [Release notes](https://github.com/SeleniumHQ/docker-selenium/releases)
- [Commits](https://github.com/SeleniumHQ/docker-selenium/commits)

---
updated-dependencies:
- dependency-name: goauthentik/selenium
  dependency-version: 147.0-ak-0.43.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 11:34:10 +02:00
dependabot[bot] 207234bc13 web: bump ws from 8.20.0 to 8.21.0 in /web (#22587)
Bumps [ws](https://github.com/websockets/ws) from 8.20.0 to 8.21.0.
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](https://github.com/websockets/ws/compare/8.20.0...8.21.0)

---
updated-dependencies:
- dependency-name: ws
  dependency-version: 8.21.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 11:33:47 +02:00
dependabot[bot] 560d3c9c6f web: bump qs from 6.15.1 to 6.15.2 (#22586)
Bumps [qs](https://github.com/ljharb/qs) from 6.15.1 to 6.15.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.15.1...v6.15.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 11:33:37 +02:00
dependabot[bot] 6154626b35 web: bump ws from 7.5.10 to 7.5.11 (#22585)
Bumps [ws](https://github.com/websockets/ws) from 7.5.10 to 7.5.11.
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](https://github.com/websockets/ws/compare/7.5.10...7.5.11)

---
updated-dependencies:
- dependency-name: ws
  dependency-version: 7.5.11
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 11:33:16 +02:00
dependabot[bot] 966ec0b435 core: bump axllent/mailpit from v1.29.6 to v1.30.0 in /tests/e2e (#22577)
Bumps axllent/mailpit from v1.29.6 to v1.30.0.

---
updated-dependencies:
- dependency-name: axllent/mailpit
  dependency-version: v1.30.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 11:32:28 +02:00
dependabot[bot] fb58aaa2c2 core: bump cachetools from 7.1.3 to 7.1.4 (#22619)
Bumps [cachetools](https://github.com/tkem/cachetools) from 7.1.3 to 7.1.4.
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/tkem/cachetools/compare/v7.1.3...v7.1.4)

---
updated-dependencies:
- dependency-name: cachetools
  dependency-version: 7.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 11:31:54 +02:00
dependabot[bot] 8e620ed631 core: bump ruff from 0.15.13 to 0.15.14 (#22618)
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.13 to 0.15.14.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.15.13...0.15.14)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.15.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 11:31:46 +02:00
dependabot[bot] ba8c2e666e core: bump black from 26.3.1 to 26.5.0 (#22616)
Bumps [black](https://github.com/psf/black) from 26.3.1 to 26.5.0.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/26.3.1...26.5.0)

---
updated-dependencies:
- dependency-name: black
  dependency-version: 26.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 11:31:36 +02:00
dependabot[bot] c450e52e56 core: bump goauthentik/fips-python from 636cb9b to 85dbb3a in /lifecycle/container (#22620)
core: bump goauthentik/fips-python in /lifecycle/container

Bumps goauthentik/fips-python from `636cb9b` to `85dbb3a`.

---
updated-dependencies:
- dependency-name: goauthentik/fips-python
  dependency-version: 3.14.5-slim-trixie-fips
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 11:31:25 +02:00
dependabot[bot] 1bc8277899 core: bump reqwest-middleware from 0.5.1 to 0.5.2 (#22631)
Bumps [reqwest-middleware](https://github.com/TrueLayer/reqwest-middleware) from 0.5.1 to 0.5.2.
- [Release notes](https://github.com/TrueLayer/reqwest-middleware/releases)
- [Commits](https://github.com/TrueLayer/reqwest-middleware/compare/reqwest-middleware-v0.5.1...reqwest-middleware-v0.5.2)

---
updated-dependencies:
- dependency-name: reqwest-middleware
  dependency-version: 0.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2026-05-26 11:21:30 +02:00
dependabot[bot] 77576832ac ci: bump actions/stale from 10.2.0 to 10.3.0 (#22625)
Bumps [actions/stale](https://github.com/actions/stale) from 10.2.0 to 10.3.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/b5d41d4e1d5dceea10e7104786b73624c18a190f...eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2026-05-26 11:20:00 +02:00
dependabot[bot] 182f1ef695 ci: bump docker/setup-buildx-action from 4.0.0 to 4.1.0 (#22626)
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2026-05-26 11:19:39 +02:00
dependabot[bot] 91753b2a03 ci: bump github/codeql-action from 4.35.5 to 4.36.0 (#22624)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.5 to 4.36.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/9e0d7b8d25671d64c341c19c0152d693099fb5ba...7211b7c8077ea37d8641b6271f6a365a22a5fbfa)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2026-05-26 11:19:21 +02:00
dependabot[bot] d4184a58ff ci: bump docker/build-push-action from 7.1.0 to 7.2.0 (#22623)
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 7.1.0 to 7.2.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/bcafcacb16a39f128d818304e6c9c0c18556b85f...f9f3042f7e2789586610d6e8b85c8f03e5195baf)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2026-05-26 11:19:04 +02:00
dependabot[bot] 9258f6ae0d core: bump library/nginx from 1.31-trixie to 1.31.1-trixie in /website (#22622)
Bumps library/nginx from 1.31-trixie to 1.31.1-trixie.

---
updated-dependencies:
- dependency-name: library/nginx
  dependency-version: 1.31.1-trixie
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2026-05-26 11:18:48 +02:00
dependabot[bot] 37541ef857 core: bump library/golang from f34e716 to 0f6b034 in /lifecycle/container (#22621)
core: bump library/golang in /lifecycle/container

Bumps library/golang from `f34e716` to `0f6b034`.

---
updated-dependencies:
- dependency-name: library/golang
  dependency-version: 1.26.3-trixie
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 11:18:22 +02:00
dependabot[bot] 4190de1870 ci: bump docker/login-action from 4.1.0 to 4.2.0 (#22627)
Signed-off-by: dependabot[bot] <support@github.com>
2026-05-26 11:10:19 +02:00
dependabot[bot] 7d797e9ae8 ci: bump taiki-e/install-action from 2.79.2 to 2.79.5 in /.github/actions/setup (#22629)
Signed-off-by: dependabot[bot] <support@github.com>
2026-05-26 11:10:10 +02:00
dependabot[bot] 4e469e42c9 ci: bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 (#22628)
Signed-off-by: dependabot[bot] <support@github.com>
2026-05-26 11:10:00 +02:00
dependabot[bot] 883fb37df6 core: bump serde_json from 1.0.149 to 1.0.150 (#22630)
Signed-off-by: dependabot[bot] <support@github.com>
2026-05-26 11:09:48 +02:00
NiceDevil 47542149e4 website/integrations: Omnissa Workspace ONE Access (#22636)
* website/integrations: Omnissa Workspace ONE Access

Add an integration guide for Omnissa Workspace ONE Access with OIDC SSO
against authentik, covering the OAuth2/OpenID Connect provider
configuration in authentik (with both the web and the awgb://oauth2
mobile redirect URIs), the OpenID Connect IDP setup under
Integrations > Identity Providers in Omnissa Workspace ONE Access
(manual endpoint configuration, client credentials, user lookup
attribute mapping, directories, network ranges, authentication method
name), and a short pointer to wiring the new authentication method
into the relevant access policies. Tested with Omnissa Workspace ONE
Access (SaaS) and authentik 2026.5.0.

Also add Omnissa to the integrations spell-check dictionary.

* website/integrations: Omnissa Workspace ONE Access: cleanup

Clean up the Omnissa Workspace ONE Access integration guide to match current OIDC guidance and template structure.

Agent-thread: https://sdko.org/internal/threads/019e6109-22aa-74a0-a539-ee3f017da7af

Co-authored-by: Agent <agent@svc.sdko.net>

---------

Co-authored-by: nicedevil007 <nicedevil007@users.noreply.github.com>
Co-authored-by: Dominic R <dominic@goauthentik.io>
Co-authored-by: Agent <agent@svc.sdko.net>
2026-05-25 22:47:07 +00:00
NiceDevil 740af3aa5e website/integrations: Veeam Backup & Replication (#22635)
* website/integrations: Veeam Backup & Replication

Add an integration guide for Veeam Backup & Replication with SAML SSO
against authentik, covering the Users and Roles > Identity Provider
configuration in the VBR console, the SAML Provider from Metadata
setup in authentik, the metadata exchange between both sides, and the
External Group role mapping. Tested with Veeam Backup & Replication
13.0.1 and authentik 2026.5.0.

* website/integrations: Veeam Backup & Replication: cleanup

Update the Veeam Backup & Replication SAML guide to match the current integration template and verified Veeam/authentik terminology.

Agent-thread: https://sdko.org/internal/threads/019e6109-a3c8-76b3-a443-02ca7927a08f

Co-authored-by: Agent <agent@svc.sdko.net>

* Apply suggestion from @dominic-r

Signed-off-by: Dominic R <dominic@goauthentik.io>

---------

Signed-off-by: Dominic R <dominic@goauthentik.io>
Co-authored-by: nicedevil007 <nicedevil007@users.noreply.github.com>
Co-authored-by: Dominic R <dominic@goauthentik.io>
Co-authored-by: Agent <agent@svc.sdko.net>
Co-authored-by: Dominic R <dominic@sdko.org>
2026-05-25 22:40:21 +00:00
NiceDevil 5e9a295631 website/integrations: Dashy (#22633)
* website/integrations: Dashy

Add an integration guide for Dashy with OIDC SSO against authentik,
covering the public OAuth2/OpenID Connect provider configuration in
authentik and the Dashy OIDC settings (web UI and conf.yml). Tested
with Dashy 4.1.15 and authentik 2026.5.0.

* website/integrations: Dashy: cleanup

Clean up the Dashy integration guide to match the current template and OIDC behavior.

Agent-thread: https://sdko.org/internal/threads/019e611f-c782-7741-8b53-a83e0b658006

Co-authored-by: Agent <agent@svc.sdko.net>

---------

Co-authored-by: nicedevil007 <nicedevil007@users.noreply.github.com>
Co-authored-by: Dominic R <dominic@goauthentik.io>
Co-authored-by: Agent <agent@svc.sdko.net>
2026-05-25 22:32:58 +00:00
NiceDevil 659d009f32 website/integrations: mailcow Logs Viewer (#22632)
* website/integrations: mailcow Logs Viewer

Add an integration guide for mailcow Logs Viewer with OAuth2/OIDC SSO
against authentik, covering the application/provider creation and the
OAuth2 environment variables on the mailcow Logs Viewer side. Tested
with mailcow Logs Viewer 2.6.1 and authentik 2026.5.0.

* website/integrations: mailcow Logs Viewer: cleanup

Align the mailcow Logs Viewer guide with the integration template and remove default-only OAuth settings.

Agent-thread: https://sdko.org/internal/threads/019e6120-481a-7892-9720-e2b9ff002e6e

Co-authored-by: Agent <agent@svc.sdko.net>

---------

Co-authored-by: nicedevil007 <nicedevil007@users.noreply.github.com>
Co-authored-by: Dominic R <dominic@goauthentik.io>
Co-authored-by: Agent <agent@svc.sdko.net>
2026-05-25 22:31:09 +00:00
Fletcher Heisler 8c40db3c71 docs: Americanize and minor fixes (#22600)
* typo fixes

* americanize

* made docs
2026-05-24 10:12:35 -04:00
Jens L. 3e74ab9916 endpoints/connectors/agent: allow federated auth via ssh hostkey lookup (#22594)
* endpoints/connectors/agent: allow federated auth via ssh hostkey lookup

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add lookup test

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2026-05-23 22:00:38 +02:00
Connor Peshek 2e75de2327 root: update security release versions (#22583)
Co-authored-by: Dominic R <dominic@goauthentik.io>
2026-05-22 22:44:44 -05:00