⚠️ Breaking Change
Impact Score: 7/10
authentik: Release 2025.10.1
Source available — automated, not human-reviewed
Component: authentik · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
Breaking-change evidence from the source
outpost: revert breaking signals change (cherry-pick #17847 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17848
⚡ Executive Summary (TL;DR)
authentik version/2025.10.1. Source highlight: See https://docs.goauthentik.io/docs/releases/2025.10#fixed-in-2025101
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
⚠️ Breaking Changes & Deprecations (1)
- outpost: revert breaking signals change (cherry-pick #17847 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17848
✨ New Features & Capabilities (1)
- root: Add Dockerfile label org.opencontainers.image.source (cherry-pick #17756 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17757
🔧 Bug Fixes & Patches (6)
- website/docs: fix placeholder leftover (cherry-pick #17737 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17738
- providers/proxy: fix missing JWT/claims header (cherry-pick #17759 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17764
- providers/radius: fix panic when no cert is configured (cherry-pick #17762 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17766
- internal: fix go deprecation for +build (cherry-pick #17806 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17824
- internal/web/proxy: fix return status code during startup (cherry-pick #17827 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17832
- web/admin: fix scim provider form (cherry-pick #17831 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17834
📄 View Raw Release Notes (Original Developer Log)
See https://docs.goauthentik.io/docs/releases/2025.10#fixed-in-2025101
## What's Changed
* website/docs: fix placeholder leftover (cherry-pick #17737 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17738
* root: Add Dockerfile label org.opencontainers.image.source (cherry-pick #17756 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17757
* providers/proxy: fix missing JWT/claims header (cherry-pick #17759 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17764
* sources/oauth: Make PKCE verifier 128 characters (cherry-pick #17763 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17765
* providers/radius: fix panic when no cert is configured (cherry-pick #17762 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17766
* providers/oauth2: move encryption key field (cherry-pick #17722 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17729
* packages/django-postgres-cache: use upsert instead of select/update in a transaction (cherry-pick #17760 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17767
* tasks: delay startup signals (cherry-pick #17769 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17775
* root: use hashes for dockerfile FROM (cherry-pick #17795 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17798
* internal: fix go deprecation for +build (cherry-pick #17806 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17824
* ci: rework internal repo (#17797) by @BeryJu in https://github.com/goauthentik/authentik/pull/17829
* internal/web/proxy: fix return status code during startup (cherry-pick #17827 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17832
* web/admin: fix scim provider form (cherry-pick #17831 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17834
* core: bump astral-sh/uv from 0.9.5 to 0.9.6 (cherry-pick #17820 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17835
* tasks: sanitize log attributes (cherry-pick #17833 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17842
* outposts: update permissions more eagerly (cherry-pick #17783 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17841
* outpost: revert breaking signals change (cherry-pick #17847 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17848
* internal: full openssl path (cherry-pick #17856 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17860
* web: Consistent Tab Panel URL Parameters (cherry-pick #17804 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17859
* web/a11y: User library -- fix issues surrounding element focus, ARIA labeling. (cherry-pick #17522 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17828
* providers/radius: fix inverted message authenticator validation (cherry-pick #17855 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17888
* providers/radius: revert fix inverted message authenticator validation (#17855) (cherry-pick #17915 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17916
* providers/oauth2: fix kid always required for federation (cherry-pick #17914 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17917
* website/docs: 2025.10.1 release notes (cherry-pick #17918 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17919
**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2025.10.0...version/2025.10.1