authentik: Release 2025.10.2

See https://docs.goauthentik.io/docs/releases/2025.10#fixed-in-2025102 ## What's Changed * brands: add more matching tests (cherry-pick #16185 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17924 * brands: sort matched brand by match length (cherry-pick #17920 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17935 * tasks/schedules: fix rel obj not being associated or updated (cherry-pick #17934 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17936 * website/docs: added Note about email_verified scope mapping is set to false by default (cherry-pick #17942 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17961 * website/docs: remove broken info box and fix sentence (cherry-pick #17963 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17965 * core: bump django from 5.2.7 to 5.2.8 (cherry-pick #17967 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18003 * website/docs: updates img-src csp (cherry-pick #18010 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18012 * ci: fix migrate-from-stable for old versions (#18019) by @BeryJu in https://github.com/goauthentik/authentik/pull/18024 * website/release notes: fix broken urls (cherry-pick #18041 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18044 * website/docs: update discord social login script example (cherry-pick #18026 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18057 * ci: attempt to fix integration tests using dind (cherry-pick #18066 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18069 * ci: revert to upstream GHA for release (#18058) by @BeryJu in https://github.com/goauthentik/authentik/pull/18065 * events: fix timezone not set for log events (cherry-pick #18067 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18071 * providers/scim: allow custom schema data (cherry-pick #18073 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18075 * core: improve app launch URL formatting (cherry-pick #18076 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18087 * cmd/server/healthcheck: remove worker HTTP healthcheck (cherry-pick #18090 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18091 * web: Fix RAC modal visibility. (cherry-pick #17941 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18097 * web: Fix tab activation, blank provider URLs (cherry-pick #18031 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18101 * website/docs: fix wording in stages overview (cherry-pick #18061 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18120 * packages/django-dramatiq-postgres: broker: ensure locking happens with the same connection (cherry-pick #18095 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18119 * web/flows: improvements for hCaptcha (cherry-pick #16882 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18128 * web/admin: link to user on invitation list page (cherry-pick #18132 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18134 * packages/django-channels-postgres/layer: fix query when subscribed to multiple channels (cherry-pick #18152 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18153 * web: Disable library `<datalist>` on Firefox. (cherry-pick #18103 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18135 * web/sfe: downgrade bootstrap that was accidentally upgraded (cherry-pick #18157 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18171 * website/docs: Add instructions for installing RC versions (cherry-pick #18099 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18193 * website/docs: update application description (cherry-pick #18125 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18127 * stages/prompt: fix choices with labels causing error on submit (cherry-pick #18183 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18236 * internal: Automated internal backport: 1487-invitation-expiry.sec.patch to authentik-2025.10 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18258 * internal: Automated internal backport: 1498-oauth2-cc-user-active.sec.patch to authentik-2025.10 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18259 * internal: Automated internal backport: 5000-sidebar.sec.patch to authentik-2025.10 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18260 * website/docs: add 2025.8.5 and 2025.10.2 release notes (cherry-pick #18268 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18270 **Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2025.10.1...version/2025.10.2