Impact Score: 5/10
authentik: Release 2025.12.3
Source available — automated, not human-reviewed
Component: authentik · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
authentik version/2025.12.3. Source highlight: See https://docs.goauthentik.io/docs/releases/2025.12#fixed-in-2025123
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
✨ New Features & Capabilities (2)
- 2025.12: Revert bulk revoke added by accident in release branch
- lifecycle/aws: add /data volume (cherry-pick #19936 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19938
🔧 Bug Fixes & Patches (3)
- web/admin: fix toggle-group for bindings now showing up (cherry-pick #19820 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19895
- web: fix Brand CSS not applied to nested Shadow DOM components (cherry-pick #19892 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19900
- core: fix non-expiring service accounts and app passwords (cherry-pick #19913 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19941
📄 View Raw Release Notes (Original Developer Log)
See https://docs.goauthentik.io/docs/releases/2025.12#fixed-in-2025123
## What's Changed
* 2025.12: Revert bulk revoke added by accident in release branch by @dominic-r in https://github.com/goauthentik/authentik/pull/19870
* web/admin: fix toggle-group for bindings now showing up (cherry-pick #19820 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19895
* website/docs: Remove stale 2024 version directives (cherry-pick #19888 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19899
* web: fix Brand CSS not applied to nested Shadow DOM components (cherry-pick #19892 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19900
* ci: always generate API clients (#19906) by @BeryJu in https://github.com/goauthentik/authentik/pull/19932
* lifecycle/ak: make sure /data has the correct permissions (cherry-pick #19935 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19940
* lifecycle/aws: add /data volume (cherry-pick #19936 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19938
* website/docs: Update location of media storage and outdated references (cherry-pick #19885 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19937
* core: fix non-expiring service accounts and app passwords (cherry-pick #19913 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19941
**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2025.12.2...version/2025.12.3