authentik: Release 2025.4.0

See https://docs.goauthentik.io/docs/releases/2025.4 ## What's Changed * core: clear expired database sessions by @BeryJu in https://github.com/goauthentik/authentik/pull/13105 * website/docs: add 2025.2 release notes by @BeryJu in https://github.com/goauthentik/authentik/pull/13002 * providers/rac: move to open source by @gergosimonyi in https://github.com/goauthentik/authentik/pull/13015 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13113 * web/user: fix opening application with Enter not respecting new tab setting by @BeryJu in https://github.com/goauthentik/authentik/pull/13115 * web/admin: update Application Wizard button placement by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/12771 * cmd: set version in outposts by @BeryJu in https://github.com/goauthentik/authentik/pull/13116 * sources/oauth: add group sync for azure_ad by @BeryJu in https://github.com/goauthentik/authentik/pull/12894 * website: Use Docusaurus Frontmatter for badges by @GirlBossRush in https://github.com/goauthentik/authentik/pull/12893 * web: Indicate when caps-lock is active during password input. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/12733 * web/flows: fix error on interactive Captcha stage when retrying captcha by @BeryJu in https://github.com/goauthentik/authentik/pull/13119 * revert: rbac: exclude permissions for internal models (#12803) by @BeryJu in https://github.com/goauthentik/authentik/pull/13138 * core: bump zxcvbn from 4.4.28 to 4.5.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13128 * policies/geoip: fix math in impossible travel by @BeryJu in https://github.com/goauthentik/authentik/pull/13141 * enterprise/stages/source: fix Source stage not executing authentication/enrollment flow by @BeryJu in https://github.com/goauthentik/authentik/pull/12875 * core: bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13135 * core: bump goauthentik.io/api/v3 from 3.2024123.6 to 3.2024123.7 by @dependabot in https://github.com/goauthentik/authentik/pull/13134 * lifecycle/aws: bump aws-cdk from 2.179.0 to 2.1000.2 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/13133 * core: bump duo-client from 5.3.0 to 5.4.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13132 * core: bump kubernetes from 32.0.0 to 32.0.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13131 * website: bump postcss from 8.5.2 to 8.5.3 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13130 * website: bump semver from 7.7.0 to 7.7.1 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13129 * scripts: fix broken link by @gergosimonyi in https://github.com/goauthentik/authentik/pull/13156 * web/user: fix post MFA creation link being invalid by @BeryJu in https://github.com/goauthentik/authentik/pull/13157 * core: bump selenium from 4.28.1 to 4.29.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13155 * website: bump docusaurus-plugin-openapi-docs from 4.3.4 to 4.3.5 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13153 * core: bump twilio from 9.4.5 to 9.4.6 by @dependabot in https://github.com/goauthentik/authentik/pull/13151 * core: bump ruff from 0.9.6 to 0.9.7 by @dependabot in https://github.com/goauthentik/authentik/pull/13150 * website: bump docusaurus-theme-openapi-docs from 4.3.4 to 4.3.5 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13154 * website: bump disqus-react from 1.1.5 to 1.1.6 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13152 * website/docs: troubleshooting: fix missing command prefix for create admin group command in Docker by @dominic-r in https://github.com/goauthentik/authentik/pull/13107 * web/user: fix RAC launch not opening when clicking icon by @BeryJu in https://github.com/goauthentik/authentik/pull/13164 * ci: update poetry sync command by @rissson in https://github.com/goauthentik/authentik/pull/13161 * root: allow configuring session cookie age by @rissson in https://github.com/goauthentik/authentik/pull/12389 * web/admin: only show message when not editing an application by @BeryJu in https://github.com/goauthentik/authentik/pull/13165 * web/user: fix race condition in user settings flow executor by @BeryJu in https://github.com/goauthentik/authentik/pull/13163 * website: enable docusaurus faster option by @BeryJu in https://github.com/goauthentik/authentik/pull/12326 * website/docs: fix typo by @klmmr in https://github.com/goauthentik/authentik/pull/13174 * web/flow: update default flow background by @BeryJu in https://github.com/goauthentik/authentik/pull/13175 * web/flow: grab focus to uid input field by @BeryJu in https://github.com/goauthentik/authentik/pull/13177 * web/flows: disambiguate brand links codeblock by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/12141 * web/admin: fix default selection for binding policy by @BeryJu in https://github.com/goauthentik/authentik/pull/13180 * core: add darkreader-lock by @BeryJu in https://github.com/goauthentik/authentik/pull/13183 * website: revert enable docusaurus faster option (#12326) by @BeryJu in https://github.com/goauthentik/authentik/pull/13207 * core: bump github.com/redis/go-redis/v9 from 9.7.0 to 9.7.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13205 * core: bump psycopg from 3.2.4 to 3.2.5 by @dependabot in https://github.com/goauthentik/authentik/pull/13203 * core: bump setproctitle from 1.3.4 to 1.3.5 by @dependabot in https://github.com/goauthentik/authentik/pull/13202 * website: bump prettier from 3.5.1 to 3.5.2 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13192 * web/flow: fix translate extract by @BeryJu in https://github.com/goauthentik/authentik/pull/13208 * web/user: fix display for RAC tile by @BeryJu in https://github.com/goauthentik/authentik/pull/13211 * website/docs: updated debugging docs by @BeryJu in https://github.com/goauthentik/authentik/pull/12809 * website/docs: add new SSF provider docs by @tanberry in https://github.com/goauthentik/authentik/pull/13102 * website/docs: add info about new perms for super-user in groups by @tanberry in https://github.com/goauthentik/authentik/pull/13188 * stages/authenticator_email: Email Authenticator Stage Documentation by @melizeche in https://github.com/goauthentik/authentik/pull/12853 * website/docs: remove mention of wizard by @tanberry in https://github.com/goauthentik/authentik/pull/13126 * website/docs: remove Enterprise badge from RAC docs by @gergosimonyi in https://github.com/goauthentik/authentik/pull/13069 * website/docs: add paragraph about impossible travel by @tanberry in https://github.com/goauthentik/authentik/pull/13125 * core: bump aws-cdk-lib from 2.179.0 to 2.180.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13204 * website/docs: update the 2025.2 rel notes by @tanberry in https://github.com/goauthentik/authentik/pull/13213 * website/docs: fix missing breaking entry for 2025.2 release notes by @BeryJu in https://github.com/goauthentik/authentik/pull/13223 * root: Backport version 2025.2 by @BeryJu in https://github.com/goauthentik/authentik/pull/13225 * website/docs: Add Passkeys reference where WebAuthn is mentioned by @melizeche in https://github.com/goauthentik/authentik/pull/13167 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13226 * website: remove images from integrations index page by @dominic-r in https://github.com/goauthentik/authentik/pull/12897 * core: bump goauthentik.io/api/v3 from 3.2024123.7 to 3.2025020.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13241 * lifecycle/aws: bump aws-cdk from 2.1000.2 to 2.1000.3 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/13239 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13236 * core: bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 by @dependabot in https://github.com/goauthentik/authentik/pull/13235 * web/admin: fix minor typo by @S33G in https://github.com/goauthentik/authentik/pull/13181 * core: bump golang.org/x/oauth2 from 0.26.0 to 0.27.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13240 * ci: run translation extraction on PRs too by @rissson in https://github.com/goauthentik/authentik/pull/13214 * lifecycle: add warning regarding supported installation methods by @dominic-r in https://github.com/goauthentik/authentik/pull/13190 * core: add pre-hydrated relative URL by @BeryJu in https://github.com/goauthentik/authentik/pull/13243 * website/integrations: add plesk by @Lars- in https://github.com/goauthentik/authentik/pull/13000 * website/docs: add enterprise label to SSF docs by @tanberry in https://github.com/goauthentik/authentik/pull/13251 * ci: fix translation extraction for external PRs by @rissson in https://github.com/goauthentik/authentik/pull/13266 * website/docs: remove Enterprise badge from RAC docs -- again by @gergosimonyi in https://github.com/goauthentik/authentik/pull/13268 * stages/authenticator_email: fix session cleanup test b by @melizeche in https://github.com/goauthentik/authentik/pull/13264 * stages/email: Fix email stage serialization by @melizeche in https://github.com/goauthentik/authentik/pull/13256 * translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13274 * translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13275 * website/docs: prepare for 2025.2.1 by @rissson in https://github.com/goauthentik/authentik/pull/13277 * website/docs: Fix Docusaurus plugin regression in Algolia search by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13281 * release: 2025.2.1 by @rissson in https://github.com/goauthentik/authentik/pull/13278 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13295 * translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13292 * translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13291 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13290 * ci: bump docker/setup-qemu-action from 3.4.0 to 3.5.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13287 * lifecycle/aws: bump aws-cdk from 2.1000.3 to 2.1001.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/13283 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13282 * core: bump aws-cdk-lib from 2.180.0 to 2.181.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13284 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13293 * core: bump google-api-python-client from 2.161.0 to 2.162.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13260 * core: bump msgraph-sdk from 1.21.0 to 1.22.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13259 * *: Auto compress images by @authentik-automation in https://github.com/goauthentik/authentik/pull/13250 * website/integrations: fix netbox env variables by @dustindkoch in https://github.com/goauthentik/authentik/pull/13267 * ci: translation extraction: make sure API client is up-to-date by @rissson in https://github.com/goauthentik/authentik/pull/13301 * web: ESBuild performance + Live reload by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13026 * website/integrations: Add documentation for Drupal by @justafish in https://github.com/goauthentik/authentik/pull/12925 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13311 * core: bump goauthentik.io/api/v3 from 3.2025020.1 to 3.2025021.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13314 * core: bump ruff from 0.9.7 to 0.9.8 by @dependabot in https://github.com/goauthentik/authentik/pull/13312 * core: bump aws-cdk-lib from 2.181.0 to 2.181.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13313 * providers/oauth2: properly support P-384 and P-521 keys by @rissson in https://github.com/goauthentik/authentik/pull/13317 * website/docs: enterprise: add instructions to cancel license renewal by @rissson in https://github.com/goauthentik/authentik/pull/13320 * website: Revert "website: revert enable docusaurus faster option (#12326) (#13207)" by @BeryJu in https://github.com/goauthentik/authentik/pull/13323 * enterprise/stages/source: fix dispatch method signature by @BeryJu in https://github.com/goauthentik/authentik/pull/13321 * *: fix stage incorrectly being inserted instead of appended by @BeryJu in https://github.com/goauthentik/authentik/pull/13304 * website: bump remark-directive from 3.0.1 to 4.0.0 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13315 * lib/sync/outgoing: add dry run by @BeryJu in https://github.com/goauthentik/authentik/pull/13244 * stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in https://github.com/goauthentik/authentik/pull/13330 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13328 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13336 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13339 * core: bump goauthentik.io/api/v3 from 3.2025021.1 to 3.2025021.2 by @dependabot in https://github.com/goauthentik/authentik/pull/13363 * core: bump pytest from 8.3.4 to 8.3.5 by @dependabot in https://github.com/goauthentik/authentik/pull/13362 * core: bump cryptography from 44.0.1 to 44.0.2 by @dependabot in https://github.com/goauthentik/authentik/pull/13361 * ci: bump docker/setup-qemu-action from 3.5.0 to 3.6.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13360 * core: bump ruff from 0.9.8 to 0.9.9 by @dependabot in https://github.com/goauthentik/authentik/pull/13359 * website: bump prettier from 3.5.2 to 3.5.3 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13355 * ci: update versions for daily full testing by @BeryJu in https://github.com/goauthentik/authentik/pull/13303 * translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13350 * translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13349 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13347 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13348 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13346 * website: bump @rspack/binding-darwin-arm64 from 1.1.6 to 1.2.6 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13354 * ci: bump getsentry/action-release from 1 to 3 by @dependabot in https://github.com/goauthentik/authentik/pull/13366 * website: bump the build group in /website with 11 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13367 * lifecycle/aws: bump aws-cdk from 2.1001.0 to 2.1002.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/13365 * website: bump typescript from 5.7.3 to 5.8.2 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13368 * translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13373 * translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13374 * stages/authenticator_email: remove flaky assertions by @rissson in https://github.com/goauthentik/authentik/pull/13371 * website/docs: fix typo by @eljpsm in https://github.com/goauthentik/authentik/pull/13377 * web/admin: prefer using datefns over moment.js by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/13143 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13378 * website: bump the build group in /website with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13381 * providers/proxy: kubernetes outpost: fix reconcile when only annotations changed by @rissson in https://github.com/goauthentik/authentik/pull/13372 * ci: cache helper docker images by @rissson in https://github.com/goauthentik/authentik/pull/13390 * website/integrations: Pocketbase by @nicedevil007 in https://github.com/goauthentik/authentik/pull/12906 * website/integrations: gravity: add by @dominic-r in https://github.com/goauthentik/authentik/pull/13258 * website/docs: Update Open Web UI integration by @Rami-Pastrami in https://github.com/goauthentik/authentik/pull/13392 * core: bump debugpy from 1.8.12 to 1.8.13 by @dependabot in https://github.com/goauthentik/authentik/pull/13395 * core: bump github.com/prometheus/client_golang from 1.21.0 to 1.21.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13397 * website: bump the build group in /website with 6 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13396 * web/admin: decorative display in user’s page breaks in other locales by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/13393 * web/admin: fix markdown being completely whited out in dark mode on proxy provider pages by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/13387 * blueprints: Adjust title for MFA set up by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13400 * web/admin: add button to clear application cache by @rissson in https://github.com/goauthentik/authentik/pull/13399 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13405 * web/user: ensure modal container on user-settings page is min-height: 100% by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/13402 * core: bump jinja2 from 3.1.5 to 3.1.6 by @dependabot in https://github.com/goauthentik/authentik/pull/13412 * core: bump msgraph-sdk from 1.22.0 to 1.23.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13411 * core: bump google-api-python-client from 2.162.0 to 2.163.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13410 * core: bump aws-cdk-lib from 2.181.1 to 2.182.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13409 * core: bump golang.org/x/oauth2 from 0.27.0 to 0.28.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13408 * stages/authenticator_email: Fix Enroll dropdown in the MFA Devices page by @melizeche in https://github.com/goauthentik/authentik/pull/13404 * core: bump golang.org/x/sync from 0.11.0 to 0.12.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13407 * lib/config: fix conn_max_age parsing by @rissson in https://github.com/goauthentik/authentik/pull/13370 * translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13417 * translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13418 * core: Tidy contributor onboarding, fix typos. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/12700 * web/admin: allow user lists to show active only by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/13403 * website: add a better edit this page element by @BeryJu in https://github.com/goauthentik/authentik/pull/13391 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13423 * translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13429 * translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13428 * lifecycle/aws: bump aws-cdk from 2.1002.0 to 2.1003.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/13426 * translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13431 * website/integrations: zipline: add by @dominic-r in https://github.com/goauthentik/authentik/pull/13257 * website: fix build in docker by @rissson in https://github.com/goauthentik/authentik/pull/13430 * website/docs: sys mgmt: document authentik backups/restoration by @dominic-r in https://github.com/goauthentik/authentik/pull/12943 * providers/SCIM: fix object exists error for users, attempt to look up user ID in remote system by @BeryJu in https://github.com/goauthentik/authentik/pull/13437 * core: bump django from 5.0.12 to 5.0.13 by @dependabot in https://github.com/goauthentik/authentik/pull/13425 * website: bump the build group across 1 directory with 9 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13442 * web/admin: fix display bug for assigned users in application bindings in the wizard by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/13435 * web: admin interface: faster card load by @dominic-r in https://github.com/goauthentik/authentik/pull/13331 * web: bump prismjs from 1.29.0 to 1.30.0 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/13455 * website: bump prismjs from 1.29.0 to 1.30.0 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13456 * website/docs: backup and restore: remove extra period by @dominic-r in https://github.com/goauthentik/authentik/pull/13440 * core: bump webauthn from 2.5.1 to 2.5.2 by @dependabot in https://github.com/goauthentik/authentik/pull/13449 * core: bump ruff from 0.9.9 to 0.9.10 by @dependabot in https://github.com/goauthentik/authentik/pull/13448 * web: Ignore Storybook when running codespell. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13454 * website/docs: in developer docs replace deprecated poetry shell command by @dominic-r in https://github.com/goauthentik/authentik/pull/13460 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13438 * stages/email: token_expiry format by @melizeche in https://github.com/goauthentik/authentik/pull/13394 * root: bump python client generator version by @BeryJu in https://github.com/goauthentik/authentik/pull/13467 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13469 * sources/oauth: ignore missing well-known keys by @BeryJu in https://github.com/goauthentik/authentik/pull/13468 * website/integrations: add Mautic by @movabo in https://github.com/goauthentik/authentik/pull/13324 * website/docs: ops/backup-restore: add "pending emails" to lost redis data by @dominic-r in https://github.com/goauthentik/authentik/pull/13483 * website: edit the new footer with links by @tanberry in https://github.com/goauthentik/authentik/pull/13433 * translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13481 * translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13482 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13475 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13489 * providers/oauth2: offline_access don't require explicit consent by @BeryJu in https://github.com/goauthentik/authentik/pull/13419 * website: Bump the build group in /website with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13480 * providers/scim: add compatibility mode for AWS & Slack by @jorhett in https://github.com/goauthentik/authentik/pull/13342 * translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13486 * website: Bump @babel/runtime from 7.26.0 to 7.26.10 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13472 * core: Bump twilio from 9.4.6 to 9.5.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13478 * core: Bump structlog from 25.1.0 to 25.2.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13476 * web: Bump @babel/runtime-corejs3 from 7.25.7 to 7.26.10 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/13474 * website: Bump @babel/runtime-corejs3 from 7.26.0 to 7.26.10 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13473 * souces/oauth: reddit: fix duplicate keyword auth by @dominic-r in https://github.com/goauthentik/authentik/pull/13466 * core: Bump goauthentik.io/api/v3 from 3.2025021.2 to 3.2025021.3 by @dependabot in https://github.com/goauthentik/authentik/pull/13479 * website: Bump @babel/helpers from 7.26.0 to 7.26.10 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13471 * outposts/controllers: k8s: sanitize resource names to comply with DNS subdomain standards by @dominic-r in https://github.com/goauthentik/authentik/pull/13444 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13491 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13488 * translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13487 * website: remove the last updated option from footer by @tanberry in https://github.com/goauthentik/authentik/pull/13493 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13494 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13508 * translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13509 * translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13511 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13510 * translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13513 * translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13514 * core: Bump psycopg from 3.2.5 to 3.2.6 by @dependabot in https://github.com/goauthentik/authentik/pull/13497 * core: Bump aws-cdk-lib from 2.182.0 to 2.183.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13496 * core: Bump google-api-python-client from 2.163.0 to 2.164.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13498 * core: Bump msgraph-sdk from 1.23.0 to 1.24.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13500 * core: Bump importlib-metadata from 8.5.0 to 8.6.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13499 * core: Bump goauthentik.io/api/v3 from 3.2025021.3 to 3.2025021.4 by @dependabot in https://github.com/goauthentik/authentik/pull/13495 * website: Bump the build group in /website with 6 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13501 * web/user: show admin interface button on mobile by @BeryJu in https://github.com/goauthentik/authentik/pull/13421 * web/flows: fix missing padding on authenticator_validate card by @BeryJu in https://github.com/goauthentik/authentik/pull/13420 * providers/rac: fix signals and Endpoint caching by @gergosimonyi in https://github.com/goauthentik/authentik/pull/13529 * core: Bump github.com/coreos/go-oidc/v3 from 3.12.0 to 3.13.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13525 * lifecycle/aws: Bump aws-cdk from 2.1003.0 to 2.1004.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/13524 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13520 * core: Bump aws-cdk-lib from 2.183.0 to 2.184.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13522 * web/admin: fix comment being rendered by @BeryJu in https://github.com/goauthentik/authentik/pull/13530 * sources/oauth: fix duplicate authentication by @BeryJu in https://github.com/goauthentik/authentik/pull/13322 * website/docs: dev docs: full: remove note on installing shell plugin by @dominic-r in https://github.com/goauthentik/authentik/pull/13515 * core: bump django-tenants by @rissson in https://github.com/goauthentik/authentik/pull/13536 * sources: prevent deletion of built-in source by @dominic-r in https://github.com/goauthentik/authentik/pull/12914 * website/docs: dev docs: bump node/postgres requirements by @dominic-r in https://github.com/goauthentik/authentik/pull/13516 * stages/identification: check captcha after checking authentication by @BeryJu in https://github.com/goauthentik/authentik/pull/13533 * core: Bump coverage from 7.6.12 to 7.7.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13548 * core: Bump aws-cdk-lib from 2.184.0 to 2.184.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13547 * website/docs: prepare for 2025.2.2 by @gergosimonyi in https://github.com/goauthentik/authentik/pull/13552 * website: Bump the build group in /website with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13549 * stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in https://github.com/goauthentik/authentik/pull/13541 * release: 2025.2.2 by @gergosimonyi in https://github.com/goauthentik/authentik/pull/13554 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13555 * website: bump the build group in /website with 6 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13558 * core: bump sentry-sdk from 2.22.0 to 2.23.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13557 * core: bump goauthentik.io/api/v3 from 3.2025021.4 to 3.2025022.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13556 * scripts: postgres: print statements by @rissson in https://github.com/goauthentik/authentik/pull/13537 * providers/scim: save attributes returned from remote system like google workspace and entra ID by @BeryJu in https://github.com/goauthentik/authentik/pull/13459 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13565 * website: package.json: copy over schema for npm run watch by @dominic-r in https://github.com/goauthentik/authentik/pull/13543 * website/docs: Apple Business Manager Integration. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13319 * website/integrations: Beszel by @nicedevil007 in https://github.com/goauthentik/authentik/pull/12905 * providers/saml: configurable AuthnContextClassRef by @BeryJu in https://github.com/goauthentik/authentik/pull/13566 * core: bump goauthentik.io/api/v3 from 3.2025022.1 to 3.2025022.2 by @dependabot in https://github.com/goauthentik/authentik/pull/13569 * core: bump msgraph-sdk from 1.24.0 to 1.25.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13570 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13572 * web: Fix inline documentation rendering by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13379 * root: replace poetry with uv by @rissson in https://github.com/goauthentik/authentik/pull/13388 * lifecycle/aws: bump aws-cdk from 2.1004.0 to 2.1005.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/13574 * core: bump astral-sh/uv from 0.6.6 to 0.6.8 by @dependabot in https://github.com/goauthentik/authentik/pull/13577 * core: bump goauthentik.io/api/v3 from 3.2025022.2 to 3.2025022.3 by @dependabot in https://github.com/goauthentik/authentik/pull/13576 * root: fix uv lock file on macOS by @BeryJu in https://github.com/goauthentik/authentik/pull/13578 * website/integrations: jellyfin: update OIDC plugin installation by @Netoen in https://github.com/goauthentik/authentik/pull/13544 * brands: migrate custom CSS to brands by @BeryJu in https://github.com/goauthentik/authentik/pull/13172 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13581 * web/admin: fix diff showing previous false as "-" by @BeryJu in https://github.com/goauthentik/authentik/pull/13580 * brands: add option to set global default flow background by @BeryJu in https://github.com/goauthentik/authentik/pull/13079 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13584 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13590 * translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13591 * translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13593 * translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13596 * translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13597 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13592 * website/docs: style guide & integration template: revamp by @dominic-r in https://github.com/goauthentik/authentik/pull/12929 * core: bump goauthentik.io/api/v3 from 3.2025022.3 to 3.2025022.5 by @dependabot in https://github.com/goauthentik/authentik/pull/13594 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13585 * website/integrations: add miniflux by @chwshka in https://github.com/goauthentik/authentik/pull/13559 * lib: set a default HTTP timeout on outgoing requests by @BeryJu in https://github.com/goauthentik/authentik/pull/13599 * core: bump github.com/redis/go-redis/v9 from 9.7.1 to 9.7.3 by @dependabot in https://github.com/goauthentik/authentik/pull/13603 * website/docs: add clarification about formatting URLs to Style Guide by @tanberry in https://github.com/goauthentik/authentik/pull/13601 * website: components: add multilinecodeblock component by @dominic-r in https://github.com/goauthentik/authentik/pull/13179 * core: bump astral-sh/uv from 0.6.8 to 0.6.9 by @dependabot in https://github.com/goauthentik/authentik/pull/13612 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13608 * translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13615 * website: update header to match goauthentik.io by @BeryJu in https://github.com/goauthentik/authentik/pull/13616 * website/docs: revert token_expiry format in example blueprint by @melizeche in https://github.com/goauthentik/authentik/pull/13582 * web: Client-side MDX rendering by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13610 * events: add configurable headers to webhooks by @BeryJu in https://github.com/goauthentik/authentik/pull/13602 * translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13621 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13623 * translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13622 * core: bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 by @dependabot in https://github.com/goauthentik/authentik/pull/13626 * web/admin: reworked sync status card by @BeryJu in https://github.com/goauthentik/authentik/pull/13625 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13628 * web: Fix prop. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13630 * brands: fix migration 0008 by removing incorrect context manager usage by @dominic-r in https://github.com/goauthentik/authentik/pull/13635 * translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13634 * translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13632 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13633 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13631 * flows: fix API not returning configured background by @BeryJu in https://github.com/goauthentik/authentik/pull/13641 * ci: add semgrep by @BeryJu in https://github.com/goauthentik/authentik/pull/13643 * providers/scim: fix group membership check failing by @BeryJu in https://github.com/goauthentik/authentik/pull/13644 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13642 * website/integrations: add tandoor by @chwshka in https://github.com/goauthentik/authentik/pull/13560 * translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13652 * translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13653 * core: bump goauthentik.io/api/v3 from 3.2025022.5 to 3.2025022.6 by @dependabot in https://github.com/goauthentik/authentik/pull/13646 * website: bump the build group in /website with 6 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13645 * admin: fix system API when using bearer token by @rissson in https://github.com/goauthentik/authentik/pull/13651 * root: fix dependency install due to description-file by @BeryJu in https://github.com/goauthentik/authentik/pull/13655 * ci: stop publishing latest tag by @BeryJu in https://github.com/goauthentik/authentik/pull/13245 * website/docs: fix referral of Paperless-ng by @joeftiger in https://github.com/goauthentik/authentik/pull/13657 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13658 * root: new issue template for Docs by @tanberry in https://github.com/goauthentik/authentik/pull/13659 * stages/email: Clean newline characters in TemplateEmailMessage by @melizeche in https://github.com/goauthentik/authentik/pull/13666 * website/docs: Add Fleet integration. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13618 * website/docs: add section on how to capture logs by @chwshka in https://github.com/goauthentik/authentik/pull/13662 * website/docs: Flesh out integrations copy changes. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13619 * lifecycle/aws: bump aws-cdk from 2.1005.0 to 2.1006.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/13670 * core: bump astral-sh/uv from 0.6.9 to 0.6.10 by @dependabot in https://github.com/goauthentik/authentik/pull/13669 * web: bump vite from 5.4.14 to 5.4.15 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/13672 * website: bump the build group in /website with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13660 * ci: bump golangci/golangci-lint-action from 6 to 7 by @dependabot in https://github.com/goauthentik/authentik/pull/13661 * web: ensure wizard modal closes on first cancel click by @dominic-r in https://github.com/goauthentik/authentik/pull/13636 * website/integrations-all: convert authentik configuration to wizard by @dominic-r in https://github.com/goauthentik/authentik/pull/13144 * outposts/ldap: fix paginator going into infinite loop by @BeryJu in https://github.com/goauthentik/authentik/pull/13677 * web/admin: add sync status refresh button by @BeryJu in https://github.com/goauthentik/authentik/pull/13678 * website/docs: Clarify frontend development. Document local overrides. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13586 * enterprise/stages/source: set is_redirected in flow source stage redirects to by @BeryJu in https://github.com/goauthentik/authentik/pull/13604 * website: bump @types/semver from 7.5.8 to 7.7.0 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13682 * core: fix core/user is_superuser filter by @BeryJu in https://github.com/goauthentik/authentik/pull/13693 * core: fix non-exploitable open redirect by @BeryJu in https://github.com/goauthentik/authentik/pull/13696 * stages/identification: refresh captcha on failure by @BeryJu in https://github.com/goauthentik/authentik/pull/13697 * security: fix CVE-2025-29928 by @BeryJu in https://github.com/goauthentik/authentik/pull/13695 * website/docs: update release notes for 2024.12 and 2025.2 by @BeryJu in https://github.com/goauthentik/authentik/pull/13702 * website/docs: fix 2025 CVE category title by @BeryJu in https://github.com/goauthentik/authentik/pull/13703 * release: 2025.2.3 by @BeryJu in https://github.com/goauthentik/authentik/pull/13705 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13708 * website/docs: add reference to setting in CVE by @BeryJu in https://github.com/goauthentik/authentik/pull/13707 * root: bump python patch version to 3.12.9 by @BeryJu in https://github.com/goauthentik/authentik/pull/13710 * core: fix flaky tests introduced with is_superuser API fix by @BeryJu in https://github.com/goauthentik/authentik/pull/13709 * web: bump tar-fs from 2.1.1 to 2.1.2 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/13713 * core: bump oss/go/microsoft/golang from 1.23-fips-bookworm to 1.24-fips-bookworm by @dependabot in https://github.com/goauthentik/authentik/pull/13027 * policies: buffered policy access view for concurrent authorization attempts when unauthenticated by @BeryJu in https://github.com/goauthentik/authentik/pull/13629 * website/docs: Fix Caddy forward auth example by @garar in https://github.com/goauthentik/authentik/pull/13726 * core: bump astral-sh/uv from 0.6.10 to 0.6.11 by @dependabot in https://github.com/goauthentik/authentik/pull/13733 * website: bump the build group in /website with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13730 * core: bump goauthentik.io/api/v3 from 3.2025022.6 to 3.2025023.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13729 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13728 * core: fix double slash in cache key by @MPK1 in https://github.com/goauthentik/authentik/pull/13721 * website/docs: style guide by @tanberry in https://github.com/goauthentik/authentik/pull/13704 * translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13738 * core: fix error when viewing used_by for built-in source by @dominic-r in https://github.com/goauthentik/authentik/pull/13588 * */saml: allow for domainless SAML URLs by @BeryJu in https://github.com/goauthentik/authentik/pull/13737 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13741 * stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in https://github.com/goauthentik/authentik/pull/13744 * web/common: utils: fix infinite value handling in getRelativeTime function by @dominic-r in https://github.com/goauthentik/authentik/pull/13564 * core: bump goauthentik.io/api/v3 from 3.2025023.1 to 3.2025023.2 by @dependabot in https://github.com/goauthentik/authentik/pull/13746 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13736 * web: bump vite from 5.4.15 to 5.4.16 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/13743 * web/admin: fix custom scope mappings being selected by default in proxy provider by @BeryJu in https://github.com/goauthentik/authentik/pull/13735 * website/integrations-all: update authentik configuration template by @dominic-r in https://github.com/goauthentik/authentik/pull/13740 * website/integrations: slack,pocketbase,tandoor: convert to new authentik configuration format by @dominic-r in https://github.com/goauthentik/authentik/pull/13742 * website: edit menu items by @tanberry in https://github.com/goauthentik/authentik/pull/13747 * website/integrations: add mailcow by @obakuhl in https://github.com/goauthentik/authentik/pull/13727 * website/docs: sys-mgmt: service accounts by @dominic-r in https://github.com/goauthentik/authentik/pull/13722 * website: bump image-size from 1.1.1 to 1.2.1 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13750 * website/integrations: calibre-web: document by @dominic-r in https://github.com/goauthentik/authentik/pull/12477 * core: bump astral-sh/uv from 0.6.11 to 0.6.12 by @dependabot in https://github.com/goauthentik/authentik/pull/13756 * lifecycle/aws: bump aws-cdk from 2.1006.0 to 2.1007.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/13757 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13753 * website/integrations: add certificate instructions to apache guacamole by @dewi-tik in https://github.com/goauthentik/authentik/pull/13684 * website/integrations: add sidero omni by @dewi-tik in https://github.com/goauthentik/authentik/pull/13675 * core: bump python-kadmin-rs from 0.5.3 to 0.6.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13758 * website/docs: Updated redirect URI setup for Synology DSM by @Wr0ngName in https://github.com/goauthentik/authentik/pull/13761 * website/docs: add log levels section to logs documentation by @dewi-tik in https://github.com/goauthentik/authentik/pull/13687 * website/integrations: jenkins: fix oidc redirect uri by @dominic-r in https://github.com/goauthentik/authentik/pull/13771 * website/docs: add skip object instructions by @dewi-tik in https://github.com/goauthentik/authentik/pull/13749 * sources/kerberos, saml: allow creation of connections from the API by @rissson in https://github.com/goauthentik/authentik/pull/13794 * stages/email: fix for newlines in emails by @melizeche in https://github.com/goauthentik/authentik/pull/13799 * sources: move identifier to parent model by @rissson in https://github.com/goauthentik/authentik/pull/13797 * website/integrations: add knocknoc by @dewi-tik in https://github.com/goauthentik/authentik/pull/13764 * website/integrations: Open Web UI: add OPENID_REDIRECT_URI environment variable by @yuval-ziv in https://github.com/goauthentik/authentik/pull/13785 * web: Normalize client-side error handling by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13595 * web: Fix TypeScript compilation issues for mixins, events. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13766 * website/integrations: nextcloud: add warning about admin lockout by @Unfaehig in https://github.com/goauthentik/authentik/pull/13782 * web: Tidy temporal utilities. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13755 * web: Flesh out configs. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13801 * website/docs: Correcting IDP URLs on Mailcow integration page by @adamjrberry in https://github.com/goauthentik/authentik/pull/13803 * core: bump astral-sh/uv from 0.6.12 to 0.6.13 by @dependabot in https://github.com/goauthentik/authentik/pull/13812 * core: bump goauthentik.io/api/v3 from 3.2025023.2 to 3.2025023.4 by @dependabot in https://github.com/goauthentik/authentik/pull/13811 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13806 * website/integrations: fix ArgoCD redirect paths by @nfons in https://github.com/goauthentik/authentik/pull/13804 * core: users API: add date_joined by @rissson in https://github.com/goauthentik/authentik/pull/13817 * translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13821 * translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13820 * translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13822 * Revert "core: fix non-exploitable open redirect (#13696)" by @rissson in https://github.com/goauthentik/authentik/pull/13824 * website/docs: Add release notes for 2024.12.5 by @melizeche in https://github.com/goauthentik/authentik/pull/13828 * website/docs: Add release notes for 2025.2.4 by @melizeche in https://github.com/goauthentik/authentik/pull/13829 * website/integrations: rename Hoarder to Karakeep by @petrsimunek in https://github.com/goauthentik/authentik/pull/13789 * release: 2025.2.4 by @melizeche in https://github.com/goauthentik/authentik/pull/13830 * core: bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13834 * core: bump aiohappyeyeballs from 2.3.5 to 2.6.1 by @rissson in https://github.com/goauthentik/authentik/pull/13840 * core: bump autobahn from 23.6.2 to 24.4.2 by @rissson in https://github.com/goauthentik/authentik/pull/13847 * core: bump aiohttp from 3.10.11 to 3.11.16 by @rissson in https://github.com/goauthentik/authentik/pull/13841 * core: bump aiohttp-retry from 2.8.3 to 2.9.1 by @rissson in https://github.com/goauthentik/authentik/pull/13842 * core: bump aiosignal from 1.3.1 to 1.3.2 by @rissson in https://github.com/goauthentik/authentik/pull/13843 * core: bump amqp from 5.2.0 to 5.3.1 by @rissson in https://github.com/goauthentik/authentik/pull/13844 * core: bump automat from 22.10.0 to 24.8.1 by @rissson in https://github.com/goauthentik/authentik/pull/13848 * core: bump azure-identity from 1.17.1 to 1.21.0 by @rissson in https://github.com/goauthentik/authentik/pull/13851 * core: bump bcrypt from 4.2.0 to v4.3.0 by @rissson in https://github.com/goauthentik/authentik/pull/13852 * core: bump azure-core from 1.30.2 to 1.33.0 by @rissson in https://github.com/goauthentik/authentik/pull/13850 * core: bump billiard from 4.2.0 to v4.2.1 by @rissson in https://github.com/goauthentik/authentik/pull/13853 * core: bump anyio from 4.4.0 to 4.9.0 by @rissson in https://github.com/goauthentik/authentik/pull/13845 * core: bump attrs from 23.2.0 to 25.3.0 by @rissson in https://github.com/goauthentik/authentik/pull/13846 * core: bump boto3 from 1.34.150 to v1.37.30 by @rissson in https://github.com/goauthentik/authentik/pull/13854 * core: bump cachetools from 5.4.0 to v5.5.2 by @rissson in https://github.com/goauthentik/authentik/pull/13856 * core: bump cattrs from 24.1.2 to v24.1.3 by @rissson in https://github.com/goauthentik/authentik/pull/13857 * core: bump certifi from 2024.7.4 to v2025.1.31 by @rissson in https://github.com/goauthentik/authentik/pull/13859 * core: bump cffi from 1.16.0 to v1.17.1 by @rissson in https://github.com/goauthentik/authentik/pull/13860 * core: bump channels from 4.2.0 to v4.2.2 by @rissson in https://github.com/goauthentik/authentik/pull/13861 * core: bump charset-normalizer from 3.3.2 to v3.4.1 by @rissson in https://github.com/goauthentik/authentik/pull/13862 * core: bump click from 8.1.7 to v8.1.8 by @rissson in https://github.com/goauthentik/authentik/pull/13863 * core: bump decorator from 5.1.1 to v5.2.1 by @rissson in https://github.com/goauthentik/authentik/pull/13865 * core: bump frozenlist from 1.4.1 to v1.5.0 by @rissson in https://github.com/goauthentik/authentik/pull/13872 * core: bump coverage from 7.6.12 to v7.8.0 by @rissson in https://github.com/goauthentik/authentik/pull/13864 * core: bump google-auth from 2.32.0 to v2.38.0 by @rissson in https://github.com/goauthentik/authentik/pull/13875 * core: bump google-api-python-client from 2.164.0 to v2.166.0 by @rissson in https://github.com/goauthentik/authentik/pull/13874 * core: bump idna from 3.7 to v3.10 by @rissson in https://github.com/goauthentik/authentik/pull/13883 * core: bump duo-client from 5.4.0 to v5.5.0 by @rissson in https://github.com/goauthentik/authentik/pull/13871 * core: bump google-api-core from 2.19.1 to v2.24.2 by @rissson in https://github.com/goauthentik/authentik/pull/13873 * core: bump dnspython from 2.6.1 to v2.7.0 by @rissson in https://github.com/goauthentik/authentik/pull/13870 * core: bump googleapis-common-protos from 1.63.2 to v1.69.2 by @rissson in https://github.com/goauthentik/authentik/pull/13876 * core: bump django-pgactivity from 1.4.1 to v1.7.1 by @rissson in https://github.com/goauthentik/authentik/pull/13868 * core: bump httpcore from 1.0.5 to v1.0.7 by @rissson in https://github.com/goauthentik/authentik/pull/13879 * core: bump humanize from 4.10.0 to v4.12.2 by @rissson in https://github.com/goauthentik/authentik/pull/13881 * core: bump maxminddb from 2.6.2 to v2.6.3 by @rissson in https://github.com/goauthentik/authentik/pull/13891 * core: bump lxml from 5.3.1 to v5.3.2 by @rissson in https://github.com/goauthentik/authentik/pull/13889 * core: bump microsoft-kiota-serialization-multipart from 1.9.2 to v1.9.3 by @rissson in https://github.com/goauthentik/authentik/pull/13895 * core: bump microsoft-kiota-serialization-json from 1.9.2 to v1.9.3 by @rissson in https://github.com/goauthentik/authentik/pull/13894 * core: bump microsoft-kiota-serialization-text from 1.9.2 to v1.9.3 by @rissson in https://github.com/goauthentik/authentik/pull/13896 * core: bump orjson from 3.10.6 to v3.10.16 by @rissson in https://github.com/goauthentik/authentik/pull/13904 * core: bump microsoft-kiota-serialization-form from 1.9.2 to v1.9.3 by @rissson in https://github.com/goauthentik/authentik/pull/13893 * core: bump opentelemetry-api from 1.31.0 to v1.31.1 by @rissson in https://github.com/goauthentik/authentik/pull/13903 * core: bump pyasn1-modules from 0.4.0 to v0.4.1 by @rissson in https://github.com/goauthentik/authentik/pull/13913 * core: bump prompt-toolkit from 3.0.47 to v3.0.50 by @rissson in https://github.com/goauthentik/authentik/pull/13908 * core: bump pygments from 2.18.0 to v2.19.1 by @rissson in https://github.com/goauthentik/authentik/pull/13915 * core: bump pyasn1 from 0.6.0 to v0.6.1 by @rissson in https://github.com/goauthentik/authentik/pull/13912 * core: bump python-dotenv from 1.0.1 to v1.1.0 by @rissson in https://github.com/goauthentik/authentik/pull/13918 * core: bump pytz from 2024.1 to v2025.2 by @rissson in https://github.com/goauthentik/authentik/pull/13919 * core: bump pyparsing from 3.1.2 to v3.2.3 by @rissson in https://github.com/goauthentik/authentik/pull/13916 * core: bump redis from 5.0.7 to v5.2.1 by @rissson in https://github.com/goauthentik/authentik/pull/13920 * core: bump pytest-django from 4.10.0 to v4.11.1 by @rissson in https://github.com/goauthentik/authentik/pull/13917 * core: bump referencing from 0.35.1 to v0.36.2 by @rissson in https://github.com/goauthentik/authentik/pull/13921 * core: bump sqlparse from 0.5.1 to v0.5.3 by @rissson in https://github.com/goauthentik/authentik/pull/13930 * core: bump twilio from 9.5.0 to v9.5.2 by @rissson in https://github.com/goauthentik/authentik/pull/13935 * core: bump std-uritemplate from 2.0.2 to v2.0.3 by @rissson in https://github.com/goauthentik/authentik/pull/13931 * core: bump tzdata from 2024.1 to v2025.2 by @rissson in https://github.com/goauthentik/authentik/pull/13938 * core: bump ruff from 0.9.10 to v0.11.4 by @rissson in https://github.com/goauthentik/authentik/pull/13924 * core: bump celery from 5.4.0 to v5.5.1 by @rissson in https://github.com/goauthentik/authentik/pull/13858 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13832 * core: bump goauthentik.io/api/v3 from 3.2025023.4 to 3.2025024.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13833 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13798 * core: bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13788 * core: bump github.com/coreos/go-oidc/v3 from 3.13.0 to 3.14.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13772 * core: bump django-storages from 1.14.5 to v1.14.6 by @rissson in https://github.com/goauthentik/authentik/pull/13869 * core: bump yarl from 1.17.2 to v1.19.0 by @rissson in https://github.com/goauthentik/authentik/pull/13944 * core: bump h2 from 4.1.0 to v4.2.0 by @rissson in https://github.com/goauthentik/authentik/pull/13877 * core: bump wrapt from 1.16.0 to v1.17.2 by @rissson in https://github.com/goauthentik/authentik/pull/13943 * core: bump deprecated from 1.2.14 to v1.2.18 by @rissson in https://github.com/goauthentik/authentik/pull/13866 * core: bump trio from 0.26.0 to v0.29.0 by @rissson in https://github.com/goauthentik/authentik/pull/13933 * core: bump zipp from 3.20.2 to v3.21.0 by @rissson in https://github.com/goauthentik/authentik/pull/13945 * core: bump importlib-resources from 6.4.0 to v6.5.2 by @rissson in https://github.com/goauthentik/authentik/pull/13884 * core: bump httpx from 0.27.0 to v0.28.1 by @rissson in https://github.com/goauthentik/authentik/pull/13880 * core: bump uvloop from 0.19.0 to v0.21.0 by @rissson in https://github.com/goauthentik/authentik/pull/13940 * core: bump hyperframe from 6.0.1 to v6.1.0 by @rissson in https://github.com/goauthentik/authentik/pull/13882 * core: bump iniconfig from 2.0.0 to v2.1.0 by @rissson in https://github.com/goauthentik/authentik/pull/13885 * core: bump hpack from 4.0.0 to v4.1.0 by @rissson in https://github.com/goauthentik/authentik/pull/13878 * core: bump six from 1.16.0 to v1.17.0 by @rissson in https://github.com/goauthentik/authentik/pull/13929 * core: bump selenium from 4.29.0 to v4.31.0 by @rissson in https://github.com/goauthentik/authentik/pull/13926 * core: bump platformdirs from 4.2.2 to v4.3.7 by @rissson in https://github.com/goauthentik/authentik/pull/13906 * core: bump websockets from 12.0 to v15.0.1 by @rissson in https://github.com/goauthentik/authentik/pull/13942 * core: bump zope-interface from 6.4.post2 to v7.2 by @rissson in https://github.com/goauthentik/authentik/pull/13946 * core: bump stevedore from 5.2.0 to v5.4.1 by @rissson in https://github.com/goauthentik/authentik/pull/13932 * core: bump markupsafe from 2.1.5 to v3.0.2 by @rissson in https://github.com/goauthentik/authentik/pull/13890 * core: bump jsonschema-specifications from 2023.12.1 to v2024.10.1 by @rissson in https://github.com/goauthentik/authentik/pull/13887 * core: bump prometheus-client from 0.20.0 to v0.21.1 by @rissson in https://github.com/goauthentik/authentik/pull/13907 * core: bump msal-extensions from 1.2.0 to v1.3.1 by @rissson in https://github.com/goauthentik/authentik/pull/13898 * core: bump msal from 1.30.0 to v1.32.0 by @rissson in https://github.com/goauthentik/authentik/pull/13897 * core: bump ua-parser-builtins from 0.18.0 to v0.18.0.post1 by @rissson in https://github.com/goauthentik/authentik/pull/13939 * core: bump golang.org/x/sync from 0.12.0 to 0.13.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13787 * core: bump pbr from 6.0.0 to v6.1.1 by @rissson in https://github.com/goauthentik/authentik/pull/13905 * core: bump propcache from 0.2.0 to v0.3.1 by @rissson in https://github.com/goauthentik/authentik/pull/13909 * core: bump rpds-py from 0.19.1 to v0.24.0 by @rissson in https://github.com/goauthentik/authentik/pull/13923 * core: bump sentry-sdk from 2.22.0 to v2.25.1 by @rissson in https://github.com/goauthentik/authentik/pull/13927 * core: bump multidict from 6.0.5 to v6.2.0 by @rissson in https://github.com/goauthentik/authentik/pull/13902 * core: bump typing-extensions from 4.12.2 to v4.13.1 by @rissson in https://github.com/goauthentik/authentik/pull/13937 * core: bump watchfiles from 0.22.0 to v1.0.5 by @rissson in https://github.com/goauthentik/authentik/pull/13941 * core: bump twisted from 24.7.0 to v24.11.0 by @rissson in https://github.com/goauthentik/authentik/pull/13936 * core: bump rich from 13.7.1 to v14.0.0 by @rissson in https://github.com/goauthentik/authentik/pull/13922 * core: bump pydantic from 2.10.6 to v2.11.3 by @rissson in https://github.com/goauthentik/authentik/pull/13914 * core: bump protobuf from 5.27.2 to v5.29.4 by @rissson in https://github.com/goauthentik/authentik/pull/13911 * core: bump proto-plus from 1.24.0 to v1.26.1 by @rissson in https://github.com/goauthentik/authentik/pull/13910 * core: bump msgraph-sdk from 1.24.0 to v1.26.0 by @rissson in https://github.com/goauthentik/authentik/pull/13901 * core: bump msgpack from 1.0.8 to v1.1.0 by @rissson in https://github.com/goauthentik/authentik/pull/13899 * core: bump kombu from 5.3.7 to v5.5.2 by @rissson in https://github.com/goauthentik/authentik/pull/13888 * core: bump setuptools from 72.1.0 to v78.1.0 by @rissson in https://github.com/goauthentik/authentik/pull/13928 * core: bump jsii from 1.109.0 to v1.111.0 by @rissson in https://github.com/goauthentik/authentik/pull/13886 * core: bump msgraph-core from 1.3.1 to v1.3.3 by @rissson in https://github.com/goauthentik/authentik/pull/13900 * core: bump trio-websocket from 0.11.1 to v0.12.2 by @rissson in https://github.com/goauthentik/authentik/pull/13934 * core: bump microsoft-kiota-http from 1.9.2 to v1.9.3 by @rissson in https://github.com/goauthentik/authentik/pull/13949 * core: bump microsoft-kiota-authentication-azure from 1.9.2 to v1.9.3 by @rissson in https://github.com/goauthentik/authentik/pull/13948 * core: bump pyasn1-modules from 0.4.1 to v0.4.2 by @rissson in https://github.com/goauthentik/authentik/pull/13951 * core: bump protobuf from 5.29.4 to v6.30.2 by @rissson in https://github.com/goauthentik/authentik/pull/13950 * lifecycle/aws: bump aws-cdk-lib by @rissson in https://github.com/goauthentik/authentik/pull/13953 * Fix redirect URL in wordpress integration guide by @virtualboys in https://github.com/goauthentik/authentik/pull/13955 * website/integration: update harbor integration document by @dewi-tik in https://github.com/goauthentik/authentik/pull/13816 * website/integrations: add Homarr by @nfons in https://github.com/goauthentik/authentik/pull/13818 * website/docs: Remove enterprise badge from Fleet integration by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13963 * core: bump django from 5.0.13 to 5.0.14 by @melizeche in https://github.com/goauthentik/authentik/pull/13954 * core: bump astral-sh/uv from 0.6.13 to 0.6.14 by @dependabot in https://github.com/goauthentik/authentik/pull/13964 * translate: Updates for file locale/en/LC_MESSAGES/django.po in it by @transifex-integration in https://github.com/goauthentik/authentik/pull/13957 * translate: Updates for file web/xliff/en.xlf in it by @transifex-integration in https://github.com/goauthentik/authentik/pull/13956 * sources/ldap: lookup group memberships from user attribute by @krejcar25 in https://github.com/goauthentik/authentik/pull/12661 * core: bump boto3 from 1.37.30 to v1.37.31 by @rissson in https://github.com/goauthentik/authentik/pull/13968 * core: bump msgraph-sdk from 1.26.0 to v1.27.0 by @rissson in https://github.com/goauthentik/authentik/pull/13970 * core: bump multidict from 6.2.0 to v6.4.2 by @rissson in https://github.com/goauthentik/authentik/pull/13971 * web: elements: Table: Fix table selection clearing behavior by @dominic-r in https://github.com/goauthentik/authentik/pull/13959 * website: dev docs: fix upper-case authentik by @dominic-r in https://github.com/goauthentik/authentik/pull/13961 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13996 * website/integrations: add wazuh by @dewi-tik in https://github.com/goauthentik/authentik/pull/13776 * website/integrations: add openproject by @dewi-tik in https://github.com/goauthentik/authentik/pull/13838 * core: migrate all sessions to the database by @rissson in https://github.com/goauthentik/authentik/pull/9736 * core: fix migrations by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14009 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13999 * core: bump goauthentik.io/api/v3 from 3.2025024.1 to 3.2025024.2 by @dependabot in https://github.com/goauthentik/authentik/pull/14005 * core: bump github.com/getsentry/sentry-go from 0.31.1 to 0.32.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14004 * translate: Updates for file locale/en/LC_MESSAGES/django.po in ko [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13993 * translate: Updates for file locale/en/LC_MESSAGES/django.po in tr [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13995 * translate: Updates for file locale/en/LC_MESSAGES/django.po in pt_BR [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13990 * translate: Updates for file locale/en/LC_MESSAGES/django.po in pl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13989 * translate: Updates for file web/xliff/en.xlf in fi [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13978 * translate: Updates for file locale/en/LC_MESSAGES/django.po in fi [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13988 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_TW [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13994 * translate: Updates for file locale/en/LC_MESSAGES/django.po in es [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13987 * translate: Updates for file locale/en/LC_MESSAGES/django.po in nl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13991 * translate: Updates for file locale/en/LC_MESSAGES/django.po in de [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13986 * translate: Updates for file locale/en/LC_MESSAGES/django.po in ru [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13992 * translate: Updates for file web/xliff/en.xlf in zh-Hans [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13985 * core: bump urllib3 from 2.3.0 to 2.4.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14006 * sources/ldap: add source connections by @rissson in https://github.com/goauthentik/authentik/pull/13796 * translate: Updates for file web/xliff/en.xlf in fr [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13979 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13972 * translate: Updates for file web/xliff/en.xlf in ru [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14013 * translate: Updates for file web/xliff/en.xlf in zh-Hans [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14021 * translate: Updates for file locale/en/LC_MESSAGES/django.po in es [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14019 * translate: Updates for file locale/en/LC_MESSAGES/django.po in fr [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14022 * translate: Updates for file locale/en/LC_MESSAGES/django.po in ru [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14032 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14029 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14028 * translate: Updates for file web/xliff/en.xlf in it [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14016 * translate: Updates for file web/xliff/en.xlf in zh_CN [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14017 * translate: Updates for file web/xliff/en.xlf in pl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14015 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_TW [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14031 * translate: Updates for file locale/en/LC_MESSAGES/django.po in fi [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14023 * translate: Updates for file locale/en/LC_MESSAGES/django.po in pl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14025 * translate: Updates for file locale/en/LC_MESSAGES/django.po in it [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14024 * translate: Updates for file locale/en/LC_MESSAGES/django.po in pt_BR [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14027 * translate: Updates for file locale/en/LC_MESSAGES/django.po in de [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14020 * translate: Updates for file web/xliff/en.xlf in fi [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14012 * translate: Updates for file locale/en/LC_MESSAGES/django.po in nl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14026 * website: Port WWW theme to docs site. Prep for package. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13962 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14037 * core: bump github.com/sethvargo/go-envconfig from 1.1.1 to 1.2.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14041 * core: bump goauthentik.io/api/v3 from 3.2025024.2 to 3.2025024.4 by @dependabot in https://github.com/goauthentik/authentik/pull/14042 * root: prevent docker-compose up when secret key is missing by @josegomezr in https://github.com/goauthentik/authentik/pull/14043 * core: bump debugpy from 1.8.13 to v1.8.14 by @rissson in https://github.com/goauthentik/authentik/pull/14047 * core: bump googleapis-common-protos from 1.69.2 to v1.70.0 by @rissson in https://github.com/goauthentik/authentik/pull/14049 * core: bump google-api-python-client from 2.166.0 to v2.167.0 by @rissson in https://github.com/goauthentik/authentik/pull/14048 * core: bump httpcore from 1.0.7 to v1.0.8 by @rissson in https://github.com/goauthentik/authentik/pull/14050 * core: bump opentelemetry-api from 1.31.1 to v1.32.0 by @rissson in https://github.com/goauthentik/authentik/pull/14052 * core: bump boto3 from 1.37.31 to v1.37.33 by @rissson in https://github.com/goauthentik/authentik/pull/14045 * core: bump ruff from 0.11.4 to v0.11.5 by @rissson in https://github.com/goauthentik/authentik/pull/14053 * core: bump typing-extensions from 4.13.1 to v4.13.2 by @rissson in https://github.com/goauthentik/authentik/pull/14055 * core: bump uvicorn from 0.34.0 to v0.34.1 by @rissson in https://github.com/goauthentik/authentik/pull/14056 * core: bump multidict from 6.4.2 to v6.4.3 by @rissson in https://github.com/goauthentik/authentik/pull/14051 * providers/oauth2, rac: make sure tokens are revoked after session deletion by @rissson in https://github.com/goauthentik/authentik/pull/14011 * root: add packages/ to codeowners by @rissson in https://github.com/goauthentik/authentik/pull/13975 * ci: add NPM packages publish by @rissson in https://github.com/goauthentik/authentik/pull/13974 * core: bump goauthentik/fips-python from 3.12.9-slim-bookworm-fips to 3.12.10-slim-bookworm-fips by @rissson in https://github.com/goauthentik/authentik/pull/14044 * ci: fix api-py-publish by disabling poetry cache by @rissson in https://github.com/goauthentik/authentik/pull/14010 * policies/reputation: limit reputation score by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14008 * core: bump django-rest-framework from 3.14.0 to 3.16.0 by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14057 * core: Bump django from 5.0.14 to 5.1.8 by @melizeche in https://github.com/goauthentik/authentik/pull/14059 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/14058 * rbac: add `InitialPermissions` by @gergosimonyi in https://github.com/goauthentik/authentik/pull/13795 * root: support db pool by @rissson in https://github.com/goauthentik/authentik/pull/13534 * website/integrations: fix for actual-budget wiki guide by @jmarmstrong1207 in https://github.com/goauthentik/authentik/pull/14066 * core: bump goauthentik.io/api/v3 from 3.2025024.4 to 3.2025024.6 by @dependabot in https://github.com/goauthentik/authentik/pull/14069 * stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in https://github.com/goauthentik/authentik/pull/14065 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14064 * website/docs: fix minor typo in working_with_policies.md by @tosdan-vscode in https://github.com/goauthentik/authentik/pull/14071 * core: bump msgraph-sdk from 1.27.0 to v1.28.0 by @rissson in https://github.com/goauthentik/authentik/pull/14077 * core: bump boto3 from 1.37.33 to v1.37.34 by @rissson in https://github.com/goauthentik/authentik/pull/14074 * core: bump prompt-toolkit from 3.0.50 to v3.0.51 by @rissson in https://github.com/goauthentik/authentik/pull/14078 * core: bump sentry-sdk from 2.25.1 to v2.26.1 by @rissson in https://github.com/goauthentik/authentik/pull/14079 * core: bump google-auth from 2.38.0 to v2.39.0 by @rissson in https://github.com/goauthentik/authentik/pull/14076 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14083 * translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14084 * translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14086 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14087 * translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/14090 * translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/14091 * web/api: Fix Hoisted exports across entrypoints. Update Axios. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14089 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14096 * sources/oauth: introduce authorization code auth method by @rissson in https://github.com/goauthentik/authentik/pull/14034 * core: bump rsa from 4.9 to v4.9.1 by @rissson in https://github.com/goauthentik/authentik/pull/14103 * core: bump opentelemetry-api from 1.32.0 to v1.32.1 by @rissson in https://github.com/goauthentik/authentik/pull/14102 * policies/geoip: fix result when only dynamic results are used by @rissson in https://github.com/goauthentik/authentik/pull/14107 * website/integrations: general cleanup and updates by @dominic-r in https://github.com/goauthentik/authentik/pull/12716 * website integrations: actual budget: remove old header and support_level by @dominic-r in https://github.com/goauthentik/authentik/pull/14112 * website: integrations: apache guacamole: Fix deprecated start-of-doc … by @dominic-r in https://github.com/goauthentik/authentik/pull/14114 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14117 * lifecycle/aws: bump aws-cdk from 2.1007.0 to 2.1010.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/14122 * core: bump goauthentik.io/api/v3 from 3.2025024.6 to 3.2025024.7 by @dependabot in https://github.com/goauthentik/authentik/pull/14121 * web: add `remember me` feature to IdentificationStage by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/10397 * translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/14123 * translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/14124 * core: bump github.com/go-ldap/ldap/v3 from 3.4.10 to 3.4.11 by @dependabot in https://github.com/goauthentik/authentik/pull/14068 * website: bump the build group in /website with 9 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13748 * website: bump wireit from 0.14.11 to 0.14.12 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/14003 * website: bump estree-util-value-to-estree from 3.1.1 to 3.3.3 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13808 * website: bump http-proxy-middleware from 2.0.7 to 2.0.9 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/14111 * core: bump automat from 24.8.1 to v25.4.16 by @rissson in https://github.com/goauthentik/authentik/pull/14125 * core: bump boto3 from 1.37.34 to v1.37.35 by @rissson in https://github.com/goauthentik/authentik/pull/14126 * core: bump kombu from 5.5.2 to v5.5.3 by @rissson in https://github.com/goauthentik/authentik/pull/14127 * core: bump yarl from 1.19.0 to v1.20.0 by @rissson in https://github.com/goauthentik/authentik/pull/14128 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14142 * translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14139 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14144 * core: bump goauthentik.io/api/v3 from 3.2025024.7 to 3.2025024.8 by @dependabot in https://github.com/goauthentik/authentik/pull/14143 * translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14145 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14146 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/14062 * web: Packagify live reload plugin. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14134 * website: integrations: gravity: fix issuer URL by @dominic-r in https://github.com/goauthentik/authentik/pull/14155 * web: fix scrollbar styling by @RoboMagus in https://github.com/goauthentik/authentik/pull/12600 * core: bump astral-sh/uv from 0.6.14 to 0.6.16 by @dependabot in https://github.com/goauthentik/authentik/pull/14161 * website/docs: fix postgres pool recommended settings by @MatthewStockdale in https://github.com/goauthentik/authentik/pull/14149 * web/xliff: fix duplicated translations by @rissson in https://github.com/goauthentik/authentik/pull/14164 * enterprise/policies: Add Password Uniqueness History Policy by @melizeche in https://github.com/goauthentik/authentik/pull/13453 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/14176 * web: update default flow background by @rissson in https://github.com/goauthentik/authentik/pull/14115 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14179 * website/integrations: add xcreds by @dewi-tik in https://github.com/goauthentik/authentik/pull/14163 * core: bump uvicorn from 0.34.1 to v0.34.2 by @rissson in https://github.com/goauthentik/authentik/pull/14175 * Revert "policies: buffered policy access view for concurrent authorization attempts when unauthenticated (#13629)" by @rissson in https://github.com/goauthentik/authentik/pull/14180 * website: components: delete multilinecodeblock src by @dominic-r in https://github.com/goauthentik/authentik/pull/14094 * website/docs: updates style guide code block section by @dewi-tik in https://github.com/goauthentik/authentik/pull/14088 * website/integrations: paperless: use <slug>. instead of hardcoded slug value by @dominic-r in https://github.com/goauthentik/authentik/pull/14183 * website/docs: dev docs: style guide: update style conventions for urls by @dominic-r in https://github.com/goauthentik/authentik/pull/14184 * website/docs: dev-docs: style guide: no longer using italic for vars by @dominic-r in https://github.com/goauthentik/authentik/pull/14185 * website/docs: update user object doc by @dewi-tik in https://github.com/goauthentik/authentik/pull/14132 * core: bump goauthentik.io/api/v3 from 3.2025024.8 to 3.2025024.9 by @dependabot in https://github.com/goauthentik/authentik/pull/14189 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14187 * website/integrations: mealie add integration by @TrisBits in https://github.com/goauthentik/authentik/pull/14188 * translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14196 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14197 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14195 * translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14198 * website/docs: adds code examples for getting user objects from a group object by @dewi-tik in https://github.com/goauthentik/authentik/pull/14101 * translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/14199 * translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/14200 * outposts: add support for gateway API by @rissson in https://github.com/goauthentik/authentik/pull/13272 * packages/docusaurus-theme: Fix header alignment, overscroll, vertical padding. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14120 * website: integrations: apache guacamole: remove redirect URI comments by @dominic-r in https://github.com/goauthentik/authentik/pull/14113 * website/docs: rearranged brands docs by @tanberry in https://github.com/goauthentik/authentik/pull/14116 * website/docs: updated user count info by @tanberry in https://github.com/goauthentik/authentik/pull/14186 * website/integrations: improves netbird documentation by @dewi-tik in https://github.com/goauthentik/authentik/pull/14191 * lifecycle/aws: bump aws-cdk from 2.1010.0 to 2.1012.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/14205 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14203 * lifecycle/migrate: fix migration failing if killed during first startup by @rissson in https://github.com/goauthentik/authentik/pull/14207 * website: bump typescript from 5.8.2 to 5.8.3 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13786 * website: bump the build group in /website with 9 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14204 * web: Safari fixes merge branch by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14181 * Revert "web: Safari fixes merge branch (#14181)" by @rissson in https://github.com/goauthentik/authentik/pull/14211 * Revert package-lock.json changes from "web: add `remember me` feature to IdentificationStage (#10397)" by @rissson in https://github.com/goauthentik/authentik/pull/14212 * website/docs: Prepare for monorepo. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14119 * ci: fix npm packages publication not running by @rissson in https://github.com/goauthentik/authentik/pull/14215 * web: lock lit/ssr by @rissson in https://github.com/goauthentik/authentik/pull/14214 * translate: Updates for file locale/en/LC_MESSAGES/django.po in tr [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14234 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_TW [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14235 * stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in https://github.com/goauthentik/authentik/pull/14237 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/14236 * Revert "website/docs: Prepare for monorepo. (#14119)" by @melizeche in https://github.com/goauthentik/authentik/pull/14239 * translate: Updates for file locale/en/LC_MESSAGES/django.po in pt_BR [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14233 * translate: Updates for file web/xliff/en.xlf in it [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14216 * translate: Updates for file locale/en/LC_MESSAGES/django.po in ru [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14232 * translate: Updates for file locale/en/LC_MESSAGES/django.po in it [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14231 * translate: Updates for file locale/en/LC_MESSAGES/django.po in ko [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14230 * translate: Updates for file locale/en/LC_MESSAGES/django.po in pl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14229 * translate: Updates for file web/xliff/en.xlf in tr [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14228 * translate: Updates for file locale/en/LC_MESSAGES/django.po in fi [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14227 * translate: Updates for file locale/en/LC_MESSAGES/django.po in de [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14226 * translate: Updates for file web/xliff/en.xlf in zh-Hans [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14224 * translate: Updates for file locale/en/LC_MESSAGES/django.po in es [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14223 * translate: Updates for file web/xliff/en.xlf in pl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14222 * translate: Updates for file web/xliff/en.xlf in fr [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14221 * translate: Updates for file web/xliff/en.xlf in de [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14220 * translate: Updates for file web/xliff/en.xlf in fi [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14219 * translate: Updates for file web/xliff/en.xlf in nl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14217 * Updates for file web/xliff/en.xlf in zh_TW [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14225 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14241 * website/docs: Update release notes for 2025.4 by @melizeche in https://github.com/goauthentik/authentik/pull/14158 * core, web: update translations (cherry-pick #14243) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14245 * lifecycle: fix test-all in docker (cherry-pick #14244) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14246 * web: fix bug that was causing charts to be too tall (cherry-pick #14253) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14254 * rbac: add `name` to Permissions search (cherry-pick #14269) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14270 ## New Contributors * @klmmr made their first contribution in https://github.com/goauthentik/authentik/pull/13174 * @Lars- made their first contribution in https://github.com/goauthentik/authentik/pull/13000 * @dustindkoch made their first contribution in https://github.com/goauthentik/authentik/pull/13267 * @justafish made their first contribution in https://github.com/goauthentik/authentik/pull/12925 * @eljpsm made their first contribution in https://github.com/goauthentik/authentik/pull/13377 * @Rami-Pastrami made their first contribution in https://github.com/goauthentik/authentik/pull/13392 * @movabo made their first contribution in https://github.com/goauthentik/authentik/pull/13324 * @jorhett made their first contribution in https://github.com/goauthentik/authentik/pull/13342 * @Netoen made their first contribution in https://github.com/goauthentik/authentik/pull/13544 * @chwshka made their first contribution in https://github.com/goauthentik/authentik/pull/13559 * @joeftiger made their first contribution in https://github.com/goauthentik/authentik/pull/13657 * @garar made their first contribution in https://github.com/goauthentik/authentik/pull/13726 * @MPK1 made their first contribution in https://github.com/goauthentik/authentik/pull/13721 * @obakuhl made their first contribution in https://github.com/goauthentik/authentik/pull/13727 * @Wr0ngName made their first contribution in https://github.com/goauthentik/authentik/pull/13761 * @yuval-ziv made their first contribution in https://github.com/goauthentik/authentik/pull/13785 * @Unfaehig made their first contribution in https://github.com/goauthentik/authentik/pull/13782 * @adamjrberry made their first contribution in https://github.com/goauthentik/authentik/pull/13803 * @nfons made their first contribution in https://github.com/goauthentik/authentik/pull/13804 * @petrsimunek made their first contribution in https://github.com/goauthentik/authentik/pull/13789 * @virtualboys made their first contribution in https://github.com/goauthentik/authentik/pull/13955 * @krejcar25 made their first contribution in https://github.com/goauthentik/authentik/pull/12661 * @josegomezr made their first contribution in https://github.com/goauthentik/authentik/pull/14043 * @jmarmstrong1207 made their first contribution in https://github.com/goauthentik/authentik/pull/14066 * @tosdan-vscode made their first contribution in https://github.com/goauthentik/authentik/pull/14071 * @MatthewStockdale made their first contribution in https://github.com/goauthentik/authentik/pull/14149 * @TrisBits made their first contribution in https://github.com/goauthentik/authentik/pull/14188 **Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2025.2.4...version/2025.4.0