authentik: Release 2025.6.0

See https://docs.goauthentik.io/docs/releases/2025.6 ## What's Changed * web/admin: prevent default logo flashing in admin interface by @dominic-r in https://github.com/goauthentik/authentik/pull/13960 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14243 * lifecycle: fix test-all in docker by @rissson in https://github.com/goauthentik/authentik/pull/14244 * website/integrations: adds missing trailing slash in homarr doc by @dewi-tik in https://github.com/goauthentik/authentik/pull/14249 * website/integrations: homarr remove redirect uri comment by @dominic-r in https://github.com/goauthentik/authentik/pull/14252 * web: fix bug that was causing charts to be too tall by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/14253 * core: bump astral-sh/uv from 0.6.16 to 0.6.17 by @dependabot in https://github.com/goauthentik/authentik/pull/14266 * website/docs: add device code flow instructions by @dewi-tik in https://github.com/goauthentik/authentik/pull/14267 * rbac: add `name` to Permissions search by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14269 * website/docs: update 2025.4 release notes by @melizeche in https://github.com/goauthentik/authentik/pull/14251 * docs/website: Update 2025.4 notes by @melizeche in https://github.com/goauthentik/authentik/pull/14272 * website/docs: Password Uniqueness Policy by @melizeche in https://github.com/goauthentik/authentik/pull/13686 * website/docs: Revert "website/docs: revert token_expiry format in example blueprint… by @melizeche in https://github.com/goauthentik/authentik/pull/14280 * website/docs: docs about initial perms by @tanberry in https://github.com/goauthentik/authentik/pull/14263 * website/docs: add postgres pool configuration by @rissson in https://github.com/goauthentik/authentik/pull/14060 * website/docs: add LDAP 'Lookup using user attribute' docs by @rissson in https://github.com/goauthentik/authentik/pull/13966 * website/docs: sessions in database by @rissson in https://github.com/goauthentik/authentik/pull/13507 * website/docs: Release notes 2025.4.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14281 * website/docs: add gateway API to release notes and documentation by @rissson in https://github.com/goauthentik/authentik/pull/14278 * ci: cleanup post uv migration by @rissson in https://github.com/goauthentik/authentik/pull/13538 * core: bump astral-sh/uv from 0.6.17 to 0.7.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14294 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14273 * release: 2025.4.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14299 * website/docs: initial permissions: fix usage of term admin by @dominic-r in https://github.com/goauthentik/authentik/pull/14300 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/14301 * website/docs: clarify some points (i.e. around capitalization after colons) by @tanberry in https://github.com/goauthentik/authentik/pull/14290 * website/docs: clarify `2025.4` breaking Reputation changes by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14284 * brands: fix CSS Migration not updating brands by @BeryJu in https://github.com/goauthentik/authentik/pull/14306 * website/docs: clean up oauth redirect paragraph by @fheisler in https://github.com/goauthentik/authentik/pull/14291 * website/docs: adds webfinger doc under oauth provider by @dewi-tik in https://github.com/goauthentik/authentik/pull/14247 * website/docs: "Device code flow" documentation improvements by @LucaTheHacker in https://github.com/goauthentik/authentik/pull/14257 * website/integrations: improve Gitea doc by @dewi-tik in https://github.com/goauthentik/authentik/pull/14194 * website/integrations: youtrack document by @dominic-r in https://github.com/goauthentik/authentik/pull/14264 * lifecycle/aws: bump aws-cdk from 2.1012.0 to 2.1013.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/14318 * core: bump github.com/redis/go-redis/v9 from 9.7.3 to 9.8.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14317 * core: bump goauthentik.io/api/v3 from 3.2025024.9 to 3.2025040.1 by @dependabot in https://github.com/goauthentik/authentik/pull/14316 * core: bump astral-sh/uv from 0.7.0 to 0.7.2 by @dependabot in https://github.com/goauthentik/authentik/pull/14315 * stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in https://github.com/goauthentik/authentik/pull/14311 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14309 * website: bump the build group across 1 directory with 9 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14293 * translate: Updates for file locale/en/LC_MESSAGES/django.po in it by @transifex-integration in https://github.com/goauthentik/authentik/pull/14271 * core: bump trio from 0.29.0 to v0.30.0 by @rissson in https://github.com/goauthentik/authentik/pull/14174 * core: bump pdoc from 15.0.1 to v15.0.3 by @rissson in https://github.com/goauthentik/authentik/pull/14170 * core: bump frozenlist from 1.5.0 to v1.6.0 by @rissson in https://github.com/goauthentik/authentik/pull/14168 * core: bump boto3 from 1.37.35 to v1.37.38 by @rissson in https://github.com/goauthentik/authentik/pull/14167 * core: bump aiohttp from 3.11.16 to v3.11.18 by @rissson in https://github.com/goauthentik/authentik/pull/14166 * core: bump packaging from 24.2 to v25.0 by @rissson in https://github.com/goauthentik/authentik/pull/14169 * core: bump s3transfer from 0.11.4 to v0.11.5 by @rissson in https://github.com/goauthentik/authentik/pull/14172 * core: bump ruff from 0.11.5 to v0.11.6 by @rissson in https://github.com/goauthentik/authentik/pull/14171 * core: bump setuptools from 78.1.0 to v79.0.0 by @rissson in https://github.com/goauthentik/authentik/pull/14173 * web: bump vite from 5.4.16 to 5.4.19 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14324 * core: bump github.com/sethvargo/go-envconfig from 1.2.0 to 1.3.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14327 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14326 * rbac: fix RoleObjectPermissionTable not showing `add_user_to_group` by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14312 * website/docs: fix dry-run release highlight by @BeryJu in https://github.com/goauthentik/authentik/pull/14337 * ci: use dependabot for docker-compose files by @BeryJu in https://github.com/goauthentik/authentik/pull/14336 * website/docs: use Universal Device Trust for GDTC instead of Okta by @BeryJu in https://github.com/goauthentik/authentik/pull/14335 * ci: use dependabot for compose correctly? by @BeryJu in https://github.com/goauthentik/authentik/pull/14340 * website/docs: remove support badge by @tanberry in https://github.com/goauthentik/authentik/pull/14343 * Revert-revert: Safari fixes by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14331 * web: Use monorepo package utilities to build packages by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14159 * web: Clean up browser-only module imports that crash WebDriverIO. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14330 * web: NPM workspaces by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14274 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14368 * core: bump unidecode from 1.3.8 to v1.4.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14367 * core: bump structlog from 25.2.0 to v25.3.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14366 * core: bump setuptools from 78.1.0 to v80.1.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14365 * core: bump setproctitle from 1.3.5 to v1.3.6 by @melizeche in https://github.com/goauthentik/authentik/pull/14364 * core: bump sentry-sdk from 2.26.1 to v2.27.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14363 * core: bump ruff from 0.11.5 to v0.11.8 by @melizeche in https://github.com/goauthentik/authentik/pull/14362 * core: bump redis from 5.2.1 to v6.0.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14361 * core: bump pydantic from 2.11.3 to v2.11.4 by @melizeche in https://github.com/goauthentik/authentik/pull/14360 * core: bump psycopg from 3.2.6 to v3.2.7 by @melizeche in https://github.com/goauthentik/authentik/pull/14359 * core: bump orjson from 3.10.16 to v3.10.18 by @melizeche in https://github.com/goauthentik/authentik/pull/14358 * core: bump mypy-extensions from 1.0.0 to v1.1.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14357 * core: bump msal from 1.32.0 to v1.32.3 by @melizeche in https://github.com/goauthentik/authentik/pull/14356 * core: bump jsonschema-specifications from 2024.10.1 to v2025.4.1 by @melizeche in https://github.com/goauthentik/authentik/pull/14354 * core: bump humanize from 4.12.2 to v4.12.3 by @melizeche in https://github.com/goauthentik/authentik/pull/14353 * core: bump h11 from 0.14.0 to v0.16.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14352 * core: bump google-api-python-client from 2.167.0 to v2.169.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14351 * core: bump cryptography from 44.0.2 to v44.0.3 by @melizeche in https://github.com/goauthentik/authentik/pull/14350 * core: bump charset-normalizer from 3.4.1 to v3.4.2 by @melizeche in https://github.com/goauthentik/authentik/pull/14349 * core: bump certifi from 2025.1.31 to v2025.4.26 by @melizeche in https://github.com/goauthentik/authentik/pull/14348 * core: bump celery from 5.5.1 to v5.5.2 by @melizeche in https://github.com/goauthentik/authentik/pull/14347 * core: bump boto3 from 1.37.35 to v1.38.7 by @melizeche in https://github.com/goauthentik/authentik/pull/14346 * core: bump azure-core from 1.33.0 to v1.34.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14345 * core: bump lxml from 5.3.2 to v5.4.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14355 * core: bump selenium/standalone-chrome from 122.0 to 135.0 in /tests/e2e by @dependabot in https://github.com/goauthentik/authentik/pull/14342 * core: bump axllent/mailpit from v1.6.5 to v1.24.1 in /tests/e2e by @dependabot in https://github.com/goauthentik/authentik/pull/14341 * core: bump goauthentik/fips-python from 3.12.10-slim-bookworm-fips to 3.13.3-slim-bookworm-fips by @dependabot in https://github.com/goauthentik/authentik/pull/12763 * website/integrations: minio: fix typo by @dominic-r in https://github.com/goauthentik/authentik/pull/14376 * website/docs: fix leftover placeholder in release notes by @finkerle in https://github.com/goauthentik/authentik/pull/14377 * website/integrations: Fix outpost link for Home Assistant configuration by @jshank in https://github.com/goauthentik/authentik/pull/14382 * translate: Updates for file locale/en/LC_MESSAGES/django.po in pt by @transifex-integration in https://github.com/goauthentik/authentik/pull/14379 * translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14375 * translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14374 * translate: Updates for file web/xliff/en.xlf in it by @transifex-integration in https://github.com/goauthentik/authentik/pull/14372 * core: bump axllent/mailpit from v1.24.1 to v1.24.2 in /tests/e2e by @dependabot in https://github.com/goauthentik/authentik/pull/14390 * ci: bump golangci/golangci-lint-action from 7 to 8 by @dependabot in https://github.com/goauthentik/authentik/pull/14389 * core: bump github.com/pires/go-proxyproto from 0.8.0 to 0.8.1 by @dependabot in https://github.com/goauthentik/authentik/pull/14388 * website/integrations: add atlassian by @dewi-tik in https://github.com/goauthentik/authentik/pull/14209 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14383 * web, website: update browserslist by @dominic-r in https://github.com/goauthentik/authentik/pull/14386 * website/docs: Add pkg-config to the brew dependencies by @melizeche in https://github.com/goauthentik/authentik/pull/14398 * website/docs: Update deps. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14397 * website/docs: add one more reference and link about `can view Admin interface` by @tanberry in https://github.com/goauthentik/authentik/pull/14399 * core: bump twilio from 9.5.2 to v9.6.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14396 * core: bump setuptools from 80.1.0 to v80.3.1 by @melizeche in https://github.com/goauthentik/authentik/pull/14395 * core: bump boto3 from 1.38.7 to v1.38.8 by @melizeche in https://github.com/goauthentik/authentik/pull/14393 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14402 * core: bump selenium/standalone-chrome from 135.0 to 136.0 in /tests/e2e by @dependabot in https://github.com/goauthentik/authentik/pull/14407 * core: bump golang.org/x/sync from 0.13.0 to 0.14.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14406 * core: bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14405 * website/docs: Update Docusaurus config. Prep for version picker. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14401 * core: bump selenium from 4.31.0 to v4.32.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14394 * web: cleanup/loading attribute always true by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/14288 * core: bump pytest-timeout from 2.3.1 to v2.4.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14421 * core: bump jsii from 1.111.0 to v1.112.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14419 * core: bump google-auth from 2.39.0 to v2.40.1 by @melizeche in https://github.com/goauthentik/authentik/pull/14418 * core: bump azure-identity from 1.21.0 to v1.22.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14415 * core: bump maxminddb from 2.6.3 to v2.7.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14420 * core: bump boto3 from 1.38.7 to v1.38.10 by @melizeche in https://github.com/goauthentik/authentik/pull/14416 * core: bump geoip2 from 5.0.1 to v5.1.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14417 * website/integrations: improve grafana docs by @andymarden in https://github.com/goauthentik/authentik/pull/14408 * website/integrations: coder by @dominic-r in https://github.com/goauthentik/authentik/pull/14385 * root: readme: use right contribution guide link by @dominic-r in https://github.com/goauthentik/authentik/pull/14250 * website/docs: configuration sessions are now stored by default in the database by @dominic-r in https://github.com/goauthentik/authentik/pull/14425 * website/integrations: update paperless ngx instructions to include correct scopes by @jshank in https://github.com/goauthentik/authentik/pull/14424 * core: bump astral-sh/uv from 0.7.2 to 0.7.3 by @dependabot in https://github.com/goauthentik/authentik/pull/14426 * website: bump the build group in /website with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14427 * website/integrations: coder: fix period by @dominic-r in https://github.com/goauthentik/authentik/pull/14423 * website/integrations: fix sonarqube badge by @dewi-tik in https://github.com/goauthentik/authentik/pull/14434 * website/integrations: update integration template by @dewi-tik in https://github.com/goauthentik/authentik/pull/14432 * lifecycle/aws: bump aws-cdk from 2.1013.0 to 2.1014.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/14436 * lifecycle: fix ak dump_config by @BeryJu in https://github.com/goauthentik/authentik/pull/14445 * outposts: fix tmpdir in containers not being set by @BeryJu in https://github.com/goauthentik/authentik/pull/14444 * web/flows/sfe: fix global background image not being loaded by @BeryJu in https://github.com/goauthentik/authentik/pull/14442 * core: bump ruff from 0.11.8 to v0.11.9 by @melizeche in https://github.com/goauthentik/authentik/pull/14457 * core: bump platformdirs from 4.3.7 to v4.3.8 by @melizeche in https://github.com/goauthentik/authentik/pull/14456 * core: bump opentelemetry-api from 1.32.1 to v1.33.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14455 * core: bump msgraph-sdk from 1.28.0 to v1.29.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14454 * web/admin: fix enterprise menu display by @BeryJu in https://github.com/goauthentik/authentik/pull/14447 * website/docs: update outdated custom CSS docs by @BeryJu in https://github.com/goauthentik/authentik/pull/14441 * Revert "web/admin: fix enterprise menu display" by @BeryJu in https://github.com/goauthentik/authentik/pull/14458 * root: improve sentry distributed tracing by @BeryJu in https://github.com/goauthentik/authentik/pull/14468 * website/docs: Update Kubernetes Bootstrap Instructions by @msd117c in https://github.com/goauthentik/authentik/pull/14471 * website/docs: stages: fix-typo by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14477 * website: bump the build group in /website with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14475 * root: temporarily deactivate database pool option by @BeryJu in https://github.com/goauthentik/authentik/pull/14443 * core: fix session migration when old session can't be loaded by @BeryJu in https://github.com/goauthentik/authentik/pull/14466 * root: pin package version in pyproject for dependabot by @BeryJu in https://github.com/goauthentik/authentik/pull/14469 * core: bump sentry-sdk from 2.27.0 to 2.28.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14482 * core: bump psycopg[c,pool] from 3.2.7 to 3.2.8 by @dependabot in https://github.com/goauthentik/authentik/pull/14481 * core: bump django from 5.1.8 to 5.1.9 by @dependabot in https://github.com/goauthentik/authentik/pull/14483 * website: bump semver from 7.7.1 to 7.7.2 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/14491 * tests/e2e: Add E2E tests for Flow SFE by @BeryJu in https://github.com/goauthentik/authentik/pull/14484 * website/integrations: fix missing closing brace for semaphore by @ericgu08 in https://github.com/goauthentik/authentik/pull/14467 * enterprise: fix expired license's users being counted by @BeryJu in https://github.com/goauthentik/authentik/pull/14451 * core: bump psycopg[c,pool] from 3.2.8 to 3.2.9 by @dependabot in https://github.com/goauthentik/authentik/pull/14504 * core: bump twilio from 9.6.0 to 9.6.1 by @dependabot in https://github.com/goauthentik/authentik/pull/14505 * core: bump msgraph-sdk from 1.29.0 to 1.30.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14503 * core: remove `OldAuthenticatedSession` content type by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14507 * website: bump the build group in /website with 6 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14502 * web/admin: Fix sidebar toggle synchronization. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14487 * core: fix unable to create group if no enable_group_superuser permission is given by @BeryJu in https://github.com/goauthentik/authentik/pull/14510 * web/admin: Dual select state management, custom event dispatching. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14490 * lifecycle/aws: bump aws-cdk from 2.1014.0 to 2.1015.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/14516 * stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in https://github.com/goauthentik/authentik/pull/14513 * tests/e2e: add test for authentication flow in compatibility mode by @BeryJu in https://github.com/goauthentik/authentik/pull/14392 * web: bump undici from 6.21.1 to 6.21.3 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14524 * website/docs: release notes for 2025.4.1 by @BeryJu in https://github.com/goauthentik/authentik/pull/14526 * release: 2025.4.1 by @BeryJu in https://github.com/goauthentik/authentik/pull/14527 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/14528 * core: bump django-pglock from 1.7.1 to 1.7.2 by @dependabot in https://github.com/goauthentik/authentik/pull/14534 * core: bump goauthentik.io/api/v3 from 3.2025040.1 to 3.2025041.1 by @dependabot in https://github.com/goauthentik/authentik/pull/14533 * core: bump github.com/getsentry/sentry-go from 0.32.0 to 0.33.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14532 * core: bump astral-sh/uv from 0.7.3 to 0.7.4 by @dependabot in https://github.com/goauthentik/authentik/pull/14531 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14530 * sources/kerberos: resolve logger warnings by @emmanuel-ferdman in https://github.com/goauthentik/authentik/pull/14540 * root: replace raw.githubusercontent.com by checking out repo by @BeryJu in https://github.com/goauthentik/authentik/pull/14567 * translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14566 * web: Fix issue where Storybook cannot resolve styles. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14553 * translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14565 * core: bump axllent/mailpit from v1.24.2 to v1.25.0 in /tests/e2e by @dependabot in https://github.com/goauthentik/authentik/pull/14564 * lifecycle/aws: bump aws-cdk from 2.1015.0 to 2.1016.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/14563 * website: bump @types/postman-collection from 3.5.10 to 3.5.11 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/14561 * core: bump astral-sh/uv from 0.7.4 to 0.7.5 by @dependabot in https://github.com/goauthentik/authentik/pull/14560 * translate: Updates for file web/xliff/en.xlf in it by @transifex-integration in https://github.com/goauthentik/authentik/pull/14538 * ci: add dependencies label to generated PRs by @BeryJu in https://github.com/goauthentik/authentik/pull/14569 * translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/14570 * website/integrations: update paperless ngx instructions to include additional scopes by @jshank in https://github.com/goauthentik/authentik/pull/14486 * web: fix description for signing responses in SAML provider by @dewi-tik in https://github.com/goauthentik/authentik/pull/14573 * web: (ESLint) Consistent use of triple-equals. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14554 * web: (ESLint) Use dot notation. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14557 * web: (ESLint) No else return by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14558 * lib/sync/outgoing: reduce number of db queries made by @rissson in https://github.com/goauthentik/authentik/pull/14177 * enterprise/stages: Add MTLS stage by @BeryJu in https://github.com/goauthentik/authentik/pull/14296 * enterprise/stages/mtls: update go & web client, fix py client generation by @BeryJu in https://github.com/goauthentik/authentik/pull/14576 * web/NPM Workspaces: ESbuild version cleanup by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14541 * core: bump astral-sh/uv from 0.7.5 to 0.7.6 by @dependabot in https://github.com/goauthentik/authentik/pull/14580 * core: bump sentry-sdk from 2.28.0 to 2.29.1 by @dependabot in https://github.com/goauthentik/authentik/pull/14579 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14578 * translate: Updates for file web/xliff/en.xlf in it by @transifex-integration in https://github.com/goauthentik/authentik/pull/14575 * enterprise/stages/mtls: improve certificate validation by @BeryJu in https://github.com/goauthentik/authentik/pull/14582 * core: bump django-guardian from 2.4.0 to v3.0.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14453 * core: bump library/node from 22 to 24 by @dependabot in https://github.com/goauthentik/authentik/pull/14410 * root: move forked dependencies to goauthentik org by @BeryJu in https://github.com/goauthentik/authentik/pull/14590 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14606 * translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14609 * translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14607 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14608 * providers/proxy: kubernetes outpost: fix reconcile when ingress class name changed by @rissson in https://github.com/goauthentik/authentik/pull/14612 * translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/14611 * lifecycle: fix arguments not being passed to worker command by @BeryJu in https://github.com/goauthentik/authentik/pull/14574 * web/NPM Workspaces: Prep ESBuild plugin for publish. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14552 * esbuild-plugin-live-reload: Publish. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14624 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14626 * web: Fix missing Enterprise sidebar entries. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14615 * web: bump @goauthentik/prettier-config from 1.0.4 to 1.0.5 in /web/packages/esbuild-plugin-live-reload by @dependabot in https://github.com/goauthentik/authentik/pull/14637 * web: bump @types/guacamole-common-js from 1.5.2 to 1.5.3 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14643 * web: bump yaml from 2.5.1 to 2.8.0 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14642 * web: bump chromedriver from 131.0.1 to 136.0.3 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14641 * web: bump @lit/task from 1.0.1 to 1.0.2 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14635 * web: bump @patternfly/elements from 4.0.2 to 4.1.0 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14634 * lifecycle/aws: bump aws-cdk from 2.1016.0 to 2.1016.1 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/14631 * web: bump the sentry group across 1 directory with 2 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14587 * web: bump the rollup group across 2 directories with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14622 * website/docs: improve-rac-documents by @dewi-tik in https://github.com/goauthentik/authentik/pull/14414 * web: fix lint by @rissson in https://github.com/goauthentik/authentik/pull/14665 * web: bump dompurify from 3.2.4 to 3.2.6 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14658 * website: bump the goauthentik group in /website with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14654 * web: bump chart.js from 4.4.4 to 4.4.9 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14655 * web: bump @trivago/prettier-plugin-sort-imports from 4.3.0 to 5.2.2 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14661 * web: bump country-flag-icons from 1.5.13 to 1.5.19 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14659 * web: bump wireit from 0.14.9 to 0.14.12 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14656 * core: bump astral-sh/uv from 0.7.6 to 0.7.7 by @dependabot in https://github.com/goauthentik/authentik/pull/14651 * web: bump @types/node from 22.15.19 to 22.15.21 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14660 * web: bump @codemirror/lang-javascript from 6.2.2 to 6.2.4 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14657 * sources/scim: fix all users being added to group when no members are given by @BeryJu in https://github.com/goauthentik/authentik/pull/14645 * core: bump google-api-python-client from 2.169.0 to 2.170.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14653 * core: bump pydantic from 2.11.4 to 2.11.5 by @dependabot in https://github.com/goauthentik/authentik/pull/14652 * web: Type Tidy by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14647 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14676 * web: bump the goauthentik group across 4 directories with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14640 * website: Fix issue where OpenAPI docs template generates semi-synthet… by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14674 * Web: Controllers cleanup by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14616 * website/docs: fix typos in developer and user documentation by @codesenju in https://github.com/goauthentik/authentik/pull/14680 * website/integrations: add push security by @dewi-tik in https://github.com/goauthentik/authentik/pull/14429 * core: Publish web packages. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14648 * core: bump axllent/mailpit from v1.25.0 to v1.25.1 in /tests/e2e by @dependabot in https://github.com/goauthentik/authentik/pull/14693 * core: bump astral-sh/uv from 0.7.7 to 0.7.8 by @dependabot in https://github.com/goauthentik/authentik/pull/14681 * core: bump django-tenants from 3.7.0 to 3.8.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14691 * core: bump cryptography from 44.0.3 to 45.0.3 by @dependabot in https://github.com/goauthentik/authentik/pull/14690 * website/integrations: minio: notice about sso deprecation on CE by @dominic-r in https://github.com/goauthentik/authentik/pull/14679 * root: do not use /bin/bash directly by @rissson in https://github.com/goauthentik/authentik/pull/14698 * web: bump @formatjs/intl-listformat from 7.5.7 to 7.7.11 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14689 * web: bump fuse.js from 7.0.0 to 7.1.0 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14687 * web: bump knip from 5.33.0 to 5.58.0 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14685 * ci: test with postgres 17 by @rissson in https://github.com/goauthentik/authentik/pull/13967 * web: bump the rollup group across 1 directory with 4 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14682 * web: Use engine available on Github Actions. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14699 * web: bump the swc group across 2 directories with 12 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14623 * ci: Update packages-npm-publish.yml by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14701 * website/integrations: coder: fix typo by @dominic-r in https://github.com/goauthentik/authentik/pull/14514 * ci: fix NPM packages path by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14702 * web: fix lock by @BeryJu in https://github.com/goauthentik/authentik/pull/14705 * tests/e2e: fix flaky SAML Source test by @BeryJu in https://github.com/goauthentik/authentik/pull/14708 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14707 * lib/sync/outgoing: sync in parallel by @rissson in https://github.com/goauthentik/authentik/pull/14697 * web: fix regression in subpath support by @BeryJu in https://github.com/goauthentik/authentik/pull/14646 * website/docs: add login page source note to all source docs by @dewi-tik in https://github.com/goauthentik/authentik/pull/14667 * core: bump msgraph-sdk from 1.30.0 to 1.31.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14585 * ci: fix broken cache by @BeryJu in https://github.com/goauthentik/authentik/pull/14725 * web: fix lock file once again yay JS by @BeryJu in https://github.com/goauthentik/authentik/pull/14721 * web: bump core-js from 3.38.1 to 3.42.0 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14715 * web/NPM Workspaces: TypeScript API Client TSConfig. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14555 * web: Add specific Storybook dependency. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14719 * web: Controller refinements, error handling by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14700 * web/admin: fix permissions modal button missing for PolicyBindings and FlowStageBindings by @BeryJu in https://github.com/goauthentik/authentik/pull/14619 * stages/email: fix email scanner voiding token by @BeryJu in https://github.com/goauthentik/authentik/pull/14325 * sources/ldap: add forward deletion option by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14718 * web/packages: ESBuild Plugin: Setup and usage docs. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14720 * providers/ldap: retain binder and update users instead of re-creating by @BeryJu in https://github.com/goauthentik/authentik/pull/14735 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14737 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/14736 * translate: Updates for file web/xliff/en.xlf in de [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14741 * translate: Updates for file web/xliff/en.xlf in fr [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14739 * translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/14738 * translate: Updates for file web/xliff/en.xlf in pl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14740 * translate: Updates for file web/xliff/en.xlf in nl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14743 * translate: Updates for file web/xliff/en.xlf in zh_TW [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14747 * translate: Updates for file web/xliff/en.xlf in fi [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14742 * translate: Updates for file locale/en/LC_MESSAGES/django.po in ko [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14749 * translate: Updates for file web/xliff/en.xlf in zh-Hans [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14746 * translate: Updates for file locale/en/LC_MESSAGES/django.po in de [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14753 * translate: Updates for file locale/en/LC_MESSAGES/django.po in tr [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14755 * translate: Updates for file locale/en/LC_MESSAGES/django.po in it [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14759 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14757 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14762 * translate: Updates for file web/xliff/en.xlf in cs_CZ [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14754 * translate: Updates for file web/xliff/en.xlf in ru [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14751 * translate: Updates for file web/xliff/en.xlf in zh_CN [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14752 * translate: Updates for file locale/en/LC_MESSAGES/django.po in fi [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14758 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_TW [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14756 * translate: Updates for file locale/en/LC_MESSAGES/django.po in nl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14760 * translate: Updates for file locale/en/LC_MESSAGES/django.po in ru [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14763 * translate: Updates for file locale/en/LC_MESSAGES/django.po in pt [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14761 * translate: Updates for file web/xliff/en.xlf in it [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14744 * translate: Updates for file locale/en/LC_MESSAGES/django.po in pt_BR [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14750 * translate: Updates for file locale/en/LC_MESSAGES/django.po in es [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14748 * translate: Updates for file locale/en/LC_MESSAGES/django.po in pt_PT [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14764 * translate: Updates for file web/xliff/en.xlf in tr [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14745 * web: fix lock file once again yay JS by @rissson in https://github.com/goauthentik/authentik/pull/14765 * core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14766 * website/integrations: add stripe by @dewi-tik in https://github.com/goauthentik/authentik/pull/14618 * web/flows: update default flow background by @BeryJu in https://github.com/goauthentik/authentik/pull/14769 * website/docs: spell out administrator in service template by @tanberry in https://github.com/goauthentik/authentik/pull/14770 * website/integrations: add filerise by @dewi-tik in https://github.com/goauthentik/authentik/pull/14610 * website/integrations: add pangolin by @dewi-tik in https://github.com/goauthentik/authentik/pull/14614 * website/docs: add docs for MTLS Stage by @BeryJu in https://github.com/goauthentik/authentik/pull/14571 * website/integrations: move resource section to end of documents by @dewi-tik in https://github.com/goauthentik/authentik/pull/14668 * website: fix incorrect usage of "login to" + "log into" vs "log in to" by @dominic-r in https://github.com/goauthentik/authentik/pull/14772 * web: Fix issue where dual select type is not specific. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14783 * core: Migrate permissions before deleteing OldAuthenticatedSession by @melizeche in https://github.com/goauthentik/authentik/pull/14788 * website/docs: update user ref doc with parent group example by @dewi-tik in https://github.com/goauthentik/authentik/pull/14779 * website: use "administrator" instead of "admin" for Admin interface by @dominic-r in https://github.com/goauthentik/authentik/pull/14771 * sources/ldap: add `user_membership_attribute` by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14784 * stages/user_login: remove success message by @rissson in https://github.com/goauthentik/authentik/pull/13775 * translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14782 * translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14781 * translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14780 * website/docs: configuration: remove deprecated key for session storage location by @dominic-r in https://github.com/goauthentik/authentik/pull/14431 * website/integrations: add komodo by @dewi-tik in https://github.com/goauthentik/authentik/pull/14790 * web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/14795 * website/docs: Change wording in the upgrade guidelines by @melizeche in https://github.com/goauthentik/authentik/pull/14793 * providers/scim: allow for specifying custom SCIM schemas for users and groups by @BeryJu in https://github.com/goauthentik/authentik/pull/14794 * docs/troubleshooting: cleanup upgrade instructions for postgres k8s by @dominic-r in https://github.com/goauthentik/authentik/pull/14773 * website: release notes for `2025.6` by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14703 * web: minor design tweaks (cherry-pick #14803) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14804 * website/docs: remove fluff from release notes 2025.6 (cherry-pick #14819) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14820 * website/integrations: update cloudflare access callback url (cherry-pick #14807) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14842 * website/integrations: remove trailing slash from budibase redirect (cherry-pick #14823) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14843 * website/integrations: Update Zammad SAML Instructions (cherry-pick #14774) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14844 * core, web: update translations (cherry-pick #14800) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14845 * core: bump goauthentik.io/api/v3 from 3.2025041.2 to 3.2025041.4 (cherry-pick #14809) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14846 * stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (cherry-pick #14801) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14847 * website/docs: add LDAP docs for forward deletion and `memberUid` (cherry-pick #14814) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14848 * lib/sync: fix static incorrect label of pages (cherry-pick #14851) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14852 * providers/rac: apply ConnectionToken scoped-settings last (cherry-pick #14838) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14853 * website/docs: finalize release notes for `2025.6` (cherry-pick #14854) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14855 ## New Contributors * @LucaTheHacker made their first contribution in https://github.com/goauthentik/authentik/pull/14257 * @finkerle made their first contribution in https://github.com/goauthentik/authentik/pull/14377 * @jshank made their first contribution in https://github.com/goauthentik/authentik/pull/14382 * @andymarden made their first contribution in https://github.com/goauthentik/authentik/pull/14408 * @msd117c made their first contribution in https://github.com/goauthentik/authentik/pull/14471 * @ericgu08 made their first contribution in https://github.com/goauthentik/authentik/pull/14467 * @codesenju made their first contribution in https://github.com/goauthentik/authentik/pull/14680 **Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2025.4.2...version/2025.6.0