Impact Score: 5/10
authentik: Release 2025.8.4
Source available — automated, not human-reviewed
Component: authentik · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
authentik version/2025.8.4. Source highlight: See https://docs.goauthentik.io/docs/releases/2025.8#fixed-in-202584
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
✨ New Features & Capabilities (6)
- website/docs: add docs for source switch expression policy (cherry-pick #16878) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16972
- providers/ldap: add include_children parameter to cached search mode (cherry-pick #16918) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17000
- website/docs: oauth provider: Add device and introspect to reserved slugs (cherry-pick #16994) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16998
- webiste/docs: add missing oauth endpoints (cherry-pick #16995) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16999
- core: add index on Group.is_superuser (cherry-pick #17011) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17017
- outposts/ldap: add pwdChangeTime attribute (cherry-pick #17010 to version-2025.8) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17101
⚡ Performance & Enhancements (2)
- webiste/docs: improve user ref doc (cherry-pick #16779) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16839
- website/docs: improve discord policies when also bound to non-oauth sources (cherry-pick #17008) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17012
🔧 Bug Fixes & Patches (6)
- providers/scim: fix string formatting for SCIM user filter (cherry-pick #16465) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16852
- website/docs: 2025.8: fix worker concurrency setting rename (cherry-pick #16946) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16950
- website/docs: fix capitalization (cherry-pick #16944) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16958
- website/docs: random typo fixes (cherry-pick #16956) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16959
- rbac: fix typo (cherry-pick #16476) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17018
- lib/config: fix listen settings (cherry-pick #17005) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17023
📄 View Raw Release Notes (Original Developer Log)
See https://docs.goauthentik.io/docs/releases/2025.8#fixed-in-202584
## What's Changed
* webiste/docs: improve user ref doc (cherry-pick #16779) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16839
* providers/scim: fix string formatting for SCIM user filter (cherry-pick #16465) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16852
* website/docs: 2025.8: fix worker concurrency setting rename (cherry-pick #16946) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16950
* website/docs: fix capitalization (cherry-pick #16944) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16958
* website/docs: random typo fixes (cherry-pick #16956) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16959
* website/docs: add docs for source switch expression policy (cherry-pick #16878) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16972
* website/docs: update url to docker-compose.yml (cherry-pick #16901) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16986
* website/developer docs: What domain for what doc version (cherry-pick #16987) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16996
* providers/ldap: add include_children parameter to cached search mode (cherry-pick #16918) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17000
* website/docs: oauth provider: Add device and introspect to reserved slugs (cherry-pick #16994) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16998
* webiste/docs: add missing oauth endpoints (cherry-pick #16995) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16999
* website/docs: improve discord policies when also bound to non-oauth sources (cherry-pick #17008) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17012
* rbac: fix typo (cherry-pick #16476) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17018
* core: add index on Group.is_superuser (cherry-pick #17011) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17017
* lib: match exception_to_dict locals behaviour (cherry-pick #17006) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17016
* website/docs: Update Github expression to handle non-OAuth sources gracefully (cherry-pick #17014) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17029
* lib/config: fix listen settings (cherry-pick #17005) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17023
* */bindings: order by pk (cherry-pick #17027) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17053
* tasks: fix logger name (cherry-pick #17009 to version-2025.8) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17060
* web/admin: fix federation sources automatically selected (cherry-pick #17069 to version-2025.8) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17070
* rbac: optimize rbac assigned by users query (cherry-pick #17015 to version-2025.8) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17092
* web: Fix layout class for row in LibraryPage (cherry-pick #16752 to version-2025.8) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17091
* cmd/server/healthcheck: info log success instead of debug (cherry-pick #17093 to version-2025.8) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17097
* outposts/ldap: add pwdChangeTime attribute (cherry-pick #17010 to version-2025.8) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17101
* stages/identification: fix mismatched error messages (cherry-pick #17090 to version-2025.8) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17104
* providers/oauth2: fix authentication error with identical app passwords (cherry-pick #17100 to version-2025.8) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17103
* packages/django-dramatiq-postgres: broker: fix new messages not being picked up when too many messages are waiting (cherry-pick #17106 to version-2025.8) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17108
* tasks: reduce default number of retries and max backoff (cherry-pick #17107 to version-2025.8) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17109
* website/docs: 2025.8.4 release notes (cherry-pick #17119 to version-2025.8) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17120
**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2025.8.3...version/2025.8.4