# authentik version/2025.8.4 — Release & Upgrade Intelligence
- **Product:** authentik (https://goauthentik.io)
- **Version:** version/2025.8.4
- **Released:** Sep 30, 2025
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/authentik/updates/version-2025.8.4/

## Executive Summary (TL;DR)
authentik version/2025.8.4. Source highlight: See https://docs.goauthentik.io/docs/releases/2025.8#fixed-in-202584

## New Features
- website/docs: add docs for source switch expression policy (cherry-pick #16878) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16972
- providers/ldap: add include_children parameter to cached search mode (cherry-pick #16918) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17000
- website/docs: oauth provider: Add device and introspect to reserved slugs (cherry-pick #16994) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16998
- webiste/docs: add missing oauth endpoints (cherry-pick #16995) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16999
- core: add index on Group.is_superuser (cherry-pick #17011) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17017
- outposts/ldap: add pwdChangeTime attribute (cherry-pick #17010 to version-2025.8) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17101

## Improvements
- webiste/docs: improve user ref doc (cherry-pick #16779) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16839
- website/docs: improve discord policies when also bound to non-oauth sources (cherry-pick #17008) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17012

## Bug Fixes
- providers/scim: fix string formatting for SCIM user filter (cherry-pick #16465) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16852
- website/docs: 2025.8: fix worker concurrency setting rename (cherry-pick #16946) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16950
- website/docs: fix capitalization (cherry-pick #16944) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16958
- website/docs: random typo fixes (cherry-pick #16956) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16959
- rbac: fix typo (cherry-pick #16476) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17018
- lib/config: fix listen settings (cherry-pick #17005) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17023