authentik 2026.8.3 → 2026.8.5
2 releases · 1 breaking change · 0 security fixes · 0 advisories fixed
0security1breaking0deprecated1feature17fix
Breaking changes
- breaking web/user: remove slug display in any display mode on the user application library page (#26441) in 2026.8.4
Security changes
None in the release notes.
Every release in between
fixendpoints: fix MultipleObjectsReturned (cherry-pick #26971 to version-2026.8) (#26972)
otherenterprise/providers/microsoft_entra: skip members already in the group (cherry-pick #26891 to version-2026.8) (#26952)
otherroot: bump cert-related deps due to emudhra (cherry-pick #27068 to version-2026.8) (#27071)
fixweb/stages: Fix stage type errors (cherry-pick #25689 to version-2026.8) (#26194)
fixweb/user: fix agents tab flashing without license (cherry-pick #27069 to version-2026.8) (#27073)
fixcommon/saml: Fix metadata to serve only the leaf of a PEM chain (#26273)
othercore: handle overflow in duration validation (#26680)
fixendpoints: fix error during device lookup with one identifier missing (#26902)
otherendpoints: retain last fact snapshot (#26343)
otherenterprise/requests: show message after successful request (#26587)
fixevents: fix group membership changes with OSS audit middleware (#26477)
featureflows: allow unauthenticated flows for re-authentication (#26785)
fixlifecycle: fix AWS cloudformation template defaults (#26807)
otheroutposts/proxy: don't negotiate HTTP/2 to upstreams (#26281)
otheroutposts/proxy: fetch embedded JWKS over the unix socket, not the browser host (#26448)
otheroutposts/proxy: use HTTP/1.1 for OAuth backchannel requests (#26422)
otherpackages/ak-axum/extract/client_ip: use the leftmost X-Forwarded-For IP (#26353)
fixpackages/ak-common/config: fix list values from env variables parsing (#26081)
otherpackages/django-channels-postgres: refresh pool credentials on connection attempts (#26505)
fixproviders/proxy: fix startup reconcile not being atomic (#26344)
otherproviders/scim: accept a service provider that reports bulk as unsupported (#25057)
fixproviders/scim: fix scim user conflict resolution (#25998)
otherproviders/scim: show remote error details for 4xx/5xx responses (#26906)
otherroot, web, docs: revert pnpm to 11.20.0 on version-2026.8 (#26366)
otherroot: don't fail websocket connections with non-UTF-8 headers (#26688)
fixroot: fix client certificate header forwarded to the mTLS stage (#26438)
otherroot: log full stacktrace for ASGI exception (#26415)
othersources/kerberos, sources/ldap: Save source connections when linking an existing user/group (#26059)
othersources/saml: Fallback NameID (#25713)
fixstages/consent: fix integrity error when re-consenting after consent expired (#26866)
otherweb: Close command palette when opening About (#25734)
fixweb: Fix denied template static form layout. (#26733)
fixweb: Fix disabled token icon buttons. (#25527)
otherweb: resolve themed icon URLs everywhere (#25103)
fixweb/admin: fix device view page and outpost view page (#26383)
otherweb/admin: restore file upload capability check (#26556)
otherweb/admin: show agent connector local auth & compliance status (#26610)
otherweb/admin: update oauth federated provider helptext wording (#26611)
otherweb/elements: reload edit forms after cancel and on pk change (#26892)
otherweb/flows: check if localStorage is available for continuous login (#26267)
fixweb/flows: fix layout shift once initial challenge is loaded (#26758)
fixweb/user: fix requests banner wording (#26586)
breakingweb/user: remove slug display in any display mode on the user application library page (#26441)