authentik Files

See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202625

What's Changed

• website/docs: 2026.2.4 release notes (cherry-pick [#22720] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22737
• website/docs: 2025.12.6 release notes (cherry-pick [#22719] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22740
• tests/e2e: fix proxy tests failing due to in-use port (cherry-pick [#22785] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22791
• web/admin: fix Docker outpost integration form CA Cert filter (cherry-pick [#22863] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22894
• blueprints: handle integrity exception when applying blueprints (cherry-pick [#22599] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22926
• endpoints/connectors/agent: fix exception with invalid auth type (cherry-pick [#22943] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22950
• providers/radius: fix panic in log due to type (cherry-pick [#22965] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22966
• core: bump django from 5.2.14 to v5.2.15 (cherry-pick [#22956] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22961
• admin/files: sign custom-domain S3 URLs for the final host (cherry-pick [#21704] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23008
• packages/django-postgres-cache: fix naive datetime warning (cherry-pick [#23033] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23234
• website/docs: fix 2026.2 release notes docker compose mention take 2 (cherry-pick [#23388] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23398
• policies: skip cache invalidation on User last_login update (cherry-pick [#23159] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23426
• tasks: avoid useless query on monitoring_set (cherry-pick [#23161] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23425
• packages/django-dramatiq-postgres/broker: fix race condition in broker causing completed tasks to be repeated (cherry-pick [#23218] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23258
• tasks/schedules: fix paused schedules getting unpaused on startup (cherry-pick [#23521] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23526
• brands: select_related models accessed in the hot path (cherry-pick [#23162] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23523
• providers/*: fix missing declaration for can_discover for outgoing sync providers (cherry-pick [#23035] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23232
• core: preserve encoded avatar URLs (cherry-pick [#23225] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23393
• web/flows: fix race condition in continuous login and support source stages in authentication flows (cherry-pick [#23049] to version-2026.2) by @GirlBossRush in https://github.com/goauthentik/authentik/pull/23557
• web, core: Fix server-side message race condition, type mismatch. (cherry-pick [#23151] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23583
• web: Fix issue where default user path is not preferred. (cherry-pick [#22139] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22457
• providers/ldap: remove incorrect validation for code authenticator extraction (cherry-pick [#23006] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23766
• providers/SCIM: Add discover support (cherry-pick [#20658] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23776
• providers/scim: allow failures during discovery (cherry-pick [#23357] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23772
• providers/scim: account for users with no email during discovery (cherry-pick [#23417] to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23771
• stages/captcha: fix hcaptcha height (#20901) (2026.2) by @gergosimonyi in https://github.com/goauthentik/authentik/pull/23775
• root: in-process per-IP rate throttle (#23015) (2026.2) by @gergosimonyi in https://github.com/goauthentik/authentik/pull/23774
• ci: remove GHA-based cherry-pick (cherry-pick [#23801] to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23804
• website/docs: add release notes for 2026.2.5 (cherry-pick [#23816] to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23821

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2026.2.4...version/2026.2.5