version/2026.2.7
emscripten-core/emscriptenversion/2026.2.7Sep 9, 2026by authentik-automation[bot]
Upgrading?
AI Summary
A maintenance release for version 2026.2 focusing on dependency updates, SCIM fixes, and security patches.
Key Highlights
- Drop curl and runit from lifecycle container
- Fix SCIM changed detection for nested attributes
- Add dynamic captcha keys for embedded identification stages
- Backport security patches for group hierarchy roles and SAML
- Avoid DNS resolution in fqdn_rand
New Features
- Dynamic captcha keys when stage embedded in identification stage
Full Release Notes
See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202627 ## What's Changed * lifecycle/container: drop curl and runit (cherry-pick #24008 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24113 * policies: filter policy engine (cherry-pick #24025 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24169 * ci: add working dir prefix to file paths (cherry-pick #24319 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24321 * providers/scim: fix scim changed detection for nested attributes (cherry-pick #24332 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24443 * core: bump django from 5.2.16 to v5.2.17 (cherry-pick #24793 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24817 * rbac: use constant-time comparison in SecretKeyFilter (cherry-pick #24888 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24946 * core: return the intended status code from error views for all request methods (cherry-pick #24902 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24956 * server/core: handle unsupported HTTP method (cherry-pick #22498 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25363 * stages/identification: dynamic captcha keys when stage embedded in identification stage (cherry-pick #24079 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25499 * lib: avoid DNS resolution in fqdn_rand (cherry-pick #25728 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25759 * ci: bump golangci lint (cherry-pick #25513 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/25975 * security: automated internal backport of patch 1877-group-hierarchy-roles.sec.patch to authentik-2026.2 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/25956 * security: automated internal backport of patch 2032-authenticator-email-recipient-override.sec.patch to authentik-2026.2 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/25958 * security: automated internal backport of patch 1914-saml.sec.patch to authentik-2026.2 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/25957 * security: automated internal backport of patch 1751-secrets-read-permission.sec.patch to authentik-2026.2 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/25955 * security: automated internal backport of patch 2190-libxml2-doctype.sec.patch to authentik-2026.2 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/25959 **Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2026.2.6...version/2026.2.7
Related Repositories
ggml-org/llama.cpp★ 131,960
LLM inference in C/C++
LadybirdBrowser/ladybird★ 66,608
Truly independent web browser
ClickHouse/ClickHouse★ 50,532
ClickHouse® is a real-time analytics database management system
LizardByte/Sunshine★ 42,493
Self-hosted game stream host for Moonlight.
deskflow/deskflow★ 29,987
Share a single keyboard and mouse between multiple computers.