v1.5.2 version/2026.8.3

medium risk

goauthentik/authentikSep 17, 2026 → Sep 17, 20260 days between releases

What's New

Older release expands OSINT coverage; newer release fixes bugs, security docs, and performance.

Breaking Changes

  • providers/oauth2 now only exposes URL-based avatars as picture claim
  • change docker compose to compose
  • fix migrations (version-2026.8)

New Features

  • Added GitLab compatibility option to SCIM form
  • Included JSON field relation models in search autocomplete

Improvements

  • File search is now case-insensitive
  • Improved X-Forwarded-For header handling with ports
  • Fixed memory leak in LDAP cached searcher
  • Fixed policybinding cache invalidation

Bug Fixes

  • Fixed OAuth token exchange when no signing key is set
  • Fixed hardcoded locale in identification stage's OR_LIST_FORMATTERS
  • Fixed memory leak in LDAP cached searcher
  • Fixed metric gauges for multiprocessor mode

Upgrade Notes

Update Docker Compose commands to use `compose` instead of `docker compose`. OAuth providers may need adjustment as only URL-based avatars are now exposed. Ensure database migrations run successfully.

The Two Releases

v1.5.2

v1.5.2

Sep 17, 2026· 1 month ago

A significant expansion of OSINT module coverage, adding 400+ new username modules and email providers, while enhancing reliability and metadata extraction.

Full release notes
version/2026.8.3

Release 2026.8.3

Sep 17, 2026· 1 month ago

A maintenance release focusing on bug fixes, security documentation, and performance optimizations. It includes fixes for file search, policy caching, memory leaks, and OAuth token handling.

Full release notes