version/2025.10.2

See https://docs.goauthentik.io/docs/releases/2025.10#fixed-in-2025102


## What's Changed
* brands: add more matching tests (cherry-pick #16185 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17924
* brands: sort matched brand by match length (cherry-pick #17920 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17935
* tasks/schedules: fix rel obj not being associated or updated (cherry-pick #17934 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17936
* website/docs: added Note about email_verified scope mapping is set to false by default (cherry-pick #17942 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17961
* website/docs: remove broken info box and fix sentence (cherry-pick #17963 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/17965
* core: bump django from 5.2.7 to 5.2.8 (cherry-pick #17967 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18003
* website/docs: updates img-src csp (cherry-pick #18010 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18012
* ci: fix migrate-from-stable for old versions (#18019) by @BeryJu in https://github.com/goauthentik/authentik/pull/18024
* website/release notes: fix broken urls (cherry-pick #18041 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18044
* website/docs: update discord social login script example (cherry-pick #18026 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18057
* ci: attempt to fix integration tests using dind (cherry-pick #18066 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18069
* ci: revert to upstream GHA for release (#18058) by @BeryJu in https://github.com/goauthentik/authentik/pull/18065
* events: fix timezone not set for log events (cherry-pick #18067 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18071
* providers/scim: allow custom schema data (cherry-pick #18073 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18075
* core: improve app launch URL formatting (cherry-pick #18076 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18087
* cmd/server/healthcheck: remove worker HTTP healthcheck (cherry-pick #18090 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18091
* web: Fix RAC modal visibility. (cherry-pick #17941 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18097
* web: Fix tab activation, blank provider URLs (cherry-pick #18031 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18101
* website/docs: fix wording in stages overview (cherry-pick #18061 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18120
* packages/django-dramatiq-postgres: broker: ensure locking happens with the same connection (cherry-pick #18095 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18119
* web/flows: improvements for hCaptcha (cherry-pick #16882 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18128
* web/admin: link to user on invitation list page (cherry-pick #18132 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18134
* packages/django-channels-postgres/layer: fix query when subscribed to multiple channels (cherry-pick #18152 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18153
* web: Disable library `<datalist>` on Firefox. (cherry-pick #18103 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18135
* web/sfe: downgrade bootstrap that was accidentally upgraded (cherry-pick #18157 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18171
* website/docs: Add instructions for installing RC versions (cherry-pick #18099 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18193
* website/docs: update application description (cherry-pick #18125 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18127
* stages/prompt: fix choices with labels causing error on submit (cherry-pick #18183 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18236
* internal: Automated internal backport: 1487-invitation-expiry.sec.patch to authentik-2025.10 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18258
* internal: Automated internal backport: 1498-oauth2-cc-user-active.sec.patch to authentik-2025.10 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18259
* internal: Automated internal backport: 5000-sidebar.sec.patch to authentik-2025.10 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18260
* website/docs: add 2025.8.5 and 2025.10.2 release notes (cherry-pick #18268 to version-2025.10) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/18270


**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2025.10.1...version/2025.10.2