version/2025.12.0

goauthentik/authentikversion/2025.12.0Jan 13, 2026by authentik-automation[bot]

Upgrading?

AI Summary

The major 2025.12 release introduces Endpoint Agent configuration capabilities and replaces session-based password retries with a reputation system. It also includes various UI/UX improvements and deprecates the GCDT auth stage.

Key Highlights

  • Include license status in agent config
  • Replace session-based password retries with reputation system
  • Fixed flow inspector advancement event
  • Improved PostgreSQL connection options parsing
  • Deprecated GCDT auth stage

Breaking Changes

  • Deprecated GCDT auth stage

New Features

  • Include license status in agent config
  • Replace session-based password retries with reputation system

Full Release Notes

See https://docs.goauthentik.io/docs/releases/2025.12


## What's Changed
* endpoints: include license status in agent config (cherry-pick #19227 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19228
* website/docs: revisit endpoint docs the nth (cherry-pick #19116 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19223
* website/glossary: improve (cherry-pick #18969 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19238
* core: fix read replica routing during transactions (cherry-pick #19086 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19241
* stages/authenticator_static: set max token length to 100 chars (cherry-pick #19162 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19231
* website: Fix typos. (cherry-pick #19243 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19248
* stages/prompt: optimize API endpoints (cherry-pick #19251 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19254
* stages/password: replace session-based retries with reputation (cherry-pick #18643 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19289
* web/admin: add banner to flow import form (cherry-pick #19288 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19293
* core: bump urllib3 from 2.5.0 to v2.6.3 (cherry-pick #19287 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19296
* core: bump django from v5.2.9 to 5.2.10 (cherry-pick #19290 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19294
* website/docs: update entra id provider docs (cherry-pick #18366 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19256
* website/docs: deprecate GCDT auth stage (cherry-pick #19306 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19319
* website/docs: update m2m doc (cherry-pick #18963 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19324
* website/docs: Fix documentation example for `app_entitlements_attributes`. (cherry-pick #19316 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19326
* website/docs: add flow import warnings (cherry-pick #19307 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19327
* website/docs: Fix typo in GitHub OAuth Source instructions (cherry-pick #18936 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19322
* web: Fix flow inspector advancement event. (cherry-pick #19309 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19310
* website/docs: update github social login script example (cherry-pick #19246 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19250
* website/docs: update unique email policy (cherry-pick #19305 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19339
* web: Images styles, theming (cherry-pick #19233 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19342
* website/docs: update LDAP provider docs (cherry-pick #18272 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19345
* packages/django-dramatiq-postgres: broker: empty message after task completed successfully (cherry-pick #19340 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19356
* web/admin: always retrieve selected provider when editing the application (cherry-pick #19341 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19370
* web/elements: hidden secrets not propagating (cherry-pick #19029 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19377
* outpost/proxyv2: fix stale session cookie causing 400 error in createState (cherry-pick #19026 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19375
* website/docs: update location for logs on windows (cherry-pick #19371 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19373
* internal/outpost: improve PostgreSQL connection options parsing (cherry-pick #19118 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19372
* web: Flow info, localization, back button. (cherry-pick #19234 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19346
* stages/authenticator_validate: decrease reputation on failed MFA attempt (cherry-pick #19378 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19381
* internal: rework liveness probe and proxy (cherry-pick #19312 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19382
* web: UI Locale Fixes (cherry-pick #19235 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19384


**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2025.12.0-rc3...version/2025.12.0

Related Repositories