version/2025.12.3

goauthentik/authentikversion/2025.12.3Feb 2, 2026by authentik-automation[bot]

Upgrading?

AI Summary

This maintenance release for 2025.12 reverts an accidental bulk revoke feature and fixes critical issues where service accounts and app passwords would not expire correctly. It also addresses dark theme visibility and configuration updates for AWS and Azure lifecycle components.

Key Highlights

  • Reverted accidental bulk revoke feature
  • Fixed non-expiring service accounts and app passwords
  • Fixed dark theme visibility issues on map and forms
  • Added `/data` volume support for AWS and Azure lifecycle components
  • Fixed toggle-group bindings not showing up

Full Release Notes

See https://docs.goauthentik.io/docs/releases/2025.12#fixed-in-2025123


## What's Changed
* 2025.12: Revert bulk revoke added by accident in release branch by @dominic-r in https://github.com/goauthentik/authentik/pull/19870
* web/admin: fix toggle-group for bindings now showing up (cherry-pick #19820 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19895
* website/docs: Remove stale 2024 version directives (cherry-pick #19888 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19899
* web: fix Brand CSS not applied to nested Shadow DOM components (cherry-pick #19892 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19900
* ci: always generate API clients (#19906) by @BeryJu in https://github.com/goauthentik/authentik/pull/19932
* lifecycle/ak: make sure /data has the correct permissions (cherry-pick #19935 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19940
* lifecycle/aws: add /data volume (cherry-pick #19936 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19938
* website/docs: Update location of media storage and outdated references (cherry-pick #19885 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19937
* core: fix non-expiring service accounts and app passwords (cherry-pick #19913 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19941


**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2025.12.2...version/2025.12.3

Related Repositories