version/2025.12.6

goauthentik/authentikversion/2025.12.6May 28, 2026by authentik-automation[bot]

Upgrading?

AI Summary

This version addresses security vulnerabilities and refines time-based logic for MTLS certificates, alongside various documentation and CI improvements for the 2025.12 branch.

Key Highlights

  • Security backports for CVE-2026-40166, GHSA-wr38-7xg8-fqxr, GHSA-xp7f-xjjx-gwm8, and GHSA-c3m2-jqmq-pvp3.
  • Configuration of `freezegun` to exclude cryptography libraries to prevent time-related issues.
  • Fixes for stale version reporting in OutpostState.
  • Updates to CI documentation setup.

New Features

  • Fix for documentation email links.
  • Fix for test teardown in tenants.
  • Fix for stale version in OutpostState.

Full Release Notes

See https://docs.goauthentik.io/docs/releases/2025.12#fixed-in-2025126


## What's Changed
* website/docs: fix email link in CVE-2026-40166 (cherry-pick #22331 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22332
* enterprise/stages/mtls: freeze time for expired certs (cherry-pick #22411 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22413
* root: configure freezegun to exclude cryptography (cherry-pick #22442 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22446
* enterprise/stages/mtls: attempt fix freezegun (cherry-pick #22474 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22499
* outposts: fix stale version in OutpostState (cherry-pick #22487 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22503
* ci: fix docs not having correct js version setup (2025.12) by @BeryJu in https://github.com/goauthentik/authentik/pull/22717
* tenants: fix test teardown (version-2025.12) by @gergosimonyi in https://github.com/goauthentik/authentik/pull/22714
* security: automated internal backport of patch GHSA-wr38-7xg8-fqxr.sec.patch to authentik-2025.12 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22724
* security: automated internal backport of patch GHSA-xp7f-xjjx-gwm8.sec.patch to authentik-2025.12 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22725
* security: automated internal backport of patch GHSA-c3m2-jqmq-pvp3.sec.patch to authentik-2025.12 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22723


**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2025.12.5...version/2025.12.6

Related Repositories