version/2025.4.0

See https://docs.goauthentik.io/docs/releases/2025.4

## What's Changed
* core: clear expired database sessions by @BeryJu in https://github.com/goauthentik/authentik/pull/13105
* website/docs: add 2025.2 release notes by @BeryJu in https://github.com/goauthentik/authentik/pull/13002
* providers/rac: move to open source by @gergosimonyi in https://github.com/goauthentik/authentik/pull/13015
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13113
* web/user: fix opening application with Enter not respecting new tab setting by @BeryJu in https://github.com/goauthentik/authentik/pull/13115
* web/admin: update Application Wizard button placement by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/12771
* cmd: set version in outposts by @BeryJu in https://github.com/goauthentik/authentik/pull/13116
* sources/oauth: add group sync for azure_ad by @BeryJu in https://github.com/goauthentik/authentik/pull/12894
* website: Use Docusaurus Frontmatter for badges by @GirlBossRush in https://github.com/goauthentik/authentik/pull/12893
* web: Indicate when caps-lock is active during password input. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/12733
* web/flows: fix error on interactive Captcha stage when retrying captcha by @BeryJu in https://github.com/goauthentik/authentik/pull/13119
* revert: rbac: exclude permissions for internal models (#12803) by @BeryJu in https://github.com/goauthentik/authentik/pull/13138
* core: bump zxcvbn from 4.4.28 to 4.5.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13128
* policies/geoip: fix math in impossible travel by @BeryJu in https://github.com/goauthentik/authentik/pull/13141
* enterprise/stages/source: fix Source stage not executing authentication/enrollment flow by @BeryJu in https://github.com/goauthentik/authentik/pull/12875
* core: bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13135
* core: bump goauthentik.io/api/v3 from 3.2024123.6 to 3.2024123.7 by @dependabot in https://github.com/goauthentik/authentik/pull/13134
* lifecycle/aws: bump aws-cdk from 2.179.0 to 2.1000.2 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/13133
* core: bump duo-client from 5.3.0 to 5.4.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13132
* core: bump kubernetes from 32.0.0 to 32.0.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13131
* website: bump postcss from 8.5.2 to 8.5.3 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13130
* website: bump semver from 7.7.0 to 7.7.1 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13129
* scripts: fix broken link by @gergosimonyi in https://github.com/goauthentik/authentik/pull/13156
* web/user: fix post MFA creation link being invalid by @BeryJu in https://github.com/goauthentik/authentik/pull/13157
* core: bump selenium from 4.28.1 to 4.29.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13155
* website: bump docusaurus-plugin-openapi-docs from 4.3.4 to 4.3.5 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13153
* core: bump twilio from 9.4.5 to 9.4.6 by @dependabot in https://github.com/goauthentik/authentik/pull/13151
* core: bump ruff from 0.9.6 to 0.9.7 by @dependabot in https://github.com/goauthentik/authentik/pull/13150
* website: bump docusaurus-theme-openapi-docs from 4.3.4 to 4.3.5 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13154
* website: bump disqus-react from 1.1.5 to 1.1.6 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13152
* website/docs: troubleshooting: fix missing command prefix for create admin group command in Docker by @dominic-r in https://github.com/goauthentik/authentik/pull/13107
* web/user: fix RAC launch not opening when clicking icon by @BeryJu in https://github.com/goauthentik/authentik/pull/13164
* ci: update poetry sync command by @rissson in https://github.com/goauthentik/authentik/pull/13161
* root: allow configuring session cookie age by @rissson in https://github.com/goauthentik/authentik/pull/12389
* web/admin: only show message when not editing an application by @BeryJu in https://github.com/goauthentik/authentik/pull/13165
* web/user: fix race condition in user settings flow executor by @BeryJu in https://github.com/goauthentik/authentik/pull/13163
* website: enable docusaurus faster option by @BeryJu in https://github.com/goauthentik/authentik/pull/12326
* website/docs: fix typo by @klmmr in https://github.com/goauthentik/authentik/pull/13174
* web/flow: update default flow background by @BeryJu in https://github.com/goauthentik/authentik/pull/13175
* web/flow: grab focus to uid input field by @BeryJu in https://github.com/goauthentik/authentik/pull/13177
* web/flows: disambiguate brand links codeblock by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/12141
* web/admin: fix default selection for binding policy by @BeryJu in https://github.com/goauthentik/authentik/pull/13180
* core: add darkreader-lock by @BeryJu in https://github.com/goauthentik/authentik/pull/13183
* website: revert enable docusaurus faster option (#12326) by @BeryJu in https://github.com/goauthentik/authentik/pull/13207
* core: bump github.com/redis/go-redis/v9 from 9.7.0 to 9.7.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13205
* core: bump psycopg from 3.2.4 to 3.2.5 by @dependabot in https://github.com/goauthentik/authentik/pull/13203
* core: bump setproctitle from 1.3.4 to 1.3.5 by @dependabot in https://github.com/goauthentik/authentik/pull/13202
* website: bump prettier from 3.5.1 to 3.5.2 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13192
* web/flow: fix translate extract by @BeryJu in https://github.com/goauthentik/authentik/pull/13208
* web/user: fix display for RAC tile by @BeryJu in https://github.com/goauthentik/authentik/pull/13211
* website/docs: updated debugging docs by @BeryJu in https://github.com/goauthentik/authentik/pull/12809
* website/docs: add new SSF provider docs by @tanberry in https://github.com/goauthentik/authentik/pull/13102
* website/docs: add info about new perms for super-user in groups  by @tanberry in https://github.com/goauthentik/authentik/pull/13188
* stages/authenticator_email: Email Authenticator Stage Documentation by @melizeche in https://github.com/goauthentik/authentik/pull/12853
* website/docs: remove mention of wizard by @tanberry in https://github.com/goauthentik/authentik/pull/13126
* website/docs: remove Enterprise badge from RAC docs by @gergosimonyi in https://github.com/goauthentik/authentik/pull/13069
* website/docs: add paragraph about impossible travel by @tanberry in https://github.com/goauthentik/authentik/pull/13125
* core: bump aws-cdk-lib from 2.179.0 to 2.180.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13204
* website/docs: update the 2025.2 rel notes by @tanberry in https://github.com/goauthentik/authentik/pull/13213
* website/docs: fix missing breaking entry for 2025.2 release notes by @BeryJu in https://github.com/goauthentik/authentik/pull/13223
* root: Backport version 2025.2 by @BeryJu in https://github.com/goauthentik/authentik/pull/13225
* website/docs: Add Passkeys reference where WebAuthn is mentioned by @melizeche in https://github.com/goauthentik/authentik/pull/13167
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13226
* website: remove images from integrations index page by @dominic-r in https://github.com/goauthentik/authentik/pull/12897
* core: bump goauthentik.io/api/v3 from 3.2024123.7 to 3.2025020.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13241
* lifecycle/aws: bump aws-cdk from 2.1000.2 to 2.1000.3 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/13239
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13236
* core: bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 by @dependabot in https://github.com/goauthentik/authentik/pull/13235
* web/admin: fix minor typo by @S33G in https://github.com/goauthentik/authentik/pull/13181
* core: bump golang.org/x/oauth2 from 0.26.0 to 0.27.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13240
* ci: run translation extraction on PRs too by @rissson in https://github.com/goauthentik/authentik/pull/13214
* lifecycle: add warning regarding supported installation methods by @dominic-r in https://github.com/goauthentik/authentik/pull/13190
* core: add pre-hydrated relative URL by @BeryJu in https://github.com/goauthentik/authentik/pull/13243
* website/integrations: add plesk by @Lars- in https://github.com/goauthentik/authentik/pull/13000
* website/docs: add enterprise label to SSF docs by @tanberry in https://github.com/goauthentik/authentik/pull/13251
* ci: fix translation extraction for external PRs by @rissson in https://github.com/goauthentik/authentik/pull/13266
* website/docs: remove Enterprise badge from RAC docs -- again by @gergosimonyi in https://github.com/goauthentik/authentik/pull/13268
* stages/authenticator_email: fix session cleanup test b by @melizeche in https://github.com/goauthentik/authentik/pull/13264
* stages/email: Fix email stage serialization by @melizeche in https://github.com/goauthentik/authentik/pull/13256
* translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13274
* translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13275
* website/docs: prepare for 2025.2.1 by @rissson in https://github.com/goauthentik/authentik/pull/13277
* website/docs: Fix Docusaurus plugin regression in Algolia search by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13281
* release: 2025.2.1 by @rissson in https://github.com/goauthentik/authentik/pull/13278
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13295
* translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13292
* translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13291
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13290
* ci: bump docker/setup-qemu-action from 3.4.0 to 3.5.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13287
* lifecycle/aws: bump aws-cdk from 2.1000.3 to 2.1001.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/13283
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13282
* core: bump aws-cdk-lib from 2.180.0 to 2.181.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13284
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13293
* core: bump google-api-python-client from 2.161.0 to 2.162.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13260
* core: bump msgraph-sdk from 1.21.0 to 1.22.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13259
* *: Auto compress images by @authentik-automation in https://github.com/goauthentik/authentik/pull/13250
* website/integrations: fix netbox env variables by @dustindkoch in https://github.com/goauthentik/authentik/pull/13267
* ci: translation extraction: make sure API client is up-to-date by @rissson in https://github.com/goauthentik/authentik/pull/13301
* web: ESBuild performance + Live reload by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13026
* website/integrations: Add documentation for Drupal by @justafish in https://github.com/goauthentik/authentik/pull/12925
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13311
* core: bump goauthentik.io/api/v3 from 3.2025020.1 to 3.2025021.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13314
* core: bump ruff from 0.9.7 to 0.9.8 by @dependabot in https://github.com/goauthentik/authentik/pull/13312
* core: bump aws-cdk-lib from 2.181.0 to 2.181.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13313
* providers/oauth2: properly support P-384 and P-521 keys by @rissson in https://github.com/goauthentik/authentik/pull/13317
* website/docs: enterprise: add instructions to cancel license renewal by @rissson in https://github.com/goauthentik/authentik/pull/13320
* website: Revert "website: revert enable docusaurus faster option (#12326) (#13207)" by @BeryJu in https://github.com/goauthentik/authentik/pull/13323
* enterprise/stages/source: fix dispatch method signature by @BeryJu in https://github.com/goauthentik/authentik/pull/13321
* *: fix stage incorrectly being inserted instead of appended by @BeryJu in https://github.com/goauthentik/authentik/pull/13304
* website: bump remark-directive from 3.0.1 to 4.0.0 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13315
* lib/sync/outgoing: add dry run by @BeryJu in https://github.com/goauthentik/authentik/pull/13244
* stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in https://github.com/goauthentik/authentik/pull/13330
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13328
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13336
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13339
* core: bump goauthentik.io/api/v3 from 3.2025021.1 to 3.2025021.2 by @dependabot in https://github.com/goauthentik/authentik/pull/13363
* core: bump pytest from 8.3.4 to 8.3.5 by @dependabot in https://github.com/goauthentik/authentik/pull/13362
* core: bump cryptography from 44.0.1 to 44.0.2 by @dependabot in https://github.com/goauthentik/authentik/pull/13361
* ci: bump docker/setup-qemu-action from 3.5.0 to 3.6.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13360
* core: bump ruff from 0.9.8 to 0.9.9 by @dependabot in https://github.com/goauthentik/authentik/pull/13359
* website: bump prettier from 3.5.2 to 3.5.3 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13355
* ci: update versions for daily full testing by @BeryJu in https://github.com/goauthentik/authentik/pull/13303
* translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13350
* translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13349
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13347
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13348
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13346
* website: bump @rspack/binding-darwin-arm64 from 1.1.6 to 1.2.6 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13354
* ci: bump getsentry/action-release from 1 to 3 by @dependabot in https://github.com/goauthentik/authentik/pull/13366
* website: bump the build group in /website with 11 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13367
* lifecycle/aws: bump aws-cdk from 2.1001.0 to 2.1002.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/13365
* website: bump typescript from 5.7.3 to 5.8.2 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13368
* translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13373
* translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13374
* stages/authenticator_email: remove flaky assertions by @rissson in https://github.com/goauthentik/authentik/pull/13371
* website/docs: fix typo by @eljpsm in https://github.com/goauthentik/authentik/pull/13377
* web/admin: prefer using datefns over moment.js by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/13143
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13378
* website: bump the build group in /website with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13381
* providers/proxy: kubernetes outpost: fix reconcile when only annotations changed by @rissson in https://github.com/goauthentik/authentik/pull/13372
* ci: cache helper docker images by @rissson in https://github.com/goauthentik/authentik/pull/13390
* website/integrations: Pocketbase by @nicedevil007 in https://github.com/goauthentik/authentik/pull/12906
* website/integrations: gravity: add by @dominic-r in https://github.com/goauthentik/authentik/pull/13258
* website/docs: Update Open Web UI integration  by @Rami-Pastrami in https://github.com/goauthentik/authentik/pull/13392
* core: bump debugpy from 1.8.12 to 1.8.13 by @dependabot in https://github.com/goauthentik/authentik/pull/13395
* core: bump github.com/prometheus/client_golang from 1.21.0 to 1.21.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13397
* website: bump the build group in /website with 6 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13396
* web/admin: decorative display in user’s page breaks in other locales by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/13393
* web/admin: fix markdown being completely whited out in dark mode on proxy provider pages by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/13387
* blueprints: Adjust title for MFA set up by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13400
* web/admin: add button to clear application cache by @rissson in https://github.com/goauthentik/authentik/pull/13399
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13405
* web/user: ensure modal container on user-settings page is min-height: 100% by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/13402
* core: bump jinja2 from 3.1.5 to 3.1.6 by @dependabot in https://github.com/goauthentik/authentik/pull/13412
* core: bump msgraph-sdk from 1.22.0 to 1.23.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13411
* core: bump google-api-python-client from 2.162.0 to 2.163.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13410
* core: bump aws-cdk-lib from 2.181.1 to 2.182.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13409
* core: bump golang.org/x/oauth2 from 0.27.0 to 0.28.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13408
* stages/authenticator_email: Fix Enroll dropdown in the MFA Devices page by @melizeche in https://github.com/goauthentik/authentik/pull/13404
* core: bump golang.org/x/sync from 0.11.0 to 0.12.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13407
* lib/config: fix conn_max_age parsing by @rissson in https://github.com/goauthentik/authentik/pull/13370
* translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13417
* translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13418
* core: Tidy contributor onboarding, fix typos. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/12700
* web/admin: allow user lists to show active only by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/13403
* website: add a better edit this page element by @BeryJu in https://github.com/goauthentik/authentik/pull/13391
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13423
* translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13429
* translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13428
* lifecycle/aws: bump aws-cdk from 2.1002.0 to 2.1003.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/13426
* translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13431
* website/integrations: zipline: add by @dominic-r in https://github.com/goauthentik/authentik/pull/13257
* website: fix build in docker by @rissson in https://github.com/goauthentik/authentik/pull/13430
* website/docs: sys mgmt: document authentik backups/restoration by @dominic-r in https://github.com/goauthentik/authentik/pull/12943
* providers/SCIM: fix object exists error for users, attempt to look up user ID in remote system by @BeryJu in https://github.com/goauthentik/authentik/pull/13437
* core: bump django from 5.0.12 to 5.0.13 by @dependabot in https://github.com/goauthentik/authentik/pull/13425
* website: bump the build group across 1 directory with 9 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13442
* web/admin: fix display bug for assigned users in application bindings in the wizard by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/13435
* web: admin interface: faster card load by @dominic-r in https://github.com/goauthentik/authentik/pull/13331
* web: bump prismjs from 1.29.0 to 1.30.0 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/13455
* website: bump prismjs from 1.29.0 to 1.30.0 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13456
* website/docs: backup and restore: remove extra period by @dominic-r in https://github.com/goauthentik/authentik/pull/13440
* core: bump webauthn from 2.5.1 to 2.5.2 by @dependabot in https://github.com/goauthentik/authentik/pull/13449
* core: bump ruff from 0.9.9 to 0.9.10 by @dependabot in https://github.com/goauthentik/authentik/pull/13448
* web: Ignore Storybook when running codespell. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13454
* website/docs: in developer docs replace deprecated poetry shell command by @dominic-r in https://github.com/goauthentik/authentik/pull/13460
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13438
* stages/email: token_expiry format by @melizeche in https://github.com/goauthentik/authentik/pull/13394
* root: bump python client generator version by @BeryJu in https://github.com/goauthentik/authentik/pull/13467
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13469
* sources/oauth: ignore missing well-known keys by @BeryJu in https://github.com/goauthentik/authentik/pull/13468
* website/integrations: add Mautic by @movabo in https://github.com/goauthentik/authentik/pull/13324
* website/docs: ops/backup-restore: add "pending emails" to lost redis data  by @dominic-r in https://github.com/goauthentik/authentik/pull/13483
* website: edit the new footer with links by @tanberry in https://github.com/goauthentik/authentik/pull/13433
* translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13481
* translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13482
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13475
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13489
* providers/oauth2: offline_access don't require explicit consent by @BeryJu in https://github.com/goauthentik/authentik/pull/13419
* website: Bump the build group in /website with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13480
* providers/scim: add compatibility mode for AWS & Slack by @jorhett in https://github.com/goauthentik/authentik/pull/13342
* translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13486
* website: Bump @babel/runtime from 7.26.0 to 7.26.10 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13472
* core: Bump twilio from 9.4.6 to 9.5.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13478
* core: Bump structlog from 25.1.0 to 25.2.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13476
* web: Bump @babel/runtime-corejs3 from 7.25.7 to 7.26.10 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/13474
* website: Bump @babel/runtime-corejs3 from 7.26.0 to 7.26.10 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13473
* souces/oauth: reddit: fix duplicate keyword auth by @dominic-r in https://github.com/goauthentik/authentik/pull/13466
* core: Bump goauthentik.io/api/v3 from 3.2025021.2 to 3.2025021.3 by @dependabot in https://github.com/goauthentik/authentik/pull/13479
* website: Bump @babel/helpers from 7.26.0 to 7.26.10 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13471
* outposts/controllers: k8s: sanitize resource names to comply with DNS subdomain standards by @dominic-r in https://github.com/goauthentik/authentik/pull/13444
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13491
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13488
* translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13487
* website: remove the last updated option from footer by @tanberry in https://github.com/goauthentik/authentik/pull/13493
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13494
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13508
* translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13509
* translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13511
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13510
* translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13513
* translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13514
* core: Bump psycopg from 3.2.5 to 3.2.6 by @dependabot in https://github.com/goauthentik/authentik/pull/13497
* core: Bump aws-cdk-lib from 2.182.0 to 2.183.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13496
* core: Bump google-api-python-client from 2.163.0 to 2.164.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13498
* core: Bump msgraph-sdk from 1.23.0 to 1.24.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13500
* core: Bump importlib-metadata from 8.5.0 to 8.6.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13499
* core: Bump goauthentik.io/api/v3 from 3.2025021.3 to 3.2025021.4 by @dependabot in https://github.com/goauthentik/authentik/pull/13495
* website: Bump the build group in /website with 6 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13501
* web/user: show admin interface button on mobile by @BeryJu in https://github.com/goauthentik/authentik/pull/13421
* web/flows: fix missing padding on authenticator_validate card by @BeryJu in https://github.com/goauthentik/authentik/pull/13420
* providers/rac: fix signals and Endpoint caching by @gergosimonyi in https://github.com/goauthentik/authentik/pull/13529
* core: Bump github.com/coreos/go-oidc/v3 from 3.12.0 to 3.13.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13525
* lifecycle/aws: Bump aws-cdk from 2.1003.0 to 2.1004.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/13524
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13520
* core: Bump aws-cdk-lib from 2.183.0 to 2.184.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13522
* web/admin: fix comment being rendered by @BeryJu in https://github.com/goauthentik/authentik/pull/13530
* sources/oauth: fix duplicate authentication by @BeryJu in https://github.com/goauthentik/authentik/pull/13322
* website/docs: dev docs: full: remove note on installing shell plugin by @dominic-r in https://github.com/goauthentik/authentik/pull/13515
* core: bump django-tenants by @rissson in https://github.com/goauthentik/authentik/pull/13536
* sources: prevent deletion of built-in source by @dominic-r in https://github.com/goauthentik/authentik/pull/12914
* website/docs: dev docs: bump node/postgres requirements  by @dominic-r in https://github.com/goauthentik/authentik/pull/13516
* stages/identification: check captcha after checking authentication by @BeryJu in https://github.com/goauthentik/authentik/pull/13533
* core: Bump coverage from 7.6.12 to 7.7.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13548
* core: Bump aws-cdk-lib from 2.184.0 to 2.184.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13547
* website/docs: prepare for 2025.2.2 by @gergosimonyi in https://github.com/goauthentik/authentik/pull/13552
* website: Bump the build group in /website with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13549
* stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in https://github.com/goauthentik/authentik/pull/13541
* release: 2025.2.2 by @gergosimonyi in https://github.com/goauthentik/authentik/pull/13554
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13555
* website: bump the build group in /website with 6 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13558
* core: bump sentry-sdk from 2.22.0 to 2.23.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13557
* core: bump goauthentik.io/api/v3 from 3.2025021.4 to 3.2025022.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13556
* scripts: postgres: print statements by @rissson in https://github.com/goauthentik/authentik/pull/13537
* providers/scim: save attributes returned from remote system like google workspace and entra ID by @BeryJu in https://github.com/goauthentik/authentik/pull/13459
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13565
* website: package.json: copy over schema for npm run watch  by @dominic-r in https://github.com/goauthentik/authentik/pull/13543
* website/docs: Apple Business Manager Integration. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13319
* website/integrations: Beszel by @nicedevil007 in https://github.com/goauthentik/authentik/pull/12905
* providers/saml: configurable AuthnContextClassRef by @BeryJu in https://github.com/goauthentik/authentik/pull/13566
* core: bump goauthentik.io/api/v3 from 3.2025022.1 to 3.2025022.2 by @dependabot in https://github.com/goauthentik/authentik/pull/13569
* core: bump msgraph-sdk from 1.24.0 to 1.25.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13570
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13572
* web: Fix inline documentation rendering by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13379
* root: replace poetry with uv by @rissson in https://github.com/goauthentik/authentik/pull/13388
* lifecycle/aws: bump aws-cdk from 2.1004.0 to 2.1005.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/13574
* core: bump astral-sh/uv from 0.6.6 to 0.6.8 by @dependabot in https://github.com/goauthentik/authentik/pull/13577
* core: bump goauthentik.io/api/v3 from 3.2025022.2 to 3.2025022.3 by @dependabot in https://github.com/goauthentik/authentik/pull/13576
* root: fix uv lock file on macOS by @BeryJu in https://github.com/goauthentik/authentik/pull/13578
* website/integrations: jellyfin: update OIDC plugin installation by @Netoen in https://github.com/goauthentik/authentik/pull/13544
* brands: migrate custom CSS to brands by @BeryJu in https://github.com/goauthentik/authentik/pull/13172
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13581
* web/admin: fix diff showing previous false as "-" by @BeryJu in https://github.com/goauthentik/authentik/pull/13580
* brands: add option to set global default flow background by @BeryJu in https://github.com/goauthentik/authentik/pull/13079
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13584
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13590
* translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13591
* translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13593
* translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13596
* translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13597
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13592
* website/docs: style guide & integration template: revamp by @dominic-r in https://github.com/goauthentik/authentik/pull/12929
* core: bump goauthentik.io/api/v3 from 3.2025022.3 to 3.2025022.5 by @dependabot in https://github.com/goauthentik/authentik/pull/13594
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13585
* website/integrations: add miniflux by @chwshka in https://github.com/goauthentik/authentik/pull/13559
* lib: set a default HTTP timeout on outgoing requests by @BeryJu in https://github.com/goauthentik/authentik/pull/13599
* core: bump github.com/redis/go-redis/v9 from 9.7.1 to 9.7.3 by @dependabot in https://github.com/goauthentik/authentik/pull/13603
* website/docs: add clarification about formatting URLs to Style Guide by @tanberry in https://github.com/goauthentik/authentik/pull/13601
* website: components: add multilinecodeblock component by @dominic-r in https://github.com/goauthentik/authentik/pull/13179
* core: bump astral-sh/uv from 0.6.8 to 0.6.9 by @dependabot in https://github.com/goauthentik/authentik/pull/13612
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13608
* translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13615
* website: update header to match goauthentik.io by @BeryJu in https://github.com/goauthentik/authentik/pull/13616
* website/docs: revert token_expiry format in example blueprint by @melizeche in https://github.com/goauthentik/authentik/pull/13582
* web: Client-side MDX rendering by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13610
* events: add configurable headers to webhooks by @BeryJu in https://github.com/goauthentik/authentik/pull/13602
* translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13621
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13623
* translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13622
* core: bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 by @dependabot in https://github.com/goauthentik/authentik/pull/13626
* web/admin: reworked sync status card by @BeryJu in https://github.com/goauthentik/authentik/pull/13625
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13628
* web: Fix prop. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13630
* brands: fix migration 0008 by removing incorrect context manager usage by @dominic-r in https://github.com/goauthentik/authentik/pull/13635
* translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13634
* translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13632
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13633
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13631
* flows: fix API not returning configured background by @BeryJu in https://github.com/goauthentik/authentik/pull/13641
* ci: add semgrep by @BeryJu in https://github.com/goauthentik/authentik/pull/13643
* providers/scim: fix group membership check failing by @BeryJu in https://github.com/goauthentik/authentik/pull/13644
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13642
* website/integrations: add tandoor by @chwshka in https://github.com/goauthentik/authentik/pull/13560
* translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13652
* translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13653
* core: bump goauthentik.io/api/v3 from 3.2025022.5 to 3.2025022.6 by @dependabot in https://github.com/goauthentik/authentik/pull/13646
* website: bump the build group in /website with 6 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13645
* admin: fix system API when using bearer token by @rissson in https://github.com/goauthentik/authentik/pull/13651
* root: fix dependency install due to description-file by @BeryJu in https://github.com/goauthentik/authentik/pull/13655
* ci: stop publishing latest tag by @BeryJu in https://github.com/goauthentik/authentik/pull/13245
* website/docs: fix referral of Paperless-ng by @joeftiger in https://github.com/goauthentik/authentik/pull/13657
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13658
* root: new issue template for Docs by @tanberry in https://github.com/goauthentik/authentik/pull/13659
* stages/email: Clean newline characters in TemplateEmailMessage by @melizeche in https://github.com/goauthentik/authentik/pull/13666
* website/docs: Add Fleet integration. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13618
* website/docs: add section on how to capture logs by @chwshka in https://github.com/goauthentik/authentik/pull/13662
* website/docs: Flesh out integrations copy changes. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13619
* lifecycle/aws: bump aws-cdk from 2.1005.0 to 2.1006.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/13670
* core: bump astral-sh/uv from 0.6.9 to 0.6.10 by @dependabot in https://github.com/goauthentik/authentik/pull/13669
* web: bump vite from 5.4.14 to 5.4.15 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/13672
* website: bump the build group in /website with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13660
* ci: bump golangci/golangci-lint-action from 6 to 7 by @dependabot in https://github.com/goauthentik/authentik/pull/13661
* web: ensure wizard modal closes on first cancel click by @dominic-r in https://github.com/goauthentik/authentik/pull/13636
* website/integrations-all: convert authentik configuration to wizard by @dominic-r in https://github.com/goauthentik/authentik/pull/13144
* outposts/ldap: fix paginator going into infinite loop by @BeryJu in https://github.com/goauthentik/authentik/pull/13677
* web/admin: add sync status refresh button by @BeryJu in https://github.com/goauthentik/authentik/pull/13678
* website/docs: Clarify frontend development. Document local overrides. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13586
* enterprise/stages/source: set is_redirected in flow source stage redirects to by @BeryJu in https://github.com/goauthentik/authentik/pull/13604
* website: bump @types/semver from 7.5.8 to 7.7.0 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13682
* core: fix core/user is_superuser filter by @BeryJu in https://github.com/goauthentik/authentik/pull/13693
* core: fix non-exploitable open redirect by @BeryJu in https://github.com/goauthentik/authentik/pull/13696
* stages/identification: refresh captcha on failure by @BeryJu in https://github.com/goauthentik/authentik/pull/13697
* security: fix CVE-2025-29928 by @BeryJu in https://github.com/goauthentik/authentik/pull/13695
* website/docs: update release notes for 2024.12 and 2025.2 by @BeryJu in https://github.com/goauthentik/authentik/pull/13702
* website/docs: fix 2025 CVE category title by @BeryJu in https://github.com/goauthentik/authentik/pull/13703
* release: 2025.2.3 by @BeryJu in https://github.com/goauthentik/authentik/pull/13705
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13708
* website/docs: add reference to setting in CVE by @BeryJu in https://github.com/goauthentik/authentik/pull/13707
* root: bump python patch version to 3.12.9 by @BeryJu in https://github.com/goauthentik/authentik/pull/13710
* core: fix flaky tests introduced with is_superuser API fix by @BeryJu in https://github.com/goauthentik/authentik/pull/13709
* web: bump tar-fs from 2.1.1 to 2.1.2 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/13713
* core: bump oss/go/microsoft/golang from 1.23-fips-bookworm to 1.24-fips-bookworm by @dependabot in https://github.com/goauthentik/authentik/pull/13027
* policies: buffered policy access view for concurrent authorization attempts when unauthenticated by @BeryJu in https://github.com/goauthentik/authentik/pull/13629
* website/docs: Fix Caddy forward auth example by @garar in https://github.com/goauthentik/authentik/pull/13726
* core: bump astral-sh/uv from 0.6.10 to 0.6.11 by @dependabot in https://github.com/goauthentik/authentik/pull/13733
* website: bump the build group in /website with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13730
* core: bump goauthentik.io/api/v3 from 3.2025022.6 to 3.2025023.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13729
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13728
* core: fix double slash in cache key by @MPK1 in https://github.com/goauthentik/authentik/pull/13721
* website/docs: style guide by @tanberry in https://github.com/goauthentik/authentik/pull/13704
* translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13738
* core: fix error when viewing used_by for built-in source by @dominic-r in https://github.com/goauthentik/authentik/pull/13588
* */saml: allow for domainless SAML URLs by @BeryJu in https://github.com/goauthentik/authentik/pull/13737
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13741
* stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in https://github.com/goauthentik/authentik/pull/13744
* web/common: utils: fix infinite value handling in getRelativeTime function by @dominic-r in https://github.com/goauthentik/authentik/pull/13564
* core: bump goauthentik.io/api/v3 from 3.2025023.1 to 3.2025023.2 by @dependabot in https://github.com/goauthentik/authentik/pull/13746
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13736
* web: bump vite from 5.4.15 to 5.4.16 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/13743
* web/admin: fix custom scope mappings being selected by default in proxy provider by @BeryJu in https://github.com/goauthentik/authentik/pull/13735
* website/integrations-all: update authentik configuration template by @dominic-r in https://github.com/goauthentik/authentik/pull/13740
* website/integrations: slack,pocketbase,tandoor: convert to new authentik configuration format by @dominic-r in https://github.com/goauthentik/authentik/pull/13742
* website: edit menu items by @tanberry in https://github.com/goauthentik/authentik/pull/13747
* website/integrations: add mailcow by @obakuhl in https://github.com/goauthentik/authentik/pull/13727
* website/docs: sys-mgmt: service accounts by @dominic-r in https://github.com/goauthentik/authentik/pull/13722
* website: bump image-size from 1.1.1 to 1.2.1 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13750
* website/integrations: calibre-web: document by @dominic-r in https://github.com/goauthentik/authentik/pull/12477
* core: bump astral-sh/uv from 0.6.11 to 0.6.12 by @dependabot in https://github.com/goauthentik/authentik/pull/13756
* lifecycle/aws: bump aws-cdk from 2.1006.0 to 2.1007.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/13757
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13753
* website/integrations: add certificate instructions to apache guacamole by @dewi-tik in https://github.com/goauthentik/authentik/pull/13684
* website/integrations: add sidero omni by @dewi-tik in https://github.com/goauthentik/authentik/pull/13675
* core: bump python-kadmin-rs from 0.5.3 to 0.6.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13758
* website/docs: Updated redirect URI setup for Synology DSM by @Wr0ngName in https://github.com/goauthentik/authentik/pull/13761
* website/docs: add log levels section to logs documentation by @dewi-tik in https://github.com/goauthentik/authentik/pull/13687
* website/integrations: jenkins: fix oidc redirect uri by @dominic-r in https://github.com/goauthentik/authentik/pull/13771
* website/docs:  add skip object instructions by @dewi-tik in https://github.com/goauthentik/authentik/pull/13749
* sources/kerberos, saml: allow creation of connections from the API by @rissson in https://github.com/goauthentik/authentik/pull/13794
* stages/email: fix for newlines in emails by @melizeche in https://github.com/goauthentik/authentik/pull/13799
* sources: move identifier to parent model by @rissson in https://github.com/goauthentik/authentik/pull/13797
* website/integrations: add knocknoc by @dewi-tik in https://github.com/goauthentik/authentik/pull/13764
* website/integrations: Open Web UI: add OPENID_REDIRECT_URI environment variable by @yuval-ziv in https://github.com/goauthentik/authentik/pull/13785
* web: Normalize client-side error handling by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13595
* web: Fix TypeScript compilation issues for mixins, events. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13766
* website/integrations: nextcloud: add warning about admin lockout by @Unfaehig in https://github.com/goauthentik/authentik/pull/13782
* web: Tidy temporal utilities. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13755
* web: Flesh out configs. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13801
* website/docs: Correcting IDP URLs on Mailcow integration page by @adamjrberry in https://github.com/goauthentik/authentik/pull/13803
* core: bump astral-sh/uv from 0.6.12 to 0.6.13 by @dependabot in https://github.com/goauthentik/authentik/pull/13812
* core: bump goauthentik.io/api/v3 from 3.2025023.2 to 3.2025023.4 by @dependabot in https://github.com/goauthentik/authentik/pull/13811
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13806
* website/integrations: fix ArgoCD redirect paths by @nfons in https://github.com/goauthentik/authentik/pull/13804
* core: users API: add date_joined by @rissson in https://github.com/goauthentik/authentik/pull/13817
* translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/13821
* translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/13820
* translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/13822
* Revert "core: fix non-exploitable open redirect (#13696)" by @rissson in https://github.com/goauthentik/authentik/pull/13824
* website/docs: Add release notes for 2024.12.5 by @melizeche in https://github.com/goauthentik/authentik/pull/13828
* website/docs: Add release notes for 2025.2.4 by @melizeche in https://github.com/goauthentik/authentik/pull/13829
* website/integrations: rename Hoarder to Karakeep by @petrsimunek in https://github.com/goauthentik/authentik/pull/13789
* release: 2025.2.4 by @melizeche in https://github.com/goauthentik/authentik/pull/13830
* core: bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13834
* core: bump aiohappyeyeballs from 2.3.5 to 2.6.1 by @rissson in https://github.com/goauthentik/authentik/pull/13840
* core: bump autobahn from 23.6.2 to 24.4.2 by @rissson in https://github.com/goauthentik/authentik/pull/13847
* core: bump aiohttp from 3.10.11 to 3.11.16 by @rissson in https://github.com/goauthentik/authentik/pull/13841
* core: bump aiohttp-retry from 2.8.3 to 2.9.1 by @rissson in https://github.com/goauthentik/authentik/pull/13842
* core: bump aiosignal from 1.3.1 to 1.3.2 by @rissson in https://github.com/goauthentik/authentik/pull/13843
* core: bump amqp from 5.2.0 to 5.3.1 by @rissson in https://github.com/goauthentik/authentik/pull/13844
* core: bump automat from 22.10.0 to 24.8.1 by @rissson in https://github.com/goauthentik/authentik/pull/13848
* core: bump azure-identity from 1.17.1 to 1.21.0 by @rissson in https://github.com/goauthentik/authentik/pull/13851
* core: bump bcrypt from 4.2.0 to v4.3.0 by @rissson in https://github.com/goauthentik/authentik/pull/13852
* core: bump azure-core from 1.30.2 to 1.33.0 by @rissson in https://github.com/goauthentik/authentik/pull/13850
* core: bump billiard from 4.2.0 to v4.2.1 by @rissson in https://github.com/goauthentik/authentik/pull/13853
* core: bump anyio from 4.4.0 to 4.9.0 by @rissson in https://github.com/goauthentik/authentik/pull/13845
* core: bump attrs from 23.2.0 to 25.3.0 by @rissson in https://github.com/goauthentik/authentik/pull/13846
* core: bump boto3 from 1.34.150 to v1.37.30 by @rissson in https://github.com/goauthentik/authentik/pull/13854
* core: bump cachetools from 5.4.0 to v5.5.2 by @rissson in https://github.com/goauthentik/authentik/pull/13856
* core: bump cattrs from 24.1.2 to v24.1.3 by @rissson in https://github.com/goauthentik/authentik/pull/13857
* core: bump certifi from 2024.7.4 to v2025.1.31 by @rissson in https://github.com/goauthentik/authentik/pull/13859
* core: bump cffi from 1.16.0 to v1.17.1 by @rissson in https://github.com/goauthentik/authentik/pull/13860
* core: bump channels from 4.2.0 to v4.2.2 by @rissson in https://github.com/goauthentik/authentik/pull/13861
* core: bump charset-normalizer from 3.3.2 to v3.4.1 by @rissson in https://github.com/goauthentik/authentik/pull/13862
* core: bump click from 8.1.7 to v8.1.8 by @rissson in https://github.com/goauthentik/authentik/pull/13863
* core: bump decorator from 5.1.1 to v5.2.1 by @rissson in https://github.com/goauthentik/authentik/pull/13865
* core: bump frozenlist from 1.4.1 to v1.5.0 by @rissson in https://github.com/goauthentik/authentik/pull/13872
* core: bump coverage from 7.6.12 to v7.8.0 by @rissson in https://github.com/goauthentik/authentik/pull/13864
* core: bump google-auth from 2.32.0 to v2.38.0 by @rissson in https://github.com/goauthentik/authentik/pull/13875
* core: bump google-api-python-client from 2.164.0 to v2.166.0 by @rissson in https://github.com/goauthentik/authentik/pull/13874
* core: bump idna from 3.7 to v3.10 by @rissson in https://github.com/goauthentik/authentik/pull/13883
* core: bump duo-client from 5.4.0 to v5.5.0 by @rissson in https://github.com/goauthentik/authentik/pull/13871
* core: bump google-api-core from 2.19.1 to v2.24.2 by @rissson in https://github.com/goauthentik/authentik/pull/13873
* core: bump dnspython from 2.6.1 to v2.7.0 by @rissson in https://github.com/goauthentik/authentik/pull/13870
* core: bump googleapis-common-protos from 1.63.2 to v1.69.2 by @rissson in https://github.com/goauthentik/authentik/pull/13876
* core: bump django-pgactivity from 1.4.1 to v1.7.1 by @rissson in https://github.com/goauthentik/authentik/pull/13868
* core: bump httpcore from 1.0.5 to v1.0.7 by @rissson in https://github.com/goauthentik/authentik/pull/13879
* core: bump humanize from 4.10.0 to v4.12.2 by @rissson in https://github.com/goauthentik/authentik/pull/13881
* core: bump maxminddb from 2.6.2 to v2.6.3 by @rissson in https://github.com/goauthentik/authentik/pull/13891
* core: bump lxml from 5.3.1 to v5.3.2 by @rissson in https://github.com/goauthentik/authentik/pull/13889
* core: bump microsoft-kiota-serialization-multipart from 1.9.2 to v1.9.3 by @rissson in https://github.com/goauthentik/authentik/pull/13895
* core: bump microsoft-kiota-serialization-json from 1.9.2 to v1.9.3 by @rissson in https://github.com/goauthentik/authentik/pull/13894
* core: bump microsoft-kiota-serialization-text from 1.9.2 to v1.9.3 by @rissson in https://github.com/goauthentik/authentik/pull/13896
* core: bump orjson from 3.10.6 to v3.10.16 by @rissson in https://github.com/goauthentik/authentik/pull/13904
* core: bump microsoft-kiota-serialization-form from 1.9.2 to v1.9.3 by @rissson in https://github.com/goauthentik/authentik/pull/13893
* core: bump opentelemetry-api from 1.31.0 to v1.31.1 by @rissson in https://github.com/goauthentik/authentik/pull/13903
* core: bump pyasn1-modules from 0.4.0 to v0.4.1 by @rissson in https://github.com/goauthentik/authentik/pull/13913
* core: bump prompt-toolkit from 3.0.47 to v3.0.50 by @rissson in https://github.com/goauthentik/authentik/pull/13908
* core: bump pygments from 2.18.0 to v2.19.1 by @rissson in https://github.com/goauthentik/authentik/pull/13915
* core: bump pyasn1 from 0.6.0 to v0.6.1 by @rissson in https://github.com/goauthentik/authentik/pull/13912
* core: bump python-dotenv from 1.0.1 to v1.1.0 by @rissson in https://github.com/goauthentik/authentik/pull/13918
* core: bump pytz from 2024.1 to v2025.2 by @rissson in https://github.com/goauthentik/authentik/pull/13919
* core: bump pyparsing from 3.1.2 to v3.2.3 by @rissson in https://github.com/goauthentik/authentik/pull/13916
* core: bump redis from 5.0.7 to v5.2.1 by @rissson in https://github.com/goauthentik/authentik/pull/13920
* core: bump pytest-django from 4.10.0 to v4.11.1 by @rissson in https://github.com/goauthentik/authentik/pull/13917
* core: bump referencing from 0.35.1 to v0.36.2 by @rissson in https://github.com/goauthentik/authentik/pull/13921
* core: bump sqlparse from 0.5.1 to v0.5.3 by @rissson in https://github.com/goauthentik/authentik/pull/13930
* core: bump twilio from 9.5.0 to v9.5.2 by @rissson in https://github.com/goauthentik/authentik/pull/13935
* core: bump std-uritemplate from 2.0.2 to v2.0.3 by @rissson in https://github.com/goauthentik/authentik/pull/13931
* core: bump tzdata from 2024.1 to v2025.2 by @rissson in https://github.com/goauthentik/authentik/pull/13938
* core: bump ruff from 0.9.10 to v0.11.4 by @rissson in https://github.com/goauthentik/authentik/pull/13924
* core: bump celery from 5.4.0 to v5.5.1 by @rissson in https://github.com/goauthentik/authentik/pull/13858
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13832
* core: bump goauthentik.io/api/v3 from 3.2025023.4 to 3.2025024.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13833
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13798
* core: bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13788
* core: bump github.com/coreos/go-oidc/v3 from 3.13.0 to 3.14.1 by @dependabot in https://github.com/goauthentik/authentik/pull/13772
* core: bump django-storages from 1.14.5 to v1.14.6 by @rissson in https://github.com/goauthentik/authentik/pull/13869
* core: bump yarl from 1.17.2 to v1.19.0 by @rissson in https://github.com/goauthentik/authentik/pull/13944
* core: bump h2 from 4.1.0 to v4.2.0 by @rissson in https://github.com/goauthentik/authentik/pull/13877
* core: bump wrapt from 1.16.0 to v1.17.2 by @rissson in https://github.com/goauthentik/authentik/pull/13943
* core: bump deprecated from 1.2.14 to v1.2.18 by @rissson in https://github.com/goauthentik/authentik/pull/13866
* core: bump trio from 0.26.0 to v0.29.0 by @rissson in https://github.com/goauthentik/authentik/pull/13933
* core: bump zipp from 3.20.2 to v3.21.0 by @rissson in https://github.com/goauthentik/authentik/pull/13945
* core: bump importlib-resources from 6.4.0 to v6.5.2 by @rissson in https://github.com/goauthentik/authentik/pull/13884
* core: bump httpx from 0.27.0 to v0.28.1 by @rissson in https://github.com/goauthentik/authentik/pull/13880
* core: bump uvloop from 0.19.0 to v0.21.0 by @rissson in https://github.com/goauthentik/authentik/pull/13940
* core: bump hyperframe from 6.0.1 to v6.1.0 by @rissson in https://github.com/goauthentik/authentik/pull/13882
* core: bump iniconfig from 2.0.0 to v2.1.0 by @rissson in https://github.com/goauthentik/authentik/pull/13885
* core: bump hpack from 4.0.0 to v4.1.0 by @rissson in https://github.com/goauthentik/authentik/pull/13878
* core: bump six from 1.16.0 to v1.17.0 by @rissson in https://github.com/goauthentik/authentik/pull/13929
* core: bump selenium from 4.29.0 to v4.31.0 by @rissson in https://github.com/goauthentik/authentik/pull/13926
* core: bump platformdirs from 4.2.2 to v4.3.7 by @rissson in https://github.com/goauthentik/authentik/pull/13906
* core: bump websockets from 12.0 to v15.0.1 by @rissson in https://github.com/goauthentik/authentik/pull/13942
* core: bump zope-interface from 6.4.post2 to v7.2 by @rissson in https://github.com/goauthentik/authentik/pull/13946
* core: bump stevedore from 5.2.0 to v5.4.1 by @rissson in https://github.com/goauthentik/authentik/pull/13932
* core: bump markupsafe from 2.1.5 to v3.0.2 by @rissson in https://github.com/goauthentik/authentik/pull/13890
* core: bump jsonschema-specifications from 2023.12.1 to v2024.10.1 by @rissson in https://github.com/goauthentik/authentik/pull/13887
* core: bump prometheus-client from 0.20.0 to v0.21.1 by @rissson in https://github.com/goauthentik/authentik/pull/13907
* core: bump msal-extensions from 1.2.0 to v1.3.1 by @rissson in https://github.com/goauthentik/authentik/pull/13898
* core: bump msal from 1.30.0 to v1.32.0 by @rissson in https://github.com/goauthentik/authentik/pull/13897
* core: bump ua-parser-builtins from 0.18.0 to v0.18.0.post1 by @rissson in https://github.com/goauthentik/authentik/pull/13939
* core: bump golang.org/x/sync from 0.12.0 to 0.13.0 by @dependabot in https://github.com/goauthentik/authentik/pull/13787
* core: bump pbr from 6.0.0 to v6.1.1 by @rissson in https://github.com/goauthentik/authentik/pull/13905
* core: bump propcache from 0.2.0 to v0.3.1 by @rissson in https://github.com/goauthentik/authentik/pull/13909
* core: bump rpds-py from 0.19.1 to v0.24.0 by @rissson in https://github.com/goauthentik/authentik/pull/13923
* core: bump sentry-sdk from 2.22.0 to v2.25.1 by @rissson in https://github.com/goauthentik/authentik/pull/13927
* core: bump multidict from 6.0.5 to v6.2.0 by @rissson in https://github.com/goauthentik/authentik/pull/13902
* core: bump typing-extensions from 4.12.2 to v4.13.1 by @rissson in https://github.com/goauthentik/authentik/pull/13937
* core: bump watchfiles from 0.22.0 to v1.0.5 by @rissson in https://github.com/goauthentik/authentik/pull/13941
* core: bump twisted from 24.7.0 to v24.11.0 by @rissson in https://github.com/goauthentik/authentik/pull/13936
* core: bump rich from 13.7.1 to v14.0.0 by @rissson in https://github.com/goauthentik/authentik/pull/13922
* core: bump pydantic from 2.10.6 to v2.11.3 by @rissson in https://github.com/goauthentik/authentik/pull/13914
* core: bump protobuf from 5.27.2 to v5.29.4 by @rissson in https://github.com/goauthentik/authentik/pull/13911
* core: bump proto-plus from 1.24.0 to v1.26.1 by @rissson in https://github.com/goauthentik/authentik/pull/13910
* core: bump msgraph-sdk from 1.24.0 to v1.26.0 by @rissson in https://github.com/goauthentik/authentik/pull/13901
* core: bump msgpack from 1.0.8 to v1.1.0 by @rissson in https://github.com/goauthentik/authentik/pull/13899
* core: bump kombu from 5.3.7 to v5.5.2 by @rissson in https://github.com/goauthentik/authentik/pull/13888
* core: bump setuptools from 72.1.0 to v78.1.0 by @rissson in https://github.com/goauthentik/authentik/pull/13928
* core: bump jsii from 1.109.0 to v1.111.0 by @rissson in https://github.com/goauthentik/authentik/pull/13886
* core: bump msgraph-core from 1.3.1 to v1.3.3 by @rissson in https://github.com/goauthentik/authentik/pull/13900
* core: bump trio-websocket from 0.11.1 to v0.12.2 by @rissson in https://github.com/goauthentik/authentik/pull/13934
* core: bump microsoft-kiota-http from 1.9.2 to v1.9.3 by @rissson in https://github.com/goauthentik/authentik/pull/13949
* core: bump microsoft-kiota-authentication-azure from 1.9.2 to v1.9.3 by @rissson in https://github.com/goauthentik/authentik/pull/13948
* core: bump pyasn1-modules from 0.4.1 to v0.4.2 by @rissson in https://github.com/goauthentik/authentik/pull/13951
* core: bump protobuf from 5.29.4 to v6.30.2 by @rissson in https://github.com/goauthentik/authentik/pull/13950
* lifecycle/aws: bump aws-cdk-lib by @rissson in https://github.com/goauthentik/authentik/pull/13953
* Fix redirect URL in wordpress integration guide by @virtualboys in https://github.com/goauthentik/authentik/pull/13955
* website/integration: update harbor integration document by @dewi-tik in https://github.com/goauthentik/authentik/pull/13816
* website/integrations: add Homarr by @nfons in https://github.com/goauthentik/authentik/pull/13818
* website/docs: Remove enterprise badge from Fleet integration by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13963
* core: bump django from 5.0.13 to 5.0.14 by @melizeche in https://github.com/goauthentik/authentik/pull/13954
* core: bump astral-sh/uv from 0.6.13 to 0.6.14 by @dependabot in https://github.com/goauthentik/authentik/pull/13964
* translate: Updates for file locale/en/LC_MESSAGES/django.po in it by @transifex-integration in https://github.com/goauthentik/authentik/pull/13957
* translate: Updates for file web/xliff/en.xlf in it by @transifex-integration in https://github.com/goauthentik/authentik/pull/13956
* sources/ldap: lookup group memberships from user attribute by @krejcar25 in https://github.com/goauthentik/authentik/pull/12661
* core: bump boto3 from 1.37.30 to v1.37.31 by @rissson in https://github.com/goauthentik/authentik/pull/13968
* core: bump msgraph-sdk from 1.26.0 to v1.27.0 by @rissson in https://github.com/goauthentik/authentik/pull/13970
* core: bump multidict from 6.2.0 to v6.4.2 by @rissson in https://github.com/goauthentik/authentik/pull/13971
* web: elements: Table: Fix table selection clearing behavior by @dominic-r in https://github.com/goauthentik/authentik/pull/13959
* website: dev docs: fix upper-case authentik by @dominic-r in https://github.com/goauthentik/authentik/pull/13961
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13996
* website/integrations: add wazuh by @dewi-tik in https://github.com/goauthentik/authentik/pull/13776
* website/integrations: add openproject by @dewi-tik in https://github.com/goauthentik/authentik/pull/13838
* core: migrate all sessions to the database by @rissson in https://github.com/goauthentik/authentik/pull/9736
* core: fix migrations by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14009
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/13999
* core: bump goauthentik.io/api/v3 from 3.2025024.1 to 3.2025024.2 by @dependabot in https://github.com/goauthentik/authentik/pull/14005
* core: bump github.com/getsentry/sentry-go from 0.31.1 to 0.32.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14004
* translate: Updates for file locale/en/LC_MESSAGES/django.po in ko [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13993
* translate: Updates for file locale/en/LC_MESSAGES/django.po in tr [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13995
* translate: Updates for file locale/en/LC_MESSAGES/django.po in pt_BR [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13990
* translate: Updates for file locale/en/LC_MESSAGES/django.po in pl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13989
* translate: Updates for file web/xliff/en.xlf in fi [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13978
* translate: Updates for file locale/en/LC_MESSAGES/django.po in fi [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13988
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_TW [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13994
* translate: Updates for file locale/en/LC_MESSAGES/django.po in es [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13987
* translate: Updates for file locale/en/LC_MESSAGES/django.po in nl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13991
* translate: Updates for file locale/en/LC_MESSAGES/django.po in de [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13986
* translate: Updates for file locale/en/LC_MESSAGES/django.po in ru [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13992
* translate: Updates for file web/xliff/en.xlf in zh-Hans [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13985
* core: bump urllib3 from 2.3.0 to 2.4.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14006
* sources/ldap: add source connections by @rissson in https://github.com/goauthentik/authentik/pull/13796
* translate: Updates for file web/xliff/en.xlf in fr [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/13979
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/13972
* translate: Updates for file web/xliff/en.xlf in ru [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14013
* translate: Updates for file web/xliff/en.xlf in zh-Hans [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14021
* translate: Updates for file locale/en/LC_MESSAGES/django.po in es [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14019
* translate: Updates for file locale/en/LC_MESSAGES/django.po in fr [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14022
* translate: Updates for file locale/en/LC_MESSAGES/django.po in ru [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14032
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14029
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14028
* translate: Updates for file web/xliff/en.xlf in it [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14016
* translate: Updates for file web/xliff/en.xlf in zh_CN [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14017
* translate: Updates for file web/xliff/en.xlf in pl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14015
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_TW [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14031
* translate: Updates for file locale/en/LC_MESSAGES/django.po in fi [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14023
* translate: Updates for file locale/en/LC_MESSAGES/django.po in pl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14025
* translate: Updates for file locale/en/LC_MESSAGES/django.po in it [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14024
* translate: Updates for file locale/en/LC_MESSAGES/django.po in pt_BR [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14027
* translate: Updates for file locale/en/LC_MESSAGES/django.po in de [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14020
* translate: Updates for file web/xliff/en.xlf in fi [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14012
* translate: Updates for file locale/en/LC_MESSAGES/django.po in nl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14026
* website: Port WWW theme to docs site. Prep for package. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/13962
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14037
* core: bump github.com/sethvargo/go-envconfig from 1.1.1 to 1.2.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14041
* core: bump goauthentik.io/api/v3 from 3.2025024.2 to 3.2025024.4 by @dependabot in https://github.com/goauthentik/authentik/pull/14042
* root: prevent docker-compose up when secret key is missing by @josegomezr in https://github.com/goauthentik/authentik/pull/14043
* core: bump debugpy from 1.8.13 to v1.8.14 by @rissson in https://github.com/goauthentik/authentik/pull/14047
* core: bump googleapis-common-protos from 1.69.2 to v1.70.0 by @rissson in https://github.com/goauthentik/authentik/pull/14049
* core: bump google-api-python-client from 2.166.0 to v2.167.0 by @rissson in https://github.com/goauthentik/authentik/pull/14048
* core: bump httpcore from 1.0.7 to v1.0.8 by @rissson in https://github.com/goauthentik/authentik/pull/14050
* core: bump opentelemetry-api from 1.31.1 to v1.32.0 by @rissson in https://github.com/goauthentik/authentik/pull/14052
* core: bump boto3 from 1.37.31 to v1.37.33 by @rissson in https://github.com/goauthentik/authentik/pull/14045
* core: bump ruff from 0.11.4 to v0.11.5 by @rissson in https://github.com/goauthentik/authentik/pull/14053
* core: bump typing-extensions from 4.13.1 to v4.13.2 by @rissson in https://github.com/goauthentik/authentik/pull/14055
* core: bump uvicorn from 0.34.0 to v0.34.1 by @rissson in https://github.com/goauthentik/authentik/pull/14056
* core: bump multidict from 6.4.2 to v6.4.3 by @rissson in https://github.com/goauthentik/authentik/pull/14051
* providers/oauth2, rac: make sure tokens are revoked after session deletion by @rissson in https://github.com/goauthentik/authentik/pull/14011
* root: add packages/ to codeowners by @rissson in https://github.com/goauthentik/authentik/pull/13975
* ci: add NPM packages publish by @rissson in https://github.com/goauthentik/authentik/pull/13974
* core: bump goauthentik/fips-python from 3.12.9-slim-bookworm-fips to 3.12.10-slim-bookworm-fips by @rissson in https://github.com/goauthentik/authentik/pull/14044
* ci: fix api-py-publish by disabling poetry cache by @rissson in https://github.com/goauthentik/authentik/pull/14010
* policies/reputation: limit reputation score by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14008
* core: bump django-rest-framework from 3.14.0 to 3.16.0 by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14057
* core: Bump django from 5.0.14 to 5.1.8 by @melizeche in https://github.com/goauthentik/authentik/pull/14059
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/14058
* rbac: add `InitialPermissions` by @gergosimonyi in https://github.com/goauthentik/authentik/pull/13795
* root: support db pool by @rissson in https://github.com/goauthentik/authentik/pull/13534
* website/integrations: fix for actual-budget wiki guide by @jmarmstrong1207 in https://github.com/goauthentik/authentik/pull/14066
* core: bump goauthentik.io/api/v3 from 3.2025024.4 to 3.2025024.6 by @dependabot in https://github.com/goauthentik/authentik/pull/14069
* stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in https://github.com/goauthentik/authentik/pull/14065
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14064
* website/docs: fix minor typo in working_with_policies.md by @tosdan-vscode in https://github.com/goauthentik/authentik/pull/14071
* core: bump msgraph-sdk from 1.27.0 to v1.28.0 by @rissson in https://github.com/goauthentik/authentik/pull/14077
* core: bump boto3 from 1.37.33 to v1.37.34 by @rissson in https://github.com/goauthentik/authentik/pull/14074
* core: bump prompt-toolkit from 3.0.50 to v3.0.51 by @rissson in https://github.com/goauthentik/authentik/pull/14078
* core: bump sentry-sdk from 2.25.1 to v2.26.1 by @rissson in https://github.com/goauthentik/authentik/pull/14079
* core: bump google-auth from 2.38.0 to v2.39.0 by @rissson in https://github.com/goauthentik/authentik/pull/14076
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14083
* translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14084
* translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14086
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14087
* translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/14090
* translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/14091
* web/api: Fix Hoisted exports across entrypoints. Update Axios. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14089
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14096
* sources/oauth: introduce authorization code auth method by @rissson in https://github.com/goauthentik/authentik/pull/14034
* core: bump rsa from 4.9 to v4.9.1 by @rissson in https://github.com/goauthentik/authentik/pull/14103
* core: bump opentelemetry-api from 1.32.0 to v1.32.1 by @rissson in https://github.com/goauthentik/authentik/pull/14102
* policies/geoip: fix result when only dynamic results are used by @rissson in https://github.com/goauthentik/authentik/pull/14107
* website/integrations: general cleanup and updates by @dominic-r in https://github.com/goauthentik/authentik/pull/12716
* website integrations: actual budget: remove old header and support_level by @dominic-r in https://github.com/goauthentik/authentik/pull/14112
* website: integrations: apache guacamole: Fix deprecated start-of-doc … by @dominic-r in https://github.com/goauthentik/authentik/pull/14114
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14117
* lifecycle/aws: bump aws-cdk from 2.1007.0 to 2.1010.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/14122
* core: bump goauthentik.io/api/v3 from 3.2025024.6 to 3.2025024.7 by @dependabot in https://github.com/goauthentik/authentik/pull/14121
* web: add `remember me` feature to IdentificationStage by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/10397
* translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/14123
* translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/14124
* core: bump github.com/go-ldap/ldap/v3 from 3.4.10 to 3.4.11 by @dependabot in https://github.com/goauthentik/authentik/pull/14068
* website: bump the build group in /website with 9 updates by @dependabot in https://github.com/goauthentik/authentik/pull/13748
* website: bump wireit from 0.14.11 to 0.14.12 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/14003
* website: bump estree-util-value-to-estree from 3.1.1 to 3.3.3 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13808
* website: bump http-proxy-middleware from 2.0.7 to 2.0.9 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/14111
* core: bump automat from 24.8.1 to v25.4.16 by @rissson in https://github.com/goauthentik/authentik/pull/14125
* core: bump boto3 from 1.37.34 to v1.37.35 by @rissson in https://github.com/goauthentik/authentik/pull/14126
* core: bump kombu from 5.5.2 to v5.5.3 by @rissson in https://github.com/goauthentik/authentik/pull/14127
* core: bump yarl from 1.19.0 to v1.20.0 by @rissson in https://github.com/goauthentik/authentik/pull/14128
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14142
* translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14139
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14144
* core: bump goauthentik.io/api/v3 from 3.2025024.7 to 3.2025024.8 by @dependabot in https://github.com/goauthentik/authentik/pull/14143
* translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14145
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14146
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/14062
* web: Packagify live reload plugin. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14134
* website: integrations: gravity: fix issuer URL by @dominic-r in https://github.com/goauthentik/authentik/pull/14155
* web: fix scrollbar styling by @RoboMagus in https://github.com/goauthentik/authentik/pull/12600
* core: bump astral-sh/uv from 0.6.14 to 0.6.16 by @dependabot in https://github.com/goauthentik/authentik/pull/14161
* website/docs: fix postgres pool recommended settings by @MatthewStockdale in https://github.com/goauthentik/authentik/pull/14149
* web/xliff: fix duplicated translations by @rissson in https://github.com/goauthentik/authentik/pull/14164
* enterprise/policies: Add Password Uniqueness History Policy by @melizeche in https://github.com/goauthentik/authentik/pull/13453
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/14176
* web: update default flow background by @rissson in https://github.com/goauthentik/authentik/pull/14115
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14179
* website/integrations: add xcreds by @dewi-tik in https://github.com/goauthentik/authentik/pull/14163
* core: bump uvicorn from 0.34.1 to v0.34.2 by @rissson in https://github.com/goauthentik/authentik/pull/14175
* Revert "policies: buffered policy access view for concurrent authorization attempts when unauthenticated (#13629)" by @rissson in https://github.com/goauthentik/authentik/pull/14180
* website: components: delete multilinecodeblock src by @dominic-r in https://github.com/goauthentik/authentik/pull/14094
* website/docs: updates style guide code block section by @dewi-tik in https://github.com/goauthentik/authentik/pull/14088
* website/integrations: paperless: use <slug>. instead of hardcoded slug value by @dominic-r in https://github.com/goauthentik/authentik/pull/14183
* website/docs: dev docs: style guide: update style conventions for urls by @dominic-r in https://github.com/goauthentik/authentik/pull/14184
* website/docs: dev-docs: style guide: no longer using italic for vars by @dominic-r in https://github.com/goauthentik/authentik/pull/14185
* website/docs: update user object doc by @dewi-tik in https://github.com/goauthentik/authentik/pull/14132
* core: bump goauthentik.io/api/v3 from 3.2025024.8 to 3.2025024.9 by @dependabot in https://github.com/goauthentik/authentik/pull/14189
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14187
* website/integrations: mealie add integration by @TrisBits in https://github.com/goauthentik/authentik/pull/14188
* translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14196
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14197
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14195
* translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14198
* website/docs: adds code examples for getting user objects from a group object by @dewi-tik in https://github.com/goauthentik/authentik/pull/14101
* translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/14199
* translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/14200
* outposts: add support for gateway API by @rissson in https://github.com/goauthentik/authentik/pull/13272
* packages/docusaurus-theme: Fix header alignment, overscroll, vertical padding. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14120
* website: integrations: apache guacamole: remove redirect URI comments by @dominic-r in https://github.com/goauthentik/authentik/pull/14113
* website/docs: rearranged brands docs by @tanberry in https://github.com/goauthentik/authentik/pull/14116
* website/docs: updated user count info by @tanberry in https://github.com/goauthentik/authentik/pull/14186
* website/integrations: improves netbird documentation by @dewi-tik in https://github.com/goauthentik/authentik/pull/14191
* lifecycle/aws: bump aws-cdk from 2.1010.0 to 2.1012.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/14205
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14203
* lifecycle/migrate: fix migration failing if killed during first startup by @rissson in https://github.com/goauthentik/authentik/pull/14207
* website: bump typescript from 5.8.2 to 5.8.3 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/13786
* website: bump the build group in /website with 9 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14204
* web: Safari fixes merge branch by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14181
* Revert "web: Safari fixes merge branch (#14181)" by @rissson in https://github.com/goauthentik/authentik/pull/14211
* Revert package-lock.json changes from "web: add `remember me` feature to IdentificationStage (#10397)" by @rissson in https://github.com/goauthentik/authentik/pull/14212
* website/docs: Prepare for monorepo. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14119
* ci: fix npm packages publication not running by @rissson in https://github.com/goauthentik/authentik/pull/14215
* web: lock lit/ssr by @rissson in https://github.com/goauthentik/authentik/pull/14214
* translate: Updates for file locale/en/LC_MESSAGES/django.po in tr [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14234
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_TW [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14235
* stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in https://github.com/goauthentik/authentik/pull/14237
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/14236
* Revert "website/docs: Prepare for monorepo. (#14119)" by @melizeche in https://github.com/goauthentik/authentik/pull/14239
* translate: Updates for file locale/en/LC_MESSAGES/django.po in pt_BR [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14233
* translate: Updates for file web/xliff/en.xlf in it [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14216
* translate: Updates for file locale/en/LC_MESSAGES/django.po in ru [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14232
* translate: Updates for file locale/en/LC_MESSAGES/django.po in it [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14231
* translate: Updates for file locale/en/LC_MESSAGES/django.po in ko [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14230
* translate: Updates for file locale/en/LC_MESSAGES/django.po in pl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14229
* translate: Updates for file web/xliff/en.xlf in tr [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14228
* translate: Updates for file locale/en/LC_MESSAGES/django.po in fi [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14227
* translate: Updates for file locale/en/LC_MESSAGES/django.po in de [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14226
* translate: Updates for file web/xliff/en.xlf in zh-Hans [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14224
* translate: Updates for file locale/en/LC_MESSAGES/django.po in es [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14223
* translate: Updates for file web/xliff/en.xlf in pl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14222
* translate: Updates for file web/xliff/en.xlf in fr [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14221
* translate: Updates for file web/xliff/en.xlf in de [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14220
* translate: Updates for file web/xliff/en.xlf in fi [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14219
* translate: Updates for file web/xliff/en.xlf in nl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14217
* Updates for file web/xliff/en.xlf in zh_TW [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14225
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14241
* website/docs: Update release notes for 2025.4 by @melizeche in https://github.com/goauthentik/authentik/pull/14158
* core, web: update translations (cherry-pick #14243) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14245
* lifecycle: fix test-all in docker (cherry-pick #14244) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14246
* web: fix bug that was causing charts to be too tall (cherry-pick #14253) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14254
* rbac: add `name` to Permissions search (cherry-pick #14269) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14270

## New Contributors
* @klmmr made their first contribution in https://github.com/goauthentik/authentik/pull/13174
* @Lars- made their first contribution in https://github.com/goauthentik/authentik/pull/13000
* @dustindkoch made their first contribution in https://github.com/goauthentik/authentik/pull/13267
* @justafish made their first contribution in https://github.com/goauthentik/authentik/pull/12925
* @eljpsm made their first contribution in https://github.com/goauthentik/authentik/pull/13377
* @Rami-Pastrami made their first contribution in https://github.com/goauthentik/authentik/pull/13392
* @movabo made their first contribution in https://github.com/goauthentik/authentik/pull/13324
* @jorhett made their first contribution in https://github.com/goauthentik/authentik/pull/13342
* @Netoen made their first contribution in https://github.com/goauthentik/authentik/pull/13544
* @chwshka made their first contribution in https://github.com/goauthentik/authentik/pull/13559
* @joeftiger made their first contribution in https://github.com/goauthentik/authentik/pull/13657
* @garar made their first contribution in https://github.com/goauthentik/authentik/pull/13726
* @MPK1 made their first contribution in https://github.com/goauthentik/authentik/pull/13721
* @obakuhl made their first contribution in https://github.com/goauthentik/authentik/pull/13727
* @Wr0ngName made their first contribution in https://github.com/goauthentik/authentik/pull/13761
* @yuval-ziv made their first contribution in https://github.com/goauthentik/authentik/pull/13785
* @Unfaehig made their first contribution in https://github.com/goauthentik/authentik/pull/13782
* @adamjrberry made their first contribution in https://github.com/goauthentik/authentik/pull/13803
* @nfons made their first contribution in https://github.com/goauthentik/authentik/pull/13804
* @petrsimunek made their first contribution in https://github.com/goauthentik/authentik/pull/13789
* @virtualboys made their first contribution in https://github.com/goauthentik/authentik/pull/13955
* @krejcar25 made their first contribution in https://github.com/goauthentik/authentik/pull/12661
* @josegomezr made their first contribution in https://github.com/goauthentik/authentik/pull/14043
* @jmarmstrong1207 made their first contribution in https://github.com/goauthentik/authentik/pull/14066
* @tosdan-vscode made their first contribution in https://github.com/goauthentik/authentik/pull/14071
* @MatthewStockdale made their first contribution in https://github.com/goauthentik/authentik/pull/14149
* @TrisBits made their first contribution in https://github.com/goauthentik/authentik/pull/14188

**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2025.2.4...version/2025.4.0