version/2025.6.0

See https://docs.goauthentik.io/docs/releases/2025.6

## What's Changed
* web/admin: prevent default logo flashing in admin interface by @dominic-r in https://github.com/goauthentik/authentik/pull/13960
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14243
* lifecycle: fix test-all in docker by @rissson in https://github.com/goauthentik/authentik/pull/14244
* website/integrations: adds missing trailing slash in homarr doc by @dewi-tik in https://github.com/goauthentik/authentik/pull/14249
* website/integrations: homarr remove redirect uri comment by @dominic-r in https://github.com/goauthentik/authentik/pull/14252
* web: fix bug that was causing charts to be too tall by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/14253
* core: bump astral-sh/uv from 0.6.16 to 0.6.17 by @dependabot in https://github.com/goauthentik/authentik/pull/14266
* website/docs: add device code flow instructions by @dewi-tik in https://github.com/goauthentik/authentik/pull/14267
* rbac: add `name` to Permissions search by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14269
* website/docs: update 2025.4 release notes by @melizeche in https://github.com/goauthentik/authentik/pull/14251
* docs/website: Update 2025.4 notes by @melizeche in https://github.com/goauthentik/authentik/pull/14272
* website/docs: Password Uniqueness Policy by @melizeche in https://github.com/goauthentik/authentik/pull/13686
* website/docs: Revert "website/docs: revert token_expiry format in example blueprint… by @melizeche in https://github.com/goauthentik/authentik/pull/14280
* website/docs: docs about initial perms by @tanberry in https://github.com/goauthentik/authentik/pull/14263
* website/docs: add postgres pool configuration by @rissson in https://github.com/goauthentik/authentik/pull/14060
* website/docs: add LDAP 'Lookup using user attribute' docs by @rissson in https://github.com/goauthentik/authentik/pull/13966
* website/docs: sessions in database by @rissson in https://github.com/goauthentik/authentik/pull/13507
* website/docs: Release notes 2025.4.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14281
* website/docs: add gateway API to release notes and documentation by @rissson in https://github.com/goauthentik/authentik/pull/14278
* ci: cleanup post uv migration by @rissson in https://github.com/goauthentik/authentik/pull/13538
* core: bump astral-sh/uv from 0.6.17 to 0.7.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14294
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14273
* release: 2025.4.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14299
* website/docs: initial permissions: fix usage of term admin by @dominic-r in https://github.com/goauthentik/authentik/pull/14300
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/14301
* website/docs: clarify some points (i.e. around capitalization after colons) by @tanberry in https://github.com/goauthentik/authentik/pull/14290
* website/docs: clarify `2025.4` breaking Reputation changes by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14284
* brands: fix CSS Migration not updating brands by @BeryJu in https://github.com/goauthentik/authentik/pull/14306
* website/docs: clean up oauth redirect paragraph by @fheisler in https://github.com/goauthentik/authentik/pull/14291
* website/docs: adds webfinger doc under oauth provider by @dewi-tik in https://github.com/goauthentik/authentik/pull/14247
* website/docs: "Device code flow" documentation improvements by @LucaTheHacker in https://github.com/goauthentik/authentik/pull/14257
* website/integrations: improve Gitea doc by @dewi-tik in https://github.com/goauthentik/authentik/pull/14194
* website/integrations: youtrack document by @dominic-r in https://github.com/goauthentik/authentik/pull/14264
* lifecycle/aws: bump aws-cdk from 2.1012.0 to 2.1013.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/14318
* core: bump github.com/redis/go-redis/v9 from 9.7.3 to 9.8.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14317
* core: bump goauthentik.io/api/v3 from 3.2025024.9 to 3.2025040.1 by @dependabot in https://github.com/goauthentik/authentik/pull/14316
* core: bump astral-sh/uv from 0.7.0 to 0.7.2 by @dependabot in https://github.com/goauthentik/authentik/pull/14315
* stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in https://github.com/goauthentik/authentik/pull/14311
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14309
* website: bump the build group across 1 directory with 9 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14293
* translate: Updates for file locale/en/LC_MESSAGES/django.po in it by @transifex-integration in https://github.com/goauthentik/authentik/pull/14271
* core: bump trio from 0.29.0 to v0.30.0 by @rissson in https://github.com/goauthentik/authentik/pull/14174
* core: bump pdoc from 15.0.1 to v15.0.3 by @rissson in https://github.com/goauthentik/authentik/pull/14170
* core: bump frozenlist from 1.5.0 to v1.6.0 by @rissson in https://github.com/goauthentik/authentik/pull/14168
* core: bump boto3 from 1.37.35 to v1.37.38 by @rissson in https://github.com/goauthentik/authentik/pull/14167
* core: bump aiohttp from 3.11.16 to v3.11.18 by @rissson in https://github.com/goauthentik/authentik/pull/14166
* core: bump packaging from 24.2 to v25.0 by @rissson in https://github.com/goauthentik/authentik/pull/14169
* core: bump s3transfer from 0.11.4 to v0.11.5 by @rissson in https://github.com/goauthentik/authentik/pull/14172
* core: bump ruff from 0.11.5 to v0.11.6 by @rissson in https://github.com/goauthentik/authentik/pull/14171
* core: bump setuptools from 78.1.0 to v79.0.0 by @rissson in https://github.com/goauthentik/authentik/pull/14173
* web: bump vite from 5.4.16 to 5.4.19 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14324
* core: bump github.com/sethvargo/go-envconfig from 1.2.0 to 1.3.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14327
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14326
* rbac: fix RoleObjectPermissionTable not showing `add_user_to_group` by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14312
* website/docs: fix dry-run release highlight by @BeryJu in https://github.com/goauthentik/authentik/pull/14337
* ci: use dependabot for docker-compose files by @BeryJu in https://github.com/goauthentik/authentik/pull/14336
* website/docs: use Universal Device Trust for GDTC instead of Okta by @BeryJu in https://github.com/goauthentik/authentik/pull/14335
* ci: use dependabot for compose correctly? by @BeryJu in https://github.com/goauthentik/authentik/pull/14340
* website/docs: remove support badge by @tanberry in https://github.com/goauthentik/authentik/pull/14343
* Revert-revert: Safari fixes by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14331
* web: Use monorepo package utilities to build packages by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14159
* web: Clean up browser-only module imports that crash WebDriverIO. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14330
* web: NPM workspaces by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14274
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14368
* core: bump unidecode from 1.3.8 to v1.4.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14367
* core: bump structlog from 25.2.0 to v25.3.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14366
* core: bump setuptools from 78.1.0 to v80.1.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14365
* core: bump setproctitle from 1.3.5 to v1.3.6 by @melizeche in https://github.com/goauthentik/authentik/pull/14364
* core: bump sentry-sdk from 2.26.1 to v2.27.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14363
* core: bump ruff from 0.11.5 to v0.11.8 by @melizeche in https://github.com/goauthentik/authentik/pull/14362
* core: bump redis from 5.2.1 to v6.0.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14361
* core: bump pydantic from 2.11.3 to v2.11.4 by @melizeche in https://github.com/goauthentik/authentik/pull/14360
* core: bump psycopg from 3.2.6 to v3.2.7 by @melizeche in https://github.com/goauthentik/authentik/pull/14359
* core: bump orjson from 3.10.16 to v3.10.18 by @melizeche in https://github.com/goauthentik/authentik/pull/14358
* core: bump mypy-extensions from 1.0.0 to v1.1.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14357
* core: bump msal from 1.32.0 to v1.32.3 by @melizeche in https://github.com/goauthentik/authentik/pull/14356
* core: bump jsonschema-specifications from 2024.10.1 to v2025.4.1 by @melizeche in https://github.com/goauthentik/authentik/pull/14354
* core: bump humanize from 4.12.2 to v4.12.3 by @melizeche in https://github.com/goauthentik/authentik/pull/14353
* core: bump h11 from 0.14.0 to v0.16.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14352
* core: bump google-api-python-client from 2.167.0 to v2.169.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14351
* core: bump cryptography from 44.0.2 to v44.0.3 by @melizeche in https://github.com/goauthentik/authentik/pull/14350
* core: bump charset-normalizer from 3.4.1 to v3.4.2 by @melizeche in https://github.com/goauthentik/authentik/pull/14349
* core: bump certifi from 2025.1.31 to v2025.4.26 by @melizeche in https://github.com/goauthentik/authentik/pull/14348
* core: bump celery from 5.5.1 to v5.5.2 by @melizeche in https://github.com/goauthentik/authentik/pull/14347
* core: bump boto3 from 1.37.35 to v1.38.7 by @melizeche in https://github.com/goauthentik/authentik/pull/14346
* core: bump azure-core from 1.33.0 to v1.34.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14345
* core: bump lxml from 5.3.2 to v5.4.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14355
* core: bump selenium/standalone-chrome from 122.0 to 135.0 in /tests/e2e by @dependabot in https://github.com/goauthentik/authentik/pull/14342
* core: bump axllent/mailpit from v1.6.5 to v1.24.1 in /tests/e2e by @dependabot in https://github.com/goauthentik/authentik/pull/14341
* core: bump goauthentik/fips-python from 3.12.10-slim-bookworm-fips to 3.13.3-slim-bookworm-fips by @dependabot in https://github.com/goauthentik/authentik/pull/12763
* website/integrations: minio: fix typo by @dominic-r in https://github.com/goauthentik/authentik/pull/14376
* website/docs: fix leftover placeholder in release notes by @finkerle in https://github.com/goauthentik/authentik/pull/14377
* website/integrations: Fix outpost link for Home Assistant configuration by @jshank in https://github.com/goauthentik/authentik/pull/14382
* translate: Updates for file locale/en/LC_MESSAGES/django.po in pt by @transifex-integration in https://github.com/goauthentik/authentik/pull/14379
* translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14375
* translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14374
* translate: Updates for file web/xliff/en.xlf in it by @transifex-integration in https://github.com/goauthentik/authentik/pull/14372
* core: bump axllent/mailpit from v1.24.1 to v1.24.2 in /tests/e2e by @dependabot in https://github.com/goauthentik/authentik/pull/14390
* ci: bump golangci/golangci-lint-action from 7 to 8 by @dependabot in https://github.com/goauthentik/authentik/pull/14389
* core: bump github.com/pires/go-proxyproto from 0.8.0 to 0.8.1 by @dependabot in https://github.com/goauthentik/authentik/pull/14388
* website/integrations: add atlassian by @dewi-tik in https://github.com/goauthentik/authentik/pull/14209
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14383
* web, website: update browserslist by @dominic-r in https://github.com/goauthentik/authentik/pull/14386
* website/docs: Add pkg-config to the brew dependencies by @melizeche in https://github.com/goauthentik/authentik/pull/14398
* website/docs: Update deps. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14397
* website/docs: add one more reference and link about `can view Admin interface` by @tanberry in https://github.com/goauthentik/authentik/pull/14399
* core: bump twilio from 9.5.2 to v9.6.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14396
* core: bump setuptools from 80.1.0 to v80.3.1 by @melizeche in https://github.com/goauthentik/authentik/pull/14395
* core: bump boto3 from 1.38.7 to v1.38.8 by @melizeche in https://github.com/goauthentik/authentik/pull/14393
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14402
* core: bump selenium/standalone-chrome from 135.0 to 136.0 in /tests/e2e by @dependabot in https://github.com/goauthentik/authentik/pull/14407
* core: bump golang.org/x/sync from 0.13.0 to 0.14.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14406
* core: bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14405
* website/docs: Update Docusaurus config. Prep for version picker. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14401
* core: bump selenium from 4.31.0 to v4.32.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14394
* web: cleanup/loading attribute always true by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/14288
* core: bump pytest-timeout from 2.3.1 to v2.4.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14421
* core: bump jsii from 1.111.0 to v1.112.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14419
* core: bump google-auth from 2.39.0 to v2.40.1 by @melizeche in https://github.com/goauthentik/authentik/pull/14418
* core: bump azure-identity from 1.21.0 to v1.22.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14415
* core: bump maxminddb from 2.6.3 to v2.7.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14420
* core: bump boto3 from 1.38.7 to v1.38.10 by @melizeche in https://github.com/goauthentik/authentik/pull/14416
* core: bump geoip2 from 5.0.1 to v5.1.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14417
* website/integrations: improve grafana docs by @andymarden in https://github.com/goauthentik/authentik/pull/14408
* website/integrations: coder by @dominic-r in https://github.com/goauthentik/authentik/pull/14385
* root: readme: use right contribution guide link  by @dominic-r in https://github.com/goauthentik/authentik/pull/14250
* website/docs: configuration sessions are now stored by default in the database by @dominic-r in https://github.com/goauthentik/authentik/pull/14425
* website/integrations: update paperless ngx instructions to include correct scopes by @jshank in https://github.com/goauthentik/authentik/pull/14424
* core: bump astral-sh/uv from 0.7.2 to 0.7.3 by @dependabot in https://github.com/goauthentik/authentik/pull/14426
* website: bump the build group in /website with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14427
* website/integrations: coder: fix period by @dominic-r in https://github.com/goauthentik/authentik/pull/14423
* website/integrations: fix sonarqube badge by @dewi-tik in https://github.com/goauthentik/authentik/pull/14434
* website/integrations: update integration template by @dewi-tik in https://github.com/goauthentik/authentik/pull/14432
* lifecycle/aws: bump aws-cdk from 2.1013.0 to 2.1014.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/14436
* lifecycle: fix ak dump_config by @BeryJu in https://github.com/goauthentik/authentik/pull/14445
* outposts: fix tmpdir in containers not being set by @BeryJu in https://github.com/goauthentik/authentik/pull/14444
* web/flows/sfe: fix global background image not being loaded by @BeryJu in https://github.com/goauthentik/authentik/pull/14442
* core: bump ruff from 0.11.8 to v0.11.9 by @melizeche in https://github.com/goauthentik/authentik/pull/14457
* core: bump platformdirs from 4.3.7 to v4.3.8 by @melizeche in https://github.com/goauthentik/authentik/pull/14456
* core: bump opentelemetry-api from 1.32.1 to v1.33.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14455
* core: bump msgraph-sdk from 1.28.0 to v1.29.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14454
* web/admin: fix enterprise menu display by @BeryJu in https://github.com/goauthentik/authentik/pull/14447
* website/docs: update outdated custom CSS docs by @BeryJu in https://github.com/goauthentik/authentik/pull/14441
* Revert "web/admin: fix enterprise menu display" by @BeryJu in https://github.com/goauthentik/authentik/pull/14458
* root: improve sentry distributed tracing by @BeryJu in https://github.com/goauthentik/authentik/pull/14468
* website/docs: Update Kubernetes Bootstrap Instructions by @msd117c in https://github.com/goauthentik/authentik/pull/14471
* website/docs: stages: fix-typo by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14477
* website: bump the build group in /website with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14475
* root: temporarily deactivate database pool option by @BeryJu in https://github.com/goauthentik/authentik/pull/14443
* core: fix session migration when old session can't be loaded by @BeryJu in https://github.com/goauthentik/authentik/pull/14466
* root: pin package version in pyproject for dependabot by @BeryJu in https://github.com/goauthentik/authentik/pull/14469
* core: bump sentry-sdk from 2.27.0 to 2.28.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14482
* core: bump psycopg[c,pool] from 3.2.7 to 3.2.8 by @dependabot in https://github.com/goauthentik/authentik/pull/14481
* core: bump django from 5.1.8 to 5.1.9 by @dependabot in https://github.com/goauthentik/authentik/pull/14483
* website: bump semver from 7.7.1 to 7.7.2 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/14491
* tests/e2e: Add E2E tests for Flow SFE by @BeryJu in https://github.com/goauthentik/authentik/pull/14484
* website/integrations: fix missing closing brace for semaphore by @ericgu08 in https://github.com/goauthentik/authentik/pull/14467
* enterprise: fix expired license's users being counted by @BeryJu in https://github.com/goauthentik/authentik/pull/14451
* core: bump psycopg[c,pool] from 3.2.8 to 3.2.9 by @dependabot in https://github.com/goauthentik/authentik/pull/14504
* core: bump twilio from 9.6.0 to 9.6.1 by @dependabot in https://github.com/goauthentik/authentik/pull/14505
* core: bump msgraph-sdk from 1.29.0 to 1.30.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14503
* core: remove `OldAuthenticatedSession` content type by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14507
* website: bump the build group in /website with 6 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14502
* web/admin: Fix sidebar toggle synchronization. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14487
* core: fix unable to create group if no enable_group_superuser permission is given by @BeryJu in https://github.com/goauthentik/authentik/pull/14510
* web/admin:  Dual select state management, custom event dispatching. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14490
* lifecycle/aws: bump aws-cdk from 2.1014.0 to 2.1015.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/14516
* stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in https://github.com/goauthentik/authentik/pull/14513
* tests/e2e: add test for authentication flow in compatibility mode by @BeryJu in https://github.com/goauthentik/authentik/pull/14392
* web: bump undici from 6.21.1 to 6.21.3 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14524
* website/docs: release notes for 2025.4.1 by @BeryJu in https://github.com/goauthentik/authentik/pull/14526
* release: 2025.4.1 by @BeryJu in https://github.com/goauthentik/authentik/pull/14527
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/14528
* core: bump django-pglock from 1.7.1 to 1.7.2 by @dependabot in https://github.com/goauthentik/authentik/pull/14534
* core: bump goauthentik.io/api/v3 from 3.2025040.1 to 3.2025041.1 by @dependabot in https://github.com/goauthentik/authentik/pull/14533
* core: bump github.com/getsentry/sentry-go from 0.32.0 to 0.33.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14532
* core: bump astral-sh/uv from 0.7.3 to 0.7.4 by @dependabot in https://github.com/goauthentik/authentik/pull/14531
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14530
* sources/kerberos: resolve logger warnings by @emmanuel-ferdman in https://github.com/goauthentik/authentik/pull/14540
* root: replace raw.githubusercontent.com by checking out repo by @BeryJu in https://github.com/goauthentik/authentik/pull/14567
* translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14566
* web: Fix issue where Storybook cannot resolve styles. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14553
* translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14565
* core: bump axllent/mailpit from v1.24.2 to v1.25.0 in /tests/e2e by @dependabot in https://github.com/goauthentik/authentik/pull/14564
* lifecycle/aws: bump aws-cdk from 2.1015.0 to 2.1016.0 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/14563
* website: bump @types/postman-collection from 3.5.10 to 3.5.11 in /website by @dependabot in https://github.com/goauthentik/authentik/pull/14561
* core: bump astral-sh/uv from 0.7.4 to 0.7.5 by @dependabot in https://github.com/goauthentik/authentik/pull/14560
* translate: Updates for file web/xliff/en.xlf in it by @transifex-integration in https://github.com/goauthentik/authentik/pull/14538
* ci: add dependencies label to generated PRs by @BeryJu in https://github.com/goauthentik/authentik/pull/14569
* translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/14570
* website/integrations: update paperless ngx instructions to include additional scopes by @jshank in https://github.com/goauthentik/authentik/pull/14486
* web: fix description for signing responses in SAML provider by @dewi-tik in https://github.com/goauthentik/authentik/pull/14573
* web: (ESLint) Consistent use of triple-equals. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14554
* web: (ESLint) Use dot notation. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14557
* web: (ESLint) No else return by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14558
* lib/sync/outgoing: reduce number of db queries made by @rissson in https://github.com/goauthentik/authentik/pull/14177
* enterprise/stages: Add MTLS stage by @BeryJu in https://github.com/goauthentik/authentik/pull/14296
* enterprise/stages/mtls: update go & web client, fix py client generation by @BeryJu in https://github.com/goauthentik/authentik/pull/14576
* web/NPM Workspaces: ESbuild version cleanup by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14541
* core: bump astral-sh/uv from 0.7.5 to 0.7.6 by @dependabot in https://github.com/goauthentik/authentik/pull/14580
* core: bump sentry-sdk from 2.28.0 to 2.29.1 by @dependabot in https://github.com/goauthentik/authentik/pull/14579
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14578
* translate: Updates for file web/xliff/en.xlf in it by @transifex-integration in https://github.com/goauthentik/authentik/pull/14575
* enterprise/stages/mtls: improve certificate validation by @BeryJu in https://github.com/goauthentik/authentik/pull/14582
* core: bump django-guardian from 2.4.0 to v3.0.0 by @melizeche in https://github.com/goauthentik/authentik/pull/14453
* core: bump library/node from 22 to 24 by @dependabot in https://github.com/goauthentik/authentik/pull/14410
* root: move forked dependencies to goauthentik org by @BeryJu in https://github.com/goauthentik/authentik/pull/14590
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14606
* translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14609
* translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14607
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14608
* providers/proxy: kubernetes outpost: fix reconcile when ingress class name changed by @rissson in https://github.com/goauthentik/authentik/pull/14612
* translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/14611
* lifecycle: fix arguments not being passed to worker command by @BeryJu in https://github.com/goauthentik/authentik/pull/14574
* web/NPM Workspaces: Prep ESBuild plugin for publish. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14552
* esbuild-plugin-live-reload: Publish. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14624
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14626
* web: Fix missing Enterprise sidebar entries. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14615
* web: bump @goauthentik/prettier-config from 1.0.4 to 1.0.5 in /web/packages/esbuild-plugin-live-reload by @dependabot in https://github.com/goauthentik/authentik/pull/14637
* web: bump @types/guacamole-common-js from 1.5.2 to 1.5.3 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14643
* web: bump yaml from 2.5.1 to 2.8.0 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14642
* web: bump chromedriver from 131.0.1 to 136.0.3 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14641
* web: bump @lit/task from 1.0.1 to 1.0.2 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14635
* web: bump @patternfly/elements from 4.0.2 to 4.1.0 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14634
* lifecycle/aws: bump aws-cdk from 2.1016.0 to 2.1016.1 in /lifecycle/aws by @dependabot in https://github.com/goauthentik/authentik/pull/14631
* web: bump the sentry group across 1 directory with 2 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14587
* web: bump the rollup group across 2 directories with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14622
* website/docs: improve-rac-documents by @dewi-tik in https://github.com/goauthentik/authentik/pull/14414
* web: fix lint by @rissson in https://github.com/goauthentik/authentik/pull/14665
* web: bump dompurify from 3.2.4 to 3.2.6 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14658
* website: bump the goauthentik group in /website with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14654
* web: bump chart.js from 4.4.4 to 4.4.9 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14655
* web: bump @trivago/prettier-plugin-sort-imports from 4.3.0 to 5.2.2 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14661
* web: bump country-flag-icons from 1.5.13 to 1.5.19 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14659
* web: bump wireit from 0.14.9 to 0.14.12 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14656
* core: bump astral-sh/uv from 0.7.6 to 0.7.7 by @dependabot in https://github.com/goauthentik/authentik/pull/14651
* web: bump @types/node from 22.15.19 to 22.15.21 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14660
* web: bump @codemirror/lang-javascript from 6.2.2 to 6.2.4 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14657
* sources/scim: fix all users being added to group when no members are given by @BeryJu in https://github.com/goauthentik/authentik/pull/14645
* core: bump google-api-python-client from 2.169.0 to 2.170.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14653
* core: bump pydantic from 2.11.4 to 2.11.5 by @dependabot in https://github.com/goauthentik/authentik/pull/14652
* web: Type Tidy by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14647
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14676
* web: bump the goauthentik group across 4 directories with 3 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14640
* website: Fix issue where OpenAPI docs template generates semi-synthet… by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14674
* Web: Controllers cleanup by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14616
* website/docs: fix typos in developer and user documentation by @codesenju in https://github.com/goauthentik/authentik/pull/14680
* website/integrations: add push security by @dewi-tik in https://github.com/goauthentik/authentik/pull/14429
* core: Publish web packages. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14648
* core: bump axllent/mailpit from v1.25.0 to v1.25.1 in /tests/e2e by @dependabot in https://github.com/goauthentik/authentik/pull/14693
* core: bump astral-sh/uv from 0.7.7 to 0.7.8 by @dependabot in https://github.com/goauthentik/authentik/pull/14681
* core: bump django-tenants from 3.7.0 to 3.8.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14691
* core: bump cryptography from 44.0.3 to 45.0.3 by @dependabot in https://github.com/goauthentik/authentik/pull/14690
* website/integrations: minio: notice about sso deprecation on CE by @dominic-r in https://github.com/goauthentik/authentik/pull/14679
* root: do not use /bin/bash directly by @rissson in https://github.com/goauthentik/authentik/pull/14698
* web: bump @formatjs/intl-listformat from 7.5.7 to 7.7.11 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14689
* web: bump fuse.js from 7.0.0 to 7.1.0 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14687
* web: bump knip from 5.33.0 to 5.58.0 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14685
* ci: test with postgres 17 by @rissson in https://github.com/goauthentik/authentik/pull/13967
* web: bump the rollup group across 1 directory with 4 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14682
* web: Use engine available on Github Actions. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14699
* web: bump the swc group across 2 directories with 12 updates by @dependabot in https://github.com/goauthentik/authentik/pull/14623
* ci: Update packages-npm-publish.yml by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14701
* website/integrations: coder: fix typo by @dominic-r in https://github.com/goauthentik/authentik/pull/14514
* ci: fix NPM packages path by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14702
* web: fix lock by @BeryJu in https://github.com/goauthentik/authentik/pull/14705
* tests/e2e: fix flaky SAML Source test by @BeryJu in https://github.com/goauthentik/authentik/pull/14708
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14707
* lib/sync/outgoing: sync in parallel by @rissson in https://github.com/goauthentik/authentik/pull/14697
* web: fix regression in subpath support by @BeryJu in https://github.com/goauthentik/authentik/pull/14646
* website/docs: add login page source note to all source docs by @dewi-tik in https://github.com/goauthentik/authentik/pull/14667
* core: bump msgraph-sdk from 1.30.0 to 1.31.0 by @dependabot in https://github.com/goauthentik/authentik/pull/14585
* ci: fix broken cache by @BeryJu in https://github.com/goauthentik/authentik/pull/14725
* web: fix lock file once again yay JS by @BeryJu in https://github.com/goauthentik/authentik/pull/14721
* web: bump core-js from 3.38.1 to 3.42.0 in /web by @dependabot in https://github.com/goauthentik/authentik/pull/14715
* web/NPM Workspaces: TypeScript API Client TSConfig. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14555
* web: Add specific Storybook dependency. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14719
* web: Controller refinements, error handling by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14700
* web/admin: fix permissions modal button missing for PolicyBindings and FlowStageBindings by @BeryJu in https://github.com/goauthentik/authentik/pull/14619
* stages/email: fix email scanner voiding token by @BeryJu in https://github.com/goauthentik/authentik/pull/14325
* sources/ldap: add forward deletion option by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14718
* web/packages: ESBuild Plugin: Setup and usage docs. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14720
* providers/ldap: retain binder and update users instead of re-creating by @BeryJu in https://github.com/goauthentik/authentik/pull/14735
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14737
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/14736
* translate: Updates for file web/xliff/en.xlf in de [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14741
* translate: Updates for file web/xliff/en.xlf in fr [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14739
* translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in https://github.com/goauthentik/authentik/pull/14738
* translate: Updates for file web/xliff/en.xlf in pl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14740
* translate: Updates for file web/xliff/en.xlf in nl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14743
* translate: Updates for file web/xliff/en.xlf in zh_TW [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14747
* translate: Updates for file web/xliff/en.xlf in fi [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14742
* translate: Updates for file locale/en/LC_MESSAGES/django.po in ko [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14749
* translate: Updates for file web/xliff/en.xlf in zh-Hans [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14746
* translate: Updates for file locale/en/LC_MESSAGES/django.po in de [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14753
* translate: Updates for file locale/en/LC_MESSAGES/django.po in tr [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14755
* translate: Updates for file locale/en/LC_MESSAGES/django.po in it [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14759
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14757
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14762
* translate: Updates for file web/xliff/en.xlf in cs_CZ [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14754
* translate: Updates for file web/xliff/en.xlf in ru [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14751
* translate: Updates for file web/xliff/en.xlf in zh_CN [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14752
* translate: Updates for file locale/en/LC_MESSAGES/django.po in fi [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14758
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_TW [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14756
* translate: Updates for file locale/en/LC_MESSAGES/django.po in nl [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14760
* translate: Updates for file locale/en/LC_MESSAGES/django.po in ru [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14763
* translate: Updates for file locale/en/LC_MESSAGES/django.po in pt [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14761
* translate: Updates for file web/xliff/en.xlf in it [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14744
* translate: Updates for file locale/en/LC_MESSAGES/django.po in pt_BR [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14750
* translate: Updates for file locale/en/LC_MESSAGES/django.po in es [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14748
* translate: Updates for file locale/en/LC_MESSAGES/django.po in pt_PT [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14764
* translate: Updates for file web/xliff/en.xlf in tr [Manual Sync] by @transifex-integration in https://github.com/goauthentik/authentik/pull/14745
* web: fix lock file once again yay JS by @rissson in https://github.com/goauthentik/authentik/pull/14765
* core, web: update translations by @authentik-automation in https://github.com/goauthentik/authentik/pull/14766
* website/integrations: add stripe by @dewi-tik in https://github.com/goauthentik/authentik/pull/14618
* web/flows: update default flow background by @BeryJu in https://github.com/goauthentik/authentik/pull/14769
* website/docs: spell out administrator in service template by @tanberry in https://github.com/goauthentik/authentik/pull/14770
* website/integrations: add filerise by @dewi-tik in https://github.com/goauthentik/authentik/pull/14610
* website/integrations: add pangolin by @dewi-tik in https://github.com/goauthentik/authentik/pull/14614
* website/docs: add docs for MTLS Stage by @BeryJu in https://github.com/goauthentik/authentik/pull/14571
* website/integrations: move resource section to end of documents by @dewi-tik in https://github.com/goauthentik/authentik/pull/14668
* website: fix incorrect usage of "login to" + "log into" vs "log in to" by @dominic-r in https://github.com/goauthentik/authentik/pull/14772
* web: Fix issue where dual select type is not specific. by @GirlBossRush in https://github.com/goauthentik/authentik/pull/14783
* core: Migrate permissions before deleteing OldAuthenticatedSession by @melizeche in https://github.com/goauthentik/authentik/pull/14788
* website/docs: update user ref doc with parent group example by @dewi-tik in https://github.com/goauthentik/authentik/pull/14779
* website: use "administrator" instead of "admin" for Admin interface by @dominic-r in https://github.com/goauthentik/authentik/pull/14771
* sources/ldap: add `user_membership_attribute` by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14784
* stages/user_login: remove success message by @rissson in https://github.com/goauthentik/authentik/pull/13775
* translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in https://github.com/goauthentik/authentik/pull/14782
* translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14781
* translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in https://github.com/goauthentik/authentik/pull/14780
* website/docs: configuration: remove deprecated key for session storage location by @dominic-r in https://github.com/goauthentik/authentik/pull/14431
* website/integrations: add komodo by @dewi-tik in https://github.com/goauthentik/authentik/pull/14790
* web: bump API Client version by @authentik-automation in https://github.com/goauthentik/authentik/pull/14795
* website/docs: Change wording in the upgrade guidelines by @melizeche in https://github.com/goauthentik/authentik/pull/14793
* providers/scim: allow for specifying custom SCIM schemas for users and groups by @BeryJu in https://github.com/goauthentik/authentik/pull/14794
* docs/troubleshooting: cleanup upgrade instructions for postgres k8s by @dominic-r in https://github.com/goauthentik/authentik/pull/14773
* website: release notes for `2025.6` by @gergosimonyi in https://github.com/goauthentik/authentik/pull/14703
* web: minor design tweaks (cherry-pick #14803) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14804
* website/docs: remove fluff from release notes 2025.6 (cherry-pick #14819) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14820
* website/integrations: update cloudflare access callback url (cherry-pick #14807) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14842
* website/integrations: remove trailing slash from budibase redirect (cherry-pick #14823) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14843
* website/integrations: Update Zammad SAML Instructions (cherry-pick #14774) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14844
* core, web: update translations (cherry-pick #14800) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14845
* core: bump goauthentik.io/api/v3 from 3.2025041.2 to 3.2025041.4 (cherry-pick #14809) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14846
* stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (cherry-pick #14801) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14847
* website/docs: add LDAP docs for forward deletion and `memberUid` (cherry-pick #14814) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14848
* lib/sync: fix static incorrect label of pages (cherry-pick #14851) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14852
* providers/rac: apply ConnectionToken scoped-settings last (cherry-pick #14838) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14853
* website/docs: finalize release notes for `2025.6` (cherry-pick #14854) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/14855

## New Contributors
* @LucaTheHacker made their first contribution in https://github.com/goauthentik/authentik/pull/14257
* @finkerle made their first contribution in https://github.com/goauthentik/authentik/pull/14377
* @jshank made their first contribution in https://github.com/goauthentik/authentik/pull/14382
* @andymarden made their first contribution in https://github.com/goauthentik/authentik/pull/14408
* @msd117c made their first contribution in https://github.com/goauthentik/authentik/pull/14471
* @ericgu08 made their first contribution in https://github.com/goauthentik/authentik/pull/14467
* @codesenju made their first contribution in https://github.com/goauthentik/authentik/pull/14680

**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2025.4.2...version/2025.6.0