version/2025.8.2

goauthentik/authentikversion/2025.8.2Sep 15, 2025by authentik-automation[bot]

Upgrading?

AI Summary

Patch release fixing deadlock during session migration, LDAP group DN handling, and client-side password validation.

Key Highlights

  • Fix deadlock during session migration
  • Fix malformed filter error with special characters in LDAP group DN
  • Fix client-side validation allowing admin to set blank user password
  • Add missing exp claim for logout token
  • Improve error message when SCIM object fails to sync

Full Release Notes

See https://docs.goauthentik.io/docs/releases/2025.8#fixed-in-202582


## What's Changed
* website/docs: 2025.8.1 release notes (cherry-pick #16343) by @rissson in https://github.com/goauthentik/authentik/pull/16344
* providers/oauth2: avoid deadlock during session migration (cherry-pick #16361) by @rissson in https://github.com/goauthentik/authentik/pull/16364
* website: cherry-pick 2025.8/client side redirects by @GirlBossRush in https://github.com/goauthentik/authentik/pull/16372
* root: update security.md with github reporting link (cherry-pick #16332) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16395
* lifecycle: fix PROMETHEUS_MULTIPROC_DIR missing suffix (cherry-pick #16401) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16407
* tasks/schedules: fix api search fields (cherry-pick #16405) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16410
* website/docs: adds details to certificates doc (cherry-pick #16335) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16394
* root: fix security.md (cherry-pick #16345) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16415
* providers/rac: fix AuthenticatedSession migration (cherry-pick #16400) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16419
* website/docs: update internal vs external user information (cherry-pick #16359) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16421
* lib/sync: fix missing f for string (cherry-pick #16423) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16427
* website/docs: capitalized proper name of stages, removed old version references. (cherry-pick #16414) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16450
* core: bump h2 from 4.2.0 to 4.3.0 (cherry-pick #16446) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16449
* lib/sync/outgoing: fix single object sync timeout (cherry-pick #16447) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16453
* core: fix client-side only validation allowing admin to set blank user password (cherry-pick #16467) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16469
* website: Unify Netlify redirects with Docusaurus's client-side router. (backport of #16430) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16472
* website: Page redirect guide, documentation (backport of #16466) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16475
* policies: remove object pk from authentik_policies_execution_time to reduce cardinality (cherry-pick #16500) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16501
* website/integrations: bitwarden: fix ent notice (cherry-pick #16502) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16511
* website/docs: update how to rac and outpost landing page (cherry-pick #16442) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16498
* website/docs: improve customize your instance page layout (cherry-pick #16367) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16566
* website/docs: update external user information (cherry-pick #16493) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16568
* website/docs: changes all -> arrows to > (cherry-pick #16569) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16571
* website/docs: remove base providers redirect. (cherry-pick #16576) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16580
* website: Add text copy of license (cherry-pick #16559) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16574
* root: clean up README (cherry-pick #16286) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16573
* sources/ldap: fix malformed filter error with special characters in group DN (cherry-pick #16243) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16585
* core: bump django from 5.1.11 to v5.1.12 (cherry-pick #16584) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16591
* website: Update license text to use "directory" (cherry-pick #16589) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16592
* web/flows: only disable login button when interactive captcha is configured and not loaded (cherry-pick #16586) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16590
* providers/oauth2: add missing exp claim for logout token (cherry-pick #16593) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16598
* providers/scim: improve error message when object fails to sync (cherry-pick #16625) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16643
* tasks: fix status and healthcheck breaking with connection issues (cherry-pick #16504) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16673
* website/docs: fix typo (cherry-pick #16681) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16682
* website/docs: add rate limiting info to Email stage docs (cherry-pick #16668) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16691
* website: Redirect Azure to Entra. Add tags for search indexing. (cherry-pick #16474) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16483
* website/docs: add missing notification rule example doc to sidebar (cherry-pick #16478) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16479
* website/docs: clarify docker compose install (cherry-pick #16696) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16699
* website/docs: moves display source notes (cherry-pick #16704) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16718
* website/docs: fix typos (cherry-pick #16716) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16719
* website/docs: dev-docs: Minimal landing + landing for dev env (cherry-pick #15246) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16734
* web: Docker versioning compatibility (cherry-pick #16139) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16732
* website/docs: re-fix sentence about Go (backport of #16736) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16737
* website/docs: update ssh rac doc (cherry-pick #16695) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16720
* lib/logging: only show locals when in debug mode (cherry-pick #16772) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16774
* sources/oauth/entra_id: do not assume group_id comes from entra (cherry-pick #16456) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16777
* website/docs: 2025.8.2 release notes (cherry-pick #16773) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/16778


**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2025.8.1...version/2025.8.2

Related Repositories