version/2026.2.2

See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202622

## What's Changed
* ci: fix `reason` change in versions repo bump (cherry-pick #20696 to version-2026.2) by @gergosimonyi in https://github.com/goauthentik/authentik/pull/20709
* web/admin: bad width on policy test results (cherry-pick #20668 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20697
* web/flows: continuous login (cherry-pick #19862 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20712
* core: bump django from 5.2.11 to 5.2.12 (cherry-pick #20719 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20738
* lifecycle: make gunicorn --max-requests configurable (cherry-pick #20736 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20744
* packages/django-channels-postgres: provide sync API for group_send (cherry-pick #20740 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20741
* website/docs: remove potatoes card sigh (cherry-pick #20767 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20768
* website: override DocSearch button colors in light mode (cherry-pick #20770 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20773
* providers/scim: fix out-of-scope users and groups not being deleted from destination application (cherry-pick #20742 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20780
* providers/oauth2: decode percent-encoded basic auth (cherry-pick #20779 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20781
* web/rbac: disambiguate duplicate permission names in initial permissions (cherry-pick #20786 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20805
* endpoints: prevent selection of incompatible connector (cherry-pick #20806 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20807
* website/docs: update agent docs (cherry-pick #20782 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20826
* providers/proxy: remove redundant logout event (cherry-pick #20860 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20866
* core: bump orjson from 3.11.5 to 3.11.6 (cherry-pick #20870 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20889
* core: expiring model: ignore DoesNotExist error (cherry-pick #20922 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20925
* web/admin: Fix SCIM page_size UI issue (cherry-pick #20890 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20929
* docs: Add note on skipping object syncing (cherry-pick #20882 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20894
* lifecycle/migrate: add flag to skip migrations (cherry-pick #20863 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20932
* outposts: only dispatch logout task if any outpost exists (cherry-pick #20920 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20949
* packages/django-dramatiq-postgres: scheduler: only dispatch tasks if they're not running yet (cherry-pick #20921 to version-2026.2) by @rissson in https://github.com/goauthentik/authentik/pull/20950
* website/docs: use full path for sysd on windows (cherry-pick #20951 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20952
* core: bump pyasn1 from 0.6.2 to 0.6.3 (cherry-pick #20956 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20957
* web/admin: fix missing OSM referrerPolicy header (cherry-pick #20984 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20990
* website/docs: fix notification transport etc (cherry-pick #20982 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20992
* website/docs: update kubernetes install guide for Gateway API (cherry-pick #20961 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/20997
* website/docs: fix swapped sidebar label (cherry-pick #21011 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21012
* website: switch docs analytics to gtag (cherry-pick #20993 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21015
* sources/ldap: fix incorrect error response for invalid sync_users_password (cherry-pick #21016 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21039
* enterprise/endpoints/connectors/agent: add login_hint support for interactive auth (cherry-pick #20647 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21047
* web/admin: handle non-string values in formatUUID to prevent Event Log crash (cherry-pick #20804 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21052
* events: avoid implicitly setting context from login_failed event (cherry-pick #21045 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21050
* events: prevent exception when events contains incompatible unicode (cherry-pick #21048 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21053
* ci: fix escaping in cherry-pick action (#21082) by @BeryJu in https://github.com/goauthentik/authentik/pull/21083
* ci: rotate GH App private key (version-2026.2) by @BeryJu in https://github.com/goauthentik/authentik/pull/21087
* ci: fix cherry-pick action generating empty title (#21091) by @BeryJu in https://github.com/goauthentik/authentik/pull/21092
* flows: continous login debug (cherry-pick #21044 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21090
* website/docs: add missing dependencies for linux dev environment (cherry-pick #21020 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21093
* core: bump cbor2 from 5.8.0 to 5.9.0 (cherry-pick #21094 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21096
* providers/proxy: Add a default maxResponseBodySize to Traefik Middleware (cherry-pick #21111 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21140
* endpoints/connectors: fix enabled flag not respected (cherry-pick #21144 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21145
* web/flow: reset stale authenticator selection between consecutive validate stages (cherry-pick #20802 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21014
* web/applications: add wsfed to app wizard (cherry-pick #20880 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21184
* sources/oauth: Allow patching without provider type (cherry-pick #21211 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21213
* sources/ldap: fix exception in ldap debug endpoint (cherry-pick #21219 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21222
* proviers/ldap: avoid concurrent header writes in API Client (cherry-pick #21223 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21228
* website/docs: document group_uuid as a property for group object (cherry-pick #20865 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21271
* website/docs: ad source: add note about ldap signing (cherry-pick #21274 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21279
* core: fix provider not nullable (cherry-pick #21275 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21282
* website/docs: format cache settings (cherry-pick #21289 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21302
* providers/saml: Fix redirect for saml slo (cherry-pick #21258 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21284
* website/docs: add example recovery flow with MFA (cherry-pick #19497 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21305
* website/docs: entra scim: add note about validator (cherry-pick #21273 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21310
* security: update policy to include explicit intended functionality (cherry-pick #21308 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21327
* ci: allow setting working directory for setup action (2026.2) by @BeryJu in https://github.com/goauthentik/authentik/pull/21330
* ci: include version family in release build cache (2026.2) by @BeryJu in https://github.com/goauthentik/authentik/pull/21328
* root: fix compose generation for patch releases release candidates (cherry-pick #21353 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21355
* web/flow: be more aggressive about checking inspector hide/show status by @kensternberg-authentik in https://github.com/goauthentik/authentik/pull/21358
* providers/ldap: inherit adjustable page size for LDAP searchers (cherry-pick #21377 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21384
* internal: fix certificate fallback without SNI (cherry-pick #21417 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21419
* website/docs: clarify file upload troubleshooting (cherry-pick #21361 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21434
* website/docs: fix merge conflict by @rissson in https://github.com/goauthentik/authentik/pull/21435
* security: add item to intended behavior section of security policy (cherry-pick #21430 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21432
* tasks: allow retry for rejected tasks only (cherry-pick #21433 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/21436


**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2026.2.1...version/2026.2.2