version/2026.2.5
goauthentik/authentikversion/2026.2.5Jul 7, 2026by authentik-automation[bot]
Upgrading?
AI Summary
This release for the 2026.2 branch focuses on stability and bug fixes, including fixes for proxy tests, outpost integrations, and SCIM discovery. It introduces new SCIM discovery support, a new in-process rate throttle, and fixes race conditions in login flows and broker tasks.
Key Highlights
- New SCIM provider discovery support.
- New in-process per-IP rate throttling.
- Fixes for race conditions in continuous login and broker tasks.
- Improvements to SCIM discovery (handling users without emails, allowing failures).
- Fixes to outpost CA cert filters, proxy tests, and Django version.
New Features
- SCIM provider discovery support
- In-process per-IP rate throttle
Full Release Notes
See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202625 ## What's Changed * website/docs: 2026.2.4 release notes (cherry-pick #22720 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22737 * website/docs: 2025.12.6 release notes (cherry-pick #22719 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22740 * tests/e2e: fix proxy tests failing due to in-use port (cherry-pick #22785 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22791 * web/admin: fix Docker outpost integration form CA Cert filter (cherry-pick #22863 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22894 * blueprints: handle integrity exception when applying blueprints (cherry-pick #22599 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22926 * endpoints/connectors/agent: fix exception with invalid auth type (cherry-pick #22943 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22950 * providers/radius: fix panic in log due to type (cherry-pick #22965 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22966 * core: bump django from 5.2.14 to v5.2.15 (cherry-pick #22956 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22961 * admin/files: sign custom-domain S3 URLs for the final host (cherry-pick #21704 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23008 * packages/django-postgres-cache: fix naive datetime warning (cherry-pick #23033 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23234 * website/docs: fix 2026.2 release notes docker compose mention take 2 (cherry-pick #23388 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23398 * policies: skip cache invalidation on User last_login update (cherry-pick #23159 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23426 * tasks: avoid useless query on monitoring_set (cherry-pick #23161 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23425 * packages/django-dramatiq-postgres/broker: fix race condition in broker causing completed tasks to be repeated (cherry-pick #23218 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23258 * tasks/schedules: fix paused schedules getting unpaused on startup (cherry-pick #23521 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23526 * brands: select_related models accessed in the hot path (cherry-pick #23162 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23523 * providers/*: fix missing declaration for can_discover for outgoing sync providers (cherry-pick #23035 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23232 * core: preserve encoded avatar URLs (cherry-pick #23225 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23393 * web/flows: fix race condition in continuous login and support source stages in authentication flows (cherry-pick #23049 to version-2026.2) by @GirlBossRush in https://github.com/goauthentik/authentik/pull/23557 * web, core: Fix server-side message race condition, type mismatch. (cherry-pick #23151 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23583 * web: Fix issue where default user path is not preferred. (cherry-pick #22139 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22457 * providers/ldap: remove incorrect validation for code authenticator extraction (cherry-pick #23006 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23766 * providers/SCIM: Add discover support (cherry-pick #20658 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23776 * providers/scim: allow failures during discovery (cherry-pick #23357 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23772 * providers/scim: account for users with no email during discovery (cherry-pick #23417 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23771 * stages/captcha: fix hcaptcha height (#20901) (2026.2) by @gergosimonyi in https://github.com/goauthentik/authentik/pull/23775 * root: in-process per-IP rate throttle (#23015) (2026.2) by @gergosimonyi in https://github.com/goauthentik/authentik/pull/23774 * ci: remove GHA-based cherry-pick (cherry-pick #23801 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23804 * website/docs: add release notes for `2026.2.5` (cherry-pick #23816 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23821 **Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2026.2.4...version/2026.2.5
Related Repositories
public-apis/public-apis★ 491,206
A collective list of free APIs
NousResearch/hermes-agent★ 256,070
The agent that grows with you
yt-dlp/yt-dlp★ 200,240
A feature-rich command-line audio/video downloader
microsoft/markitdown★ 191,555
Python tool for converting files and office documents to Markdown.
Significant-Gravitas/AutoGPT★ 187,699
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.