Starstruk Logo MarkStarstruk

v4.39.16

songquanpeng/one-apiv4.39.16Mar 14, 2026by autheliabot

AI Summary

This release focuses on security fixes and bug corrections, addressing strict discovery checks, excessive filter escapes, UI stuck states during 2FA enrollment, and sanitizing language cookies.

Key Highlights

  • Security fixes for dependency chain and authentication logic
  • Fixed authentication discovery check being too strict
  • Fixed excessive filter escape in configuration
  • Fixed UI stuck state during 2FA enrollment
  • Sanitized language cookie and improved root directory finding

Full Release Notes

### Security Fixes

This release fixes security issues. For more information please see GHSA-gmfg-3v4q-9qr4.

### Bug Fixes

* **authentication:** discovery check too strict ([#11350](https://github.com/authelia/authelia/issues/11350)) ([5c1633b](https://github.com/authelia/authelia/commit/5c1633b767f28675cbcc3c7d723e9865fd506b80)), closes [#10840](https://github.com/authelia/authelia/issues/10840) by @james-d-elliott
* **authentication:** excessive filter escape ([#11285](https://github.com/authelia/authelia/issues/11285)) ([10f7603](https://github.com/authelia/authelia/commit/10f7603eb89ac0ca1bff1c8917a96e9c40900c01)), closes [#11284](https://github.com/authelia/authelia/issues/11284) by @james-d-elliott
* **configuration:** max retries default ([#11173](https://github.com/authelia/authelia/issues/11173)) ([f29bb95](https://github.com/authelia/authelia/commit/f29bb95e1040a9d19e8cd558e992456b24912737)) by @james-d-elliott
* disable npm scripts for docker dev build ([#11044](https://github.com/authelia/authelia/issues/11044)) ([4da3c53](https://github.com/authelia/authelia/commit/4da3c53b40b575105ff904ce193bf3f906f6e78c)) by @Crowley723
* ignore node modules for vite watchers ([#11412](https://github.com/authelia/authelia/issues/11412)) ([c8070f2](https://github.com/authelia/authelia/commit/c8070f283b6c593e8d6cca04f5810fd7dc515d08)) by @Crowley723
* improve root directory finding ([#11029](https://github.com/authelia/authelia/issues/11029)) ([d4529e3](https://github.com/authelia/authelia/commit/d4529e3899f007a25af0f4a739cc422c7e99f9db)) by @Crowley723
* **middlewares:** strip path incorrect match criteria ([#11402](https://github.com/authelia/authelia/issues/11402)) ([75a3b99](https://github.com/authelia/authelia/commit/75a3b99033f6530f0190fe1f42e9517fa40edda1)) by @james-d-elliott
* **oidc:** jwt profile claims policy hydration ([#10663](https://github.com/authelia/authelia/issues/10663)) ([24ee120](https://github.com/authelia/authelia/commit/24ee1205fc9ce9afbbed3c5b2bd4bb0b9c2e27cf)) by @james-d-elliott
* **server:** sanitise language cookie ([#11341](https://github.com/authelia/authelia/issues/11341)) ([ed66b2b](https://github.com/authelia/authelia/commit/ed66b2b2ce14a296e1aa654562caa53acfe4b860)) by @nightah
* **web:** ui stuck state enrolling 2fa ([#11367](https://github.com/authelia/authelia/issues/11367)) ([52f01f2](https://github.com/authelia/authelia/commit/52f01f2fa75d9ddacd40873168d76c4e74ea21a2)), closes [#10859](https://github.com/authelia/authelia/issues/10859) by @Br1an67

### New Contributors
* @kapec94 made their first contribution in https://github.com/authelia/authelia/pull/10841
* @n0rad made their first contribution in https://github.com/authelia/authelia/pull/10854
* @fortellerq made their first contribution in https://github.com/authelia/authelia/pull/11001
* @caiocdcs made their first contribution in https://github.com/authelia/authelia/pull/11045
* @spomata made their first contribution in https://github.com/authelia/authelia/pull/10999
* @xaabi6 made their first contribution in https://github.com/authelia/authelia/pull/11081
* @TheSander562 made their first contribution in https://github.com/authelia/authelia/pull/10899
* @moedtm made their first contribution in https://github.com/authelia/authelia/pull/10896
* @AlexViridi made their first contribution in https://github.com/authelia/authelia/pull/11130
* @tonyaellie made their first contribution in https://github.com/authelia/authelia/pull/11187
* @kiaraly made their first contribution in https://github.com/authelia/authelia/pull/11176
* @louisonsarlinmagnus made their first contribution in https://github.com/authelia/authelia/pull/11210
* @x0k made their first contribution in https://github.com/authelia/authelia/pull/11227
* @tomaszduda23 made their first contribution in https://github.com/authelia/authelia/pull/11225
* @wischi-chr made their first contribution in https://github.com/authelia/authelia/pull/9867
* @FlorianObermayer made their first contribution in https://github.com/authelia/authelia/pull/11248
* @andreasbrett made their first contribution in https://github.com/authelia/authelia/pull/11257
* @Br1an67 made their first contribution in https://github.com/authelia/authelia/pull/11367
* @tkf144 made their first contribution in https://github.com/authelia/authelia/pull/11399

### Docker Container
* `docker pull authelia/authelia:4.39.16`
* `docker pull ghcr.io/authelia/authelia:4.39.16`