authentik

See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202625

What's Changed

• website/docs: 2026.2.4 release notes (cherry-pick #22720 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22737
• website/docs: 2025.12.6 release notes (cherry-pick #22719 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22740
• tests/e2e: fix proxy tests failing due to in-use port (cherry-pick #22785 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22791
• web/admin: fix Docker outpost integration form CA Cert filter (cherry-pick #22863 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22894
• blueprints: handle integrity exception when applying blueprints (cherry-pick #22599 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22926
• endpoints/connectors/agent: fix exception with invalid auth type (cherry-pick #22943 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22950
• providers/radius: fix panic in log due to type (cherry-pick #22965 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22966
• core: bump django from 5.2.14 to v5.2.15 (cherry-pick #22956 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22961
• admin/files: sign custom-domain S3 URLs for the final host (cherry-pick #21704 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23008
• packages/django-postgres-cache: fix naive datetime warning (cherry-pick #23033 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23234
• website/docs: fix 2026.2 release notes docker compose mention take 2 (cherry-pick #23388 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23398
• policies: skip cache invalidation on User last_login update (cherry-pick #23159 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23426
• tasks: avoid useless query on monitoring_set (cherry-pick #23161 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23425
• packages/django-dramatiq-postgres/broker: fix race condition in broker causing completed tasks to be repeated (cherry-pick #23218 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23258
• tasks/schedules: fix paused schedules getting unpaused on startup (cherry-pick #23521 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23526
• brands: select_related models accessed in the hot path (cherry-pick #23162 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23523
• providers/*: fix missing declaration for can_discover for outgoing sync providers (cherry-pick #23035 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23232
• core: preserve encoded avatar URLs (cherry-pick #23225 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23393
• web/flows: fix race condition in continuous login and support source stages in authentication flows (cherry-pick #23049 to version-2026.2) by @GirlBossRush in https://github.com/goauthentik/authentik/pull/23557
• web, core: Fix server-side message race condition, type mismatch. (cherry-pick #23151 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23583
• web: Fix issue where default user path is not preferred. (cherry-pick #22139 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22457
• providers/ldap: remove incorrect validation for code authenticator extraction (cherry-pick #23006 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23766
• providers/SCIM: Add discover support (cherry-pick #20658 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23776
• providers/scim: allow failures during discovery (cherry-pick #23357 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23772
• providers/scim: account for users with no email during discovery (cherry-pick #23417 to version-2026.2) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23771
• stages/captcha: fix hcaptcha height (#20901) (2026.2) by @gergosimonyi in https://github.com/goauthentik/authentik/pull/23775
• root: in-process per-IP rate throttle (#23015) (2026.2) by @gergosimonyi in https://github.com/goauthentik/authentik/pull/23774
• ci: remove GHA-based cherry-pick (cherry-pick #23801 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23804
• website/docs: add release notes for 2026.2.5 (cherry-pick #23816 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23821

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2026.2.4...version/2026.2.5