Release 2024.8.0-rc1

See https://docs.goauthentik.io/docs/releases/2024.8

What's Changed

• admin: system api: fix FIPS status schema by @rissson in #10110
• website/docs: Specify Synology DSM Account type to use by @jannickfahlbusch in #10111
• web: bump API Client version by @authentik-automation in #10113
• website/docs: update 2024.6 release notes with latest changes by @rissson in #10109
• website/docs: add more info about multiple replicas by @tanberry in #10117
• policies/reputation: fix existing reputation update by @rissson in #10124
• stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in #10119
• translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #10120
• translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #10121
• core, web: update translations by @authentik-automation in #10118
• core: bump goauthentik.io/api/v3 from 3.2024042.11 to 3.2024042.13 by @dependabot in #10134
• core: bump ruff from 0.4.8 to 0.4.9 by @dependabot in #10128
• core, web: update translations by @authentik-automation in #10127
• core: bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot in #10133
• web: bump chromedriver from 126.0.0 to 126.0.1 in /tests/wdio by @dependabot in #10136
• core: bump github.com/gorilla/sessions from 1.2.2 to 1.3.0 by @dependabot in #10135
• web: bump @patternfly/elements from 3.0.1 to 3.0.2 in /web by @dependabot in #10132
• website: bump react-tooltip from 5.26.4 to 5.27.0 in /website by @dependabot in #10129
• web: fix early modal stack depletion by @kensternberg-authentik in #10068
• website/integations/services: Slack integration docs by @tanberry in #9933
• core: include version in built JS files by @BeryJu in #9558
• web: fix needed because recent upgrade to task breaks spinner button by @kensternberg-authentik in #10142
• web: bump ws from 8.16.0 to 8.17.1 in /web by @dependabot in #10149
• web: bump the storybook group in /web with 7 updates by @dependabot in #10147
• ci: bump docker/build-push-action from 5 to 6 by @dependabot in #10144
• core: bump urllib3 from 2.2.1 to 2.2.2 by @dependabot in #10143
• root: use custom model serializer that saves m2m without bulk by @BeryJu in #10139
• root: makefile: add codespell to make website by @rissson in #10116
• web: fix docker build for non-release versions by @rissson in #10154
• website/integrations: gitlab: better service description by @4d62 in #9923
• website/docs: Describe where to apply the auto setup env vars by @m1212e in #9863
• website/integrations: jellyfin: add OIDC configuration by @Redlonghead in #9538
• web: bump the wdio group in /tests/wdio with 4 updates by @dependabot in #10160
• web: bump chromedriver from 126.0.1 to 126.0.2 in /tests/wdio by @dependabot in #10161
• core: bump twilio from 9.1.1 to 9.2.0 by @dependabot in #10162
• website/docs: update 2024.6 release notes with latest changes by @rissson in #10167
• website/docs: 2024.6 release notes: add note about group names by @rissson in #10170
• core: fix error when raising SkipObject in mapping by @BeryJu in #10153
• website/docs: update 2024.6 release notes with latest changes by @rissson in #10174
• website/docs: update template reference by @emmanuel-ferdman in #10166
• web: bump @sentry/browser from 8.9.2 to 8.10.0 in /web in the sentry group by @dependabot in #10185
• core: bump google-api-python-client from 2.133.0 to 2.134.0 by @dependabot in #10183
• web: bump glob from 10.4.1 to 10.4.2 in /web by @dependabot in #10163
• core: rework base for SkipObject exception to better support control flow exceptions by @BeryJu in #10186
• website/docs: Remove hyphen in read replica in Release Notes by @tanberry in #10178
• website/docs: Fix nginx proxy_pass directive documentation by @fotinakis in #10181
• core: bump selenium from 4.21.0 to 4.22.0 by @dependabot in #10194
• core: bump ruff from 0.4.9 to 0.4.10 by @dependabot in #10193
• web: bump typescript from 5.4.5 to 5.5.2 in /tests/wdio by @dependabot in #10192
• web: bump typescript from 5.4.5 to 5.5.2 in /web by @dependabot in #10191
• website: bump typescript from 5.4.5 to 5.5.2 in /website by @dependabot in #10190
• web: bump @sentry/browser from 8.10.0 to 8.11.0 in /web in the sentry group by @dependabot in #10204
• web: bump chromedriver from 126.0.2 to 126.0.3 in /tests/wdio by @dependabot in #10203
• core: bump twilio from 9.2.0 to 9.2.1 by @dependabot in #10202
• core: bump coverage from 7.5.3 to 7.5.4 by @dependabot in #10201
• web/flows: update flow background by @BeryJu in #10206
• website/docs: fix #9552 openssl rand base64 line wrap by @jogerj in #10211
• website/integrations: fix typo in documentation for OIDC setup with Paperless-ngx by @rwh85 in #10218
• security: fix CVE-2024-38371 by @BeryJu in #10229
• security: fix CVE-2024-37905 by @BeryJu in #10230
• core: bump debugpy from 1.8.1 to 1.8.2 by @dependabot in #10225
• web: bump @sentry/browser from 8.11.0 to 8.12.0 in /web in the sentry group by @dependabot in #10226
• core: bump webauthn from 2.1.0 to 2.2.0 by @dependabot in #10224
• web: bump chromedriver from 126.0.3 to 126.0.4 in /tests/wdio by @dependabot in #10223
• core: bump pdoc from 14.5.0 to 14.5.1 by @dependabot in #10221
• website/docs: update 2024.6 release notes with latest changes by @rissson in #10228
• website/docs: update 2024.2 release notes with security fixes by @rissson in #10232
• website/docs: update 2024.4 release notes with latest changes by @rissson in #10231
• website/docs: update 2024.6 release notes with latest changes (cherry-pick #10228) by @gcp-cherry-pick-bot in #10243
• website/docs: remove RC disclaimer from 2024.6 release notes by @rissson in #10245
• website/docs: remove RC disclaimer from 2024.6 release notes (cherry-pick #10245) by @gcp-cherry-pick-bot in #10246
• security: update supported versions by @rissson in #10247
• security: update supported versions (cherry-pick #10247) by @gcp-cherry-pick-bot in #10248
• website/docs: update geoip and asn example to use the proper syntax by @rissson in #10249
• website/docs: update the Welcome page by @tanberry in #10222
• website/docs: update geoip and asn example to use the proper syntax (cherry-pick #10249) by @gcp-cherry-pick-bot in #10250
• web: bump API Client version by @authentik-automation in #10252
• web/flows: remove continue button from AutoSubmit stage by @BeryJu in #10253
• we...

Release 2024.6.4

See https://docs.goauthentik.io/docs/releases/2024.6#fixed-in-202464

What's Changed

• web/admin: fix selectable card colour in dark theme (cherry-pick #10794) by @gcp-cherry-pick-bot in #10795
• sources/ldap: Add enabled filter for ldap_password_validate signal (cherry-pick #10823) by @gcp-cherry-pick-bot in #10825
• security: fix CVE-2024-42490 (cherry-pick #11022) by @gcp-cherry-pick-bot in #11025

Full Changelog: version/2024.6.3...version/2024.6.4

Release 2024.4.4

See https://docs.goauthentik.io/docs/releases/2024.4#fixed-in-202444

What's Changed

• website/docs: update 2024.4 release notes with latest changes (cherry-pick #10231) by @gcp-cherry-pick-bot in #10244
• security: fix CVE-2024-42490 (cherry-pick #11022) by @gcp-cherry-pick-bot in #11024

Full Changelog: version/2024.4.3...version/2024.4.4

Release 2024.6.3

See https://docs.goauthentik.io/docs/releases/2024.6#fixed-in-202463

What's Changed

• web: fix theme not applying to document correctly (cherry-pick #10721) by @gcp-cherry-pick-bot in #10722
• sources/scim: fix duplicate service account users and changing token (cherry-pick #10735) by @rissson in #10737
• web: replace all occurences of the theme placeholder (cherry-pick #10749) by @gcp-cherry-pick-bot in #10750
• enterprise/rac: fix error when listing connection tokens as non-superuser (cherry-pick #10771) by @gcp-cherry-pick-bot in #10773

Full Changelog: version/2024.6.2...version/2024.6.3

Release 2024.6.2

See https://docs.goauthentik.io/docs/releases/2024.6#fixed-in-202462

What's Changed

• core: improve error handling on ASGI level (cherry-pick #10547) by @gcp-cherry-pick-bot in #10552
• lib/sync: handle SkipObject in direct triggered tasks (cherry-pick #10590) by @gcp-cherry-pick-bot in #10591
• stages/prompt: fix prompt not editable with invalid expression (cherry-pick #10603) by @gcp-cherry-pick-bot in #10604
• events: fix race condition (cherry-pick #10602) by @gcp-cherry-pick-bot in #10609
• core: remove html language tag for pages that are translated (cherry-pick #10611) by @gcp-cherry-pick-bot in #10613
• web/admin: fix missing SAML Provider ECDSA options (cherry-pick #10612) by @gcp-cherry-pick-bot in #10618
• lifecycle: only create tenant media root if needed (cherry-pick #10616) by @gcp-cherry-pick-bot in #10617
• web/flows: remove continue button from AutoSubmit stage (cherry-pick #10253) by @gcp-cherry-pick-bot in #10677
• events: associate login_failed events to a user if possible (cherry-pick #10270) by @gcp-cherry-pick-bot in #10676
• web/admin: show matching user reputation scores in user details (cherry-pick #10276) by @gcp-cherry-pick-bot in #10699
• outposts: make refresh interval configurable (cherry-pick #10138) by @gcp-cherry-pick-bot in #10700
• outposts: ensure minimum refresh interval (cherry-pick #10701) by @gcp-cherry-pick-bot in #10702
• tests/e2e: fix ldap tests following #10270 (cherry-pick #10288) by @gcp-cherry-pick-bot in #10703

Full Changelog: version/2024.6.1...version/2024.6.2

Release 2024.6.1

See https://docs.goauthentik.io/docs/releases/2024.6#fixed-in-202461

What's Changed

• website/docs: update 2024.6 release notes with latest changes (cherry-pick #10228) by @gcp-cherry-pick-bot in #10243
• website/docs: remove RC disclaimer from 2024.6 release notes (cherry-pick #10245) by @gcp-cherry-pick-bot in #10246
• security: update supported versions (cherry-pick #10247) by @gcp-cherry-pick-bot in #10248
• website/docs: update geoip and asn example to use the proper syntax (cherry-pick #10249) by @gcp-cherry-pick-bot in #10250
• website/docs: update geoip and asn documentation following field changes (cherry-pick #10265) by @gcp-cherry-pick-bot in #10266
• stages/user_login: fix ?next parameter not carried through broken session binding (cherry-pick #10301) by @gcp-cherry-pick-bot in #10302
• web/flows: remove background image link (cherry-pick #10318) by @gcp-cherry-pick-bot in #10320
• core: remove transitionary old JS urls (cherry-pick #10317) by @gcp-cherry-pick-bot in #10321
• provider/scim: Fix exception handling for missing ServiceProviderConfig (cherry-pick #10322) by @gcp-cherry-pick-bot in #10335
• providers/saml: fix metadata import error handling (cherry-pick #10349) by @gcp-cherry-pick-bot in #10350
• sources/saml: fix pickle error, add saml auth tests (cherry-pick #10348) by @gcp-cherry-pick-bot in #10352
• sources/oauth: fix link not being saved (cherry-pick #10374) by @gcp-cherry-pick-bot in #10376
• stages/authenticator_validate: fix friendly_name being required (cherry-pick #10382) by @gcp-cherry-pick-bot in #10385
• core: fix migrations missing using db_alias (cherry-pick #10409) by @gcp-cherry-pick-bot in #10410
• web/admin: fix access token list calling wrong API (cherry-pick #10434) by @gcp-cherry-pick-bot in #10435
• core: fix source flow_manager not resuming flow when linking (cherry-pick #10436) by @gcp-cherry-pick-bot in #10438
• core: revert backchannel only filtering (cherry-pick #10455) by @gcp-cherry-pick-bot in #10457
• website/docs: add 2024.6.1 release notes (cherry-pick #10456) by @gcp-cherry-pick-bot in #10458

Full Changelog: version/2024.6.0...version/2024.6.1

Release 2024.6.0

See https://docs.goauthentik.io/docs/releases/2024.6

What's Changed

• website/docs: Remove hyphen in read replica in Release Notes (cherry-pick #10178) by @gcp-cherry-pick-bot in #10188
• core: rework base for SkipObject exception to better support control flow exceptions (cherry-pick #10186) by @gcp-cherry-pick-bot in #10187
• web/flows: update flow background (cherry-pick #10206) by @gcp-cherry-pick-bot in #10207
• security: fix CVE-2024-38371 (cherry-pick #10229) by @gcp-cherry-pick-bot in #10234
• security: fix CVE-2024-37905 (cherry-pick #10230) by @gcp-cherry-pick-bot in #10237

Full Changelog: version/2024.6.0-rc2...version/2024.6.0

Release 2024.4.3

See https://docs.goauthentik.io/docs/releases/2024.4#fixed-in-202443

What's Changed

• core: fix source flow_manager not always appending save stage (cherry-pick #9659) by @gcp-cherry-pick-bot in #9662
• web: fix value handling inside controlled components (cherry-pick #9648) by @gcp-cherry-pick-bot in #9685
• sources/saml: fix FlowPlanner error due to pickle (cherry-pick #9708) by @gcp-cherry-pick-bot in #9709
• security: fix CVE-2024-38371 (cherry-pick #10229) by @gcp-cherry-pick-bot in #10233
• security: fix CVE-2024-37905 (cherry-pick #10230) by @gcp-cherry-pick-bot in #10236

Full Changelog: version/2024.4.2...version/2024.4.3

Release 2024.2.4

See https://docs.goauthentik.io/docs/releases/2024.2#fixed-in-202424

What's Changed

• security: fix CVE-2024-38371 (cherry-pick #10229) by @rissson in #10235
• security: fix CVE-2024-37905 (cherry-pick #10230) by @rissson in #10238

Full Changelog: version/2024.2.3...version/2024.2.4

Release 2024.6.0-rc2

See https://docs.goauthentik.io/docs/releases/2024.6

What's Changed

• policies/reputation: fix existing reputation update (cherry-pick #10124) by @gcp-cherry-pick-bot in #10125
• core: include version in built JS files (cherry-pick #9558) by @gcp-cherry-pick-bot in #10148
• web: fix needed because recent upgrade to task breaks spinner button (cherry-pick #10142) by @gcp-cherry-pick-bot in #10150
• root: use custom model serializer that saves m2m without bulk (cherry-pick #10139) by @gcp-cherry-pick-bot in #10151
• web: fix docker build for non-release versions (cherry-pick #10154) by @gcp-cherry-pick-bot in #10155
• website/docs: update 2024.6 release notes with latest changes (cherry-pick #10167) by @gcp-cherry-pick-bot in #10168
• core: fix error when raising SkipObject in mapping (cherry-pick #10153) by @gcp-cherry-pick-bot in #10173
• website/docs: 2024.6 release notes: add note about group names (cherry-pick #10170) by @gcp-cherry-pick-bot in #10171
• website/docs: update 2024.6 release notes with latest changes (cherry-pick #10174) by @gcp-cherry-pick-bot in #10175
• release: 2024.6.0-rc2 by @rissson in #10176

Full Changelog: version/2024.6.0-rc1...version/2024.6.0-rc2