chore(deps): update helm release authentik to v2025.12.4

[renovate]

This PR contains the following updates:

Package	Update	Change
authentik (source)	minor	2025.4.1 → 2025.12.4

---

Release Notes

goauthentik/helm (authentik)

v2025.12.4

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

see https://docs.goauthentik.io/releases/2025.12/#fixed-in-2025124

What's Changed

• charts/authentik: add link to authentik configuration docs by @​rissson in #​447
• charts/authentik: bump to 2025.12.4 by @​authentik-automation[bot] in #​451

Full Changelog: goauthentik/helm@authentik-2025.12.3...authentik-2025.12.4

v2025.12.3

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: bump to 2025.12.3 by @​authentik-automation[bot] in #​444
• 2025.12: Revert bulk revoke added by accident in release branch by @​dominic-r in goauthentik/authentik#19870
• web/admin: fix toggle-group for bindings now showing up (cherry-pick #​19820 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19895
• web: fix Brand CSS not applied to nested Shadow DOM components (cherry-pick #​19892 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19900
• ci: always generate API clients (#​19906) by @​BeryJu in goauthentik/authentik#19932
• lifecycle/ak: make sure /data has the correct permissions (cherry-pick #​19935 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19940
• lifecycle/aws: add /data volume (cherry-pick #​19936 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19938
• core: fix non-expiring service accounts and app passwords (cherry-pick #​19913 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19941

Full Changelog: goauthentik/authentik@version/2025.12.2...version/2025.12.3

v2025.12.2

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: bump to 2025.12.2 by @​authentik-automation[bot] in #​442
• sources/kerberos: update to new python-kadmin-rs (cherry-pick #​19491 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19523
• tests/e2e: Add delay and serialized rollback to saml e2e test (cherry-pick #​18840 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19532
• admin/files: fix manageable check blocking file creation on fresh installs (cherry-pick #​19547 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19553
• admin/files: fix duplicate bucket name in presigned URLs with custom domain (cherry-pick #​19537 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19575
• core: Update supported versions in SECURITY.md (cherry-pick #​19385 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19578
• web: update @​goauthentik/api (cherry-pick #​19542 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19589
• web/forms: fix invalid date error for empty datetime-local inputs (cherry-pick #​19561 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19582
• endpoints: fix endpoints stage marked as enterprise (cherry-pick #​19607 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19610
• policies: fix Providers authentication_flow not used when set (cherry-pick #​19609 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19615
• providers/saml: fix structure of encrypted saml assertion (cherry-pick #​19592 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19613
• providers/saml: allow encryption certificates without private keys (cherry-pick #​19526 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19612
• sources/saml: Fix signature verification order to accommodate encrypted assertions (cherry-pick #​19593 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19614
• tests: improve e2e/integration test reliability (cherry-pick #​19540 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19611
• lib/sync/outgoing: handle deletions even if object does not exist in database (cherry-pick #​18968 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19617
• web/user: fix Firefox for Android infinite render loop in user library (cherry-pick #​19379 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19626
• web/maintenance: fix missing custom web component imports (cherry-pick #​18942 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19636
• web/a11y: Locale selector select styles, contrast. (cherry-pick #​19634 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19651
• web/maintenance: no unknown tag names (cherry-pick #​18944 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19637
• providers/oauth2: add logout+jwt token type for oidc logout token. (cherry-pick #​19554 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19675
• web/maintenance: no missing element type definitions (cherry-pick #​18950 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19638
• web/maintenance/no unknown attributes (part 1) (cherry-pick #​18970 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19639
• sources/saml: Set AuthnRequest ProtocolBinding to HTTP-POST instead of HTTP-Redirect (cherry-pick #​17378 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19649
• web/forms: fix forms not resetting state when modal closes (cherry-pick #​19562 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19635
• web/admin: fix brand form sending "undefined" string for blank default application (cherry-pick #​19658 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19682
• internal: fix incorrect metric calculation (cherry-pick #​19701 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19703
• sources/oauth: add fallback for id_token when profile URL is not available (cherry-pick #​19311 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19704
• core: return bad request when user is authenticated and not active (cherry-pick #​19706 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19710
• web/admin: fix impersonation form requesting data without being opened (cherry-pick #​19673 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19712
• web/sfe: downgrade bootstrap, add access denied test (cherry-pick #​19763 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19765
• root: update client-go generation (cherry-pick #​19762 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19791
• web/elements: reduce spacing between collapsible form groups (cherry-pick #​19627 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19640
• web/elements: stabilize dual-select status height (cherry-pick #​19734 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19776
• providers/scim: fix email validation mismatch (cherry-pick #​19848 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19853
• sources/saml: properly catch InvalidSignature exception (cherry-pick #​19641 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19650
• sources/oauth: Fix an issue where wechat may crash duing login. (cherry-pick #​18973 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19854
• admin/files: add centralized theme variable support for file URLs (cherry-pick #​19657 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19793
• web/table: align row action icons and tooltip color (cherry-pick #​19736 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19773
• web/admin: fix file upload not preserving extension for custom names with dots (cherry-pick #​19548 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19685
• web/admin: fix captcha stage provider selector not showing saved value (cherry-pick #​19555 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19656
• web: Session UI Config Lifecycle (cherry-pick #​19788 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19821
• web: Enforce challenge nullish types. (cherry-pick #​19768 to version-2025.12) by @​authentik-automation[bot] in goauthentik/authentik#19777

Full Changelog: goauthentik/authentik@version/2025.12.1...version/2025.12.2

v2025.12.1

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: bump to 2025.12.1 by @​authentik-automation[bot] in #​440

Full Changelog: goauthentik/helm@authentik-2025.12.0...authentik-2025.12.1

v2025.12.0

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: use debian:13-slim for PostgreSQL volume permissions by @​yolanv in #​434
• authentik: replace bitnami postgres exporter by @​BeryJu in #​435
• charts/authentik: add support for external Kubernetes secret by @​gthieleb in #​436
• charts/authentik: use read only root filesystem for postgresql by @​KoiFresh in #​427
• charts/authentik: bump to 2025.12.0 by @​authentik-automation[bot] in #​438

New Contributors

• @​yolanv made their first contribution in #​434
• @​gthieleb made their first contribution in #​436
• @​KoiFresh made their first contribution in #​427

Full Changelog: goauthentik/helm@authentik-2025.10.3...authentik-2025.12.0

v2025.10.3

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: remove redis by @​BeryJu in #​409
• chore(deps): update actions/checkout action to v6 by @​renovate[bot] in #​430
• ci: update chart-testing-action by @​rissson in #​432
• chore(deps): update docker.io/library/postgres docker tag to v17.7 by @​renovate[bot] in #​426
• chore(deps): update postgresql docker tag to v16.7.27 by @​renovate[bot] in #​393
• charts/authentik: bump to 2025.10.3 by @​authentik-automation[bot] in #​433

Full Changelog: goauthentik/helm@authentik-2025.10.2...authentik-2025.10.3

v2025.10.2

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• chore(deps): update helm/kind-action action to v1.13.0 by @​renovate[bot] in #​421
• bump to 2025.10.2 by @​BeryJu in #​428

Full Changelog: goauthentik/helm@authentik-2025.10.1...authentik-2025.10.2

v2025.10.1

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: bump to 2025.10.1 by @​authentik-automation[bot] in #​420

Full Changelog: goauthentik/helm@authentik-2025.10.0...authentik-2025.10.1

v2025.10.0

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• chore(deps): update dependency python to 3.14 by @​renovate[bot] in #​412
• charts/authentik: add automountServiceAccountToken value by @​FelixDobler in #​407
• chore(deps): update public.ecr.aws/artifacthub/ah docker tag to v1.22.0 by @​renovate[bot] in #​414
• charts/authentik: bump to 2025.10.0 by @​authentik-automation[bot] in #​417

New Contributors

• @​FelixDobler made their first contribution in #​407

Full Changelog: goauthentik/helm@authentik-2025.8.4...authentik-2025.10.0

v2025.8.4

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: bump to 2025.8.4 by @​authentik-automation[bot] in #​405

Full Changelog: goauthentik/helm@authentik-2025.8.3...authentik-2025.8.4

v2025.8.3

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: bump to 2025.8.3 by @​authentik-automation[bot] in #​398

Full Changelog: goauthentik/helm@authentik-2025.8.2...authentik-2025.8.3

v2025.8.2

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: Template PrometheRule's group additional annotations by @​nepomucen in #​394
• chore(deps): update actions/setup-python action to v6 by @​renovate[bot] in #​396
• charts/authentik: bump to 2025.8.2 by @​authentik-automation[bot] in #​397

New Contributors

• @​nepomucen made their first contribution in #​394

Full Changelog: goauthentik/helm@authentik-2025.8.1...authentik-2025.8.2

v2025.8.1

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

See https://docs.goauthentik.io/releases/2025.8/#fixed-in-202581

What's Changed

• charts/authentik: fix worker containerPorts by @​rissson in #​388
• charts/authentik: bump to 2025.8.1 by @​authentik-automation[bot] in #​389

Full Changelog: goauthentik/helm@authentik-2025.8.0...authentik-2025.8.1

v2025.8.0

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

See https://docs.goauthentik.io/releases/2025.8/

What's Changed

• charts/authentik: fix specifying multiple routes by @​Javex in #​372
• charts/authentik: Fix removed whitespace for additionalObjects by @​Javex in #​373
• charts/authentik: increase default probe timeouts from 1 to 3s by @​rissson in #​376
• chore(deps): update actions/checkout action to v5 by @​renovate[bot] in #​379
• README: generate versions directly by @​rissson in #​380
• chore(deps): update postgresql docker tag to v16.7.26 by @​renovate[bot] in #​360
• chore(deps): update ghcr.io/maxmind/geoipupdate docker tag to v7.1.1 by @​renovate[bot] in #​368
• charts/authentik: use dramatiq metrics by @​rissson in #​384
• chore(deps): update redis docker tag to v22 by @​renovate[bot] in #​378
• charts/authentik: use docker library images by @​rissson in #​385
• charts/authentik: bump to 2025.8.0 by @​authentik-automation[bot] in #​386

New Contributors

• @​Javex made their first contribution in #​372
• @​authentik-automation[bot] made their first contribution in #​386

Full Changelog: goauthentik/helm@authentik-2025.6.4...authentik-2025.8.0

v2025.6.4

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• bump to 2025.6.4 by @​BeryJu in #​370

Full Changelog: goauthentik/helm@authentik-2025.6.3...authentik-2025.6.4

v2025.6.3

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• bump to 2025.6.3 by @​BeryJu in #​366

Full Changelog: goauthentik/helm@authentik-2025.6.2...authentik-2025.6.3

v2025.6.2

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• bump to 2025.6.2 by @​gergosimonyi in #​365

Full Changelog: goauthentik/helm@authentik-2025.6.1...authentik-2025.6.2

v2025.6.1

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• bump to 2025.6.1 by @​rissson in #​363

Full Changelog: goauthentik/helm@authentik-2025.6.0...authentik-2025.6.1

v2025.6.0

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• ci: dependabot for helm dependencies by @​rissson in #​345
• ci: dependabot: try fixing helm path by @​rissson in #​346
• ci: replace dependabot with renovate by @​rissson in #​348
• chore(deps): update dependency python to 3.13 by @​renovate in #​351
• chore(deps): update public.ecr.aws/artifacthub/ah docker tag to v1.21.0 by @​renovate in #​353
• chore(deps): update redis docker tag to v21 by @​renovate in #​356
• chore(deps): update postgresql docker tag to v16.7.4 by @​renovate in #​352
• bump to 2025.6.0 by @​gergosimonyi in #​361

New Contributors

• @​renovate made their first contribution in #​351

Full Changelog: goauthentik/helm@authentik-2025.4.1...authentik-2025.6.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.