# authentik changelog

> An open-source identity provider.

- Vendor: Authentik Security
- Category: Developer Tools
- Official site: https://goauthentik.io
- Tracked by: What's New (https://whatsnew.fyi/product/authentik)
- Harvested from: GitHub (goauthentik/authentik)
- Entries below: 10 (newest first)

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

## Releases

### version/2026.8.0-rc6 — Release 2026.8.0-rc6

- Date: 2026-08-03
- Version: version/2026.8.0-rc6
- Original notes: https://github.com/goauthentik/authentik/releases/tag/version/2026.8.0-rc6
- Permalink: https://whatsnew.fyi/product/authentik/releases/version-2026.8.0-rc6
- Labels: Pre-release

- **fixed** — Fix intermittently failing throttling test in authenticator_validate stage
- **fixed** — Fix sentry-release access to metadata in CI

See https://next.goauthentik.io/docs/releases/2026.8


##### What's Changed
* stages/authenticator_validate: fix intermittnetly failing throttling test (cherry-pick #24568 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24708
* ci: sentry-release *needs* access to metadata. (cherry-pick #24710 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24711


**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2026.8.0-rc5...version/2026.8.0-rc6

### version/2026.8.0-rc5 — Release 2026.8.0-rc5

- Date: 2026-08-03
- Version: version/2026.8.0-rc5
- Original notes: https://github.com/goauthentik/authentik/releases/tag/version/2026.8.0-rc5
- Permalink: https://whatsnew.fyi/product/authentik/releases/version-2026.8.0-rc5
- Labels: Pre-release

- **fixed** — Fix image attestation in release publish CI

See https://next.goauthentik.io/docs/releases/2026.8


##### What's Changed
* ci: release publish: fix image attestation by @rissson in https://github.com/goauthentik/authentik/pull/24706


**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2026.8.0-rc4...version/2026.8.0-rc5

### version/2026.8.0-rc4 — Release 2026.8.0-rc4

- Date: 2026-08-03
- Version: version/2026.8.0-rc4
- Original notes: https://github.com/goauthentik/authentik/releases/tag/version/2026.8.0-rc4
- Permalink: https://whatsnew.fyi/product/authentik/releases/version-2026.8.0-rc4
- Labels: Pre-release

See https://next.goauthentik.io/docs/releases/2026.8


##### What's Changed
* website/docs: fix sidebar titles and ordering (cherry-pick #24051 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24700
* ci: release publish: fix metadata parsing by @rissson in https://github.com/goauthentik/authentik/pull/24703


**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2026.8.0-rc3...version/2026.8.0-rc4

### version/2026.8.0-rc3 — Release 2026.8.0-rc3

- Date: 2026-08-03
- Version: version/2026.8.0-rc3
- Original notes: https://github.com/goauthentik/authentik/releases/tag/version/2026.8.0-rc3
- Permalink: https://whatsnew.fyi/product/authentik/releases/version-2026.8.0-rc3
- Labels: Pre-release

- **changed** — Allow discovery to be deactivated in outgoing sync
- **fixed** — Hide plain action icons while loading in web interface
- **fixed** — Fix missing gh cli environment variable in release publish

See https://next.goauthentik.io/docs/releases/2026.8


##### What's Changed
* lib/sync/outgoing: allow discovery to be deactivated (cherry-pick #24667 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24678
* website/docs: Mark the release notes for 2026.8 as 'beta' (cherry-pick #24682 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24686
* ci: release tag: add validation that the workflow was started on the appropriate branch (cherry-pick #24676 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24690
* web: hide plain action icons while loading (cherry-pick #24618 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24688
* ci: release publish: fix missing gh cli env var by @rissson in https://github.com/goauthentik/authentik/pull/24695
* ci: release: rename major release to release family (cherry-pick #24691 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24697


**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2026.8.0-rc2...version/2026.8.0-rc3

### version/2026.8.0-rc2 — Release 2026.8.0-rc2

- Date: 2026-08-03
- Version: version/2026.8.0-rc2
- Original notes: https://github.com/goauthentik/authentik/releases/tag/version/2026.8.0-rc2
- Permalink: https://whatsnew.fyi/product/authentik/releases/version-2026.8.0-rc2
- Labels: Pre-release

- **fixed** — Limit request body size
- **fixed** — Fix group source connection source object
- **changed** — Rework SCIM discovery with pageSize
- **changed** — Do not include debug info for Rust release profile
- **fixed** — Expose authenticated flags correctly in current brand
- **added** — Support air-gapped maps
- **fixed** — Fix missing checkout in release publish
- **changed** — Split test job into 10 parallel jobs

See https://next.goauthentik.io/docs/releases/2026.8


##### What's Changed
* root: limit request body size (cherry-pick #24666 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24671
* core: fix group source connection source object (cherry-pick #24626 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24673
* providers/scim: rework discovery with pageSize (cherry-pick #24490 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24675
* root: don't include debug info for rust release profile (cherry-pick #24664 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24669
* brands: expose authenticated flags correct in current brand (cherry-pick #24577 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24597
* web, packages/geo, server/static: Air Gapped Maps Merge Branch (cherry-pick #24254 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24602
* ci: split test job into 10 (cherry-pick #24591 to version-2026.8) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24677
* ci: release publish: fix missing checkout by @rissson in https://github.com/goauthentik/authentik/pull/24684


**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2026.8.0-rc1...version/2026.8.0-rc2

### version/2026.8.0-rc1 — Release 2026.8.0-rc1

- Date: 2026-08-03
- Version: version/2026.8.0-rc1
- Original notes: https://github.com/goauthentik/authentik/releases/tag/version/2026.8.0-rc1
- Permalink: https://whatsnew.fyi/product/authentik/releases/version-2026.8.0-rc1
- Labels: Pre-release

See https://next.goauthentik.io/docs/releases/2026.8

### version/2026.5.6 — Release 2026.5.6

- Date: 2026-07-22
- Version: version/2026.5.6
- Original notes: https://github.com/goauthentik/authentik/releases/tag/version/2026.5.6
- Permalink: https://whatsnew.fyi/product/authentik/releases/version-2026.5.6

- **fixed** — Revert locale-driven flow re-request from FlowExecutor
- **changed** — Drop curl and runit from container lifecycle
- **fixed** — Pass populate_policies in enterprise fleet connector endpoints
- **fixed** — Use positive state filter for pending messages in django-dramatiq-postgres broker
- **fixed** — Fix auth schema for device endpoints in agent connectors
- **fixed** — Filter policy engine
- **changed** — Make storage file paths overwritable via environment variables
- **fixed** — Fix hcaptcha height in captcha stages
- **fixed** — Exclude read-only id from group PATCH payload and fix null-members add check in SCIM provider
- **fixed** — Fix enum warning when de-serializing in SCIM provider
- **fixed** — Fix non-schema compliant group member removal in SCIM provider
- **fixed** — Fix make gen-diff command
- **fixed** — Form friendly error on uniqueness constraint
- **fixed** — Fix app view failing when no events permissions in web admin
- **fixed** — Fix make gen-changelog
- **added** — In-process per-IP rate throttle

See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202656


##### What's Changed
* web/flow: revert locale-driven flow re-request from FlowExecutor (cherry-pick #24050 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24068
* lifecycle/container: drop curl and runit (cherry-pick #24008 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24114
* enterprise/endpoints/connectors/fleet: pass populate_policies (cherry-pick #24108 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24112
* packages/django-dramatiq-postgres/broker: use positive state filter for pending messages (cherry-pick #24074 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24166
* endpoints/connectors/agent: fix auth schema for device endpoints (cherry-pick #24164 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24167
* policies: filter policy engine (cherry-pick #24025 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24168
* website/docs: cleanup 07-12: refresh contributor guidance (cherry-pick #23969 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24157
* internal/config: make storage file paths overwritable via env vars (cherry-pick #24177 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24220
* stages/captcha: fix hcaptcha height (#20901) by @gergosimonyi in https://github.com/goauthentik/authentik/pull/24216
* providers/scim: exclude read-only id from group PATCH payload and fix null-members add check (cherry-pick #23950 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24227
* providers/scim: fix enum warning when de-serializing (cherry-pick #23553 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24231
* providers/scim: fix non-schema compliant group member removal (cherry-pick #23800 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24229
* root: fix make gen-diff command (cherry-pick #22548 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24121
* core: bump pyjwt from 2.11.0 to 2.13.0 (cherry-pick #22562 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22570
* core: Form friendly error on uniqueness constraint. (cherry-pick #23864 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23881
* web/admin: fix app view failing when no events permissions (cherry-pick #24131 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24252
* root: fix make gen-changelog (cherry-pick #24122 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24260
* root: in-process per-IP rate throttle (#23015) by @gergosimonyi in https://github.com/goauthentik/authentik/pull/24217


**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2026.5.5...version/2026.5.6

### version/2026.5.5 — Release 2026.5.5

- Date: 2026-07-15
- Version: version/2026.5.5
- Original notes: https://github.com/goauthentik/authentik/releases/tag/version/2026.5.5
- Permalink: https://whatsnew.fyi/product/authentik/releases/version-2026.5.5

- **fixed** — Handle exception in connector controller sync setup
- **fixed** — Fix race condition in continuous login and support source stages in authentication flows
- **fixed** — Fix table refresh button not refreshing table data
- **fixed** — Fix Log Viewer Intersection Observer
- **fixed** — Fix ungrammatical expiry time in password reset templates
- **fixed** — Improve error display when error doesn't conform to SCIM schema
- **fixed** — Fix discover running for each page in outgoing sync
- **added** — Add number and boolean support in AKQL queries on JSON fields
- **changed** — Improve id_token validation for Apple source
- **fixed** — Close unusable PostgreSQL connections in django-dramatiq-postgres broker
- **security** — Apply security patch 1822
- **security** — Apply security patch 1817
- **security** — Apply security patch 1887
- **security** — Apply security patch 1919
- **security** — Apply security patch 1934
- **added** — Add usage totals to licensing in admin interface

See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202655


##### What's Changed
* tests/openid_conformance: migrate to upstream images (cherry-pick #23828 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23834
* endpoints: handle exception in connector controller sync setup (cherry-pick #23852 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23854
* web/flows: fix race condition in continuous login and support source stages in authentication flows (cherry-pick #23049 to version-2026.5) by @GirlBossRush in https://github.com/goauthentik/authentik/pull/23558
* web: fix table refresh button not refreshing table data (cherry-pick #23780 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23878
* web/admin: licensing: add usage totals (cherry-pick #23665 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23668
* web: Fix Log Viewer Intersection Observer. (cherry-pick #23861 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23949
* stages/email: fix ungrammatical expiry time in password reset templates (cherry-pick #22758 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23952
* website/docs: cleanup 07-12: update integration routes (cherry-pick #23960 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23975
* website/docs: cleanup 07-12: update documentation URLs (cherry-pick #23961 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23976
* website/docs: cleanup 07-12: fix Admin interface tab label (cherry-pick #23965 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23982
* providers/scim: improve error display when error doesn't conform to scim schema (cherry-pick #23955 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23957
* lib/sync/outgoing: fix discover running for each page (cherry-pick #24016 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24019
* website/docs: 2026.5: remove preview tag from mtls stage doc by @dominic-r in https://github.com/goauthentik/authentik/pull/23981
* api/search: add number and boolean support in AKQL queries on JSON fields (#23418) (cherry-pick #24028 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24033
* sources/oauth: improve id_token validation for apple source (cherry-pick #24017 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24020
* packages/django-dramatiq-postgres/broker: close unusable PostgreSQL connections (cherry-pick #24023 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24035
* security: automated internal backport of patch 1822.sec.patch to authentik-2026.5 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/24059
* security: automated internal backport of patch 1817.sec.patch to authentik-2026.5 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/24058
* security: automated internal backport of patch 1887.sec.patch to authentik-2026.5 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/24060
* security: automated internal backport of patch 1919.sec.patch to authentik-2026.5 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/24061
* security: automated internal backport of patch 1934.sec.patch to authentik-2026.5 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/24062
* website/docs: release notes for 2026.2.6 (cherry-pick #24069 t

_[Truncated at 4000 characters — full notes: https://github.com/goauthentik/authentik/releases/tag/version/2026.5.5]_

### version/2026.2.6 — Release 2026.2.6

- Date: 2026-07-15
- Version: version/2026.2.6
- Original notes: https://github.com/goauthentik/authentik/releases/tag/version/2026.2.6
- Permalink: https://whatsnew.fyi/product/authentik/releases/version-2026.2.6

- **fixed** — Fix discover running for each page in outgoing sync
- **fixed** — Improve id_token validation for apple source
- **fixed** — Close unusable PostgreSQL connections in django-dramatiq-postgres broker
- **security** — Apply security patch 1919
- **security** — Apply security patch 1822
- **security** — Apply security patch 1934
- **security** — Apply security patch 1887
- **security** — Apply security patch 1817

See https://docs.goauthentik.io/docs/releases/2026.2#fixed-in-202626


##### What's Changed
* tests/openid_conformance: migrate to upstream images (cherry-pick #23828 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23835
* lib/sync/outgoing: fix discover running for each page (cherry-pick #24016 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24018
* sources/oauth: improve id_token validation for apple source (cherry-pick #24017 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24021
* packages/django-dramatiq-postgres/broker: close unusable PostgreSQL connections (cherry-pick #24023 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24034
* security: automated internal backport of patch 1919.sec.patch to authentik-2026.2 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/24056
* security: automated internal backport of patch 1822.sec.patch to authentik-2026.2 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/24054
* security: automated internal backport of patch 1934.sec.patch to authentik-2026.2 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/24057
* security: automated internal backport of patch 1887.sec.patch to authentik-2026.2 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/24055
* security: automated internal backport of patch 1817.sec.patch to authentik-2026.2 by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/24053
* website/docs: release notes for 2026.2.6 (cherry-pick #24069 to version-2026.2) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/24072


**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2026.2.5...version/2026.2.6

### version/2026.5.4 — Release 2026.5.4

- Date: 2026-07-08
- Version: version/2026.5.4
- Original notes: https://github.com/goauthentik/authentik/releases/tag/version/2026.5.4
- Permalink: https://whatsnew.fyi/product/authentik/releases/version-2026.5.4

- **added** — Add post logout and logout URLs to DokuWiki integration
- **added** — Add additional SCIM provider documentation
- **added** — Document SCIM source trust model and security implications
- **added** — Add Splunk event forwarding documentation
- **added** — Add improved AKQL documentation
- **fixed** — Fix user list default paths
- **fixed** — Fix stale flow locale and unsynchronized locale selector options
- **fixed** — Fix stale clipboard tokens and untranslated labels
- **fixed** — Fix invitation emails ignoring selected template
- **fixed** — Fix passkey autofill dropdown not showing on the identification stage
- **fixed** — Fix broken custom email template example in documentation
- **fixed** — Fix naive datetime warning in django-postgres-cache
- **fixed** — Fix race condition in broker causing completed tasks to be repeated
- **fixed** — Fix spacing issues in admin wizard
- **changed** — Improve email authenticator documentation
- **changed** — Clarify user and group filtering on SCIM provider
- **changed** — Allow failures during SCIM discovery
- **changed** — Account for users with no email during SCIM discovery
- **changed** — Skip cache invalidation on user last_login update
- **changed** — Optimize database queries for monitoring and caching operations

See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202654


##### What's Changed
* website/integrations: dokuwiki: add post logout and logout urls (cherry-pick #22984 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22985
* website/docs: additional scim provider docs (cherry-pick #22135 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23003
* root: bump pyo3 (cherry-pick #23036 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23038
* website/docs: document SCIM source trust model and security implications (cherry-pick #22535 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23125
* web: Fix user list default paths. (cherry-pick #23062 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23127
* web/i18n: Fix stale flow locale, unsynchronized locale selector options (cherry-pick #23007 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23148
* web: Fix stale clipboard tokens, untranslated labels (cherry-pick #23063 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23143
* website/docs: add Splunk event forwarding docs (cherry-pick #22938 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23163
* core: fix Invitation Emails Ignoring Selected Template (cherry-pick #23122 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23133
* packages/django-dramatiq-postgres/broker: purge at start of loop to ensure it runs (cherry-pick #23185 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23188
* web/stages/identification: Fix passkey autofill dropdown not showing on the identification stage (cherry-pick #23187 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23189
* website/docs: fix broken custom email template example (cherry-pick #23191 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23192
* packages/django-postgres-cache: remove custom get_or_set implementation (cherry-pick #23182 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23213
* website: migrate brand assets to pkg (cherry-pick #22336 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23222
* packages/django-postgres-cache: fix naive datetime warning (cherry-pick #23033 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23235
* packages/django-dramatiq-postgres/broker: fix race condition in broker causing completed tasks to be repeated (cherry-pick #23218 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23257
* website/docs: improve email authenticator docs (cherry-pick #23226 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23263
* website/docs: remove colons from release notes (cherry-pick #23311 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23312
* website/docs: clarify user and group filtering on scim provider (cherry-pick #22502 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23358
* root: Fix SECURITY.md versions (cherry-pick #23370 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23372
* website/docs: sources: remove support_level labels from docs (cherry-pick #23389 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23391
* core: bump goa

_[Truncated at 4000 characters — full notes: https://github.com/goauthentik/authentik/releases/tag/version/2026.5.4]_