version/2026.5.4
Release 2026.5.4
Added 5
- Add post logout and logout URLs to DokuWiki integration
- Add additional SCIM provider documentation
- Document SCIM source trust model and security implications
- Add Splunk event forwarding documentation
- Add improved AKQL documentation
Changed 6
- Improve email authenticator documentation
- Clarify user and group filtering on SCIM provider
- Allow failures during SCIM discovery
- Account for users with no email during SCIM discovery
- Skip cache invalidation on user last_login update
- Optimize database queries for monitoring and caching operations
Fixed 9
- Fix user list default paths
- Fix stale flow locale and unsynchronized locale selector options
- Fix stale clipboard tokens and untranslated labels
- Fix invitation emails ignoring selected template
- Fix passkey autofill dropdown not showing on the identification stage
- Fix broken custom email template example in documentation
- Fix naive datetime warning in django-postgres-cache
- Fix race condition in broker causing completed tasks to be repeated
- Fix spacing issues in admin wizard
See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202654
What's Changed
- website/integrations: dokuwiki: add post logout and logout urls (cherry-pick #22984 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22985
- website/docs: additional scim provider docs (cherry-pick #22135 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23003
- root: bump pyo3 (cherry-pick #23036 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23038
- website/docs: document SCIM source trust model and security implications (cherry-pick #22535 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23125
- web: Fix user list default paths. (cherry-pick #23062 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23127
- web/i18n: Fix stale flow locale, unsynchronized locale selector options (cherry-pick #23007 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23148
- web: Fix stale clipboard tokens, untranslated labels (cherry-pick #23063 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23143
- website/docs: add Splunk event forwarding docs (cherry-pick #22938 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23163
- core: fix Invitation Emails Ignoring Selected Template (cherry-pick #23122 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23133
- packages/django-dramatiq-postgres/broker: purge at start of loop to ensure it runs (cherry-pick #23185 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23188
- web/stages/identification: Fix passkey autofill dropdown not showing on the identification stage (cherry-pick #23187 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23189
- website/docs: fix broken custom email template example (cherry-pick #23191 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23192
- packages/django-postgres-cache: remove custom get_or_set implementation (cherry-pick #23182 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23213
- website: migrate brand assets to pkg (cherry-pick #22336 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23222
- packages/django-postgres-cache: fix naive datetime warning (cherry-pick #23033 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23235
- packages/django-dramatiq-postgres/broker: fix race condition in broker causing completed tasks to be repeated (cherry-pick #23218 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23257
- website/docs: improve email authenticator docs (cherry-pick #23226 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23263
- website/docs: remove colons from release notes (cherry-pick #23311 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23312
- website/docs: clarify user and group filtering on scim provider (cherry-pick #22502 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23358
- root: Fix SECURITY.md versions (cherry-pick #23370 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23372
- website/docs: sources: remove support_level labels from docs (cherry-pick #23389 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23391
- core: bump goauthentik/fips-debian and fips-python in /lifecycle/container (cherry-pick #23362 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23384
- website/docs: fix 2026.5 release notes mentioning docker-compose.yml (cherry-pick #23385 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23400
- providers/scim: allow failures during discovery (cherry-pick #23357 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23365
- website/docs: Add improved akql docs (cherry-pick #22693 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23497
- providers/scim: account for users with no email during discovery (cherry-pick #23417 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23485
- web/admin: fix spacing issues in wizard (cherry-pick #23484 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23488
- policies: skip cache invalidation on User last_login update (cherry-pick #23159 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23421
- tasks: avoid useless query on monitoring_set (cherry-pick #23161 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23424
- packages/django-postgres-cache: avoid regex queries when listing keys if possible (cherry-pick #23160 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23423
- brands: select_related models accessed in the hot path (cherry-pick #23162 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23524
- sources/ldap: avoid re-creating connections to LDAP server (cherry-pick #23520 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23525
- tasks/schedules: fix paused schedules getting unpaused on startup (cherry-pick #23521 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23527
- core: preserve encoded avatar URLs (cherry-pick #23225 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23394
- providers/*: fix missing declaration for can_discover for outgoing sync providers (cherry-pick #23035 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23233
- website/docs: improve service account docs (cherry-pick #22145 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22885
- website: upgrade postman dep to fix pipeline by @PeshekDotDev in https://github.com/goauthentik/authentik/pull/23571
- core: bump pydantic from 2.13.3 to 2.13.4 (cherry-pick #22207 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23570
- providers/oauth: Properly return error via post and for request objects (cherry-pick #23037 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23529
- docs: Americanize and minor fixes (cherry-pick #22600 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/22604
- website/docs: clean up source docs (cherry-pick #23374 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23397
- website/docs: add expression policy example for welcome emails on user creation (cherry-pick #23486 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23579
- website/docs: update release notes for 2026.5.4 (cherry-pick #23576 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23586
- tasks: add pre_delete for TasksModel to avoid OOM when deleting object with many tasks linked (cherry-pick #23664 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23666
- packages/ak-common/config: coerce file:// and env:// values to their native type (cherry-pick #23758 to version-2026.5) by @rissson in https://github.com/goauthentik/authentik/pull/23759
- core: handle missing tenant in setup migration (cherry-pick #23034 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23762
- sources/ldap: optimize the connection endpoints (cherry-pick #23761 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23765
- providers/ldap: remove incorrect validation for code authenticator extraction (cherry-pick #23006 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23767
- root: update crossbeam-epoch (cherry-pick #23794 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23795
- ci: remove GHA-based cherry-pick (cherry-pick #23801 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23803
- website/docs: add release notes for
2026.2.5(cherry-pick #23816 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23820 - website: upgrade postman again to fix pipeline by @PeshekDotDev in https://github.com/goauthentik/authentik/pull/23824
- web: Fix outline selector, lack of outline on focused checkboxes. (cherry-pick #23260 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23825
- stages/authenticator_webauthn: disable prevent_duplicate_devices by default (cherry-pick #23823 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23826
- web, core: Fix server-side message race condition, type mismatch. (cherry-pick #23151 to version-2026.5) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/23584
- web: Invitation Wizard Clean Up, Form Validation Fixes (cherry-pick #23316 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23811
- website/docs: update release notes for 2026.5.4 again (cherry-pick #23836 to version-2026.5) by @authentik-cherry-pick[bot] in https://github.com/goauthentik/authentik/pull/23838
Full Changelog: https://github.com/goauthentik/authentik/compare/version/2026.5.3...version/2026.5.4