website/docs: finalize release notes for 2025.6 (#14854)

* remove internal changes from release notes

* add late additions to release notes

* remove release candidate notice from `2025.6`

* rotate supported versions

* rotate releases in sidebar

* Revert "rotate supported versions"

This reverts commit eea9d03e1d.

I'd like to do the release tonight, but I can't merge this because it
needs a review from @teams/security. I'll open a separate PR for it.

website/docs/releases/2025/v2025.6.md

@@ -3,12 +3,6 @@ title: Release 2025.6
 slug: "/releases/2025.6"
 ---
 
-:::note
-2025.6 has not been released yet! We're publishing these release notes as a preview of what's to come, and for our awesome beta testers trying out release candidates.
-
-To try out the release candidate, replace your Docker image tag with the latest release candidate number, such as 2025.6.0-rc1. You can find the latest one in [the latest releases on GitHub](https://github.com/goauthentik/authentik/releases). If you don't find any, it means we haven't released one yet.
-:::
-
 ## Highlights
 
 - **mTLS Stage**: :ak-enterprise The Mutual TLS stage provides support for mTLS, a standard protocol that uses certificates for mutual authentication between a client and a server.
@@ -83,12 +77,6 @@ helm upgrade authentik authentik/authentik -f values.yaml --version ^2025.6
 ## Minor changes/fixes
 
 - brands: fix CSS Migration not updating brands (#14306)
-- ci: add dependencies label to generated PRs (#14569)
-- ci: cleanup post uv migration (#13538)
-- ci: test with postgres 17 (#13967)
-- ci: Update packages-npm-publish.yml (#14701)
-- ci: use dependabot for compose correctly? (#14340)
-- ci: use dependabot for docker-compose files (#14336)
 - core: fix session migration when old session can't be loaded (#14466)
 - core: fix unable to create group if no enable_group_superuser permission is given (#14510)
 - core: Migrate permissions before deleting OldAuthenticatedSession (#14788)
@@ -98,8 +86,7 @@ helm upgrade authentik authentik/authentik -f values.yaml --version ^2025.6
 - enterprise/stages: Add MTLS stage (#14296)
 - enterprise/stages/mtls: improve certificate validation (#14582)
 - enterprise/stages/mtls: update go & web client, fix py client generation (#14576)
-- ESBuild Plugin: Setup and usage docs. (#14720)
+- lib/sync: fix static incorrect label of pages (#14851)
-- esbuild-plugin-live-reload: Publish. (#14624)
 - lib/sync/outgoing: reduce number of db queries made (#14177)
 - lib/sync/outgoing: sync in parallel (#14697)
 - lifecycle: fix ak dump_config (#14445)
@@ -107,6 +94,7 @@ helm upgrade authentik authentik/authentik -f values.yaml --version ^2025.6
 - outposts: fix tmpdir in containers not being set (#14444)
 - providers/ldap: retain binder and update users instead of re-creating (#14735)
 - providers/proxy: kubernetes outpost: fix reconcile when ingress class name changed (#14612)
+- providers/rac: apply ConnectionToken scoped-settings last (#14838)
 - rbac: add `name` to Permissions search (#14269)
 - rbac: fix RoleObjectPermissionTable not showing `add_user_to_group` (#14312)
 - root: backport SFE Build fix (#14495)
@@ -124,9 +112,6 @@ helm upgrade authentik authentik/authentik -f values.yaml --version ^2025.6
 - tests/e2e: add test for authentication flow in compatibility mode (#14392)
 - tests/e2e: fix flaky SAML Source test (#14708)
 - web, website: update browserslist (#14386)
-- web: (ESLint) Consistent use of triple-equals. (#14554)
-- web: (ESLint) No else return (#14558)
-- web: (ESLint) Use dot notation. (#14557)
 - web: Add specific Storybook dependency. (#14719)
 - web: Clean up browser-only module imports that crash WebDriverIO. (#14330)
 - web: cleanup/loading attribute always true (#14288)
@@ -149,9 +134,6 @@ helm upgrade authentik authentik/authentik -f values.yaml --version ^2025.6
 - web/admin: prevent default logo flashing in admin interface (#13960)
 - web/flows: update default flow background (#14769)
 - web/flows/sfe: fix global background image not being loaded (#14442)
-- web/NPM Workspaces: ESbuild version cleanup (#14541)
-- web/NPM Workspaces: Prep ESBuild plugin for publish. (#14552)
-- web/NPM Workspaces: TypeScript API Client TSConfig. (#14555)
 
 ## API Changes
 

website/sidebars/docs.mjs

@@ -10,13 +10,14 @@ import { generateVersionDropdown } from "../src/utils.js";
  * @type {SidebarItemConfig[]}
  */
 const releases = [
+    "releases/2025/v2025.6",
     "releases/2025/v2025.4",
     "releases/2025/v2025.2",
-    "releases/2024/v2024.12",
     {
         type: "category",
         label: "Previous versions",
         items: [
+            "releases/2024/v2024.12",
             "releases/2024/v2024.10",
             "releases/2024/v2024.8",
             "releases/2024/v2024.6",