2797d26b93
core: Add noscript.
2025-04-17 01:58:14 +02:00
51609d696d
policies/geoip: fix result when only dynamic results are used ( #14107 )
2025-04-16 15:50:26 +00:00
c0d08df161
core: bump opentelemetry-api from 1.32.0 to v1.32.1 ( #14102 )
2025-04-16 15:50:10 +00:00
643a97f0a5
core: bump rsa from 4.9 to v4.9.1 ( #14103 )
2025-04-16 09:51:53 -04:00
155a31fd70
sources/oauth: introduce authorization code auth method ( #14034 )
...
Co-authored-by: Rsgm <rsgm123@gmail.com >
2025-04-16 13:00:08 +00:00
c6f9d5df7b
core, web: update translations ( #14096 )
...
Co-authored-by: rissson <18313093+rissson@users.noreply.github.com >
2025-04-16 13:16:06 +02:00
ea85331a7e
web/api: Fix Hoisted exports across entrypoints. Update Axios. ( #14089 )
...
* web/api: Fix issue where hoisted exports across entrypoints do not
order.
* web/api: Override OpenAPI transitive dep.
2025-04-15 20:09:41 +02:00
4f4c5253dd
translate: Updates for file web/xliff/en.xlf in fr ( #14091 )
...
Translate web/xliff/en.xlf in fr
100% translated source file: 'web/xliff/en.xlf'
on 'fr'.
Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
2025-04-15 17:11:40 +00:00
83b2fc36df
translate: Updates for file locale/en/LC_MESSAGES/django.po in fr ( #14090 )
...
Translate locale/en/LC_MESSAGES/django.po in fr
100% translated source file: 'locale/en/LC_MESSAGES/django.po'
on 'fr'.
Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
2025-04-15 17:08:09 +00:00
d99d2b8bdc
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans ( #14087 )
...
Translate django.po in zh-Hans
100% translated source file: 'django.po'
on 'zh-Hans'.
Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
2025-04-15 18:40:19 +02:00
9b96d04b3a
translate: Updates for file web/xliff/en.xlf in zh-Hans ( #14086 )
...
Translate web/xliff/en.xlf in zh-Hans
100% translated source file: 'web/xliff/en.xlf'
on 'zh-Hans'.
Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
2025-04-15 18:40:02 +02:00
ca5b99eb16
translate: Updates for file web/xliff/en.xlf in zh_CN ( #14084 )
...
Translate web/xliff/en.xlf in zh_CN
100% translated source file: 'web/xliff/en.xlf'
on 'zh_CN'.
Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
2025-04-15 18:39:49 +02:00
4c1676e97c
translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN ( #14083 )
...
Translate locale/en/LC_MESSAGES/django.po in zh_CN
100% translated source file: 'locale/en/LC_MESSAGES/django.po'
on 'zh_CN'.
Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
2025-04-15 18:39:36 +02:00
81855cf2fe
core: bump google-auth from 2.38.0 to v2.39.0 ( #14076 )
2025-04-15 08:32:54 -04:00
bd904027be
core: bump sentry-sdk from 2.25.1 to v2.26.1 ( #14079 )
2025-04-15 08:32:14 -04:00
0ffc97db15
core: bump prompt-toolkit from 3.0.50 to v3.0.51 ( #14078 )
2025-04-15 08:31:41 -04:00
2c515b1e17
core: bump boto3 from 1.37.33 to v1.37.34 ( #14074 )
2025-04-15 08:31:12 -04:00
f8900fbaf3
core: bump msgraph-sdk from 1.27.0 to v1.28.0 ( #14077 )
2025-04-15 08:30:44 -04:00
0f4a98d9c6
website/docs: fix minor typo in working_with_policies.md ( #14071 )
...
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-04-15 11:40:23 +00:00
8853f25b45
core, web: update translations ( #14064 )
...
Co-authored-by: rissson <18313093+rissson@users.noreply.github.com >
2025-04-15 13:26:02 +02:00
1c40f7b95a
stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs ( #14065 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
2025-04-15 13:25:13 +02:00
9b5d6ec1af
core: bump goauthentik.io/api/v3 from 3.2025024.4 to 3.2025024.6 ( #14069 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-15 13:24:28 +02:00
36d29a9ae1
Small fix for Actual-Budget wiki guide ( #14066 )
...
Remove ending slash from redirect uri
Signed-off-by: James Armstrong <32995055+jmarmstrong1207@users.noreply.github.com >
2025-04-15 09:43:59 +01:00
0606b1aba4
root: support db pool ( #13534 )
2025-04-14 16:05:31 +00:00
03d5dad867
rbac: add InitialPermissions ( #13795 )
...
* add `InitialPermissions` model to RBAC
This is a powerful construct between Permission and Role to set initial
permissions for newly created objects.
* use safer `request.user`
* fixup! use safer `request.user`
* force all self-defined serializers to descend from our custom one
See https://github.com/goauthentik/authentik/pull/10139
* reorganize initial permission assignment
* fixup! reorganize initial permission assignment
2025-04-14 17:55:49 +02:00
38a9e46af3
web: bump API Client version ( #14058 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
2025-04-14 17:24:47 +02:00
5eb848e376
core: Bump django from 5.0.14 to 5.1.8 ( #14059 )
...
Bump django from 5.0.14 to 5.1.8
2025-04-14 14:54:58 +00:00
61a293daad
core: bump django-rest-framework from 3.14.0 to 3.16.0 ( #14057 )
...
upgrade `django-rest-framework` to `3.16.0`
The reverted commit is purely an optimization which unfortunately breaks authentik, specifically Blueprints. It adds `getattr(serializer.instance, field)` to a validator. If `field` is a `RelatedObject`, that invocation queries the database.
When authentik creates objects using Blueprints, it doesn't place related objects into the database before the validator tries to get them from there, so with the reverted commit, it produces `RelatedObjectDoesNotExist`.
Perhaps a long-term solution is to revise how Blueprints work, or perhaps it is to change upstream. But in the meantime, Django 5.0 support ended and upgrading to Django 5.1 requires an upgrade of `django-rest-framework` to `3.16.0`, hence this workaround.
See
- https://github.com/encode/django-rest-framework/pull/9154
- https://github.com/encode/django-rest-framework/issues/9358
- https://github.com/encode/django-rest-framework/pull/9482
- https://github.com/encode/django-rest-framework/pull/9483
2025-04-14 16:24:11 +02:00
edf3300944
policies/reputation: limit reputation score ( #14008 )
...
* add limits to reputation score
* limit reputation score limits
Upper to non-negative, Lower to non-positive
* simplify tests
* "fix" bandit false-positives
* move magic numbers to constants
Is it too much to ask for a world in which I can just import these
straight from Python?
2025-04-14 14:18:59 +00:00
5d9c40eac8
ci: fix api-py-publish by disabling poetry cache ( #14010 )
2025-04-14 16:18:31 +02:00
6ebfbcb66e
core: bump goauthentik/fips-python from 3.12.9-slim-bookworm-fips to 3.12.10-slim-bookworm-fips ( #14044 )
2025-04-14 08:15:20 -06:00
bf0235c113
ci: add NPM packages publish ( #13974 )
...
Co-authored-by: Teffen Ellis <teffen@nirri.us >
2025-04-14 08:14:17 -06:00
895cd23b57
root: add packages/ to codeowners ( #13975 )
2025-04-14 08:05:09 -06:00
c908d9e95e
providers/oauth2, rac: make sure tokens are revoked after session deletion ( #14011 )
2025-04-14 15:48:39 +02:00
a07fd8d54b
core: bump multidict from 6.4.2 to v6.4.3 ( #14051 )
2025-04-14 13:26:50 +00:00
39a46a6dc4
core: bump uvicorn from 0.34.0 to v0.34.1 ( #14056 )
2025-04-14 13:26:10 +00:00
ad71960d77
core: bump typing-extensions from 4.13.1 to v4.13.2 ( #14055 )
2025-04-14 13:04:16 +00:00
2a384511f5
core: bump ruff from 0.11.4 to v0.11.5 ( #14053 )
2025-04-14 13:03:52 +00:00
4dcc104947
core: bump boto3 from 1.37.31 to v1.37.33 ( #14045 )
2025-04-14 09:02:05 -04:00
71fe526e47
core: bump opentelemetry-api from 1.31.1 to v1.32.0 ( #14052 )
2025-04-14 09:01:39 -04:00
03e3f516ac
core: bump httpcore from 1.0.7 to v1.0.8 ( #14050 )
2025-04-14 13:00:58 +00:00
3b59333246
core: bump google-api-python-client from 2.166.0 to v2.167.0 ( #14048 )
2025-04-14 13:00:20 +00:00
4e800c14cb
core: bump googleapis-common-protos from 1.69.2 to v1.70.0 ( #14049 )
2025-04-14 12:59:54 +00:00
789b29a3e7
core: bump debugpy from 1.8.13 to v1.8.14 ( #14047 )
2025-04-14 12:59:21 +00:00
857b6e63a0
root: prevent docker-compose up when secret key is missing ( #14043 )
2025-04-14 12:56:41 +00:00
edc937dd78
core: bump goauthentik.io/api/v3 from 3.2025024.2 to 3.2025024.4 ( #14042 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-14 14:49:32 +02:00
d98b6f29d4
core: bump github.com/sethvargo/go-envconfig from 1.1.1 to 1.2.0 ( #14041 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-14 14:49:17 +02:00
53ba2a0ca8
core, web: update translations ( #14037 )
...
Co-authored-by: rissson <18313093+rissson@users.noreply.github.com >
2025-04-14 14:40:38 +02:00
ae364292e6
website: Port WWW theme to docs site. Prep for package. ( #13962 )
...
Update sidebar.css
Signed-off-by: Teffen Ellis <592134+GirlBossRush@users.noreply.github.com >
website/docs: Update paths.
website/docs: Use package theme.
2025-04-12 01:31:57 +02:00
f15bc2df97
translate: Updates for file locale/en/LC_MESSAGES/django.po in nl [Manual Sync] ( #14026 )
...
Translate django.po in nl [Manual Sync]
80% of minimum 75% translated source file: 'django.po'
on 'nl'.
Sync of partially translated files:
untranslated content is included with an empty translation
or source language content depending on file format
Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
2025-04-11 15:55:33 +00:00
