Release 2024.4.2

See https://docs.goauthentik.io/docs/releases/2024.4#fixed-in-202442

What's Changed

• sources/oauth: fix OAuth Client sending token request incorrectly (cherry-pick #9474) by @gcp-cherry-pick-bot in #9475
• flows: fix execute API endpoint (cherry-pick #9478) by @gcp-cherry-pick-bot in #9481
• events: ensure all models' str can be called without any further lookups (cherry-pick #9480) by @gcp-cherry-pick-bot in #9485
• web/flows: fix missing fallback for flow logo (cherry-pick #9487) by @gcp-cherry-pick-bot in #9492
• core: only prefetch related objects when required (cherry-pick #9476) by @gcp-cherry-pick-bot in #9510
• web: Add missing integrity hashes to package-lock.json by @jvanbruegge in #9527
• lifecycle: close database connection after migrating (cherry-pick #9516) by @gcp-cherry-pick-bot in #9531
• providers/saml: fix ecdsa support (cherry-pick #9537) by @gcp-cherry-pick-bot in #9544
• web/flows: fix error when enrolling multiple WebAuthn devices consecutively (cherry-pick #9545) by @gcp-cherry-pick-bot in #9547
• providers/scim: fix time_limit not set correctly (cherry-pick #9546) by @gcp-cherry-pick-bot in #9553
• enterprise/audit: fix audit logging with m2m relations (cherry-pick #9571) by @gcp-cherry-pick-bot in #9572
• core: fix source_flow_manager saving user-source connection too early (cherry-pick #9559) by @gcp-cherry-pick-bot in #9578
• providers/scim: fix SCIM ID incorrectly used as primary key (cherry-pick #9557) by @gcp-cherry-pick-bot in #9579
• tenants: fix scheduled tasks not running on default tenant (cherry-pick #9583) by @gcp-cherry-pick-bot in #9586
• core: fix task clean_expiring_models removing valid sessions with using database storage (cherry-pick #9598) by @gcp-cherry-pick-bot in #9601
• core: fix condition in task clean_expiring_models (cherry-pick #9603) by @gcp-cherry-pick-bot in #9604
• sources/scim: fix duplicate groups and invalid schema (cherry-pick #9466) by @gcp-cherry-pick-bot in #9606
• website/docs: prepare 2024.4.2 release notes (cherry-pick #9555) by @gcp-cherry-pick-bot in #9624

Full Changelog: version/2024.4.1...version/2024.4.2

Release 2024.4.1

See https://docs.goauthentik.io/docs/releases/2024.4#fixed-in-202441

What's Changed

• web: markdown: display markdown even when frontmatter is missing (cherry-pick #9404) by @gcp-cherry-pick-bot in #9405
• sources/oauth: ensure all UI sources return a valid source (cherry-pick #9401) by @gcp-cherry-pick-bot in #9406
• stages/identification: don't check source component (cherry-pick #9410) by @gcp-cherry-pick-bot in #9420
• web: Add resolved and integrity fields back to package-lock.json (cherry-pick #9419) by @gcp-cherry-pick-bot in #9421
• core: fix logic for token expiration (cherry-pick #9426) by @gcp-cherry-pick-bot in #9428
• ci: fix ci pipeline (cherry-pick #9427) by @gcp-cherry-pick-bot in #9429
• web/common: fix locale detection for user-set locale (cherry-pick #9436) by @gcp-cherry-pick-bot in #9439
• lifecycle: always try custom redis URL (cherry-pick #9441) by @gcp-cherry-pick-bot in #9458
• website/docs: prepare 2024.4.1 (cherry-pick #9459) by @gcp-cherry-pick-bot in #9461
• web/admin: show user internal service account as disabled (cherry-pick #9464) by @gcp-cherry-pick-bot in #9467
• web/admin: fix disabled button color with dark theme (cherry-pick #9465) by @gcp-cherry-pick-bot in #9468
• sources/scim: fix service account user path (cherry-pick #9463) by @gcp-cherry-pick-bot in #9470
• website/docs: update release notes for 2024.4.1 again (cherry-pick #9471) by @gcp-cherry-pick-bot in #9472

Full Changelog: version/2024.4.0...version/2024.4.1

Release 2024.4.0

See https://docs.goauthentik.io/docs/releases/2024.4

What's Changed

• ci: docker push: re-add timestamp image tag by @rissson in #8529
• ci: fix release pipeline by @BeryJu in #8530
• core, web: update translations by @authentik-automation in #8531
• web: fix save & reset behavior on System ➲ Settings page. by @kensternberg-authentik in #8528
• web: change "delete" verb to "remove" for one-to-many relationships by @kensternberg-authentik in #8535
• ci: fix release sentry step by @rissson in #8540
• web: bump the storybook group in /web with 8 updates by @dependabot in #8544
• web: bump chromedriver from 121.0.0 to 121.0.1 in /tests/wdio by @dependabot in #8545
• web: bump the wdio group in /tests/wdio with 2 updates by @dependabot in #8543
• web: bump the sentry group in /web with 1 update by @dependabot in #8542
• web: bump rollup from 4.10.0 to 4.11.0 in /web by @dependabot in #8546
• core: bump cryptography from 42.0.0 to 42.0.2 by @dependabot in #8553
• website: bump undici from 5.27.2 to 5.28.3 in /website by @dependabot in #8550
• core: bump github.com/redis/go-redis/v9 from 9.4.0 to 9.5.0 by @dependabot in #8567
• web: bump rollup from 4.11.0 to 4.12.0 in /web by @dependabot in #8566
• web: bump the storybook group in /web with 1 update by @dependabot in #8565
• web: bump chromedriver from 121.0.1 to 121.0.2 in /tests/wdio by @dependabot in #8564
• website: bump react-tooltip from 5.26.2 to 5.26.3 in /website by @dependabot in #8562
• website: bump @types/react from 18.2.55 to 18.2.56 in /website by @dependabot in #8561
• web: bump the wdio group in /tests/wdio with 4 updates by @dependabot in #8563
• web/flows: improve authenticator styling by @BeryJu in #8560
• root: fix app settings load order by @BeryJu in #8569
• ci: main: use correct previous version by @rissson in #8539
• Revert "core: bump github.com/redis/go-redis/v9 from 9.4.0 to 9.5.0 (… by @BeryJu in #8573
• core: bump twilio from 8.12.0 to 8.13.0 by @dependabot in #8525
• core: bump black from 24.1.1 to 24.2.0 by @dependabot in #8524
• web: bump core-js from 3.35.1 to 3.36.0 in /web by @dependabot in #8523
• core, web: update translations by @authentik-automation in #8574
• website/docs: kubernetes installation: update values by @rissson in #8575
• website/docs: edited Docs about tenants by @tanberry in #8549
• website/docs: remove outdated info by @tanberry in #8552
• providers/oauth2: improve conformance with client_credentials standard by @BeryJu in #8471
• website/docs: remove tenants docs from sidebar for now by @tanberry in #8551
• website/docs: edit RN to remove tenants by @tanberry in #8578
• translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #8582
• translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #8581
• translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #8590
• website: bump @types/react from 18.2.56 to 18.2.57 in /website by @dependabot in #8589
• core: bump ruff from 0.2.1 to 0.2.2 by @dependabot in #8588
• core: bump github.com/jellydator/ttlcache/v3 from 3.1.1 to 3.2.0 by @dependabot in #8587
• web: bump the eslint group in /web with 2 updates by @dependabot in #8583
• web: bump the esbuild group in /web with 2 updates by @dependabot in #8584
• web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #8585
• rbac: fix permission decorator for global permissions by @BeryJu in #8591
• web: spell customization with a Z by @fheisler in #8596
• web/flows: fix webauthn retry by @BeryJu in #8599
• web: bump @codemirror/lang-javascript from 6.2.1 to 6.2.2 in /web by @dependabot in #8615
• web: bump @open-wc/lit-helpers from 0.6.0 to 0.7.0 in /web by @dependabot in #8614
• web: bump the storybook group in /web with 8 updates by @dependabot in #8613
• web: bump the sentry group in /web with 1 update by @dependabot in #8612
• core: bump github.com/redis/go-redis/v9 from 9.4.0 to 9.5.1 by @dependabot in #8611
• web: bump the wdio group in /tests/wdio with 3 updates by @dependabot in #8610
• web: bump ip from 1.1.8 to 1.1.9 in /tests/wdio by @dependabot in #8608
• core: bump cbor2 from 5.5.1 to 5.6.2 by @dependabot in #8607
• core, web: update translations by @authentik-automation in #8606
• translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #8609
• web: bump API Client version by @authentik-automation in #8617
• website/blog: Blog about release 2024.2 by @tanberry in #8580
• website/docs: fix link to helm chart release notes by @BeryJu in #8624
• stages/authenticator_validate: fix error with get_webauthn_challenge_without_user by @BeryJu in #8625
• website/docs: added a new template for "combo" topics by @tanberry in #8595
• fix version by @tanberry in #8630
• core: bump goauthentik.io/api/v3 from 3.2023107.2 to 3.2024020.1 by @dependabot in #8635
• core: bump cryptography from 42.0.2 to 42.0.4 by @dependabot in #8629
• brands: fix context processor when request doesn't have a tenant by @BeryJu in #8643
• ci: fix missing tags from release by @BeryJu in #8645
• events: sanitize args and kwargs saved in system tasks by @BeryJu in #8644
• website/docs: prepare 2024.2.1 release notes by @BeryJu in #8649
• website/blog: add draft for blog about fletcher joining by @tanberry in #8634
• web: bump API Client version by @authentik-automation in #8654
• website/blog: fix image so it displays in twitter post by @tanberry in #8656
• core: rework recovery API to return better error messages by @BeryJu in #8655
• web: bump API Client version by @authentik-automation in #8658
• website/blog: Blog try again by @tanberry in #8659
• web: bump the sentry group in /web with 1 update by @dependabot in #8665
• core: bump selenium from 4.17.2 to 4.18.1 by @dependabot in #8664
• core: bump pytest from 8.0.0 to 8.0.1 by @dependabot in #8663
• web: bump chromedriver from 121.0.2 to 122.0.3 in /tests/wdio by @dependabot in #8662
• core: bump goauthentik.io/api/v3 from 3.2024020.1 to 3.2024021.2 by @dependabot in #8661
• translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #8622
• blueprints: use reconcile decorator instead of relying on function name prefix by @BeryJu in #8483
• translate: Updates for file web/xliff/en.xlf i...

Release 2024.4.0-rc1

See https://docs.goauthentik.io/docs/releases/2024.4

What's Changed

• ci: docker push: re-add timestamp image tag by @rissson in #8529
• ci: fix release pipeline by @BeryJu in #8530
• core, web: update translations by @authentik-automation in #8531
• web: fix save & reset behavior on System ➲ Settings page. by @kensternberg-authentik in #8528
• web: change "delete" verb to "remove" for one-to-many relationships by @kensternberg-authentik in #8535
• ci: fix release sentry step by @rissson in #8540
• web: bump the storybook group in /web with 8 updates by @dependabot in #8544
• web: bump chromedriver from 121.0.0 to 121.0.1 in /tests/wdio by @dependabot in #8545
• web: bump the wdio group in /tests/wdio with 2 updates by @dependabot in #8543
• web: bump the sentry group in /web with 1 update by @dependabot in #8542
• web: bump rollup from 4.10.0 to 4.11.0 in /web by @dependabot in #8546
• core: bump cryptography from 42.0.0 to 42.0.2 by @dependabot in #8553
• website: bump undici from 5.27.2 to 5.28.3 in /website by @dependabot in #8550
• core: bump github.com/redis/go-redis/v9 from 9.4.0 to 9.5.0 by @dependabot in #8567
• web: bump rollup from 4.11.0 to 4.12.0 in /web by @dependabot in #8566
• web: bump the storybook group in /web with 1 update by @dependabot in #8565
• web: bump chromedriver from 121.0.1 to 121.0.2 in /tests/wdio by @dependabot in #8564
• website: bump react-tooltip from 5.26.2 to 5.26.3 in /website by @dependabot in #8562
• website: bump @types/react from 18.2.55 to 18.2.56 in /website by @dependabot in #8561
• web: bump the wdio group in /tests/wdio with 4 updates by @dependabot in #8563
• web/flows: improve authenticator styling by @BeryJu in #8560
• root: fix app settings load order by @BeryJu in #8569
• ci: main: use correct previous version by @rissson in #8539
• Revert "core: bump github.com/redis/go-redis/v9 from 9.4.0 to 9.5.0 (… by @BeryJu in #8573
• core: bump twilio from 8.12.0 to 8.13.0 by @dependabot in #8525
• core: bump black from 24.1.1 to 24.2.0 by @dependabot in #8524
• web: bump core-js from 3.35.1 to 3.36.0 in /web by @dependabot in #8523
• core, web: update translations by @authentik-automation in #8574
• website/docs: kubernetes installation: update values by @rissson in #8575
• website/docs: edited Docs about tenants by @tanberry in #8549
• website/docs: remove outdated info by @tanberry in #8552
• providers/oauth2: improve conformance with client_credentials standard by @BeryJu in #8471
• website/docs: remove tenants docs from sidebar for now by @tanberry in #8551
• website/docs: edit RN to remove tenants by @tanberry in #8578
• translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #8582
• translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #8581
• translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #8590
• website: bump @types/react from 18.2.56 to 18.2.57 in /website by @dependabot in #8589
• core: bump ruff from 0.2.1 to 0.2.2 by @dependabot in #8588
• core: bump github.com/jellydator/ttlcache/v3 from 3.1.1 to 3.2.0 by @dependabot in #8587
• web: bump the eslint group in /web with 2 updates by @dependabot in #8583
• web: bump the esbuild group in /web with 2 updates by @dependabot in #8584
• web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #8585
• rbac: fix permission decorator for global permissions by @BeryJu in #8591
• web: spell customization with a Z by @fheisler in #8596
• web/flows: fix webauthn retry by @BeryJu in #8599
• web: bump @codemirror/lang-javascript from 6.2.1 to 6.2.2 in /web by @dependabot in #8615
• web: bump @open-wc/lit-helpers from 0.6.0 to 0.7.0 in /web by @dependabot in #8614
• web: bump the storybook group in /web with 8 updates by @dependabot in #8613
• web: bump the sentry group in /web with 1 update by @dependabot in #8612
• core: bump github.com/redis/go-redis/v9 from 9.4.0 to 9.5.1 by @dependabot in #8611
• web: bump the wdio group in /tests/wdio with 3 updates by @dependabot in #8610
• web: bump ip from 1.1.8 to 1.1.9 in /tests/wdio by @dependabot in #8608
• core: bump cbor2 from 5.5.1 to 5.6.2 by @dependabot in #8607
• core, web: update translations by @authentik-automation in #8606
• translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #8609
• web: bump API Client version by @authentik-automation in #8617
• website/blog: Blog about release 2024.2 by @tanberry in #8580
• website/docs: fix link to helm chart release notes by @BeryJu in #8624
• stages/authenticator_validate: fix error with get_webauthn_challenge_without_user by @BeryJu in #8625
• website/docs: added a new template for "combo" topics by @tanberry in #8595
• fix version by @tanberry in #8630
• core: bump goauthentik.io/api/v3 from 3.2023107.2 to 3.2024020.1 by @dependabot in #8635
• core: bump cryptography from 42.0.2 to 42.0.4 by @dependabot in #8629
• brands: fix context processor when request doesn't have a tenant by @BeryJu in #8643
• ci: fix missing tags from release by @BeryJu in #8645
• events: sanitize args and kwargs saved in system tasks by @BeryJu in #8644
• website/docs: prepare 2024.2.1 release notes by @BeryJu in #8649
• website/blog: add draft for blog about fletcher joining by @tanberry in #8634
• web: bump API Client version by @authentik-automation in #8654
• website/blog: fix image so it displays in twitter post by @tanberry in #8656
• core: rework recovery API to return better error messages by @BeryJu in #8655
• web: bump API Client version by @authentik-automation in #8658
• website/blog: Blog try again by @tanberry in #8659
• web: bump the sentry group in /web with 1 update by @dependabot in #8665
• core: bump selenium from 4.17.2 to 4.18.1 by @dependabot in #8664
• core: bump pytest from 8.0.0 to 8.0.1 by @dependabot in #8663
• web: bump chromedriver from 121.0.2 to 122.0.3 in /tests/wdio by @dependabot in #8662
• core: bump goauthentik.io/api/v3 from 3.2024020.1 to 3.2024021.2 by @dependabot in #8661
• translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #8622
• blueprints: use reconcile decorator instead of relying on function name prefix by @BeryJu in #8483
• translate: Updates for file web/xliff/en.xlf i...

Release 2024.2.3

See https://docs.goauthentik.io/docs/releases/2024.2#fixed-in-202423

What's Changed

• enterprise: only check for valid license existing for creating Enterprise objects (cherry-pick #8813) by @gcp-cherry-pick-bot in #8822
• stages/email: Disable autoescape for text templates (cherry-pick #8812) by @gcp-cherry-pick-bot in #8824
• stages/email: fix issue when sending emails to users with same display as email (cherry-pick #8850) by @gcp-cherry-pick-bot in #8852
• tenants: really ensure default tenant cannot be deleted (cherry-pick #8875) by @gcp-cherry-pick-bot in #8876
• api: capabilities: properly set can_save_media when s3 is enabled (cherry-pick #8896) by @gcp-cherry-pick-bot in #8897
• enterprise/rac: fix connection token management (cherry-pick #8909) by @gcp-cherry-pick-bot in #8912
• stages/user_write: ensure user data is json-serializable (cherry-pick #8926) by @gcp-cherry-pick-bot in #8928
• events: discard notification if user has empty email (cherry-pick #8938) by @gcp-cherry-pick-bot in #8951
• website/docs: config: remove options moved to tenants (cherry-pick #8976) by @gcp-cherry-pick-bot in #8977
• lifecycle: migrate: ensure template schema exists before migrating (cherry-pick #8952) by @gcp-cherry-pick-bot in #9022

Full Changelog: version/2024.2.2...version/2024.2.3

Release 2024.2.2

See https://docs.goauthentik.io/docs/releases/2024.2#fixed-in-202422

What's Changed

• providers/oauth2: fix inconsistent sub value when setting via mapping (cherry-pick #8677) by @gcp-cherry-pick-bot in #8682
• core: fix blueprint export (cherry-pick #8695) by @gcp-cherry-pick-bot in #8696
• enterprise: fix read_only activating when no license is installed (cherry-pick #8697) by @gcp-cherry-pick-bot in #8698
• website/docs: s3: fix environment variables (cherry-pick #8722) by @gcp-cherry-pick-bot in #8726
• enterprise: force license usage update after change to license (cherry-pick #8723) by @gcp-cherry-pick-bot in #8725
• root: fix container build (cherry-pick #8727) by @gcp-cherry-pick-bot in #8728
• ci: fix missing DOCKER_USERNAME secret (cherry-pick #8730) by @gcp-cherry-pick-bot in #8733
• providers/oauth2: fix offline_access requests when prompt doesn't include consent (cherry-pick #8731) by @gcp-cherry-pick-bot in #8732
• website/docs: s3: fix migration docs (cherry-pick #8735) by @gcp-cherry-pick-bot in #8737
• stages/authenticator_webauthn: fix error when enrolling new device (cherry-pick #8738) by @gcp-cherry-pick-bot in #8740
• ci: fix missing output on composite action (cherry-pick #8741) by @gcp-cherry-pick-bot in #8742
• web/admin: don't mark property mappings as required anywhere (cherry-pick #8752) by @gcp-cherry-pick-bot in #8755
• web/admin: don't mark remaining property mappings as required (cherry-pick #8772) by @gcp-cherry-pick-bot in #8773
• root: ensure consistent install_id (cherry-pick #8775) by @gcp-cherry-pick-bot in #8776
• website/docs: installation: kubernetes: fix values (cherry-pick #8783) by @gcp-cherry-pick-bot in #8792
• providers/oauth2: fix validation ordering (cherry-pick #8793) by @gcp-cherry-pick-bot in #8795
• flows: fix mismatched redirect behaviour for invalid and valid flows (cherry-pick #8794) by @gcp-cherry-pick-bot in #8796

Full Changelog: version/2024.2.1...version/2024.2.2

Release 2024.2.1

See https://goauthentik.io/docs/releases/2024.2#fixed-in-202421

What's Changed

• stages/authenticator_validate: fix error with get_webauthn_challenge_without_user (cherry-pick #8625) by @gcp-cherry-pick-bot in #8626
• ci: fix missing tags from release (cherry-pick #8645) by @gcp-cherry-pick-bot in #8647
• events: sanitize args and kwargs saved in system tasks (cherry-pick #8644) by @gcp-cherry-pick-bot in #8648
• brands: fix context processor when request doesn't have a tenant (cherry-pick #8643) by @gcp-cherry-pick-bot in #8646

Full Changelog: version/2024.2.0...version/2024.2.1

Release 2024.2.0

See https://goauthentik.io/docs/releases/2024.2

What's Changed

• website/docs: kubernetes installation: update values (cherry-pick #8575) by @gcp-cherry-pick-bot in #8576
• rbac: fix permission decorator for global permissions (cherry-pick #8591) by @gcp-cherry-pick-bot in #8597
• web: spell customization with a Z (cherry-pick #8596) by @gcp-cherry-pick-bot in #8602
• web/flows: fix webauthn retry (cherry-pick #8599) by @gcp-cherry-pick-bot in #8603

Full Changelog: version/2024.2.0-rc2...version/2024.2.0

Release 2024.2.0-rc2

See https://goauthentik.io/docs/releases/2024.2

What's Changed

• ci: fix release sentry step (cherry-pick #8540) by @gcp-cherry-pick-bot in #8541
• web: change "delete" verb to "remove" for one-to-many relationships (cherry-pick #8535) by @gcp-cherry-pick-bot in #8537
• web/flows: improve authenticator styling (cherry-pick #8560) by @gcp-cherry-pick-bot in #8570
• ci: main: use correct previous version (cherry-pick #8539) by @gcp-cherry-pick-bot in #8572
• root: fix app settings load order (cherry-pick #8569) by @gcp-cherry-pick-bot in #8571

Full Changelog: version/2024.2.0-rc1...version/2024.2.0-rc2

Release 2024.2.0-rc1

See https://goauthentik.io/docs/releases/2024.2

What's Changed

• web: bump API Client version by @authentik-automation in #7365
• web: bump @rollup/plugin-replace from 5.0.4 to 5.0.5 in /web by @dependabot in #7380
• web: bump ts-lit-plugin from 2.0.0 to 2.0.1 in /web by @dependabot in #7379
• core: bump goauthentik.io/api/v3 from 3.2023101.1 to 3.2023102.1 by @dependabot in #7378
• web: bump the storybook group in /web with 5 updates by @dependabot in #7382
• website/integrations: add SonarQube by @senare in #7167
• web: bump rollup from 4.1.4 to 4.1.5 in /web by @dependabot in #7370
• web/admin: fix html error on oauth2 provider page by @kensternberg-authentik in #7384
• stages/email: fix duplicate querystring encoding by @BeryJu in #7386
• web: bump core-js from 3.33.1 to 3.33.2 in /web by @dependabot in #7390
• web: bump the eslint group in /web with 2 updates by @dependabot in #7389
• web: bump the sentry group in /web with 2 updates by @dependabot in #7366
• web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #7388
• core: bump pytest-django from 4.5.2 to 4.6.0 by @dependabot in #7387
• web: bump rollup from 4.1.5 to 4.2.0 in /web by @dependabot in #7403
• web: bump pyright from 1.1.333 to 1.1.334 in /web by @dependabot in #7402
• web: bump the sentry group in /web with 2 updates by @dependabot in #7401
• core: bump twisted from 23.8.0 to 23.10.0 by @dependabot in #7398
• core: bump github.com/redis/go-redis/v9 from 9.2.1 to 9.3.0 by @dependabot in #7396
• core: bump webauthn from 1.11.0 to 1.11.1 by @dependabot in #7399
• core: bump sentry-sdk from 1.32.0 to 1.33.1 by @dependabot in #7397
• website/integrations: argocd: add missing url in ArgoCD configuration by @gc4g40u6 in #7404
• root: Improve multi arch Docker image build speed by @PKizzle in #7355
• web: bump the eslint group in /tests/wdio with 1 update by @dependabot in #7415
• web: bump the eslint group in /web with 1 update by @dependabot in #7414
• core: bump django from 4.2.6 to 4.2.7 by @dependabot in #7413
• core: bump selenium from 4.14.0 to 4.15.0 by @dependabot in #7411
• website: bump react-tooltip from 5.21.6 to 5.22.0 in /website by @dependabot in #7412
• translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #7416
• website/blog: draft for happy bday blog by @tanberry in #7408
• providers/oauth2: set auth_via for token and other endpoints by @BeryJu in #7417
• web: bump the wdio group in /tests/wdio with 4 updates by @dependabot in #7423
• core: bump sentry-sdk from 1.33.1 to 1.34.0 by @dependabot in #7421
• web: bump yaml from 2.3.3 to 2.3.4 in /web by @dependabot in #7420
• core: bump selenium from 4.15.0 to 4.15.1 by @dependabot in #7422
• ci: explicitly give write permissions to packages by @BeryJu in #7428
• providers/proxy: fix closed redis client by @BeryJu in #7385
• web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #7452
• core: bump ruff from 0.1.3 to 0.1.4 by @dependabot in #7451
• core: bump selenium from 4.15.1 to 4.15.2 by @dependabot in #7449
• core: bump uvicorn from 0.23.2 to 0.24.0 by @dependabot in #7450
• web: bump the eslint group in /web with 2 updates by @dependabot in #7447
• web: bump rollup from 4.2.0 to 4.3.0 in /web by @dependabot in #7448
• core: bump github.com/gorilla/handlers from 1.5.1 to 1.5.2 by @dependabot in #7444
• core: bump github.com/gorilla/securecookie from 1.1.1 to 1.1.2 by @dependabot in #7440
• core: bump golang.org/x/sync from 0.4.0 to 0.5.0 by @dependabot in #7441
• core: bump github.com/gorilla/websocket from 1.5.0 to 1.5.1 by @dependabot in #7445
• core: bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by @dependabot in #7442
• core: bump github.com/gorilla/mux from 1.8.0 to 1.8.1 by @dependabot in #7443
• core: bump github.com/gorilla/sessions from 1.2.1 to 1.2.2 by @dependabot in #7446
• web/admin: fix chart label on dashboard user page by @macmoritz in #7434
• website: bump the docusaurus group in /website with 3 updates by @dependabot in #7400
• sources/oauth: fix patreon by @BeryJu in #7454
• web/flows: attempt to fix bitwareden android compatibility by @BeryJu in #7455
• web: bump @lit-labs/context from 0.4.1 to 0.5.1 in /web by @dependabot in #7368
• web: bump @lit/localize-tools from 0.7.0 to 0.7.1 in /web by @dependabot in #7369
• translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #7458
• translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #7459
• translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #7461
• web: bump mermaid from 10.6.0 to 10.6.1 in /web by @dependabot in #7475
• web: bump @types/codemirror from 5.60.12 to 5.60.13 in /web by @dependabot in #7471
• web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #7467
• web: bump the storybook group in /web with 5 updates by @dependabot in #7468
• core: bump uvicorn from 0.24.0 to 0.24.0.post1 by @dependabot in #7472
• web: bump the eslint group in /web with 2 updates by @dependabot in #7469
• website/integrations: add FreshRSS by @foux in #7301
• web: bump @types/chart.js from 2.9.39 to 2.9.40 in /web by @dependabot in #7470
• web: rollback dependabot context by @kensternberg-authentik in #7479
• Web: bugfix: broken backchannel selector by @kensternberg-authentik in #7480
• web: bump @formatjs/intl-listformat from 7.5.0 to 7.5.1 in /web by @dependabot in #7473
• website: bump @types/react from 18.2.36 to 18.2.37 in /website by @dependabot in #7487
• web: bump @types/grecaptcha from 3.0.6 to 3.0.7 in /web by @dependabot in #7485
• web: bump pyright from 1.1.334 to 1.1.335 in /web by @dependabot in #7484
• core: bump golang from 1.21.3-bookworm to 1.21.4-bookworm by @dependabot in #7483
• website/docs: Fix a small grammar issue by @agt-ru in #7490
• events: fix gdpr compliance always running by @rissson in #7491
• website: update comparison by @BeryJu in #7493
• website/docs: fix anchor link by @agt-ru in #7492
• website/docs: update release notes for 2023.10.3 by @rissson in #7506
• core: fix worker beat toggle inverted by @BeryJu in #7508
• website/docs: update release notes for 2023.10.3 by @rissson in #7510
• ci: fix permissions for release pipeline to publish binaries by ...