Release 2024.10.0-rc1

See https://docs.goauthentik.io/docs/releases/2024.10

What's Changed

• translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #11071
• translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #11070
• website/docs: prepare release notes for 2024.8 by @BeryJu in #11011
• web: bump rollup from 4.21.0 to 4.21.1 in /web/sfe by @dependabot in #11083
• web: bump rollup from 4.21.0 to 4.21.1 in /web by @dependabot in #11082
• web: bump typescript-eslint from 8.2.0 to 8.3.0 in /web by @dependabot in #11081
• core: bump twilio from 9.2.3 to 9.2.4 by @dependabot in #11079
• core: bump watchdog from 4.0.2 to 5.0.0 by @dependabot in #11078
• core, web: update translations by @authentik-automation in #11076
• web: bump the rollup group across 1 directory with 3 updates by @dependabot in #11080
• providers/oauth2: audit_ignore last_login change for generated service account by @BeryJu in #11085
• web: bump @patternfly/elements from 4.0.0 to 4.0.1 in /web by @dependabot in #11094
• core: bump pdoc from 14.6.0 to 14.6.1 by @dependabot in #11092
• core: bump github.com/jellydator/ttlcache/v3 from 3.2.1 to 3.3.0 by @dependabot in #11091
• website/docs: fix nginx ingress auth-signin example by @diegmonti in #11096
• website: bump webpack from 5.89.0 to 5.94.0 in /website by @dependabot in #11098
• web: bump @sentry/browser from 8.26.0 to 8.27.0 in /web in the sentry group across 1 directory by @dependabot in #11093
• website/docs: a couple of minor rewrite things by @BeryJu in #11099
• website/docs: add info about external users by @tanberry in #11106
• website/docs: 2024.8 release notes: reword group sync disable and fix typo by @rissson in #11103
• enterprise: fix incorrect comparison for latest validity date by @BeryJu in #11109
• web: bump the swc group across 2 directories with 11 updates by @dependabot in #11115
• core: bump selenium from 4.23.1 to 4.24.0 by @dependabot in #11114
• core: bump google-api-python-client from 2.142.0 to 2.143.0 by @dependabot in #11113
• core: bump importlib-metadata from 8.0.0 to 8.4.0 by @dependabot in #11112
• ci: fix failing release attestation by @BeryJu in #11107
• core: bump twisted from 24.3.0 to 24.7.0 by @dependabot in #11119
• website/integrations: Fix Nextcloud SAML Docs for SLO by @naruyan in #11118
• web: fix e2e tests to work with latest WebdriverIO and authentik 2024.8 by @kensternberg-authentik in #11105
• website/docs: fix outdated docs and typos by @gergosimonyi in #11020
• websites/docs: minor tweaks to rel notes by @tanberry in #11123
• core: bump ruff from 0.6.2 to 0.6.3 by @dependabot in #11128
• website: bump prism-react-renderer from 2.3.1 to 2.4.0 in /website by @dependabot in #11127
• core, web: update translations by @authentik-automation in #11126
• web: fix dual-select with dynamic selection by @kensternberg-authentik in #11133
• web: bump rollup from 4.21.1 to 4.21.2 in /web/sfe by @dependabot in #11148
• web: bump rollup from 4.21.1 to 4.21.2 in /web by @dependabot in #11147
• web: bump chromedriver from 128.0.0 to 128.0.1 in /tests/wdio by @dependabot in #11146
• web: bump the swc group across 2 directories with 11 updates by @dependabot in #11145
• website: bump @types/react from 18.3.4 to 18.3.5 in /website by @dependabot in #11142
• website: bump postcss from 8.4.41 to 8.4.43 in /website by @dependabot in #11141
• core: bump deepmerge from 1.1.1 to 2.0 by @dependabot in #11140
• stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in #11138
• translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #11137
• translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #11136
• website: bump postcss from 8.4.43 to 8.4.44 in /website by @dependabot in #11150
• web: bump the rollup group across 1 directory with 3 updates by @dependabot in #11144
• website/docs: update immich OAuth Redirect URI by @andrebrait in #11135
• website/docs: update release notes by @BeryJu in #11151
• web: bump typescript-eslint from 8.3.0 to 8.4.0 in /web by @dependabot in #11163
• web: bump mermaid from 11.0.2 to 11.1.0 in /web by @dependabot in #11162
• web: bump the swc group across 2 directories with 11 updates by @dependabot in #11161
• web: bump @spotlightjs/spotlight from 2.3.1 to 2.3.2 in /web in the sentry group across 1 directory by @dependabot in #11159
• core: bump watchdog from 5.0.0 to 5.0.1 by @dependabot in #11158
• core: bump pytest-django from 4.8.0 to 4.9.0 by @dependabot in #11157
• core, web: update translations by @authentik-automation in #11156
• translate: Updates for file locale/en/LC_MESSAGES/django.po in ru by @transifex-integration in #11153
• root: version 2024.8 backport by @BeryJu in #11166
• web: bump API Client version by @authentik-automation in #11168
• web: Adjust Wdio MaxInstances, add Knip by @kensternberg-authentik in #11089
• providers/ldap: fix migration assuming search group is set by @BeryJu in #11170
• web/admin: fix error in Outpost creation form by @BeryJu in #11173
• core: fix change_user_type always requiring usernames by @BeryJu in #11177
• root: backport s3 storage changes by @BeryJu in #11181
• web: bump @types/node from 22.5.2 to 22.5.3 in /web by @dependabot in #11195
• web: bump wireit from 0.14.8 to 0.14.9 in /web by @dependabot in #11194
• web: bump knip from 5.29.1 to 5.29.2 in /web by @dependabot in #11193
• web: bump yaml from 2.5.0 to 2.5.1 in /web by @dependabot in #11192
• web: bump @sentry/browser from 8.27.0 to 8.28.0 in /web in the sentry group across 1 directory by @dependabot in #11191
• core: bump watchdog from 5.0.1 to 5.0.2 by @dependabot in #11189
• core: bump django from 5.0.8 to 5.0.9 by @dependabot in #11188
• core: bump goauthentik.io/api/v3 from 3.2024064.1 to 3.2024080.1 by @dependabot in #11187
• ci: bump peter-evans/create-pull-request from 6 to 7 by @dependabot in #11186
• core: bump cryptography from 43.0.0 to 43.0.1 by @dependabot in #11185
• web/admin: fix misc dual select on different forms by @BeryJu in #11203
• website/docs: add note about terraform provider by @BeryJu in #11206
• web/admin: fix missing Sync object button SCIM Provider by @BeryJu in #11211
• providers/ldap: fix incorrect permission check for search access by @BeryJu in #11217
• web/admin: improve error handling by @BeryJu in #11212
• web: bump @types/node from 22.5.3 to 22.5.4 in /web by @dependabot in #11225
• web: bump @changesets/cli from 2.27.7 to 2.27.8 in /web by @dependabot in #11224
• core: bump django-model-utils from 4.5.1 to 5.0.0 by @dependabot in #11223
• core: bump golang.org/x/oauth2 from 0.22.0 to 0.23.0 by @dependabot in #11222
• website: bump postcss from 8.4.44 to 8.4.45 in /website by @dependabot in #11221
• core, web: update translations by @authentik-automation in #11220
• providers/ldap: rework search_group migration to work with read replicas by @BeryJu in #11228
• core: fix missing argument name escaping for property mapping by @BeryJu in #11231
• web: bump the rollup group across 2 directories with 1 update by @dependabot in #11248
• core: bump msgraph-sdk from 1.5.4 to 1.6.0 by @dependabot in #11246
• core: bump pydantic from 2.8.2 to 2.9.0 by @dependabot in #11245
• core: bump ruff from 0.6.3 to 0.6.4 by @dependabot in #11244
• core: bump github.com/prometheus/client_golang from 1.20.2 to 1.20.3 by @dependabot in #11243
• core: bump twilio from 9.2.4 to 9.3.0 by @dependabot in #11242
• core: bump google-api-python-client from 2.143.0 to 2.144.0 by @dependabot in #11241
• internal: fix go paginator not setting page correctly by @BeryJu in #11253
• web/users: show - if device was registered before we started saving the time by @BeryJu in #11256
• website/docs: prepare 2024.8.1 release notes by @BeryJu in #11265
• core: ensure proxy provider is correctly looked up by @BeryJu in #11267
• root: fix ensure `outpost_connection_discovery runs on worker startup by @anthr76 in #11260
• ci: use codecov/test-results-action by @BeryJu in #11268
• admin: refactor update check by @BeryJu in #11272
• root: backport release 2024.8.1 by @BeryJu in #11273
• web: bump API Client version by @authentik-automation in #11275
• web: fix readonly fields appearing white in dark theme by @Hicks-99 in #11271
• core: ensure all providers have correct priority by @BeryJu in #11280
• core, web: update translations by @authentik-automation in #11277
• web: bump knip from 5.29.2 to 5.30.0 in /web by @dependabot in #11291
• web: bump mermaid from 11.1.0 to 11.1.1 in /web by @dependabot in #11290
• web: bump @eslint/js from 9.9.1 to 9.10.0 in /web by @dependabot in #11289
• web: bump the swc group across 2 directories with 11 updates by @dependabot in #11288
• core: bump goauthentik.io/api/v3 from 3.2024080.1 to 3.2024081.1 by @dependabot in #11286
• core: bump django-pglock from 1.6.0 to 1.6.1 by @dependabot in #11285
• translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #11284
• translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #11293
• translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #11292
• translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #11283
• translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #11258
• events: optimise marking events as seen by @BeryJu in #11297
• web/admin: fix notification property mapping forms by @BeryJu in #11298
• web: bump typescript from 5.5.4 to 5.6.2 in /web by @dependabot in #11313
• web: bump mermaid from 11.1.1 to 11.2.0 in /web by @dependabot in #11312
• web: bump knip from 5.30.0 to 5.30.1 in /web by @dependabot in #11310
• web: bump typescript from 5.5.4 to 5.6.2 in /tests/wdio by @dependabot in #11309
• web: bump @sentry/browser from 8.28.0 to 8.29.0 in /web in the sentry group across 1 directory by @dependabot in #11307
• core: bump sentry-sdk from 2.13.0 to 2.14.0 by @dependabot in #11306
• core: bump pydantic from 2.9.0 to 2.9.1 by @dependabot in #11305
• website: bump typescript from 5.5.4 to 5.6.2 in /website by @dependabot in #11304
• core, web: update translations by @authentik-automation in #11303
• translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #11259
• web: bump typescript-eslint from 8.4.0 to 8.5.0 in /web by @dependabot in #11311
• core: fix permission check for scoped impersonation by @BeryJu in #11315
• enterprise: show specific error if Install ID is invalid in license by @BeryJu in #11317
• web: bump the swc group across 2 directories with 11 updates by @dependabot in #11330
• web: bump the sentry group across 1 directory with 2 updates by @dependabot in #11329
• core: bump github.com/getsentry/sentry-go from 0.28.1 to 0.29.0 by @dependabot in #11328
• core: bump pytest from 8.3.2 to 8.3.3 by @dependabot in #11327
• core: bump google-api-python-client from 2.144.0 to 2.145.0 by @dependabot in #11326
• core: bump goauthentik/fips-python from 3.12.5-slim-bookworm-fips-full to 3.12.6-slim-bookworm-fips-full by @dependabot in #11325
• core, web: update translations by @authentik-automation in #11322
• website/integrations: improve SEO for integration docs by @BeryJu in #11320
• website: bump express from 4.19.2 to 4.20.0 in /website by @dependabot in #11339
• web: bump body-parser and express in /web by @dependabot in #11338
• website: bump body-parser and express in /website by @dependabot in #11336
• web: bump send and express in /web by @dependabot in #11333
• website/integrations: Add offline_access scope for WordPress by @G-Pereira in #11274
• flows: include Outpost instance in flow context and save in login event by @BeryJu in #11318
• sources/ldap: fix missing search attribute by @BeryJu in #11125
• enterprise: fix API mixin license validity check by @rissson in #11331
• web: bump the swc group across 2 directories with 11 updates by @dependabot in #11351
• web: bump the storybook group across 1 directory with 7 updates by @dependabot in #11350
• core: bump msgraph-sdk from 1.6.0 to 1.7.0 by @dependabot in #11349
• core: bump pdoc from 14.6.1 to 14.7.0 by @dependabot in #11348
• core, web: update translations by @authentik-automation in #11347
• providers/proxy: fix URL path getting lost when partial URL is given to rd= by @BeryJu in #11354
• website/docs: added info about creating super-users by @tanberry in #11356
• translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #11367
• translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #11366
• core: bump urllib3 from 2.2.2 to 2.2.3 by @dependabot in #11365
• web: bump rollup from 4.21.2 to 4.21.3 in /web/sfe by @dependabot in #11364
• web: bump chokidar from 3.6.0 to 4.0.0 in /web by @dependabot in #11363
• web: bump rollup from 4.21.2 to 4.21.3 in /web by @dependabot in #11362
• web: bump @types/mocha from 10.0.7 to 10.0.8 in /tests/wdio by @dependabot in #11361
• web: bump chromedriver from 128.0.1 to 128.0.3 in /tests/wdio by @dependabot in #11360
• web: bump @spotlightjs/spotlight from 2.4.0 to 2.4.1 in /web in the sentry group across 1 directory by @dependabot in #11358
• web: bump the rollup group across 1 directory with 3 updates by @dependabot in #11359
• web: bump the eslint group across 1 directory with 4 updates by @dependabot in #11053
• web: bump eslint-plugin-sonarjs from 1.0.4 to 2.0.2 in /tests/wdio in the eslint group across 1 directory by @dependabot in #11377
• web: bump ws, @wdio/browser-runner and @wdio/cli in /web by @dependabot in #11295
• web: bump the wdio group across 2 directories with 2 updates by @dependabot in #11379
• web: revert lockfile lint, re-add integrity by @BeryJu in #11380
• web: bump @floating-ui/dom from 1.6.10 to 1.6.11 in /web by @dependabot in #11393
• core: bump psycopg from 3.2.1 to 3.2.2 by @dependabot in #11392
• core: bump ruff from 0.6.4 to 0.6.5 by @dependabot in #11391
• website: bump postcss from 8.4.45 to 8.4.47 in /website by @dependabot in #11390
• core: bump django-pglock from 1.6.1 to 1.6.2 by @dependabot in #11389
• core, web: update translations by @authentik-automation in #11375
• stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in #11383
• core: bump paramiko from 3.4.1 to 3.5.0 by @dependabot in #11388
• website/docs: prepare release notes for 2024.8.2 by @BeryJu in #11394
• release: 2024.8.2 by @BeryJu in #11395
• web: bump API Client version by @authentik-automation in #11396
• website/docs: upgrade: fix helm command by @N4v41 in #11403
• web: bump mermaid from 11.2.0 to 11.2.1 in /web by @dependabot in #11412
• web: bump typescript-eslint from 8.5.0 to 8.6.0 in /web by @dependabot in #11411
• web: bump typescript-eslint from 8.5.0 to 8.6.0 in /tests/wdio by @dependabot in #11409
• web: bump the storybook group across 1 directory with 7 updates by @dependabot in #11408
• core: bump goauthentik.io/api/v3 from 3.2024081.1 to 3.2024082.1 by @dependabot in #11406
• website: bump @types/react from 18.3.5 to 18.3.6 in /website by @dependabot in #11405
• website: bump dompurify from 3.0.6 to 3.1.6 in /website by @dependabot in #11402
• web: bump rapidoc from 9.3.4 to 9.3.5 in /web by @dependabot in #11410
• events: always use expiry from current tenant for events, not only when creating from HTTP request by @BeryJu in #11415
• core: bump github.com/prometheus/client_golang from 1.20.3 to 1.20.4 by @dependabot in #11424
• website: bump @types/react from 18.3.6 to 18.3.7 in /website by @dependabot in #11423
• core: bump pydantic from 2.9.1 to 2.9.2 by @dependabot in #11422
• core: bump google-api-python-client from 2.145.0 to 2.146.0 by @dependabot in #11421
• web: bump vite from 5.4.5 to 5.4.6 in /web by @dependabot in #11417
• web: bump rapidoc from 9.3.5 to 9.3.6 in /web by @dependabot in #11431
• web: bump chromedriver from 128.0.3 to 129.0.0 in /tests/wdio by @dependabot in #11430
• core: bump twilio from 9.3.0 to 9.3.1 by @dependabot in #11429
• website/integrations: remove sbus_timeout from sssd example by @jennydaman in #11428
• providers/proxy: fix panic, keep session storages open by @BeryJu in #11439
• website: bump @types/react from 18.3.7 to 18.3.8 in /website by @dependabot in #11452
• web: bump rollup from 4.21.3 to 4.22.0 in /web/sfe by @dependabot in #11451
• web: bump rollup from 4.21.3 to 4.22.0 in /web by @dependabot in #11450
• web: bump the storybook group across 1 directory with 7 updates by @dependabot in #11448
• core: bump msgraph-sdk from 1.7.0 to 1.8.0 by @dependabot in #11447
• core: bump kubernetes from 30.1.0 to 31.0.0 by @dependabot in #11446
• core: bump ruff from 0.6.5 to 0.6.6 by @dependabot in #11445
• core, web: update translations by @authentik-automation in #11444
• web: bump the rollup group across 1 directory with 3 updates by @dependabot in #11449
• web: bump the rollup group across 1 directory with 4 updates by @dependabot in #11457
• website/docs: update security policy by @rissson in #11459
• core: bump selenium from 4.24.0 to 4.25.0 by @dependabot in #11477
• core: bump ruff from 0.6.6 to 0.6.7 by @dependabot in #11476
• web: bump chokidar from 4.0.0 to 4.0.1 in /web by @dependabot in #11474
• web: bump knip from 5.30.2 to 5.30.4 in /web by @dependabot in #11473
• web: bump the rollup group across 2 directories with 5 updates by @dependabot in #11471
• web: bump the eslint group across 2 directories with 1 update by @dependabot in #11469
• web: bump @sentry/browser from 8.30.0 to 8.31.0 in /web in the sentry group across 1 directory by @dependabot in #11478
• web: bump the esbuild group across 1 directory with 3 updates by @dependabot in #11470
• website: the requirements for Go and Node required updating. by @kensternberg-authentik in #11419
• providers/proxy: fix traefik label generation by @dandrade-wave in #11460
• web: bump knip from 5.30.4 to 5.30.5 in /web by @dependabot in #11479
• website/integrations: Glitchtip: update redirect URL by @bastouf in #11438
• website/docs: clarify API browser access by @tanberry in #11373
• website/docs: use a more consistent version requirement notice by @BeryJu in #11400
• web: bump @types/node from 22.5.5 to 22.6.1 in /web by @dependabot in #11490
• web: bump the rollup group across 2 directories with 3 updates by @dependabot in #11487
• core: bump bandit from 1.7.9 to 1.7.10 by @dependabot in #11485
• web: bump the storybook group across 1 directory with 7 updates by @dependabot in #11491
• web: bump the eslint group across 2 directories with 5 updates by @dependabot in #11492
• web: bump the swc group across 2 directories with 11 updates by @dependabot in #11493
• web: bump turnstile-types from 1.2.2 to 1.2.3 in /web by @dependabot in #11495
• web: bump the wdio group across 2 directories with 5 updates by @dependabot in #11494
• web/admin: fix Authentication flow being required by @BeryJu in #11496
• sources/ldap: fix mapping check, fix debug endpoint by @BeryJu in #11442
• core, web: update translations by @authentik-automation in #11500
• web: bump @types/node from 22.6.1 to 22.7.0 in /web by @dependabot in #11505
• core: bump google-api-python-client from 2.146.0 to 2.147.0 by @dependabot in #11504
• core: bump debugpy from 1.8.5 to 1.8.6 by @dependabot in #11503
• website: bump @types/react from 18.3.8 to 18.3.9 in /website by @dependabot in #11502
• translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #11519
• translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #11518
• core: bump twilio from 9.3.1 to 9.3.2 by @dependabot in #11515
• translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #11517
• web: bump @types/jquery from 3.5.30 to 3.5.31 in /web/sfe by @dependabot in #11514
• web: bump @types/jquery from 3.5.30 to 3.5.31 in /web by @dependabot in #11513
• translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #11516
• web: bump @types/node from 22.7.0 to 22.7.2 in /web by @dependabot in #11511
• web: bump @sentry/browser from 8.31.0 to 8.32.0 in /web in the sentry group across 1 directory by @dependabot in #11510
• web: bump ts-pattern from 5.3.1 to 5.4.0 in /web by @dependabot in #11512
• website/scripts/docsmg: final version by @ObamaTheLlama114 in #11501
• providers/oauth2: add indexes on tokens by @rissson in #11524
• web: bump @types/node from 22.7.2 to 22.7.3 in /web by @dependabot in #11531
• web: bump @patternfly/elements from 4.0.1 to 4.0.2 in /web by @dependabot in #11530
• web: bump the wdio group across 2 directories with 3 updates by @dependabot in #11529
• core: bump ruff from 0.6.7 to 0.6.8 by @dependabot in #11528
• core, web: update translations by @authentik-automation in #11527
• web: Fix missing integrity fields in package-lock.json by @jvanbruegge in #11509
• sources/ldap: fix ms_ad userAccountControl not checking for lockout by @BeryJu in #11532
• security: fix CVE-2024-47077 by @BeryJu in #11535
• security: fix CVE-2024-47070 by @BeryJu in #11536
• website/docs: added a Docs banner to announce new docs structure by @tanberry in #11525
• website: update release notes for 2024.8.3 and 2024.6.5 by @BeryJu in #11541
• release: 2024.8.3 by @BeryJu in #11542
• web: bump API Client version by @authentik-automation in #11544
• providers/oauth2: improve indexes on tokens by @rissson in #11543
• website/docs: update wording for events that occur when too many users exist by @BeryJu in #11547
• web: bump knip from 5.30.5 to 5.30.6 in /web by @dependabot in #11566
• web: bump rapidoc from 9.3.6 to 9.3.7 in /web by @dependabot in #11565
• web: bump @types/node from 22.7.3 to 22.7.4 in /web by @dependabot in #11564
• web: bump chromedriver from 129.0.0 to 129.0.1 in /tests/wdio by @dependabot in #11563
• web: bump the wdio group across 2 directories with 5 updates by @dependabot in #11562
• web: bump the rollup group across 2 directories with 4 updates by @dependabot in #11561
• web: bump the storybook group across 1 directory with 7 updates by @dependabot in #11560
• core: bump psycopg from 3.2.2 to 3.2.3 by @dependabot in #11559
• core: bump uvicorn from 0.30.6 to 0.31.0 by @dependabot in #11558
• core: bump watchdog from 5.0.2 to 5.0.3 by @dependabot in #11557
• website: bump @types/react from 18.3.9 to 18.3.10 in /website by @dependabot in #11556
• core: bump goauthentik.io/api/v3 from 3.2024082.1 to 3.2024083.1 by @dependabot in #11555
• internal: restore /ping behaviour for embedded outpost by @BeryJu in #11568
• web: add missing id attribute for button in ak-flow-input-password by @arevindh in #11413
• stages/identification: dynamically find login challenges by @BeryJu in #11571
• web: bump API Client version by @authentik-automation in #11574
• web: bump the eslint group across 2 directories with 4 updates by @dependabot in #11582
• core: bump goauthentik.io/api/v3 from 3.2024083.1 to 3.2024083.2 by @dependabot in #11580
• stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in #11578
• core, web: update translations by @authentik-automation in #11575
• web: bump globals from 15.9.0 to 15.10.0 in /web by @dependabot in #11592
• web: bump chromedriver from 129.0.1 to 129.0.2 in /tests/wdio by @dependabot in #11591
• web: bump the rollup group across 2 directories with 4 updates by @dependabot in #11590
• core: bump sentry-sdk from 2.14.0 to 2.15.0 by @dependabot in #11589
• web: bump @spotlightjs/spotlight from 2.4.1 to 2.4.2 in /web in the sentry group across 1 directory by @dependabot in #11581
• web: audit and update package.json and associated test harness, with upgrade to WebdriverIO 9 by @kensternberg-authentik in #11596
• web: unify unit and end-to-end tests by @kensternberg-authentik in #11598
• web: small fixes for elements and forms by @kensternberg-authentik in #11546
• core: bump msgraph-sdk from 1.8.0 to 1.9.0 by @dependabot in #11609
• core: bump twilio from 9.3.2 to 9.3.3 by @dependabot in #11608
• core: bump goauthentik/fips-python from 3.12.6-slim-bookworm-fips-full to 3.12.7-slim-bookworm-fips-full by @dependabot in #11607
• web: provide simple tables for API-less displays by @kensternberg-authentik in #11028
• core: bump google-api-python-client from 2.147.0 to 2.148.0 by @dependabot in #11631
• core: bump black from 24.8.0 to 24.10.0 by @dependabot in #11630
• ci: require ci-web.build for merging by @rissson in #11627
• core: bump ruff from 0.6.8 to 0.6.9 by @dependabot in #11626
• website: bump docusaurus-plugin-openapi-docs from 4.0.1 to 4.1.0 in /website by @dependabot in #11625
• core, web: update translations by @authentik-automation in #11623
• website: bump docusaurus-theme-openapi-docs from 4.0.1 to 4.1.0 in /website by @dependabot in #11624
• web: Fix css loading in unit tests, remove unneeded dot paths by @kensternberg-authentik in #11629
• website: latest migration to new structure by @tanberry in #11522
• Revert "website: latest migration to new structure" by @tanberry in #11634
• website: latest PR for new Docs structure by @tanberry in #11639
• core: bump sentry-sdk from 2.15.0 to 2.16.0 by @dependabot in #11638
• core: bump github.com/pires/go-proxyproto from 0.7.0 to 0.8.0 by @dependabot in #11637
• core: bump goauthentik.io/api/v3 from 3.2024083.2 to 3.2024083.4 by @dependabot in #11636
• website: fix version dropdown by @BeryJu in #11641
• core: bump google-api-python-client from 2.148.0 to 2.149.0 by @dependabot in #11646
• core: bump msgraph-sdk from 1.9.0 to 1.10.0 by @dependabot in #11645
• core: bump uvicorn from 0.31.0 to 0.31.1 by @dependabot in #11644
• core: bump coverage from 7.6.1 to 7.6.2 by @dependabot in #11643
• core: fix permission check for scoped impersonation by @walhallyus in #11603
• website/docs: upgrade: make it clear downgrading is not support by @rissson in #11523
• website/integrations: Apache Guacamole: Add openid-username-claim-type by @hectorwithc in #11649
• web: unit tests for the simple things, with fixes that the tests revealed by @kensternberg-authentik in #11633
• core: bump debugpy from 1.8.6 to 1.8.7 by @dependabot in #11653
• website: bump typescript from 5.6.2 to 5.6.3 in /website by @dependabot in #11635
• website: bump @types/react from 18.3.10 to 18.3.11 in /website by @dependabot in #11599
• *: fix deprecated calls to sentry start_span by @BeryJu in #11655
• blueprints: fix validation error when using internal storage by @BeryJu in #11654
• sources/saml: fix NameIDFormat descriptor in metadata generation by @nicolas-semaphor in #11614
• web: bump API Client version by @authentik-automation in #11657
• core, web: update translations by @authentik-automation in #11659
• core: bump coverage from 7.6.2 to 7.6.3 by @dependabot in #11673
• core: bump pdoc from 14.7.0 to 15.0.0 by @dependabot in #11672
• core: bump goauthentik.io/api/v3 from 3.2024083.4 to 3.2024083.5 by @dependabot in #11671
• translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #11664
• translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #11663
• translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #11662
• flows: provider invalidation by @BeryJu in #5048
• web: bump API Client version by @authentik-automation in #11676
• website/docs: fix SkipObject exception by @rissson in #11632
• website/integrations add GHEC EMU and fix-up GHES by @BeryJu in #11677
• providers/scim: add option to ignore SCIM server cert by @BeryJu in #11437
• web: bump API Client version by @authentik-automation in #11678
• web: provide storybook demos and docs for existing tests by @kensternberg-authentik in #11651
• web/admin: display webauthn device type by @rissson in #11481
• stages/password: add error message when exceeding maximum tries by @BeryJu in #11679
• web: bump API Client version by @authentik-automation in #11680
• core: bump goauthentik.io/api/v3 from 3.2024083.7 to 3.2024083.8 by @dependabot in #11686
• core: bump github.com/redis/go-redis/v9 from 9.6.1 to 9.6.2 by @dependabot in #11685
• core: bump github.com/getsentry/sentry-go from 0.29.0 to 0.29.1 by @dependabot in #11684
• core, web: update translations by @authentik-automation in #11682
• stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in #11683
• translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #11698
• translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #11697
• website/docs: rewrote too long sentence by @tanberry in #11696
• website/docs: add missing file to sidebar by @tanberry in #11695
• core: bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5 by @dependabot in #11694
• core: bump uvicorn from 0.31.1 to 0.32.0 by @dependabot in #11693
• core, web: update translations by @authentik-automation in #11692
• website/docs: Fix websocket default config for nginx proxy manager by @MahmoudAlyuDeen in #11621
• providers/saml: fix incorrect ds:Reference URI by @BeryJu in #11699
• web/admin: fix duplicate flow labels by @BeryJu in #11689
• tests/e2e: add forward auth e2e test by @BeryJu in #11374
• core, web: update translations by @authentik-automation in #11703
• providers/oauth2: add initial JWE support by @BeryJu in #11344
• web: bump API Client version by @authentik-automation in #11706
• admin: store version history by @rissson in #11520
• core: extract object matching from flow manager by @rissson in #11458
• core: bump github.com/redis/go-redis/v9 from 9.6.2 to 9.7.0 by @dependabot in #11720
• core: bump ruff from 0.6.9 to 0.7.0 by @dependabot in #11719
• core: bump sentry-sdk from 2.16.0 to 2.17.0 by @dependabot in #11718
• core: bump twilio from 9.3.3 to 9.3.4 by @dependabot in #11717
• core: bump msgraph-sdk from 1.10.0 to 1.11.0 by @dependabot in #11716
• core, web: update translations by @authentik-automation in #11715
• core: bump goauthentik.io/api/v3 from 3.2024083.8 to 3.2024083.10 by @dependabot in #11721
• providers/oauth2: don't overwrite attributes when updating service acccount by @BeryJu in #11709
• website/integrations: Add note regarding custom scopes in Hashicorp Vault OIDC documentation by @generically-named in #11668
• policies/event_matcher: fix inconsistent behaviour by @BeryJu in #11724
• stages/authenticator: use RBAC for devices API by @rissson in #11482
• web/admin: fix invalid create date shown for MFA registered before date was saved by @BeryJu in #11728
• web/admin: fix sync single button throwing error by @BeryJu in #11727
• core: bump coverage from 7.6.3 to 7.6.4 by @dependabot in #11749
• website: bump @mdx-js/react from 3.0.1 to 3.1.0 in /website by @dependabot in #11748
• translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #11732
• translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #11734
• translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #11733
• translate: Updates for file locale/en/LC_MESSAGES/django.po in it by @transifex-integration in #11737
• translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #11735
• translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #11752
• translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #11751
• core, web: update translations by @authentik-automation in #11756
• stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in #11755
• website/docs: fix some broken links by @BoKKeR in #11742
• web/admin: update flow background by @BeryJu in #11758
• web/rac: disable DPI scaling by @BeryJu in #11757
• tests/e2e: fix dex tests failing by @BeryJu in #11761
• core: add prompt_data to auth flow by @Wouter0100 in #11702
• stages: authenticator_endpoint_gdtc by @BeryJu in #10477
• web: bump API Client version by @authentik-automation in #11770
• website: bump http-proxy-middleware from 2.0.6 to 2.0.7 in /website by @dependabot in #11771
• website: bump @types/react from 18.3.11 to 18.3.12 in /website by @dependabot in #11777
• core: bump goauthentik.io/api/v3 from 3.2024083.10 to 3.2024083.11 by @dependabot in #11776
• core, web: update translations by @authentik-automation in #11775
• web/flows: use dompurify for footer links by @BeryJu in #11773
• website: bump mermaid from 10.6.0 to 10.9.3 in /website by @dependabot in #11766
• providers/scim: add comparison with existing group on update and delta update users by @BeryJu in #11414
• web/admin: improve invalidation flow default & field grouping by @BeryJu in #11769
• root: rework CSRF middleware to set secure flag by @BeryJu in #11753
• sources: add Kerberos by @rissson in #10815
• web: bump API Client version by @authentik-automation in #11781
• core: bump cryptography from 43.0.1 to 43.0.3 by @dependabot in #11750
• web/admin: add strict dompurify config for diagram by @BeryJu in #11783
• providers/oauth2: fix amr claim not set due to login event not associated by @BeryJu in #11780
• core, web: update translations by @authentik-automation in #11782
• web/admin: Add InvalidationFlow to Radius Provider dialogues by @kensternberg-authentik in #11786
• translate: Updates for file locale/en/LC_MESSAGES/django.po in fr by @transifex-integration in #11784
• translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #11785
• stages/authenticator_validate: autoselect last used 2fa device by @gergosimonyi in #11087
• web: bump API Client version by @authentik-automation in #11792
• core: bump gssapi from 1.8.3 to 1.9.0 by @dependabot in #11791
• core: bump goauthentik.io/api/v3 from 3.2024083.11 to 3.2024083.12 by @dependabot in #11790
• core, web: update translations by @authentik-automation in #11789
• providers/proxy: fix handling of AUTHENTIK_HOST_BROWSER by @chrootlogin in #11722
• web/admin: fix missing div in wizard forms by @BeryJu in #11794
• providers/scim: clamp batch size for patch requests by @BeryJu in #11797
• website/docs: improve root page and redirect by @BeryJu in #11798
• stages/identification: add captcha to identification stage by @gergosimonyi in #11711
• providers/scim: handle no members in group in consistency check by @BeryJu in #11801
• core, web: update translations by @authentik-automation in #11803
• core: bump twilio from 9.3.4 to 9.3.5 by @dependabot in #11804
• core: bump ruff from 0.7.0 to 0.7.1 by @dependabot in #11805
• core: bump goauthentik.io/api/v3 from 3.2024083.12 to 3.2024083.13 by @dependabot in #11806
• web: bump API Client version by @authentik-automation in #11807
• translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN by @transifex-integration in #11808
• translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans by @transifex-integration in #11809
• translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #11810
• lifecycle: fix missing krb5 deps for full testing in image (cherry-pick #11815) by @gcp-cherry-pick-bot in #11816
• website/docs: update preview status of different features (cherry-pick #11817) by @gcp-cherry-pick-bot in #11818
• lifecycle: fix kdc5-config missing (cherry-pick #11826) by @gcp-cherry-pick-bot in #11829

New Contributors

• @diegmonti made their first contribution in #11096
• @naruyan made their first contribution in #11118
• @andrebrait made their first contribution in #11135
• @anthr76 made their first contribution in #11260
• @Hicks-99 made their first contribution in #11271
• @G-Pereira made their first contribution in #11274
• @jennydaman made their first contribution in #11428
• @dandrade-wave made their first contribution in #11460
• @bastouf made their first contribution in #11438
• @walhallyus made their first contribution in #11603
• @hectorwithc made their first contribution in #11649
• @MahmoudAlyuDeen made their first contribution in #11621
• @generically-named made their first contribution in #11668
• @BoKKeR made their first contribution in #11742
• @Wouter0100 made their first contribution in #11702
• @chrootlogin made their first contribution in #11722

Full Changelog: version/2024.8.3...version/2024.10.0-rc1