v2025.6.0

Changelog

• 59787ef: Bump actions/setup-go from 5.4.0 to 5.5.0 (#690) (@dependabot[bot])
• a2cd7a8: Bump github.com/getsentry/sentry-go from 0.32.0 to 0.33.0 (#692) (@dependabot[bot])
• 11b66de: Bump codecov/codecov-action from 5.4.2 to 5.4.3 (#691) (@dependabot[bot])
• 25bf167: Bump goauthentik.io/api/v3 from 3.2025040.1 to 3.2025041.1 (#693) (@dependabot[bot])
• 3d989f4: root: replace raw.githubusercontent.com by checking out repo (@BeryJu)
• 501be06: ci: only pull main repo to generate api client (@BeryJu)
• b048a14: Bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.36.1 to 2.37.0 (#694) (@dependabot[bot])
• 09c4a58: Bump codecov/test-results-action from 1.1.0 to 1.1.1 (#696) (@dependabot[bot])
• 431220f: Bump github.com/cloudflare/circl from 1.6.0 to 1.6.1 (#703) (@dependabot[bot])
• 4b8ffc9: Add Kubernetes service connection as data source (#577) (@beschoenen)
• e6cfcd5: Bump goauthentik.io/api/v3 from 3.2025041.1 to 3.2025060.1 (@dependabot[bot])
• 9367703: add ldap source user_membership_attribute (@gergosimonyi)
• 37ab508: format: align lines (@gergosimonyi)
• c4b4254: add ldap source delete_not_found_objects (@gergosimonyi)
• ab168ee: add brand client_certificates (@gergosimonyi)
• 3511f4f: format: align lines (@gergosimonyi)
• 5f0327f: add mtls stage (@gergosimonyi)
• 56454d1: Bump goauthentik.io/api/v3 from 3.2025041.1 to 3.2025060.1 (#700) (@gergosimonyi)

v2025.4.0

Changelog

• ffed591: Bump goauthentik.io/api/v3 from 3.2024123.7 to 3.2025022.5 (#666) (@dependabot[bot])
• 8492700: Bump actions/setup-go from 5.3.0 to 5.4.0 (#665) (@dependabot[bot])
• bcc71ae: refactor: 1.24 Go tools and move to pkg (#669) (@BeryJu)
• cc59ec2: fix HTTP_PROXY not respected (#670) (@BeryJu)
• 691567e: Bump crazy-max/ghaction-import-gpg from 6.2.0 to 6.3.0 (#674) (@dependabot[bot])
• 640b31c: Bump goreleaser/goreleaser-action from 6.2.1 to 6.3.0 (#673) (@dependabot[bot])
• cb574a1: Bump goauthentik.io/api/v3 from 3.2025022.6 to 3.2025023.1 (#672) (@dependabot[bot])
• d9818d5: Bump goauthentik.io/api/v3 from 3.2025023.1 to 3.2025023.2 (#675) (@dependabot[bot])
• 7b7719e: Bump codecov/codecov-action from 5.4.0 to 5.4.2 (#682) (@dependabot[bot])
• 74bfee4: Bump github.com/getsentry/sentry-go from 0.31.1 to 0.32.0 (#679) (@dependabot[bot])
• 97994dc: Bump golang.org/x/net from 0.36.0 to 0.38.0 (#684) (@dependabot[bot])
• f181ad3: Bump goauthentik.io/api/v3 from 3.2025023.2 to 3.2025024.9 (@dependabot[bot])
• 2012d98: Bump goauthentik.io/api/v3 from 3.2025023.2 to 3.2025024.9 (#687) (@melizeche)
• 6c99dc8: Bump goauthentik.io/api/v3 from 3.2025024.9 to 3.2025040.1 (#688) (@dependabot[bot])

v2025.2.0

Changelog

• 3e7fc3a: Bump goreleaser/goreleaser-action from 6.1.0 to 6.2.1 (#639) (@dependabot[bot])
• fa56c52: Bump getsentry/action-release from 1.10.1 to 1.10.4 (#638) (@dependabot[bot])
• 75bf0f6: Bump goauthentik.io/api/v3 from 3.2024123.2 to 3.2024123.3 (#637) (@dependabot[bot])
• 39fa09c: Bump goauthentik.io/api/v3 from 3.2024123.3 to 3.2024123.4 (#643) (@dependabot[bot])
• cd52111: Bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.36.0 to 2.36.1 (#648) (@dependabot[bot])
• d4fb095: Bump codecov/test-results-action from 1.0.3 to 1.0.4 (#646) (@dependabot[bot])
• 8633dcb: prevent crash when permission was not found in response (#650) (@BeryJu)
• c948768: Bump codecov/codecov-action from 5.3.1 to 5.4.0 (#652) (@dependabot[bot])
• b46b43a: Bump github.com/hashicorp/terraform-plugin-docs from 0.20.1 to 0.21.0 (#654) (@dependabot[bot])
• d4a01db: Bump getsentry/action-release from 1.10.4 to 3.0.0 (#657) (@dependabot[bot])
• 749a966: Bump getsentry/action-release from 3.0.0 to 3.1.0 (#658) (@dependabot[bot])
• 6836edb: Bump codecov/test-results-action from 1.0.4 to 1.1.0 (#659) (@dependabot[bot])
• b5b51c1: Bump golang.org/x/net from 0.34.0 to 0.36.0 (#661) (@dependabot[bot])
• ea837dd: define workflow perms (@BeryJu)
• 7645681: Bump goauthentik.io/api/v3 from 3.2024123.4 to 3.2025021.4 (#662) (@dependabot[bot])
• 6c8303e: Bump getsentry/action-release from 3.1.0 to 3.1.1 (#667) (@dependabot[bot])

v2024.12.1

Changelog

• 38befaf: Bump goauthentik.io/api/v3 from 3.2024120.2 to 3.2024121.2 (#612) (@dependabot[bot])
• 7e6942e: Bump goauthentik.io/api/v3 from 3.2024121.2 to 3.2024121.3 (#613) (@dependabot[bot])
• f7fdd65: add verification_kp to SAML source (#615) (@matthias-bruhse)
• d660170: Bump github.com/getsentry/sentry-go from 0.30.0 to 0.31.1 (#614) (@dependabot[bot])
• bf19656: Bump getsentry/action-release from 1.7.0 to 1.8.0 (#619) (@dependabot[bot])
• 2b4f554: Bump codecov/test-results-action from 1.0.1 to 1.0.2 (#618) (@dependabot[bot])
• c602d43: Bump goauthentik.io/api/v3 from 3.2024121.3 to 3.2024122.1 (#617) (@dependabot[bot])
• 8d90ada: stages_identification: fix captcha stage not being un-settable (#620) (@BeryJu)
• 2f6be60: Bump goauthentik.io/api/v3 from 3.2024122.1 to 3.2024122.2 (#621) (@dependabot[bot])
• 0158f34: Bump getsentry/action-release from 1.8.0 to 1.9.0 (#623) (@dependabot[bot])
• 14a58b3: Add UserPropertyMappings and GroupPropertyMappings to OIDC source (#605) (@JFrandon)
• 34dea4e: Bump actions/setup-go from 5.2.0 to 5.3.0 (#624) (@dependabot[bot])
• c3172b7: Bump golang.org/x/net from 0.28.0 to 0.33.0 (#625) (@dependabot[bot])
• e2cb5b9: Bump codecov/codecov-action from 5.1.2 to 5.2.0 (#626) (@dependabot[bot])
• 5ebd7a6: Bump goauthentik.io/api/v3 from 3.2024122.2 to 3.2024122.3 (#628) (@dependabot[bot])
• 79b3504: Bump codecov/codecov-action from 5.2.0 to 5.3.0 (#627) (@dependabot[bot])
• 9501dcc: Bump goauthentik.io/api/v3 from 3.2024122.3 to 3.2024123.1 (#631) (@dependabot[bot])
• d4c6c2e: Bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.35.0 to 2.36.0 (#633) (@dependabot[bot])
• 4c68f00: Bump codecov/test-results-action from 1.0.2 to 1.0.3 (#632) (@dependabot[bot])
• be5bd24: Bump goauthentik.io/api/v3 from 3.2024123.1 to 3.2024123.2 (#634) (@dependabot[bot])
• 54321a5: Bump codecov/codecov-action from 5.3.0 to 5.3.1 (#629) (@dependabot[bot])
• be8e222: Bump getsentry/action-release from 1.9.0 to 1.10.1 (#635) (@dependabot[bot])

v2024.12.0

Changelog

• d1d6e71: Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (@dependabot[bot])
• 97a1e40: Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#597) (@BeryJu)
• 8fbc0c2: Bump github.com/hashicorp/terraform-plugin-docs from 0.20.0 to 0.20.1 (@dependabot[bot])
• e805b0b: Bump github.com/hashicorp/terraform-plugin-docs from 0.20.0 to 0.20.1 (#598) (@BeryJu)
• 3567426: Bump goauthentik.io/api/v3 from 3.2024104.1 to 3.2024104.2 (@dependabot[bot])
• 7a3ba36: Bump github.com/getsentry/sentry-go from 0.29.1 to 0.30.0 (@dependabot[bot])
• 5275496: Bump github.com/getsentry/sentry-go from 0.29.1 to 0.30.0 (#600) (@BeryJu)
• 3acb043: update federation sources and add providers (@BeryJu)
• 78b9834: fix ci test reporting (@BeryJu)
• a5e7a75: Bump goauthentik.io/api/v3 from 3.2024104.1 to 3.2024104.2 (#599) (@BeryJu)
• 79bf21a: Bump goauthentik.io/api/v3 from 3.2024104.2 to 3.2024105.1 (@dependabot[bot])
• 7893e3f: Bump golang.org/x/crypto from 0.28.0 to 0.31.0 (@dependabot[bot])
• 34da589: Bump golang.org/x/crypto from 0.28.0 to 0.31.0 (#604) (@BeryJu)
• f722307: Bump goauthentik.io/api/v3 from 3.2024104.2 to 3.2024105.1 (#603) (@BeryJu)
• 8c056db: Bump goauthentik.io/api/v3 from 3.2024105.1 to 3.2024105.5 (@dependabot[bot])
• ac6dc1c: update enums (@BeryJu)
• 5706a3e: add better description for flow stage binding (@BeryJu)
• 57edeee: add redirect stage (@BeryJu)
• f947e78: add app entitlement (@BeryJu)
• db51ef6: update proxy test (@BeryJu)
• 0f9e232: fix app ent (@BeryJu)
• dfa4c74: Bump goauthentik.io/api/v3 from 3.2024105.1 to 3.2024105.5 (#607) (@BeryJu)
• 52e3f91: Bump goauthentik.io/api/v3 from 3.2024105.5 to 3.2024120.1 (@dependabot[bot])
• b16ec50: Bump goauthentik.io/api/v3 from 3.2024105.5 to 3.2024120.1 (#608) (@BeryJu)
• 25550d6: ci: add codeql (@BeryJu)
• 7fcc8cf: ci: add codeql (#609) (@BeryJu)
• 3981ac7: Create SECURITY.md (@BeryJu)
• 73d605d: ci: fix codeql permissions (@BeryJu)
• ff551c4: security: misc fixes (#610) (@BeryJu)
• 7fc3582: Bump goauthentik.io/api/v3 from 3.2024120.1 to 3.2024120.2 (#611) (@dependabot[bot])

v2024.10.2

Changelog

• 1f79e9c: Bump codecov/codecov-action from 4 to 5 (@dependabot[bot])
• 9f4d590: Bump codecov/codecov-action from 4 to 5 (#591) (@BeryJu)
• 65b49bc: add interactive flag for captcha stage (@BeryJu)
• 76e3a72: add interactive flag for captcha stage (#592) (@BeryJu)
• 95f44d9: Bump goauthentik.io/api/v3 from 3.2024102.2 to 3.2024102.3 (@dependabot[bot])
• 56317b8: Bump goauthentik.io/api/v3 from 3.2024102.2 to 3.2024102.3 (#593) (@BeryJu)
• de7cdb9: Bump goauthentik.io/api/v3 from 3.2024102.6 to 3.2024104.1 (@dependabot[bot])
• 692f105: Bump goauthentik.io/api/v3 from 3.2024102.6 to 3.2024104.1 (#594) (@BeryJu)

v2024.10.1

Changelog

• 6846199: Bump goauthentik.io/api/v3 from 3.2024100.1 to 3.2024100.2 (@dependabot[bot])
• 850fcaa: Bump goauthentik.io/api/v3 from 3.2024100.1 to 3.2024100.2 (#585) (@BeryJu)
• 54c6fc5: resource_provider_radius: fix missing property mappings field (@BeryJu)
• aa0a2b6: resource_provider_radius: fix missing property mappings field (#587) (@BeryJu)
• 4d3900c: Bump github.com/hashicorp/terraform-plugin-docs from 0.19.4 to 0.20.0 (@dependabot[bot])
• cee5fa3: Bump github.com/hashicorp/terraform-plugin-docs from 0.19.4 to 0.20.0 (#588) (@BeryJu)
• 5b66a43: Bump goreleaser/goreleaser-action from 6.0.0 to 6.1.0 (@dependabot[bot])
• 5aa50f2: Bump goreleaser/goreleaser-action from 6.0.0 to 6.1.0 (#589) (@BeryJu)
• 65f32fc: ldap_source: fix missing SNI flag (@BeryJu)
• f8d24b5: ldap_source: fix missing SNI flag (#590) (@BeryJu)

v2024.10.0

Changelog

• c58fbf0: Bump goauthentik.io/api/v3 from 3.2024082.1 to 3.2024083.1 (@dependabot[bot])
• c3940e9: Bump goauthentik.io/api/v3 from 3.2024082.1 to 3.2024083.1 (#570) (@BeryJu)
• 6ddb8a5: Bump goauthentik.io/api/v3 from 3.2024083.1 to 3.2024083.2 (@dependabot[bot])
• b72c5bd: Bump goauthentik.io/api/v3 from 3.2024083.1 to 3.2024083.2 (#571) (@BeryJu)
• 58e4f10: Bump goauthentik.io/api/v3 from 3.2024083.2 to 3.2024083.4 (@dependabot[bot])
• f726ddc: Bump goauthentik.io/api/v3 from 3.2024083.2 to 3.2024083.4 (#572) (@BeryJu)
• 170db2c: Bump goauthentik.io/api/v3 from 3.2024083.4 to 3.2024083.5 (@dependabot[bot])
• d5e6353: Bump goauthentik.io/api/v3 from 3.2024083.4 to 3.2024083.5 (#573) (@BeryJu)
• 5990ca7: Bump github.com/getsentry/sentry-go from 0.29.0 to 0.29.1 (@dependabot[bot])
• 13890f0: Bump goauthentik.io/api/v3 from 3.2024083.5 to 3.2024083.8 (@dependabot[bot])
• 949c009: Bump github.com/getsentry/sentry-go from 0.29.0 to 0.29.1 (#574) (@BeryJu)
• 1bb392d: add invalidation_flow (@BeryJu)
• 217db6e: Bump goauthentik.io/api/v3 from 3.2024083.5 to 3.2024083.8 (#575) (@BeryJu)
• b08775a: Bump goauthentik.io/api/v3 from 3.2024083.8 to 3.2024083.12 (@dependabot[bot])
• e758dfd: add oauth2_provider encryption_key (@BeryJu)
• d54a677: add authentik_stage_authenticator_endpoint_gdtc resource (@BeryJu)
• 0a4b138: add group_matching_mode to all sources (@BeryJu)
• acd56d0: add kerberos source (@BeryJu)
• fe43df7: add kerberos mappings (@BeryJu)
• 7883386: fix schema (@BeryJu)
• a7a7220: cleanup (@BeryJu)
• e0d17db: Bump goauthentik.io/api/v3 from 3.2024083.8 to 3.2024083.12 (#579) (@BeryJu)
• f3c6367: Bump goauthentik.io/api/v3 from 3.2024083.12 to 3.2024083.14 (@dependabot[bot])
• 6f07d76: add captcha_stage to identification stage (@BeryJu)
• 74ed592: Bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.34.0 to 2.35.0 (@dependabot[bot])
• 119dac5: Bump goauthentik.io/api/v3 from 3.2024083.12 to 3.2024083.14 (#581) (@BeryJu)
• c0fd3af: tidy (@BeryJu)
• 89bccec: Bump goauthentik.io/api/v3 from 3.2024083.14 to 3.2024100.1 (@dependabot[bot])
• 09688a4: Bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.34.0 to 2.35.0 (#583) (@BeryJu)
• bb5ebb9: Bump goauthentik.io/api/v3 from 3.2024083.14 to 3.2024100.1 (#584) (@BeryJu)

v2024.8.4

Changelog

• 492fcaa: try background fix (@larsl-net)
• b338c17: Fix flow background update (#482) (@larsl-net)
• bfe0c69: Bump goauthentik.io/api/v3 from 3.2024081.1 to 3.2024082.1 (@dependabot[bot])
• 166e832: Bump goauthentik.io/api/v3 from 3.2024081.1 to 3.2024082.1 (#567) (@BeryJu)
• c05b1f6: fix bug in include_users not correctly setting bool (@ryanpesek)
• d161223: add tests for include_users (@ryanpesek)
• f659112: don't hardcode special case for include_users (@BeryJu)
• 5ba2f9e: Fix include_users in authentik_group and authentik_groups data sources (#569) (@BeryJu)
• 8072b60: Fix flow background update (#566) (@BeryJu)

v2024.8.3

Changelog

• a655f03: Bump goauthentik.io/api/v3 from 3.2024080.1 to 3.2024081.1 (@dependabot[bot])
• 1a304cb: Bump goauthentik.io/api/v3 from 3.2024080.1 to 3.2024081.1 (#563) (@BeryJu)
• d775b98: Bump github.com/getsentry/sentry-go from 0.28.1 to 0.29.0 (@dependabot[bot])
• 2cd6d46: Bump github.com/getsentry/sentry-go from 0.28.1 to 0.29.0 (#564) (@BeryJu)
• 7832c64: fix rbac for global permissions (@BeryJu)
• ec55b30: fix test reports (@BeryJu)
• 1ec31e9: fix rbac for global permissions (#565) (@BeryJu)