Release 2023.10.0

See https://goauthentik.io/docs/releases/2023.10

What's Changed

• web: bump API Client version by @authentik-automation in #6734
• root: connect to backend via socket by @BeryJu in #6720
• web: replace ampersand by @BeryJu in #6737
• web/admin: fix application icon size by @BeryJu in #6738
• core: compile backend translations by @authentik-automation in #6739
• web/admin: fix circular dependency by @BeryJu in #6740
• root: fix broken celery dependency by @BeryJu in #6744
• web: bump rollup-plugin-copy from 3.4.0 to 3.5.0 in /web by @dependabot in #6743
• core: bump celery from 5.3.1 to 5.3.4 by @dependabot in #6746
• core: bump goauthentik.io/api/v3 from 3.2023081.3 to 3.2023082.1 by @dependabot in #6747
• sources/ldap: fix FreeIPA nsaccountlock sync by @BeryJu in #6745
• stages/authenticator: vendor otp by @BeryJu in #6741
• web: bump API Client version by @authentik-automation in #6748
• website/docs: enterprise: add note about upgrading the amount of users by @rissson in #6750
• ci: bump actions/checkout from 3 to 4 by @dependabot in #6754
• core: bump django from 4.2.4 to 4.2.5 by @dependabot in #6751
• web: bump @types/codemirror from 5.60.9 to 5.60.10 in /web by @dependabot in #6758
• web: bump @typescript-eslint/parser from 6.5.0 to 6.6.0 in /web by @dependabot in #6757
• web: bump the eslint group in /web with 1 update by @dependabot in #6755
• web: bump @types/chart.js from 2.9.37 to 2.9.38 in /web by @dependabot in #6756
• web: bump the babel group in /web with 5 updates by @dependabot in #6753
• core: bump goauthentik.io/api/v3 from 3.2023082.1 to 3.2023082.2 by @dependabot in #6752
• web: don't import entire SourceViewPage in flow and user interface by @BeryJu in #6761
• stages/password: fix failed_attempts_before_cancel allowing one too m… by @BeryJu in #6763
• flows: remove need for post() wrapper by using dispatch by @BeryJu in #6765
• policies/reputation: require either check to be enabled by @BeryJu in #6764
• stages/password: move password validation to serializer by @BeryJu in #6766
• web/admin: fix not being able to unset certificates by @kensternberg-authentik in #6767
• web: bump pyright from 1.1.325 to 1.1.326 in /web by @dependabot in #6774
• web: bump the sentry group in /web with 2 updates by @dependabot in #6773
• core: bump goauthentik.io/api/v3 from 3.2023082.2 to 3.2023082.6 by @dependabot in #6770
• core: bump golang.org/x/oauth2 from 0.11.0 to 0.12.0 by @dependabot in #6772
• root: lock node to 20.5 by @BeryJu in #6776
• core: bump github.com/getsentry/sentry-go from 0.23.0 to 0.24.0 by @dependabot in #6771
• web: bump rollup from 3.28.1 to 3.29.0 in /web by @dependabot in #6775
• website/dev-docs: add raw markdown template by @tanberry in #6768
• website/docs: rework user reference page by @BeryJu in #6777
• translate: Updates for file web/xliff/en.xlf in zh-Hans on branch main by @transifex-integration in #6791
• translate: Updates for file web/xliff/en.xlf in zh_CN on branch main by @transifex-integration in #6788
• translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans on branch main by @transifex-integration in #6790
• translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN on branch main by @transifex-integration in #6789
• core: bump coverage from 7.3.0 to 7.3.1 by @dependabot in #6786
• web: bump the sentry group in /web with 2 updates by @dependabot in #6787
• website: bump react-tooltip from 5.21.1 to 5.21.3 in /website by @dependabot in #6785
• core: bump golang from 1.21.0-bookworm to 1.21.1-bookworm by @dependabot in #6783
• website/dev-docs: more raw templates, fixed wget link by @tanberry in #6778
• core: bump debugpy from 1.6.7.post1 to 1.7.0 by @dependabot in #6799
• web: bump core-js from 3.32.1 to 3.32.2 in /web by @dependabot in #6800
• core: bump pytest from 7.4.1 to 7.4.2 by @dependabot in #6803
• core: bump twilio from 8.7.0 to 8.8.0 by @dependabot in #6802
• web: bump @formatjs/intl-listformat from 7.4.0 to 7.4.1 in /web by @dependabot in #6801
• core: bump gitpython from 3.1.34 to 3.1.35 by @dependabot in #6805
• sources/ldap: fix task timeout for ldap_sync_all and ldap_sync_single by @a-gerhard in #6809
• web: bump rollup from 3.29.0 to 3.29.1 in /web by @dependabot in #6828
• core: bump black from 23.7.0 to 23.9.1 by @dependabot in #6833
• core: bump pdoc from 14.0.0 to 14.1.0 by @dependabot in #6832
• ci: bump tibdex/github-app-token from 1 to 2 by @dependabot in #6831
• web: bump the eslint group in /web with 1 update by @dependabot in #6827
• web: bump @formatjs/intl-listformat from 7.4.1 to 7.4.2 in /web by @dependabot in #6830
• web: bump vite-tsconfig-paths from 4.2.0 to 4.2.1 in /web by @dependabot in #6829
• translate: Updates for file web/xliff/en.xlf in nl on branch main by @transifex-integration in #6821
• translate: Updates for file locale/en/LC_MESSAGES/django.po in nl on branch main by @transifex-integration in #6820
• web: bump the babel group in /web with 1 update by @dependabot in #6826
• core: compile backend translations by @authentik-automation in #6835
• sources/ldap: dont prefetch useless items by @a-gerhard in #6812
• website/docs: add missing word to index.mdx by @mlbarrow in #6818
• web/admin: fix flow-search not being able to unset by @BeryJu in #6838
• ci: docker build: enable GHA cache by @rissson in #5341
• providers/scim: check that a provider exists before starting scim task by @BeryJu in #6841
• core: remove celery's duplicate max_tasks_per_child by @BeryJu in #6840
• website/blogs: blog about Sourcegraph by @tanberry in #6814
• website/docs: prepare 2023.8.3 release notes by @BeryJu in #6843
• web/admin: simplify sidebar renderer by @kensternberg-authentik in #6797
• web: bump API Client version by @authentik-automation in #6850
• web: bump @typescript-eslint/parser from 6.6.0 to 6.7.0 in /web by @dependabot in #6847
• web: bump the eslint group in /web with 1 update by @dependabot in #6846
• root: fix dumb-init by @rissson in #6853
• providers/saml: set WantAuthnRequestsSigned in metadata by @BeryJu in #6851
• root: fix gunicorn not starting by @rissson in #6860
• core: bump goauthentik.io/api/v3 from 3.2023082.6 to 3.2023083.1 by @dependabot in #6859
• core: bump ruff from 0.0.287 to 0.0.288 by @dependabot in #6858
• root: add option to disable beat when running worker by @BeryJu in #6849
• website/docs: tweak Config page by @tanberry in #6854
• core: bump ruff from 0.0.288 to 0.0.289 by @dependabot in #6868
• ci: bump docker/setup-qemu-action from 2.2.0 to 3.0.0 by @dependabot in #6873
• ci: bump docker/build-push-action from 4 to 5 by @dependabot in #6875
• ci: bump docker/login-action from 2 to 3 by @dependabot in #6874
• ci: bump docker/setup-buildx-action from 2 to 3 by @dependabot in #6872
• web: bump @lit-labs/context from 0.4.0 to 0.4.1 in /web by @dependabot in #6871
• web: bump pyright from 1.1.326 to 1.1.327 in /web by @dependabot in #6870
• web: bump @lit/localize-tools from 0.6.9 to 0.6.10 in /web by @dependabot in #6869
• core: bump debugpy from 1.7.0 to 1.8.0 by @dependabot in #6867
• web: bump the sentry group in /web with 2 updates by @dependabot in #6878
• root: include generated ts client in dev builds [AUTH-77] by @rissson in #6861
• sources/ldap: fix inverted interpretation of FreeIPA nsaccountlock by @BeryJu in #6877
• web: Detangling some circular dependencies in Admin and User by @kensternberg-authentik in #6852
• root: split codeowners by @BeryJu in #6884
• web: detangle element to admin references by @kensternberg-authentik in #6864
• core: bump github.com/getsentry/sentry-go from 0.24.0 to 0.24.1 by @dependabot in #6894
• web: bump the esbuild group in /web with 2 updates by @dependabot in #6892
• core: bump sentry-sdk from 1.30.0 to 1.31.0 by @dependabot in #6893
• web: remove ./element⇢./user references by @kensternberg-authentik in #6866
• website/blogs: Blog about closed source vs open source by @tanberry in #6890
• web: bump the babel group in /web with 1 update by @dependabot in #6897
• policies: specify failure result by @BeryJu in #6887
• web: bump API Client version by @authentik-automation in #6898
• web: detangle common from elements by @kensternberg-authentik in #6888
• web: detangle components from applications by @kensternberg-authentik in #6891
• core: bump goauthentik.io/api/v3 from 3.2023083.1 to 3.2023083.2 by @dependabot in #6904
• website: bump react-tooltip from 5.21.3 to 5.21.4 in /website by @dependabot in #6903
• ci: bump codecov/codecov-action from 3 to 4 by @dependabot in #6902
• web/admin: fix webauthn label order, add raw value by @BeryJu in #6905
• translate: Updates for file web/xliff/en.xlf in zh-Hans on branch main by @transifex-integration in #6909
• translate: Updates for file web/xliff/en.xlf in zh_CN on branch main by @transifex-integration in #6908
• translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN on branch main by @transifex-integration in #6907
• translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans on branch main by @transifex-integration in #6910
• core: compile backend translations by @authentik-automation in #6912
• website: replace login card with png by @BeryJu in #6911
• sources/ldap: add warning when a property mapping returns None or bytes by @BeryJu in #6913
• core: create app transactional api by @BeryJu in #6446
• web: bump API Client version by @authentik-automation in #6918
• core: bump github.com/go-ldap/ldap/v3 from 3.4.5 to 3.4.6 by @dependabot in #6926
• core: bump django-filter from 23.2 to 23.3 by @dependabot in #6924
• core: bump pycryptodome from 3.18.0 to 3.19.0 by @dependabot in #6922
• web: bump rollup from 3.29.1 to 3.29.2 in /web by @dependabot in #6921
• web: bump the storybook group in /web with 5 updates by @dependabot in #6920
• web: bump the babel group in /web with 2 updates by @dependabot in #6919
• core: bump ruff from 0.0.289 to 0.0.290 by @dependabot in #6923
• core: bump goauthentik.io/api/v3 from 3.2023083.2 to 3.2023083.3 by @dependabot in #6925
• website/blogs: added emm dashes by @tanberry in #6927
• web/admin: user details few tooltip buttons by @kensternberg-authentik in #6899
• sources/ldap: add lock to sync by @BeryJu in #6930
• website/docs: add info about our docs by @tanberry in #6936
• web: bump turnstile-types from 1.1.2 to 1.1.3 in /web by @dependabot in #6935
• web: bump @typescript-eslint/parser from 6.7.0 to 6.7.2 in /web by @dependabot in #6934
• website: bump postcss from 8.4.29 to 8.4.30 in /website by @dependabot in #6932
• web: bump the eslint group in /web with 1 update by @dependabot in #6933
• web: bump the storybook group in /web with 1 update by @dependabot in #6939
• web: bump pyright from 1.1.327 to 1.1.328 in /web by @dependabot in #6940
• core: bump node from 20.5 to 20.6 by @dependabot in #6784
• core: bump urllib3 from 2.0.4 to 2.0.5 by @dependabot in #6948
• web: bump @types/grecaptcha from 3.0.4 to 3.0.5 in /web by @dependabot in #6947
• web: bump the storybook group in /web with 6 updates by @dependabot in #6945
• web: bump the eslint group in /web with 1 update by @dependabot in #6946
• web: bump the sentry group in /web with 2 updates by @dependabot in #6944
• website: bump the docusaurus group in /website with 3 updates by @dependabot in #6943
• root: Add setting to adjust database config for pgpool by @boesr in #6949
• core: bump twilio from 8.8.0 to 8.9.0 by @dependabot in #6953
• root: don't exclude enterprise from container image by @BeryJu in #6956
• core: bump cryptography from 41.0.3 to 41.0.4 by @dependabot in #6951
• web: improve testability by @kensternberg-authentik in #6952
• website/integrations: fix typo by @rissson in #6958
• translate: Updates for file locale/en/LC_MESSAGES/django.po in fr on branch main by @transifex-integration in #6960
• core: bump drf-spectacular from 0.26.4 to 0.26.5 by @dependabot in #6966
• core: bump django-silk from 5.0.3 to 5.0.4 by @dependabot in #6967
• core: bump ruff from 0.0.290 to 0.0.291 by @dependabot in #6965
• web: bump rollup from 3.29.2 to 3.29.3 in /web by @dependabot in #6970
• core: bump psycopg from 3.1.10 to 3.1.11 by @dependabot in #6964
• web: bump the storybook group in /web with 5 updates by @dependabot in #6968
• web: bump the babel group in /web with 3 updates by @dependabot in #6971
• web: bump the eslint group in /web with 1 update by @dependabot in #6969
• website: bump remark-github from 11.2.4 to 12.0.0 in /website by @dependabot in #6963
• web/flows: improve WebAuthn error messages by @BeryJu in #6957
• root: remove outdated sponsorship section on readme by @okamidash in #6973
• web/user: fix unenrollment flow not being shown by @BeryJu in #6972
• website/blogs: Swap em dash and hyphen on blog post by @rebeccadee in #6978
• translate: Updates for file web/xliff/en.xlf in zh-Hans on branch main by @transifex-integration in #6976
• translate: Updates for file web/xliff/en.xlf in zh_CN on branch main by @transifex-integration in #6975
• web: bump the eslint group in /web with 1 update by @dependabot in #6983
• web: bump @rollup/plugin-typescript from 11.1.3 to 11.1.4 in /web by @dependabot in #6985
• web: bump the sentry group in /web with 2 updates by @dependabot in #6982
• core: bump pylint from 2.17.5 to 2.17.6 by @dependabot in #6980
• core: bump selenium from 4.12.0 to 4.13.0 by @dependabot in #6981
• core: bump pydantic from 2.3.0 to 2.4.0 by @dependabot in #6979
• web: bump @typescript-eslint/parser from 6.7.2 to 6.7.3 in /web by @dependabot in #6984
• core: prevent self-impersonation by @BeryJu in #6885
• root: make postgres connection in makefile customizable by @kensternberg-authentik in #6977
• root: make Celery worker concurrency configurable by @a-gerhard in #6837
• website/blogs: Blog about m2m by @tanberry in #6974
• sources/ldap: add default property mapping to mirror directory structure by @BeryJu in #6990
• root: replace boj/redistore with vendored version of rbcervilla/redisstore by @BeryJu in #6988
• root: disable APPEND_SLASH by @BeryJu in #6928
• web/user: fix incorrect link to admin interface by @BeryJu in #6993
• website/blog: fix missing link in m2m post by @BeryJu in #6994
• website/blog: improved sentence by @tanberry in #6995
• web: bump pyright from 1.1.328 to 1.1.329 in /web by @dependabot in #7000
• web: bump the sentry group in /web with 2 updates by @dependabot in #6999
• core: bump pydantic from 2.4.0 to 2.4.1 by @dependabot in #6998
• core: bump psycopg from 3.1.11 to 3.1.12 by @dependabot in #6997
• flows: stage_invalid() makes flow restart depending on invalid_response_action setting by @BeryJu in #6780
• root: handle SIGHUP and SIGUSR2, healthcheck gunicorn by @rissson in #6630
• website/blog: add info-block to blog about m2m by @tanberry in #7002
• root: fix missing /lifecycle in path by @BeryJu in #7003
• core: bump github.com/redis/go-redis/v9 from 9.2.0 to 9.2.1 by @dependabot in #7008
• website: bump react-tooltip from 5.21.4 to 5.21.5 in /website by @dependabot in #7006
• web: bump the esbuild group in /web with 2 updates by @dependabot in #7005
• core: bump github.com/prometheus/client_golang from 1.16.0 to 1.17.0 by @dependabot in #7007
• web: bump rollup from 3.29.3 to 3.29.4 in /web by @dependabot in #7009
• internal: fix redis session store by @BeryJu in #7011
• website: bump postcss from 8.4.30 to 8.4.31 in /website by @dependabot in #7015
• core: bump pydantic from 2.4.1 to 2.4.2 by @dependabot in #7014
• web/admin: invitation stage: default "continue without invitation" to false by @rissson in #7017
• core: bump packaging from 23.1 to 23.2 by @dependabot in #7024
• core: bump django-redis from 5.3.0 to 5.4.0 by @dependabot in #7023
• core: bump pylint from 2.17.6 to 2.17.7 by @dependabot in #7022
• core: bump webauthn from 1.10.1 to 1.11.0 by @dependabot in #7021
• web: bump core-js from 3.32.2 to 3.33.0 in /web by @dependabot in #7020
• web: bump mermaid from 10.4.0 to 10.5.0 in /web by @dependabot in #7026
• stages/invitation: fix mis-matched serializer class for invitation by @BeryJu in #7018
• events: fix error when storing events with date/time/datetime/etc by @BeryJu in #7028
• web: locales: rename fr_FR to fr to match transifex by @rissson in #7012
• website/docs: add notice for nginx ingress configuration requirement by @BeryJu in #7027
• stages/email: rework email templates by @BeryJu in #7029
• blueprints: fix mismatched user-login stage order by @BeryJu in #7030
• web/admin: use

   for order field on bound elements by @BeryJu in #7031

• web: add webdriverIO testing layer by @kensternberg-authentik in #6959
• web: bump the sentry group in /web with 2 updates by @dependabot in #7035
• web: bump @wdio/local-runner from 8.16.12 to 8.16.18 in /tests/wdio by @dependabot in #7036
• web: bump @wdio/spec-reporter from 8.16.12 to 8.16.17 in /tests/wdio by @dependabot in #7034
• web: bump @wdio/cli from 8.16.12 to 8.16.18 in /tests/wdio by @dependabot in #7033
• web: bump @wdio/mocha-framework from 8.16.12 to 8.16.17 in /tests/wdio by @dependabot in #7032
• web: bump @typescript-eslint/parser from 6.7.3 to 6.7.4 in /tests/wdio by @dependabot in #7038
• core: bump ruff from 0.0.291 to 0.0.292 by @dependabot in #7040
• web: bump @typescript-eslint/parser from 6.7.3 to 6.7.4 in /web by @dependabot in #7041
• web: bump the eslint group in /tests/wdio with 1 update by @dependabot in #7037
• web: bump the eslint group in /web with 1 update by @dependabot in #7039
• translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans on branch main by @transifex-integration in #7044
• translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN on branch main by @transifex-integration in #7043
• core: bump urllib3 from 2.0.5 to 2.0.6 by @dependabot in #7042
• web: laying the groundwork for future expansion by @kensternberg-authentik in #7045
• core: bump coverage from 7.3.1 to 7.3.2 by @dependabot in #7047
• core: bump codespell from 2.2.5 to 2.2.6 by @dependabot in #7046
• web/flows: bottom-align about text on flows page by @BeryJu in #7051
• web: bump API Client version by @authentik-automation in #7052
• web/flows: fix plex login not opening new tab on mobile safari by @BeryJu in #7050
• Add meta description to black box blog post by @rebeccadee in #7049
• core: bump goauthentik.io/api/v3 from 3.2023083.3 to 3.2023083.4 by @dependabot in #7061
• core: bump duo-client from 5.0.1 to 5.1.0 by @dependabot in #7062
• web: bump the wdio group in /tests/wdio with 2 updates by @dependabot in #7063
• web: bump the storybook group in /web with 5 updates by @dependabot in #7059
• web: bump pyright from 1.1.329 to 1.1.330 in /web by @dependabot in #7060
• translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN on branch main by @transifex-integration in #7056
• translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans on branch main by @transifex-integration in #7057
• web: bump postcss from 8.4.29 to 8.4.31 in /web by @dependabot in #7064
• translate: Updates for file locale/en/LC_MESSAGES/django.po in fr on branch main by @transifex-integration in #7065
• core: bump django from 4.2.5 to 4.2.6 by @dependabot in #7066
• web: package up horizontal elements into their own components by @kensternberg-authentik in #7053
• root: extended flow and policy metrics by @BeryJu in #7067
• policies: fix cached policy metric by @BeryJu in #7068
• core: bump github.com/getsentry/sentry-go from 0.24.1 to 0.25.0 by @dependabot in #7070
• web: bump the wdio group in /tests/wdio with 2 updates by @dependabot in #7069
• website/blog: SCIM blog by @tanberry in #7072
• root: Support PyCharm's test runner by @PKizzle in #7074
• core: bump golang from 1.21.1-bookworm to 1.21.2-bookworm by @dependabot in #7085
• core: bump golang.org/x/sync from 0.3.0 to 0.4.0 by @dependabot in #7086
• core: bump twilio from 8.9.0 to 8.9.1 by @dependabot in #7087
• web: bump @rollup/plugin-terser from 0.4.3 to 0.4.4 in /web by @dependabot in #7084
• web: bump @rollup/plugin-babel from 6.0.3 to 6.0.4 in /web by @dependabot in #7083
• web: bump @rollup/plugin-node-resolve from 15.2.1 to 15.2.2 in /web by @dependabot in #7079
• web: bump rollup from 3.29.4 to 4.0.0 in /web by @dependabot in #7080
• web: bump @rollup/plugin-typescript from 11.1.4 to 11.1.5 in /web by @dependabot in #7078
• web: bump @rollup/plugin-replace from 5.0.2 to 5.0.3 in /web by @dependabot in #7082
• web: bump @rollup/plugin-commonjs from 25.0.4 to 25.0.5 in /web by @dependabot in #7081
• web: bump rollup from 4.0.0 to 4.0.1 in /web by @dependabot in #7091
• web: bump rollup from 4.0.1 to 4.0.2 in /web by @dependabot in #7095
• website/docs: fix typo in providers/scim by @almereyda in #7076
• root: Ignore the vendor folder by @PKizzle in #7094
• sources/ldap: fix attribute path resolution by @BeryJu in #7090
• lifecycle: improve reliability of system migrations by @BeryJu in #7089
• providers/saml: add default RelayState value for IDP-initiated requests by @BeryJu in #7100
• web: bump API Client version by @authentik-automation in #7101
• web: bump the storybook group in /web with 1 update by @dependabot in #7102
• web: bump the eslint group in /web with 1 update by @dependabot in #7103
• web: bump @rollup/plugin-node-resolve from 15.2.2 to 15.2.3 in /web by @dependabot in #7104
• providers/proxy: improve SLO by backchannel logging out sessions by @BeryJu in #7099
• web: bump the eslint group in /tests/wdio with 1 update by @dependabot in #7107
• core: bump golang.org/x/oauth2 from 0.12.0 to 0.13.0 by @dependabot in #7106
• core: bump goauthentik.io/api/v3 from 3.2023083.4 to 3.2023083.5 by @dependabot in #7105
• core/api: add uuid field to core api user http response by @horego in #7110
• web: bump the wdio group in /tests/wdio with 4 updates by @dependabot in #7108
• translate: Updates for file web/xliff/en.xlf in zh_CN on branch main by @transifex-integration in #7111
• translate: Updates for file web/xliff/en.xlf in zh-Hans on branch main by @transifex-integration in #7112
• web: bump API Client version by @authentik-automation in #7113
• providers/ldap: add windows adsi support by @vherrlein in #7098
• core: bump Go from 1.20 to 1.21 by @PKizzle in #7117
• lifecycle: fix install_id migration not running by @BeryJu in #7116
• web: bump the wdio group in /tests/wdio with 4 updates by @dependabot in #7129
• web: bump the eslint group in /web with 2 updates by @dependabot in #7127
• core: bump selenium from 4.13.0 to 4.14.0 by @dependabot in #7126
• core: bump structlog from 23.1.0 to 23.2.0 by @dependabot in #7125
• web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #7128
• web: bump @lit/localize-tools from 0.6.10 to 0.7.0 in /web by @dependabot in #7133
• web: bump @lit-labs/task from 3.0.2 to 3.1.0 in /web by @dependabot in #7132
• providers/proxy: fix redis cookies missing strict path by @BeryJu in #7135
• website/blog: Fix typo in SCIM post by @rebeccadee in #7136
• website/docs: fix PowerDNS Docker Hub repo name by @Baptistecottey in #7134
• core: bump goauthentik.io/api/v3 from 3.2023083.5 to 3.2023083.6 by @dependabot in #7124
• core: bump gitpython from 3.1.35 to 3.1.37 by @dependabot in #7140
• core: bump golang from 1.21.2-bookworm to 1.21.3-bookworm by @dependabot in #7142
• web: bump pyright from 1.1.330 to 1.1.331 in /web by @dependabot in #7143
• website: make get started on pricing page go to customer portal by @BeryJu in #7147
• core: bump sentry-sdk from 1.31.0 to 1.32.0 by @dependabot in #7150
• web: bump the babel group in /web with 5 updates by @dependabot in #7149
• core: bump golang.org/x/net from 0.16.0 to 0.17.0 by @dependabot in #7148
• translate: Updates for file locale/en/LC_MESSAGES/django.po in de by @transifex-integration in #7151
• ci: disable ghcr retention schedule while it's broken by @BeryJu in #7154
• tests: fix potential infinite wait in tests spinning up a container by @BeryJu in #7153
• web/admin: add additional Flow info by @BeryJu in #7155
• web: fix form default submit handler by @BeryJu in #7122
• web: patternfly hints as ak-web-component by @kensternberg-authentik in #7120
• web: change 'Attributes' to 'Custom attributes' on Invitation Field by @kensternberg-authentik in #7145
• website/docs: Balok pr for User docs by @tanberry in #7139
• translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #7158
• translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #7161
• translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #7162
• web: bump the wdio group in /tests/wdio with 4 updates by @dependabot in #7160
• providers/scim: remove preview by @BeryJu in #7166
• web: bump the wdio group in /tests/wdio with 3 updates by @dependabot in #7180
• web: bump rollup from 4.0.2 to 4.1.3 in /web by @dependabot in #7179
• web: bump yaml from 2.3.2 to 2.3.3 in /web by @dependabot in #7176
• web: bump @rollup/plugin-commonjs from 25.0.5 to 25.0.7 in /web by @dependabot in #7178
• web: bump the sentry group in /web with 2 updates by @dependabot in #7175
• web: bump @rollup/plugin-replace from 5.0.3 to 5.0.4 in /web by @dependabot in #7177
• web: bump @formatjs/intl-listformat from 7.4.2 to 7.5.0 in /web by @dependabot in #7182
• web: bump rollup from 4.1.3 to 4.1.4 in /web by @dependabot in #7181
• website/docs: fix API OAuth token usage by @duhast in #7159
• sources/ldap: made ldap_sync_single calls from ldap_sync_all asynchronous by @a-gerhard in #6862
• outposts: use channel groups instead of saving channel names by @BeryJu in #7183
• lifecycle: re-fix system migrations by @BeryJu in #7185
• core: Initial RBAC by @BeryJu in #6806
• web: bump API Client version by @authentik-automation in #7186
• website: bump @babel/traverse from 7.21.4 to 7.23.2 in /website by @dependabot in #7187
• rbac: revisions by @BeryJu in #7188
• web: the return of pseudolocalization by @kensternberg-authentik in #7190
• web: bump the eslint group in /web with 2 updates by @dependabot in #7193
• core: bump ruff from 0.0.292 to 0.1.0 by @dependabot in #7194
• web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #7192
• web: bump the esbuild group in /web with 2 updates by @dependabot in #7195
• translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #7189
• ci: test with postgres 16 by @rissson in #7196
• translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #7197
• web: Updates to the Context and Tasks libraries from lit. by @kensternberg-authentik in #7168
• core: bump urllib3 from 2.0.6 to 2.0.7 by @dependabot in #7201
• core: bump black from 23.9.1 to 23.10.0 by @dependabot in #7200
• web: bump the wdio group in /tests/wdio with 4 updates by @dependabot in #7199
• website/docs: added Note in Beta docs by @tanberry in #7203
• web: bump @types/grecaptcha from 3.0.5 to 3.0.6 in /web by @dependabot in #7207
• web: bump pyright from 1.1.331 to 1.1.332 in /web by @dependabot in #7208
• web: bump @types/chart.js from 2.9.38 to 2.9.39 in /web by @dependabot in #7206
• web: bump @types/codemirror from 5.60.10 to 5.60.11 in /web by @dependabot in #7209
• web: bump the sentry group in /web with 2 updates by @dependabot in #7211
• web: bump the storybook group in /web with 5 updates by @dependabot in #7212
• enterprise: bump license usage task frequency by @BeryJu in #7215
• docs: update full-dev-setup docs by @smusali in #7205
• stage/deny: add custom message by @smusali in #7144
• web: bump API Client version by @authentik-automation in #7218
• providers/radius: TOTP MFA support by @BeryJu in #7217
• core: bump goauthentik.io/api/v3 from 3.2023083.7 to 3.2023083.8 by @dependabot in #7221
• web: bump API Client version by @authentik-automation in #7220
• web: Application wizard v2 with tests by @kensternberg-authentik in #7004
• website/blogs: blog about sso tax by @tanberry in #7202
• translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #7225
• translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #7224
• web: bump @types/codemirror from 5.60.11 to 5.60.12 in /web by @dependabot in #7223
• website/integrations: grafana: add Helm and Terraform config examples by @senare in #7121
• core/rbac: fix missing field when removing perm, add delete from object page by @BeryJu in #7226
• stages/email: Fix query parameters getting lost in Email links by @roney492 in #5376
• web/admin: decrease wizard hint padding by @BeryJu in #7227
• web/admin: fix prompt form and codemirror mode by @BeryJu in #7231
• web/flows: update flow background by @BeryJu in #7232
• web: isolate clipboard handling by @kensternberg-authentik in #7229
• translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #7236
• web: bump the wdio group in /tests/wdio with 4 updates by @dependabot in #7241
• web: bump the storybook group in /web with 5 updates by @dependabot in #7240
• core: bump twilio from 8.9.1 to 8.10.0 by @dependabot in #7239
• core: bump ruff from 0.1.0 to 0.1.1 by @dependabot in #7238
• translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #7235
• web: fix bad comment that was confusing lit-analyze by @kensternberg-authentik in #7234
• core: bump node from 20 to 21 by @dependabot in #7237
• web: bump core-js from 3.33.0 to 3.33.1 in /web by @dependabot in #7243
• lifecycle: fix otp_merge migration again by @BeryJu in #7244
• website/blogs: Fix sso blog to remove 3rd reason by @tanberry in #7230
• sources/oauth: periodically update OAuth sources' OIDC configuration by @BeryJu in #7245
• sources/oauth: include default JWKS URLs for OAuth sources by @BeryJu in #6992
• web: bump API Client version by @authentik-automation in #7246
• web/admin: improve user email button labels by @kensternberg-authentik in #7233
• sources/oauth: fix oidc well-known parsing by @BeryJu in #7248
• web: break circular dependency between AKElement & Interface. by @kensternberg-authentik in #7165
• web: bump mermaid from 10.5.0 to 10.5.1 in /web by @dependabot in #7247
• web: bump the eslint group in /web with 1 update by @dependabot in #7250
• sources/oauth: fix name clash by @BeryJu in #7253
• web: bump the eslint group in /tests/wdio with 1 update by @dependabot in #7257
• web: bump the wdio group in /tests/wdio with 1 update by @dependabot in #7258
• core: bump goauthentik.io/api/v3 from 3.2023083.9 to 3.2023083.10 by @dependabot in #7256
• core: bump pylint-django from 2.5.3 to 2.5.4 by @dependabot in #7255
• web/admin: small wizard fixes by @BeryJu in #7259
• web: 3 fixes for small typos, annoyances, and improvements by @kensternberg-authentik in #7249
• website/blogs: Okta breach blog by @tanberry in #7265
• stages/authenticator_sms: fix error when phone number from context already exists by @BeryJu in #7264
• website/blogs: edited to add 1Password by @tanberry in #7266
• web: bump @trivago/prettier-plugin-sort-imports from 4.2.0 to 4.2.1 in /web by @dependabot in #7272
• core: bump black from 23.10.0 to 23.10.1 by @dependabot in #7273
• web: bump @trivago/prettier-plugin-sort-imports from 4.2.0 to 4.2.1 in /tests/wdio by @dependabot in #7275
• web: bump the eslint group in /web with 2 updates by @dependabot in #7269
• core: bump pylint-django from 2.5.4 to 2.5.5 by @dependabot in #7271
• ci: bump actions/setup-node from 3 to 4 by @dependabot in #7268
• translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #7277
• translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #7278
• web: bump the eslint group in /tests/wdio with 2 updates by @dependabot in #7274
• core: bump pylint from 2.17.7 to 3.0.2 by @dependabot in #7270
• website/blogs: fixed typo in blog by @tanberry in #7281
• web: bump the wdio group in /tests/wdio with 3 updates by @dependabot in #7290
• core: bump pytest from 7.4.2 to 7.4.3 by @dependabot in #7288
• core: bump ruff from 0.1.1 to 0.1.2 by @dependabot in #7289
• web: bump the eslint group in /web with 1 update by @dependabot in #7286
• web: bump the sentry group in /web with 2 updates by @dependabot in #7285
• website: bump react-tooltip from 5.21.5 to 5.21.6 in /website by @dependabot in #7283
• web: bump pyright from 1.1.332 to 1.1.333 in /web by @dependabot in #7287
• core: Use branding_title in the end session page by @duhast in #7282
• web/admin: small fixes by @BeryJu in #7292
• web/admin: disable wizard banner for now by @BeryJu in #7294
• web: fix typo in traefik name by @rissson in #7296
• web/admin: add preview banner to RBAC pages by @BeryJu in #7295
• translate: Updates for file web/xliff/en.xlf in zh-Hans by @transifex-integration in #7300
• translate: Updates for file web/xliff/en.xlf in zh_CN by @transifex-integration in #7299
• web: extract form processing by @kensternberg-authentik in #7298
• web: bump ts-lit-plugin from 1.2.1 to 2.0.0 in /web by @dependabot in #7308
• core: bump duo-client from 5.1.0 to 5.2.0 by @dependabot in #7306
• web: bump mermaid from 10.5.1 to 10.6.0 in /web by @dependabot in #7304
• web: bump the sentry group in /web with 2 updates by @dependabot in #7303
• web: bump lit-analyzer from 1.2.1 to 2.0.1 in /web by @dependabot in #7305
• web: bump fuse.js from 6.6.2 to 7.0.0 in /web by @dependabot in #7307
• website/docs: RBAC docs by @tanberry in #7191
• translate: Updates for file web/xliff/en.xlf in fr by @transifex-integration in #7297
• stages/user_write: allow setting user type when creating new user by @BeryJu in #7293
• web: bump API Client version by @authentik-automation in #7310
• website/docs: add 2023.10 release notes by @BeryJu in #7309

New Contributors

• @a-gerhard made their first contribution in #6809
• @mlbarrow made their first contribution in #6818
• @boesr made their first contribution in #6949
• @okamidash made their first contribution in #6973
• @rebeccadee made their first contribution in #6978
• @almereyda made their first contribution in #7076
• @horego made their first contribution in #7110
• @vherrlein made their first contribution in #7098
• @Baptistecottey made their first contribution in #7134
• @duhast made their first contribution in #7159
• @senare made their first contribution in #7121
• @roney492 made their first contribution in #5376

Full Changelog: version/2023.8.3...version/2023.10.0