Authelia v4.39.23 released on 08-09-2026
Authelia v4.39.23 is out now. It removes a deprecated configuration attribute and delivers a set of OIDC, storage and frontend fixes that reduce validation and database errors while improving the web UX.
Visit the Authelia GitHub release page for the full notes and upgrade steps, or pull the official images from Docker Hub or GitHub Container Registry.
What’s in this release
- Configuration: the deprecated and erroneous “website” attribute has been removed from the schema; configurations containing it will fail validation and should be cleaned.
- OIDC: several fixes and improvements — updated client authentication configuration strategy, a fix for a client credentials subject foreign-key violation, support for resource indicators grant and resource-matching now using the configured resource strategy.
- Storage, build and web fixes: an unbound storage query has been fixed and a missing pnpm-workspace.yaml was added to the duo-api Dockerfile to stabilise builds/tests; frontend fixes address dialog cancellation, reset-password form re-enabling after failures and WebAuthn description errors.
Upgrade notes
- If your configuration contains a “website” field, remove it to avoid parsing and validation errors.
- Official images are published: docker pull authelia/authelia:4.39.23 and docker pull ghcr.io/authelia/authelia:4.39.23.
Share any comments on your upgrade experience or report issues on the project’s GitHub so the team can follow up.
