Authelia v4.39.27 released on 15-09-2026
Authelia v4.39.27 is out now. It fixes incorrect status codes on consent redirects, preserves query strings for Envoy external-authorization paths, and stops pre-configured OIDC consent records being saved twice, which improves redirect handling and authorization accuracy.
See the release notes on the Authelia GitHub for full details and pull the Docker images authelia/authelia:4.39.27 or ghcr.io/authelia/authelia:4.39.27.
What’s in this release
- handlers: consent redirect responses now use the correct HTTP status code (fixes #13155).
- middlewares: the Envoy external-authorization path builder now includes the request query string so authorization decisions see the full path and query (fixes #13167).
- oidc: prevents pre-configured consent records from being stored twice, avoiding duplicate consent entries (fixes and closes #13153 / #13154).
- Docker images published as authelia/authelia:4.39.27 and ghcr.io/authelia/authelia:4.39.27.
Upgrade notes
- No breaking changes are listed in the release notes; update by pulling the new images authelia/authelia:4.39.27 or ghcr.io/authelia/authelia:4.39.27.
- If you need to roll back, restore the previous image tag used in your deployment.
Share any issues or observations on the Authelia GitHub so others can benefit from your experience.
