Authelia v4.39.27 released on 15-09-2026
Authelia v4.39.27 is out now. Operators using Authelia with OIDC or Envoy integrations will benefit from fixes to consent redirects, Envoy authz path handling and duplicate consent persistence that restore expected behaviour.
See the project’s GitHub release page for full details and to download the published Docker images.
What’s in this release
- handlers: use correct HTTP status code for consent redirects (fix by @james-d-elliott, commit b1d294e)
- middlewares: include the request query string in the Envoy authorization path (fix by @james-d-elliott, commit 2bd25ba)
- oidc: stop pre-configured consent being saved twice (fix by @james-d-elliott, commit 58ee25d)
Upgrade notes
- No breaking changes are listed in the release notes; test in a staging environment before rolling out to production.
- Docker images are published: docker pull authelia/authelia:4.39.27 and docker pull ghcr.io/authelia/authelia:4.39.27. If you need to revert, pull an earlier tag from the project’s registry.
Try the release and report any regressions or confirm fixes on the Authelia GitHub issue tracker.
