authentik version/2026.5.6 released on 22-07-2026
authentik version/2026.5.6 is out now. Organisations using SCIM provisioning and fleet connectors should see fewer schema and interoperability failures, plus a handful of reliability and tooling fixes.
For full details and the complete changelog, see the release notes and comparison on GitHub: version/2026.5.5 → version/2026.5.6 or the documentation release notes at docs.goauthentik.io.
What’s in this release
- SCIM fixes: group PATCH payloads now exclude read-only id fields, group member removal is schema-compliant, enum deserialization warnings are resolved, and null-members checks for adds were corrected to improve provisioning behaviour.
- Connector and agent fixes: an auth schema correction for device endpoints and passing populate_policies on fleet connectors to improve downstream provisioning reliability.
- Infrastructure and tooling: container images no longer include curl and runit, storage file paths can be overridden with environment variables, developer targets (make gen-diff, make gen-changelog) were fixed, and pyjwt was bumped to 2.13.0.
Upgrade notes
- Container images no longer include curl and runit — if your deployment or automation expects those binaries, update your images or workflows accordingly or deploy the previous image until you adapt.
- To roll back, deploy the prior release (version/2026.5.5) from the project tags or image registry as needed.
Share any experience you have after upgrading — particularly around SCIM provisioning or fleet connector behaviour — so others can benefit from what worked or needed adjustment.
