https://bumplog.org/apps/authentik/ Update-safety verdicts for Authentik (goauthentik/authentik), traceable to the GitHub release. en https://bumplog.org/apps/authentik/ bumplog:app:authentik:version/2026.5.3:safe Thu, 02 Jul 2026 00:00:00 GMT Safe to update. The release notes describe only bug fixes, a dependency security bump, and documentation improvements — no breaking changes, required migrations, or manual upgrade steps are called out. The two CVEs make applying this patch advisable promptly, but nothing in the notes indicates operator action beyond a standard update. What changed: version/2026.5.3 is a patch release focused on bug fixes and security updates. Notable repairs include a fix for SCIM's interactive OAuth incorrectly overriding refresh tokens, a panic in the RADIUS provider log, and an exception in the endpoints/connectors agent when encountering an invalid auth type. The Docker outpost integration form's CA certificate filter is corrected, blueprint application now handles integrity exceptions gracefully, and a polyfill is added for Safari versions below 17.4. Two CVEs (CVE-2026-49443 and CVE-2026-49448) are addressed, and the Django dependency is bumped to v5.2.15. Source release: https://github.com/goauthentik/authentik/releases/tag/version/2026.5.3