Release 2025.6.4

See https://docs.goauthentik.io/docs/releases/2025.6#fixed-in-202564

What's Changed

• web/elements: fix table search not resetting page when query changes (cherry-pick #15324) by @gcp-cherry-pick-bot[bot] in #15326
• website/docs: re-add gtag (cherry-pick #15334) by @gcp-cherry-pick-bot[bot] in #15335
• core: fix missing serializer on AuthenticatedSession (cherry-pick #15323) by @gcp-cherry-pick-bot[bot] in #15365
• website: Mark all URLs as external. (cherry-pick #15363) by @gcp-cherry-pick-bot[bot] in #15373
• core: fix set_token_key permission not declared (cherry-pick #15384) by @gcp-cherry-pick-bot[bot] in #15391
• website/docs: add manual RAC outpost deployment information (cherry-pick #15362) by @gcp-cherry-pick-bot[bot] in #15433
• website/docs: improve the docs about our Events and logging (cherry-pick #15270) by @gcp-cherry-pick-bot[bot] in #15463
• website/docs: Cherry pick events docs (cherry-pick #15457) by @tanberry in #15461
• website/docs: postgres troubleshooting: get PGPASSWORD from POSTGRES_PASSWORD_FILE (cherry-pick #15039) by @gcp-cherry-pick-bot[bot] in #15500
• website/docs: troubleshooting: Fix variable for postgres database in k8s (cherry-pick #15503) by @gcp-cherry-pick-bot[bot] in #15505
• providers/proxy: fix ingress-nginx proxy buffer size annotations (cherry-pick #15506) by @rissson in #15507
• website/docs: add noun for SSO (cherry-pick #15509) by @gcp-cherry-pick-bot[bot] in #15512
• website/docs: Add FIDO2 references to the documentation (cherry-pick #14826) by @gcp-cherry-pick-bot[bot] in #15521
• website/docs: add use case, move diagram, link to ABM (cherry-pick #15491) by @gcp-cherry-pick-bot[bot] in #15549
• website/docs: fix a typo in SSF docs (cherry-pick #15554) by @gcp-cherry-pick-bot[bot] in #15555
• website/docs: added enterprise label to new Logging docs (cherry-pick #15556) by @gcp-cherry-pick-bot[bot] in #15573
• website/docs: fix user ref typos (cherry-pick #15653) by @gcp-cherry-pick-bot[bot] in #15657
• providers/radius: set message authenticator (cherry-pick #15635) by @gcp-cherry-pick-bot[bot] in #15665

Full Changelog: version/2025.6.3...version/2025.6.4

Release 2025.4.4

What's Changed

• website/docs: add manual RAC outpost deployment information (cherry-pick #15362) by @gcp-cherry-pick-bot[bot] in #15434

Full Changelog: version/2025.4.3...version/2025.4.4

Release 2025.6.3

See https://docs.goauthentik.io/docs/releases/2025.6#fixed-in-202563

What's Changed

• website/docs: add more to style guide (cherry-pick #14797) by @gcp-cherry-pick-bot in #15077
• ci: fix post-release e2e builds failing (cherry-pick #15082) by @gcp-cherry-pick-bot in #15092
• web/elements: Add light mode custom css handling (cherry-pick #14944) by @gcp-cherry-pick-bot in #15096
• core: bump tornado from 6.4.2 to v6.5.1 (cherry-pick #15100) by @gcp-cherry-pick-bot in #15116
• core: bump requests from 2.32.3 to v2.32.4 (cherry-pick #15129) by @gcp-cherry-pick-bot in #15135
• sources/ldap: fix sync on empty groups (cherry-pick #15158) by @gcp-cherry-pick-bot in #15171
• core: bump urllib3 from 2.4.0 to v2.5.0 (cherry-pick #15131) by @gcp-cherry-pick-bot in #15174
• core: bump protobuf from 6.30.2 to v6.31.1 (cherry-pick #14894) by @gcp-cherry-pick-bot in #15173
• website/docs: fixes misplaced sentence (cherry-pick #14998) by @gcp-cherry-pick-bot in #15182
• website/docs: fix egregious maintenance fail (cherry-pick #15176) by @gcp-cherry-pick-bot in #15180
• web/user: fix infinite loop when no user settings flow is set (cherry-pick #15188) by @gcp-cherry-pick-bot in #15192
• ci: fix CodeQL failing on cherry-pick PRs (cherry-pick #15205) by @gcp-cherry-pick-bot in #15206
• website/docs: add credentials prompt for rac doc (cherry-pick #14840) by @gcp-cherry-pick-bot in #15207
• website/docs: fix note at end of rac credentials prompt (cherry-pick #14909) by @gcp-cherry-pick-bot in #15208
• website/docs: Add steps to troubleshoot /initial-setup/ (cherry-pick #15011) by @gcp-cherry-pick-bot in #15210
• web/elements: typing error when variables are not converted to string (cherry-pick #15169) by @gcp-cherry-pick-bot in #15222
• core: bump goauthentik/fips-python from 3.13.3-slim-bookworm-fips to 3.13.5-slim-bookworm-fips in 2025.6 by @melizeche in #15274
• security: fix CVE-2025-52553 (cherry-pick #15289) by @gcp-cherry-pick-bot in #15290

Full Changelog: version/2025.6.2...version/2025.6.3

Release 2025.4.3

See https://docs.goauthentik.io/docs/releases/2025.4#fixed-in-202543

What's Changed

• website/docs: also hide the postgres pool_options setting (cherry-pick #15023) by @gcp-cherry-pick-bot in #15033
• website/docs: remove commented out config options (cherry-pick #15064) by @gcp-cherry-pick-bot in #15066
• website/docs: fix egregious maintenance fail (cherry-pick #15176) by @gcp-cherry-pick-bot in #15179
• website/docs: fixes misplaced sentence (cherry-pick #14998) by @gcp-cherry-pick-bot in #15181

Full Changelog: version/2025.4.2...version/2025.4.3

Release 2025.6.2

See https://docs.goauthentik.io/docs/releases/2025.6#fixed-in-202561

What's Changed

• website/docs: add 2025.6.1 release notes (cherry-pick #14948) by @gcp-cherry-pick-bot in #14949
• stages/email: Only attach logo to email if used (cherry-pick #14835) by @gcp-cherry-pick-bot in #14969
• web/elements: fix dual select without sortBy (cherry-pick #14977) by @gcp-cherry-pick-bot in #14979
• internal/outpost: fix incorrect usage of golang SHA API (cherry-pick #14981) by @gcp-cherry-pick-bot in #14982
• brands: fix custom_css being escaped (cherry-pick #14994) by @gcp-cherry-pick-bot in #14996
• core: bump django from 5.1.9 to 5.1.10 (cherry-pick #14951) by @gcp-cherry-pick-bot in #15008
• core: bump django from 5.1.10 to 5.1.11 (cherry-pick #14997) by @gcp-cherry-pick-bot in #15010
• website/docs: also hide the postgres pool_options setting (cherry-pick #15023) by @gcp-cherry-pick-bot in #15032
• providers/rac: fixes prompt data not being merged with connection_settings (cherry-pick #15037) by @gcp-cherry-pick-bot in #15038
• web/elements: fix typo in localeComparator (cherry-pick #15054) by @gcp-cherry-pick-bot in #15055
• website/docs: correct minor version in release notes (cherry-pick #15012) by @gcp-cherry-pick-bot in #15068
• website/docs: remove commented out config options (cherry-pick #15064) by @gcp-cherry-pick-bot in #15067
• core: fix transaction test case (cherry-pick #15021) by @gergosimonyi in #15070
• website/docs: release notes for 2025.6.2 (cherry-pick #15065) by @gcp-cherry-pick-bot in #15069

Full Changelog: version/2025.6.1...version/2025.6.2

Release 2025.6.1

See https://docs.goauthentik.io/docs/releases/2025.6#fixed-in-202561

What's Changed

• website/releases: order new integrations alphabetically (cherry-pick #14850) by @gcp-cherry-pick-bot in #14876
• website/release notes: add tailscale to new integrations (cherry-pick #14859) by @gcp-cherry-pick-bot in #14877
• website/integrations: tailscale (cherry-pick #14499) by @gcp-cherry-pick-bot in #14908
• website/docs: rotate supported versions: 2025.6 (cherry-pick #14856) by @gcp-cherry-pick-bot in #14906
• web/user: fix user settings flow not loading (cherry-pick #14911) by @gcp-cherry-pick-bot in #14930
• providers/proxy: add option to override host header with property mappings (cherry-pick #14927) by @gcp-cherry-pick-bot in #14945

Full Changelog: version/2025.6.0...version/2025.6.1

Release 2025.4.2

See https://docs.goauthentik.io/docs/releases/2025.4#fixed-in-202542

What's Changed

• lifecycle: fix arguments not being passed to worker command (cherry-pick #14574) by @gcp-cherry-pick-bot in #14620
• sources/scim: fix all users being added to group when no members are given (cherry-pick #14645) by @gcp-cherry-pick-bot in #14666
• ci: fix broken cache (cherry-pick #14725) by @gcp-cherry-pick-bot in #14792
• core: Migrate permissions before deleteing OldAuthenticatedSession (cherry-pick #14788) by @gcp-cherry-pick-bot in #14791
• website/docs: clarify 2025.4 breaking Reputation changes (cherry-pick #14284) by @gcp-cherry-pick-bot in #14869
• website/docs: fix dry-run release highlight (cherry-pick #14337) by @gcp-cherry-pick-bot in #14870
• website/docs: fix leftover placeholder in release notes (cherry-pick #14377) by @gcp-cherry-pick-bot in #14871
• website/docs: release notes for 2025.4.1 (cherry-pick #14526) by @gcp-cherry-pick-bot in #14872
• website/docs: release notes for 2025.4.2 (cherry-pick #14868) by @gcp-cherry-pick-bot in #14873

Full Changelog: version/2025.4.1...version/2025.4.2

Release 2025.6.0

See https://docs.goauthentik.io/docs/releases/2025.6

What's Changed

• web/admin: prevent default logo flashing in admin interface by @dominic-r in #13960
• core, web: update translations by @authentik-automation in #14243
• lifecycle: fix test-all in docker by @rissson in #14244
• website/integrations: adds missing trailing slash in homarr doc by @dewi-tik in #14249
• website/integrations: homarr remove redirect uri comment by @dominic-r in #14252
• web: fix bug that was causing charts to be too tall by @kensternberg-authentik in #14253
• core: bump astral-sh/uv from 0.6.16 to 0.6.17 by @dependabot in #14266
• website/docs: add device code flow instructions by @dewi-tik in #14267
• rbac: add name to Permissions search by @gergosimonyi in #14269
• website/docs: update 2025.4 release notes by @melizeche in #14251
• docs/website: Update 2025.4 notes by @melizeche in #14272
• website/docs: Password Uniqueness Policy by @melizeche in #13686
• website/docs: Revert "website/docs: revert token_expiry format in example blueprint… by @melizeche in #14280
• website/docs: docs about initial perms by @tanberry in #14263
• website/docs: add postgres pool configuration by @rissson in #14060
• website/docs: add LDAP 'Lookup using user attribute' docs by @rissson in #13966
• website/docs: sessions in database by @rissson in #13507
• website/docs: Release notes 2025.4.0 by @melizeche in #14281
• website/docs: add gateway API to release notes and documentation by @rissson in #14278
• ci: cleanup post uv migration by @rissson in #13538
• core: bump astral-sh/uv from 0.6.17 to 0.7.0 by @dependabot in #14294
• core, web: update translations by @authentik-automation in #14273
• release: 2025.4.0 by @melizeche in #14299
• website/docs: initial permissions: fix usage of term admin by @dominic-r in #14300
• web: bump API Client version by @authentik-automation in #14301
• website/docs: clarify some points (i.e. around capitalization after colons) by @tanberry in #14290
• website/docs: clarify 2025.4 breaking Reputation changes by @gergosimonyi in #14284
• brands: fix CSS Migration not updating brands by @BeryJu in #14306
• website/docs: clean up oauth redirect paragraph by @fheisler in #14291
• website/docs: adds webfinger doc under oauth provider by @dewi-tik in #14247
• website/docs: "Device code flow" documentation improvements by @LucaTheHacker in #14257
• website/integrations: improve Gitea doc by @dewi-tik in #14194
• website/integrations: youtrack document by @dominic-r in #14264
• lifecycle/aws: bump aws-cdk from 2.1012.0 to 2.1013.0 in /lifecycle/aws by @dependabot in #14318
• core: bump github.com/redis/go-redis/v9 from 9.7.3 to 9.8.0 by @dependabot in #14317
• core: bump goauthentik.io/api/v3 from 3.2025024.9 to 3.2025040.1 by @dependabot in #14316
• core: bump astral-sh/uv from 0.7.0 to 0.7.2 by @dependabot in #14315
• stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in #14311
• core, web: update translations by @authentik-automation in #14309
• website: bump the build group across 1 directory with 9 updates by @dependabot in #14293
• translate: Updates for file locale/en/LC_MESSAGES/django.po in it by @transifex-integration in #14271
• core: bump trio from 0.29.0 to v0.30.0 by @rissson in #14174
• core: bump pdoc from 15.0.1 to v15.0.3 by @rissson in #14170
• core: bump frozenlist from 1.5.0 to v1.6.0 by @rissson in #14168
• core: bump boto3 from 1.37.35 to v1.37.38 by @rissson in #14167
• core: bump aiohttp from 3.11.16 to v3.11.18 by @rissson in #14166
• core: bump packaging from 24.2 to v25.0 by @rissson in #14169
• core: bump s3transfer from 0.11.4 to v0.11.5 by @rissson in #14172
• core: bump ruff from 0.11.5 to v0.11.6 by @rissson in #14171
• core: bump setuptools from 78.1.0 to v79.0.0 by @rissson in #14173
• web: bump vite from 5.4.16 to 5.4.19 in /web by @dependabot in #14324
• core: bump github.com/sethvargo/go-envconfig from 1.2.0 to 1.3.0 by @dependabot in #14327
• core, web: update translations by @authentik-automation in #14326
• rbac: fix RoleObjectPermissionTable not showing add_user_to_group by @gergosimonyi in #14312
• website/docs: fix dry-run release highlight by @BeryJu in #14337
• ci: use dependabot for docker-compose files by @BeryJu in #14336
• website/docs: use Universal Device Trust for GDTC instead of Okta by @BeryJu in #14335
• ci: use dependabot for compose correctly? by @BeryJu in #14340
• website/docs: remove support badge by @tanberry in #14343
• Revert-revert: Safari fixes by @GirlBossRush in #14331
• web: Use monorepo package utilities to build packages by @GirlBossRush in #14159
• web: Clean up browser-only module imports that crash WebDriverIO. by @GirlBossRush in #14330
• web: NPM workspaces by @GirlBossRush in #14274
• core, web: update translations by @authentik-automation in #14368
• core: bump unidecode from 1.3.8 to v1.4.0 by @melizeche in #14367
• core: bump structlog from 25.2.0 to v25.3.0 by @melizeche in #14366
• core: bump setuptools from 78.1.0 to v80.1.0 by @melizeche in #14365
• core: bump setproctitle from 1.3.5 to v1.3.6 by @melizeche in #14364
• core: bump sentry-sdk from 2.26.1 to v2.27.0 by @melizeche in #14363
• core: bump ruff from 0.11.5 to v0.11.8 by @melizeche in #14362
• core: bump redis from 5.2.1 to v6.0.0 by @melizeche in #14361
• core: bump pydantic from 2.11.3 to v2.11.4 by @melizeche in #14360
• core: bump psycopg from 3.2.6 to v3.2.7 by @melizeche in #14359
• core: bump orjson from 3.10.16 to v3.10.18 by @melizeche in #14358
• core: bump mypy-extensions from 1.0.0 to v1.1.0 by @melizeche in #14357
• core: bump msal from 1.32.0 to v1.32.3 by @melizeche in #14356
• core: bump jsonschema-specifications from 2024.10.1 to v2025.4.1 by @melizeche in #14354
• core: bump humanize from 4.12.2 to v4.12.3 by @melizeche in #14353
• core: bump h11 from 0.14.0 to v0.16.0 by @melizeche in #14352
• core: bump google-api-python-client from 2.167.0 to v2.169.0 by @melizeche in #14351
• core: bump cryptography from 44.0.2 to v44.0.3 by @melizeche in #14350
• core: bump charset-normalizer from 3.4.1 to v3.4.2 by @melizeche in #14349
• core: bump certifi from 2025.1.31 to v2025.4.26 by @melizeche in https://github.c...

Release 2025.6.0-rc1

See https://docs.goauthentik.io/docs/releases/2025.6

What's Changed

• web/admin: prevent default logo flashing in admin interface by @dominic-r in #13960
• core, web: update translations by @authentik-automation in #14243
• lifecycle: fix test-all in docker by @rissson in #14244
• website/integrations: adds missing trailing slash in homarr doc by @dewi-tik in #14249
• website/integrations: homarr remove redirect uri comment by @dominic-r in #14252
• web: fix bug that was causing charts to be too tall by @kensternberg-authentik in #14253
• core: bump astral-sh/uv from 0.6.16 to 0.6.17 by @dependabot in #14266
• website/docs: add device code flow instructions by @dewi-tik in #14267
• rbac: add name to Permissions search by @gergosimonyi in #14269
• website/docs: update 2025.4 release notes by @melizeche in #14251
• docs/website: Update 2025.4 notes by @melizeche in #14272
• website/docs: Password Uniqueness Policy by @melizeche in #13686
• website/docs: Revert "website/docs: revert token_expiry format in example blueprint… by @melizeche in #14280
• website/docs: docs about initial perms by @tanberry in #14263
• website/docs: add postgres pool configuration by @rissson in #14060
• website/docs: add LDAP 'Lookup using user attribute' docs by @rissson in #13966
• website/docs: sessions in database by @rissson in #13507
• website/docs: Release notes 2025.4.0 by @melizeche in #14281
• website/docs: add gateway API to release notes and documentation by @rissson in #14278
• ci: cleanup post uv migration by @rissson in #13538
• core: bump astral-sh/uv from 0.6.17 to 0.7.0 by @dependabot in #14294
• core, web: update translations by @authentik-automation in #14273
• release: 2025.4.0 by @melizeche in #14299
• website/docs: initial permissions: fix usage of term admin by @dominic-r in #14300
• web: bump API Client version by @authentik-automation in #14301
• website/docs: clarify some points (i.e. around capitalization after colons) by @tanberry in #14290
• website/docs: clarify 2025.4 breaking Reputation changes by @gergosimonyi in #14284
• brands: fix CSS Migration not updating brands by @BeryJu in #14306
• website/docs: clean up oauth redirect paragraph by @fheisler in #14291
• website/docs: adds webfinger doc under oauth provider by @dewi-tik in #14247
• website/docs: "Device code flow" documentation improvements by @LucaTheHacker in #14257
• website/integrations: improve Gitea doc by @dewi-tik in #14194
• website/integrations: youtrack document by @dominic-r in #14264
• lifecycle/aws: bump aws-cdk from 2.1012.0 to 2.1013.0 in /lifecycle/aws by @dependabot in #14318
• core: bump github.com/redis/go-redis/v9 from 9.7.3 to 9.8.0 by @dependabot in #14317
• core: bump goauthentik.io/api/v3 from 3.2025024.9 to 3.2025040.1 by @dependabot in #14316
• core: bump astral-sh/uv from 0.7.0 to 0.7.2 by @dependabot in #14315
• stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs by @authentik-automation in #14311
• core, web: update translations by @authentik-automation in #14309
• website: bump the build group across 1 directory with 9 updates by @dependabot in #14293
• translate: Updates for file locale/en/LC_MESSAGES/django.po in it by @transifex-integration in #14271
• core: bump trio from 0.29.0 to v0.30.0 by @rissson in #14174
• core: bump pdoc from 15.0.1 to v15.0.3 by @rissson in #14170
• core: bump frozenlist from 1.5.0 to v1.6.0 by @rissson in #14168
• core: bump boto3 from 1.37.35 to v1.37.38 by @rissson in #14167
• core: bump aiohttp from 3.11.16 to v3.11.18 by @rissson in #14166
• core: bump packaging from 24.2 to v25.0 by @rissson in #14169
• core: bump s3transfer from 0.11.4 to v0.11.5 by @rissson in #14172
• core: bump ruff from 0.11.5 to v0.11.6 by @rissson in #14171
• core: bump setuptools from 78.1.0 to v79.0.0 by @rissson in #14173
• web: bump vite from 5.4.16 to 5.4.19 in /web by @dependabot in #14324
• core: bump github.com/sethvargo/go-envconfig from 1.2.0 to 1.3.0 by @dependabot in #14327
• core, web: update translations by @authentik-automation in #14326
• rbac: fix RoleObjectPermissionTable not showing add_user_to_group by @gergosimonyi in #14312
• website/docs: fix dry-run release highlight by @BeryJu in #14337
• ci: use dependabot for docker-compose files by @BeryJu in #14336
• website/docs: use Universal Device Trust for GDTC instead of Okta by @BeryJu in #14335
• ci: use dependabot for compose correctly? by @BeryJu in #14340
• website/docs: remove support badge by @tanberry in #14343
• Revert-revert: Safari fixes by @GirlBossRush in #14331
• web: Use monorepo package utilities to build packages by @GirlBossRush in #14159
• web: Clean up browser-only module imports that crash WebDriverIO. by @GirlBossRush in #14330
• web: NPM workspaces by @GirlBossRush in #14274
• core, web: update translations by @authentik-automation in #14368
• core: bump unidecode from 1.3.8 to v1.4.0 by @melizeche in #14367
• core: bump structlog from 25.2.0 to v25.3.0 by @melizeche in #14366
• core: bump setuptools from 78.1.0 to v80.1.0 by @melizeche in #14365
• core: bump setproctitle from 1.3.5 to v1.3.6 by @melizeche in #14364
• core: bump sentry-sdk from 2.26.1 to v2.27.0 by @melizeche in #14363
• core: bump ruff from 0.11.5 to v0.11.8 by @melizeche in #14362
• core: bump redis from 5.2.1 to v6.0.0 by @melizeche in #14361
• core: bump pydantic from 2.11.3 to v2.11.4 by @melizeche in #14360
• core: bump psycopg from 3.2.6 to v3.2.7 by @melizeche in #14359
• core: bump orjson from 3.10.16 to v3.10.18 by @melizeche in #14358
• core: bump mypy-extensions from 1.0.0 to v1.1.0 by @melizeche in #14357
• core: bump msal from 1.32.0 to v1.32.3 by @melizeche in #14356
• core: bump jsonschema-specifications from 2024.10.1 to v2025.4.1 by @melizeche in #14354
• core: bump humanize from 4.12.2 to v4.12.3 by @melizeche in #14353
• core: bump h11 from 0.14.0 to v0.16.0 by @melizeche in #14352
• core: bump google-api-python-client from 2.167.0 to v2.169.0 by @melizeche in #14351
• core: bump cryptography from 44.0.2 to v44.0.3 by @melizeche in #14350
• core: bump charset-normalizer from 3.4.1 to v3.4.2 by @melizeche in #14349
• core: bump certifi from 2025.1.31 to v2025.4.26 by @melizeche in https://github.c...

Release 2025.4.1

See https://docs.goauthentik.io/docs/releases/2025.4#fixed-in-202541

What's Changed

• website/docs: add gateway API to release notes and documentation (cherry-pick #14278) by @gcp-cherry-pick-bot in #14298
• ci: cleanup post uv migration (cherry-pick #13538) by @gcp-cherry-pick-bot in #14297
• website/docs: initial permissions: fix usage of term admin (cherry-pick #14300) by @gcp-cherry-pick-bot in #14302
• brands: fix CSS Migration not updating brands (cherry-pick #14306) by @gcp-cherry-pick-bot in #14308
• website/docs: docs about initial perms (cherry-pick #14263) by @gcp-cherry-pick-bot in #14282
• rbac: fix RoleObjectPermissionTable not showing add_user_to_group (cherry-pick #14312) by @gcp-cherry-pick-bot in #14334
• outposts: fix tmpdir in containers not being set (cherry-pick #14444) by @gcp-cherry-pick-bot in #14449
• lifecycle: fix ak dump_config (cherry-pick #14445) by @gcp-cherry-pick-bot in #14448
• web/flows/sfe: fix global background image not being loaded (cherry-pick #14442) by @gcp-cherry-pick-bot in #14450
• core: bump h11 from 0.14.0 to v0.16.0 (cherry-pick #14352) by @gcp-cherry-pick-bot in #14472
• core: fix session migration when old session can't be loaded (cherry-pick #14466) by @gcp-cherry-pick-bot in #14480
• root: temporarily deactivate database pool option (cherry-pick #14443) by @gcp-cherry-pick-bot in #14479
• root: backport SFE Build fix by @BeryJu in #14495
• enterprise: fix expired license's users being counted (cherry-pick #14451) by @gcp-cherry-pick-bot in #14496
• core: remove OldAuthenticatedSession content type (cherry-pick #14507) by @gcp-cherry-pick-bot in #14509
• core: fix unable to create group if no enable_group_superuser permission is given (cherry-pick #14510) by @gcp-cherry-pick-bot in #14521

Full Changelog: version/2025.4.0...version/2025.4.1