BREAKING CHANGE(authentik): Update authentik 2025.12.4 → 2026.2.0 (major) (#45557)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/goauthentik/ldap](https://goauthentik.io)
([source](https://redirect.github.com/goauthentik/authentik)) | major |
`1215d91` → `0e24b37` |
| [ghcr.io/goauthentik/proxy](https://goauthentik.io)
([source](https://redirect.github.com/goauthentik/authentik)) | major |
`585fc29` → `0e60478` |
| [ghcr.io/goauthentik/radius](https://goauthentik.io)
([source](https://redirect.github.com/goauthentik/authentik)) | major |
`01c7bff` → `b761534` |
| [ghcr.io/goauthentik/server](https://goauthentik.io)
([source](https://redirect.github.com/goauthentik/authentik)) | major |
`33a92b2` → `cfd9551` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yOS4yIiwidXBkYXRlZEluVmVyIjoiNDMuMjkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhcHAvYXV0aGVudGlrIiwicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9tYWpvciJdfQ==-->

charts/stable/authentik/Chart.yaml

@@ -14,7 +14,7 @@ annotations:
   trueforge.org/min_helm_version: "3.14"
   trueforge.org/train: stable
 apiVersion: v2
-appVersion: 2025.12.4
+appVersion: 2026.2.0
 dependencies:
   - name: common
     version: 28.32.5
@@ -52,5 +52,5 @@ sources:
   - https://github.com/trueforge-org/truecharts/tree/master/charts/stable/authentik
   - https://goauthentik.io/docs/
 type: application
-version: 34.6.2
+version: 38.0.0
 

charts/stable/authentik/values.yaml

@@ -1,7 +1,7 @@
 # yaml-language-server: $schema=./values.schema.json
 image:
   repository: ghcr.io/goauthentik/server
-  tag: 2025.12.4@sha256:33a92b246b798f23931ce62027e045ecf302c3bc198b6389225973db6448a886
+  tag: 2026.2.0@sha256:cfd955129ff142be93e7818682a04194b39c2ae8909a33f18e98b055baac27bf
   pullPolicy: IfNotPresent
 geoipImage:
   repository: ghcr.io/maxmind/geoipupdate
@@ -9,15 +9,15 @@ geoipImage:
   pullPolicy: IfNotPresent
 ldapImage:
   repository: ghcr.io/goauthentik/ldap
-  tag: 2025.12.4@sha256:1215d9168512e4c3aa2caf9431fa5064e5e2617ead2804dc8fc516754fc204b9
+  tag: 2026.2.0@sha256:0e24b377ba3cdf9fdf272bfa5098d04052a9e221d9949f5dd1516f6664c7f799
   pullPolicy: IfNotPresent
 radiusImage:
   repository: ghcr.io/goauthentik/radius
-  tag: 2025.12.4@sha256:01c7bff17aa21f76a64a94d12c36bb044648e39f4ec7bbe843a1f6d0e2ddee13
+  tag: 2026.2.0@sha256:b76153417d154774ed74556ccb65912ffb286a047f73b2980d352f4e8687884f
   pullPolicy: IfNotPresent
 proxyImage:
   repository: ghcr.io/goauthentik/proxy
-  tag: 2025.12.4@sha256:585fc29e23c92eb124c1bd67878821850759461899bb0a8aa7b5c3ac91edc0a4
+  tag: 2026.2.0@sha256:0e6047822f406f73bb1e05f88b48c537f4d1c6908048415635f8c3f706b62e30
   pullPolicy: IfNotPresent
 authentik:
   credentials: