feat(container): update image ghcr.io/goauthentik/helm-charts/authentik ( 2025.8.4 ➔ 2025.12.1 )

[mortyops]

This PR contains the following updates:

Package	Update	Change
ghcr.io/goauthentik/helm-charts/authentik (source)	minor	2025.8.4 → 2025.12.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[mortyops]

--- kubernetes/apps/security/authentik/app Kustomization: security/authentik OCIRepository: security/authentik

+++ kubernetes/apps/security/authentik/app Kustomization: security/authentik OCIRepository: security/authentik

@@ -11,9 +11,9 @@

 spec:
   interval: 1h
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 2025.8.4
+    tag: 2025.12.1
   url: oci://ghcr.io/goauthentik/helm-charts/authentik
 

[mortyops]

--- HelmRelease: security/authentik Deployment: security/authentik-server

+++ HelmRelease: security/authentik Deployment: security/authentik-server

@@ -26,25 +26,25 @@

         app.kubernetes.io/name: authentik
         app.kubernetes.io/instance: authentik
         app.kubernetes.io/component: server
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: authentik
       annotations:
-        checksum/secret: ee54074a346078bc7ba3b9ea836e5ee5ebbb98bccb3e2db277053170cedb9583
+        checksum/secret: b3a067cb73a4dd189a5b7e7572cbd6e2052f94384a8aef00cd59f617f0e91c3e
         secret.reloader.stakater.com/reload: authentik-secret
     spec:
       terminationGracePeriodSeconds: 30
       initContainers:
       - envFrom:
         - secretRef:
             name: authentik-secret
         image: ghcr.io/home-operations/postgres-init:17.6
         name: init-db
       containers:
       - name: server
-        image: ghcr.io/goauthentik/server:2025.8.4
+        image: ghcr.io/goauthentik/server:2025.12.1
         imagePullPolicy: IfNotPresent
         args:
         - server
         env:
         - name: AUTHENTIK_STORAGE__MEDIA__BACKEND
           value: s3
--- HelmRelease: security/authentik Deployment: security/authentik-worker

+++ HelmRelease: security/authentik Deployment: security/authentik-worker

@@ -26,19 +26,19 @@

         app.kubernetes.io/name: authentik
         app.kubernetes.io/instance: authentik
         app.kubernetes.io/component: worker
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: authentik
       annotations:
-        checksum/secret: ee54074a346078bc7ba3b9ea836e5ee5ebbb98bccb3e2db277053170cedb9583
+        checksum/secret: b3a067cb73a4dd189a5b7e7572cbd6e2052f94384a8aef00cd59f617f0e91c3e
     spec:
       serviceAccountName: authentik
       terminationGracePeriodSeconds: 30
       containers:
       - name: worker
-        image: ghcr.io/goauthentik/server:2025.8.4
+        image: ghcr.io/goauthentik/server:2025.12.1
         imagePullPolicy: IfNotPresent
         args:
         - worker
         env:
         - name: AUTHENTIK_STORAGE__MEDIA__BACKEND
           value: s3