25.6.0

What's Changed

Notable Items and New Features

• feat: notify on change by @blaipr in #696
• Add dropdown option for VMWare Inventory Source collection by @cigamit in #773
• Move the awxkit client out into its own repository by @blaipr in #660
• Speed up OIDC login by reconciling org/team memberships in bulk by @2and3makes23 in #662
• Slight improvements to social auth pipeline by @2and3makes23 in #678
• Vendor django-ansible-base subset into awx/dab by @cigamit in #741

Bug Fixes

• fix: survey question edit link resolves to a doubled survey/ segment by @Aureliolo in #626
• fix: SSO login buttons hidden when custom login info is empty by @samoz83 in #625
• Fix the mobile nav toggle not working by @cigamit in #736
• Fix issue with Workflow Node Timer inaccuracy by @cigamit in #771
• Fix issue with duplicate prometheus HELP/TYPE lines by @cigamit in #772
• Fix issue with sliced node names in workflow menu by @cigamit in #774
• Defer loading of ansible_facts in HostLatestSummaryQuerySet by @ssimpson89 in #628
• Removed the erroneous get_queryset override on InventorySourceGroupsList by @cigamit in #637
• Label social auth login buttons and allow a custom SAML label by @Aureliolo in #622
• Resolve Host last_job filters against the latest job host summary by @Aureliolo in #623
• fix: prevent notification template render errors from crashing the error formatter by @Aureliolo in #630
• fix: require superuser for the debug scheduler-trigger endpoints by @Aureliolo in #631
• GitHub CI by @cigamit in #647
• Point the docs at the Ascender client and drop leftover AWX names by @blaipr in #667
• Report the Twilio error instead of a bare reraise by @blaipr in #668
• Give outgoing notification requests a timeout by @blaipr in #670
• Emit every activity stream entry of an m2m change, not the last one by @blaipr in #669
• Set additionalProperties once in the injector schema by @blaipr in #673
• Write the round up note as a comment, not a noqa directive by @blaipr in #674
• Drop partition names cleanup_jobs cannot read a date out of by @blaipr in #671
• Stop coerce_naive_until crashing on an UNTIL it cannot read by @blaipr in #672
• Resolve 2 flaky tests by @cigamit in #694
• Update openstack credential by @ssimpson89 in #656
• Attempt to resolve sporatic flickering of Follow button by @cigamit in #737
• fix: remove the service worker by @Aureliolo in #646
• Fix container group TLS verification broken by the kubernetes 36 upgrade by @blaipr in #649
• Let flake8 catch identity comparisons against literals by @blaipr in #652
• Re-attach latest job host summaries on clones of an evaluated queryset by @blaipr in #650
• Describe the locale lists accurately and pin them to the files on disk by @blaipr in #651
• Bulk-load recent_jobs for the host list instead of one query per host by @blaipr in #653
• Stop cleanup_jobs crashing on a batch window that holds no jobs by @blaipr in #654
• Cover the PostgreSQL-only paths of cleanup_jobs with real tests by @blaipr in #655
• fix: use awx.version in the SQL query profiler by @blaipr in #732
• Build ARM64 images separately by @cigamit in #740
• fix: make the workflow job selector show and switch the right job by @blaipr in #760
• test: add an end-to-end browser suite for the UI by @blaipr in #762

Docs

• Add dark mode to the docsite by @ssimpson89 in #621
• Update Rebranding Docs by @ssimpson89 in #677
• Add Date search to docs by @ssimpson89 in #681
• docs: standardize README and community files by @blaipr in #682
• docs: Clean up references by @ssimpson89 in #768
• Add supported architectures documentation by @ssimpson89 in #738
• Added theme selector in docs by @ssimpson89 in #739
• Document the Labels listing view and pseudo-folder workflow by @ssimpson89 in #657
• Add installation/backup/restore to docs by @ssimpson89 in #770

Backend Upgrades

• Remove the orphaned @rspack/core build dependency by @blaipr in #659
• Let Dependabot open version updates for actions and the UI by @blaipr in #675
• ci: bump docker/setup-qemu-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #683
• ci: bump docker/setup-buildx-action from 4.1.0 to 4.3.0 by @dependabot[bot] in #684
• ci: bump actions/checkout from 6.0.2 to 7.0.1 by @dependabot[bot] in #685
• ci: bump actions/setup-python from 6.2.0 to 7.0.0 by @dependabot[bot] in #686
• ci: bump docker/setup-buildx-action from 4.1.0 to 4.3.0 in /.github/actions/awx_devel_image by @dependabot[bot] in #689
• ci: bump crazy-max/ghaction-github-runtime from 3.1.0 to 4.0.0 in /.github/actions/awx_devel_image by @dependabot[bot] in #688
• test: add a type check job and broaden the flake8 selection by @blaipr in #695
• build: bump @testing-library/user-event from 14.6.1 to 14.6.5 in /awx/ui by @dependabot[bot] in #687
• build: bump certifi from 2026.2.25 to 2026.7.22 in /docs/docsite by @blaipr in #698
• build: bump dompurify from 3.4.13 to 3.4.14 in /awx/ui by @dependabot[bot] in #690
• build: bump charset-normalizer from 3.4.6 to 3.5.1 in /docs/docsite by @blaipr in #699
• build: bump idna from 3.15 to 3.19 in /docs/docsite by @blaipr in #700
• build: bump packaging from 26.0 to 26.3 in /docs/docsite by @blaipr in #701
• build: bump pygments from 2.20.0 to 2.21.0 in /docs/docsite by @blaipr in #702
• build: bump requests from 2.33.0 to 2.34.2 in /docs/docsite by @blaipr in #703
• build: bump snowballstemmer from 3.0.1 to 3.1.1 in /docs/docsite by @blaipr in #704
• build: bump postcss-preset-env from 11.3.2 to 11.4.0 in /awx/ui by @dependabot[bot] in #692
• build: bump http-proxy-middleware from 4.1.1 to 4.2.0 in /awx/ui by @dependabot[bot] in #693
• build: bump markdown from 3.10.2 to 3.10.3 in /requirements by @blaipr in #707
• build: bump daphne from 4.2.2 to 4.2.3 in /requirements by @blaipr in #708
• build: bump slack-sdk from 3.27.0 to 3.43.0 in /requirements by @blaipr in #705
• build: bump prometheus-client from 0.20.0 to 0.26.0 in /requirements by @blaipr in #706
• build: bump irc from 20.3.1 to 20.4.3 in /requirements by @blaipr in #709
• build: bump filelock from 3.20.3 to 3.32.3 in /requirements by @blaipr in #710
• build: bump pygithub from 2.8.1 to 2.10.0 in /requirements by @blaipr in #711
• build: bump azure-identity from 1.25.2 to 1.25.3 in /requirements by @blaipr in #712
• build: bump jsonschema from 4.25.1 to 4.26.0 in /requirements by @blaipr in #716
• build: bump azure-keyvault-secrets from 4.11.0 to 4.11.1 in /requirements by @blaipr in #715
• build: bump python-ldap from 3.4.5 to 3.4.7 in /requirements by @blaipr in #721
• build: bump django-valkey from 0.3.2 to 0.4.0 in /requirements by @blaipr in #720
• build: bump django-solo from 2.4.0 to 2.5.1 in /requirements by @blaipr in #713
• build: bump requests from 2.33.0 to 2.34.2 in /requirements by @blaipr in #714
• build: bump django-auth-ldap from 5.2.0 to 5.3.0 in /requirements by @blaipr in #717
• build: bump python-daemon from 3.0.1 to 3.1.2 in /requirements by @blaipr in #719
• build: bump boto3 from 1.39.1 to 1.43.78 in /requirements by @blaipr in #723
• build: bump django-polymorphic from 4.1.0 to 4.11.7 in /requirements by @blaipr in #722
• build: bump psutil from 5.9.8 to 7.2.2 in /requirements by @blaipr in #725
• build: bump twilio from 8.13.0 to 9.11.0 in /requirements by @blaipr in #724
• build: bump psycopg from 3.1.18 to 3.3.4 in /requirements by @blaipr in #729
• build: bump asn1 from 2.7.0 to 3.3.0 in /requirements by @blaipr in #727
• build: bump python-tss-sdk from 1.2.2 to 2.0.1 in /requirements by @blaipr in #730
• build: bump dotenv-expand from 13.0.0 to 1000.0.0 in /awx/ui by @dependabot[bot] in #691
• build: bump cachetools from 5.3.2 to 7.1.7 in /requirements by @blaipr in #726
• Fix broken psycopg after upgrade by @cigamit in #763
• Upgrade lingui stack to 6.6.0 and adopt message descriptors by @cigamit in #764
• build: replace django-pglocks with django-pgware by @blaipr in #728
• build: bump importlib-metadata from 4.6.4 to 9.0.0 in /requirements by @blaipr in #754
• build: bump wheel from 0.46.3 to 0.48.0 in /requirements by @blaipr in #755
• build: bump drf-spectacular from 0.29.0 to 0.30.0 in /requirements by @blaipr in #718
• build: unblock and bump social-auth-core from 4.5.0 to 5.1.0 in /requirements by @blaipr in #731
• build: bump filelock from 3.32.3 to 3.32.4 in /requirements by @blaipr in #743
• build: bump azure-keyvault-secrets from 4.11.1 to 4.11.2 in /requirements by @blaipr in #744
• build: bump gitpython from 3.1.59 to 3.1.60 in /requirements by @blaipr in #745
• build: bump msal from 1.37.0 to 1.38.0 in /requirements by @blaipr in #746
• build: bump cryptography from 50.0.0 to 50.0.1 in /requirements by @blaipr in #747
• build: bump boto3 from 1.43.78 to 1.43.80 in /requirements by @blaipr in #748
• build: bump receptorctl from 1.6.2 to 1.6.4 in /requirements by @blaipr in #750
• build: bump django-guid from 3.5.2 to 3.6.1 in /requirements by @blaipr in #751
• build: bump packaging from 24.2 to 26.3 in /requirements by @blaipr in #753
• build: bump cython from 3.2.5 to 3.3.0 in /requirements by @blaipr in #756
• build: bump pkgconfig from 1.5.5 to 1.6.0 in /requirements by @blaipr in #757
• build: bump setuptools-rust from 1.8.1 to 1.13.0 in /requirements by @blaipr in #758
• build: bump setuptools from 83.0.0 to 84.0.0 in /requirements by @blaipr in #759
• fix: call dotenv-expand through its named export by @blaipr in #697

Upstream Patches

• Upstream 16552 - Remove skip_tags character limit by converting to TextField by @cigamit in #638
• Upstream 16467 - Reset orphaned waiting jobs when controller node is deprovisioned by @cigamit in #639
• Upstream 16554 - Replace OR with UNION in team list RBAC query by @cigamit in #640
• Upstream 16563 - Batch-delete JobHostSummary before cleanup to avoid invalid memory alloc by @cigamit in #641
• Upstream 16558 - Set PostgreSQL statement_timeout on web worker DB connections by @cigamit in #642
• Upstream 16557 - Use unfiltered count for activity stream pagination by @cigamit in #643
• Upstream 16564 - Prefer scm_revision as the cache_id if available by @cigamit in #644

Security Fixes

These CVEs were against the underlying packages we depend on, not directly on Ascender. For several of these, we did not use the affected code at all. They were resolved nevertheless as they will still be reported on any vulnerability scan on the container in your environment.

• Upgrade GitPython to resolve GHSA-hh9p-6wh2-4mfc GHSA-9rj7-rf2p-w77r GHSA-4gmw-gg2m-w46p GHSA-hmq2-w58f-27jc GHSA-wvpp-8hx9-p66j GHSA-jm78-9fvv-mhgr by @cigamit in #633
• Upgrade dompurify to resolve GHSA-55q2-fjhq-7xh7 by @cigamit in #634
• Update nanoid to resolve GHSA-5p4m-2wfm-xmqj by @cigamit in #635
• Upgrade js-yaml to resolve GHSA-5p4m-2wfm-xmqj by @cigamit in #636
• Bump django:5.2.16 to 5.2.17 (2 advisories) by @ciq-triage[bot] in #624
• Bump sqlparse:0.5.4 to 0.6.0 (3 advisories) by @ciq-triage[bot] in #676
• Upgrade pip to resolve CVE-2026-13346 by @cigamit in #679
• Upgrade browserslist to resolve CVE-2026-73089 CVE-2026-73088 by @cigamit in #680

New Contributors

• @Aureliolo made their first contribution in #622
• @samoz83 made their first contribution in #625
• @2and3makes23 made their first contribution in #662

Full Changelog: 25.5.1...25.6.0