Release 2026.8.0-rc7

See https://next.goauthentik.io/docs/releases/2026.8

What's Changed

• core: Actors (cherry-pick #24353 to version-2026.8) by @authentik-cherry-pick[bot] in #24709
• website/docs: document API scope and domain join required by the authentik Agent (cherry-pick #24599 to version-2026.8) by @authentik-cherry-pick[bot] in #24715
• website/docs: Add feedback from previous agent pr (cherry-pick #24713 to version-2026.8) by @authentik-cherry-pick[bot] in #24735
• enterprise/requests: only show requests tab when usable (cherry-pick #24705 to version-2026.8) by @authentik-cherry-pick[bot] in #24743
• providers/oauth2: token exchange delegation (cherry-pick #24356 to version-2026.8) by @authentik-cherry-pick[bot] in #24745
• website/docs: fix broken link in 2026.11 release notes draft (cherry-pick #24746 to version-2026.8) by @authentik-cherry-pick[bot] in #24747
• website/docs: release notes: add ws-fed info (cherry-pick #24659 to version-2026.8) by @authentik-cherry-pick[bot] in #24661
• blueprints: fix mismatched stage name in example 2fa login flow (cherry-pick #24668 to version-2026.8) by @authentik-cherry-pick[bot] in #24750
• web/components: update styling for user account switcher (cherry-pick #24749 to version-2026.8) by @authentik-cherry-pick[bot] in #24753
• web/admin: fix alignment of task list filters (cherry-pick #24752 to version-2026.8) by @authentik-cherry-pick[bot] in #24754
• website/docs: fix link in .8 release notes (cherry-pick #24757 to version-2026.8) by @authentik-cherry-pick[bot] in #24758
• source/oauth: add cas source integration (cherry-pick #24737 to version-2026.8) by @authentik-cherry-pick[bot] in #24768
• website/docs: recpatcha: add mention of google enterprise (cherry-pick #24658 to version-2026.8) by @authentik-cherry-pick[bot] in #24769
• web/common: allow line-break in dom-purify (cherry-pick #24755 to version-2026.8) by @authentik-cherry-pick[bot] in #24784
• core: delete expired actor tokens (cherry-pick #24767 to version-2026.8) by @authentik-cherry-pick[bot] in #24783
• web/admin: drop misleading delete consequences from user activation review (cherry-pick #24273 to version-2026.8) by @authentik-cherry-pick[bot] in #24787
• enterprise/agents: add (cherry-pick #24598 to version-2026.8) by @authentik-cherry-pick[bot] in #24790
• core: bump django from 5.2.16 to v5.2.17 (cherry-pick #24793 to version-2026.8) by @authentik-cherry-pick[bot] in #24816
• blueprints: handle invalid yaml, add dry run to apply_blueprint (cherry-pick #24813 to version-2026.8) by @authentik-cherry-pick[bot] in #24821
• providers/oauth2: fix missing authorization event for oauth provider, add tests (cherry-pick #24819 to version-2026.8) by @authentik-cherry-pick[bot] in #24822
• enterprise/agents: fix enterprise required check for agents (cherry-pick #24814 to version-2026.8) by @authentik-cherry-pick[bot] in #24825
• server: avoid looping indefinitely on embedded outpost start (take 2) (cherry-pick #24824 to version-2026.8) by @authentik-cherry-pick[bot] in #24827
• web: contain long text in tables and application cards (cherry-pick #24621 to version-2026.8) by @authentik-cherry-pick[bot] in #24689
• web: fix file search input interactions (cherry-pick #24609 to version-2026.8) by @authentik-cherry-pick[bot] in #24811
• website/docs: add gitguardian to 2026.8 release notes by @dominic-r in #24830
• website/docs: cleanup 07-12: polish endpoint device guidance (cherry-pick #23968 to version-2026.8) by @authentik-cherry-pick[bot] in #24629
• web/flows: fix missing required flag on password input (cherry-pick #24831 to version-2026.8) by @authentik-cherry-pick[bot] in #24837
• blueprints Add EQ and NEQ modes to the !Condition tag (cherry-pick #20315 to version-2026.8) by @authentik-cherry-pick[bot] in #24842
• root: pin pnpm 11.20.0 everywhere (cherry-pick #24789 to version-2026.8) by @authentik-cherry-pick[bot] in #24854
• blueprints: run initial migration before flows are created (cherry-pick #24880 to version-2026.8) by @authentik-cherry-pick[bot] in #24883
• website/docs: release: sync integrations by @dominic-r in #24876
• website/docs: welcome email notification rule: Add LDAP exception (cherry-pick #24672 to version-2026.8) by @authentik-cherry-pick[bot] in #24681
• providers/oauth2: fix client_credentials regression (cherry-pick #24900 to version-2026.8) by @authentik-cherry-pick[bot] in #24901
• providers/oauth2: optimize JWKS conversion (cherry-pick #24889 to version-2026.8) by @authentik-cherry-pick[bot] in #24907
• lib/evaluator: use lazy proxy for http session (cherry-pick #24893 to version-2026.8) by @authentik-cherry-pick[bot] in #24909
• providers/oauth2: refactor token parsing logic (cherry-pick #24904 to version-2026.8) by @authentik-cherry-pick[bot] in #24906
• providers/oauth2: cache ProviderInfoView get_claims (cherry-pick #24890 to version-2026.8) by @authentik-cherry-pick[bot] in #24914
• enterprise/endpoints/connectors/fleet: decrease page size (cherry-pick #24908 to version-2026.8) by @authentik-cherry-pick[bot] in #24911
• root: add optional pyroscope for profiling (cherry-pick #24887 to version-2026.8) by @authentik-cherry-pick[bot] in #24945
• rbac: use constant-time comparison in SecretKeyFilter (cherry-pick #24888 to version-2026.8) by @authentik-cherry-pick[bot] in #24948
• website/docs: Get notified about new releases (cherry-pick #24885 to version-2026.8) by @authentik-cherry-pick[bot] in #24941
• providers/scim: fix display of SCIMRequestException (2026.8) by @BeryJu in #24833
• providers/oauth2: move DCR to OSS (cherry-pick #24949 to version-2026.8) by @authentik-cherry-pick[bot] in #24953
• enterprise/requests: integrate agents with requests (cherry-pick #24844 to version-2026.8) by @authentik-cherry-pick[bot] in #24952
• providers/oauth2: automatically invalidate ProviderInfoView cached claims (cherry-pick #24944 to version-2026.8) by @authentik-cherry-pick[bot] in #24960
• providers/oauth2: add token exchange targeting (cherry-pick #24874 to version-2026.8) by @authentik-cherry-pick[bot] in #24955
• core: return the intended status code from error views for all request methods (cherry-pick #24902 to version-2026.8) by @authentik-cherry-pick[bot] in #24958

Full Changelog: version/2026.8.0-rc6...version/2026.8.0-rc7