web: Docker versioning compatibility

[rissson]

Details

This PR updates the frontend only setup to be compatible with the latest changes to our versioning. This achieved with a combination of more accurate version parsing, and fixing an edge case where the ESBuild's versioned assets can't align with the version embedded in Docker images.

• Update frontend dev docs to always use latest dev images
• Update static assets to use query params for cache busting

[netlify]

✅ Deploy Preview for authentik-integrations ready!

Name	Link
🔨 Latest commit	2d34514
🔍 Latest deploy log	https://app.netlify.com/projects/authentik-integrations/deploys/689ca8d9320ca300086b0f56
😎 Deploy Preview	https://deploy-preview-16139--authentik-integrations.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[netlify]

✅ Deploy Preview for authentik-storybook ready!

Name	Link
🔨 Latest commit	2d34514
🔍 Latest deploy log	https://app.netlify.com/projects/authentik-storybook/deploys/689ca8d9614b780008ae5c3c
😎 Deploy Preview	https://deploy-preview-16139--authentik-storybook.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[rissson]

/cherry-pick version-2025.6

[netlify]

✅ Deploy Preview for authentik-docs ready!

Name	Link
🔨 Latest commit	2d34514
🔍 Latest deploy log	https://app.netlify.com/projects/authentik-docs/deploys/689ca8d97c65a20008b04ce9
😎 Deploy Preview	https://deploy-preview-16139--authentik-docs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.81%. Comparing base (4d2d020) to head (2d34514).
⚠️ Report is 4 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #16139      +/-   ##
==========================================
- Coverage   92.82%   92.81%   -0.01%     
==========================================
  Files         836      836              
  Lines       45166    45167       +1     
==========================================
- Hits        41926    41923       -3     
- Misses       3240     3244       +4     

Flag	Coverage Δ
e2e	46.67% <100.00%> (-0.01%)	⬇️
integration	23.59% <0.00%> (+<0.01%)	⬆️
unit	90.91% <100.00%> (+<0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[github-actions]

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-49590ef1a9f2fa8a4b81f2941143470b1f36ae46
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-49590ef1a9f2fa8a4b81f2941143470b1f36ae46

Afterwards, run the upgrade commands from the latest release notes.

[GirlBossRush]

This change in particular is the crux of it. The value of authentik_full_version within the Docker image isn't accessible from ESBuild, but all we're hoping to achieve here is ensure that static assets have cache busting between version upgrades.

This function might be a good candidate for Django path objects, making it possible to do thing like subresource integrity and CSP nonces