What authelia/authelia shipped
Generated by FoxPlug from public activity — not affiliated with Authelia.
Week of September 14, 2026
What shipped
- Version 4.39.28 released with fixes for consent redirects, Envoy authz headers, and OIDC consent duplication. Release
- Added `/api/health/extended` endpoint that checks database and authentication backend connectivity, improving load balancer routing decisions. Pull request #13127
- Second factor registration is now offered in user settings even when no access control rules explicitly require two-factor authentication. Pull request #13156
- Operators can now configure a custom registration URL to point users toward external account provisioning systems. Pull request #13093
- TOTP authenticator application suggestions are now configurable instead of hardcoded to Google Authenticator. Pull request #13095
- Filesystem notifier now supports FIFO destinations without panicking during startup checks or synchronization. Pull request #11903
- OIDC conformance suite image pinned by digest to satisfy supply chain security checks. Pull request #13172
- Scorecard file-based checks integrated into the lint script to catch issues at commit time instead of waiting for weekly runs. Pull request #13178
Why it matters
This week's updates improve deployment flexibility and observability. Operators gain control over authenticator recommendations and registration flows, while infrastructure improvements ensure load balancers can route traffic only to healthy nodes with functional backends.
Changelog entry
- Release v4.39.28 Release
- Server: add verbose health check endpoint at /api/health/extended Pull request #13127
- Handlers: offer second factor registration for elevation Pull request #13156
- Authentication: add registration custom URL configuration Pull request #13093
- TOTP: make suggested authenticator app configurable Pull request #13095
- Notification: support FIFO destinations for filesystem notifier Pull request #11903
- Build: pin OIDC conformance suite image by digest Pull request #13172
- CI: add scorecard linter to file-based checks Pull request #13178
Authelia 4.39.28 ships with health checks that verify backend connectivity, configurable TOTP apps, custom registration URLs, and FIFO notifier support.
Authelia 4.39.28 is available. This release improves observability with extended health checks that verify database and authentication backend connectivity, giving load balancers better routing decisions. Operators can now customize TOTP authenticator recommendations and point users to external registration systems. The filesystem notifier gains FIFO support, and supply chain security is enhanced with pinned container images.