feat(authentik): bump to 2026.2.2 and Postgres 18

Updates the Authentik blueprint from 2025.6.3 to the latest stable
2026.2.2, and bumps Postgres from 16-alpine to 18-alpine. Redis is
intentionally retained.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

blueprints/authentik/docker-compose.yml

@@ -1,7 +1,7 @@
 version: "3.8"
 services:
   postgresql:
-    image: docker.io/library/postgres:16-alpine
+    image: docker.io/library/postgres:18-alpine
     restart: unless-stopped
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]
@@ -34,7 +34,7 @@ services:
       - 6379
 
   server:
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.6.3}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.2.2}
     restart: unless-stopped
     command: server
     environment:
@@ -57,7 +57,7 @@ services:
         condition: service_healthy
 
   worker:
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.6.3}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.2.2}
     restart: unless-stopped
     command: worker
     environment:

blueprints/authentik/template.toml

@@ -23,4 +23,4 @@ PG_DB = "${pg_db}"
 PG_PASS = "${password:32}" # Password for PostgreSQL authentication
 AUTHENTIK_SECRET_KEY = "${password:64}" # Secret key for Authentik authentication
 AUTHENTIK_IMAGE = "ghcr.io/goauthentik/server"
-AUTHENTIK_TAG = "2025.6.3"
+AUTHENTIK_TAG = "2026.2.2"

meta.json

@@ -472,7 +472,7 @@
   {
     "id": "authentik",
     "name": "Authentik",
-    "version": "2025.6.3",
+    "version": "2026.2.2",
     "description": "Authentik is an open-source Identity Provider for authentication and authorization. It provides a comprehensive solution for managing user authentication, authorization, and identity federation with support for SAML, OAuth2, OIDC, and more.",
     "links": {
       "github": "https://github.com/goauthentik/authentik",