fix(container): update image ghcr.io/goauthentik/helm-charts/authentik (2025.10.1 → 2025.10.2)

[the-iron-giant]

This PR contains the following updates:

Package	Update	Change
ghcr.io/goauthentik/helm-charts/authentik (source)	patch	2025.10.1 -> 2025.10.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[the-iron-giant]

--- HelmRelease: security/authentik Deployment: security/authentik-server

+++ HelmRelease: security/authentik Deployment: security/authentik-server

@@ -24,24 +24,24 @@

         app.kubernetes.io/name: authentik
         app.kubernetes.io/instance: authentik
         app.kubernetes.io/component: server
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: authentik
       annotations:
-        checksum/secret: 8431f3969c3c9de510301952e79450fd83180142fd557d04dcf41048af16de92
+        checksum/secret: 73d6aa4ed79f6dc3f7114331e1f856f689adc533f572436402302c9afb297af3
     spec:
       terminationGracePeriodSeconds: 30
       initContainers:
       - envFrom:
         - secretRef:
             name: authentik
         image: ghcr.io/home-operations/postgres-init:17.6
         name: postgres-init
       containers:
       - name: server
-        image: ghcr.io/goauthentik/server:2025.10.1
+        image: ghcr.io/goauthentik/server:2025.10.2
         imagePullPolicy: IfNotPresent
         args:
         - server
         env:
         - name: AUTHENTIK_LISTEN__HTTP
           value: 0.0.0.0:9000
--- HelmRelease: security/authentik Deployment: security/authentik-worker

+++ HelmRelease: security/authentik Deployment: security/authentik-worker

@@ -24,19 +24,19 @@

         app.kubernetes.io/name: authentik
         app.kubernetes.io/instance: authentik
         app.kubernetes.io/component: worker
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: authentik
       annotations:
-        checksum/secret: 8431f3969c3c9de510301952e79450fd83180142fd557d04dcf41048af16de92
+        checksum/secret: 73d6aa4ed79f6dc3f7114331e1f856f689adc533f572436402302c9afb297af3
     spec:
       serviceAccountName: authentik
       terminationGracePeriodSeconds: 30
       containers:
       - name: worker
-        image: ghcr.io/goauthentik/server:2025.10.1
+        image: ghcr.io/goauthentik/server:2025.10.2
         imagePullPolicy: IfNotPresent
         args:
         - worker
         env:
         - name: AUTHENTIK_LISTEN__HTTP
           value: 0.0.0.0:9000

[the-iron-giant]

--- kubernetes/apps/base/security/authentik/app Kustomization: security/authentik OCIRepository: security/authentik

+++ kubernetes/apps/base/security/authentik/app Kustomization: security/authentik OCIRepository: security/authentik

@@ -11,9 +11,9 @@

 spec:
   interval: 5m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 2025.10.1
+    tag: 2025.10.2
   url: oci://ghcr.io/goauthentik/helm-charts/authentik