fix(container): update image ghcr.io/goauthentik/helm-charts/authentik ( 2025.12.2 ➔ 2025.12.4 )

[mortyops]

This PR contains the following updates:

Package	Update	Change
ghcr.io/goauthentik/helm-charts/authentik (source)	patch	2025.12.2 → 2025.12.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[mortyops]

--- kubernetes/apps/security/authentik/app Kustomization: security/authentik OCIRepository: security/authentik

+++ kubernetes/apps/security/authentik/app Kustomization: security/authentik OCIRepository: security/authentik

@@ -11,9 +11,9 @@

 spec:
   interval: 1h
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 2025.12.2
+    tag: 2025.12.4
   url: oci://ghcr.io/goauthentik/helm-charts/authentik
 

[mortyops]

--- HelmRelease: security/authentik Deployment: security/authentik-server

+++ HelmRelease: security/authentik Deployment: security/authentik-server

@@ -26,25 +26,25 @@

         app.kubernetes.io/name: authentik
         app.kubernetes.io/instance: authentik
         app.kubernetes.io/component: server
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: authentik
       annotations:
-        checksum/secret: 44661233d5d2f578e1e43077d5a9f6c08ff812e456d63974dffe8d966ff61aa6
+        checksum/secret: 8f1803e1bd1e8e10a04e94551e65cc40190b976eb77d5fdd1469e07df75c26bb
         secret.reloader.stakater.com/reload: authentik-secret
     spec:
       terminationGracePeriodSeconds: 30
       initContainers:
       - envFrom:
         - secretRef:
             name: authentik-secret
         image: ghcr.io/home-operations/postgres-init:18.1
         name: init-db
       containers:
       - name: server
-        image: ghcr.io/goauthentik/server:2025.12.2
+        image: ghcr.io/goauthentik/server:2025.12.4
         imagePullPolicy: IfNotPresent
         args:
         - server
         env:
         - name: AUTHENTIK_STORAGE__MEDIA__BACKEND
           value: s3
--- HelmRelease: security/authentik Deployment: security/authentik-worker

+++ HelmRelease: security/authentik Deployment: security/authentik-worker

@@ -26,19 +26,19 @@

         app.kubernetes.io/name: authentik
         app.kubernetes.io/instance: authentik
         app.kubernetes.io/component: worker
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: authentik
       annotations:
-        checksum/secret: 44661233d5d2f578e1e43077d5a9f6c08ff812e456d63974dffe8d966ff61aa6
+        checksum/secret: 8f1803e1bd1e8e10a04e94551e65cc40190b976eb77d5fdd1469e07df75c26bb
     spec:
       serviceAccountName: authentik
       terminationGracePeriodSeconds: 30
       containers:
       - name: worker
-        image: ghcr.io/goauthentik/server:2025.12.2
+        image: ghcr.io/goauthentik/server:2025.12.4
         imagePullPolicy: IfNotPresent
         args:
         - worker
         env:
         - name: AUTHENTIK_STORAGE__MEDIA__BACKEND
           value: s3