v2025.12.1

Changelog

• a19acb4: fix int conversion for outpost provider attachment (#832) (@BeryJu)
• a923cda: fix: Support path-based Authentik deployments in URL configuration (#829) (@StefanMarkmann)
• 8edeec9: Bump github.com/getsentry/sentry-go from 0.40.0 to 0.41.0 (#834) (@dependabot[bot])
• e10b039: Bump actions/checkout from 6.0.1 to 6.0.2 (#836) (@dependabot[bot])
• aa73b84: Bump github.com/getsentry/sentry-go from 0.41.0 to 0.42.0 (#842) (@dependabot[bot])
• 4553f1d: Bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.38.1 to 2.38.2 (#844) (@dependabot[bot])
• 749d807: fix: paginate RbacPermissionsList to find all role permissions (#841) (@dominic-r)

v2025.12.0

Changelog

• 35ca6d2: Bump github.com/getsentry/sentry-go from 0.39.0 to 0.40.0 (#791) (@dependabot[bot])
• aaed442: feat(resource_source_saml): Add signed_assertion and signed_response (#789) (@inakimalerba)
• a542b21: Bump golangci/golangci-lint-action from 9.1.0 to 9.2.0 (#795) (@dependabot[bot])
• c35a07e: Bump actions/checkout from 6.0.0 to 6.0.1 (#794) (@dependabot[bot])
• 26579cb: Bump actions/create-github-app-token from 2.2.0 to 2.2.1 (#800) (@dependabot[bot])
• b970c1f: Bump codecov/codecov-action from 5.5.1 to 5.5.2 (#805) (@dependabot[bot])
• 8eed41f: Fix authentik_stage_prompt_field documentation and examples (#804) (@severin)
• d33c74c: Bump codecov/test-results-action from 1.1.1 to 1.2.1 (#810) (@dependabot[bot])
• da576ee: Bump goauthentik/action-setup-authentik (#817) (@dependabot[bot])
• 1ed1e1a: Tidy (#818) (@BeryJu)
• d87edfa: remove deprecated resources (#820) (@BeryJu)
• deafb12: update devcontainer authentik version (#821) (@BeryJu)
• 4ab2f3d: devcontainers: bump postgres, don't bind ports (#823) (@BeryJu)
• 1bbcdf6: Bump getsentry/action-release from 3.4.0 to 3.5.0 (#824) (@dependabot[bot])
• 2a31baf: Bump goauthentik.io/api/v3 from 3.2025120.5 to 3.2026020.6 (#816) (@dependabot[bot])
• d9724b5: add initial task schedule resource (#822) (@BeryJu)
• 6769e08: Bump actions/setup-go from 6.1.0 to 6.2.0 (#831) (@dependabot[bot])

v2025.10.1

Changelog

• a23c4db: Bump github.com/getsentry/sentry-go from 0.36.1 to 0.36.2 (@dependabot[bot])
• 650940e: Bump github.com/getsentry/sentry-go from 0.36.1 to 0.36.2 (#771) (@BeryJu)
• 1e0d852: Bump getsentry/action-release from 3.3.0 to 3.4.0 (@dependabot[bot])
• 1c3dec5: Bump getsentry/action-release from 3.3.0 to 3.4.0 (#772) (@BeryJu)
• dbb2ae1: Bump goauthentik.io/api/v3 from 3.2025120.2 to 3.2025120.3 (@dependabot[bot])
• 2240ad2: Bump goauthentik.io/api/v3 from 3.2025120.2 to 3.2025120.3 (#773) (@BeryJu)
• dcdc22e: Bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 (@dependabot[bot])
• eafa8d1: fix deprecated (@BeryJu)
• 0f4fb18: Bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 (#775) (@BeryJu)
• a09b59b: Bump github.com/getsentry/sentry-go from 0.36.2 to 0.37.0 (@dependabot[bot])
• 9cb2a77: Bump github.com/getsentry/sentry-go from 0.36.2 to 0.37.0 (#776) (@BeryJu)
• fbf3c3a: provider_saml: fix mismatched default value for logout_method (@BeryJu)
• cc10d87: Bump actions/checkout from 5.0.0 to 5.0.1 (@dependabot[bot])
• ca6189e: Bump github.com/getsentry/sentry-go from 0.37.0 to 0.38.0 (@dependabot[bot])
• 5c529c6: Bump github.com/getsentry/sentry-go from 0.37.0 to 0.38.0 (#778) (@BeryJu)
• f7504bf: Bump actions/checkout from 5.0.0 to 5.0.1 (#777) (@BeryJu)
• 4086e4d: Bump golang.org/x/crypto from 0.42.0 to 0.45.0 (@dependabot[bot])
• 8afbe57: Bump actions/setup-go from 6.0.0 to 6.1.0 (@dependabot[bot])
• 82560ab: Bump actions/setup-go from 6.0.0 to 6.1.0 (#780) (@BeryJu)
• 209f7c0: Bump golang.org/x/crypto from 0.42.0 to 0.45.0 (#779) (@BeryJu)
• 38e1d4b: Bump actions/checkout from 5.0.1 to 6.0.0 (@dependabot[bot])
• 30ae0ad: Bump goauthentik.io/api/v3 from 3.2025120.3 to 3.2025120.4 (@dependabot[bot])
• f9dbd39: Bump actions/checkout from 5.0.1 to 6.0.0 (#781) (@BeryJu)
• 8c6c138: Bump goauthentik.io/api/v3 from 3.2025120.3 to 3.2025120.4 (#782) (@BeryJu)
• e3a9dc4: Bump actions/create-github-app-token from 2.1.4 to 2.2.0 (@dependabot[bot])
• 5aaa608: Bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 (@dependabot[bot])
• 5801091: Bump actions/create-github-app-token from 2.1.4 to 2.2.0 (#784) (@BeryJu)
• 7cd8075: Bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 (#785) (@BeryJu)
• cbc532b: Add authentik_outpost_provider_attachment resource and authentik_outpost data source (#783) (@elephantum)
• 1f30d3c: Bump goauthentik.io/api/v3 from 3.2025120.4 to 3.2025120.5 (#786) (@dependabot[bot])
• 2ad23bf: Bump github.com/getsentry/sentry-go from 0.38.0 to 0.39.0 (#787) (@dependabot[bot])

v2025.10.0

Changelog

• 0503a77: Bump goauthentik.io/api/v3 from 3.2025100.4 to 3.2025100.5 (@dependabot[bot])
• 1fe7f2b: Bump github.com/getsentry/sentry-go from 0.35.1 to 0.35.2 (@dependabot[bot])
• e95a542: Bump goauthentik.io/api/v3 from 3.2025100.4 to 3.2025100.5 (#747) (@BeryJu)
• 03ee72f: Bump github.com/getsentry/sentry-go from 0.35.1 to 0.35.2 (#748) (@BeryJu)
• f61ebcf: Bump github.com/getsentry/sentry-go from 0.35.2 to 0.35.3 (@dependabot[bot])
• c797041: Bump github.com/getsentry/sentry-go from 0.35.2 to 0.35.3 (#749) (@BeryJu)
• 2f4599f: Bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.37.0 to 2.38.0 (@dependabot[bot])
• 6c74c33: Bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.37.0 to 2.38.0 (#751) (@BeryJu)
• 72b9404: Bump getsentry/action-release from 3.2.0 to 3.3.0 (@dependabot[bot])
• 0d5fa49: Bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.38.0 to 2.38.1 (@dependabot[bot])
• 19d60b8: Bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.38.0 to 2.38.1 (#755) (@BeryJu)
• 71cd82c: Bump getsentry/action-release from 3.2.0 to 3.3.0 (#753) (@BeryJu)
• 4a4c18d: cleanup a lot of the spaghetti (@BeryJu)
• 5d7d553: more (@BeryJu)
• d554f03: revamp (@BeryJu)
• 444a308: more (@BeryJu)
• 41e3883: migrate more (@BeryJu)
• 2a783fe: rework more (@BeryJu)
• abdf2e5: fix (@BeryJu)
• 23396b6: more (@BeryJu)
• 210cb92: and even more (@BeryJu)
• 92dd721: extract helpers (@BeryJu)
• da04024: move (@BeryJu)
• cb59ad7: rework cast? (@BeryJu)
• b73ad00: more progress (@BeryJu)
• ece397f: fix build (@BeryJu)
• fef21ca: fix? (@BeryJu)
• 857774b: bump api (@BeryJu)
• 3878d5d: more cleanp (@BeryJu)
• 8e7f4c1: the rest (@BeryJu)
• 1dc5481: add lint (@BeryJu)
• 56a3ef9: gha hashes (@BeryJu)
• 9436b8a: fix mismatch (@BeryJu)
• 7897719: Major optimization (#756) (@BeryJu)
• eea8ab2: Bump goauthentik.io/api/v3 from 3.2025100.5 to 3.2025100.23 (@dependabot[bot])
• fd3cc98: fix compile (@BeryJu)
• 16e23ad: remove new prefix (@BeryJu)
• 5995d20: fix? (@BeryJu)
• b45149e: test (@BeryJu)
• c9e73ae: improve testing (@BeryJu)
• 388a0c8: fix missing scim source #763 (@BeryJu)
• 19a2223: gen (@BeryJu)
• a071670: add provider_scim oauth support (@BeryJu)
• 7a376a8: add provider_radius certificate (@BeryJu)
• 8f5c215: provider_oauth add refresh token threshold (@BeryJu)
• 9c676cb: add source_telegram (@BeryJu)
• 32ddd63: provider_saml SLO (@BeryJu)
• 20bec71: fix shell in makefile (@BeryJu)
• f647cc5: bump setup-authentik (@BeryJu)
• d349668: fix schema (@BeryJu)
• 3cab5f3: fix schema again (@BeryJu)
• d5859df: fix (@BeryJu)
• 49968e1: fix (@BeryJu)
• 00cedca: fix (@BeryJu)
• 03c159d: Bump github.com/getsentry/sentry-go from 0.35.3 to 0.36.0 (@dependabot[bot])
• 93c27a1: Bump goauthentik.io/api/v3 from 3.2025100.5 to 3.2025100.23 (#764) (@BeryJu)
• be584b6: Bump github.com/getsentry/sentry-go from 0.35.3 to 0.36.0 (#765) (@BeryJu)
• acbd870: cleanup v2 (@BeryJu)
• 21aaa57: more cleanup (@BeryJu)
• fff2e39: slight further cleanup (@BeryJu)
• 0994cb8: fix proxy (@BeryJu)
• 102a9a6: more tests (@BeryJu)
• 7bfd5a1: cleanup v2 (#766) (@BeryJu)
• 5f8464c: Bump goauthentik.io/api/v3 from 3.2025100.23 to 3.2025100.24 (@dependabot[bot])
• 9cbb137: add oauth pkce (@BeryJu)
• fefd9fc: fix (@BeryJu)
• 9b98a8a: Bump goauthentik.io/api/v3 from 3.2025100.23 to 3.2025100.24 (#767) (@BeryJu)
• d29efb7: Bump goauthentik.io/api/v3 from 3.2025100.25 to 3.2025120.1 (@dependabot[bot])
• 036e501: Bump goauthentik.io/api/v3 from 3.2025100.25 to 3.2025120.1 (#768) (@BeryJu)
• 777baa0: Bump github.com/getsentry/sentry-go from 0.36.0 to 0.36.1 (@dependabot[bot])
• 60cb56f: Bump github.com/getsentry/sentry-go from 0.36.0 to 0.36.1 (#769) (@BeryJu)
• 92532db: Bump goauthentik.io/api/v3 from 3.2025120.1 to 3.2025120.2 (@dependabot[bot])
• fa22837: Bump goauthentik.io/api/v3 from 3.2025120.1 to 3.2025120.2 (#770) (@BeryJu)

v2025.8.1

Changelog

• f78e1c0: Bump goauthentik.io/api/v3 from 3.2025100.2 to 3.2025100.3 (@dependabot[bot])
• c3306a0: Bump goauthentik.io/api/v3 from 3.2025100.2 to 3.2025100.3 (#741) (@BeryJu)
• 643844e: Bump goauthentik.io/api/v3 from 3.2025100.3 to 3.2025100.4 (@dependabot[bot])
• c14f6b9: Bump actions/setup-go from 5.5.0 to 6.0.0 (@dependabot[bot])
• 33bc54e: Bump actions/setup-go from 5.5.0 to 6.0.0 (#743) (@BeryJu)
• af47486: Bump goauthentik.io/api/v3 from 3.2025100.3 to 3.2025100.4 (#742) (@BeryJu)
• d72a300: use oidc for codecov (@BeryJu)
• 4373d1a: Bump codecov/codecov-action from 5.5.0 to 5.5.1 (@dependabot[bot])
• 0a85c2e: Bump codecov/codecov-action from 5.5.0 to 5.5.1 (#744) (@BeryJu)
• bec4109: add missing parameters for property mappings to SAML source ( <>)
• eb998d8: update documentation for SAML source ( <>)
• fd89011: fix crash in authentik_property_mapping_provider_rac data source (@BeryJu)
• 8311e9a: Add SAML Source property mappings (#745) (@BeryJu)

v2025.8.0

Changelog

• 39352b6: Bump getsentry/action-release from 3.1.1 to 3.1.2 (#707) (@dependabot[bot])
• df74518: Bump github.com/getsentry/sentry-go from 0.33.0 to 0.34.0 (#711) (@dependabot[bot])
• 9648ab3: Bump getsentry/action-release from 3.1.2 to 3.2.0 (#710) (@dependabot[bot])
• 1b954f8: Bump github.com/getsentry/sentry-go from 0.34.0 to 0.34.1 (#716) (@dependabot[bot])
• 6c37b72: Bump golang.org/x/oauth2 from 0.26.0 to 0.27.0 (#720) (@dependabot[bot])
• 4e8709c: Bump github.com/getsentry/sentry-go from 0.34.1 to 0.35.0 (#725) (@dependabot[bot])
• bc17953: Bump actions/checkout from 4 to 5 (#731) (@dependabot[bot])
• b6668c8: Bump github.com/getsentry/sentry-go from 0.35.0 to 0.35.1 (#733) (@dependabot[bot])
• 4e6208b: Bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0 (#734) (@dependabot[bot])
• 60dfdaa: Bump github.com/stretchr/testify from 1.10.0 to 1.11.0 (#737) (@dependabot[bot])
• 5927476: Bump codecov/codecov-action from 5.4.3 to 5.5.0 (#736) (@dependabot[bot])
• e7b7efc: build(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 (#739) (@dependabot[bot])
• 7fd4130: Bump goauthentik.io/api/v3 from 3.2025062.1 to 3.2025100.2 (@dependabot[bot])
• ff9bece: update event_rule (@BeryJu)
• 2d17488: update generated lists (@BeryJu)
• 4c513a6: add stage_authenticator_webauthn max_attempts (@BeryJu)
• 13ddc62: add stage_user_login remember_device (@BeryJu)
• 4069f72: improve validation for relative time input (@BeryJu)
• 609779f: add provider_oauth2 backchannel_logout_uri (@BeryJu)
• 8068ac4: add stage_email recovery_max_attempts and recovery_cache_timeout (@BeryJu)
• 6c68f92: add system_settings flags (@BeryJu)
• 408e8ed: improve JSON field validation (@BeryJu)
• eb76e7a: add event_transport email_template and email_subject_prefix (@BeryJu)
• 463a00d: fix type (@BeryJu)
• d5707eb: fix tests (@BeryJu)
• 932726d: update devcontainer (@BeryJu)
• 4efe6c5: fix event_rule (@BeryJu)
• b393f00: fix tests (@BeryJu)
• 76da1cd: fix (@BeryJu)
• c9c08f2: Bump goauthentik.io/api/v3 from 3.2025062.1 to 3.2025100.2 (#735) (@BeryJu)

v2025.6.0

Changelog

• 59787ef: Bump actions/setup-go from 5.4.0 to 5.5.0 (#690) (@dependabot[bot])
• a2cd7a8: Bump github.com/getsentry/sentry-go from 0.32.0 to 0.33.0 (#692) (@dependabot[bot])
• 11b66de: Bump codecov/codecov-action from 5.4.2 to 5.4.3 (#691) (@dependabot[bot])
• 25bf167: Bump goauthentik.io/api/v3 from 3.2025040.1 to 3.2025041.1 (#693) (@dependabot[bot])
• 3d989f4: root: replace raw.githubusercontent.com by checking out repo (@BeryJu)
• 501be06: ci: only pull main repo to generate api client (@BeryJu)
• b048a14: Bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.36.1 to 2.37.0 (#694) (@dependabot[bot])
• 09c4a58: Bump codecov/test-results-action from 1.1.0 to 1.1.1 (#696) (@dependabot[bot])
• 431220f: Bump github.com/cloudflare/circl from 1.6.0 to 1.6.1 (#703) (@dependabot[bot])
• 4b8ffc9: Add Kubernetes service connection as data source (#577) (@beschoenen)
• e6cfcd5: Bump goauthentik.io/api/v3 from 3.2025041.1 to 3.2025060.1 (@dependabot[bot])
• 9367703: add ldap source user_membership_attribute (@gergosimonyi)
• 37ab508: format: align lines (@gergosimonyi)
• c4b4254: add ldap source delete_not_found_objects (@gergosimonyi)
• ab168ee: add brand client_certificates (@gergosimonyi)
• 3511f4f: format: align lines (@gergosimonyi)
• 5f0327f: add mtls stage (@gergosimonyi)
• 56454d1: Bump goauthentik.io/api/v3 from 3.2025041.1 to 3.2025060.1 (#700) (@gergosimonyi)

v2025.4.0

Changelog

• ffed591: Bump goauthentik.io/api/v3 from 3.2024123.7 to 3.2025022.5 (#666) (@dependabot[bot])
• 8492700: Bump actions/setup-go from 5.3.0 to 5.4.0 (#665) (@dependabot[bot])
• bcc71ae: refactor: 1.24 Go tools and move to pkg (#669) (@BeryJu)
• cc59ec2: fix HTTP_PROXY not respected (#670) (@BeryJu)
• 691567e: Bump crazy-max/ghaction-import-gpg from 6.2.0 to 6.3.0 (#674) (@dependabot[bot])
• 640b31c: Bump goreleaser/goreleaser-action from 6.2.1 to 6.3.0 (#673) (@dependabot[bot])
• cb574a1: Bump goauthentik.io/api/v3 from 3.2025022.6 to 3.2025023.1 (#672) (@dependabot[bot])
• d9818d5: Bump goauthentik.io/api/v3 from 3.2025023.1 to 3.2025023.2 (#675) (@dependabot[bot])
• 7b7719e: Bump codecov/codecov-action from 5.4.0 to 5.4.2 (#682) (@dependabot[bot])
• 74bfee4: Bump github.com/getsentry/sentry-go from 0.31.1 to 0.32.0 (#679) (@dependabot[bot])
• 97994dc: Bump golang.org/x/net from 0.36.0 to 0.38.0 (#684) (@dependabot[bot])
• f181ad3: Bump goauthentik.io/api/v3 from 3.2025023.2 to 3.2025024.9 (@dependabot[bot])
• 2012d98: Bump goauthentik.io/api/v3 from 3.2025023.2 to 3.2025024.9 (#687) (@melizeche)
• 6c99dc8: Bump goauthentik.io/api/v3 from 3.2025024.9 to 3.2025040.1 (#688) (@dependabot[bot])

v2025.2.0

Changelog

• 3e7fc3a: Bump goreleaser/goreleaser-action from 6.1.0 to 6.2.1 (#639) (@dependabot[bot])
• fa56c52: Bump getsentry/action-release from 1.10.1 to 1.10.4 (#638) (@dependabot[bot])
• 75bf0f6: Bump goauthentik.io/api/v3 from 3.2024123.2 to 3.2024123.3 (#637) (@dependabot[bot])
• 39fa09c: Bump goauthentik.io/api/v3 from 3.2024123.3 to 3.2024123.4 (#643) (@dependabot[bot])
• cd52111: Bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.36.0 to 2.36.1 (#648) (@dependabot[bot])
• d4fb095: Bump codecov/test-results-action from 1.0.3 to 1.0.4 (#646) (@dependabot[bot])
• 8633dcb: prevent crash when permission was not found in response (#650) (@BeryJu)
• c948768: Bump codecov/codecov-action from 5.3.1 to 5.4.0 (#652) (@dependabot[bot])
• b46b43a: Bump github.com/hashicorp/terraform-plugin-docs from 0.20.1 to 0.21.0 (#654) (@dependabot[bot])
• d4a01db: Bump getsentry/action-release from 1.10.4 to 3.0.0 (#657) (@dependabot[bot])
• 749a966: Bump getsentry/action-release from 3.0.0 to 3.1.0 (#658) (@dependabot[bot])
• 6836edb: Bump codecov/test-results-action from 1.0.4 to 1.1.0 (#659) (@dependabot[bot])
• b5b51c1: Bump golang.org/x/net from 0.34.0 to 0.36.0 (#661) (@dependabot[bot])
• ea837dd: define workflow perms (@BeryJu)
• 7645681: Bump goauthentik.io/api/v3 from 3.2024123.4 to 3.2025021.4 (#662) (@dependabot[bot])
• 6c8303e: Bump getsentry/action-release from 3.1.0 to 3.1.1 (#667) (@dependabot[bot])

v2024.12.1

Changelog

• 38befaf: Bump goauthentik.io/api/v3 from 3.2024120.2 to 3.2024121.2 (#612) (@dependabot[bot])
• 7e6942e: Bump goauthentik.io/api/v3 from 3.2024121.2 to 3.2024121.3 (#613) (@dependabot[bot])
• f7fdd65: add verification_kp to SAML source (#615) (@matthias-bruhse)
• d660170: Bump github.com/getsentry/sentry-go from 0.30.0 to 0.31.1 (#614) (@dependabot[bot])
• bf19656: Bump getsentry/action-release from 1.7.0 to 1.8.0 (#619) (@dependabot[bot])
• 2b4f554: Bump codecov/test-results-action from 1.0.1 to 1.0.2 (#618) (@dependabot[bot])
• c602d43: Bump goauthentik.io/api/v3 from 3.2024121.3 to 3.2024122.1 (#617) (@dependabot[bot])
• 8d90ada: stages_identification: fix captcha stage not being un-settable (#620) (@BeryJu)
• 2f6be60: Bump goauthentik.io/api/v3 from 3.2024122.1 to 3.2024122.2 (#621) (@dependabot[bot])
• 0158f34: Bump getsentry/action-release from 1.8.0 to 1.9.0 (#623) (@dependabot[bot])
• 14a58b3: Add UserPropertyMappings and GroupPropertyMappings to OIDC source (#605) (@JFrandon)
• 34dea4e: Bump actions/setup-go from 5.2.0 to 5.3.0 (#624) (@dependabot[bot])
• c3172b7: Bump golang.org/x/net from 0.28.0 to 0.33.0 (#625) (@dependabot[bot])
• e2cb5b9: Bump codecov/codecov-action from 5.1.2 to 5.2.0 (#626) (@dependabot[bot])
• 5ebd7a6: Bump goauthentik.io/api/v3 from 3.2024122.2 to 3.2024122.3 (#628) (@dependabot[bot])
• 79b3504: Bump codecov/codecov-action from 5.2.0 to 5.3.0 (#627) (@dependabot[bot])
• 9501dcc: Bump goauthentik.io/api/v3 from 3.2024122.3 to 3.2024123.1 (#631) (@dependabot[bot])
• d4c6c2e: Bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.35.0 to 2.36.0 (#633) (@dependabot[bot])
• 4c68f00: Bump codecov/test-results-action from 1.0.2 to 1.0.3 (#632) (@dependabot[bot])
• be5bd24: Bump goauthentik.io/api/v3 from 3.2024123.1 to 3.2024123.2 (#634) (@dependabot[bot])
• 54321a5: Bump codecov/codecov-action from 5.3.0 to 5.3.1 (#629) (@dependabot[bot])
• be8e222: Bump getsentry/action-release from 1.9.0 to 1.10.1 (#635) (@dependabot[bot])