diff --git a/components/gopkgs.nix b/components/gopkgs.nix
index 972ece9..9bebe9d 100644
--- a/components/gopkgs.nix
+++ b/components/gopkgs.nix
@@ -69,7 +69,7 @@ buildGo125Module {
   ] ++ lib.optionals guacamoleAvailable [
     "cmd/rac"
   ];
-  vendorHash = "sha256-meqQHr5U0/6nc8fv1b4SFo2ohFcwSeAmSB1eLKsO9nc=";
+  vendorHash = "sha256-hdkd7/bqgTvYwlhVA9zEQny6yDowMaoRcC7TdRoXfJc=";
   nativeBuildInputs = [ makeWrapper ];
   doCheck = false;
   postInstall = ''
diff --git a/flake.lock b/flake.lock
index 392c2ce..596a49c 100644
--- a/flake.lock
+++ b/flake.lock
@@ -19,16 +19,16 @@
     "authentik-src": {
       "flake": false,
       "locked": {
-        "lastModified": 1770055313,
-        "narHash": "sha256-t9DOFNSQJZdUnZSEr3z8EBRsltS4DKu9xad9gS5/Ikc=",
+        "lastModified": 1770911230,
+        "narHash": "sha256-alTyrMBbjZbw4jhEna8saabf93sqSrZCu+Z5xH3pZ7M=",
         "owner": "goauthentik",
         "repo": "authentik",
-        "rev": "6760f4c5d38e245edb72e12e4f45bda8dd859ccd",
+        "rev": "19ad8d3ae3f266ec1096bc4461fdf6bcda1aa079",
         "type": "github"
       },
       "original": {
         "owner": "goauthentik",
-        "ref": "version/2025.12.3",
+        "ref": "version/2025.12.4",
         "repo": "authentik",
         "type": "github"
       }
diff --git a/flake.nix b/flake.nix
index ae402d5..086dfce 100644
--- a/flake.nix
+++ b/flake.nix
@@ -42,7 +42,7 @@
     };
     authentik-src = {
       # change version string in outputs as well when updating
-      url = "github:goauthentik/authentik/version/2025.12.3";
+      url = "github:goauthentik/authentik/version/2025.12.4";
       flake = false;
     };
     authentik-go = {
@@ -72,7 +72,7 @@
         ...
       }:
       let
-        authentik-version = "2025.12.3"; # to pass to the drvs of some components
+        authentik-version = "2025.12.4"; # to pass to the drvs of some components
       in
       {
         systems = import inputs.systems;