From b4916a86d4e650401e67dc03556eadb4a3cb248a Mon Sep 17 00:00:00 2001
From: WilliButz <willibutz@posteo.de>
Date: Fri, 28 Mar 2025 15:30:38 +0100
Subject: [PATCH] update: 2025.2.2 -> 2025.2.3 (security update)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Fixes CVE-2025-29928

See https://docs.goauthentik.io/docs/releases/2025.2#fixed-in-202523

Flake lock file updates:

• Updated input 'authentik-src':
    'github:goauthentik/authentik/3adf79c4939276e108c25c719843b6174e9e22fd' (2025-03-17)
  → 'github:goauthentik/authentik/748a8e560f2eb93f7ec15d6762d4e5931fc1fa2a' (2025-03-28)
---
 flake.lock | 8 ++++----
 flake.nix  | 4 ++--
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/flake.lock b/flake.lock
index 616b4bb..b95209c 100644
--- a/flake.lock
+++ b/flake.lock
@@ -3,16 +3,16 @@
     "authentik-src": {
       "flake": false,
       "locked": {
-        "lastModified": 1742236492,
-        "narHash": "sha256-Uz7qldS44pxduLcYKf+cCq4WvjoslDR4PwRqivY/4uI=",
+        "lastModified": 1743169792,
+        "narHash": "sha256-aaSAlFIc5Gn5PJPVuObi24Y86/3N3yFJVQTx1tV2i2A=",
         "owner": "goauthentik",
         "repo": "authentik",
-        "rev": "3adf79c4939276e108c25c719843b6174e9e22fd",
+        "rev": "748a8e560f2eb93f7ec15d6762d4e5931fc1fa2a",
         "type": "github"
       },
       "original": {
         "owner": "goauthentik",
-        "ref": "version/2025.2.2",
+        "ref": "version/2025.2.3",
         "repo": "authentik",
         "type": "github"
       }
diff --git a/flake.nix b/flake.nix
index 72eb7ab..e351ec6 100644
--- a/flake.nix
+++ b/flake.nix
@@ -32,7 +32,7 @@
     };
     authentik-src = {
       # change version string in outputs as well when updating
-      url = "github:goauthentik/authentik/version/2025.2.2";
+      url = "github:goauthentik/authentik/version/2025.2.3";
       flake = false;
     };
   };
@@ -56,7 +56,7 @@
         ...
       }:
       let
-        authentik-version = "2025.2.2"; # to pass to the drvs of some components
+        authentik-version = "2025.2.3"; # to pass to the drvs of some components
       in
       {
         systems = import inputs.systems;