chore(deps): update helm release authentik to v2026.5.3

[renovate]

This PR contains the following updates:

Package	Update	Change
authentik (source)	patch	2026.5.0 → 2026.5.3

---

Release Notes

goauthentik/helm (authentik)

v2026.5.3

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: bump to 2026.5.3 by @​authentik-automation[bot] in #​479

Full Changelog: goauthentik/helm@authentik-2026.5.2...authentik-2026.5.3

v2026.5.2

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: bump to 2026.5.2 by @​authentik-automation[bot] in #​476

Full Changelog: goauthentik/helm@authentik-2026.5.0...authentik-2026.5.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Helm Template Diff

authentik — 2026.5.0 → 2026.5.3

38 changed lines

--- /tmp/old.yaml	2026-06-22 18:21:56.652737292 +0000
+++ /tmp/new.yaml	2026-06-22 18:21:55.798741936 +0000
@@ -6,12 +6,12 @@
   name: authentik
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2026.5.0"
+    helm.sh/chart: "authentik-2026.5.3"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2026.5.0"
+    app.kubernetes.io/version: "2026.5.3"
 data:  
   AUTHENTIK_DISABLE_STARTUP_ANALYTICS: "dHJ1ZQ=="
   AUTHENTIK_DISABLE_UPDATE_CHECK: "ZmFsc2U="
@@ -42,13 +42,13 @@
   name: authentik-server
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2026.5.0"
+    helm.sh/chart: "authentik-2026.5.3"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/component: "server"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2026.5.0"
+    app.kubernetes.io/version: "2026.5.3"
 spec:
   type: ClusterIP
   ports:
@@ -73,13 +73,13 @@
   name: authentik-server
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2026.5.0"
+    helm.sh/chart: "authentik-2026.5.3"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/component: "server"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2026.5.0"
+    app.kubernetes.io/version: "2026.5.3"
 spec:
   replicas: 1
   revisionHistoryLimit: 3
@@ -91,21 +91,21 @@
   template:
     metadata:
       labels:
-        helm.sh/chart: "authentik-2026.5.0"
+        helm.sh/chart: "authentik-2026.5.3"
         app.kubernetes.io/name: "authentik"
         app.kubernetes.io/instance: "authentik"
         app.kubernetes.io/component: "server"
         app.kubernetes.io/managed-by: "Helm"
         app.kubernetes.io/part-of: "authentik"
-        app.kubernetes.io/version: "2026.5.0"
+        app.kubernetes.io/version: "2026.5.3"
         custom.network/postgresdb: egress
       annotations:
-        checksum/secret: c37b37f8072f8110c92dc14bac98e870513b138b8f3e312ee9b3c643dfab52b1
+        checksum/secret: 16cbde4f399d92c8f8b65e6379a79bf0f2f3f97780688567890c861829f92b3b
     spec:
       terminationGracePeriodSeconds: 30
       containers:
         - name: server
-          image: ghcr.io/goauthentik/server:2026.5.0
+          image: ghcr.io/goauthentik/server:2026.5.3
           imagePullPolicy: IfNotPresent
           args:
             - server
@@ -189,13 +189,13 @@
   name: authentik-worker
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2026.5.0"
+    helm.sh/chart: "authentik-2026.5.3"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/component: "worker"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2026.5.0"
+    app.kubernetes.io/version: "2026.5.3"
 spec:
   replicas: 1
   revisionHistoryLimit: 3
@@ -207,21 +207,21 @@
   template:
     metadata:
       labels:
-        helm.sh/chart: "authentik-2026.5.0"
+        helm.sh/chart: "authentik-2026.5.3"
         app.kubernetes.io/name: "authentik"
         app.kubernetes.io/instance: "authentik"
         app.kubernetes.io/component: "worker"
         app.kubernetes.io/managed-by: "Helm"
         app.kubernetes.io/part-of: "authentik"
-        app.kubernetes.io/version: "2026.5.0"
+        app.kubernetes.io/version: "2026.5.3"
         custom.network/postgresdb: egress
       annotations:
-        checksum/secret: c37b37f8072f8110c92dc14bac98e870513b138b8f3e312ee9b3c643dfab52b1
+        checksum/secret: 16cbde4f399d92c8f8b65e6379a79bf0f2f3f97780688567890c861829f92b3b
     spec:
       terminationGracePeriodSeconds: 30
       containers:
         - name: worker
-          image: ghcr.io/goauthentik/server:2026.5.0
+          image: ghcr.io/goauthentik/server:2026.5.3
           imagePullPolicy: IfNotPresent
           args:
             - worker
@@ -305,13 +305,13 @@
   name: authentik-server
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2026.5.0"
+    helm.sh/chart: "authentik-2026.5.3"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/component: "server"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2026.5.0"
+    app.kubernetes.io/version: "2026.5.3"
   annotations:
     cert-manager.io/cluster-issuer: step-ca-internal
     traefik.ingress.kubernetes.io/router.middlewares: traefik-common-internal-access-allowlist@kubernetescrd