See https://docs.goauthentik.io/docs/releases/2025.12#fixed-in-2025123

What's Changed

• 2025.12: Revert bulk revoke added by accident in release branch by @dominic-r in https://github.com/goauthentik/authentik/pull/19870
• web/admin: fix toggle-group for bindings now showing up (cherry-pick #19820 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19895
• website/docs: Remove stale 2024 version directives (cherry-pick #19888 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19899
• web: fix Brand CSS not applied to nested Shadow DOM components (cherry-pick #19892 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19900
• ci: always generate API clients (#19906) by @BeryJu in https://github.com/goauthentik/authentik/pull/19932
• lifecycle/ak: make sure /data has the correct permissions (cherry-pick #19935 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19940
• lifecycle/aws: add /data volume (cherry-pick #19936 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19938
• website/docs: Update location of media storage and outdated references (cherry-pick #19885 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19937
• core: fix non-expiring service accounts and app passwords (cherry-pick #19913 to version-2025.12) by @authentik-automation[bot] in https://github.com/goauthentik/authentik/pull/19941

Full Changelog: https://github.com/goauthentik/authentik/compare/version/2025.12.2...version/2025.12.3