core: add tab refresh signal logging (2025.10)

[BeryJu]

add some additional logging for authenticated flows_refresh_others flag

[netlify]

✅ Deploy Preview for authentik-integrations ready!

Name	Link
🔨 Latest commit	3778ee7
🔍 Latest deploy log	https://app.netlify.com/projects/authentik-integrations/deploys/694aba3d40770d0008ee06b3
😎 Deploy Preview	https://deploy-preview-19024--authentik-integrations.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[codecov]

Codecov Report

❌ Patch coverage is 18.18182% with 9 lines in your changes missing coverage. Please review.
✅ Project coverage is 92.90%. Comparing base (467321f) to head (3778ee7).
✅ All tests successful. No failed tests found.

Files with missing lines	Patch %	Lines
authentik/root/ws/consumer.py	25.00%	6 Missing ⚠️
authentik/core/signals.py	0.00%	3 Missing ⚠️

Additional details and impacted files

@@                 Coverage Diff                 @@
##           version-2025.10   #19024      +/-   ##
===================================================
+ Coverage            88.73%   92.90%   +4.16%     
===================================================
  Files                  869      869              
  Lines                48161    48170       +9     
===================================================
+ Hits                 42738    44753    +2015     
+ Misses                5423     3417    -2006     

Flag	Coverage Δ
e2e	45.06% <18.18%> (-0.11%)	⬇️
integration	23.17% <18.18%> (+<0.01%)	⬆️
unit	91.04% <18.18%> (+4.83%)	⬆️
unit-migrate	91.10% <18.18%> (+4.83%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[github-actions]

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-3778ee74b82e93bf314272d501c685031b048071
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-3778ee74b82e93bf314272d501c685031b048071

Afterwards, run the upgrade commands from the latest release notes.