Changelog archive — v1.12

Moved verbatim from CHANGELOG.md; never edited.

[v1.12.1] - 2026-03-02

Mikado branch invariant hook now rejects impl commits that modify Mikado card files (docs with requires:, status:, or branch: mikado/ frontmatter).

Switch git hooks from pre-commit to prek, a faster Rust-native drop-in replacement. Adds built-in checks for case conflicts, private key detection, and executable shebangs. Configuration migrated from .pre-commit-config.yaml to prek.toml.

Review build-authentik-from-source Mikado chain: fix go-server-derivation path errors, remove stale DRF fork content from mirror doc, add last-reviewed to all cards.

Fix authentik 2026.2.0 startup crash caused by Django migration ordering bug (FieldError: Cannot resolve keyword 'group_id'). Patch ensures authentik_core/0056 runs before authentik_rbac/0010.

Upgrade authentik from 2025.10.1 to 2026.2.0, building core services from source via custom Nix derivations rather than using nixpkgs directly (nixpkgs still provides satellite dependencies like Python, Go, and system libraries). Four components (API client generation, Python backend, web UI, Go server) assembled into a single container image with full supply chain control via forge mirrors.
Sync Frigate zone coordinates from live API to manifest (driveway_entrance, driveway)
Pin blumeops-pg to PostgreSQL 18.3 (from floating :18 tag at 18.1)

Review and update authentik-api-client-generation doc: remove stale patch note, fix test-build.nix section, add last-reviewed date.
Review all three forgejo-runner Mikado chain docs: stamp last-reviewed, add cross-links, fix configmap.yaml → config.yaml reference.
Review build-grafana-container docs; fix stale grafana.md reference card (Helm → Kustomize).