website/docs: add release notes for 2026.2.2 (goauthentik#21442)

* add release notes for `2026.2.2`

* remove further items

thank you @rissson

Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
Signed-off-by: Simonyi Gergő <28359278+gergosimonyi@users.noreply.github.com>

---------

Signed-off-by: Simonyi Gergő <28359278+gergosimonyi@users.noreply.github.com>
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>

Author: 2 people

website/docs/releases/2026/v2026.2.md

@@ -324,6 +324,41 @@ helm upgrade authentik authentik/authentik -f values.yaml --version ^2026.2
 - web: fix identification stage styling in compatibility mode (cherry-pick #20684 to version-2026.2) (#20694)
 - web/flows: fix source icons being always inverted (cherry-pick #20419 to version-2026.2) (#20607)
 
+## Fixed in 2026.2.2
+
+- core: expiring model: ignore DoesNotExist error (cherry-pick #20922 to version-2026.2) (#20925)
+- core: fix provider not nullable (cherry-pick #21275 to version-2026.2) (#21282)
+- endpoints: prevent selection of incompatible connector (cherry-pick #20806 to version-2026.2) (#20807)
+- endpoints/connectors: fix enabled flag not respected (cherry-pick #21144 to version-2026.2) (#21145)
+- enterprise/endpoints/connectors/agent: add login_hint support for interactive auth (cherry-pick #20647 to version-2026.2) (#21047)
+- events: avoid implicitly setting context from login_failed event (cherry-pick #21045 to version-2026.2) (#21050)
+- events: prevent exception when events contains incompatible unicode (cherry-pick #21048 to version-2026.2) (#21053)
+- flows: continuous login debug (cherry-pick #21044 to version-2026.2) (#21090)
+- internal: fix certificate fallback without SNI (cherry-pick #21417 to version-2026.2) (#21419)
+- outposts: only dispatch logout task if any outpost exists (cherry-pick #20920 to version-2026.2) (#20949)
+- packages/django-channels-postgres: provide sync API for group_send (cherry-pick #20740 to version-2026.2) (#20741)
+- packages/django-dramatiq-postgres: scheduler: only dispatch tasks if they're not running yet (cherry-pick #20921 to version-2026.2) (#20950)
+- providers/ldap: inherit adjustable page size for LDAP searchers (cherry-pick #21377 to version-2026.2) (#21384)
+- providers/oauth2: decode percent-encoded basic auth (cherry-pick #20779 to version-2026.2) (#20781)
+- providers/proxy: Add a default maxResponseBodySize to Traefik Middleware (cherry-pick #21111 to version-2026.2) (#21140)
+- providers/proxy: remove redundant logout event (cherry-pick #20860 to version-2026.2) (#20866)
+- providers/saml: Fix redirect for saml slo (cherry-pick #21258 to version-2026.2) (#21284)
+- providers/scim: fix out-of-scope users and groups not being deleted from destination application (cherry-pick #20742 to version-2026.2) (#20780)
+- proviers/ldap: avoid concurrent header writes in API Client (cherry-pick #21223 to version-2026.2) (#21228)
+- sources/ldap: fix exception in ldap debug endpoint (cherry-pick #21219 to version-2026.2) (#21222)
+- sources/ldap: fix incorrect error response for invalid sync_users_password (cherry-pick #21016 to version-2026.2) (#21039)
+- sources/oauth: Allow patching without provider type (cherry-pick #21211 to version-2026.2) (#21213)
+- tasks: allow retry for rejected tasks only (cherry-pick #21433 to version-2026.2) (#21436)
+- web/admin: bad width on policy test results (cherry-pick #20668 to version-2026.2) (#20697)
+- web/admin: fix missing OSM referrerPolicy header (cherry-pick #20984 to version-2026.2) (#20990)
+- web/admin: Fix SCIM page_size UI issue (cherry-pick #20890 to version-2026.2) (#20929)
+- web/admin: handle non-string values in formatUUID to prevent Event Log crash (cherry-pick #20804 to version-2026.2) (#21052)
+- web/applications: add wsfed to app wizard (cherry-pick #20880 to version-2026.2) (#21184)
+- web/flow: be more aggressive about checking inspector hide/show status (#21358)
+- web/flow: reset stale authenticator selection between consecutive validate stages (cherry-pick #20802 to version-2026.2) (#21014)
+- web/flows: continuous login (cherry-pick #19862 to version-2026.2) (#20712)
+- web/rbac: disambiguate duplicate permission names in initial permissions (cherry-pick #20786 to version-2026.2) (#20805)
+
 ## API Changes
 
 ### authentik (v2026.2.0)