Upgrade 2025.10 to 2025.12: timestamp too large (after year 10K)

### Describe the bug

Running in Docker and upgrading from 2025.10.3 to 2025.12.1

The server container fails to start. I changed the volume in the compose file to
`{path...}/data:/data`
for both the server and worker containers, where the old `/media` directory is now inside `/data`.

This set of logs keep repeating over and over

```
DBG event=Loaded config logger=authentik.lib.config timestamp=1769297839.5179076 file=/authentik/lib/default.yml
DBG event=Loaded environment variables logger=authentik.lib.config timestamp=1769297839.5182076 count=8
INF event=Starting authentik bootstrap logger=authentik.lib.config timestamp=1769297839.8160253
INF event=PostgreSQL connection successful logger=authentik.lib.config timestamp=1769297839.8260832
INF event=Finished authentik bootstrap logger=authentik.lib.config timestamp=1769297839.8262475
2026-01-24 23:37:19 [info ] waiting to acquire database lock
2026-01-24 23:37:23 [info ] Migration needs to be applied migration=to_2025_12_group_duplicate.py
2026-01-24 23:37:23 [info ] Migration finished applying migration=to_2025_12_group_duplicate.py
2026-01-24 23:37:23 [info ] applying django migrations
INF event=Booting authentik logger=authentik.lib.config timestamp=1769297843.6786397 version=2025.12.1
DBG event=Loaded app settings logger=authentik.lib.config timestamp=1769297843.6863222 path=authentik.stages.authenticator_totp.settings
DBG event=Loaded app settings logger=authentik.lib.config timestamp=1769297843.6949813 path=authentik.enterprise.settings
DBG event=Loaded app settings logger=authentik.lib.config timestamp=1769297843.6959496 path=authentik.enterprise.search.settings
{"domain_url": null, "event": "Loaded MMDB database", "file": "/geoip/GeoLite2-ASN.mmdb", "last_write": 1759228403.0, "level": "info", "logger": "authentik.events.context_processors.mmdb", "pid": 135, "schema_name": "public", "timestamp": "2026-01-24T23:37:24.097941"}
INF domain_url=null event=Loaded MMDB database file=/geoip/GeoLite2-City.mmdb last_write=1759228402 logger=authentik.events.context_processors.mmdb pid=135 schema_name=public timestamp=2026-01-24T23:37:24.099111
INF app_name=authentik.tenants domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.tenants.checks pid=135 schema_name=public timestamp=2026-01-24T23:37:24.982131
INF app_name=authentik.tenants domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.tenants.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:24.982669
INF app_name=authentik.tasks domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.tasks.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.001076
INF app_name=authentik.tasks domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.tasks.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.002423
INF app_name=authentik.admin domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.admin.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.004088
INF app_name=authentik.admin domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.admin.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.004460
INF app_name=authentik.core domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.core.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.005750
INF app_name=authentik.core domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.core.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.005871
INF app_name=authentik.crypto domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.crypto.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.014704
INF app_name=authentik.endpoints domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.endpoints.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.016101
{"app_name": "authentik.enterprise", "domain_url": null, "event": "Imported related module", "level": "info", "logger": "authentik.blueprints.apps", "module": "authentik.enterprise.tasks", "pid": 135, "schema_name": "public", "timestamp": "2026-01-24T23:37:25.016938"}
INF app_name=authentik.enterprise domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.enterprise.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.017702
INF app_name=authentik.events domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.events.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.019085
INF app_name=authentik.events domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.events.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.019185
INF app_name=authentik.flows domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.flows.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.052653
INF app_name=authentik.outposts domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.outposts.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.084469
INF app_name=authentik.outposts domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.outposts.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.085888
INF app_name=authentik.policies.reputation domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.policies.reputation.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.086995
INF app_name=authentik.policies domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.policies.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.118634
INF app_name=authentik.providers.oauth2 domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.providers.oauth2.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.119634
INF app_name=authentik.providers.oauth2 domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.providers.oauth2.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.130885
INF app_name=authentik.providers.proxy domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.providers.proxy.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.131472
INF app_name=authentik.providers.proxy domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.providers.proxy.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.131882
INF app_name=authentik.providers.rac domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.providers.rac.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.135840
INF app_name=authentik.providers.saml domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.providers.saml.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.138109
INF app_name=authentik.providers.saml domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.providers.saml.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.140342
INF app_name=authentik.providers.scim domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.providers.scim.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.143381
INF app_name=authentik.providers.scim domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.providers.scim.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.144567
INF app_name=authentik.sources.kerberos domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.sources.kerberos.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.146972
INF app_name=authentik.sources.kerberos domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.sources.kerberos.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.147580
INF app_name=authentik.sources.ldap domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.sources.ldap.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.156301
INF app_name=authentik.sources.ldap domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.sources.ldap.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.158566
INF app_name=authentik.sources.oauth domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.sources.oauth.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.177237
INF app_name=authentik.sources.plex domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.sources.plex.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.179109
INF app_name=authentik.sources.saml domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.sources.saml.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.179735
INF app_name=authentik.sources.scim domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.sources.scim.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.180495
INF app_name=authentik.stages.authenticator_static domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.stages.authenticator_static.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.181738
INF app_name=authentik.stages.authenticator_webauthn domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.stages.authenticator_webauthn.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.210740
INF app_name=authentik.stages.email domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.stages.email.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.211585
INF app_name=authentik.stages.identification domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.stages.identification.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.211872
INF app_name=authentik.stages.invitation domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.stages.invitation.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.212093
INF app_name=authentik.stages.prompt domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.stages.prompt.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.212459
INF app_name=authentik.stages.user_write domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.stages.user_write.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.213222
INF app_name=authentik.tasks.schedules domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.tasks.schedules.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.213764
{"app_name": "authentik.blueprints", "domain_url": null, "event": "Imported related module", "level": "info", "logger": "authentik.blueprints.apps", "module": "authentik.blueprints.tasks", "pid": 135, "schema_name": "public", "timestamp": "2026-01-24T23:37:25.214347"}
INF app_name=authentik.enterprise.policies.unique_password domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.enterprise.policies.unique_password.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.215726
INF app_name=authentik.enterprise.policies.unique_password domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.enterprise.policies.unique_password.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.216147
INF app_name=authentik.enterprise.providers.google_workspace domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.enterprise.providers.google_workspace.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.216968
INF app_name=authentik.enterprise.providers.google_workspace domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.enterprise.providers.google_workspace.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.217369
INF app_name=authentik.enterprise.providers.microsoft_entra domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.enterprise.providers.microsoft_entra.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.218171
INF app_name=authentik.enterprise.providers.microsoft_entra domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.enterprise.providers.microsoft_entra.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.218563
INF app_name=authentik.enterprise.providers.scim domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.enterprise.providers.scim.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.219363
INF app_name=authentik.enterprise.providers.ssf domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.enterprise.providers.ssf.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.220609
INF app_name=authentik.enterprise.providers.ssf domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.enterprise.providers.ssf.signals pid=135 schema_name=public timestamp=2026-01-24T23:37:25.221712
INF app_name=authentik.enterprise.reports domain_url=null event=Imported related module logger=authentik.blueprints.apps module=authentik.enterprise.reports.tasks pid=135 schema_name=public timestamp=2026-01-24T23:37:25.221902
=== Starting migration
Operations to perform:
Apply all migrations: auth, authentik_blueprints, authentik_brands, authentik_core, authentik_crypto, authentik_endpoints, authentik_endpoints_connectors_agent, authentik_enterprise, authentik_events, authentik_flows, authentik_outposts, authentik_policies, authentik_policies_dummy, authentik_policies_event_matcher, authentik_policies_expiry, authentik_policies_expression, authentik_policies_geoip, authentik_policies_password, authentik_policies_reputation, authentik_policies_unique_password, authentik_providers_google_workspace, authentik_providers_ldap, authentik_providers_microsoft_entra, authentik_providers_oauth2, authentik_providers_proxy, authentik_providers_rac, authentik_providers_radius, authentik_providers_saml, authentik_providers_scim, authentik_providers_ssf, authentik_rbac, authentik_reports, authentik_sources_kerberos, authentik_sources_ldap, authentik_sources_oauth, authentik_sources_plex, authentik_sources_saml, authentik_sources_scim, authentik_sources_telegram, authentik_stages_authenticator_duo, authentik_stages_authenticator_email, authentik_stages_authenticator_endpoint_gdtc, authentik_stages_authenticator_sms, authentik_stages_authenticator_static, authentik_stages_authenticator_totp, authentik_stages_authenticator_validate, authentik_stages_authenticator_webauthn, authentik_stages_captcha, authentik_stages_consent, authentik_stages_deny, authentik_stages_dummy, authentik_stages_email, authentik_stages_identification, authentik_stages_invitation, authentik_stages_mtls, authentik_stages_password, authentik_stages_prompt, authentik_stages_redirect, authentik_stages_source, authentik_stages_user_delete, authentik_stages_user_login, authentik_stages_user_logout, authentik_stages_user_write, authentik_tasks, authentik_tasks_schedules, authentik_tenants, contenttypes, django_channels_postgres, django_postgres_cache, guardian, sessions
Running migrations:
Applying authentik_core.0054_alter_application_meta_icon_alter_source_icon...
INF domain_url=null event=releasing database lock logger=lifecycle.migrate pid=135 schema_name=public timestamp=2026-01-24T23:37:27.568971
Failed to read config file: ./lifecycle/gunicorn.conf.py
Traceback (most recent call last):
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/utils.py", line 98, in inner
return func(*args, **kwargs)
File "/ak-root/.venv/lib/python3.13/site-packages/psycopg/cursor.py", line 206, in fetchmany
records = self._tx.load_rows(
self._pos, min(self._pos + size, res.ntuples), self._make_row
)
File "psycopg_c/_psycopg/transform.pyx", line 479, in psycopg_c._psycopg.Transformer.load_rows
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/backends/postgresql/psycopg_any.py", line 34, in load
res = super().load(data)
File "/ak-root/.venv/lib/python3.13/site-packages/psycopg/types/datetime.py", line 501, in load
return self._load_method(self, data)
~~~~~~~~~~~~~~~~~^^^^^^^^^^^^
File "/ak-root/.venv/lib/python3.13/site-packages/psycopg/types/datetime.py", line 547, in _load_iso
raise _get_timestamp_load_error(self.connection, data, ex) from None
psycopg.DataError: timestamp too large (after year 10K): '10000-01-01 00:59:59.999999+01'
The above exception was the direct cause of the following exception:
Traceback (most recent call last):
File "/ak-root/.venv/lib/python3.13/site-packages/gunicorn/app/base.py", line 110, in get_config_from_filename
spec.loader.exec_module(mod)
~~~~~~~~~~~~~~~~~~~~~~~^^^^^
File "", line 1027, in exec_module
File "", line 488, in _call_with_frames_removed
File "/lifecycle/gunicorn.conf.py", line 143, in
run_migrations()
~~~~~~~~~~~~~~^^
File "/lifecycle/migrate.py", line 121, in run_migrations
execute_from_command_line(["", "migrate_schemas"])
~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^
File "/ak-root/.venv/lib/python3.13/site-packages/django/core/management/__init__.py", line 442, in execute_from_command_line
utility.execute()
~~~~~~~~~~~~~~~^^
File "/ak-root/.venv/lib/python3.13/site-packages/django/core/management/__init__.py", line 436, in execute
self.fetch_command(subcommand).run_from_argv(self.argv)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^
File "/ak-root/.venv/lib/python3.13/site-packages/django/core/management/base.py", line 420, in run_from_argv
self.execute(*args, **cmd_options)
~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^
File "/ak-root/.venv/lib/python3.13/site-packages/django/core/management/base.py", line 464, in execute
output = self.handle(*args, **options)
File "/ak-root/.venv/lib/python3.13/site-packages/django_tenants/management/commands/migrate_schemas.py", line 66, in handle
executor.run_migrations(tenants=[self.PUBLIC_SCHEMA_NAME])
~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/ak-root/.venv/lib/python3.13/site-packages/django_tenants/migration_executors/standard.py", line 11, in run_migrations
run_migrations(self.args, self.options, self.codename, self.PUBLIC_SCHEMA_NAME)
~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/ak-root/.venv/lib/python3.13/site-packages/django_tenants/migration_executors/base.py", line 61, in run_migrations
migrate_command_class(stdout=stdout, stderr=stderr).execute(*args, **options)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^
File "/ak-root/.venv/lib/python3.13/site-packages/django/core/management/base.py", line 464, in execute
output = self.handle(*args, **options)
File "/ak-root/.venv/lib/python3.13/site-packages/django/core/management/base.py", line 111, in wrapper
res = handle_func(*args, **kwargs)
File "/ak-root/.venv/lib/python3.13/site-packages/django/core/management/commands/migrate.py", line 353, in handle
post_migrate_state = executor.migrate(
targets,
...<3 lines>...
fake_initial=fake_initial,
)
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/migrations/executor.py", line 135, in migrate
state = self._migrate_all_forwards(
state, plan, full_plan, fake=fake, fake_initial=fake_initial
)
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/migrations/executor.py", line 167, in _migrate_all_forwards
state = self.apply_migration(
state, migration, fake=fake, fake_initial=fake_initial
)
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/migrations/executor.py", line 255, in apply_migration
state = migration.apply(state, schema_editor)
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/migrations/migration.py", line 132, in apply
operation.database_forwards(
~~~~~~~~~~~~~~~~~~~~~~~~~~~^
self.app_label, schema_editor, old_state, project_state
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
)
^
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/migrations/operations/special.py", line 196, in database_forwards
self.code(from_state.apps, schema_editor)
~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/authentik/core/migrations/0054_alter_application_meta_icon_alter_source_icon.py", line 11, in clear_cache
CacheEntry.objects.using(db_alias).all().delete()
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/models/query.py", line 1200, in delete
collector.collect(del_query)
~~~~~~~~~~~~~~~~~^^^^^^^^^^^
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/models/deletion.py", line 281, in collect
new_objs = self.add(
objs, source, nullable, reverse_dependency=reverse_dependency
)
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/models/deletion.py", line 124, in add
if not objs:
^^^^
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/models/query.py", line 400, in __bool__
self._fetch_all()
~~~~~~~~~~~~~~~^^
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/models/query.py", line 1954, in _fetch_all
self._result_cache = list(self._iterable_class(self))
~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/models/query.py", line 93, in __iter__
results = compiler.execute_sql(
chunked_fetch=self.chunked_fetch, chunk_size=self.chunk_size
)
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/models/sql/compiler.py", line 1661, in execute_sql
return list(result)
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/models/sql/compiler.py", line 2171, in cursor_iter
for rows in iter((lambda: cursor.fetchmany(itersize)), sentinel):
~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/models/sql/compiler.py", line 2171, in
for rows in iter((lambda: cursor.fetchmany(itersize)), sentinel):
~~~~~~~~~~~~~~~~^^^^^^^^^^
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/utils.py", line 97, in inner
with self:
^^^^
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/utils.py", line 91, in __exit__
raise dj_exc_value.with_traceback(traceback) from exc_value
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/utils.py", line 98, in inner
return func(*args, **kwargs)
File "/ak-root/.venv/lib/python3.13/site-packages/psycopg/cursor.py", line 206, in fetchmany
records = self._tx.load_rows(
self._pos, min(self._pos + size, res.ntuples), self._make_row
)
File "psycopg_c/_psycopg/transform.pyx", line 479, in psycopg_c._psycopg.Transformer.load_rows
File "/ak-root/.venv/lib/python3.13/site-packages/django/db/backends/postgresql/psycopg_any.py", line 34, in load
res = super().load(data)
File "/ak-root/.venv/lib/python3.13/site-packages/psycopg/types/datetime.py", line 501, in load
return self._load_method(self, data)
~~~~~~~~~~~~~~~~~^^^^^^^^^^^^
File "/ak-root/.venv/lib/python3.13/site-packages/psycopg/types/datetime.py", line 547, in _load_iso
raise _get_timestamp_load_error(self.connection, data, ex) from None
django.db.utils.DataError: timestamp too large (after year 10K): '10000-01-01 00:59:59.999999+01'
warning error=exit status 1 event=gunicorn process died, restarting logger=authentik.router timestamp=2026-01-24T23:37:28Z
ERR error=exit status 1 event=gunicorn failed to start, restarting logger=authentik.router timestamp=2026-01-24T23:37:28Z
```

I can revert the change with the volumes and go back to 2025.10.3 and everything works again, but it seems I just can't upgrade to 2025.12

### How to reproduce

Not sure, as I assume this upgrade has already been tested. I never used Authentik before 2025.10.3, so that's the oldest version I ever ran.

### Expected behavior

For the upgrade to not fail its migration process.

### Screenshots

_No response_

### Additional context

_No response_

### Deployment Method

Docker

### Version

2025.12.1

### Relevant log output

```shell

```