chore(deps): update traefik docker tag to v3.7.10

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
traefik (source)	minor	v3.6.17 → v3.7.10

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

containous/traefik (traefik)

v3.7.10

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v5 to v5.3.1 (#​13547 @​ldez)
• [middleware, authentication] Fix auth singleflight key collision (#​13572 @​mmatur)
• [k8s/gatewayapi] Avoid router name collisions in Kubernetes Gateway API provider (#​13580 @​gndz07)
• [tracing] Bump github.com/DataDog/dd-trace-go/v2 to 2.8.1 (#​13530 @​kevinpollet)
• Bump golang.org/x/text to v0.40.0 and golang.org/x/net v0.57.0 (#​13574 @​mmatur)
• [k8s/crd] Fix cross-namespace service reference check in Kubernetes CRD provider (#​13573 @​gndz07)
• [middleware] Bump github.com/klauspost/compress to v1.18.7 (#​13587 @​mmatur)
• [k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.6.1 (#​13589 @​rtribotte)

Documentation:

• [k8s/ingress-nginx] Clarify auth-url/rewrite-target interaction on ingress-nginx provider (#​13607 @​gndz07)

v3.7.10

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v5 to v5.3.1 (#​13547 @​ldez)
• [middleware, authentication] Fix auth singleflight key collision (#​13572 @​mmatur)
• [k8s/gatewayapi] Avoid router name collisions in Kubernetes Gateway API provider (#​13580 @​gndz07)
• [tracing] Bump github.com/DataDog/dd-trace-go/v2 to 2.8.1 (#​13530 @​kevinpollet)
• Bump golang.org/x/text to v0.40.0 and golang.org/x/net v0.57.0 (#​13574 @​mmatur)
• [k8s/crd] Fix cross-namespace service reference check in Kubernetes CRD provider (#​13573 @​gndz07)
• [middleware] Bump github.com/klauspost/compress to v1.18.7 (#​13587 @​mmatur)
• [k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.6.1 (#​13589 @​rtribotte)

Documentation:

• [k8s/ingress-nginx] Clarify auth-url/rewrite-target interaction on ingress-nginx provider (#​13607 @​gndz07)

v3.7.9

Compare Source

All Commits

Bug fixes:

• [k8s/ingress-nginx] Fix redirect with use-regex in IngressNGINX provider (#​13476 @​AmariahAK)
• [middleware] Disable Zstd support in the gzhttp wrapper (#​13533 @​kevinpollet)
• [server] Defer the CONNECT payload until the backend accepts the tunnel (#​13542 @​sdelicata)
• [server] Discard CONNECT body in forwardauth and reject CONNECT requests with fast proxy (#​13543 @​sdelicata)
• [server] Bump google.golang.org/grpc to v1.82.1 (#​13551 @​piscue)
• [server] Do not add back CONNECT requests to the pool (#​13556 @​kevinpollet)

Documentation:

• [k8s/gatewayapi] Document Gateway API generated service names change in the migration guide (#​13541 @​rtribotte)
• [k8s/ingress-nginx] Fix typo in nginx annotation proxy-buffer-numbers (#​13545 @​fischerman)
• Add a migration note for CONNECT requests (#​13554 @​kevinpollet)

v3.7.9

Compare Source

All Commits

Bug fixes:

• [k8s/ingress-nginx] Fix redirect with use-regex in IngressNGINX provider (#​13476 @​AmariahAK)
• [middleware] Disable Zstd support in the gzhttp wrapper (#​13533 @​kevinpollet)
• [server] Defer the CONNECT payload until the backend accepts the tunnel (#​13542 @​sdelicata)
• [server] Discard CONNECT body in forwardauth and reject CONNECT requests with fast proxy (#​13543 @​sdelicata)
• [server] Bump google.golang.org/grpc to v1.82.1 (#​13551 @​piscue)
• [server] Do not add back CONNECT requests to the pool (#​13556 @​kevinpollet)

Documentation:

• [k8s/gatewayapi] Document Gateway API generated service names change in the migration guide (#​13541 @​rtribotte)
• [k8s/ingress-nginx] Fix typo in nginx annotation proxy-buffer-numbers (#​13545 @​fischerman)
• Add a migration note for CONNECT requests (#​13554 @​kevinpollet)

v3.7.8

Compare Source

All Commits

Bug fixes:

• [middleware, k8s/crd] Add missing ErrorRequestHeaders field to CRDs (#​13498 @​kevinpollet)
• [k8s/ingress-nginx] Sanitize rewritten target on ingress-nginx provider (#​13506 @​gndz07)
• [logs] Remove unrelated error from nonexistent cert resolver log (#​13469 @​ArthurHlt)
• [middleware] Fix panic in retry middleware with Websockets (#​13520 @​juliens)

Documentation:

• [k8s] Align certificateRef and indicate ports (#​13473 @​veenoise)
• [rules] Fix syntax notes in routing rule documentation (#​13501 @​stevenlele)
• [k8s/crd] Fix duplicated options table in ServersTransport CRD reference (#​13518 @​rachana5)

v3.7.8

Compare Source

All Commits

Bug fixes:

• [middleware, k8s/crd] Add missing ErrorRequestHeaders field to CRDs (#​13498 @​kevinpollet)
• [k8s/ingress-nginx] Sanitize rewritten target on ingress-nginx provider (#​13506 @​gndz07)
• [logs] Remove unrelated error from nonexistent cert resolver log (#​13469 @​ArthurHlt)
• [middleware] Fix panic in retry middleware with Websockets (#​13520 @​juliens)

Documentation:

• [k8s] Align certificateRef and indicate ports (#​13473 @​veenoise)
• [rules] Fix syntax notes in routing rule documentation (#​13501 @​stevenlele)
• [k8s/crd] Fix duplicated options table in ServersTransport CRD reference (#​13518 @​rachana5)

v3.7.7

Compare Source

Important: Please read the migration guide.

Bug fixes:

• [middleware, k8s/ingress-nginx] Add app-root middleware with nginx variable interpolation (#​13398 @​dfeinblatt)
• [rules] Fix consistency between HostSNI() and Host() (#​13460 @​juliens)
• [k8s, k8s/gatewayapi] Fix ExtensionRef filters on backendRefs to resolve against the HTTPRoute namespace (#​13462 @​gndz07)
• [middleware] Fix handle empty unknown-length bodies in mirroring (#​13399 @​amazon7737)
• [k8s/crd] Fix cross-provider ref check for TCP ServersTransport in Kubernetes CRD provider (#​13458 @​gndz07)
• [middleware] Sanitize replaced path in ReplacePathRegex middleware (#​13466 @​kevinpollet)
• [acme] Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 (#​13477 @​rtribotte)
• [otel] Bump go.opentelemetry.io/otel to v1.44.0 (#​13478 @​rtribotte)
• [k8s] Fix panic when endpointslice port value or name is nil (#​13481 @​kevinpollet)

Documentation:

• Fix version in migration guide (#​13434 @​kevinpollet)
• Fix changelog v2.11.51 (#​13430 @​mmatur)
• Add v3.7 to supported version docs (#​13118 @​jnoordsij)
• Fix some function names in comments (#​13443 @​blackflytech)
• Add @​nandorKollar as a current maintainer (#​13451 @​emilevauge)
• Add @​amazon7737 as a current maintainer (#​13450 @​emilevauge)
• [middleware] Clarify buffering middleware defaults (#​13401 @​amazon7737)
• Fix grammar in TLS, TCP service, and routing reference docs (#​13461 @​almightymoon)
• Fix X-Forwarded-Prefix documentation for dashboard redirection (#​13472 @​kevinpollet)

v3.7.7

Compare Source

Important: Please read the migration guide.

Bug fixes:

• [middleware, k8s/ingress-nginx] Add app-root middleware with nginx variable interpolation (#​13398 @​dfeinblatt)
• [rules] Fix consistency between HostSNI() and Host() (#​13460 @​juliens)
• [k8s, k8s/gatewayapi] Fix ExtensionRef filters on backendRefs to resolve against the HTTPRoute namespace (#​13462 @​gndz07)
• [middleware] Fix handle empty unknown-length bodies in mirroring (#​13399 @​amazon7737)
• [k8s/crd] Fix cross-provider ref check for TCP ServersTransport in Kubernetes CRD provider (#​13458 @​gndz07)
• [middleware] Sanitize replaced path in ReplacePathRegex middleware (#​13466 @​kevinpollet)
• [acme] Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 (#​13477 @​rtribotte)
• [otel] Bump go.opentelemetry.io/otel to v1.44.0 (#​13478 @​rtribotte)
• [k8s] Fix panic when endpointslice port value or name is nil (#​13481 @​kevinpollet)

Documentation:

• Fix version in migration guide (#​13434 @​kevinpollet)
• Fix changelog v2.11.51 (#​13430 @​mmatur)
• Add v3.7 to supported version docs (#​13118 @​jnoordsij)
• Fix some function names in comments (#​13443 @​blackflytech)
• Add @​nandorKollar as a current maintainer (#​13451 @​emilevauge)
• Add @​amazon7737 as a current maintainer (#​13450 @​emilevauge)
• [middleware] Clarify buffering middleware defaults (#​13401 @​amazon7737)
• Fix grammar in TLS, TCP service, and routing reference docs (#​13461 @​almightymoon)
• Fix X-Forwarded-Prefix documentation for dashboard redirection (#​13472 @​kevinpollet)

v3.7.6

Compare Source

All Commits

Bug fixes:

• [acme, logs] Bump github.com/go-acme/lego/v5 (#​13154 @​ldez)
• [acme] Bump github.com/go-acme/lego/v5 (#​13359 @​juliens)
• [k8s, k8s/ingress-nginx] Fix ingress-nginx ssl passthrough status updates (#​13212 @​nickmnt)
• [k8s/gatewayapi] Add missing Gateway API features in conformance tests (#​13356 @​AnatoleLucet)
• [k8s/gatewayapi] Avoid collisions for Gateway API services names (#​13367 @​rtribotte)
• [k8s/gatewayapi] Ignore other gateways parentRefs and update route parent statuses only for managed gateways (#​13397 @​rtribotte)
• [k8s/ingress-nginx] Configure retry according to buffering configuration (#​13039 @​rtribotte)
• [k8s/ingress-nginx] Fix force-ssl-redirect routing 418 when TLS is terminated upstream (#​13386 @​carloslima)
• [k8s] Detect EndpointSlice condition changes (#​13405 @​kevinpollet)
• [k8s] Index Kubernetes EndpointSlice by service name (#​13395 @​kevinpollet)
• [k8s] Sort endpointslices to keep backend IPs consistent across rebuilds (#​13406 @​kevinpollet)
• [kv] Bump kvtools/redis to v1.2.1 (#​13403 @​ldez)
• [middleware, authentication] Fix x-forwarded-port in forward-auth (#​13344 @​juliens)
• [middleware, k8s/gatewayapi] Fix Gateway API redirect missing statuses (#​13360 @​AnatoleLucet)
• [middleware, k8s/gatewayapi] Fix Host header not being modified by RequestHeaderModifier (#​12805 @​mihuross)
• [middleware, k8s/gatewayapi] Fix request scheme derivation when Gateway API RequestRedirect omits scheme (#​13347 @​gndz07)
• [middleware] Fix CORS Max-Age set to 0 by default (#​13371 @​AnatoleLucet)
• [middleware] Fix CORS wildcard when allow-credentials is true (#​13368 @​AnatoleLucet)
• [server] Add an option to remove request headers with underscores (#​13262 @​youkoulayley)
• [server] Configurable max request header size (#​13353 @​juliens)
• [tls] Fix nondeterministic TLS certificate selection on shared SAN (#​13348 @​rtribotte)
• [webui] Bump axios to v1.18.0 (#​13380 @​gndz07)
• [websocket] Fix connection upgrades when backend server is using h2c scheme (#​12967 @​stffabi)

Documentation:

• [k8s/crd] Fix broken CRD reference links in IngressRoute page (#​13375 @​s3onghyun)
• [k8s/gatewayapi] Remove experimental note for Gateway API/TLSRoute documentation (#​13392 @​jnoordsij)
• [k8s/ingress-nginx] Add Kubernetes Ingress NGINX to the providers list (#​13372 @​nmengin)
• [k8s] Align Helm chart documented values with chart v41 (#​13366 @​mloiseleur)
• [middleware, authentication, k8s/ingress-nginx] Clarify intentional auth-response-headers gating and absence of stripping incoming X-Forwarded-* headers (#​13342 @​rtribotte)
• [middleware] Clarify entryPoint middleware reference format (#​13364 @​mloiseleur)
• [security] Add HTTP/2 header memory exhaustion security documentation (#​13381 @​emilevauge)
• Adds documentations on maxHeaderBytes (#​13363 @​juliens)
• Fix inaccuracies in reference documentation (#​13304 @​sheddy-traefik)

v3.7.6

Compare Source

All Commits

Bug fixes:

• [acme, logs] Bump github.com/go-acme/lego/v5 (#​13154 @​ldez)
• [acme] Bump github.com/go-acme/lego/v5 (#​13359 @​juliens)
• [k8s, k8s/ingress-nginx] Fix ingress-nginx ssl passthrough status updates (#​13212 @​nickmnt)
• [k8s/gatewayapi] Add missing Gateway API features in conformance tests (#​13356 @​AnatoleLucet)
• [k8s/gatewayapi] Avoid collisions for Gateway API services names (#​13367 @​rtribotte)
• [k8s/gatewayapi] Ignore other gateways parentRefs and update route parent statuses only for managed gateways (#​13397 @​rtribotte)
• [k8s/ingress-nginx] Configure retry according to buffering configuration (#​13039 @​rtribotte)
• [k8s/ingress-nginx] Fix force-ssl-redirect routing 418 when TLS is terminated upstream (#​13386 @​carloslima)
• [k8s] Detect EndpointSlice condition changes (#​13405 @​kevinpollet)
• [k8s] Index Kubernetes EndpointSlice by service name (#​13395 @​kevinpollet)
• [k8s] Sort endpointslices to keep backend IPs consistent across rebuilds (#​13406 @​kevinpollet)
• [kv] Bump kvtools/redis to v1.2.1 (#​13403 @​ldez)
• [middleware, authentication] Fix x-forwarded-port in forward-auth (#​13344 @​juliens)
• [middleware, k8s/gatewayapi] Fix Gateway API redirect missing statuses (#​13360 @​AnatoleLucet)
• [middleware, k8s/gatewayapi] Fix Host header not being modified by RequestHeaderModifier (#​12805 @​mihuross)
• [middleware, k8s/gatewayapi] Fix request scheme derivation when Gateway API RequestRedirect omits scheme (#​13347 @​gndz07)
• [middleware] Fix CORS Max-Age set to 0 by default (#​13371 @​AnatoleLucet)
• [middleware] Fix CORS wildcard when allow-credentials is true (#​13368 @​AnatoleLucet)
• [server] Add an option to remove request headers with underscores (#​13262 @​youkoulayley)
• [server] Configurable max request header size (#​13353 @​juliens)
• [tls] Fix nondeterministic TLS certificate selection on shared SAN (#​13348 @​rtribotte)
• [webui] Bump axios to v1.18.0 (#​13380 @​gndz07)
• [websocket] Fix connection upgrades when backend server is using h2c scheme (#​12967 @​stffabi)

Documentation:

• [k8s/crd] Fix broken CRD reference links in IngressRoute page (#​13375 @​s3onghyun)
• [k8s/gatewayapi] Remove experimental note for Gateway API/TLSRoute documentation (#​13392 @​jnoordsij)
• [k8s/ingress-nginx] Add Kubernetes Ingress NGINX to the providers list (#​13372 @​nmengin)
• [k8s] Align Helm chart documented values with chart v41 (#​13366 @​mloiseleur)
• [middleware, authentication, k8s/ingress-nginx] Clarify intentional auth-response-headers gating and absence of stripping incoming X-Forwarded-* headers (#​13342 @​rtribotte)
• [middleware] Clarify entryPoint middleware reference format (#​13364 @​mloiseleur)
• [security] Add HTTP/2 header memory exhaustion security documentation (#​13381 @​emilevauge)
• Adds documentations on maxHeaderBytes (#​13363 @​juliens)
• Fix inaccuracies in reference documentation (#​13304 @​sheddy-traefik)

v3.7.5

Compare Source

All Commits

Bug fixes:

• [k8s/ingress-nginx] Skip ingress when auth-secret resolution fails (#​13323 @​gndz07)
• [k8s/ingress-nginx] Pass endpointslice fencing on ingress-nginx provider (#​13290 @​Learloj)
• [k8s/gatewayapi] Reject cross-provider references with backendRefs.namespace (#​13322 @​youkoulayley)
• [server] Bump to github.com/pires/go-proxyproto v0.12.0 (#​13313 @​timschumi)
• [tls] Fix routers with same host, different tlsoptions on different entryPoint (#​13329 @​juliens)
• [tls] Fix snicheck for routers with no hosts (#​13333 @​rtribotte)

v3.7.5

Compare Source

All Commits

Bug fixes:

• [k8s/ingress-nginx] Skip ingress when auth-secret resolution fails (#​13323 @​gndz07)
• [k8s/ingress-nginx] Pass endpointslice fencing on ingress-nginx provider (#​13290 @​Learloj)
• [k8s/gatewayapi] Reject cross-provider references with backendRefs.namespace (#​13322 @​youkoulayley)
• [server] Bump to github.com/pires/go-proxyproto v0.12.0 (#​13313 @​timschumi)
• [tls] Fix routers with same host, different tlsoptions on different entryPoint (#​13329 @​juliens)
• [tls] Fix snicheck for routers with no hosts (#​13333 @​rtribotte)

v3.7.4

Compare Source

All Commits

Bug fixes:

• [middleware] Fix redis write timeout option configuration (#​13273 @​bzyy1024)
• [webui] Bump react-router and jsdom (#​13301 @​gndz07)
• [k8s/gatewayapi] Fix BackendTLSPolicy status update (#​13306 @​AnatoleLucet)
• [http3] Bump github.com/quic-go/quic-go to v0.59.1 (#​13300 @​rtribotte)
• [webui] Bump axios to v1.17.0 (#​13299 @​gndz07)
• [tls] Fix snicheck with keepalive (#​13305 @​juliens)

v3.7.4

Compare Source

All Commits

Bug fixes:

• [middleware] Fix redis write timeout option configuration (#​13273 @​bzyy1024)
• [webui] Bump react-router and jsdom (#​13301 @​gndz07)
• [k8s/gatewayapi] Fix BackendTLSPolicy status update (#​13306 @​AnatoleLucet)
• [http3] Bump github.com/quic-go/quic-go to v0.59.1 (#​13300 @​rtribotte)
• [webui] Bump axios to v1.17.0 (#​13299 @​gndz07)
• [tls] Fix snicheck with keepalive (#​13305 @​juliens)

v3.7.3

Compare Source

All Commits

Bug fixes:

• [middleware] Fix redis write timeout option configuration (#​13273 @​bzyy1024)
• [webui] Bump react-router and jsdom (#​13301 @​gndz07)
• [k8s/gatewayapi] Fix BackendTLSPolicy status update (#​13306 @​AnatoleLucet)
• [http3] Bump github.com/quic-go/quic-go to v0.59.1 (#​13300 @​rtribotte)
• [webui] Bump axios to v1.17.0 (#​13299 @​gndz07)
• [tls] Fix snicheck with keepalive (#​13305 @​juliens)

v3.7.3

Compare Source

All Commits

Bug fixes:

• [middleware] Fix redis write timeout option configuration (#​13273 @​bzyy1024)
• [webui] Bump react-router and jsdom (#​13301 @​gndz07)
• [k8s/gatewayapi] Fix BackendTLSPolicy status update (#​13306 @​AnatoleLucet)
• [http3] Bump github.com/quic-go/quic-go to v0.59.1 (#​13300 @​rtribotte)
• [webui] Bump axios to v1.17.0 (#​13299 @​gndz07)
• [tls] Fix snicheck with keepalive (#​13305 @​juliens)

v3.7.1

Compare Source

Important: Please read the migration guide.

CVE fixed:

• CVE-2026-44774 (Advisory GHSA-96qj-4jj5-wcjc)

Bug fixes:

• [k8s/ingress, k8s/crd, k8s/gatewayapi] Add CrossProviderNamespaces option (#​13094 @​rtribotte)
• [k8s/crd] Fix cross-provider ref check for Kubernetes CRD provider (#​13121 @​rtribotte)

v3.7.1

Compare Source

Important: Please read the migration guide.

CVE fixed:

• CVE-2026-44774 (Advisory GHSA-96qj-4jj5-wcjc)

Bug fixes:

• [k8s/ingress, k8s/crd, k8s/gatewayapi] Add CrossProviderNamespaces option (#​13094 @​rtribotte)
• [k8s/crd] Fix cross-provider ref check for Kubernetes CRD provider (#​13121 @​rtribotte)

v3.7.0

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.22.2 (#​11537 by ldez)
• [cli] Bump github.com/traefik/paerser to v0.2.2 (#​11530 by kevinpollet)
• [middleware] Enable the retry middleware in the proxy (#​11536 by kevinpollet)
• [middleware] Retry should send headers on Write (#​11534 by kevinpollet)

v3.3.3 (2025-01-31)

All Commits

Bug fixes:

• [api] Do not create observability model by default (#​11476 by rtribotte)
• [fastproxy] Fix content-length header assertion (#​11498 by kevinpollet)
• [fastproxy] Handle responses without content length header (#​11458 by rtribotte)
• [k8s/crd,k8s] Add missing headerField in Middleware CRD (#​11499 by jspdown)
• [tracing,accesslogs] Bring back TraceID and SpanID fields in access logs (#​11450 by rtribotte)

Misc:

• Merge branch v2.11 into v3.3 (#​11502 by rtribotte)
• Merge branch v2.11 into v3.3 (#​11491 by rtribotte)

v2.11.20 (2025-01-31)

All Commits

Bug fixes:

• [acme] Graceful shutdown for ACME JSON write operation (#​11497 by juliens)

Documentation:

• Change docker-compose to docker compose (#​11496 by khai-pi)

v2.11.19 (2025-01-29)

All Commits

Bug fixes:

• [middleware] Changing log message when client cert is not available to debug (#​11453 by Nelwhix)
• [service] Do not create a logger instance for each proxy (#​11487 by kevinpollet)
• [webui] Fix auto refresh not clearing on component unmount (#​11477 by DoubleREW)

Documentation:

• Remove awesome.traefik.io reference in documentation section (#​11435 by kevinpollet)

v3.3.2 (2025-01-14)

All Commits

Bug fixes:

• [fastproxy] Do not read response body for HEAD requests (#​11442 by kevinpollet)
• [metrics,tracing,accesslogs] Fix observability configuration on EntryPoints (#​11446 by rtribotte)
• [webui] Set content-type when serving webui index (#​11428 by kevinpollet)

Documentation:

• [acme] Fix deprecated dnsChallenge propagation logging and documentation (#​11433 by thomscode)
• [acme] Add missing trailing s to propagation.delayBeforeCheck option (#​11417 by jspiers)

Misc:

• Merge branch v2.11 into v3.3 (#​11419 by kevinpollet)

v3.3.1 (2025-01-07)

All Commits

Bug fixes:

• [websocket,server] Disable http2 connect setting for websocket by default (#​11408 by rtribotte)

v3.2.5 (2025-01-07)

All Commits

Bug fixes:

• [websocket,server] Disable http2 connect setting for websocket by default (#​11408 by rtribotte)

v2.11.18 (2025-01-07)

All Commits

Bug fixes:

• [websocket,server] Disable http2 connect setting for websocket by default (#​11412 by rtribotte)

v3.3.0 (2025-01-06)

All Commits

Enhancements:

• [acme] Add options to control ACME propagation checks (#​11241 by ldez)
• [api] Add support dump API endpoint (#​11328 by mmatur)
• [http] Set Host header in HTTP provider request (#​11237 by nikonhub)
• [k8s/crd,k8s] Make the IngressRoute kind optional (#​11177 by skirtan1)
• [k8s/ingress,sticky-session,k8s/crd,k8s] Support serving endpoints (#​11121 by BZValoche)
• [logs,accesslogs] OpenTelemetry Logs and Access Logs (#​11319 by rtribotte)
• [logs,accesslogs] Add experimental flag for OTLP logs integration (#​11335 by kevinpollet)
• [metrics,tracing,accesslogs] Manage observability at entrypoint and router level (#​11308 by rtribotte)
• [middleware,authentication] Add an option to preserve the ForwardAuth Server Location header (#​11318 by Nelwhix)
• [middleware,authentication] Only calculate basic auth hashes once for concurrent requests (#​11143 by michelheusschen)
• [middleware,authentication] Send request body to authorization server for forward auth (#​11097 by kyo-ke)
• [plugins] Add AbortOnPluginFailure option to abort startup on plugin load failure (#​11228 by bmagic)
• [sticky-session] Configurable path for sticky cookies (#​11166 by IIpragmaII)
• [webui,api] Configurable API & Dashboard base path (#​11250 by rtribotte)

Bug fixes:

• [k8s/ingress,k8s/crd] Fix fenced server status computation (#​11361 by kevinpollet)

Documentation:

• Prepare release v3.3.0-rc2 (#​11362 by rtribotte)
• Prepare Release v3.3.0-rc1 (#​11349 by rtribotte)

Misc:

• Merge branch v3.2 into v3.3 (#​11402 by kevinpollet)
• Merge branch v3.2 into v3.3 (#​11393 by mmatur)
• Merge branch v3.2 into v3.3 (#​11389 by mmatur)
• Merge branch v3.2 into v3.3 (#​11367 by kevinpollet)
• Merge branch v3.2 into master (#​11340 by kevinpollet)
• Merge branch v3.2 into master (#​11293 by kevinpollet)
• Merge branch v3.2 into master (#​11239 by kevinpollet)
• Merge branch v3.2 into master (#​11187 by kevinpollet)

v3.2.4 (2025-01-06)

All Commits

Bug fixes:

• [k8s/gatewayapi] Support empty value for core Kubernetes API group (#​11386 by rtribotte)
• [tcp,k8s/crd] Pass TLS bool from IngressRouteTCP to TCPService (#​11343 by lipmem)
• [tls] Upgrade github.com/spiffe/go-spiffe/v2 to v2.4.0 (#​11385 by mmatur)
• Remove duplicate github.com/coreos/go-systemd dependency ([#​11354](https://redirect.github.com/traefik/traefik/pull/11

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Asia/Ho_Chi_Minh)

• Branch creation
  • Between 01:00 AM and 06:59 PM, only on Sunday and Wednesday (* 1-18 * * 3,0)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!