Update module github.com/traefik/traefik/v3 to v3.7.12 - autoclosed

[devex-sa]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/traefik/traefik/v3	v3.6.25 → v3.7.12

---

Release Notes

traefik/traefik (github.com/traefik/traefik/v3)

v3.7.12

Compare Source

All Commits

Bug fixes:

• [fastproxy] Bump github.com/valyala/fasthttp to v1.73.0 (#​13769 @​mmatur)
• [file] Include the filename in file provider configuration errors (#​13527 @​lazerg)
• [http3] Apply read timeout, idle timeout, and max header bytes for HTTP/3 (#​13717 @​gndz07)
• [k8s] Fix typos in docs and an OCSP log message (#​13722 @​MsfPablo)
• [k8s, k8s/ingress-nginx] Fix redirect www host with a non-numeric port (#​13708 @​mmatur)
• [k8s/ingress-nginx] Fix TLS option name collision across namespaces in the ingress-nginx provider (#​13721 @​gndz07)
• [server] Add an entry point option to handle request headers with aliasing names (#​13720 @​rtribotte)
• [tcp, udp] Reject negative weights in TCP and UDP weighted services (#​13749 @​rtribotte)
• Bump etcd client modules to v3.5.33 (#​13756 @​mmatur)

Documentation:

• [k8s] Update redirections block reference in basic.md (#​13723 @​Larzenegger)
• [k8s] Fix formatting in Kubernetes setup guide (#​13742 @​stefkiourk)
• [security] Document the security threat model and settled security decisions (#​13740 @​emilevauge)
• [service] Clarify ServersTransport behavior for the errors middleware in Kubernetes (#​13531 @​lazerg)
• Fix v3.7.11 migration guide (#​13730 @​gndz07)
• Move Jean-Baptiste Doumenjou and Mathieu Lonjaret to past maintainers (#​13736 @​emilevauge)
• Reduce SECURITY.md to a pointer to the security documentation (#​13732 @​emilevauge)
• Update end of support dates (#​13712 @​nmengin)

v3.7.11

Compare Source

All Commits

Bug fixes:

• [fastproxy] Reject out-of-range status codes from backends when using FastProxy (#​13635 @​gndz07)
• [http3] Bump github.com/quic-go/quic-go to v0.61.0 (#​13688 @​jnoordsij)
• [k8s/crd] Prevent generated name collisions in the Kubernetes CRD provider (#​13656 @​rtribotte)
• [k8s/crd] Add an option to restrict the namespace of the default TLS resources (#​13665 @​rtribotte)
• [k8s/crd] Scope generated Kubernetes Service names to their parent in the CRD provider (#​13668 @​rtribotte)
• [k8s/crd] Name failover generated services after the referenced Kubernetes Service (#​13677 @​rtribotte)
• [k8s/crd] Add safe naming option to avoid collisions for Kubernetes CRD provider (#​13689 @​gndz07)
• [k8s/gatewayapi] Preserve encoded path segments in Gateway API URLRewrite and RequestRedirect (#​13641 @​gndz07)
• [k8s/gatewayapi] Fix Gateway API router rules (#​13645 @​rtribotte)
• [k8s/ingress-nginx] Dedupe client-auth TLS options across ingresses sharing a host for ingress-nginx provider (#​13638 @​gndz07)
• [k8s/ingress-nginx] Apply auth, custom-headers, custom errors and ssl-redirect to ingress default backend (#​13575 @​rtribotte)
• [k8s/ingress-nginx] Honor asDefault and exclude internal entrypoints from default selection for ingress-nginx provider (#​13629 @​gndz07)
• [k8s/ingress] Enforce crossProviderNamespace for Kubernetes Ingress service middleware (#​13670 @​gndz07)
• [middleware, authentication] Bump github.com/containous/go-http-auth to b975dca (#​13636 @​kevinpollet)
• [tls] Add an option to disable the fallback to the default TLS options (#​13639 @​rtribotte)
• Bump golang.org/x dependencies (#​13699 @​mmatur)

Documentation:

• [accesslogs] Clarify OriginStatus and DownstreamStatus in access logs documentation (#​13609 @​rtribotte)
• [api] Fix doubled word in API/dashboard reference docs (#​13663 @​latent-9)
• [docker] Remove :ro from docker.sock (#​12656 @​bluepuma77)
• [k8s/gatewayapi] Clarify v3.7.10 migration guide for Gateway API 1.6.1 (#​13628 @​rtribotte)
• [k8s/gatewayapi] Document the Experimental Channel CRDs requirement of the Kubernetes Gateway provider (#​13634 @​rtribotte)
• [k8s/ingress-nginx] Docs: Update supported server snippet directives (#​13687 @​rtsui-harmonicinc)
• [middleware] Add rejectStatusCode to the ipAllowList middleware configuration example (#​13664 @​amazon7737)
• [middleware] Mark the errors middleware service option as required (#​13684 @​lazerg)
• [tls] Document the TLS options conflict resolution (#​13640 @​rtribotte)
• [tls] Clarify router TLS replaces entrypoint TLS (#​13630 @​sornapudisuresh)
• Document Redis keyspace notifications requirement (#​13691 @​omkar619-dev)
• Remove retired Go Report Card badge (#​13637 @​yardenshoham)
• Restore the systemd socket activation documentation (#​13701 @​lazerg)
• Update version support policy starting with v3.6 (#​13627 @​nmengin)

v3.7.10

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v5 to v5.3.1 (#​13547 @​ldez)
• [middleware, authentication] Fix auth singleflight key collision (#​13572 @​mmatur)
• [k8s/gatewayapi] Avoid router name collisions in Kubernetes Gateway API provider (#​13580 @​gndz07)
• [tracing] Bump github.com/DataDog/dd-trace-go/v2 to 2.8.1 (#​13530 @​kevinpollet)
• Bump golang.org/x/text to v0.40.0 and golang.org/x/net v0.57.0 (#​13574 @​mmatur)
• [k8s/crd] Fix cross-namespace service reference check in Kubernetes CRD provider (#​13573 @​gndz07)
• [middleware] Bump github.com/klauspost/compress to v1.18.7 (#​13587 @​mmatur)
• [k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.6.1 (#​13589 @​rtribotte)

Documentation:

• [k8s/ingress-nginx] Clarify auth-url/rewrite-target interaction on ingress-nginx provider (#​13607 @​gndz07)

v3.7.9

Compare Source

All Commits

Bug fixes:

• [k8s/ingress-nginx] Fix redirect with use-regex in IngressNGINX provider (#​13476 @​AmariahAK)
• [middleware] Disable Zstd support in the gzhttp wrapper (#​13533 @​kevinpollet)
• [server] Defer the CONNECT payload until the backend accepts the tunnel (#​13542 @​sdelicata)
• [server] Discard CONNECT body in forwardauth and reject CONNECT requests with fast proxy (#​13543 @​sdelicata)
• [server] Bump google.golang.org/grpc to v1.82.1 (#​13551 @​piscue)
• [server] Do not add back CONNECT requests to the pool (#​13556 @​kevinpollet)

Documentation:

• [k8s/gatewayapi] Document Gateway API generated service names change in the migration guide (#​13541 @​rtribotte)
• [k8s/ingress-nginx] Fix typo in nginx annotation proxy-buffer-numbers (#​13545 @​fischerman)
• Add a migration note for CONNECT requests (#​13554 @​kevinpollet)

v3.7.8

Compare Source

All Commits

Bug fixes:

• [middleware, k8s/crd] Add missing ErrorRequestHeaders field to CRDs (#​13498 @​kevinpollet)
• [k8s/ingress-nginx] Sanitize rewritten target on ingress-nginx provider (#​13506 @​gndz07)
• [logs] Remove unrelated error from nonexistent cert resolver log (#​13469 @​ArthurHlt)
• [middleware] Fix panic in retry middleware with Websockets (#​13520 @​juliens)

Documentation:

• [k8s] Align certificateRef and indicate ports (#​13473 @​veenoise)
• [rules] Fix syntax notes in routing rule documentation (#​13501 @​stevenlele)
• [k8s/crd] Fix duplicated options table in ServersTransport CRD reference (#​13518 @​rachana5)

v3.7.7

Compare Source

All Commits

Bug fixes:

• [middleware, k8s/ingress-nginx] Add app-root middleware with nginx variable interpolation (#​13398 @​dfeinblatt)
• [rules] Fix consistency between HostSNI() and Host() (#​13460 @​juliens)
• [k8s, k8s/gatewayapi] Fix ExtensionRef filters on backendRefs to resolve against the HTTPRoute namespace (#​13462 @​gndz07)
• [middleware] Fix handle empty unknown-length bodies in mirroring (#​13399 @​amazon7737)
• [k8s/crd] Fix cross-provider ref check for TCP ServersTransport in Kubernetes CRD provider (#​13458 @​gndz07)
• [middleware] Sanitize replaced path in ReplacePathRegex middleware (#​13466 @​kevinpollet)
• [acme] Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 (#​13477 @​rtribotte)
• [otel] Bump go.opentelemetry.io/otel to v1.44.0 (#​13478 @​rtribotte)
• [k8s] Fix panic when endpointslice port value or name is nil (#​13481 @​kevinpollet)

Documentation:

• Fix version in migration guide (#​13434 @​kevinpollet)
• Fix changelog v2.11.51 (#​13430 @​mmatur)
• Add v3.7 to supported version docs (#​13118 @​jnoordsij)
• Fix some function names in comments (#​13443 @​blackflytech)
• Add @​nandorKollar as a current maintainer (#​13451 @​emilevauge)
• Add @​amazon7737 as a current maintainer (#​13450 @​emilevauge)
• [middleware] Clarify buffering middleware defaults (#​13401 @​amazon7737)
• Fix grammar in TLS, TCP service, and routing reference docs (#​13461 @​almightymoon)
• Fix X-Forwarded-Prefix documentation for dashboard redirection (#​13472 @​kevinpollet)

v3.7.6

Compare Source

All Commits

Bug fixes:

• [acme, logs] Bump github.com/go-acme/lego/v5 (#​13154 @​ldez)
• [acme] Bump github.com/go-acme/lego/v5 (#​13359 @​juliens)
• [k8s, k8s/ingress-nginx] Fix ingress-nginx ssl passthrough status updates (#​13212 @​nickmnt)
• [k8s/gatewayapi] Add missing Gateway API features in conformance tests (#​13356 @​AnatoleLucet)
• [k8s/gatewayapi] Avoid collisions for Gateway API services names (#​13367 @​rtribotte)
• [k8s/gatewayapi] Ignore other gateways parentRefs and update route parent statuses only for managed gateways (#​13397 @​rtribotte)
• [k8s/ingress-nginx] Configure retry according to buffering configuration (#​13039 @​rtribotte)
• [k8s/ingress-nginx] Fix force-ssl-redirect routing 418 when TLS is terminated upstream (#​13386 @​carloslima)
• [k8s] Detect EndpointSlice condition changes (#​13405 @​kevinpollet)
• [k8s] Index Kubernetes EndpointSlice by service name (#​13395 @​kevinpollet)
• [k8s] Sort endpointslices to keep backend IPs consistent across rebuilds (#​13406 @​kevinpollet)
• [kv] Bump kvtools/redis to v1.2.1 (#​13403 @​ldez)
• [middleware, authentication] Fix x-forwarded-port in forward-auth (#​13344 @​juliens)
• [middleware, k8s/gatewayapi] Fix Gateway API redirect missing statuses (#​13360 @​AnatoleLucet)
• [middleware, k8s/gatewayapi] Fix Host header not being modified by RequestHeaderModifier (#​12805 @​mihuross)
• [middleware, k8s/gatewayapi] Fix request scheme derivation when Gateway API RequestRedirect omits scheme (#​13347 @​gndz07)
• [middleware] Fix CORS Max-Age set to 0 by default (#​13371 @​AnatoleLucet)
• [middleware] Fix CORS wildcard when allow-credentials is true (#​13368 @​AnatoleLucet)
• [server] Add an option to remove request headers with underscores (#​13262 @​youkoulayley)
• [server] Configurable max request header size (#​13353 @​juliens)
• [tls] Fix nondeterministic TLS certificate selection on shared SAN (#​13348 @​rtribotte)
• [webui] Bump axios to v1.18.0 (#​13380 @​gndz07)
• [websocket] Fix connection upgrades when backend server is using h2c scheme (#​12967 @​stffabi)

Documentation:

• [k8s/crd] Fix broken CRD reference links in IngressRoute page (#​13375 @​s3onghyun)
• [k8s/gatewayapi] Remove experimental note for Gateway API/TLSRoute documentation (#​13392 @​jnoordsij)
• [k8s/ingress-nginx] Add Kubernetes Ingress NGINX to the providers list (#​13372 @​nmengin)
• [k8s] Align Helm chart documented values with chart v41 (#​13366 @​mloiseleur)
• [middleware, authentication, k8s/ingress-nginx] Clarify intentional auth-response-headers gating and absence of stripping incoming X-Forwarded-* headers (#​13342 @​rtribotte)
• [middleware] Clarify entryPoint middleware reference format (#​13364 @​mloiseleur)
• [security] Add HTTP/2 header memory exhaustion security documentation (#​13381 @​emilevauge)
• Adds documentations on maxHeaderBytes (#​13363 @​juliens)
• Fix inaccuracies in reference documentation (#​13304 @​sheddy-traefik)

v3.7.5

Compare Source

All Commits

Bug fixes:

• [k8s/ingress-nginx] Skip ingress when auth-secret resolution fails (#​13323 @​gndz07)
• [k8s/ingress-nginx] Pass endpointslice fencing on ingress-nginx provider (#​13290 @​Learloj)
• [k8s/gatewayapi] Reject cross-provider references with backendRefs.namespace (#​13322 @​youkoulayley)
• [server] Bump to github.com/pires/go-proxyproto v0.12.0 (#​13313 @​timschumi)
• [tls] Fix routers with same host, different tlsoptions on different entryPoint (#​13329 @​juliens)
• [tls] Fix snicheck for routers with no hosts (#​13333 @​rtribotte)

v3.7.4

Compare Source

All Commits

Bug fixes:

• [middleware] Fix redis write timeout option configuration (#​13273 @​bzyy1024)
• [webui] Bump react-router and jsdom (#​13301 @​gndz07)
• [k8s/gatewayapi] Fix BackendTLSPolicy status update (#​13306 @​AnatoleLucet)
• [http3] Bump github.com/quic-go/quic-go to v0.59.1 (#​13300 @​rtribotte)
• [webui] Bump axios to v1.17.0 (#​13299 @​gndz07)
• [tls] Fix snicheck with keepalive (#​13305 @​juliens)

v3.7.3

Compare Source

All Commits

Bug fixes:

• [tls] Compute resolved tlsOptions after applying models (#​13291 @​rtribotte)
• [webui, tcp] Fix TCP router service resolution in dashboard flow diagram (#​13155 @​aliamerj)
• [k8s/ingress-nginx] Trim quotes from proxy_set_header header name (#​13203 @​crisbal)
• [accesslogs] Escape double quotes in quoted log fields (#​13180 @​KaanSimsek)
• [k8s/gatewayapi] Escape exact gRPC method matches (#​13201 @​nickmnt)
• [logs, middleware] Allow query parameters to be dropped from RequestPath in access log (#​13091 @​calinelson)
• [k8s/ingress-nginx] Clear Ssl-Client-* headers when no client certificate is present (#​13260 @​gndz07)
• [k8s/gatewayapi] Bump github.com/moby/spdystream to v0.5.1 (#​13252 @​kevinpollet)
• [file] Improve file provider behavior regarding dangling symlinks (#​12449 @​fh-yuxiao-zeng)
• [server] Bump github.com/bytedance/sonic to v1.15.1 (#​13254 @​kevinpollet)
• [middleware, authentication] Add error on basic auth build if users is empty (#​13195 @​rtribotte)
• [k8s/ingress] Avoid ingress path matcher injection and backport 11d2514 (#​13227 @​rtribotte)
• [server] Move snicheck to ctx instead of simulated routing (#​13214 @​juliens)
• [middleware] Reject requests with different paths after StripPrefix and StripPrefixRegex normalisation (#​13215 @​rtribotte)
• [server] Bump golang.org/x/net to v0.55.0 (#​13251 @​kevinpollet)
• [k8s/gatewayapi] Change default values and expose configuration for Kubernetes client QPS and Burst (#​13277 @​kevinpollet)
• [server] Bump golang.org/x/crypto to v0.52.0 (#​13276 @​rtribotte)

Documentation:

• [k8s] Document new chart behavior on Gateway API (#​13167 @​mloiseleur)
• [file] Replace generated File routing reference page (#​13170 @​sheddy-traefik)
• [k8s/crd] Fix typo in accesslogs field name (#​13177 @​PlayMTL)
• [k8s/ingress-nginx] Surface the Ingress status race condition during NGINX coexistence (#​13205 @​emilevauge)
• Polish grammar in migration guides (#​13174 @​quyentonndbs)
• [middleware] Remove whitespace in HTML tag (#​13160 @​marbon87)
• Add @​LBF38 as a current maintainer (#​13225 @​emilevauge)
• Add ingressClassName to Kubernetes CRD provider migration guide (#​13248 @​kevinpollet)
• [k8s/ingress-nginx] Add nginx.ingress.kubernetes.io/enable-global-auth to the list of supported annotations (#​13219 @​filip2mac)
• [k8s/ingress-nginx] Capitalize NGINX in kubernetesIngressNGINX (#​13236 @​smellems)

v3.7.2

Compare Source

All Commits

Release canceled.

v3.7.1

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v5 to v5.4.1 (#​13759 @​ldez)
• [acme] Disable recursive nss propagation by default for DNS challenge (#​13830 @​rtribotte)
• [acme] Do not require recursive nameservers propagation by default for the DNS-01 challenge (#​13710 @​amazon7737)
• [acme, tls] Ignore negated matchers when parsing rule domains (#​13725 @​rtribotte)
• [consulcatalog, nomad] Build a collision-free item key in the Consul Catalog and Nomad providers (#​13741 @​rtribotte)
• [http3] Dedicate a transport per HTTP/3 client connection (#​13812 @​sdelicata)
• [k8s/ingress-nginx] Fix sticky cookie expiration per request (#​13496 @​makaiver)
• [k8s/ingress-nginx] Create HTTP redirect router for ssl-passthrough with force-ssl-redirect (#​13457 @​mmatur)
• [k8s/ingress-nginx] Preserve leading dot in sticky session cookie Domain attribute (#​13456 @​mmatur)
• [logs, middleware] Set access log entry level and time before formatting the OTLP body (#​13767 @​emilevauge)
• [logs, tls, k8s/crd] Downgrade default TLS resources namespace mismatch log to warning (#​13780 @​lazerg)
• [middleware] Fix {url} placeholder in customErrors middleware now includes correct scheme (#​13320 @​AnouarMohamed)
• [middleware, authentication] Prevent user enumeration through the basic auth singleflight key (#​13816 @​sdelicata)
• [server] Build the configuration copy once per change (#​13746 @​jspdown)
• [server] Do not forward h2c upgrade headers to the backend (#​13797 @​sdelicata)
• [server] Deny request with an opaque request target (#​13796 @​sdelicata)
• [server] Do not forward request trailer values to the backend (#​13822 @​rtribotte)
• [server] Bump github.com/quic-go/quic-go to v0.62.0 (#​13807 @​Nelwhix)
• [tls] Redact duplicate TLS certificates in provider merge logs (#​13548 @​xsergos)
• [webui] Fix displayed number on details pages (#​13779 @​gndz07)

Documentation:

• [k8s] Add warning about Ingress API frozen state (#​13783 @​jnoordsij)
• [k8s] Remove namespace reference for providers.kubernetesGateway.labelSelector (#​13790 @​jnoordsij)
• [k8s/crd] Fix broken redirect for the Kubernetes CRD reference docs (#​13811 @​thev1ndu)
• Tell scanning agents to read the security policy and decisions pages (#​13753 @​emilevauge)

v3.7.0

Compare Source

All Commits

Enhancements:

• [k8s/ingress-nginx] Use a metamodel to generate dynamic configuration in ingress-nginx (#​13062 @​juliens)
• [k8s/ingress-nginx] Add limit-connections support (#​13030 @​amazon7737)
• [webui] Display server weight in service detail view (#​12325 @​murataslan1)
• [webui, tls] Add certificates menu and overview (#​12628 @​holomekc)
• [provider] Add providers routing precedence configuration (#​12895 @​juliens)
• [k8s/ingress-nginx] Support NGINX global auth annotation (#​12893 @​foxcool)
• [k8s/ingress-nginx] Add limit-burst-multiplier annotation support (#​12899 @​amazon7737)
• [k8s/ingress-nginx, k8s/ingress, rules] Add wildcard host in Host and HostSNI matchers (#​12884 @​juliens)
• [k8s/gatewayapi] Support multiple certificateRefs on gateway listeners (#​12590 @​mortennordbye)
• [k8s/gatewayapi] Add secret support for BackendTLSPolicy caCertificateRefs (#​12927 @​kevinpollet)
• [accesslogs, k8s/ingress-nginx] Support nginx.ingress.kubernetes.io/enable-access-log annotation (#​12908 @​ris-tlp)
• [accesslogs, k8s/ingress-nginx, k8s/ingress] Add Kubernetes Ingress logs fields (#​12913 @​rtribotte)
• [k8s/knative] Support knative v1.20.0 (#​12441 @​idurgakalyan)
• [k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.5.1 (#​12768 @​mmatur)
• [k8s/ingress-nginx, middleware, authentication] Add support for auth-snippet (#​12778 @​juliens)
• [accesslogs, otel] Allow Stdio access logs alongsige OTLP logging (#​12307 @​Mulgish)
• [acme] Add CertificateTimeout ACME configuration option (#​12278 @​ceko)
• [k8s/ingress-nginx] Support nginx.ingress.kubernetes.io/allowlist-source-range (#​12659 @​ris-tlp)
• [k8s/crd] Add ingressClassName field to the CRDs spec (#​12313 @​kkrypt0nn)
• [k8s/crd] Service failover support in TraefikService CRD (#​12733 @​jspdown)
• [k8s/crd, service] Support cipher suites configuration with ServersTransport (#​11965 @​NEwa-05)
• [k8s/ingress, middleware, k8s/crd, service, k8s/gatewayapi] Services middleware and Gateway API filters on HTTP backends (#​12544 @​juliens)
• [k8s/ingress-nginx] Add nginx.ingress.kubernetes.io/proxy-connect-timeout annotation (#​12572 @​gndz07)
• [k8s/ingress-nginx] Add rewrite-target nginx annotations support (#​12534 @​LBF38)
• [k8s/ingress-nginx] Add support for app-root nginx annotation (#​12576 @​LBF38)
• [k8s/ingress-nginx] Add support for auth-signin annotation (#​12502 @​DesalLama)
• [k8s/ingress-nginx] Add support for from-to-www-redirect NGINX annotation (#​12610 @​LBF38)
• [k8s/ingress-nginx] Add support for proxy-read-timeout and proxy-send-timeout NGINX annotations (#​12630 @​LBF38)
• [k8s/ingress-nginx] Add support for session-cookie-expires nginx annotation (#​12558 @​LBF38)
• [k8s/ingress-nginx] Add support for upstream-hash-by NGINX annotation (#​12749 @​LBF38)
• [k8s/ingress-nginx] Allow entry points to be specified on Nginx Ingresses (#​12727 @​ajacques)
• [k8s/ingress-nginx] Implement proxy-http-version annotation (#​12743 @​KshitijBharde)
• [k8s/ingress-nginx] Nginx x-forwarded-prefix annotation (#​12697 @​nandorKollar)
• [k8s/ingress-nginx] Support auth-tls-secret and auth-tls-verify-client annotations (#​12595 @​gndz07)
• [k8s/ingress-nginx] Support limit-rpm annotation for ingress-nginx (#​12703 @​Ph4rell)
• [k8s/ingress-nginx] Support limit-rps annotation for Ingress NGINX (#​12709 @​amazon7737)
• [k8s/ingress-nginx] Support NGINX buffering annotations (#​12459 @​blasko03)
• [k8s/ingress-nginx] Support NGINX canary annotations (#​12739 @​kevinpollet)
• [k8s/ingress-nginx] Support NGINX custom-headers annotation (#​12414 @​nandorKollar)
• [k8s/ingress-nginx] Support NGINX upstream-vhost annotation (#​12412 @​nandorKollar)
• [k8s/ingress-nginx] Support NGINX whitelist-source-range annotation (#​12423 @​blasko03)
• [k8s/ingress-nginx] Support permanent-redirect and temporal-redirect annotations (#​12561 @​LBF38)
• [k8s/ingress-nginx] Support proxy-next-upstream* annotations (#​12710 @​gndz07)
• [k8s/ingress-nginx] Support server-alias annotation for Ingress NGINX (#​12707 @​amazon7737)
• [k8s/ingress-nginx] Support upstream-keepalive-timeout (#​12708 @​jcob-sikorski)
• [k8s/ingress-nginx] Add support for variable interpolation in auth-signin NGINX annotation (#​12640 @​LBF38)
• [k8s/ingress-nginx] Implement server-snippet and configuration-snippet annotations (#​12715 @​juliens)
• [k8s/ingress-nginx] Add custom-http-errors and default-backend annotations (#​12637 @​juliens)
• [k8s/ingress-nginx] Support auth-tls-pass-certificate-to-upstream annotation (#​12629 @​gndz07)
• [metrics] Support file path for metrics.influxdb2.token option (#​12458 @​barhun)
• [middleware] Add encodedCharacters middleware (#​12555 @​gndz07)
• [middleware] Enable retries based on HTTP response status codes, timeout, and non-idempotent methods (#​12667 @​LBF38)
• [middleware, authentication] Add authSignInURL in forward auth middleware (#​12293 @​kyounghunJang)
• [server] Add global option to disable X-Forwarded-For appending (#​12374 @​lbenguigui)
• [server] Replace Split in loops with more efficient SplitSeq (#​12316 @​boqishan)
• [service] Failover according to response status code (#​12596 @​lbenguigui)
• [tls] Make TLSStore gracefully handle missing secrets (#​12522 @​david-garcia-garcia)
• [webui] Add dashboard name configuration (#​12410 @​gndz07)
• [webui] Web UI dashboard improvements (#​12236 @​gndz07)
• [webui] Details pages UI improvement (#​12377 @​gndz07)
• Use unicode.MaxASCII for clearer ASCII check (#​12741 @​1911860538)

Bug fixes:

• [k8s/ingress-nginx] Add ipAllowListStrategy option for allowlist/whitelist annotations (#​12932 @​mathieuherbert)
• [k8s/ingress-nginx] Fix regressions after refacto of the ingress-nginx provider (#​13086 @​juliens)
• [k8s/ingress-nginx] Fix typo in default CORS allowed headers (#​13088 @​mliang2)
• [docker, ecs] Migrate to github.com/moby/moby modules (#​12672 @​thaJeztah)
• [logs, metrics, tracing] Bump go.opentelemetry.io/otel (#​13100 @​juliens)
• [k8s/crd] Remove cross-provider sanitization for Kubernetes service loading (#​13087 @​rtribotte)
• [docker, ecs] Migrate to github.com/moby/moby modules (#​13053 @​mmatur)
• [k8s/ingress-nginx] Fix SSL redirect behavior for ingress-nginx provider (#​13028 @​gndz07)
• [k8s/ingress-nginx] Do not require a port for ExternalName services (#​13033 @​kevinpollet)
• [k8s, k8s/ingress-nginx] Add regression test for ingress default backend without rules (#​13066

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[devex-sa]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: test/integration/suite/go.sum

Command failed: go get -t ./...
go: errors parsing go.mod:
/tmp/renovate/repos/github/dfds/infrastructure-modules/test/integration/suite/go.mod:3: invalid go version '1.26.0': must match format 1.23

[DFDS-Snyk]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[devex-sa]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[avnes]

on-hold due to:

go: go.dfds.cloud/infrastructure-modules/test/integration/suite tested by
	go.dfds.cloud/infrastructure-modules/test/integration/suite.test imports
	github.com/traefik/traefik/v3/pkg/config/dynamic imports
	github.com/traefik/traefik/dynamic/ext: github.com/traefik/traefik/dynamic/ext@v0.0.0-00010101000000-000000000000: invalid version: unknown revision 000000000000