Traefik v3.7.14 Ships ACME, Docker and Gateway API Bug Fixes

Traefik · 6 Oct 2026 · 2 min read
#traefik

Traefik v3.7.14 is a maintenance release focused on bug fixes rather than new features. The maintainers note that users should read the migration guide before upgrading, since the patch touches several integration surfaces — ACME certificate handling, the Docker provider, FastProxy connection behaviour and the Kubernetes Gateway API provider.

  • [acme] Bumped github.com/go-acme/lego/v5 to v5.5.1 (#13929) and then v5.5.2 (#13952).
  • [acme] Fixed closing the newly created ACME storage file on Windows (#13860), addressing a file-handle leak on that platform.
  • [docker] Bumped github.com/docker/cli to v29.8.1 (#13934).
  • [fastproxy] NTLM and Negotiate backend connections are now isolated (#13914), preventing credential leakage across upstreams.
  • [k8s/gatewayapi] Added support for configuring gateways (#13819) and bumped sigs.k8s.io/gateway-api to v1.6.2 (#13984).
  • [k8s/gatewayapi] Fixed router shadowing: Gateway API routers no longer override a previous one (#13946), and TLSRoute routers no longer shadow TCPRoute routers (#13953).
  • [k8s/gatewayapi] Resolved an HTTP/GRPC route conflict (#13421) and a TLSRoute router name collision across listeners sharing an entry point (#13959).
  • [k8s/gatewayapi] The BackendTLSPolicy ancestor is now reported in the namespace of its Gateway (#13964), and Gateways are stably sorted to keep TLS certificate order stable (#13911).

The FastProxy change matters most for teams terminating authenticated upstream traffic: isolating NTLM and Negotiate connections stops one backend's handshake state from bleeding into another's. The Gateway API fixes are equally relevant to platform engineers running multiple route types on shared listeners, where shadowed or colliding routers previously produced hard-to-diagnose routing failures. The stable Gateway sort also removes certificate-order churn that could trigger unnecessary reloads. For most deployments this is a straightforward patch upgrade, but the migration-guide warning means testing staging first is worthwhile.

Source: https://github.com/traefik/traefik/releases/tag/v3.7.14

Related

auto-curated · source linked above ← all news