Traefik v3.7.6 has been released, focusing on bug fixes for production stability. This patch version addresses several issues across Kubernetes integrations, ACME certificate management, and authentication middleware.
Key changes in this release:
- ACME logs: Bump
github.com/go-acme/lego/v5in two commits to improve certificate retrieval and logging (#13154, #13359 by @ldez and @juliens). - Kubernetes Ingress-NGINX: Fixed
ssl-passthroughstatus updates (#13212 by @nickmnt). Also correctedforce-ssl-redirectrouting for upstream TLS termination (#13386 by @carloslima). Configured retry according tobufferingconfiguration (#13039 by @rtribotte). - Kubernetes Gateway API: Added missing Gateway API features in conformance tests (#13356 by @AnatoleLucet). Avoided service name collisions (#13367 by @rtribotte). Ignored other gateways'
parentRefsand updated route parent statuses only for managed gateways (#13397 by @rtribotte). - General Kubernetes: Detected EndpointSlice condition changes (#13405 by @kevinpollet). Indexed EndpointSlices by service name (#13395 by @kevinpollet). Sorted endpointslices to keep backend IPs consistent across rebuilds (#13406 by @kevinpollet).
- KV store: Bumped
kvtools/redisto v1.2.1 (#13403 by @ldez). - Middleware & authentication: Fixed
x-forwarded-portheader in forward-auth (#13344 by @juliens).
These fixes ensure smoother operation for Kubernetes users with improved route handling and endpoint stability. ACME users benefit from updated dependencies, while forward-auth users get correct port forwarding. Upgrade to v3.7.6 is recommended for all deployments.
Source: https://github.com/traefik/traefik/releases/tag/v3.7.6