v3.2.0-rc2

Important: Please read the migration guide.

Enhancements:

• [k8s,k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.2.0 (#11167 by rtribotte)

Bug fixes:

• [k8s,k8s/gatewayapi] Support http and https appProtocol for Kubernetes Service (#11176 by WillDaSilva)
• [k8s,k8s/gatewayapi] Avoid updating Accepted status for routes matching no Gateways (#11170 by rtribotte)
• [k8s,k8s/gatewayapi] Do not update gateway status when not selected by a gateway class (#11169 by kevinpollet)

Documentation:

• Detail CRD update with v3.2 in the migration guide (#11164 by mloiseleur)

Misc:

• Merge branch v3.1 into v3.2 (#11181 by kevinpollet)

v3.1.6

Bug fixes:

• [middleware] Reuse compression writers (#11168 by michelheusschen)
• [middleware] Use correct default weight in Accept-Encoding (#11084 by michelheusschen)
• [plugins] Close wasm middleware to prevent memory leak (#11151 by ttys3)

Misc:

• Merge branch v2.11 into v3.1 (#11179 by kevinpollet)
• Merge branch v2.11 into v3.1 (#11174 by mmatur)

v2.11.12

Bug fixes:

• [middleware] Bump github.com/klauspost/compress to dbd6c381492a (#11162 by kevinpollet)
• [webui] Upgrade to node 22.9 and yarn lock to fix vulnerabilities (#11173 by kevinpollet)
• [webui] Adopt a layout for the large amount of entrypoint port numbers (#11157 by framebassman)

Documentation:

• [accesslogs] Clarify that only header fields may be redacted in access-logs (#11139 by mattbnz)
• Update business callout (#11172 by tomatokoolaid)

v3.2.0-rc1

Important: Please read the migration guide.

Enhancements:

• [acme] Remove same email requirement for certresolvers (#11019 by Emrio)
• [acme] Add support for custom CA certificates by certificate resolver (#10816 by ldez)
• [acme] Add 30 day certificatesDuration step (#10970 by luker983)
• [docker] Support HTTP BasicAuth for docker and swarm endpoint (#10776 by 985492783)
• [k8s,k8s/gatewayapi] Add supported features to the Gateway API GatewayClass status (#11056 by rtribotte)
• [k8s,k8s/gatewayapi] Update sigs.k8s.io/gateway-api to v1.2.0-rc1 (#11124 by rtribotte)
• [k8s,k8s/gatewayapi] Add support for backend protocol selection in HTTP and GRPC routes (#11051 by rtribotte)
• [k8s,k8s/gatewayapi] Improve Kubernetes GatewayAPI TCPRoute and TLSRoute support (#11042 by rtribotte)
• [k8s,k8s/gatewayapi] Support HTTPRoute destination port matching (#11134 by kevinpollet)
• [k8s,k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.2.0-rc2 (#11131 by kevinpollet)
• [k8s,k8s/gatewayapi] Add support for Gateway API BackendTLSPolicies (#11009 by rtribotte)
• [k8s,k8s/gatewayapi] Support NativeLB option in GatewayAPI provider (#11147 by rtribotte)
• [k8s,k8s/gatewayapi] Support ResponseHeaderModifier filter (#10987 by kevinpollet)
• [k8s,k8s/gatewayapi] Support GRPC routes (#10975 by kevinpollet)
• [metrics,otel] Allow setting service.name for OTLP metrics (#10917 by cmartell-at-ocp)
• [middleware,accesslogs] Record trace id and EntryPoint span id into access log (#10921 by weijiany)
• [middleware,authentication] Support LogUserHeader with forwardAuth middleware (#10833 by GaleHuang)
• [middleware] Add encodings option to the compression middleware (#10943 by wollomatic)
• [middleware] Add support for ipv6 subnet in ipStrategy (#9747 by michal-kralik)
• [nomad] Support for watching instead of polling Nomad (#10997 by deverton-godaddy)
• [server,performance] Introduce a fast proxy mode to improve HTTP/1.1 performances with backends (#11122 by kevinpollet)
• [server] Configurable max request header size (#10995 by lucasrod16)
• [service] Add mirrorBody option to HTTP mirroring (#11032 by MatteoPaier)

v3.1.5

Bug fixes:

• [k8s/ingress,k8s] Disable IngressClass lookup when disableClusterScopeResources is enabled (#11111 by jnoordsij)
• [server] Rework condition to not log on timeout (#11132 by rtribotte)

Misc:

• Merge branch v2.11 into v3.1 (#11149 by kevinpollet)
• Merge branch v2.11 into v3.1 (#11142 by rtribotte)

v2.11.11

Bug fixes:

• [acme] Ensure defaultGeneratedCert.main as Subject's CN (#10581 by Lamatte)
• [middleware,authentication] Clean connection headers for forward auth request only (#11095 by rtribotte)
• [middleware] Bump github.com/klauspost/compress to 8e14b1b5a913 (#11141 by kevinpollet)
• [server] Rework condition to not log on timeout (#11133 by rtribotte)
• [webui] Remove unused boot files from webui (#11109 by michelheusschen)

Documentation:

• [accesslogs] Specify default format value for access log (#11130 by darkweaver87)
• [api] Update API documentation to mention pagination (#11115 by lyrandy)

v3.1.4

Bug fixes:

• [metrics] Guess Datadog socket type when prefix is unix (#11102 by kevinpollet)

Documentation:

• Mention v3 in readme (#11082 by kabaluyot)

Misc:

• Merge branch v2.11 into v3.1 (#11107 by rtribotte)

v2.11.10

Bug fixes:

• [http3] Bump github.com/quic-go/quic-go to v0.47.0 (#11104 by rtribotte)
• [server] Check if ACME certificate resolver is not nil (#11103 by kevinpollet)

v3.1.3

CVE: CVE-2024-45410 (Advisory GHSA-62c8-mh53-4cqv)

Bug fixes:

• [k8s/ingress,rules,k8s] Allow configuring rule syntax with Kubernetes Ingress annotation (#10985 by rtribotte)
• [k8s/ingress] Re-allow empty configuration for Kubernetes Ingress provider (#11008 by rtribotte)
• [middleware,metrics] Wrap capture for services used by pieces of middleware (#11058 by rtribotte)
• [plugins] Removes goexport dependency and adds _initialize (#11088 by juliens)

Documentation:

• [k8s/crd,k8s] Remove mentions about APIVersion traefik.io/v1 (#11020 by rtribotte)
• [k8s] Update quick-start-with-kubernetes.md to include required permissions (#11010 by eastmane)
• [metrics] Mention missing metrics removal in the migration guide (#10982 by rtribotte)
• [tracing] Fix tracing documentation (#11067 by mmatur)
• [tracing] OTLP doc + potential panic (#11052 by mmatur)

Misc:

• Merge v2.11 into v3.1 (#11092 by kevinpollet)
• Merge v2.11 into v3.1 (#11065 by mmatur)
• Merge v2.11 into v3.1 (#11044 by rtribotte)

v2.11.9

CVE: CVE-2024-45410 (Advisory GHSA-62c8-mh53-4cqv)

Bug fixes:

• [acme] Update go-acme/lego to v4.18.0 (#11060 by ldez)
• [acme] Allow handling ACME challenges with custom routers (#10981 by rtribotte)
• [logs,middleware] Make the keys of the accessLog.fields.names map case-insensitive (#11040 by SpecLad)
• [logs,middleware] Ensure proper logs for aborted streaming responses (#10819 by hood)
• [middleware,server] Cleanup Connection headers before passing the middleware chain (#11077 by kevinpollet)
• [plugins] Upgrade paerser to v0.2.1 (#11048 by mmatur)
• [server,tcp] Prevent error logging when TCP WRR pool is empty (#10989 by kevinpollet)
• [webui] Upgrade webui dependencies (#11031 by mloiseleur)

Documentation:

• [acme] Fix typo in multiple DNS challenge provider warning (#11001 by tired-engineer)
• [k8s] Update k8s quickstart permissions (#11049 by mmatur)
• [metrics] Remove documentation for unimplemented service retries metric (#10983 by rtribotte)
• [middleware] Unify tab titles (#11072 by jsoref)
• Give valid examples for exposing dashboard with default Helm values (#11015 by holysoles)