chore(deps): update traefik docker tag to v3.6.6

[renovate]

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
traefik	minor	v3.4.1 → v3.6.6

---

Release Notes

containous/traefik (traefik)

v3.6.6

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.30.1 (#​12432 by ldez)
• [http3] Bump github.com/quic-go/quic-go to v0.58.0 (#​12448 by GreyXor)
• [redis] Fix mutually exclusive verification for Redis (#​12442 by juliens)
• [server] Fix deny encoded characters (#​12454 by rtribotte)

Documentation:

• [k8s/ingress,k8s] Fix Kubernetes Ingress provider documentation (#​12443 by nmengin)
• [k8s/ingress-nginx] Add RBAC documentation for Ingress NGINX provider (#​12445 by nmn3m)
• [k8s] Improve the K8S multi-tenancy security note (#​12444 by nmengin)
• Restore documentation on http.maxHeaderBytes (#​12440 by mloiseleur)
• Fix Menu Item Naming (#​12431 by sheddy-traefik)

Misc:

• Merge branch v2.11 into v3.6 (#​12475 by mmatur)
• Merge branch v2.11 into v3.6 (#​12438 by kevinpollet)

v3.6.6

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.30.1 (#​12432 by ldez)
• [http3] Bump github.com/quic-go/quic-go to v0.58.0 (#​12448 by GreyXor)
• [redis] Fix mutually exclusive verification for Redis (#​12442 by juliens)
• [server] Fix deny encoded characters (#​12454 by rtribotte)

Documentation:

• [k8s/ingress,k8s] Fix Kubernetes Ingress provider documentation (#​12443 by nmengin)
• [k8s/ingress-nginx] Add RBAC documentation for Ingress NGINX provider (#​12445 by nmn3m)
• [k8s] Improve the K8S multi-tenancy security note (#​12444 by nmengin)
• Restore documentation on http.maxHeaderBytes (#​12440 by mloiseleur)
• Fix Menu Item Naming (#​12431 by sheddy-traefik)

Misc:

• Merge branch v2.11 into v3.6 (#​12475 by mmatur)
• Merge branch v2.11 into v3.6 (#​12438 by kevinpollet)

v3.6.5

Compare Source

All Commits

Bug fixes:

• [k8s/ingress-nginx] Fix NGINX sslredirect annotation support (#​12387 by rtribotte)
• [server] Print access logs for rejected requests and warn about new behavior (#​12424 by kevinpollet)

Documentation:

• [k8s/ingress-nginx] Add auth-signin to unsupported nginx annotations list (#​12370 by fibsifan)
• Add a Breaking change note to the changelog (#​12398 by nmengin)
• Fix encodedCharacters entryPoint option documentation (#​12385 by rtribotte)

v3.6.5

Compare Source

All Commits

Bug fixes:

• [k8s/ingress-nginx] Fix NGINX sslredirect annotation support (#​12387 by rtribotte)
• [server] Print access logs for rejected requests and warn about new behavior (#​12424 by kevinpollet)

Documentation:

• [k8s/ingress-nginx] Add auth-signin to unsupported nginx annotations list (#​12370 by fibsifan)
• Add a Breaking change note to the changelog (#​12398 by nmengin)
• Fix encodedCharacters entryPoint option documentation (#​12385 by rtribotte)

v3.6.4

Compare Source

CVE's fixed:

• CVE-2025-66490 (Advisory GHSA-gm3x-23wp-hc2c): Breaking Change please read the migration guide.
• CVE-2025-66491 (Advisory GHSA-7vww-mvcr-x6vj)

Important: Please read the migration guide.

Bug fixes:

• [server] Reject suspicious encoded characters (#​12360 by rtribotte)
• [plugins] Validate plugin module name (#​12291 by kevinpollet)
• [http3] Bump github.com/quic-go/quic-go to v0.57.1 (#​12319 by GreyXor)
• [http3] Bump github.com/quic-go/quic-go to v0.57.0 (#​12308 by GreyXor)
• [server] Bump golang.org/x/crypto to v0.45.0 (#​12296 by kevinpollet)
• [acme] Bump github.com/go-acme/lego/v4 to v4.29.0 (#​12333 by ldez)
• [k8s/ingress-nginx] Fix SSL redirect to match NGINX behavior (#​12361 by mmatur)
• [k8s/ingress-nginx] Fix the service name for ingress-nginx provider (#​12352 by mmatur)
• [k8s/ingress-nginx] Fix nginx.ingress.kubernetes.io/proxy-ssl-verify annotation support (#​12351 by rtribotte)
• [middleware,authentication] Change ForwardAuth error log level from DEBUG to ERROR (#​12324 by murataslan1)

Documentation:

• [api] Fix typo in API dashboard configuration instructions (#​12335 by NAICOLAS)
• [docker] Add documentation for loadbalancer.server.url in Docker and Swarm providers (#​12289 by webash)
• [k8s/gatewayapi] Fix links of Helm chart values reference to providers.kubernetesGateway.enabled (#​12315 by shouhei)
• [k8s/ingress-nginx] Fix default value of ingress-nginx provider in documentation (#​12328 by mloiseleur)
• [k8s/ingress-nginx] NGINX Ingress Controller to Traefik Migration Guide (#​12318 by sheddy-traefik)
• [k8s/ingress-nginx] Improve the configuration options display of the Kubernetes ingress-nginx provider (#​12297 by mloiseleur)
• [k8s/ingress-nginx] Improve ingress-nginx provider documentation (#​12288 by sheddy-traefik)
• [service] Fix loadbalancer doc for highest random weight (#​12283 by ozon2)
• Correctly Format the HTTP Service Documentation (#​12311 by sheddy-traefik)
• Add documentation about checkNewVersion (#​12298 by darkweaver87)

Misc:

• Merge branch v2.11 into v3.6 (#​12364 by kevinpollet)
• Merge branch v2.11 into v3.6 (#​12341 by mmatur)
• Merge branch v2.11 into v3.6 (#​12368 by mmatur)

v3.6.4

Compare Source

CVE's fixed:

• CVE-2025-66490 (Advisory GHSA-gm3x-23wp-hc2c): Breaking Change please read the migration guide.
• CVE-2025-66491 (Advisory GHSA-7vww-mvcr-x6vj)

Important: Please read the migration guide.

Bug fixes:

• [server] Reject suspicious encoded characters (#​12360 by rtribotte)
• [plugins] Validate plugin module name (#​12291 by kevinpollet)
• [http3] Bump github.com/quic-go/quic-go to v0.57.1 (#​12319 by GreyXor)
• [http3] Bump github.com/quic-go/quic-go to v0.57.0 (#​12308 by GreyXor)
• [server] Bump golang.org/x/crypto to v0.45.0 (#​12296 by kevinpollet)
• [acme] Bump github.com/go-acme/lego/v4 to v4.29.0 (#​12333 by ldez)
• [k8s/ingress-nginx] Fix SSL redirect to match NGINX behavior (#​12361 by mmatur)
• [k8s/ingress-nginx] Fix the service name for ingress-nginx provider (#​12352 by mmatur)
• [k8s/ingress-nginx] Fix nginx.ingress.kubernetes.io/proxy-ssl-verify annotation support (#​12351 by rtribotte)
• [middleware,authentication] Change ForwardAuth error log level from DEBUG to ERROR (#​12324 by murataslan1)

Documentation:

• [api] Fix typo in API dashboard configuration instructions (#​12335 by NAICOLAS)
• [docker] Add documentation for loadbalancer.server.url in Docker and Swarm providers (#​12289 by webash)
• [k8s/gatewayapi] Fix links of Helm chart values reference to providers.kubernetesGateway.enabled (#​12315 by shouhei)
• [k8s/ingress-nginx] Fix default value of ingress-nginx provider in documentation (#​12328 by mloiseleur)
• [k8s/ingress-nginx] NGINX Ingress Controller to Traefik Migration Guide (#​12318 by sheddy-traefik)
• [k8s/ingress-nginx] Improve the configuration options display of the Kubernetes ingress-nginx provider (#​12297 by mloiseleur)
• [k8s/ingress-nginx] Improve ingress-nginx provider documentation (#​12288 by sheddy-traefik)
• [service] Fix loadbalancer doc for highest random weight (#​12283 by ozon2)
• Correctly Format the HTTP Service Documentation (#​12311 by sheddy-traefik)
• Add documentation about checkNewVersion (#​12298 by darkweaver87)

Misc:

• Merge branch v2.11 into v3.6 (#​12364 by kevinpollet)
• Merge branch v2.11 into v3.6 (#​12341 by mmatur)
• Merge branch v2.11 into v3.6 (#​12368 by mmatur)

v3.6.2

Compare Source

Important: Please read the migration guide.

Bug fixes:

• [k8s/ingress-nginx] Deprecate Kubernetes Ingress NGINX provider experimental flag (#​12286 by rtribotte)

v3.6.2

Compare Source

Important: Please read the migration guide.

Bug fixes:

• [k8s/ingress-nginx] Deprecate Kubernetes Ingress NGINX provider experimental flag (#​12286 by rtribotte)

v3.6.1

Compare Source

Important: Please read the migration guide.

Bug fixes:

• [docker] Auto-negotiate Docker API Version (#​12256 by felixbuenemann)
• [server] Fix multi-layer routing with models (#​12258 by juliens)
• [udp] Revert "Avoid allocations in readLoop by using sync.Pool" (#​12267 by kevinpollet)
• [webui] Fix blocked navigation on Safari (#​12231 by gndz07)
• [webui] Restore remote Upgrade to Hub button web component (#​12219 by gndz07)

Documentation:

• [k8s] Fix Nginx provider documentation (#​12266 by nmengin)
• [k8s] Fix Gateway API version and the list of features supported (#​12254 by nmengin)

v3.6.1

Compare Source

Important: Please read the migration guide.

Bug fixes:

• [docker] Auto-negotiate Docker API Version (#​12256 by felixbuenemann)
• [server] Fix multi-layer routing with models (#​12258 by juliens)
• [udp] Revert "Avoid allocations in readLoop by using sync.Pool" (#​12267 by kevinpollet)
• [webui] Fix blocked navigation on Safari (#​12231 by gndz07)
• [webui] Restore remote Upgrade to Hub button web component (#​12219 by gndz07)

Documentation:

• [k8s] Fix Nginx provider documentation (#​12266 by nmengin)
• [k8s] Fix Gateway API version and the list of features supported (#​12254 by nmengin)

v3.6.0

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.22.2 (#​11537 by ldez)
• [cli] Bump github.com/traefik/paerser to v0.2.2 (#​11530 by kevinpollet)
• [middleware] Enable the retry middleware in the proxy (#​11536 by kevinpollet)
• [middleware] Retry should send headers on Write (#​11534 by kevinpollet)

v3.3.3 (2025-01-31)

All Commits

Bug fixes:

• [api] Do not create observability model by default (#​11476 by rtribotte)
• [fastproxy] Fix content-length header assertion (#​11498 by kevinpollet)
• [fastproxy] Handle responses without content length header (#​11458 by rtribotte)
• [k8s/crd,k8s] Add missing headerField in Middleware CRD (#​11499 by jspdown)
• [tracing,accesslogs] Bring back TraceID and SpanID fields in access logs (#​11450 by rtribotte)

Misc:

• Merge branch v2.11 into v3.3 (#​11502 by rtribotte)
• Merge branch v2.11 into v3.3 (#​11491 by rtribotte)

v2.11.20 (2025-01-31)

All Commits

Bug fixes:

• [acme] Graceful shutdown for ACME JSON write operation (#​11497 by juliens)

Documentation:

• Change docker-compose to docker compose (#​11496 by khai-pi)

v2.11.19 (2025-01-29)

All Commits

Bug fixes:

• [middleware] Changing log message when client cert is not available to debug (#​11453 by Nelwhix)
• [service] Do not create a logger instance for each proxy (#​11487 by kevinpollet)
• [webui] Fix auto refresh not clearing on component unmount (#​11477 by DoubleREW)

Documentation:

• Remove awesome.traefik.io reference in documentation section (#​11435 by kevinpollet)

v3.3.2 (2025-01-14)

All Commits

Bug fixes:

• [fastproxy] Do not read response body for HEAD requests (#​11442 by kevinpollet)
• [metrics,tracing,accesslogs] Fix observability configuration on EntryPoints (#​11446 by rtribotte)
• [webui] Set content-type when serving webui index (#​11428 by kevinpollet)

Documentation:

• [acme] Fix deprecated dnsChallenge propagation logging and documentation (#​11433 by thomscode)
• [acme] Add missing trailing s to propagation.delayBeforeCheck option (#​11417 by jspiers)

Misc:

• Merge branch v2.11 into v3.3 (#​11419 by kevinpollet)

v3.3.1 (2025-01-07)

All Commits

Bug fixes:

• [websocket,server] Disable http2 connect setting for websocket by default (#​11408 by rtribotte)

v3.2.5 (2025-01-07)

All Commits

Bug fixes:

• [websocket,server] Disable http2 connect setting for websocket by default (#​11408 by rtribotte)

v2.11.18 (2025-01-07)

All Commits

Bug fixes:

• [websocket,server] Disable http2 connect setting for websocket by default (#​11412 by rtribotte)

v3.3.0 (2025-01-06)

All Commits

Enhancements:

• [acme] Add options to control ACME propagation checks (#​11241 by ldez)
• [api] Add support dump API endpoint (#​11328 by mmatur)
• [http] Set Host header in HTTP provider request (#​11237 by nikonhub)
• [k8s/crd,k8s] Make the IngressRoute kind optional (#​11177 by skirtan1)
• [k8s/ingress,sticky-session,k8s/crd,k8s] Support serving endpoints (#​11121 by BZValoche)
• [logs,accesslogs] OpenTelemetry Logs and Access Logs (#​11319 by rtribotte)
• [logs,accesslogs] Add experimental flag for OTLP logs integration (#​11335 by kevinpollet)
• [metrics,tracing,accesslogs] Manage observability at entrypoint and router level (#​11308 by rtribotte)
• [middleware,authentication] Add an option to preserve the ForwardAuth Server Location header (#​11318 by Nelwhix)
• [middleware,authentication] Only calculate basic auth hashes once for concurrent requests (#​11143 by michelheusschen)
• [middleware,authentication] Send request body to authorization server for forward auth (#​11097 by kyo-ke)
• [plugins] Add AbortOnPluginFailure option to abort startup on plugin load failure (#​11228 by bmagic)
• [sticky-session] Configurable path for sticky cookies (#​11166 by IIpragmaII)
• [webui,api] Configurable API & Dashboard base path (#​11250 by rtribotte)

Bug fixes:

• [k8s/ingress,k8s/crd] Fix fenced server status computation (#​11361 by kevinpollet)

Documentation:

• Prepare release v3.3.0-rc2 (#​11362 by rtribotte)
• Prepare Release v3.3.0-rc1 (#​11349 by rtribotte)

Misc:

• Merge branch v3.2 into v3.3 (#​11402 by kevinpollet)
• Merge branch v3.2 into v3.3 (#​11393 by mmatur)
• Merge branch v3.2 into v3.3 (#​11389 by mmatur)
• Merge branch v3.2 into v3.3 (#​11367 by kevinpollet)
• Merge branch v3.2 into master (#​11340 by kevinpollet)
• Merge branch v3.2 into master (#​11293 by kevinpollet)
• Merge branch v3.2 into master (#​11239 by kevinpollet)
• Merge branch v3.2 into master (#​11187 by kevinpollet)

v3.2.4 (2025-01-06)

All Commits

Bug fixes:

• [k8s/gatewayapi] Support empty value for core Kubernetes API group (#​11386 by rtribotte)
• [tcp,k8s/crd] Pass TLS bool from IngressRouteTCP to TCPService (#​11343 by lipmem)
• [tls] Upgrade github.com/spiffe/go-spiffe/v2 to v2.4.0 (#​11385 by mmatur)
• Remove duplicate github.com/coreos/go-systemd dependency (#​11354 by Juneezee)

Documentation:

• [k8s/gatewayapi] Update Gateway API version support to v1.2.1 (#​11357 by kevinpollet)
• Add @​jnoordsij to maintainers (#​11352 by emilevauge)

Misc:

• Merge branch v2.11 into v3.2 (#​11400 by kevinpollet)
• Merge branch v2.11 into v3.2 (#​11392 by rtribotte)
• Merge branch v2.11 into v3.2 (#​11388 by mmatur)
• Merge branch v2.11 into v3.2 (#​11366 by kevinpollet)

v2.11.17 (2025-01-06)

All Commits

Bug fixes:

• [acme] Update go-acme/lego to v4.21.0 (#​11368 by ldez)
• [middleware] Fix typo in basicauth note (#​11397 by tieje)
• [service] Configure ErrorLog in httputil.ReverseProxy (#​11344 by peacewalker122)
• Bump golang.org/x/net to v0.33.0 (#​11365 by kevinpollet)

Documentation:

• [acme] Fix allowACMEByPass TOML example (#​11370 by hannesbraun)
• [k8s/crd] Update copyright for 2025 (#​11383 by kevinpollet)

v3.3.0-rc2 (2024-12-20)

All Commits

Bug fixes:

• [k8s/ingress,k8s/crd] Fix fenced server status computation (#​11361 by kevinpollet)

v3.3.0-rc1 (2024-12-16)

All Commits

Enhancements:

• [acme] Add options to control ACME propagation checks (#​11241 by ldez)
• [api] Add support dump API endpoint (#​11328 by mmatur)
• [http] Set Host header in HTTP provider request (#​11237 by nikonhub)
• [k8s/crd,k8s] Make the IngressRoute kind optional (#​11177 by skirtan1)
• [logs,accesslogs] OpenTelemetry Logs and Access Logs (#​11319 by rtribotte)
• [logs,accesslogs] Add experimental flag for OTLP logs integration (#​11335 by kevinpollet)
• [metrics,tracing,accesslogs] Manage observability at entrypoint and router level (#​11308 by rtribotte)
• [middleware,authentication] Add an option to preserve the ForwardAuth Server Location header (#​11318 by Nelwhix)
• [middleware,authentication] Only calculate basic auth hashes once for concurrent requests (#​11143 by michelheusschen)
• [middleware,authentication] Send request body to authorization server for forward auth (#​11097 by kyo-ke)
• [plugins] Add AbortOnPluginFailure option to abort startup on plugin load failure (#​11228 by bmagic)
• [sticky-session] Configurable path for sticky cookies (#​11166 by IIpragmaII)
• [sticky-session,k8s/ingress,k8s/crd,k8s] Support serving endpoints (#​11121 by BZValoche)
• [webui,api] Configurable API & Dashboard base path (#​11250 by rtribotte)

Misc:

• Merge branch v3.2 into master (#​11340 by kevinpollet)
• Merge branch v3.2 into master (#​11293 by kevinpollet)
• Merge branch v3.2 into master (#​11239 by kevinpollet)
• Merge branch v3.2 into master (#​11187 by kevinpollet)

v3.2.3 (2024-12-16)

All Commits

Documentation:

• Update reference install documentation with current chart default (#​11332 by mloiseleur)

Misc:

• Merge branch v2.11 into v3.2 (#​11346 by kevinpollet)
• Merge branch v2.11 into v3.2 (#​11337 by kevinpollet)

v2.11.16 (2024-12-16)

All Commits

Bug fixes:

• [server] Update golang.org/x dependencies (#​11336 by rtribotte)

v3.2.2 (2024-12-10)

All Commits

Bug fixes:

• [docker,docker/swarm] Rename traefik.docker.* labels for Docker Swarm to traefik.swarm.* (#​11247 by anchal00)
• [k8s/gatewayapi] Update sigs.k8s.io/gateway-api to v1.2.1 (#​11314 by kevinpollet)
• [plugins] Fix WASM settings (#​11321 by juliens)
• [rules] Fix models mechanism for default rule syntax (#​11300 by rtribotte)

Documentation:

• Move callout to the entrypoint page footer (#​11305 by kevinpollet)
• Fix incorrect links in v3 migration sections (#​11297 by kevinpollet)
• New Install Reference Documentation (#​11213 by sheddy-traefik)

v2.11.15 (2024-12-06)

All Commits

Bug fixes:

• [acme] Update go-acme/lego to v4.20.4 (#​11295 by ldez)
• [http3] Update github.com/quic-go/quic-go to v0.48.2 (#​11320 by kevinpollet)

v3.2.1 (2024-11-20)

All Commits

Bug fixes:

• [k8s/ingress,k8s] Fix HostRegexp config for rule syntax v2 (#​11288 by kevinpollet)
• [logs] Change level of peeking first byte error log to DEBUG for Postgres (#​11270 by rtribotte)
• [service,fastproxy] Fix case problem for websocket upgrade (#​11246 by juliens)

Documentation:

• [acme,tls] Document how to use Certificates of cert-manager (#​11053 by mloiseleur)
• [docker/swarm] Add tips about the use of docker in dynamic configuration for swarm provider (#​11207 by webash)
• [middleware] Add Compress middleware to migration guide (#​11229 by logica0419)

Misc:

• Merge branch v2.11 into v3.2 (#​11290 by kevinpollet)
• Merge branch v2.11 into v3.2 (#​11287 by rtribotte)
• Merge branch v2.11 into v3.2 (#​11285 by juliens)
• Merge branch v2.11 into v3.2 (#​11268 by kevinpollet)

v2.11.14 (2024-11-20)

All Commits

Bug fixes:

• [acme] Update go-acme/lego to v4.20.2 (#​11263 by ldez)
• [logs,server] Change level of peeking first byte error log to DEBUG (#​11254 by rtribotte)
• [middleware,server] Drop untrusted X-Forwarded-Prefix header (#​11253 by rtribotte)
• [server] Apply keepalive config to h2c entrypoints (#​11276 by davefu113)
• [service] Fix internal handlers ServiceBuilder composition (#​11281 by juliens)

Documentation:

• [accesslogs] Update access-logs.md, add examples for accesslog.format (#​11275 by bluepuma77)
• Fix the defaultRule CLI examples (#​11282 by kevinpollet)
• Fix spelling, grammar, and rephrase sections for clarity in some documentation pages (#​11280 by AntoineDeveloper)
• Fix absolute link in the migration guide (#​11269 by kevinpollet)
• Add X-Forwarded-Prefix to the migration guide (#​11267 by kevinpollet)
• Fix a small typo in entrypoints documentation (#​11261 by quiode)
• Add a warning about environment variables casing for static configuration (#​11226 by anchal00)
• Improve documentation on dashboard (#​11220 by mloiseleur)

v3.2.0 (2024-10-28)

All Commits

Enhancements:

• [acme] Remove same email requirement for certresolvers (#​11019 by Emrio)
• [acme] Add support for custom CA certificates by certificate resolver (#​10816 by ldez)
• [acme] Add 30 day certificatesDuration step (#​10970 by luker983)
• [docker] Support HTTP BasicAuth for docker and swarm endpoint (#​10776 by 985492783)
• [k8s,k8s/gatewayapi] Add supported features to the Gateway API GatewayClass status (#​11056 by rtribotte)
• [k8s,k8s/gatewayapi] Update sigs.k8s.io/gateway-api to v1.2.0-rc1 (#​11124 by rtribotte)
• [k8s,k8s/gatewayapi] Add support for backend protocol selection in HTTP and GRPC routes (#​11051 by rtribotte)
• [k8s,k8s/gatewayapi] Improve Kubernetes GatewayAPI TCPRoute and TLSRoute support (#​11042 by rtribotte)
• [k8s,k8s/gatewayapi] Support HTTPRoute destination port matching (#​11134 by kevinpollet)
• [k8s,k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.2.0-rc2 (#​11131 by kevinpollet)
• [k8s,k8s/gatewayapi] Add support for Gateway API BackendTLSPolicies (#​11009 by rtribotte)
• [k8s,k8s/gatewayapi] Support NativeLB option in GatewayAPI provider (#​11147 by rtribotte)
• [k8s,k8s/gatewayapi] Support ResponseHeaderModifier filter (#​10987 by kevinpollet)
• [k8s,k8s/gatewayapi] Support GRPC routes (#​10975 by kevinpollet)
• [k8s,k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.2.0 (#​11167 by rtribotte)
• [metrics,otel] Allow setting service.name for OTLP metrics (#​10917 by cmartell-at-ocp)
• [middleware,accesslogs] Record trace id and EntryPoint span id into access log (#​10921 by weijiany)
• [middleware,authentication] Support LogUserHeader with forwardAuth middleware (#​10833 by GaleHuang)
• [middleware] Add encodings option to the compression middleware (#​10943 by wollomatic)
• [middleware] Add support for ipv6 subnet in ipStrategy (#​9747 by michal-kralik)
• [nomad] Support for watching instead of polling Nomad (#​10997 by deverton-godaddy)
• [server,performance] Introduce a fast proxy mode to improve HTTP/1.1 performances with backends (#​11122 by kevinpollet)
• [server] Configurable max request header size (#​10995 by lucasrod16)
• [service] Add mirrorBody option to HTTP mirroring (#​11032 by MatteoPaier)
• [service] Add an option to preserve server path (#​11193 by mmatur)

Bug fixes:

• [k8s,k8s/gatewayapi] Ensuring Gateway API reflected Traefik resource name unicity (#​11222 by rtribotte)
• [k8s,k8s/gatewayapi] Preserve GRPCRoute filters order (#​11199 by kevinpollet)
• [k8s,k8s/gatewayapi] Support http and https appProtocol for Kubernetes Service (#​11176 by WillDaSilva)
• [k8s,k8s/gatewayapi] Avoid updating Accepted status for routes matching no Gateways (#​11170 by rtribotte)
• [k8s,k8s/gatewayapi] Do not update gateway status when not selected by a gateway class (#​11169 by kevinpollet)
• [service] Detect and drop broken conns in the fastproxy pool (#​11212 by kevinpollet)

Documentation:

• [k8s,k8s/gatewayapi] Document nativeLBByDefault annotation on Kubernetes Gateway provider (#​11209 by mloiseleur)
• [k8s/crd,k8s] Detail CRD update with v3.2 in the migration guide (#​11164 by mloiseleur)
• [k8s/gatewayapi] Add missing RBAC in the migration guide (#​11189 by mloiseleur)
• [k8s] Fix instructions for downloading CRDs of Gateway API v1.2 (#​11191 by mloiseleur)
• Prepare release v3.2.0-rc2 (#​11182 by kevinpollet)
• Prepare Release v3.2.0-rc1 (#​11154 by rtribotte)

Misc:

• Merge branch v3.1 into v3.2 (#​11219 by kevinpollet)
• Merge branch v3.1 into v3.2 (#​11181 by kevinpollet)
• Merge branch v3.1 into master (#​11153 by kevinpollet)
• Merge branch v3.1 into master ([#​11110](http

---

Configuration

📅 Schedule: Branch creation - "after 10pm every weekday,every weekend,before 5am every weekday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

---

• Branch has one or more failed status checks