Releases: traefik/hub
v3.19.0-ea.5
Features
- Traefik Hub API Management now supports LDAP (Lightweight Directory Access Protocol) authentication for both API Portal and API access
- Added support for loading plugins from Artifactory repositories configured as VCS mirrors (GitHub, Bitbucket, etc.).
Improvements
- Bring back support for keyPrefix in OIDC middleware
- Added support for Numerical functions in MCP gateway policy expression language
- Add support for multiple JWKS providers with concurrent refresh and resilient error handling
- Upgrade Traefik proxy to v3.6.0-rc1
Bug fixes
- Fixed a panic that occurs when the gateway stops due to a timeout while waiting for a graceful shutdown.
Compatibility Matrix
This release comes with the following components:
| Component | Version |
|---|---|
| Traefik Hub | v3.19.0-ea.5 |
| Helm Chart | v37.2.0 |
| Traefik Proxy | v3.6.0-rc1 |
| Coraza WAF | v3.3.3 |
| OWASP CRS | v4.14.0 |
| Static Analyzer | v1.5.0 |
| Kubernetes Gateway API | v1.3.0 |
v3.19.0-ea.4
Features
- Traefik Hub API Management now supports LDAP (Lightweight Directory Access Protocol) authentication for both API Portal and API access
- Added support for loading plugins from Artifactory repositories configured as VCS mirrors (GitHub, Bitbucket, etc.).
Improvements
- Bring back support for keyPrefix in OIDC middleware
- Added support for Numerical functions in MCP gateway policy expression language
- Add support for multiple JWKS providers with concurrent refresh and resilient error handling
Bug fixes
- Fixed a panic that occurs when the gateway stops due to a timeout while waiting for a graceful shutdown.
Compatibility Matrix
This release comes with the following components:
| Component | Version |
|---|---|
| Traefik Hub | v3.19.0-ea.4 |
| Helm Chart | v37.1.2 |
| Traefik Proxy | v3.5.3-0.20250925092156-6df82676aaf8 |
| Coraza WAF | v3.3.3 |
| OWASP CRS | v4.14.0 |
| Static Analyzer | v1.5.0 |
| Kubernetes Gateway API | v1.3.0 |
v3.19.0-ea.3
Improvements
- Introduced a new separator in the Content Guard middleware that allows Presidio to detect multiple people instead of a single person
Bug Fixes
- Fixed a panic that occurs when the gateway stops due to a timeout while waiting for a graceful shutdown.
Compatibility Matrix
This release comes with the following components:
| Component | Version |
|---|---|
| Traefik Hub | v3.19.0-ea.2 |
| Helm Chart | v37.1.2 |
| Traefik Proxy | v3.5.3 |
| Coraza WAF | v3.3.3 |
| OWASP CRS | v4.14.0 |
| Static Analyzer | v1.5.0 |
| Kubernetes Gateway API | v1.3.0 |
v3.19.0-ea.2
Improvements
- introduces structured error responses following the JSON-RPC 2.0 specification in the MCP Middleware
Compatibility Matrix
This release comes with the following components:
| Component | Version |
|---|---|
| Traefik Hub | v3.19.0-ea.2 |
| Helm Chart | v37.1.2 |
| Traefik Proxy | v3.5.3 |
| Coraza WAF | v3.3.3 |
| OWASP CRS | v4.14.0 |
| Static Analyzer | v1.5.0 |
| Kubernetes Gateway API | v1.3.0 |
v3.19.0-ea.11
Bug Fixes
- Fixed multiple Portal API issue including returning a 404 instead of 500 when Hub-User-Id is missing, correcting invalid application names in OpenAPI examples to valid DNS labels, and resolving an API key deletion error by avoiding request bodies on DELETE endpoints to ensure compatibility with the dev portal UI.
Compatibility Matrix
This release comes with the following components:
| Component | Version |
|---|---|
| Traefik Hub | v3.19.0-ea.11 |
| Helm Chart | v37.4.0 |
| Traefik Proxy | v3.6.2 |
| Coraza WAF | v3.3.3 |
| OWASP CRS | v4.14.0 |
| Static Analyzer | v1.5.0 |
| Kubernetes Gateway API | v1.4.0 |
v3.19.0-ea.10
Improvements
- Added an OpenAPI specification for the portal API.
Bug Fixes
- Fixed an issue in the dev portal OpenAPI spec where the required APIPlanReference title was missing and references were incorrectly removed during spec bundling.
Compatibility Matrix
This release comes with the following components:
| Component | Version |
|---|---|
| Traefik Hub | v3.19.0-ea.10 |
| Helm Chart | v37.4.0 |
| Traefik Proxy | v3.6.2 |
| Coraza WAF | v3.3.3 |
| OWASP CRS | v4.14.0 |
| Static Analyzer | v1.5.0 |
| Kubernetes Gateway API | v1.4.0 |
v3.19.0-ea.1
Features
-
MCP Gateway - Traefik Hub now includes MCP Gateway, a dedicated gateway for securing and governing Model Context Protocol (MCP) servers. The MCP Gateway acts as an OAuth-compliant proxy that enables organizations to centrally manage access to MCP servers, tools, and resources with Task-Based Access Control (TBAC)—a new authorization paradigm designed specifically for AI agents.
-
LDAP Middleware - Added a new middleware. (
hubldap) which provides LDAP authentication for the API Portal. -
Responses API Middleware -Added a new middleware that provides support for the OpenAI Responses API endpoint. The Responses API is the successor to the OpenAI Chat Completions endpoint
Improvement
- Introduce an intermediate http.Header in the responseRecorder to prevent duplicate headers in the response writer of the LLM Guard middleware
Compatibility Matrix
This release comes with the following components:
| Component | Version |
|---|---|
| Traefik Hub | v3.19.0-ea.1 |
| Helm Chart | v37.1.2 |
| Traefik Proxy | v3.5.3 |
| Coraza WAF | v3.3.3 |
| OWASP CRS | v4.14.0 |
| Static Analyzer | v1.5.0 |
| Kubernetes Gateway API | v1.3.0 |
v3.18.4
Improvements
- adds support for PKCE in OIDC middleware
- Added support for sending HTTPRoute resources to the topology service.
- Improved Kubernetes informer efficiency by adding per-resource namespace filtering, allowing each resource type to watch only the namespaces it needs instead of sharing a global namespace list, reducing API server load, memory usage, and unnecessary resources in Hub.
Bug Fixes
- Fixed an issue in Hub’s metrics middleware where requests were incorrectly terminated with a 200 response when no request/response capture middleware was configured, ensuring metrics are skipped correctly when disabled or when internal service metrics are not enabled.
Compatibility Matrix
This release comes with the following components:
| Component | Version |
|---|---|
| Traefik Hub | v3.18.4 |
| Helm Chart | v38.0.2 |
| Traefik Proxy | v3.5.3-0.20250916141607-fed86bd816be |
| Coraza WAF | v3.3.3 |
| OWASP CRS | v4.14.0 |
| Static Analyzer | v1.5.0 |
| Kubernetes Gateway API | v1.3.0 |
v3.18.3
Improvements
- Updated the hub provider to populate the Claim fields of the a Managed Subscription in the plan middleware
Compatibility Matrix
This release comes with the following components:
| Component | Version |
|---|---|
| Traefik Hub | v3.18.3 |
| Helm Chart | v38.0.2 |
| Traefik Proxy | v3.5.3-0.20250916141607-fed86bd816be |
| Coraza WAF | v3.3.3 |
| OWASP CRS | v4.14.0 |
| Static Analyzer | v1.5.0 |
| Kubernetes Gateway API | v1.3.0 |
v3.18.2
Compatibility Matrix
This release comes with the following components:
| Component | Version |
|---|---|
| Traefik Hub | v3.18.2 |
| Helm Chart | v37.1.2 |
| Traefik Proxy | v3.5.3-0.20250916141607-fed86bd816be |
| Coraza WAF | v3.3.3 |
| OWASP CRS | v4.14.0 |
| Static Analyzer | v1.5.0 |
| Kubernetes Gateway API | v1.3.0 |