v3.18.1

Bug Fixes

• Fixed unexpected mutation of shared OpenAPI spec in portal API
• Fixed an issue in the Microcks provider that blocks initialization and leads to inefficient token management

Compatibility Matrix

This release comes with the following components:

Component	Version
Traefik Hub	v3.18.2
Helm Chart	v37.1.2
Traefik Proxy	v3.5.3-0.20250916141607-fed86bd816be
Coraza WAF	v3.3.3
OWASP CRS	v4.14.0
Static Analyzer	v1.5.0
Kubernetes Gateway API	v1.3.0

v3.18.0-rc.2

Improvements

• Add support for the max_completion_tokens config option in the AI gateway chat completion middleware.
• Add support for named block conditions in the LLM guard middleware to help improve observability

Bug Fixes

• Fix the load of APIAuth and PortalAuth when being compared by hashstructure.

Compatibility Matrix

This release comes with the following components:

Component	Version
Traefik Hub	v3.18.0-rc.2
Helm Chart	v37.1.2
Traefik Proxy	v3.5.3
Coraza WAF	v3.3.3
OWASP CRS	v4.14.0
Static Analyzer	v1.5.0
Kubernetes Gateway API	v1.3.0

v3.18.0-rc.1

Features

• LLaMA Guard Support - Added a new LLM Guard middleware for the AI Gateway which brings flexible content security to any API traffic through external guard services or LLMs. This middleware supports four variants to handle different integration patterns, from generic APIs with custom security services to chat completions with LLM-based guards like Llama Guard.

• Query Middleware - New middleware for URL query parameter manipulation, allowing you to add, modify, or remove query parameters in requests before they reach upstream services.

• APIM Offline Mode - API Management can now operate in offline mode, allowing API definitions and configurations to be managed without requiring continuous connectivity to Traefik Hub platform.

• Force Case Middleware - Transform URL paths and query parameters to specific case formats (lowercase, uppercase, title case) for consistent API routing and backend compatibility.

• Private Plugin Registry - Support for private plugin registries hosted on GitHub and GitLab, enabling teams to use custom middleware plugins from private repositories with secure authentication.

Improvements

• Removed codename from version info
• Updated Traefik Proxy to v3.5.3
• Added gosec for SOC2 compliance

Bug Fixes

• Fixed Traefik Hub static config logging
• Fixed local env license public key
• Fixed e2e test license generation
• Fixed log in conditions parser

Compatibility Matrix

This release comes with the following components:

Component	Version
Traefik Hub	v3.18.0-rc1
Helm Chart	v37.1.1
Traefik Proxy	v3.5.3
Coraza WAF	v3.3.3
OWASP CRS	v4.14.0
Static Analyzer	v1.5.0
Kubernetes Gateway API	v1.2.1

v3.18.0

Features

• LLaMA Guard Support - Added a new LLM Guard middleware for the AI Gateway which brings flexible content security to any API traffic through external guard services or LLMs. This middleware supports four variants to handle different integration patterns, from generic APIs with custom security services to chat completions with LLM-based guards like Llama Guard.

• Query Middleware - New middleware for URL query parameter manipulation, allowing you to add, modify, or remove query parameters in requests before they reach upstream services.

• APIM Offline Mode - API Management can now operate in offline mode, allowing API definitions and configurations to be managed without requiring continuous connectivity to Traefik Hub platform.

• Force Case Middleware - Transform URL paths and query parameters to specific case formats (lowercase, uppercase, title case) for consistent API routing and backend compatibility.

• Private Plugin Registry - Support for private plugin registries hosted on GitHub and GitLab, enabling teams to use custom middleware plugins from private repositories with secure authentication.

• Dev Portal - Feature gate for self-service apps & subscriptions on developer portal U

Improvements

• Bring back support for keyPrefix in OIDC middleware
• Introduced a new separator in the Content Guard middleware that allows Presidio to detect multiple people instead of a single person
• Add support for the max_completion_tokens config option in the AI gateway chat completion middleware.
• Enable AI metrics when tracing is not configured
• Removed codename from version info
• Updated Traefik Proxy to v3.5.3
• Added gosec for SOC2 compliance
• Updated CRDs to v1.21.1
• Updated Docker/Dockerfile to v1.18

Bug Fixes

• Fixed Traefik Hub static config logging
• Fixed local env license public key
• Fixed e2e test license generation
• Fixed log in conditions parser
• Fixed a panic that occurs when the gateway stops due to a timeout while waiting for a graceful shutdown.

Compatibility Matrix

This release comes with the following components:

Component	Version
Traefik Hub	v3.18.0
Helm Chart	v37.2.0
Traefik Proxy	v3.5.3
Coraza WAF	v3.3.3
OWASP CRS	v4.14.0
Static Analyzer	v1.5.0
Kubernetes Gateway API	v1.3.0

v3.17.14

Improvements

• adds support for PKCE in OIDC middleware
• Added support for sending HTTPRoute resources to the topology service.
• Improved Kubernetes informer efficiency by adding per-resource namespace filtering, allowing each resource type to watch only the namespaces it needs instead of sharing a global namespace list, reducing API server load, memory usage, and unnecessary resources in Hub.

Bug Fixes

• Fixed an issue in Hub’s metrics middleware where requests were incorrectly terminated with a 200 response when no request/response capture middleware was configured, ensuring metrics are skipped correctly when disabled or when internal service metrics are not enabled.

Compatibility Matrix

This release comes with the following components:

Component	Version
Traefik Hub	v3.18.4
Helm Chart	v37.2.0
Traefik Proxy	v3.4.5
Coraza WAF	v3.3.3
OWASP CRS	v4.14.0
Static Analyzer	v1.4.0
Kubernetes Gateway API	v1.2.0

v3.17.13

Improvements

• Updated the hub provider to populate the Claim fields of the a Managed Subscription in the plan middleware

Compatibility Matrix

This release comes with the following components:

Component	Version
Traefik Hub	v3.17.13
Helm Chart	v37.2.0
Traefik Proxy	v3.4.5
Coraza WAF	v3.3.3
OWASP CRS	v4.14.0
Static Analyzer	v1.5.0
Kubernetes Gateway API	v1.2.1

v3.17.12

Compatibility Matrix

This release comes with the following components:

Component	Version
Traefik Hub	v3.17.12
Helm Chart	v37.2.0
Traefik Proxy	v3.4.5
Coraza WAF	v3.3.3
OWASP CRS	v4.14.0
Static Analyzer	v1.5.0
Kubernetes Gateway API	v1.2.1

v3.17.11

Bug Fixes

• Fixed an issue in the Microcks provider that blocks initialization and leads to inefficient token management

Compatibility Matrix

This release comes with the following components:

Component	Version
Traefik Hub	v3.17.11
Helm Chart	v37.2.0
Traefik Proxy	v3.4.5
Coraza WAF	v3.3.3
OWASP CRS	v4.14.0
Static Analyzer	v1.5.0
Kubernetes Gateway API	v1.2.1

v3.17.10

Bug Fixes

• Fixed unexpected mutation of shared OpenAPI spec in portal API

Compatibility Matrix

This release comes with the following components:

Component	Version
Traefik Hub	v3.17.10
Helm Chart	v37.2.0
Traefik Proxy	v3.4.5
Coraza WAF	v3.3.3
OWASP CRS	v4.14.0
Static Analyzer	v1.5.0
Kubernetes Gateway API	v1.2.1

v3.17.9

Improvements

• Bring back support for keyPrefix in OIDC middleware
• Introduced a new separator in the Content Guard middleware that allows Presidio to detect multiple people instead of a single person
• Add support for the max_completion_tokens config option in the AI gateway chat completion middleware.
• Enable AI metrics when tracing is not configured

Bug Fixes

• Fixed a panic that occurs when the gateway stops due to a timeout while waiting for a graceful shutdown.

Compatibility Matrix

This release comes with the following components:

Component	Version
Traefik Hub	v3.17.9
Helm Chart	v37.1.2
Traefik Proxy	v3.4.5
Coraza WAF	v3.3.3
OWASP CRS	v4.14.0
Static Analyzer	v1.5.0
Kubernetes Gateway API	v1.2.1