Update traefik Docker tag to v3.7.12

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
traefik (source)	minor	v3.4.0 → v3.7.12

---

Release Notes

traefik/traefik (traefik)

v3.7.12

Compare Source

All Commits

Bug fixes:

• [fastproxy] Bump github.com/valyala/fasthttp to v1.73.0 (#​13769 @​mmatur)
• [file] Include the filename in file provider configuration errors (#​13527 @​lazerg)
• [http3] Apply read timeout, idle timeout, and max header bytes for HTTP/3 (#​13717 @​gndz07)
• [k8s] Fix typos in docs and an OCSP log message (#​13722 @​MsfPablo)
• [k8s, k8s/ingress-nginx] Fix redirect www host with a non-numeric port (#​13708 @​mmatur)
• [k8s/ingress-nginx] Fix TLS option name collision across namespaces in the ingress-nginx provider (#​13721 @​gndz07)
• [server] Add an entry point option to handle request headers with aliasing names (#​13720 @​rtribotte)
• [tcp, udp] Reject negative weights in TCP and UDP weighted services (#​13749 @​rtribotte)
• Bump etcd client modules to v3.5.33 (#​13756 @​mmatur)

Documentation:

• [k8s] Update redirections block reference in basic.md (#​13723 @​Larzenegger)
• [k8s] Fix formatting in Kubernetes setup guide (#​13742 @​stefkiourk)
• [security] Document the security threat model and settled security decisions (#​13740 @​emilevauge)
• [service] Clarify ServersTransport behavior for the errors middleware in Kubernetes (#​13531 @​lazerg)
• Fix v3.7.11 migration guide (#​13730 @​gndz07)
• Move Jean-Baptiste Doumenjou and Mathieu Lonjaret to past maintainers (#​13736 @​emilevauge)
• Reduce SECURITY.md to a pointer to the security documentation (#​13732 @​emilevauge)
• Update end of support dates (#​13712 @​nmengin)

v3.7.11

Compare Source

All Commits

Bug fixes:

• [fastproxy] Reject out-of-range status codes from backends when using FastProxy (#​13635 @​gndz07)
• [http3] Bump github.com/quic-go/quic-go to v0.61.0 (#​13688 @​jnoordsij)
• [k8s/crd] Prevent generated name collisions in the Kubernetes CRD provider (#​13656 @​rtribotte)
• [k8s/crd] Add an option to restrict the namespace of the default TLS resources (#​13665 @​rtribotte)
• [k8s/crd] Scope generated Kubernetes Service names to their parent in the CRD provider (#​13668 @​rtribotte)
• [k8s/crd] Name failover generated services after the referenced Kubernetes Service (#​13677 @​rtribotte)
• [k8s/crd] Add safe naming option to avoid collisions for Kubernetes CRD provider (#​13689 @​gndz07)
• [k8s/gatewayapi] Preserve encoded path segments in Gateway API URLRewrite and RequestRedirect (#​13641 @​gndz07)
• [k8s/gatewayapi] Fix Gateway API router rules (#​13645 @​rtribotte)
• [k8s/ingress-nginx] Dedupe client-auth TLS options across ingresses sharing a host for ingress-nginx provider (#​13638 @​gndz07)
• [k8s/ingress-nginx] Apply auth, custom-headers, custom errors and ssl-redirect to ingress default backend (#​13575 @​rtribotte)
• [k8s/ingress-nginx] Honor asDefault and exclude internal entrypoints from default selection for ingress-nginx provider (#​13629 @​gndz07)
• [k8s/ingress] Enforce crossProviderNamespace for Kubernetes Ingress service middleware (#​13670 @​gndz07)
• [middleware, authentication] Bump github.com/containous/go-http-auth to b975dca (#​13636 @​kevinpollet)
• [tls] Add an option to disable the fallback to the default TLS options (#​13639 @​rtribotte)
• Bump golang.org/x dependencies (#​13699 @​mmatur)

Documentation:

• [accesslogs] Clarify OriginStatus and DownstreamStatus in access logs documentation (#​13609 @​rtribotte)
• [api] Fix doubled word in API/dashboard reference docs (#​13663 @​latent-9)
• [docker] Remove :ro from docker.sock (#​12656 @​bluepuma77)
• [k8s/gatewayapi] Clarify v3.7.10 migration guide for Gateway API 1.6.1 (#​13628 @​rtribotte)
• [k8s/gatewayapi] Document the Experimental Channel CRDs requirement of the Kubernetes Gateway provider (#​13634 @​rtribotte)
• [k8s/ingress-nginx] Docs: Update supported server snippet directives (#​13687 @​rtsui-harmonicinc)
• [middleware] Add rejectStatusCode to the ipAllowList middleware configuration example (#​13664 @​amazon7737)
• [middleware] Mark the errors middleware service option as required (#​13684 @​lazerg)
• [tls] Document the TLS options conflict resolution (#​13640 @​rtribotte)
• [tls] Clarify router TLS replaces entrypoint TLS (#​13630 @​sornapudisuresh)
• Document Redis keyspace notifications requirement (#​13691 @​omkar619-dev)
• Remove retired Go Report Card badge (#​13637 @​yardenshoham)
• Restore the systemd socket activation documentation (#​13701 @​lazerg)
• Update version support policy starting with v3.6 (#​13627 @​nmengin)

v3.7.10

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v5 to v5.3.1 (#​13547 @​ldez)
• [middleware, authentication] Fix auth singleflight key collision (#​13572 @​mmatur)
• [k8s/gatewayapi] Avoid router name collisions in Kubernetes Gateway API provider (#​13580 @​gndz07)
• [tracing] Bump github.com/DataDog/dd-trace-go/v2 to 2.8.1 (#​13530 @​kevinpollet)
• Bump golang.org/x/text to v0.40.0 and golang.org/x/net v0.57.0 (#​13574 @​mmatur)
• [k8s/crd] Fix cross-namespace service reference check in Kubernetes CRD provider (#​13573 @​gndz07)
• [middleware] Bump github.com/klauspost/compress to v1.18.7 (#​13587 @​mmatur)
• [k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.6.1 (#​13589 @​rtribotte)

Documentation:

• [k8s/ingress-nginx] Clarify auth-url/rewrite-target interaction on ingress-nginx provider (#​13607 @​gndz07)

v3.7.9

Compare Source

All Commits

Bug fixes:

• [k8s/ingress-nginx] Fix redirect with use-regex in IngressNGINX provider (#​13476 @​AmariahAK)
• [middleware] Disable Zstd support in the gzhttp wrapper (#​13533 @​kevinpollet)
• [server] Defer the CONNECT payload until the backend accepts the tunnel (#​13542 @​sdelicata)
• [server] Discard CONNECT body in forwardauth and reject CONNECT requests with fast proxy (#​13543 @​sdelicata)
• [server] Bump google.golang.org/grpc to v1.82.1 (#​13551 @​piscue)
• [server] Do not add back CONNECT requests to the pool (#​13556 @​kevinpollet)

Documentation:

• [k8s/gatewayapi] Document Gateway API generated service names change in the migration guide (#​13541 @​rtribotte)
• [k8s/ingress-nginx] Fix typo in nginx annotation proxy-buffer-numbers (#​13545 @​fischerman)
• Add a migration note for CONNECT requests (#​13554 @​kevinpollet)

v3.7.8

Compare Source

All Commits

Bug fixes:

• [middleware, k8s/crd] Add missing ErrorRequestHeaders field to CRDs (#​13498 @​kevinpollet)
• [k8s/ingress-nginx] Sanitize rewritten target on ingress-nginx provider (#​13506 @​gndz07)
• [logs] Remove unrelated error from nonexistent cert resolver log (#​13469 @​ArthurHlt)
• [middleware] Fix panic in retry middleware with Websockets (#​13520 @​juliens)

Documentation:

• [k8s] Align certificateRef and indicate ports (#​13473 @​veenoise)
• [rules] Fix syntax notes in routing rule documentation (#​13501 @​stevenlele)
• [k8s/crd] Fix duplicated options table in ServersTransport CRD reference (#​13518 @​rachana5)

v3.7.7

Compare Source

All Commits

Bug fixes:

• [middleware, k8s/ingress-nginx] Add app-root middleware with nginx variable interpolation (#​13398 @​dfeinblatt)
• [rules] Fix consistency between HostSNI() and Host() (#​13460 @​juliens)
• [k8s, k8s/gatewayapi] Fix ExtensionRef filters on backendRefs to resolve against the HTTPRoute namespace (#​13462 @​gndz07)
• [middleware] Fix handle empty unknown-length bodies in mirroring (#​13399 @​amazon7737)
• [k8s/crd] Fix cross-provider ref check for TCP ServersTransport in Kubernetes CRD provider (#​13458 @​gndz07)
• [middleware] Sanitize replaced path in ReplacePathRegex middleware (#​13466 @​kevinpollet)
• [acme] Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 (#​13477 @​rtribotte)
• [otel] Bump go.opentelemetry.io/otel to v1.44.0 (#​13478 @​rtribotte)
• [k8s] Fix panic when endpointslice port value or name is nil (#​13481 @​kevinpollet)

Documentation:

• Fix version in migration guide (#​13434 @​kevinpollet)
• Fix changelog v2.11.51 (#​13430 @​mmatur)
• Add v3.7 to supported version docs (#​13118 @​jnoordsij)
• Fix some function names in comments (#​13443 @​blackflytech)
• Add @​nandorKollar as a current maintainer (#​13451 @​emilevauge)
• Add @​amazon7737 as a current maintainer (#​13450 @​emilevauge)
• [middleware] Clarify buffering middleware defaults (#​13401 @​amazon7737)
• Fix grammar in TLS, TCP service, and routing reference docs (#​13461 @​almightymoon)
• Fix X-Forwarded-Prefix documentation for dashboard redirection (#​13472 @​kevinpollet)

v3.7.6

Compare Source

All Commits

Bug fixes:

• [acme, logs] Bump github.com/go-acme/lego/v5 (#​13154 @​ldez)
• [acme] Bump github.com/go-acme/lego/v5 (#​13359 @​juliens)
• [k8s, k8s/ingress-nginx] Fix ingress-nginx ssl passthrough status updates (#​13212 @​nickmnt)
• [k8s/gatewayapi] Add missing Gateway API features in conformance tests (#​13356 @​AnatoleLucet)
• [k8s/gatewayapi] Avoid collisions for Gateway API services names (#​13367 @​rtribotte)
• [k8s/gatewayapi] Ignore other gateways parentRefs and update route parent statuses only for managed gateways (#​13397 @​rtribotte)
• [k8s/ingress-nginx] Configure retry according to buffering configuration (#​13039 @​rtribotte)
• [k8s/ingress-nginx] Fix force-ssl-redirect routing 418 when TLS is terminated upstream (#​13386 @​carloslima)
• [k8s] Detect EndpointSlice condition changes (#​13405 @​kevinpollet)
• [k8s] Index Kubernetes EndpointSlice by service name (#​13395 @​kevinpollet)
• [k8s] Sort endpointslices to keep backend IPs consistent across rebuilds (#​13406 @​kevinpollet)
• [kv] Bump kvtools/redis to v1.2.1 (#​13403 @​ldez)
• [middleware, authentication] Fix x-forwarded-port in forward-auth (#​13344 @​juliens)
• [middleware, k8s/gatewayapi] Fix Gateway API redirect missing statuses (#​13360 @​AnatoleLucet)
• [middleware, k8s/gatewayapi] Fix Host header not being modified by RequestHeaderModifier (#​12805 @​mihuross)
• [middleware, k8s/gatewayapi] Fix request scheme derivation when Gateway API RequestRedirect omits scheme (#​13347 @​gndz07)
• [middleware] Fix CORS Max-Age set to 0 by default (#​13371 @​AnatoleLucet)
• [middleware] Fix CORS wildcard when allow-credentials is true (#​13368 @​AnatoleLucet)
• [server] Add an option to remove request headers with underscores (#​13262 @​youkoulayley)
• [server] Configurable max request header size (#​13353 @​juliens)
• [tls] Fix nondeterministic TLS certificate selection on shared SAN (#​13348 @​rtribotte)
• [webui] Bump axios to v1.18.0 (#​13380 @​gndz07)
• [websocket] Fix connection upgrades when backend server is using h2c scheme (#​12967 @​stffabi)

Documentation:

• [k8s/crd] Fix broken CRD reference links in IngressRoute page (#​13375 @​s3onghyun)
• [k8s/gatewayapi] Remove experimental note for Gateway API/TLSRoute documentation (#​13392 @​jnoordsij)
• [k8s/ingress-nginx] Add Kubernetes Ingress NGINX to the providers list (#​13372 @​nmengin)
• [k8s] Align Helm chart documented values with chart v41 (#​13366 @​mloiseleur)
• [middleware, authentication, k8s/ingress-nginx] Clarify intentional auth-response-headers gating and absence of stripping incoming X-Forwarded-* headers (#​13342 @​rtribotte)
• [middleware] Clarify entryPoint middleware reference format (#​13364 @​mloiseleur)
• [security] Add HTTP/2 header memory exhaustion security documentation (#​13381 @​emilevauge)
• Adds documentations on maxHeaderBytes (#​13363 @​juliens)
• Fix inaccuracies in reference documentation (#​13304 @​sheddy-traefik)

v3.7.5

Compare Source

All Commits

Bug fixes:

• [k8s/ingress-nginx] Skip ingress when auth-secret resolution fails (#​13323 @​gndz07)
• [k8s/ingress-nginx] Pass endpointslice fencing on ingress-nginx provider (#​13290 @​Learloj)
• [k8s/gatewayapi] Reject cross-provider references with backendRefs.namespace (#​13322 @​youkoulayley)
• [server] Bump to github.com/pires/go-proxyproto v0.12.0 (#​13313 @​timschumi)
• [tls] Fix routers with same host, different tlsoptions on different entryPoint (#​13329 @​juliens)
• [tls] Fix snicheck for routers with no hosts (#​13333 @​rtribotte)

v3.7.4

Compare Source

All Commits

Bug fixes:

• [middleware] Fix redis write timeout option configuration (#​13273 @​bzyy1024)
• [webui] Bump react-router and jsdom (#​13301 @​gndz07)
• [k8s/gatewayapi] Fix BackendTLSPolicy status update (#​13306 @​AnatoleLucet)
• [http3] Bump github.com/quic-go/quic-go to v0.59.1 (#​13300 @​rtribotte)
• [webui] Bump axios to v1.17.0 (#​13299 @​gndz07)
• [tls] Fix snicheck with keepalive (#​13305 @​juliens)

v3.7.3

Compare Source

All Commits

Bug fixes:

• [tls] Compute resolved tlsOptions after applying models (#​13291 @​rtribotte)
• [webui, tcp] Fix TCP router service resolution in dashboard flow diagram (#​13155 @​aliamerj)
• [k8s/ingress-nginx] Trim quotes from proxy_set_header header name (#​13203 @​crisbal)
• [accesslogs] Escape double quotes in quoted log fields (#​13180 @​KaanSimsek)
• [k8s/gatewayapi] Escape exact gRPC method matches (#​13201 @​nickmnt)
• [logs, middleware] Allow query parameters to be dropped from RequestPath in access log (#​13091 @​calinelson)
• [k8s/ingress-nginx] Clear Ssl-Client-* headers when no client certificate is present (#​13260 @​gndz07)
• [k8s/gatewayapi] Bump github.com/moby/spdystream to v0.5.1 (#​13252 @​kevinpollet)
• [file] Improve file provider behavior regarding dangling symlinks (#​12449 @​fh-yuxiao-zeng)
• [server] Bump github.com/bytedance/sonic to v1.15.1 (#​13254 @​kevinpollet)
• [middleware, authentication] Add error on basic auth build if users is empty (#​13195 @​rtribotte)
• [k8s/ingress] Avoid ingress path matcher injection and backport 11d2514 (#​13227 @​rtribotte)
• [server] Move snicheck to ctx instead of simulated routing (#​13214 @​juliens)
• [middleware] Reject requests with different paths after StripPrefix and StripPrefixRegex normalisation (#​13215 @​rtribotte)
• [server] Bump golang.org/x/net to v0.55.0 (#​13251 @​kevinpollet)
• [k8s/gatewayapi] Change default values and expose configuration for Kubernetes client QPS and Burst (#​13277 @​kevinpollet)
• [server] Bump golang.org/x/crypto to v0.52.0 (#​13276 @​rtribotte)

Documentation:

• [k8s] Document new chart behavior on Gateway API (#​13167 @​mloiseleur)
• [file] Replace generated File routing reference page (#​13170 @​sheddy-traefik)
• [k8s/crd] Fix typo in accesslogs field name (#​13177 @​PlayMTL)
• [k8s/ingress-nginx] Surface the Ingress status race condition during NGINX coexistence (#​13205 @​emilevauge)
• Polish grammar in migration guides (#​13174 @​quyentonndbs)
• [middleware] Remove whitespace in HTML tag (#​13160 @​marbon87)
• Add @​LBF38 as a current maintainer (#​13225 @​emilevauge)
• Add ingressClassName to Kubernetes CRD provider migration guide (#​13248 @​kevinpollet)
• [k8s/ingress-nginx] Add nginx.ingress.kubernetes.io/enable-global-auth to the list of supported annotations (#​13219 @​filip2mac)
• [k8s/ingress-nginx] Capitalize NGINX in kubernetesIngressNGINX (#​13236 @​smellems)

v3.7.1

Compare Source

All Commits

Bug fixes:

• [fastproxy] Bump github.com/valyala/fasthttp to v1.73.0 (#​13769 @​mmatur)
• [file] Include the filename in file provider configuration errors (#​13527 @​lazerg)
• [http3] Apply read timeout, idle timeout, and max header bytes for HTTP/3 (#​13717 @​gndz07)
• [k8s] Fix typos in docs and an OCSP log message (#​13722 @​MsfPablo)
• [k8s, k8s/ingress-nginx] Fix redirect www host with a non-numeric port (#​13708 @​mmatur)
• [k8s/ingress-nginx] Fix TLS option name collision across namespaces in the ingress-nginx provider (#​13721 @​gndz07)
• [server] Add an entry point option to handle request headers with aliasing names (#​13720 @​rtribotte)
• [tcp, udp] Reject negative weights in TCP and UDP weighted services (#​13749 @​rtribotte)
• Bump etcd client modules to v3.5.33 (#​13756 @​mmatur)

Documentation:

• [k8s] Update redirections block reference in basic.md (#​13723 @​Larzenegger)
• [k8s] Fix formatting in Kubernetes setup guide (#​13742 @​stefkiourk)
• [security] Document the security threat model and settled security decisions (#​13740 @​emilevauge)
• [service] Clarify ServersTransport behavior for the errors middleware in Kubernetes (#​13531 @​lazerg)
• Fix v3.7.11 migration guide (#​13730 @​gndz07)
• Move Jean-Baptiste Doumenjou and Mathieu Lonjaret to past maintainers (#​13736 @​emilevauge)
• Reduce SECURITY.md to a pointer to the security documentation (#​13732 @​emilevauge)
• Update end of support dates (#​13712 @​nmengin)

v3.7.0

Compare Source

All Commits

Enhancements:

• [k8s/ingress-nginx] Use a metamodel to generate dynamic configuration in ingress-nginx (#​13062 @​juliens)
• [k8s/ingress-nginx] Add limit-connections support (#​13030 @​amazon7737)
• [webui] Display server weight in service detail view (#​12325 @​murataslan1)
• [webui, tls] Add certificates menu and overview (#​12628 @​holomekc)
• [provider] Add providers routing precedence configuration (#​12895 @​juliens)
• [k8s/ingress-nginx] Support NGINX global auth annotation (#​12893 @​foxcool)
• [k8s/ingress-nginx] Add limit-burst-multiplier annotation support (#​12899 @​amazon7737)
• [k8s/ingress-nginx, k8s/ingress, rules] Add wildcard host in Host and HostSNI matchers (#​12884 @​juliens)
• [k8s/gatewayapi] Support multiple certificateRefs on gateway listeners (#​12590 @​mortennordbye)
• [k8s/gatewayapi] Add secret support for BackendTLSPolicy caCertificateRefs (#​12927 @​kevinpollet)
• [accesslogs, k8s/ingress-nginx] Support nginx.ingress.kubernetes.io/enable-access-log annotation (#​12908 @​ris-tlp)
• [accesslogs, k8s/ingress-nginx, k8s/ingress] Add Kubernetes Ingress logs fields (#​12913 @​rtribotte)
• [k8s/knative] Support knative v1.20.0 (#​12441 @​idurgakalyan)
• [k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.5.1 (#​12768 @​mmatur)
• [k8s/ingress-nginx, middleware, authentication] Add support for auth-snippet (#​12778 @​juliens)
• [accesslogs, otel] Allow Stdio access logs alongsige OTLP logging (#​12307 @​Mulgish)
• [acme] Add CertificateTimeout ACME configuration option (#​12278 @​ceko)
• [k8s/ingress-nginx] Support nginx.ingress.kubernetes.io/allowlist-source-range (#​12659 @​ris-tlp)
• [k8s/crd] Add ingressClassName field to the CRDs spec (#​12313 @​kkrypt0nn)
• [k8s/crd] Service failover support in TraefikService CRD (#​12733 @​jspdown)
• [k8s/crd, service] Support cipher suites configuration with ServersTransport (#​11965 @​NEwa-05)
• [k8s/ingress, middleware, k8s/crd, service, k8s/gatewayapi] Services middleware and Gateway API filters on HTTP backends (#​12544 @​juliens)
• [k8s/ingress-nginx] Add nginx.ingress.kubernetes.io/proxy-connect-timeout annotation (#​12572 @​gndz07)
• [k8s/ingress-nginx] Add rewrite-target nginx annotations support (#​12534 @​LBF38)
• [k8s/ingress-nginx] Add support for app-root nginx annotation (#​12576 @​LBF38)
• [k8s/ingress-nginx] Add support for auth-signin annotation (#​12502 @​DesalLama)
• [k8s/ingress-nginx] Add support for from-to-www-redirect NGINX annotation (#​12610 @​LBF38)
• [k8s/ingress-nginx] Add support for proxy-read-timeout and proxy-send-timeout NGINX annotations (#​12630 @​LBF38)
• [k8s/ingress-nginx] Add support for session-cookie-expires nginx annotation (#​12558 @​LBF38)
• [k8s/ingress-nginx] Add support for upstream-hash-by NGINX annotation (#​12749 @​LBF38)
• [k8s/ingress-nginx] Allow entry points to be specified on Nginx Ingresses (#​12727 @​ajacques)
• [k8s/ingress-nginx] Implement proxy-http-version annotation (#​12743 @​KshitijBharde)
• [k8s/ingress-nginx] Nginx x-forwarded-prefix annotation (#​12697 @​nandorKollar)
• [k8s/ingress-nginx] Support auth-tls-secret and auth-tls-verify-client annotations (#​12595 @​gndz07)
• [k8s/ingress-nginx] Support limit-rpm annotation for ingress-nginx (#​12703 @​Ph4rell)
• [k8s/ingress-nginx] Support limit-rps annotation for Ingress NGINX (#​12709 @​amazon7737)
• [k8s/ingress-nginx] Support NGINX buffering annotations (#​12459 @​blasko03)
• [k8s/ingress-nginx] Support NGINX canary annotations (#​12739 @​kevinpollet)
• [k8s/ingress-nginx] Support NGINX custom-headers annotation (#​12414 @​nandorKollar)
• [k8s/ingress-nginx] Support NGINX upstream-vhost annotation (#​12412 @​nandorKollar)
• [k8s/ingress-nginx] Support NGINX whitelist-source-range annotation (#​12423 @​blasko03)
• [k8s/ingress-nginx] Support permanent-redirect and temporal-redirect annotations (#​12561 @​LBF38)
• [k8s/ingress-nginx] Support proxy-next-upstream* annotations (#​12710 @​gndz07)
• [k8s/ingress-nginx] Support server-alias annotation for Ingress NGINX (#​12707 @​amazon7737)
• [k8s/ingress-nginx] Support upstream-keepalive-timeout (#​12708 @​jcob-sikorski)
• [k8s/ingress-nginx] Add support for variable interpolation in auth-signin NGINX annotation (#​12640 @​LBF38)
• [k8s/ingress-nginx] Implement server-snippet and configuration-snippet annotations (#​12715 @​juliens)
• [k8s/ingress-nginx] Add custom-http-errors and default-backend annotations (#​12637 @​juliens)
• [k8s/ingress-nginx] Support auth-tls-pass-certificate-to-upstream annotation (#​12629 @​gndz07)
• [metrics] Support file path for metrics.influxdb2.token option (#​12458 @​barhun)
• [middleware] Add encodedCharacters middleware (#​12555 @​gndz07)
• [middleware] Enable retries based on HTTP response status codes, timeout, and non-idempotent methods (#​12667 @​LBF38)
• [middleware, authentication] Add authSignInURL in forward auth middleware (#​12293 @​kyounghunJang)
• [server] Add global option to disable X-Forwarded-For appending (#​12374 @​lbenguigui)
• [server] Replace Split in loops with more efficient SplitSeq (#​12316 @​boqishan)
• [service] Failover according to response status code (#​12596 @​lbenguigui)
• [tls] Make TLSStore gracefully handle missing secrets (#​12522 @​david-garcia-garcia)
• [webui] Add dashboard name configuration (#​12410 @​gndz07)
• [webui] Web UI dashboard improvements (#​12236 @​gndz07)
• [webui] Details pages UI improvement (#​12377 @​gndz07)
• Use unicode.MaxASCII for clearer ASCII check (#​12741 @​1911860538)

Bug fixes:

• [k8s/ingress-nginx] Add ipAllowListStrategy option for allowlist/whitelist annotations (#​12932 @​mathieuherbert)
• [k8s/ingress-nginx] Fix regressions after refacto of the ingress-nginx provider (#​13086 @​juliens)
• [k8s/ingress-nginx] Fix typo in default CORS allowed headers (#​13088 @​mliang2)
• [docker, ecs] Migrate to github.com/moby/moby modules (#​12672 @​thaJeztah)
• [logs, metrics, tracing] Bump go.opentelemetry.io/otel (#​13100 @​juliens)
• [k8s/crd] Remove cross-provider sanitization for Kubernetes service loading (#​13087 @​rtribotte)
• [docker, ecs] Migrate to github.com/moby/moby modules (#​13053 @​mmatur)
• [k8s/ingress-nginx] Fix SSL redirect behavior for ingress-nginx provider (#​13028 @​gndz07)
• [k8s/ingress-nginx] Do not require a port for ExternalName services (#​13033 @​kevinpollet)
• [k8s, k8s/ingress-nginx] Add regression test for ingress default backend without rules (#​13066 @​mmatur)
• [acme] Bump github.com/go-acme/lego/v4 to v4.35.1 (#​13027 @​ldez)
• [server] Bump github.com/vulcand/oxy to v2.1.0 (#​13046 @​ldez)
• [acme] Bump github.com/go-acme/lego/v4 to v4.35.2 (#​13043 @​ldez)
• [middleware] Add errorRequestHeaders option to Errors middleware (#​13034 @​gndz07)
• [acme] Bump github.com/go-acme/lego/v4 to v4.34.0 (#​12993 @​ldez)
• [docker] Downgrade log level for missing container on inspect (#​12900 @​Otoru)
• [k8s/crd, k8s] Honor allowCrossNamespace with chain middleware CRD (#​12976 @​rtribotte)
• [k8s/ingress-nginx] Avoid 302 redirect when rewrite-target value is not an absolute URL for ingress-nginx provider (#​12977 @​gndz07)
• [k8s/ingress-nginx] Fix custom headers annotation with 503 Service Unavailable (#​12969 @​LBF38)
• [k8s/ingress-nginx] Fix service unavailable on ingress-nginx (#​12996 @​LBF38)
• [k8s/ingress-nginx] Handle duplicate server-alias on ingress-nginx provider (#​13019 [@​gndz07](

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.