Update docker.io/traefik Docker tag to v3.7.14

v3.7.14

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v5 to v5.5.1 (#​13929 @​ldez)
• [acme] Bump github.com/go-acme/lego/v5 to v5.5.2 (#​13952 @​ldez)
• [acme] Close the newly created ACME storage file on Windows (#​13860 @​datrixlab)
• [docker] Bump github.com/docker/cli to v29.8.1 (#​13934 @​kevinpollet)
• [fastproxy] Isolate NTLM and Negotiate backend connections in FastProxy (#​13914 @​kevinpollet)
• [k8s/gatewayapi] Allow configuring gateways (#​13819 @​kevinpollet)
• [k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.6.2 (#​13984 @​kevinpollet)
• [k8s/gatewayapi] Do not create the Gateway API routers a previous one shadows (#​13946 @​rtribotte)
• [k8s/gatewayapi] Do not let TLSRoute routers shadow TCPRoute routers (#​13953 @​rtribotte)
• [k8s/gatewayapi] Fix HTTP/GRPC routes conflict (#​13421 @​AnatoleLucet)
• [k8s/gatewayapi] Fix TLSRoute router name collision across listeners sharing an entry point (#​13959 @​rtribotte)
• [k8s/gatewayapi] Report the BackendTLSPolicy ancestor in the namespace of its Gateway (#​13964 @​rtribotte)
• [k8s/gatewayapi] Stable sort Gateways to keep the TLS certificate order stable (#​13911 @​rl-io)
• [k8s/ingress-nginx] Build the ssl-passthrough HTTP route like any other ingress (#​13915 @​rtribotte)
• [k8s/ingress-nginx] Do not normalize resource names in the ingress-nginx provider (#​13922 @​kevinpollet)
• [k8s/ingress-nginx] Fix the ingress-nginx cross-links between the routing and provider docs (#​13925 @​simpleqt)
• [k8s/ingress-nginx] Make trailing capture group optional in ImplementationSpecific paths (#​13455 @​mmatur)
• [k8s/ingress-nginx] Remove Authorization header for basic and digest auth (#​13631 @​josmo)
• [k8s/ingress-nginx] Set the Ssl-Client-* request headers on the Ingress-NGINX HTTP router (#​13912 @​rtribotte)
• [k8s/ingress-nginx] Support wildcard origins in cors-allow-origin for the ingress-nginx provider (#​13726 @​kimsehyoung)
• [logs, middleware, k8s/crd] Expose IngressRoute metadata in access logs (#​12985 @​mmatur)
• [middleware] Avoid deprecated table.maxn in the rate limiter Lua script (#​13825 @​lazerg)
• [otel] Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric to v1.46.0 (#​13933 @​kevinpollet)
• [otel] Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace to v1.46.0 (#​13932 @​kevinpollet)
• [otel] Bump otlploggrpc and otlploghttp to v0.22.0 (#​13931 @​kevinpollet)
• [rules] Ignore negated matchers when parsing rule domains (#​13863 @​rtribotte)
• [server] Bump golang.org/x/crypto to v0.57.0 (#​13930 @​kevinpollet)
• [server] Silence encoded characters warning when some are disallowed (#​13470 @​Adel-Ayoub)
• [service] Dedicate a sticky transport per ServersTransport (#​13838 @​sdelicata)
• [service] Fix the second server selection bias in the P2C load balancer (#​13644 @​lazerg)
• [service] Isolate preauthenticated NTLM and Kerberos backend connections (#​13902 @​kevinpollet)
• [udp] Copy UDP datagrams into right-sized buffers before queuing (#​13941 @​rtribotte)
• [webui] Bump react-router to v7 and vite to v8 (#​13794 @​gndz07)
• Fix build with GOPROXY=direct (#​12724 @​mehrdadbn9)

Documentation:

• [accesslogs] Clarify access log buffering behavior (#​13510 @​amazon7737)
• [accesslogs] Clarify that USR1 only reopens the access log file (#​13955 @​rtribotte)
• [k8s] Clarify nativeLB load balancing behavior in Kubernetes reference docs (#​13358 @​zarko-a)
• [security] Document the coordinated disclosure embargo for security reports (#​13982 @​emilevauge)
• [server] Fix misleading trailer comments in header strategy handlers (#​13938 @​AleksaMCode)
• [tcp] Fix 'allows to configure' grammar in TCP ServersTransport (#​13894 @​fng713)
• Fix 'allow to match' grammar in TCP HostSNI rules (#​13895 @​fng713)
• Fix case-sensitive option anchors (#​13924 @​simpleqt)
• Fix the end anchor in the single-test example (#​13898 @​amazon7737)