traefik

Update docker.io/traefik Docker tag to v3.7.16

No problems whatsoever deploying to Proxmox VE K3s Kubernetes cluster via Helm Chart and Flux V2 reconciliation in a GitOps approach with dependency update facilitated by Mend's Renovate Bot.

Package	Update	Change
docker.io/traefik (source)	patch	`v3.7.14` → `v3.7.16`

Release Notes

traefik/traefik (docker.io/traefik)

`v3.7.16`

Compare Source

All Commits

Bug fixes:

[authentication, service, k8s/ingress-nginx] Support NTLM and Kerberos in ForwardAuth and ingress-nginx auth-url (#14091 @juliens)
[authentication, service] Support NTLM and Kerberos authentication in ForwardAuth (#14084 @juliens)
[k8s/gatewayapi] Fix Gateway API conformance suite setup with the containerd image store (#14089 @Neffi42)

Documentation:

[k8s/ingress-nginx] Document that rewrite is supported in configuration-snippet (#14070 @bingtang9)

`v3.7.15`

Compare Source

All Commits

Bug fixes:

[server] Reject CONNECT requests regardless of HTTP version (#14031 @juliens)
[server] Reject CONNECT method before reaching the muxer (#14050 @juliens)
[k8s/crd] Allow observability metadata on child routers (#14018 @bunnysayzz)
[k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.6.3 (#14017 @rtribotte)
[k8s/gatewayapi] Default HTTPRoute backend scheme to HTTP when no appProtocol (#13935 @Tyagiquamar)
[k8s/ingress-nginx] Apply auth-tls client authentication to the whole host (#14057 @juliens)
[k8s/ingress-nginx] Fix cross-namespace check on shared auth-tls-secret TLS options (#14066 @juliens)
[fastproxy] Add a non-regression test for CR/LF in FastProxy request headers (#13642 @mturac)
[fastproxy] Fix concurrent buffer reads on upgraded connections (#14023 @juliens)
Bump golang.org/x/net to v0.60.0 (#14048 @kevinpollet)

Documentation:

[security] Fix typo in the Request Path page (#14036 @SethFalco)
[k8s/crd] Fix broken Kubernetes CRD definitions links in CRD reference pages (#14047 @SatvikMishra08)
[k8s] Document the safeNaming impact on cross-provider references (#13768 @lazerg)
[k8s/gatewayapi] Fix broken links in the Gateway API routing page (#14072 @Neffi42)
Fix broken anchor links to Restrict the Scope of Service Discovery (#14056 @SatvikMishra08)
Add the documentation style guide to the Contributing section (#14061 @rachana5)
Remove redundant period in README (#14068 @mxmrnn)

Update ghcr.io/paperless-ngx/paperless-ngx Docker tag to v3.3.4

No problems upgrading the Docker container with a Docker compose yaml file within Portainer and by means of Portainer DevOps resp. GitOps with dependency update facilitated by Mend's Renovate Bot. Package Update Change ghcr.io/paperless-ngx/paperless-ngx patch 3.3.3 → 3.3.4 Release Notes

Update ghcr.io/goauthentik/server Docker tag to v2026.8.5

No problems upgrading the Docker container with a Docker compose yaml file by means of Watchtower DevOps resp. GitOps with dependency update facilitated by Mend's Renovate Bot. Package Update Change ghcr.io/goauthentik/server (source) patch 2026.8.4 → 2026.8.5

Update immich monorepo to v3.3.5

No problems upgrading the Docker containers with a Docker compose yaml file by means of Watchtower DevOps resp. GitOps with dependency update facilitated by Mend's Renovate Bot. Package Update Change ghcr.io/immich-app/immich-machine-learning patch v3.3.4 → v3.3.5 ghcr.io/immich-app/

Update Helm release traefik to v42.1.3

No problems whatsoever deploying to Proxmox VE K3s Kubernetes cluster Helm Chart via Flux V2 reconciliation in a GitOps approach with dependency update facilitated by Mend's Renovate Bot. Package Update Change traefik (source) minor 42.0.0 → 42.1.3 Release Notes traefik/traefik-helm-chart (traefik) v42.