Traefik v3.7.12 is now available, bringing a collection of bug fixes and documentation improvements. Before upgrading, users should review the v3.7.12 migration guide, as some changes may require configuration adjustments.
Several networking improvements address edge cases and performance. The HTTP/3 implementation now properly applies read timeout, idle timeout, and maximum header byte limits, aligning it with other protocols. A new entry point option lets you handle request headers that use aliasing names, which can help avoid conflicts in certain environments. Weighted TCP and UDP services now reject negative weights to prevent misconfiguration. The underlying fasthttp library has been updated to v1.73.0, and the etcd client modules were bumped to v3.5.33.
Kubernetes users will find fixes for the ingress-nginx provider: redirecting www hosts now works with non-numeric ports, and TLS option names no longer collide across namespaces. The file provider now includes the filename in configuration errors, making it easier to locate problematic definitions. Documentation and log message typos in the Kubernetes provider were also corrected.
Documentation updates include a new security threat model and settled security decisions, clarification of ServersTransport behavior for the errors middleware in Kubernetes, an updated redirections block reference in the Kubernetes basics guide, and formatting fixes in the Kubernetes setup guide. The end-of-support dates have been refreshed, and SECURITY.md now simply points to the full security documentation. Jean-Baptiste Doumenjou and Mathieu Lonjaret have been moved to past maintainers, and the v3.7.11 migration guide was corrected.
