alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests Actions Activity

Update Helm release traefik to v38 #2711

Merged
alexlebens merged 1 commits from renovate/traefik-38.x into main 2025-12-20 00:30:38 +00:00
Conversation 0 Commits 1 Files Changed 2 +4 -4
renovate-bot commented 2025-12-19 10:03:16 +00:00
Collaborator
Copy Link

This PR contains the following updates:

Package Update Change Pending
traefik (source) major 37.4.0 -> 38.0.0 38.0.1

Release Notes

traefik/traefik-helm-chart (traefik)

v38.0.0

Compare Source

Upgrades Notes

[!IMPORTANT]
CRDs has to be upgraded before the Chart. See UPGRADING instructions.

There are two breaking changes in this release:

  1. Traefik Proxy v3.6.4+ contains a security fix that is also a breaking change. See upstream documentation for more details.
  2. PR #​1596 align kubernetesIngressNginx provider setting with upstream. There is a before / after example in the PR description and PR #​1587 align labelSelector syntax between providers

[!NOTE]
If you need to restore Traefik behavior of v3.6.3 or inferior, it can be set with values.

Here is an example on websecure entrypoint:

ports:
  websecure:
    http:
      encodedCharacters:
        allowEncodedSlash: true
        allowEncodedBackSlash: true
        allowEncodedNullCharacter: true
        allowEncodedSemicolon: true
        allowEncodedPercent: true
        allowEncodedQuestionMark: true
        allowEncodedHash: true
      sanitizePath: false

This is not recommended, it may expose you to GHSA-gm3x-23wp-hc2c.

💥 BREAKING CHANGES

🚀 Features

🐛 Bug fixes

📦 Others

New Contributors

Full Changelog: https://github.com/traefik/traefik-helm-chart/compare/v37.4.0...v38.0.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | Pending | |---|---|---|---| | [traefik](https://traefik.io/) ([source](https://github.com/traefik/traefik-helm-chart)) | major | `37.4.0` -> `38.0.0` | `38.0.1` | --- ### Release Notes <details> <summary>traefik/traefik-helm-chart (traefik)</summary> ### [`v38.0.0`](https://github.com/traefik/traefik-helm-chart/releases/tag/v38.0.0) [Compare Source](https://github.com/traefik/traefik-helm-chart/compare/v37.4.0...v38.0.0) **Upgrades Notes** > \[!IMPORTANT] > CRDs has to be upgraded before the Chart. See [UPGRADING](https://github.com/traefik/traefik-helm-chart?tab=readme-ov-file#upgrading) instructions. There are two breaking changes in this release: 1. Traefik Proxy v3.6.4+ contains a security fix that is also a breaking change. See [upstream documentation](https://doc.traefik.io/traefik/v3.6/migrate/v3/#v364) for more details. 2. PR [#&#8203;1596](https://github.com/traefik/traefik-helm-chart/pull/1596) align *kubernetesIngressNginx* provider setting with upstream. There is a *before* / *after* example in the PR description and PR [#&#8203;1587](https://github.com/traefik/traefik-helm-chart/pull/1587) align *labelSelector* syntax between providers > \[!NOTE] > If you need to restore Traefik behavior of v3.6.3 or inferior, it can be set with values. > > Here is an example on *websecure* entrypoint: > > ```yaml > ports: > websecure: > http: > encodedCharacters: > allowEncodedSlash: true > allowEncodedBackSlash: true > allowEncodedNullCharacter: true > allowEncodedSemicolon: true > allowEncodedPercent: true > allowEncodedQuestionMark: true > allowEncodedHash: true > sanitizePath: false > ``` > > This is **not** recommended, it may expose you to [GHSA-gm3x-23wp-hc2c](https://github.com/traefik/traefik/security/advisories/GHSA-gm3x-23wp-hc2c). #### :boom: BREAKING CHANGES - fix(providers)!: align labelSelector for kubernetesGateway and knative [#&#8203;1587](https://github.com/traefik/traefik-helm-chart/issues/1587) by [@&#8203;shubhamch71](https://github.com/shubhamch71) - fix(nginx)!: 🐛 align provider settings and provide required rbac [#&#8203;1596](https://github.com/traefik/traefik-helm-chart/issues/1596) by [@&#8203;mloiseleur](https://github.com/mloiseleur) #### :rocket: Features - feat(CRDs): update Traefik Hub to v1.24.1, with required RBACs [#&#8203;1571](https://github.com/traefik/traefik-helm-chart/issues/1571) by [@&#8203;jspdown](https://github.com/jspdown) - feat(ports): enforce schema [#&#8203;1586](https://github.com/traefik/traefik-helm-chart/issues/1586) by [@&#8203;remyj38](https://github.com/remyj38) - feat(CRDs): update Traefik Hub to v1.24.2 [#&#8203;1585](https://github.com/traefik/traefik-helm-chart/issues/1585) by [@&#8203;traefiker](https://github.com/traefiker) - feat(providers): ✨ enforce schema [#&#8203;1595](https://github.com/traefik/traefik-helm-chart/issues/1595) by [@&#8203;mloiseleur](https://github.com/mloiseleur) - feat(security): ✨ 🔒️ add support for request path options of traefik 3.6.4+ [#&#8203;1594](https://github.com/traefik/traefik-helm-chart/issues/1594) by [@&#8203;mloiseleur](https://github.com/mloiseleur) - feat(deps): update traefik docker tag to v3.6.4 [#&#8203;1590](https://github.com/traefik/traefik-helm-chart/issues/1590) by [@&#8203;renovate](https://github.com/renovate)\[bot] - feat(deps): update traefik docker tag to v3.6.5 [#&#8203;1599](https://github.com/traefik/traefik-helm-chart/issues/1599) by [@&#8203;renovate](https://github.com/renovate)\[bot] #### :bug: Bug fixes - fix: update error message for maxUnavailable validation [#&#8203;1591](https://github.com/traefik/traefik-helm-chart/issues/1591) by [@&#8203;lucasra1](https://github.com/lucasra1) - fix(notes): minor typo [#&#8203;1593](https://github.com/traefik/traefik-helm-chart/issues/1593) by [@&#8203;rndmh3ro](https://github.com/rndmh3ro) - fix(pvc): allow empty storageClassName [#&#8203;1579](https://github.com/traefik/traefik-helm-chart/issues/1579) by [@&#8203;fopina](https://github.com/fopina) - fix(providers): ✨ enforce schema for all providers [#&#8203;1601](https://github.com/traefik/traefik-helm-chart/issues/1601) by [@&#8203;mloiseleur](https://github.com/mloiseleur) #### :package: Others - chore(deps): update actions/checkout action to v6 [#&#8203;1573](https://github.com/traefik/traefik-helm-chart/issues/1573) by [@&#8203;renovate](https://github.com/renovate)\[bot] - docs: Update EXAMPLES.md with REGIONAL load balancer note for Digital Ocean [#&#8203;1574](https://github.com/traefik/traefik-helm-chart/issues/1574) by [@&#8203;kamikazechaser](https://github.com/kamikazechaser) - chore(release): 🚀 publish traefik 38.0.0 and crds 1.13.0 [#&#8203;1600](https://github.com/traefik/traefik-helm-chart/issues/1600) by [@&#8203;mloiseleur](https://github.com/mloiseleur) #### New Contributors - [@&#8203;shubhamch71](https://github.com/shubhamch71) made their first contribution in [#&#8203;1587](https://github.com/traefik/traefik-helm-chart/pull/1587) - [@&#8203;kamikazechaser](https://github.com/kamikazechaser) made their first contribution in [#&#8203;1574](https://github.com/traefik/traefik-helm-chart/pull/1574) - [@&#8203;lucasra1](https://github.com/lucasra1) made their first contribution in [#&#8203;1591](https://github.com/traefik/traefik-helm-chart/pull/1591) - [@&#8203;remyj38](https://github.com/remyj38) made their first contribution in [#&#8203;1586](https://github.com/traefik/traefik-helm-chart/pull/1586) - [@&#8203;rndmh3ro](https://github.com/rndmh3ro) made their first contribution in [#&#8203;1593](https://github.com/traefik/traefik-helm-chart/pull/1593) - [@&#8203;fopina](https://github.com/fopina) made their first contribution in [#&#8203;1579](https://github.com/traefik/traefik-helm-chart/pull/1579) **Full Changelog**: <https://github.com/traefik/traefik-helm-chart/compare/v37.4.0...v38.0.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=-->
renovate-bot added the chart label 2025-12-19 10:03:16 +00:00
renovate-bot added 1 commit 2025-12-19 10:03:16 +00:00
Update Helm release traefik to v38
All checks were successful
renovate/stability-days Updates have met minimum release age requirement
Details
lint-test-helm / lint-helm (pull_request) Successful in 15s
Details
02d595cbab
renovate-bot force-pushed renovate/traefik-38.x from 02d595cbab to 22799adb55 2025-12-19 13:04:42 +00:00 Compare
renovate-bot force-pushed renovate/traefik-38.x from 22799adb55 to e2ae008189 2025-12-19 18:04:20 +00:00 Compare
renovate-bot force-pushed renovate/traefik-38.x from e2ae008189 to 8e94a9446a 2025-12-19 20:04:33 +00:00 Compare
renovate-bot force-pushed renovate/traefik-38.x from 8e94a9446a to 537a8906c6 2025-12-19 22:03:48 +00:00 Compare
renovate-bot force-pushed renovate/traefik-38.x from 537a8906c6 to 2f880722a1 2025-12-20 00:04:46 +00:00 Compare
renovate-bot force-pushed renovate/traefik-38.x from 2f880722a1 to 40995e67ce 2025-12-20 00:12:36 +00:00 Compare
renovate-bot force-pushed renovate/traefik-38.x from 40995e67ce to 0fe0d433d2 2025-12-20 00:15:18 +00:00 Compare
alexlebens merged commit c98d0bdba0 into main 2025-12-20 00:30:38 +00:00
alexlebens deleted branch renovate/traefik-38.x 2025-12-20 00:30:41 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Renovate
Issue generated by Renovate.
 automerge
This PR will be automerged by Renovate.
 chart
Chart update generated by Renovate.
 image
Image update generated by Renovate.
 stale
PR or Issue that has not been updated recently.
No Label chart
Milestone
No items
No Milestone
Assignees
Clear assignees
gitea-bot renovate-bot alexlebens
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: alexlebens/infrastructure#2711
Delete Branch "renovate/traefik-38.x"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?