Update traefik Docker tag to v3.6.7

[renovate]

This PR contains the following updates:

Package	Update	Change
traefik	patch	v3.6.0 → v3.6.7

---

Release Notes

containous/traefik (traefik)

v3.6.7

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.31.0 (#​12529 by ldez)
• [acme] Add missing renew options (#​12467 by ldez)
• [acme] Replace hardcoded references to LetsEncrypt in log messages (#​12464 by schildbach)
• [k8s/ingress-nginx] Fix use-regex nginx annotation (#​12531 by LBF38)
• [k8s/ingress-nginx] Prevent Ingress Nginx provider http router to attach to an entrypoint with TLS (#​12528 by rtribotte)
• [k8s/ingress] Fix panic for empty defaultBackend and defaultBackend without resources (#​12509 by gndz07)
• [k8s] Fix condition used for serving and fenced endpoints (#​12521 by LBF38)
• [webui] Validate X-Forwarded-Prefix value for dashboard redirect (#​12514 by LBF38)
• [acme] Add timeout to ACME-TLS/1 challenge handshake (#​12516 by LBF38)
• [server] Make encoded character options opt-in (#​12540 by gndz07)

Documentation:

• [docker/swarm] Update swarm.md traefik version (#​12508 by DBouraoui)
• [k8s/ingress-nginx] Fix ingress-nginx annotations documentation (#​12510 by nmengin)
• [k8s] Fix Kubernetes reference yml file (#​12406 by mmatur)
• Fix code copy button positioning (#​12520 by AnuragEkkati)
• Fix typo in kubernetes.md (#​12515 by EdwardSalkeld)
• Bring back security section on API & Dashboard documentation page (#​12507 by gndz07)
• Fix link description in Traefik Proxy documentation (#​12488 by schaerfo)
• Add product comparison matrix and features page (#​12037 by sheddy-traefik)

Misc:

• Merge branch v2.11 into v3.6 (#​12552 by rtribotte)
• Merge branch v2.11 into v3.6 (#​12533 by mmatur)
• Merge branch v2.11 into v3.6 (#​12497 by mmatur)

v3.6.7

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.31.0 (#​12529 by ldez)
• [acme] Add missing renew options (#​12467 by ldez)
• [acme] Replace hardcoded references to LetsEncrypt in log messages (#​12464 by schildbach)
• [k8s/ingress-nginx] Fix use-regex nginx annotation (#​12531 by LBF38)
• [k8s/ingress-nginx] Prevent Ingress Nginx provider http router to attach to an entrypoint with TLS (#​12528 by rtribotte)
• [k8s/ingress] Fix panic for empty defaultBackend and defaultBackend without resources (#​12509 by gndz07)
• [k8s] Fix condition used for serving and fenced endpoints (#​12521 by LBF38)
• [webui] Validate X-Forwarded-Prefix value for dashboard redirect (#​12514 by LBF38)
• [acme] Add timeout to ACME-TLS/1 challenge handshake (#​12516 by LBF38)
• [server] Make encoded character options opt-in (#​12540 by gndz07)

Documentation:

• [docker/swarm] Update swarm.md traefik version (#​12508 by DBouraoui)
• [k8s/ingress-nginx] Fix ingress-nginx annotations documentation (#​12510 by nmengin)
• [k8s] Fix Kubernetes reference yml file (#​12406 by mmatur)
• Fix code copy button positioning (#​12520 by AnuragEkkati)
• Fix typo in kubernetes.md (#​12515 by EdwardSalkeld)
• Bring back security section on API & Dashboard documentation page (#​12507 by gndz07)
• Fix link description in Traefik Proxy documentation (#​12488 by schaerfo)
• Add product comparison matrix and features page (#​12037 by sheddy-traefik)

Misc:

• Merge branch v2.11 into v3.6 (#​12552 by rtribotte)
• Merge branch v2.11 into v3.6 (#​12533 by mmatur)
• Merge branch v2.11 into v3.6 (#​12497 by mmatur)

v3.6.6

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.30.1 (#​12432 by ldez)
• [http3] Bump github.com/quic-go/quic-go to v0.58.0 (#​12448 by GreyXor)
• [redis] Fix mutually exclusive verification for Redis (#​12442 by juliens)
• [server] Fix deny encoded characters (#​12454 by rtribotte)

Documentation:

• [k8s/ingress,k8s] Fix Kubernetes Ingress provider documentation (#​12443 by nmengin)
• [k8s/ingress-nginx] Add RBAC documentation for Ingress NGINX provider (#​12445 by nmn3m)
• [k8s] Improve the K8S multi-tenancy security note (#​12444 by nmengin)
• Restore documentation on http.maxHeaderBytes (#​12440 by mloiseleur)
• Fix Menu Item Naming (#​12431 by sheddy-traefik)

Misc:

• Merge branch v2.11 into v3.6 (#​12475 by mmatur)
• Merge branch v2.11 into v3.6 (#​12438 by kevinpollet)

v3.6.6

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.30.1 (#​12432 by ldez)
• [http3] Bump github.com/quic-go/quic-go to v0.58.0 (#​12448 by GreyXor)
• [redis] Fix mutually exclusive verification for Redis (#​12442 by juliens)
• [server] Fix deny encoded characters (#​12454 by rtribotte)

Documentation:

• [k8s/ingress,k8s] Fix Kubernetes Ingress provider documentation (#​12443 by nmengin)
• [k8s/ingress-nginx] Add RBAC documentation for Ingress NGINX provider (#​12445 by nmn3m)
• [k8s] Improve the K8S multi-tenancy security note (#​12444 by nmengin)
• Restore documentation on http.maxHeaderBytes (#​12440 by mloiseleur)
• Fix Menu Item Naming (#​12431 by sheddy-traefik)

Misc:

• Merge branch v2.11 into v3.6 (#​12475 by mmatur)
• Merge branch v2.11 into v3.6 (#​12438 by kevinpollet)

v3.6.5

Compare Source

All Commits

Bug fixes:

• [k8s/ingress-nginx] Fix NGINX sslredirect annotation support (#​12387 by rtribotte)
• [server] Print access logs for rejected requests and warn about new behavior (#​12424 by kevinpollet)

Documentation:

• [k8s/ingress-nginx] Add auth-signin to unsupported nginx annotations list (#​12370 by fibsifan)
• Add a Breaking change note to the changelog (#​12398 by nmengin)
• Fix encodedCharacters entryPoint option documentation (#​12385 by rtribotte)

v3.6.5

Compare Source

All Commits

Bug fixes:

• [k8s/ingress-nginx] Fix NGINX sslredirect annotation support (#​12387 by rtribotte)
• [server] Print access logs for rejected requests and warn about new behavior (#​12424 by kevinpollet)

Documentation:

• [k8s/ingress-nginx] Add auth-signin to unsupported nginx annotations list (#​12370 by fibsifan)
• Add a Breaking change note to the changelog (#​12398 by nmengin)
• Fix encodedCharacters entryPoint option documentation (#​12385 by rtribotte)

v3.6.4

Compare Source

CVE's fixed:

• CVE-2025-66490 (Advisory GHSA-gm3x-23wp-hc2c): Breaking Change please read the migration guide.
• CVE-2025-66491 (Advisory GHSA-7vww-mvcr-x6vj)

Important: Please read the migration guide.

Bug fixes:

• [server] Reject suspicious encoded characters (#​12360 by rtribotte)
• [plugins] Validate plugin module name (#​12291 by kevinpollet)
• [http3] Bump github.com/quic-go/quic-go to v0.57.1 (#​12319 by GreyXor)
• [http3] Bump github.com/quic-go/quic-go to v0.57.0 (#​12308 by GreyXor)
• [server] Bump golang.org/x/crypto to v0.45.0 (#​12296 by kevinpollet)
• [acme] Bump github.com/go-acme/lego/v4 to v4.29.0 (#​12333 by ldez)
• [k8s/ingress-nginx] Fix SSL redirect to match NGINX behavior (#​12361 by mmatur)
• [k8s/ingress-nginx] Fix the service name for ingress-nginx provider (#​12352 by mmatur)
• [k8s/ingress-nginx] Fix nginx.ingress.kubernetes.io/proxy-ssl-verify annotation support (#​12351 by rtribotte)
• [middleware,authentication] Change ForwardAuth error log level from DEBUG to ERROR (#​12324 by murataslan1)

Documentation:

• [api] Fix typo in API dashboard configuration instructions (#​12335 by NAICOLAS)
• [docker] Add documentation for loadbalancer.server.url in Docker and Swarm providers (#​12289 by webash)
• [k8s/gatewayapi] Fix links of Helm chart values reference to providers.kubernetesGateway.enabled (#​12315 by shouhei)
• [k8s/ingress-nginx] Fix default value of ingress-nginx provider in documentation (#​12328 by mloiseleur)
• [k8s/ingress-nginx] NGINX Ingress Controller to Traefik Migration Guide (#​12318 by sheddy-traefik)
• [k8s/ingress-nginx] Improve the configuration options display of the Kubernetes ingress-nginx provider (#​12297 by mloiseleur)
• [k8s/ingress-nginx] Improve ingress-nginx provider documentation (#​12288 by sheddy-traefik)
• [service] Fix loadbalancer doc for highest random weight (#​12283 by ozon2)
• Correctly Format the HTTP Service Documentation (#​12311 by sheddy-traefik)
• Add documentation about checkNewVersion (#​12298 by darkweaver87)

Misc:

• Merge branch v2.11 into v3.6 (#​12364 by kevinpollet)
• Merge branch v2.11 into v3.6 (#​12341 by mmatur)
• Merge branch v2.11 into v3.6 (#​12368 by mmatur)

v3.6.4

Compare Source

CVE's fixed:

• CVE-2025-66490 (Advisory GHSA-gm3x-23wp-hc2c): Breaking Change please read the migration guide.
• CVE-2025-66491 (Advisory GHSA-7vww-mvcr-x6vj)

Important: Please read the migration guide.

Bug fixes:

• [server] Reject suspicious encoded characters (#​12360 by rtribotte)
• [plugins] Validate plugin module name (#​12291 by kevinpollet)
• [http3] Bump github.com/quic-go/quic-go to v0.57.1 (#​12319 by GreyXor)
• [http3] Bump github.com/quic-go/quic-go to v0.57.0 (#​12308 by GreyXor)
• [server] Bump golang.org/x/crypto to v0.45.0 (#​12296 by kevinpollet)
• [acme] Bump github.com/go-acme/lego/v4 to v4.29.0 (#​12333 by ldez)
• [k8s/ingress-nginx] Fix SSL redirect to match NGINX behavior (#​12361 by mmatur)
• [k8s/ingress-nginx] Fix the service name for ingress-nginx provider (#​12352 by mmatur)
• [k8s/ingress-nginx] Fix nginx.ingress.kubernetes.io/proxy-ssl-verify annotation support (#​12351 by rtribotte)
• [middleware,authentication] Change ForwardAuth error log level from DEBUG to ERROR (#​12324 by murataslan1)

Documentation:

• [api] Fix typo in API dashboard configuration instructions (#​12335 by NAICOLAS)
• [docker] Add documentation for loadbalancer.server.url in Docker and Swarm providers (#​12289 by webash)
• [k8s/gatewayapi] Fix links of Helm chart values reference to providers.kubernetesGateway.enabled (#​12315 by shouhei)
• [k8s/ingress-nginx] Fix default value of ingress-nginx provider in documentation (#​12328 by mloiseleur)
• [k8s/ingress-nginx] NGINX Ingress Controller to Traefik Migration Guide (#​12318 by sheddy-traefik)
• [k8s/ingress-nginx] Improve the configuration options display of the Kubernetes ingress-nginx provider (#​12297 by mloiseleur)
• [k8s/ingress-nginx] Improve ingress-nginx provider documentation (#​12288 by sheddy-traefik)
• [service] Fix loadbalancer doc for highest random weight (#​12283 by ozon2)
• Correctly Format the HTTP Service Documentation (#​12311 by sheddy-traefik)
• Add documentation about checkNewVersion (#​12298 by darkweaver87)

Misc:

• Merge branch v2.11 into v3.6 (#​12364 by kevinpollet)
• Merge branch v2.11 into v3.6 (#​12341 by mmatur)
• Merge branch v2.11 into v3.6 (#​12368 by mmatur)

v3.6.2

Compare Source

Important: Please read the migration guide.

Bug fixes:

• [k8s/ingress-nginx] Deprecate Kubernetes Ingress NGINX provider experimental flag (#​12286 by rtribotte)

v3.6.2

Compare Source

Important: Please read the migration guide.

Bug fixes:

• [k8s/ingress-nginx] Deprecate Kubernetes Ingress NGINX provider experimental flag (#​12286 by rtribotte)

v3.6.1

Compare Source

Important: Please read the migration guide.

Bug fixes:

• [docker] Auto-negotiate Docker API Version (#​12256 by felixbuenemann)
• [server] Fix multi-layer routing with models (#​12258 by juliens)
• [udp] Revert "Avoid allocations in readLoop by using sync.Pool" (#​12267 by kevinpollet)
• [webui] Fix blocked navigation on Safari (#​12231 by gndz07)
• [webui] Restore remote Upgrade to Hub button web component (#​12219 by gndz07)

Documentation:

• [k8s] Fix Nginx provider documentation (#​12266 by nmengin)
• [k8s] Fix Gateway API version and the list of features supported (#​12254 by nmengin)

v3.6.1

Compare Source

Important: Please read the migration guide.

Bug fixes:

• [docker] Auto-negotiate Docker API Version (#​12256 by felixbuenemann)
• [server] Fix multi-layer routing with models (#​12258 by juliens)
• [udp] Revert "Avoid allocations in readLoop by using sync.Pool" (#​12267 by kevinpollet)
• [webui] Fix blocked navigation on Safari (#​12231 by gndz07)
• [webui] Restore remote Upgrade to Hub button web component (#​12219 by gndz07)

Documentation:

• [k8s] Fix Nginx provider documentation (#​12266 by nmengin)
• [k8s] Fix Gateway API version and the list of features supported (#​12254 by nmengin)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.