v3.6.12

Compare Source

All Commits

Bug fixes:

• [k8s/ingress-nginx] Fix auth-response-headers whitespace trimming in ingress-nginx provider (#​12856 @​mmatur)
• [acme] Bump github.com/go-acme/lego/v4 to v4.33.0 (#​12840 @​ldez)
• [server] Fix comment and unnecessary allocation in withRoutingPath (#​12880 @​boinger)
• [server, tcp] Fix postgres STARTTLS with TLS termination (#​12847 @​mmatur)
• [api] Fix allow colons and tildes in api.basePath validation (#​12857 @​mmatur)
• [grpc] Bump google.golang.org/grpc to v1.79.3 (#​12845 @​mmatur)
• [middleware, authentication] Prevent duplicate user headers in basic and digest auth middleware (#​12851 @​juliens)
• [middleware] Fix StripPrefix and StripPrefixRegex to slice the prefix using encoded prefix length (#​12863 @​gndz07)

Documentation:

• [acme] Clarify CNAME explanation in ACME Documentation (#​12818 @​sheddy-traefik)
• [k8s/ingress-nginx] Add ingress-nginx migration banner on documentation pages (#​12872 @​gndz07)
• [k8s/ingress-nginx] Clarify that NGINX Ingress watchNamespace watches only one namespace (#​12873 @​parkerfath)
• [k8s/ingress] Improve Kubernetes Ingress Routing Documentation (#​12876 @​sheddy-traefik)

v3.6.11

Compare Source

CVE fixed:

• CVE-2026-32595 (Advisory GHSA-g3hg-j4jv-cwfr)
• CVE-2026-32305 (Advisory GHSA-wvvq-wgcr-9q48)
• CVE-2026-32695 (Advisory GHSA-67jx-r9pv-98rj)

Bug fixes:

• [logs, otel] Add OTel-conformant trace context attributes to access logs (#​12801 @​mmatur)
• [k8s/gatewayapi] Fix incorrect hostname matching between listener and route (#​12599 @​TheColorman)
• [k8s/ingress] Fix ingress router's rule (#​12808 @​gndz07)
• [webui] Remove AGPL license in code (#​12799 @​Desel72)
• [k8s/ingress-nginx] Fix proxy-ssl-verify annotation (#​12825 @​LBF38)
• [http] Add maxResponseBodySize configuration on HTTP provider (#​12788 @​gndz07)
• [tls] Support fragmented TLS client hello (#​12787 @​rtribotte)
• [middleware, authentication] Make basic auth check timing constant (#​12803 @​rtribotte)

Documentation:

• [k8s] Improve the multi tenant security note (#​12822 @​nmengin)
• Fix unnecessary escaping of pipe in regexp examples (#​12784 @​diegmonti)
• Add vulnerability submission quality guidelines (#​12807 @​emilevauge)
• Fix start up message format (#​12806 @​mloiseleur)
• Remove unsupported servers[n].address from TCP label examples (#​12817 @​sheddy-traefik)
• Bump mkdocs-traefiklabs to use consent mode (#​12804 @​darkweaver87)

v3.6.10

Compare Source

All Commits

Bug fixes:

• [docker] Bump Docker and OpenTelemetry dependencies (#​12761 by mmatur)
• [fastproxy] Bump github.com/valyala/fasthttp to v1.69.0 (#​12763 by kevinpollet)
• [healthcheck, grpc] Remove path parsing with grpc healthcheck (#​12760 by rtribotte)
• [k8s/gatewayapi] Fix Gateway API router's rules (#​12753 by rtribotte)
• [middleware] Fix HasSecureHeadersDefined returning false when stsSeconds is 0 (#​12684 by veeceey)
• [otel] Bump go.opentelemetry.io/otel dependencies (#​12754 by rtribotte)
• [server] Bump golang.org/x/net to v0.51.0 (#​12756 by kevinpollet)
• [webui] Fix priority display in dashboard and ACME bypass redirect (#​12740 by mmatur)
• [webui] Fix basePath validation for dashboard template (#​12729 by gndz07)

Documentation:

• [middleware] Correct documentation for Digest auth (#​12651 by Zash)
• Add missing .http to TOML table names (#​12713 by Darsstar)
• Fix incorrect TOML example in entrypoints docs (#​12711 by mfmfuyu)
• Fix API basepath option documentation (#​12744 by nmengin)

v3.6.9

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.32.0 (#​12702 by ldez)
• [middleware] Fix case sensitivity on x-forwarded headers for Connection (#​12690 by LBF38)
• [middleware, authentication] Handle empty/missing User-Agent header (#​12545 by a-stangl)
• [middleware, authentication] Add maxResponseBodySize configuration to forwardAuth middleware (#​12694 by gndz07)
• [server] Fix TLS handshake error handling (#​12692 by juliens)

Documentation:

• [docker] Update docker in-depth setup guide (#​12682 by mdevino)
• [k8s] Make labelSelector option casing more consistent (#​12658 by holysoles)
• [k8s/ingress-nginx] Add temporary note to advertise the incoming NGINX annotations (#​12699 by nmengin)
• Increased content width in documentation (#​12632 by tobiasge)
• Correct encoded characters allowance in entrypoints.md (#​12679 by Apflkuacha)

v3.6.8

Compare Source

All Commits

Bug fixes:

• [acme] Remove invalid private key in log (#​12574 by juliens)
• [acme] Alter TLS renewal period (#​12479 by LtHummus)
• [healthcheck] Reject absolute URL in healthcheck path configuration (#​12653 by rtribotte)
• [http3] Bump github.com/quic-go/quic-go to v0.59.0 (#​12553 by jnoordsij)
• [metrics,tracing,accesslogs] Fix ObservabilityConfig SetDefaults (#​12636 by mmatur)
• [server] Remove conn deadline after STARTTLS negociation (#​12639 by rtribotte)
• [tls] Fix verifyServerCertMatchesURI function behavior (#​12575 by kevinpollet)
• [tracing,otel] Use ParentBased sampler to respect parent span sampling decision (#​12403 by xe-leon)
• [webui] Use url.Parse to validate X-Forwarded-Prefix value (#​12643 by kevinpollet)
• [healthcheck] Validate healthcheck path configuration (#​12642 by @​rtribotte)
• [tls, server] Cap TLS record length to RFC 8446 limit in ClientHello peeking (#​12638 by @​mmatur)
• [service] Avoid recursion with services (#​12591 by juliens)
• [webui] Bump dependencies of documentation and webui (#​12581 by gndz07)

Documentation:

• [k8s] Fix kubernetes.md with correct http redirections (#​12603 by MartenM)
• [middleware,k8s/crd] Fix the errors middleware's document for Kubernetes CRD (#​12600 by yuito-it)
• [tls] Clarify SNI selection (#​12482 by AnuragEkkati)
• Fix typo on JWT documentation (#​12616 by mdevino)
• Add @​gndz07 as a current maintainer (#​12594 by emilevauge)
• Remove extraneous dots in migration guide (#​12571 by dathbe)
• Document Path matcher placeholder removal in v3 migration guide (#​12570 by sheddy-traefik)
• Improve Service Reference page (#​12541 by sheddy-traefik)
• Document negative priority support for routers (#​12505 by understood-the-assignment)
• Improve the structure of the routing reference pages (#​12429 by sheddy-traefik)
• Clean Up Menu Entries & Update Expose Overview (#​12405 by sheddy-traefik)
• Split Expose User Guides & Add Multi-Layer Routing Section (#​12238 by sheddy-traefik)
• Remove extra dots in migration guide (#​12573 by rtribotte)

Misc:

• Merge v2.11 into v3.6 (#​12652 by mmatur)
• Merge v2.11 into v3.6 (#​12644 by mmatur)
• Merge branch v2.11 into v3.6 (#​12617 by mmatur)
• Merge v2.11 into v3.6 (#​12605 by mmatur)
• Merge v2.11 into v3.6 (#​12601 by mmatur)
• Merge branch v2.11 into v3.6 (#​12556 by mmatur)

v3.6.7

Compare Source

All Commits

Bug fixes:

• [acme] Remove invalid private key in log (#​12574 by juliens)
• [acme] Alter TLS renewal period (#​12479 by LtHummus)
• [healthcheck] Reject absolute URL in healthcheck path configuration (#​12653 by rtribotte)
• [http3] Bump github.com/quic-go/quic-go to v0.59.0 (#​12553 by jnoordsij)
• [metrics,tracing,accesslogs] Fix ObservabilityConfig SetDefaults (#​12636 by mmatur)
• [server] Remove conn deadline after STARTTLS negociation (#​12639 by rtribotte)
• [tls] Fix verifyServerCertMatchesURI function behavior (#​12575 by kevinpollet)
• [tracing,otel] Use ParentBased sampler to respect parent span sampling decision (#​12403 by xe-leon)
• [webui] Use url.Parse to validate X-Forwarded-Prefix value (#​12643 by kevinpollet)
• [healthcheck] Validate healthcheck path configuration (#​12642 by @​rtribotte)
• [tls, server] Cap TLS record length to RFC 8446 limit in ClientHello peeking (#​12638 by @​mmatur)
• [service] Avoid recursion with services (#​12591 by juliens)
• [webui] Bump dependencies of documentation and webui (#​12581 by gndz07)

Documentation:

• [k8s] Fix kubernetes.md with correct http redirections (#​12603 by MartenM)
• [middleware,k8s/crd] Fix the errors middleware's document for Kubernetes CRD (#​12600 by yuito-it)
• [tls] Clarify SNI selection (#​12482 by AnuragEkkati)
• Fix typo on JWT documentation (#​12616 by mdevino)
• Add @​gndz07 as a current maintainer (#​12594 by emilevauge)
• Remove extraneous dots in migration guide (#​12571 by dathbe)
• Document Path matcher placeholder removal in v3 migration guide (#​12570 by sheddy-traefik)
• Improve Service Reference page (#​12541 by sheddy-traefik)
• Document negative priority support for routers (#​12505 by understood-the-assignment)
• Improve the structure of the routing reference pages (#​12429 by sheddy-traefik)
• Clean Up Menu Entries & Update Expose Overview (#​12405 by sheddy-traefik)
• Split Expose User Guides & Add Multi-Layer Routing Section (#​12238 by sheddy-traefik)
• Remove extra dots in migration guide (#​12573 by rtribotte)

Misc:

• Merge v2.11 into v3.6 (#​12652 by mmatur)
• Merge v2.11 into v3.6 (#​12644 by mmatur)
• Merge branch v2.11 into v3.6 (#​12617 by mmatur)
• Merge v2.11 into v3.6 (#​12605 by mmatur)
• Merge v2.11 into v3.6 (#​12601 by mmatur)
• Merge branch v2.11 into v3.6 (#​12556 by mmatur)

v3.6.6

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.31.0 (#​12529 by ldez)
• [acme] Add missing renew options (#​12467 by ldez)
• [acme] Replace hardcoded references to LetsEncrypt in log messages (#​12464 by schildbach)
• [k8s/ingress-nginx] Fix use-regex nginx annotation (#​12531 by LBF38)
• [k8s/ingress-nginx] Prevent Ingress Nginx provider http router to attach to an entrypoint with TLS (#​12528 by rtribotte)
• [k8s/ingress] Fix panic for empty defaultBackend and defaultBackend without resources (#​12509 by gndz07)
• [k8s] Fix condition used for serving and fenced endpoints (#​12521 by LBF38)
• [webui] Validate X-Forwarded-Prefix value for dashboard redirect (#​12514 by LBF38)
• [acme] Add timeout to ACME-TLS/1 challenge handshake (#​12516 by LBF38)
• [server] Make encoded character options opt-in (#​12540 by gndz07)

Documentation:

• [docker/swarm] Update swarm.md traefik version (#​12508 by DBouraoui)
• [k8s/ingress-nginx] Fix ingress-nginx annotations documentation (#​12510 by nmengin)
• [k8s] Fix Kubernetes reference yml file (#​12406 by mmatur)
• Fix code copy button positioning (#​12520 by AnuragEkkati)
• Fix typo in kubernetes.md (#​12515 by EdwardSalkeld)
• Bring back security section on API & Dashboard documentation page (#​12507 by gndz07)
• Fix link description in Traefik Proxy documentation (#​12488 by schaerfo)
• Add product comparison matrix and features page (#​12037 by sheddy-traefik)

Misc:

• Merge branch v2.11 into v3.6 (#​12552 by rtribotte)
• Merge branch v2.11 into v3.6 (#​12533 by mmatur)
• Merge branch v2.11 into v3.6 (#​12497 by mmatur)

v3.6.5

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.30.1 (#​12432 by ldez)
• [http3] Bump github.com/quic-go/quic-go to v0.58.0 (#​12448 by GreyXor)
• [redis] Fix mutually exclusive verification for Redis (#​12442 by juliens)
• [server] Fix deny encoded characters (#​12454 by rtribotte)

Documentation:

• [k8s/ingress,k8s] Fix Kubernetes Ingress provider documentation (#​12443 by nmengin)
• [k8s/ingress-nginx] Add RBAC documentation for Ingress NGINX provider (#​12445 by nmn3m)
• [k8s] Improve the K8S multi-tenancy security note (#​12444 by nmengin)
• Restore documentation on http.maxHeaderBytes (#​12440 by mloiseleur)
• Fix Menu Item Naming (#​12431 by sheddy-traefik)

Misc:

• Merge branch v2.11 into v3.6 (#​12475 by mmatur)
• Merge branch v2.11 into v3.6 (#​12438 by kevinpollet)

v3.6.4

Compare Source

All Commits

CVE's fixed:

• CVE-2025-66490 (Advisory GHSA-gm3x-23wp-hc2c): Breaking Change please read the migration guide.
• CVE-2025-66491 (Advisory GHSA-7vww-mvcr-x6vj)

Important: Please read the migration guide.

Bug fixes:

• [server] Reject suspicious encoded characters (#​12360 by rtribotte)
• [plugins] Validate plugin module name (#​12291 by kevinpollet)
• [http3] Bump github.com/quic-go/quic-go to v0.57.1 (#​12319 by GreyXor)
• [http3] Bump github.com/quic-go/quic-go to v0.57.0 (#​12308 by GreyXor)
• [server] Bump golang.org/x/crypto to v0.45.0 (#​12296 by kevinpollet)
• [acme] Bump github.com/go-acme/lego/v4 to v4.29.0 (#​12333 by ldez)
• [k8s/ingress-nginx] Fix SSL redirect to match NGINX behavior (#​12361 by mmatur)
• [k8s/ingress-nginx] Fix the service name for ingress-nginx provider (#​12352 by mmatur)
• [k8s/ingress-nginx] Fix nginx.ingress.kubernetes.io/proxy-ssl-verify annotation support (#​12351 by rtribotte)
• [middleware,authentication] Change ForwardAuth error log level from DEBUG to ERROR (#​12324 by murataslan1)

Documentation:

• [api] Fix typo in API dashboard configuration instructions (#​12335 by NAICOLAS)
• [docker] Add documentation for loadbalancer.server.url in Docker and Swarm providers (#​12289 by webash)
• [k8s/gatewayapi] Fix links of Helm chart values reference to providers.kubernetesGateway.enabled (#​12315 by shouhei)
• [k8s/ingress-nginx] Fix default value of ingress-nginx provider in documentation (#​12328 by mloiseleur)
• [k8s/ingress-nginx] NGINX Ingress Controller to Traefik Migration Guide (#​12318 by sheddy-traefik)
• [k8s/ingress-nginx] Improve the configuration options display of the Kubernetes ingress-nginx provider (#​12297 by mloiseleur)
• [k8s/ingress-nginx] Improve ingress-nginx provider documentation (#​12288 by sheddy-traefik)
• [service] Fix loadbalancer doc for highest random weight (#​12283 by ozon2)
• Correctly Format the HTTP Service Documentation (#​12311 by sheddy-traefik)
• Add documentation about checkNewVersion (#​12298 by darkweaver87)

Misc:

• Merge branch v2.11 into v3.6 (#​12364 by kevinpollet)
• Merge branch v2.11 into v3.6 (#​12341 by mmatur)
• Merge branch v2.11 into v3.6 (#​12368 by mmatur)

v3.6.3

Compare Source

All Commits

Release canceled.

v3.6.2

Compare Source

All Commits

Bug fixes:

• [k8s/ingress-nginx] Deprecate Kubernetes Ingress NGINX provider experimental flag (#​12286 by rtribotte)

v3.6.1

Compare Source

All Commits

Bug fixes:

• [docker] Bump Docker and OpenTelemetry dependencies (#​12761 by mmatur)
• [fastproxy] Bump github.com/valyala/fasthttp to v1.69.0 (#​12763 by kevinpollet)
• [healthcheck, grpc] Remove path parsing with grpc healthcheck (#​12760 by rtribotte)
• [k8s/gatewayapi] Fix Gateway API router's rules (#​12753 by rtribotte)
• [middleware] Fix HasSecureHeadersDefined returning false when stsSeconds is 0 (#​12684 by veeceey)
• [otel] Bump go.opentelemetry.io/otel dependencies (#​12754 by rtribotte)
• [server] Bump golang.org/x/net to v0.51.0 (#​12756 by kevinpollet)
• [webui] Fix priority display in dashboard and ACME bypass redirect (#​12740 by mmatur)
• [webui] Fix basePath validation for dashboard template (#​12729 by gndz07)

Documentation:

• [middleware] Correct documentation for Digest auth (#​12651 by Zash)
• Add missing .http to TOML table names (#​12713 by Darsstar)
• Fix incorrect TOML example in entrypoints docs (#​12711 by mfmfuyu)
• Fix API basepath option documentation (#​12744 by nmengin)

v3.6.0

Compare Source

All Commits

Enhancements:

• [acme] Add new certificatesresolvers options (#​11977 by ldez)
• [consul,consulcatalog,nomad] Log provider namespace during startup (#​12002 by shreealt)
• [docker] Allow discovering non-running Docker containers (#​10645 by acouvreur)
• [ecs] AWS ECS IPv6 Support (#​12179 by wizbit)
• [file,k8s/crd,service] Add least time load balancing strategy (#​12167 by sdelicata)
• [healthcheck,tcp] Add TCP Healthcheck (#​11238 by ddtmachado)
• [healthcheck] Add passive health checks (#​11351 by Nelwhix)
• [k8s/crd] Add highest random weight in Kubernetes CRD (#​12061 by lbenguigui)
• [k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.4.0 (#​12140 by kevinpollet)
• [k8s/ingress] Allow publishing services with type ExternalName (#​12065 by james-callahan)
• [k8s] Add Knative provider (#​11448 by idurgakalyan)
• [middleware,authentication] Add warning when maxBodySize is not set (#​12085 by kianelbo)
• [middleware,server] Multi-layer routing (#​12130 by sdelicata)
• [plugins] Support syscall (#​11939 by david-garcia-garcia)
• [server] Implement HTTP2 HPACK table size options (#​12050 by GCHQDeveloper548)
• [service,udp] Avoid allocations in readLoop by using sync.Pool (#​12029 by arturmelanchyk)
• [service] Add HighestRandomWeight load balancing algorithm (#​9946 by mathieuHa)
• [webui] Add Traefik Hub demo in dashboard (#​12193 by gndz07)
• [webui] Reduce vertical padding in dashboard table rows for more compact layout (#​12145 by leccelecce)

Bug fixes:

• [server] Make the aggregator compute provider namespace for router's parentRefs (#​12235 by rtribotte)

Documentation:

• Prepare release v3.6.0-rc1 (#​12211 by kevinpollet)
• Fix broken link to migration guide on readme (#​12021 by 0slb)
• Fix broken links in TCP Service and HTTP Router documentation (#​12215 by sheddy-traefik)
• Fix typo in v3.6 migration guide (#​12212 by jnoordsij)

Misc:

• Merge branch v3.5 into master (#​12210 by rtribotte)
• Merge branch v3.5 into master (#​12191 by rtribotte)
• Merge branch v3.5 into master (#​12188 by rtribotte)
• Merge branch v3.5 into master (#​12160 by rtribotte)
• Merge branch v3.5 into master (#​12136 by kevinpollet)
• Merge branch v3.5 into master (#​12120 by rtribotte)
• Merge branch v3.5 into master (#​12095 by kevinpollet)
• Merge branch v3.5 into master (#​12051 by rtribotte)
• Merge branch v3.5 into master (#​11976 by kevinpollet)
• Merge branch v3.5 into master (#​11940 by kevinpollet)
• Merge branch v3.5 into master (#​11900 by kevinpollet)
• Merge branch v3.5 into v3.6 (#​12242 by kevinpollet)

v3.5.6

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.28.0 (#​12218 by ldez)
• [server] Filter unknown nodes with file and env for the deprecation loader (#​12227 by rtribotte)

Documentation:

• [acme] Add missing ACME options and clean up table for more visibility (#​12208 by sheddy-traefik)
• [middleware] Fix default encodings in compress middleware (#​12216 by Belphemur)
• Update Configuration Overview Page (#​12202 by sheddy-traefik)

v3.5.5

Compare Source

All Commits

Release canceled.

v3.5.4

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.27.0 (#​12166 by ldez)
• [acme] Bump github.com/go-acme/lego/v4 to v4.26.0 (#​12063 by ldez)
• [http3] Bump github.com/quic-go/quic-go to v0.55.0 (#​12121 by GreyXor)
• [kv] Bump github.com/kvtools/etcdv3 to v1.0.3 (#​12163 by kevinpollet)
• [logs,metrics,tracing,accesslogs,otel] Fix otel not working without USER (#​12103 by mmatur)
• [logs,otel] Enable stdout logging when OTLP is enabled (#​12124 by lbenguigui)
• [metrics,otel] Rename traefik_tls_certs_not_after_milliseconds to traefik_tls_certs_not_after_seconds (#​12141 by shreealt)
• [otel] Update OpenTelemetry to v1.38.0 and semantic conventions to v1.37.0 (#​12099 by rtribotte)
• [otel] Do not fail when pod is not found in K8sAttributesDetector (#​12096 by xe-leon)
• [tls] Make the staple updates continuous (#​12142 by rtribotte)
• [webui] Fix version display regression (#​12111 by mdeliatf)

Documentation:

• [accesslogs] Fix link for accesslog.fields.names in documentation (#​12094 by rmbruntz)
• [acme] Fix Hetzner env var name inside documentation (#​12187 by ldez)
• [acme] Replace internal dead links (#​12152 by rtribotte)
• [acme] Clean and avoid collisions of anchors in option tables (#​12149 by rtribotte)
• [docker/swarm] Fix swarm code example (#​12115 by Dr4K4n)
• [healthcheck] Clarify health check requirement for server status metric (#​12201 by asafm)
• [k8s/crd] Fix typo in ingressroute.md from pirority to priority (#​12112 by miromichalicka)
• [k8s] Fix incorrect option and lint page (#​12108 by sheddy-traefik)
• [k8s] Add API basePath documentation and fix broken links (#​12177 by mloiseleur)
• [k8s] Merge TLSOption/TLSStore CRD documentation page (#​12164 by nmengin)
• [logs] Clarify log.filePath behavior in documentation (#​12153 by Alanxtl)
• [metrics] Fix incorrect addInternals configuration option (#​12118 by shreealt)
• [middleware] Fix anchors in basic auth configuration options (#​12168 by homersimpsons)
• [middleware] Fix PreserveRequestMethod casing (#​12122 by LeTamanoir)
• [middleware] Add missing reference docs for statusRewrites in errors middleware (#​12198 by sevensolutions)
• [middleware] Document rejectStatusCode (#​12062 by czocher)
• [otel] Align documentation on default otlp endpoint (#​12151 by mloiseleur)
• [otel] Fix metric name to metrics.otlp.grpc.insecure (#​12200 by germainlefebvre4)
• [server,k8s/crd,k8s] Add dedicated pages for routers and fix doc links in CRDs (#​12119 by rtribotte)
• [tls] Fix typo in TLS certificate generation description (#​12185 by iraj-jelo)
• Fix wrong references to router's pages (#​12131 by rtribotte)
• Fix markdown rendering for table anchors (#​12129 by MaBauMeBad)
• Fix provider option descriptions (#​12135 by kevinpollet)
• Format HTTP headers as code (#​12105 by tyilo)
• Fix heading levels and add links (#​12084 by Granjow)

Misc:

• Merge branch v2.11 into v3.5 (#​12206 by kevinpollet)
• Merge branch v2.11 into v3.5 (#​12158 by rtribotte)

v3.5.3

Compare Source

All Commits

Bug fixes:

• [k8s/crd] ServersTransport: set minimum MaxIdleConnsPerHost=-1 (#​12077 by xe-leon)
• [plugins] Refactor plugins system (#​12035 by jspdown)
• [server] Use client conn to build the proxy protocol header (#​12069 by rtribotte)
• [webui] Update hub-button-app to use a local script (#​12060 by mdeliatf)

Documentation:

• [acme,middleware] Fix broken links in documentation (#​12057 by mloiseleur)
• [k8s] Create Traefik Service CRD sub-resource documentation page (#​12080 by nmengin)
• [k8s] Fix conflict in IngressRouteTCP documentation (#​12064 by MatBon01)
• Fix typo in rules and priority documentation (#​12089 by Darkangeel-hd)
• Add govern section (#​12067 by sheddy-traefik)
• Fix entrypoint config examples ([#​12056](https://redirect.github.com/traefik/traefik/p