- Update all non-major dependencies with digest and pinDigest

[blumilk-renovate]

This PR contains the following updates:

Package	Update	Change	Pending
dockurr/dnsmasq	minor	2.92 -> 2.93
portainer/portainer-ce	minor	2.40.0 -> 2.43.0
traefik	patch	v3.6.12 -> v3.6.22	v3.6.23 (+1)

---

Release Notes

containous/traefik (traefik)

v3.6.22

Compare Source

All Commits

Bug fixes:

• [acme] Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 (#​13477 @​rtribotte)
• [k8s] Fix panic when endpointslice port value or name is nil (#​13481 @​kevinpollet)
• [k8s/crd] Fix cross-provider ref check for TCP ServersTransport in Kubernetes CRD provider (#​13458 @​gndz07)
• [middleware] Fix handle empty unknown-length bodies in mirroring (#​13399 @​amazon7737)
• [middleware] Sanitize replaced path in ReplacePathRegex middleware (#​13466 @​kevinpollet)
• [otel] Bump go.opentelemetry.io/otel to v1.44.0 (#​13478 @​rtribotte)

Documentation:

• [middleware] Clarify buffering middleware defaults (#​13401 @​amazon7737)
• Add @​amazon7737 as a current maintainer (#​13450 @​emilevauge)
• Add @​nandorKollar as a current maintainer (#​13451 @​emilevauge)
• Fix changelog v2.11.51 (#​13430 @​mmatur)
• Fix grammar in TLS, TCP service, and routing reference docs (#​13461 @​almightymoon)
• Fix some function names in comments (#​13443 @​blackflytech)
• Fix version in migration guide (#​13434 @​kevinpollet)
• Fix X-Forwarded-Prefix documentation for dashboard redirection (#​13472 @​kevinpollet)

v3.6.22

Compare Source

All Commits

Bug fixes:

• [acme] Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 (#​13477 @​rtribotte)
• [k8s] Fix panic when endpointslice port value or name is nil (#​13481 @​kevinpollet)
• [k8s/crd] Fix cross-provider ref check for TCP ServersTransport in Kubernetes CRD provider (#​13458 @​gndz07)
• [middleware] Fix handle empty unknown-length bodies in mirroring (#​13399 @​amazon7737)
• [middleware] Sanitize replaced path in ReplacePathRegex middleware (#​13466 @​kevinpollet)
• [otel] Bump go.opentelemetry.io/otel to v1.44.0 (#​13478 @​rtribotte)

Documentation:

• [middleware] Clarify buffering middleware defaults (#​13401 @​amazon7737)
• Add @​amazon7737 as a current maintainer (#​13450 @​emilevauge)
• Add @​nandorKollar as a current maintainer (#​13451 @​emilevauge)
• Fix changelog v2.11.51 (#​13430 @​mmatur)
• Fix grammar in TLS, TCP service, and routing reference docs (#​13461 @​almightymoon)
• Fix some function names in comments (#​13443 @​blackflytech)
• Fix version in migration guide (#​13434 @​kevinpollet)
• Fix X-Forwarded-Prefix documentation for dashboard redirection (#​13472 @​kevinpollet)

v3.6.21

Compare Source

All Commits

Bug fixes:

• [acme, logs] Bump github.com/go-acme/lego/v5 (#​13154 @​ldez)
• [acme] Bump github.com/go-acme/lego/v5 (#​13359 @​juliens)
• [k8s/gatewayapi] Add missing Gateway API features in conformance tests (#​13356 @​AnatoleLucet)
• [k8s/gatewayapi] Ignore other gateways parentRefs and update route parent statuses only for managed gateways (#​13397 @​rtribotte)
• [k8s] Detect EndpointSlice condition changes (#​13405 @​kevinpollet)
• [k8s] Index Kubernetes EndpointSlice by service name (#​13395 @​kevinpollet)
• [k8s] Sort endpointslices to keep backend IPs consistent across rebuilds (#​13406 @​kevinpollet)
• [kv] Bump kvtools/redis to v1.2.1 (#​13403 @​ldez)
• [middleware, authentication] Fix x-forwarded-port in forward-auth (#​13344 @​juliens)
• [middleware, k8s/gatewayapi] Fix Host header not being modified by RequestHeaderModifier (#​12805 @​mihuross)
• [middleware, k8s/gatewayapi] Fix request scheme derivation when Gateway API RequestRedirect omits scheme (#​13347 @​gndz07)
• [middleware] Fix CORS Max-Age set to 0 by default (#​13371 @​AnatoleLucet)
• [middleware] Fix CORS wildcard when allow-credentials is true (#​13368 @​AnatoleLucet)
• [tls] Fix nondeterministic TLS certificate selection on shared SAN (#​13348 @​rtribotte)
• [server] Add an option to remove request headers with underscores (#​13262 @​youkoulayley)
• [server] Configurable max request header size (#​13353 @​juliens)
• [webui] Bump axios to v1.18.0 (#​13380 @​gndz07)
• [websocket] Fix connection upgrades when backend server is using h2c scheme (#​12967 @​stffabi)

Documentation:

• [k8s] Align Helm chart documented values with chart v41 (#​13366 @​mloiseleur)
• [k8s/crd] Fix broken CRD reference links in IngressRoute page (#​13375 @​s3onghyun)
• [k8s/ingress-nginx] Add Kubernetes Ingress NGINX to the providers list (#​13372 @​nmengin)
• [middleware] Clarify entryPoint middleware reference format (#​13364 @​mloiseleur)
• [security] Add HTTP/2 header memory exhaustion security documentation (#​13381 @​emilevauge)
• [server] Adds documentations on maxHeaderBytes (#​13363 @​juliens)
• Fix inaccuracies in reference documentation (#​13304 @​sheddy-traefik)

v3.6.21

Compare Source

All Commits

Bug fixes:

• [acme, logs] Bump github.com/go-acme/lego/v5 (#​13154 @​ldez)
• [acme] Bump github.com/go-acme/lego/v5 (#​13359 @​juliens)
• [k8s/gatewayapi] Add missing Gateway API features in conformance tests (#​13356 @​AnatoleLucet)
• [k8s/gatewayapi] Ignore other gateways parentRefs and update route parent statuses only for managed gateways (#​13397 @​rtribotte)
• [k8s] Detect EndpointSlice condition changes (#​13405 @​kevinpollet)
• [k8s] Index Kubernetes EndpointSlice by service name (#​13395 @​kevinpollet)
• [k8s] Sort endpointslices to keep backend IPs consistent across rebuilds (#​13406 @​kevinpollet)
• [kv] Bump kvtools/redis to v1.2.1 (#​13403 @​ldez)
• [middleware, authentication] Fix x-forwarded-port in forward-auth (#​13344 @​juliens)
• [middleware, k8s/gatewayapi] Fix Host header not being modified by RequestHeaderModifier (#​12805 @​mihuross)
• [middleware, k8s/gatewayapi] Fix request scheme derivation when Gateway API RequestRedirect omits scheme (#​13347 @​gndz07)
• [middleware] Fix CORS Max-Age set to 0 by default (#​13371 @​AnatoleLucet)
• [middleware] Fix CORS wildcard when allow-credentials is true (#​13368 @​AnatoleLucet)
• [tls] Fix nondeterministic TLS certificate selection on shared SAN (#​13348 @​rtribotte)
• [server] Add an option to remove request headers with underscores (#​13262 @​youkoulayley)
• [server] Configurable max request header size (#​13353 @​juliens)
• [webui] Bump axios to v1.18.0 (#​13380 @​gndz07)
• [websocket] Fix connection upgrades when backend server is using h2c scheme (#​12967 @​stffabi)

Documentation:

• [k8s] Align Helm chart documented values with chart v41 (#​13366 @​mloiseleur)
• [k8s/crd] Fix broken CRD reference links in IngressRoute page (#​13375 @​s3onghyun)
• [k8s/ingress-nginx] Add Kubernetes Ingress NGINX to the providers list (#​13372 @​nmengin)
• [middleware] Clarify entryPoint middleware reference format (#​13364 @​mloiseleur)
• [security] Add HTTP/2 header memory exhaustion security documentation (#​13381 @​emilevauge)
• [server] Adds documentations on maxHeaderBytes (#​13363 @​juliens)
• Fix inaccuracies in reference documentation (#​13304 @​sheddy-traefik)

v3.6.20

Compare Source

All Commits

Bug fixes:

• [k8s/gatewayapi] Reject cross-provider references with backendRefs.namespace (#​13322 @​youkoulayley)
• [server] Bump to github.com/pires/go-proxyproto v0.12.0 (#​13313 @​timschumi)
• [tls] Fix routers with same host, different tlsoptions on different entryPoint (#​13329 @​juliens)
• [tls] Fix snicheck for routers with no hosts (#​13333 @​rtribotte)

v3.6.20

Compare Source

All Commits

Bug fixes:

• [k8s/gatewayapi] Reject cross-provider references with backendRefs.namespace (#​13322 @​youkoulayley)
• [server] Bump to github.com/pires/go-proxyproto v0.12.0 (#​13313 @​timschumi)
• [tls] Fix routers with same host, different tlsoptions on different entryPoint (#​13329 @​juliens)
• [tls] Fix snicheck for routers with no hosts (#​13333 @​rtribotte)

v3.6.19

Compare Source

All Commits

Bug fixes:

• [middleware] Fix redis write timeout option configuration (#​13273 @​bzyy1024)
• [webui] Bump react-router and jsdom (#​13301 @​gndz07)
• [k8s/gatewayapi] Fix BackendTLSPolicy status update (#​13306 @​AnatoleLucet)
• [http3] Bump github.com/quic-go/quic-go to v0.59.1 (#​13300 @​rtribotte)
• [webui] Bump axios to v1.17.0 (#​13299 @​gndz07)
• [tls] Fix snicheck with keepalive (#​13305 @​juliens)

v3.6.19

Compare Source

All Commits

Bug fixes:

• [middleware] Fix redis write timeout option configuration (#​13273 @​bzyy1024)
• [webui] Bump react-router and jsdom (#​13301 @​gndz07)
• [k8s/gatewayapi] Fix BackendTLSPolicy status update (#​13306 @​AnatoleLucet)
• [http3] Bump github.com/quic-go/quic-go to v0.59.1 (#​13300 @​rtribotte)
• [webui] Bump axios to v1.17.0 (#​13299 @​gndz07)
• [tls] Fix snicheck with keepalive (#​13305 @​juliens)

v3.6.17

Compare Source

All Commits

Bug fixes:

• [tls] Compute resolved tlsOptions after applying models (#​13291 @​rtribotte)
• [accesslogs] Escape double quotes in quoted log fields (#​13180 @​KaanSimsek)
• [k8s/gatewayapi] Escape exact gRPC method matches (#​13201 @​nickmnt)
• [logs, middleware] Allow query parameters to be dropped from RequestPath in access log (#​13091 @​calinelson)
• [k8s/gatewayapi] Bump github.com/moby/spdystream to v0.5.1 (#​13252 @​kevinpollet)
• [file] Improve file provider behavior regarding dangling symlinks (#​12449 @​fh-yuxiao-zeng)
• [server] Bump github.com/bytedance/sonic to v1.15.1 (#​13254 @​kevinpollet)
• [middleware, authentication] Add error on basic auth build if users is empty (#​13195 @​rtribotte)
• [k8s/ingress] Avoid ingress path matcher injection and backport 11d2514 (#​13227 @​rtribotte)
• [server] Move snicheck to ctx instead of simulated routing (#​13214 @​juliens)
• [middleware] Reject requests with different paths after StripPrefix and StripPrefixRegex normalisation (#​13215 @​rtribotte)
• [server] Bump golang.org/x/net to v0.55.0 (#​13251 @​kevinpollet)
• [k8s/gatewayapi] Change default values and expose configuration for Kubernetes client QPS and Burst (#​13277 @​kevinpollet)
• [server] Bump golang.org/x/crypto to v0.52.0 (#​13276 @​rtribotte)

Documentation:

• [file] Replace generated File routing reference page (#​13170 @​sheddy-traefik)
• [k8s/crd] Fix typo in accesslogs field name (#​13177 @​PlayMTL)
• [k8s/ingress-nginx] Surface the Ingress status race condition during NGINX coexistence (#​13205 @​emilevauge)
• Polish grammar in migration guides (#​13174 @​quyentonndbs)
• [middleware] Remove whitespace in HTML tag (#​13160 @​marbon87)
• Add @​LBF38 as a current maintainer (#​13225 @​emilevauge)
• [k8s/ingress-nginx] Capitalize NGINX in kubernetesIngressNGINX (#​13236 @​smellems)

v3.6.17

Compare Source

All Commits

Bug fixes:

• [tls] Compute resolved tlsOptions after applying models (#​13291 @​rtribotte)
• [accesslogs] Escape double quotes in quoted log fields (#​13180 @​KaanSimsek)
• [k8s/gatewayapi] Escape exact gRPC method matches (#​13201 @​nickmnt)
• [logs, middleware] Allow query parameters to be dropped from RequestPath in access log (#​13091 @​calinelson)
• [k8s/gatewayapi] Bump github.com/moby/spdystream to v0.5.1 (#​13252 @​kevinpollet)
• [file] Improve file provider behavior regarding dangling symlinks (#​12449 @​fh-yuxiao-zeng)
• [server] Bump github.com/bytedance/sonic to v1.15.1 (#​13254 @​kevinpollet)
• [middleware, authentication] Add error on basic auth build if users is empty (#​13195 @​rtribotte)
• [k8s/ingress] Avoid ingress path matcher injection and backport 11d2514 (#​13227 @​rtribotte)
• [server] Move snicheck to ctx instead of simulated routing (#​13214 @​juliens)
• [middleware] Reject requests with different paths after StripPrefix and StripPrefixRegex normalisation (#​13215 @​rtribotte)
• [server] Bump golang.org/x/net to v0.55.0 (#​13251 @​kevinpollet)
• [k8s/gatewayapi] Change default values and expose configuration for Kubernetes client QPS and Burst (#​13277 @​kevinpollet)
• [server] Bump golang.org/x/crypto to v0.52.0 (#​13276 @​rtribotte)

Documentation:

• [file] Replace generated File routing reference page (#​13170 @​sheddy-traefik)
• [k8s/crd] Fix typo in accesslogs field name (#​13177 @​PlayMTL)
• [k8s/ingress-nginx] Surface the Ingress status race condition during NGINX coexistence (#​13205 @​emilevauge)
• Polish grammar in migration guides (#​13174 @​quyentonndbs)
• [middleware] Remove whitespace in HTML tag (#​13160 @​marbon87)
• Add @​LBF38 as a current maintainer (#​13225 @​emilevauge)
• [k8s/ingress-nginx] Capitalize NGINX in kubernetesIngressNGINX (#​13236 @​smellems)

v3.6.16

Compare Source

All Commits

Bug fixes:

• [k8s/ingress, k8s/crd, k8s/gatewayapi] Add CrossProviderNamespaces option (#​13094 @​rtribotte)
• [k8s/crd] Fix cross-provider ref check for Kubernetes CRD provider (#​13121 @​rtribotte)

v3.6.16

Compare Source

All Commits

Bug fixes:

• [k8s/ingress, k8s/crd, k8s/gatewayapi] Add CrossProviderNamespaces option (#​13094 @​rtribotte)
• [k8s/crd] Fix cross-provider ref check for Kubernetes CRD provider (#​13121 @​rtribotte)

v3.6.15

Compare Source

All Commits

Bug fixes:

• [k8s/crd] Remove cross-provider sanitization for Kubernetes service loading (#​13087 @​rtribotte)
• [k8s/ingress-nginx] Fix typo in default CORS allowed headers (#​13088 @​mliang2)
• [logs, metrics, tracing] Bump go.opentelemetry.io/otel (#​13100 @​juliens)
• [docker, ecs] Migrate to github.com/moby/moby modules (#​12672 @​thaJeztah)
• [docker, ecs] Migrate to github.com/moby/moby modules (#​13053 @​mmatur)

Documentation:

• [k8s/gatewayapi] Update Helm chart values link for Kubernetes Gateway (#​13063 @​0054)

v3.6.15

Compare Source

All Commits

Bug fixes:

• [k8s/crd] Remove cross-provider sanitization for Kubernetes service loading (#​13087 @​rtribotte)
• [k8s/ingress-nginx] Fix typo in default CORS allowed headers (#​13088 @​mliang2)
• [logs, metrics, tracing] Bump go.opentelemetry.io/otel (#​13100 @​juliens)
• [docker, ecs] Migrate to github.com/moby/moby modules (#​12672 @​thaJeztah)
• [docker, ecs] Migrate to github.com/moby/moby modules (#​13053 @​mmatur)

Documentation:

• [k8s/gatewayapi] Update Helm chart values link for Kubernetes Gateway (#​13063 @​0054)

v3.6.14

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.35.2 (#​13043 @​ldez)
• [acme] Bump github.com/go-acme/lego/v4 to v4.35.1 (#​13027 @​ldez)
• [middleware] Add errorRequestHeaders option to Errors middleware (#​13034 @​gndz07)
• [k8s/ingress-nginx] Do not require a port for ExternalName services (#​13033 @​kevinpollet)
• [server] Bump github.com/vulcand/oxy to v2.1.0 (#​13046 @​ldez)

Misc:

• Make FLAGS Make variable usable (#​13009 @​twz123)

v3.6.14

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.35.2 (#​13043 @​ldez)
• [acme] Bump github.com/go-acme/lego/v4 to v4.35.1 (#​13027 @​ldez)
• [middleware] Add errorRequestHeaders option to Errors middleware (#​13034 @​gndz07)
• [k8s/ingress-nginx] Do not require a port for ExternalName services (#​13033 @​kevinpollet)
• [server] Bump github.com/vulcand/oxy to v2.1.0 (#​13046 @​ldez)

Misc:

• Make FLAGS Make variable usable (#​13009 @​twz123)

v3.6.13

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.34.0 (#​12993 @​ldez)
• [docker] Downgrade log level for missing container on inspect (#​12900 @​Otoru)
• [sticky-session, k8s/crd] Make SameSite cookie value case-insensitive (#​12922 @​murataslan1)
• [k8s/crd, k8s] Honor allowCrossNamespace with chain middleware CRD (#​12976 @​rtribotte)
• [middleware] Remove untrusted X headers with underscores (#​12961 @​rtribotte)
• [middleware] Sanitize the request URL after stripping the prefix (#​12990 @​kevinpollet)
• [middleware] Deprecate ForwardAuth.TrustForwardHeader option (#​13012 @​kevinpollet)
• [middleware, authentication] Remove map lookup making the basic auth notFoundSecret empty (#​12960 @​rtribotte)
• [middleware, authentication] Fix trustForwardHeader on forward auth middleware (#​12994 @​juliens)
• [middleware, authentication] Cleanup and make ForwardAuth logs consistent (#​13013 @​kevinpollet)
• [webui] Upgrade form-data to 2.5.4, 3.0.4, 4.0.4 (#​12958 @​orbisai0security)

Documentation:

• [k8s] Fix yaml indentation (#​12957 @​isayme)
• [k8s] Clarify install config watchNamespace watches only one namespace (#​12962 @​parkerfath)
• [k8s/crd] Update ingressroute.md (#​12916 @​Rajakavitha1)
• Reverse versions order in migration guide (#​12959 @​nmengin)
• Update vulnerability submission guidelines (#​12968 @​emilevauge)

v3.6.13

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.34.0 (#​12993 @​ldez)
• [docker] Downgrade log level for missing container on inspect (#​12900 @​Otoru)
• [sticky-session, k8s/crd] Make SameSite cookie value case-insensitive (#​12922 @​murataslan1)
• [k8s/crd, k8s] Honor allowCrossNamespace with chain middleware CRD (#​12976 @​rtribotte)
• [middleware] Remove untrusted X headers with underscores (#​12961 @​rtribotte)
• [middleware] Sanitize the request URL after stripping the prefix (#​12990 @​kevinpollet)
• [middleware] Deprecate ForwardAuth.TrustForwardHeader option (#​13012 @​kevinpollet)
• [middleware, authentication] Remove map lookup making the basic auth notFoundSecret empty (#​12960 @​rtribotte)
• [middleware, authentication] Fix trustForwardHeader on forward auth middleware (#​12994 @​juliens)
• [middleware, authentication] Cleanup and make ForwardAuth logs consistent (#​13013 @​kevinpollet)
• [webui] Upgrade form-data to 2.5.4, 3.0.4, 4.0.4 (#​12958 @​orbisai0security)

Documentation:

• [k8s] Fix yaml indentation (#​12957 @​isayme)
• [k8s] Clarify install config watchNamespace watches only one namespace (#​12962 @​parkerfath)
• [k8s/crd] Update ingressroute.md (#​12916 @​Rajakavitha1)
• Reverse versions order in migration guide (#​12959 @​nmengin)
• Update vulnerability submission guidelines (#​12968 @​emilevauge)

---

Configuration

📅 Schedule: Branch creation - On day 1 of the month, every 3 months ( * * 1 */3 * ) in timezone Europe/Warsaw, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.