[renovate]

This PR contains the following updates:

Package	Update	Change
traefik (source)	minor	v3.6 → v3.7

---

Release Notes

traefik/traefik (traefik)

v3.7

All Commits

Bug fixes:

• [authentication] Limit BasicAuth password length (#​14168 @​Neffi42)
• [authentication] Support connection-bound authentication schemes in Proxy-Authorization (#​14203 @​Neffi42)
• [k8s/ingress-nginx] Apply host-less auth-tls annotations to the default TLS option (#​14224 @​rtribotte)
• [k8s/ingress-nginx] Apply Ingress NGINX CORS before the redirect annotations (#​14093 @​lazerg)
• [k8s/ingress-nginx] Fix Ssl-Client-* headers when Ingresses share a host (#​14160 @​Neffi42)
• [k8s/knative] Bump knative.dev/pkg to v0.0.0-20261102011501-7b6dcbbe4ea4 (#​14220 @​kevinpollet)
• [middleware] Accept uppercase Q weight in compress Accept-Encoding parsing (#​14153 @​locker95)
• [middleware] Bump github.com/vulcand/oxy to v2.3.2 (#​14241 @​ldez)
• [middleware, performance] Limit zstd encoder memory in the Compress middleware (#​14167 @​juliens)
• [plugins] Fix deterministic randomness in WASM plugins (#​14107 @​yugfletcher)
• [plugins] Bump github.com/traefik/yaegi to v0.16.3 (#​14231 @​juliens)
• [server] Validate HTTP Host matcher values (#​13571 @​Milad93R)
• [server] Resolve dot-segments and empty segments with path parameters (#​14188 @​Neffi42)
• [server, grpc] Add regression test for gRPC bidirectional streams (#​14037 @​ozenyunus35)
• [service] Fix SPIFFE configuration for the TCP servers transport (#​14200 @​simpleqt)
• [tcp] Detect TCP connection reset on read when the error is wrapped (#​14046 @​noakky)

Documentation:

• [k8s/ingress-nginx] List missing ingress-nginx annotations as unsupported (#​14163 @​lazerg)
• [middleware] Use a Secret for basicAuth in the Chain middleware Kubernetes example (#​14143 @​lazerg)
• [middleware] Fix grammar in observability and InFlightReq pages (#​14209 @​m-shahi)
• [plugins] Fix typos in plugin type error and documentation (#​14186 @​sarankumar1325)
• Add version to the dot-segments migration note (#​14248 @​kevinpollet)
• Fix Docker Hub link in README (#​14198 @​GUOZIJAN)
• Fix broken anchors in providers overview, SPIFFE and v3 migration docs (#​14027 @​SatvikMishra08)
• Fix dead and redirecting external links (#​14139 @​rachana5)
• Move AI assistance disclosure to the pull request description (#​14194 @​Neffi42)
• Update download and GitHub star counts (#​14193 @​tomatokoolaid)

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • "after 9am and before 5pm every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Rebase not applied

This branch has not been rebased, as its update has not yet met the internal checks configured for it, such as minimumReleaseAge. Rebasing it now would add a dependency version which is still within its configured observation period.

Renovate will rebase this branch once its update has met those checks.

[jimboid]

Ignoring failing pre-commit, will send PR to fix