mirror of
https://github.com/authelia/authelia.git
synced 2026-10-28 09:34:52 +08:00
master
116
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
|
|
b3af55d156 | docs: add license headers to remaining files (#13064) | ||
|
|
fef15f6b8a |
ci: add shellcheck linting (#11782)
Introduce ShellCheck as an enforced lint step so shell scripts are held
to the same strictness as the Go, YAML, and JavaScript surfaces, and
take the opportunity to normalize the repository's shell hygiene while
the tooling is being put in place. A new .shellcheckrc keeps the default
ShellCheck rule set enabled and opts in to require-variable-braces
(SC2250) to enforce the ${VAR} style repo-wide. The tool is wired into
the local pre-commit path via lefthook (with file_types filtering on
text/x-shellscript and text/x-sh so only libmagic-detected shell files
are passed in, and --format=gcc so the output is clickable from the
IDE), into the Buildkite 🐕🦺 Linting step via a new shellcheck
subcommand on .buildkite/steps/lint.sh that discovers every tracked
shell script through git ls-files and a shebang scan, and into reviewdog
via .reviewdog.yml using the same lint.sh subcommand with --format=gcc
so findings annotate pull requests inline.
Along with the wiring this commit clears the ShellCheck baseline against
the current tree. Every bare $VAR reference was rewritten to ${VAR} so
SC2250 lands on an already-clean repository. Unquoted expansions and
command substitutions (SC2086 and SC2046) were quoted across the
Buildkite steps, hooks, pipeline.sh, setup.sh, redis and samba
entrypoints, and grypescans.sh; read calls gained -r (SC2162), cd calls
got || exit guards (SC2164), declare-and-assign in bootstrap.sh was
split to preserve return values (SC2155), indirect $? checks in setup.sh
were rewritten as if ! cmd (SC2181), repeated redirect blocks in samba
init.sh were collapsed into { ... } > file (SC2129), an unused LDOMAIN
variable was removed (SC2034), the runtime source in healthcheck.sh was
marked with a # shellcheck source=/dev/null directive (SC1091), and
framework-consumed variables in authelia-fb-rc.d gained a file-level
disable directive. Two suite entrypoints that used bash-only syntax
under #!/bin/sh had their shebangs bumped to #!/usr/bin/env bash, two
dev-host gen.sh scripts had their /bin/bash absolute paths swapped for
/usr/bin/env bash so they pick up Homebrew bash on developer machines,
and grypescans.sh had its split-string grypeCmd rewritten as a proper
bash array so the intentional word-splitting no longer needed an inline
disable.
---------
Signed-off-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
|
||
|
|
675d8b7d00 |
fix(middlewares): stricter domain matching (#11685)
This ensures domains are matched more strictly when determining the external URL of Authelia. |
||
|
|
6b2a121ffe |
build(deps): update traefik docker tag to v3.6.13 (#11682)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://redirect.github.com/containous/traefik) | patch | `v3.6.12` → `v3.6.13` | --- ### Release Notes <details> <summary>containous/traefik (traefik)</summary> ### [`v3.6.13`](https://redirect.github.com/traefik/traefik/releases/tag/v3.6.13) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.13...v3.6.13) **Bug fixes:** - **\[middleware]** Bump github.com/klauspost/compress v1.18.4 and fix TestNegotiation ([#​12937](https://redirect.github.com/traefik/traefik/pull/12937) [@​thaJeztah](https://redirect.github.com/thaJeztah)) **Documentation:** - **\[docker]** Fix docker-compose.yaml location in Docker setup page ([#​12860](https://redirect.github.com/traefik/traefik/pull/12860) [@​ScottA38](https://redirect.github.com/ScottA38)) - **\[docker, consul, ecs, k8s]** Fix documentation on how to restrict the scope of service discovery ([#​12645](https://redirect.github.com/traefik/traefik/pull/12645) [@​mloiseleur](https://redirect.github.com/mloiseleur)) - **\[k8s/ingress-nginx]** Add OVHcloud (OpenStack Octavia) to Cloud-Specific IP Management ([#​12759](https://redirect.github.com/traefik/traefik/pull/12759) [@​antonin-a](https://redirect.github.com/antonin-a)) - **\[k8s/ingress-nginx]** Clarify IngressClass selection logic ([#​12926](https://redirect.github.com/traefik/traefik/pull/12926) [@​kevinpollet](https://redirect.github.com/kevinpollet)) - Add missing redirects for Getting started ([#​12886](https://redirect.github.com/traefik/traefik/pull/12886) [@​nmengin](https://redirect.github.com/nmengin)) - Add redirects for deleted pages ([#​12889](https://redirect.github.com/traefik/traefik/pull/12889) [@​sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - Fix default value of http.sanitizePath ([#​12904](https://redirect.github.com/traefik/traefik/pull/12904) [@​iTob191](https://redirect.github.com/iTob191)) ### [`v3.6.13`](https://redirect.github.com/traefik/traefik/releases/tag/v3.6.13) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.12...v3.6.13) **Bug fixes:** - **\[middleware]** Bump github.com/klauspost/compress v1.18.4 and fix TestNegotiation ([#​12937](https://redirect.github.com/traefik/traefik/pull/12937) [@​thaJeztah](https://redirect.github.com/thaJeztah)) **Documentation:** - **\[docker]** Fix docker-compose.yaml location in Docker setup page ([#​12860](https://redirect.github.com/traefik/traefik/pull/12860) [@​ScottA38](https://redirect.github.com/ScottA38)) - **\[docker, consul, ecs, k8s]** Fix documentation on how to restrict the scope of service discovery ([#​12645](https://redirect.github.com/traefik/traefik/pull/12645) [@​mloiseleur](https://redirect.github.com/mloiseleur)) - **\[k8s/ingress-nginx]** Add OVHcloud (OpenStack Octavia) to Cloud-Specific IP Management ([#​12759](https://redirect.github.com/traefik/traefik/pull/12759) [@​antonin-a](https://redirect.github.com/antonin-a)) - **\[k8s/ingress-nginx]** Clarify IngressClass selection logic ([#​12926](https://redirect.github.com/traefik/traefik/pull/12926) [@​kevinpollet](https://redirect.github.com/kevinpollet)) - Add missing redirects for Getting started ([#​12886](https://redirect.github.com/traefik/traefik/pull/12886) [@​nmengin](https://redirect.github.com/nmengin)) - Add redirects for deleted pages ([#​12889](https://redirect.github.com/traefik/traefik/pull/12889) [@​sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - Fix default value of http.sanitizePath ([#​12904](https://redirect.github.com/traefik/traefik/pull/12904) [@​iTob191](https://redirect.github.com/iTob191)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ0YXJnZXRCcmFuY2giOiJtYXN0ZXIiLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiZG9ja2VyIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
8a7b642dd7 |
docs: misc updates to various proxy guidance (#11527)
Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
|
1d34265000 |
build(deps): update traefik docker tag to v3.6.12 (#11567)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://redirect.github.com/containous/traefik) | patch | `v3.6.11` → `v3.6.12` | --- ### Release Notes <details> <summary>containous/traefik (traefik)</summary> ### [`v3.6.12`](https://redirect.github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v3612-2026-03-26) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.12...v3.6.12) [All Commits](https://redirect.github.com/traefik/traefik/compare/v3.6.11...v3.6.12) **Bug fixes:** - **\[k8s/ingress-nginx]** Fix auth-response-headers whitespace trimming in ingress-nginx provider ([#​12856](https://redirect.github.com/traefik/traefik/pull/12856) [@​mmatur](https://redirect.github.com/mmatur)) - **\[acme]** Bump github.com/go-acme/lego/v4 to v4.33.0 ([#​12840](https://redirect.github.com/traefik/traefik/pull/12840) [@​ldez](https://redirect.github.com/ldez)) - **\[server]** Fix comment and unnecessary allocation in withRoutingPath ([#​12880](https://redirect.github.com/traefik/traefik/pull/12880) [@​boinger](https://redirect.github.com/boinger)) - **\[server, tcp]** Fix postgres STARTTLS with TLS termination ([#​12847](https://redirect.github.com/traefik/traefik/pull/12847) [@​mmatur](https://redirect.github.com/mmatur)) - **\[api]** Fix allow colons and tildes in api.basePath validation ([#​12857](https://redirect.github.com/traefik/traefik/pull/12857) [@​mmatur](https://redirect.github.com/mmatur)) - **\[grpc]** Bump google.golang.org/grpc to v1.79.3 ([#​12845](https://redirect.github.com/traefik/traefik/pull/12845) [@​mmatur](https://redirect.github.com/mmatur)) - **\[middleware, authentication]** Prevent duplicate user headers in basic and digest auth middleware ([#​12851](https://redirect.github.com/traefik/traefik/pull/12851) [@​juliens](https://redirect.github.com/juliens)) - **\[middleware]** Fix StripPrefix and StripPrefixRegex to slice the prefix using encoded prefix length ([#​12863](https://redirect.github.com/traefik/traefik/pull/12863) [@​gndz07](https://redirect.github.com/gndz07)) **Documentation:** - **\[acme]** Clarify CNAME explanation in ACME Documentation ([#​12818](https://redirect.github.com/traefik/traefik/pull/12818) [@​sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - **\[k8s/ingress-nginx]** Add ingress-nginx migration banner on documentation pages ([#​12872](https://redirect.github.com/traefik/traefik/pull/12872) [@​gndz07](https://redirect.github.com/gndz07)) - **\[k8s/ingress-nginx]** Clarify that NGINX Ingress watchNamespace watches only one namespace ([#​12873](https://redirect.github.com/traefik/traefik/pull/12873) [@​parkerfath](https://redirect.github.com/parkerfath)) - **\[k8s/ingress]** Improve Kubernetes Ingress Routing Documentation ([#​12876](https://redirect.github.com/traefik/traefik/pull/12876) [@​sheddy-traefik](https://redirect.github.com/sheddy-traefik)) ### [`v3.6.12`](https://redirect.github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v3612-2026-03-26) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.11...v3.6.12) [All Commits](https://redirect.github.com/traefik/traefik/compare/v3.6.11...v3.6.12) **Bug fixes:** - **\[k8s/ingress-nginx]** Fix auth-response-headers whitespace trimming in ingress-nginx provider ([#​12856](https://redirect.github.com/traefik/traefik/pull/12856) [@​mmatur](https://redirect.github.com/mmatur)) - **\[acme]** Bump github.com/go-acme/lego/v4 to v4.33.0 ([#​12840](https://redirect.github.com/traefik/traefik/pull/12840) [@​ldez](https://redirect.github.com/ldez)) - **\[server]** Fix comment and unnecessary allocation in withRoutingPath ([#​12880](https://redirect.github.com/traefik/traefik/pull/12880) [@​boinger](https://redirect.github.com/boinger)) - **\[server, tcp]** Fix postgres STARTTLS with TLS termination ([#​12847](https://redirect.github.com/traefik/traefik/pull/12847) [@​mmatur](https://redirect.github.com/mmatur)) - **\[api]** Fix allow colons and tildes in api.basePath validation ([#​12857](https://redirect.github.com/traefik/traefik/pull/12857) [@​mmatur](https://redirect.github.com/mmatur)) - **\[grpc]** Bump google.golang.org/grpc to v1.79.3 ([#​12845](https://redirect.github.com/traefik/traefik/pull/12845) [@​mmatur](https://redirect.github.com/mmatur)) - **\[middleware, authentication]** Prevent duplicate user headers in basic and digest auth middleware ([#​12851](https://redirect.github.com/traefik/traefik/pull/12851) [@​juliens](https://redirect.github.com/juliens)) - **\[middleware]** Fix StripPrefix and StripPrefixRegex to slice the prefix using encoded prefix length ([#​12863](https://redirect.github.com/traefik/traefik/pull/12863) [@​gndz07](https://redirect.github.com/gndz07)) **Documentation:** - **\[acme]** Clarify CNAME explanation in ACME Documentation ([#​12818](https://redirect.github.com/traefik/traefik/pull/12818) [@​sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - **\[k8s/ingress-nginx]** Add ingress-nginx migration banner on documentation pages ([#​12872](https://redirect.github.com/traefik/traefik/pull/12872) [@​gndz07](https://redirect.github.com/gndz07)) - **\[k8s/ingress-nginx]** Clarify that NGINX Ingress watchNamespace watches only one namespace ([#​12873](https://redirect.github.com/traefik/traefik/pull/12873) [@​parkerfath](https://redirect.github.com/parkerfath)) - **\[k8s/ingress]** Improve Kubernetes Ingress Routing Documentation ([#​12876](https://redirect.github.com/traefik/traefik/pull/12876) [@​sheddy-traefik](https://redirect.github.com/sheddy-traefik)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS41IiwidXBkYXRlZEluVmVyIjoiNDMuOTQuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJkb2NrZXIiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com> |
||
|
|
db19cd5795 |
build(deps): update dependencies [security] (#11574)
This updates picomatch and yaml dependencies with vulnerabilities. |
||
|
|
30fe05cabe |
build(deps): update traefik docker tag to v3.6.11 (#11515)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://redirect.github.com/containous/traefik) | patch | `v3.6.10` → `v3.6.11` | --- ### Release Notes <details> <summary>containous/traefik (traefik)</summary> ### [`v3.6.11`](https://redirect.github.com/traefik/traefik/releases/tag/v3.6.11) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.11...v3.6.11) **Bug fixes:** - **\[logs, otel]** Add OTel-conformant trace context attributes to access logs ([#​12801](https://redirect.github.com/traefik/traefik/pull/12801) [@​mmatur](https://redirect.github.com/mmatur)) - **\[k8s/gatewayapi]** Fix incorrect hostname matching between listener and route ([#​12599](https://redirect.github.com/traefik/traefik/pull/12599) [@​TheColorman](https://redirect.github.com/TheColorman)) - **\[k8s/ingress]** Fix ingress router's rule ([#​12808](https://redirect.github.com/traefik/traefik/pull/12808) [@​gndz07](https://redirect.github.com/gndz07)) - **\[webui]** Remove AGPL license in code ([#​12799](https://redirect.github.com/traefik/traefik/pull/12799) [@​Desel72](https://redirect.github.com/Desel72)) - **\[k8s/ingress-nginx]** Fix proxy-ssl-verify annotation ([#​12825](https://redirect.github.com/traefik/traefik/pull/12825) [@​LBF38](https://redirect.github.com/LBF38)) - **\[http]** Add maxResponseBodySize configuration on HTTP provider ([#​12788](https://redirect.github.com/traefik/traefik/pull/12788) [@​gndz07](https://redirect.github.com/gndz07)) - **\[tls]** Support fragmented TLS client hello ([#​12787](https://redirect.github.com/traefik/traefik/pull/12787) [@​rtribotte](https://redirect.github.com/rtribotte)) - **\[middleware, authentication]** Make basic auth check timing constant ([#​12803](https://redirect.github.com/traefik/traefik/pull/12803) [@​rtribotte](https://redirect.github.com/rtribotte)) **Documentation:** - **\[k8s]** Improve the multi tenant security note ([#​12822](https://redirect.github.com/traefik/traefik/pull/12822) [@​nmengin](https://redirect.github.com/nmengin)) - Fix unnecessary escaping of pipe in regexp examples ([#​12784](https://redirect.github.com/traefik/traefik/pull/12784) [@​diegmonti](https://redirect.github.com/diegmonti)) - Add vulnerability submission quality guidelines ([#​12807](https://redirect.github.com/traefik/traefik/pull/12807) [@​emilevauge](https://redirect.github.com/emilevauge)) - Fix start up message format ([#​12806](https://redirect.github.com/traefik/traefik/pull/12806) [@​mloiseleur](https://redirect.github.com/mloiseleur)) - Remove unsupported servers\[n].address from TCP label examples ([#​12817](https://redirect.github.com/traefik/traefik/pull/12817) [@​sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - Bump mkdocs-traefiklabs to use consent mode ([#​12804](https://redirect.github.com/traefik/traefik/pull/12804) [@​darkweaver87](https://redirect.github.com/darkweaver87)) ### [`v3.6.11`](https://redirect.github.com/traefik/traefik/releases/tag/v3.6.11) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.10...v3.6.11) **Bug fixes:** - **\[logs, otel]** Add OTel-conformant trace context attributes to access logs ([#​12801](https://redirect.github.com/traefik/traefik/pull/12801) [@​mmatur](https://redirect.github.com/mmatur)) - **\[k8s/gatewayapi]** Fix incorrect hostname matching between listener and route ([#​12599](https://redirect.github.com/traefik/traefik/pull/12599) [@​TheColorman](https://redirect.github.com/TheColorman)) - **\[k8s/ingress]** Fix ingress router's rule ([#​12808](https://redirect.github.com/traefik/traefik/pull/12808) [@​gndz07](https://redirect.github.com/gndz07)) - **\[webui]** Remove AGPL license in code ([#​12799](https://redirect.github.com/traefik/traefik/pull/12799) [@​Desel72](https://redirect.github.com/Desel72)) - **\[k8s/ingress-nginx]** Fix proxy-ssl-verify annotation ([#​12825](https://redirect.github.com/traefik/traefik/pull/12825) [@​LBF38](https://redirect.github.com/LBF38)) - **\[http]** Add maxResponseBodySize configuration on HTTP provider ([#​12788](https://redirect.github.com/traefik/traefik/pull/12788) [@​gndz07](https://redirect.github.com/gndz07)) - **\[tls]** Support fragmented TLS client hello ([#​12787](https://redirect.github.com/traefik/traefik/pull/12787) [@​rtribotte](https://redirect.github.com/rtribotte)) - **\[middleware, authentication]** Make basic auth check timing constant ([#​12803](https://redirect.github.com/traefik/traefik/pull/12803) [@​rtribotte](https://redirect.github.com/rtribotte)) **Documentation:** - **\[k8s]** Improve the multi tenant security note ([#​12822](https://redirect.github.com/traefik/traefik/pull/12822) [@​nmengin](https://redirect.github.com/nmengin)) - Fix unnecessary escaping of pipe in regexp examples ([#​12784](https://redirect.github.com/traefik/traefik/pull/12784) [@​diegmonti](https://redirect.github.com/diegmonti)) - Add vulnerability submission quality guidelines ([#​12807](https://redirect.github.com/traefik/traefik/pull/12807) [@​emilevauge](https://redirect.github.com/emilevauge)) - Fix start up message format ([#​12806](https://redirect.github.com/traefik/traefik/pull/12806) [@​mloiseleur](https://redirect.github.com/mloiseleur)) - Remove unsupported servers\[n].address from TCP label examples ([#​12817](https://redirect.github.com/traefik/traefik/pull/12817) [@​sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - Bump mkdocs-traefiklabs to use consent mode ([#​12804](https://redirect.github.com/traefik/traefik/pull/12804) [@​darkweaver87](https://redirect.github.com/darkweaver87)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJkb2NrZXIiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
50c67281e4 |
build(deps): update traefik docker tag to v3.6.10 (#11396)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://redirect.github.com/containous/traefik) | patch | `v3.6.9` → `v3.6.10` | --- ### Release Notes <details> <summary>containous/traefik (traefik)</summary> ### [`v3.6.10`](https://redirect.github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v3610-2026-03-06) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.10...v3.6.10) [All Commits](https://redirect.github.com/traefik/traefik/compare/v3.6.9...v3.6.10) **Bug fixes:** - **\[docker]** Bump Docker and OpenTelemetry dependencies ([#​12761](https://redirect.github.com/traefik/traefik/pull/12761) by [mmatur](https://redirect.github.com/mmatur)) - **\[fastproxy]** Bump github.com/valyala/fasthttp to v1.69.0 ([#​12763](https://redirect.github.com/traefik/traefik/pull/12763) by [kevinpollet](https://redirect.github.com/kevinpollet)) - **\[healthcheck, grpc]** Remove path parsing with grpc healthcheck ([#​12760](https://redirect.github.com/traefik/traefik/pull/12760) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[k8s/gatewayapi]** Fix Gateway API router's rules ([#​12753](https://redirect.github.com/traefik/traefik/pull/12753) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[middleware]** Fix HasSecureHeadersDefined returning false when stsSeconds is 0 ([#​12684](https://redirect.github.com/traefik/traefik/pull/12684) by [veeceey](https://redirect.github.com/veeceey)) - **\[otel]** Bump go.opentelemetry.io/otel dependencies ([#​12754](https://redirect.github.com/traefik/traefik/pull/12754) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[server]** Bump golang.org/x/net to v0.51.0 ([#​12756](https://redirect.github.com/traefik/traefik/pull/12756) by [kevinpollet](https://redirect.github.com/kevinpollet)) - **\[webui]** Fix priority display in dashboard and ACME bypass redirect ([#​12740](https://redirect.github.com/traefik/traefik/pull/12740) by [mmatur](https://redirect.github.com/mmatur)) - **\[webui]** Fix basePath validation for dashboard template ([#​12729](https://redirect.github.com/traefik/traefik/pull/12729) by [gndz07](https://redirect.github.com/gndz07)) **Documentation:** - **\[middleware]** Correct documentation for Digest auth ([#​12651](https://redirect.github.com/traefik/traefik/pull/12651) by [Zash](https://redirect.github.com/Zash)) - Add missing `.http` to TOML table names ([#​12713](https://redirect.github.com/traefik/traefik/pull/12713) by [Darsstar](https://redirect.github.com/Darsstar)) - Fix incorrect TOML example in entrypoints docs ([#​12711](https://redirect.github.com/traefik/traefik/pull/12711) by [mfmfuyu](https://redirect.github.com/mfmfuyu)) - Fix API basepath option documentation ([#​12744](https://redirect.github.com/traefik/traefik/pull/12744) by [nmengin](https://redirect.github.com/nmengin)) ### [`v3.6.10`](https://redirect.github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v3610-2026-03-06) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.9...v3.6.10) [All Commits](https://redirect.github.com/traefik/traefik/compare/v3.6.9...v3.6.10) **Bug fixes:** - **\[docker]** Bump Docker and OpenTelemetry dependencies ([#​12761](https://redirect.github.com/traefik/traefik/pull/12761) by [mmatur](https://redirect.github.com/mmatur)) - **\[fastproxy]** Bump github.com/valyala/fasthttp to v1.69.0 ([#​12763](https://redirect.github.com/traefik/traefik/pull/12763) by [kevinpollet](https://redirect.github.com/kevinpollet)) - **\[healthcheck, grpc]** Remove path parsing with grpc healthcheck ([#​12760](https://redirect.github.com/traefik/traefik/pull/12760) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[k8s/gatewayapi]** Fix Gateway API router's rules ([#​12753](https://redirect.github.com/traefik/traefik/pull/12753) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[middleware]** Fix HasSecureHeadersDefined returning false when stsSeconds is 0 ([#​12684](https://redirect.github.com/traefik/traefik/pull/12684) by [veeceey](https://redirect.github.com/veeceey)) - **\[otel]** Bump go.opentelemetry.io/otel dependencies ([#​12754](https://redirect.github.com/traefik/traefik/pull/12754) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[server]** Bump golang.org/x/net to v0.51.0 ([#​12756](https://redirect.github.com/traefik/traefik/pull/12756) by [kevinpollet](https://redirect.github.com/kevinpollet)) - **\[webui]** Fix priority display in dashboard and ACME bypass redirect ([#​12740](https://redirect.github.com/traefik/traefik/pull/12740) by [mmatur](https://redirect.github.com/mmatur)) - **\[webui]** Fix basePath validation for dashboard template ([#​12729](https://redirect.github.com/traefik/traefik/pull/12729) by [gndz07](https://redirect.github.com/gndz07)) **Documentation:** - **\[middleware]** Correct documentation for Digest auth ([#​12651](https://redirect.github.com/traefik/traefik/pull/12651) by [Zash](https://redirect.github.com/Zash)) - Add missing `.http` to TOML table names ([#​12713](https://redirect.github.com/traefik/traefik/pull/12713) by [Darsstar](https://redirect.github.com/Darsstar)) - Fix incorrect TOML example in entrypoints docs ([#​12711](https://redirect.github.com/traefik/traefik/pull/12711) by [mfmfuyu](https://redirect.github.com/mfmfuyu)) - Fix API basepath option documentation ([#​12744](https://redirect.github.com/traefik/traefik/pull/12744) by [nmengin](https://redirect.github.com/nmengin)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4wIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJkb2NrZXIiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
68d3880629 | refactor: generate (#11349) | ||
|
|
639f38a074 |
build(deps): update traefik docker tag to v3.6.9 (#11314)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://redirect.github.com/containous/traefik) | patch | `v3.6.8` → `v3.6.9` | --- ### Release Notes <details> <summary>containous/traefik (traefik)</summary> ### [`v3.6.9`](https://redirect.github.com/traefik/traefik/releases/tag/v3.6.9) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.9...v3.6.9) **Bug fixes:** - **\[acme]** Bump github.com/go-acme/lego/v4 to v4.32.0 ([#​12702](https://redirect.github.com/traefik/traefik/pull/12702) by [ldez](https://redirect.github.com/ldez)) - **\[middleware]** Fix case sensitivity on x-forwarded headers for Connection ([#​12690](https://redirect.github.com/traefik/traefik/pull/12690) by [LBF38](https://redirect.github.com/LBF38)) - **\[middleware, authentication]** Handle empty/missing User-Agent header ([#​12545](https://redirect.github.com/traefik/traefik/pull/12545) by [a-stangl](https://redirect.github.com/a-stangl)) - **\[middleware, authentication]** Add maxResponseBodySize configuration to forwardAuth middleware ([#​12694](https://redirect.github.com/traefik/traefik/pull/12694) by [gndz07](https://redirect.github.com/gndz07)) - **\[server]** Fix TLS handshake error handling ([#​12692](https://redirect.github.com/traefik/traefik/pull/12692) by [juliens](https://redirect.github.com/juliens)) **Documentation:** - **\[docker]** Update docker in-depth setup guide ([#​12682](https://redirect.github.com/traefik/traefik/pull/12682) by [mdevino](https://redirect.github.com/mdevino)) - **\[k8s]** Make labelSelector option casing more consistent ([#​12658](https://redirect.github.com/traefik/traefik/pull/12658) by [holysoles](https://redirect.github.com/holysoles)) - **\[k8s/ingress-nginx]** Add temporary note to advertise the incoming NGINX annotations ([#​12699](https://redirect.github.com/traefik/traefik/pull/12699) by [nmengin](https://redirect.github.com/nmengin)) - Increased content width in documentation ([#​12632](https://redirect.github.com/traefik/traefik/pull/12632) by [tobiasge](https://redirect.github.com/tobiasge)) - Correct encoded characters allowance in entrypoints.md ([#​12679](https://redirect.github.com/traefik/traefik/pull/12679) by [Apflkuacha](https://redirect.github.com/Apflkuacha)) ### [`v3.6.9`](https://redirect.github.com/traefik/traefik/releases/tag/v3.6.9) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.8...v3.6.9) **Bug fixes:** - **\[acme]** Bump github.com/go-acme/lego/v4 to v4.32.0 ([#​12702](https://redirect.github.com/traefik/traefik/pull/12702) by [ldez](https://redirect.github.com/ldez)) - **\[middleware]** Fix case sensitivity on x-forwarded headers for Connection ([#​12690](https://redirect.github.com/traefik/traefik/pull/12690) by [LBF38](https://redirect.github.com/LBF38)) - **\[middleware, authentication]** Handle empty/missing User-Agent header ([#​12545](https://redirect.github.com/traefik/traefik/pull/12545) by [a-stangl](https://redirect.github.com/a-stangl)) - **\[middleware, authentication]** Add maxResponseBodySize configuration to forwardAuth middleware ([#​12694](https://redirect.github.com/traefik/traefik/pull/12694) by [gndz07](https://redirect.github.com/gndz07)) - **\[server]** Fix TLS handshake error handling ([#​12692](https://redirect.github.com/traefik/traefik/pull/12692) by [juliens](https://redirect.github.com/juliens)) **Documentation:** - **\[docker]** Update docker in-depth setup guide ([#​12682](https://redirect.github.com/traefik/traefik/pull/12682) by [mdevino](https://redirect.github.com/mdevino)) - **\[k8s]** Make labelSelector option casing more consistent ([#​12658](https://redirect.github.com/traefik/traefik/pull/12658) by [holysoles](https://redirect.github.com/holysoles)) - **\[k8s/ingress-nginx]** Add temporary note to advertise the incoming NGINX annotations ([#​12699](https://redirect.github.com/traefik/traefik/pull/12699) by [nmengin](https://redirect.github.com/nmengin)) - Increased content width in documentation ([#​12632](https://redirect.github.com/traefik/traefik/pull/12632) by [tobiasge](https://redirect.github.com/tobiasge)) - Correct encoded characters allowance in entrypoints.md ([#​12679](https://redirect.github.com/traefik/traefik/pull/12679) by [Apflkuacha](https://redirect.github.com/Apflkuacha)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNi41IiwidXBkYXRlZEluVmVyIjoiNDMuMjYuNSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJkb2NrZXIiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
52669a5de0 |
build(deps): update traefik docker tag to v3.6.8 (#11289)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://redirect.github.com/containous/traefik) | patch | `v3.6.7` → `v3.6.8` | --- ### Release Notes <details> <summary>containous/traefik (traefik)</summary> ### [`v3.6.8`](https://redirect.github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v368-2026-02-11) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.8...v3.6.8) [All Commits](https://redirect.github.com/traefik/traefik/compare/v3.6.7...v3.6.8) **Bug fixes:** - **\[acme]** Remove invalid private key in log ([#​12574](https://redirect.github.com/traefik/traefik/pull/12574) by [juliens](https://redirect.github.com/juliens)) - **\[acme]** Alter TLS renewal period ([#​12479](https://redirect.github.com/traefik/traefik/pull/12479) by [LtHummus](https://redirect.github.com/LtHummus)) - **\[healthcheck]** Reject absolute URL in healthcheck path configuration ([#​12653](https://redirect.github.com/traefik/traefik/pull/12653) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[http3]** Bump github.com/quic-go/quic-go to v0.59.0 ([#​12553](https://redirect.github.com/traefik/traefik/pull/12553) by [jnoordsij](https://redirect.github.com/jnoordsij)) - **\[metrics,tracing,accesslogs]** Fix ObservabilityConfig SetDefaults ([#​12636](https://redirect.github.com/traefik/traefik/pull/12636) by [mmatur](https://redirect.github.com/mmatur)) - **\[server]** Remove conn deadline after STARTTLS negociation ([#​12639](https://redirect.github.com/traefik/traefik/pull/12639) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[tls]** Fix verifyServerCertMatchesURI function behavior ([#​12575](https://redirect.github.com/traefik/traefik/pull/12575) by [kevinpollet](https://redirect.github.com/kevinpollet)) - **\[tracing,otel]** Use ParentBased sampler to respect parent span sampling decision ([#​12403](https://redirect.github.com/traefik/traefik/pull/12403) by [xe-leon](https://redirect.github.com/xe-leon)) - **\[webui]** Use url.Parse to validate X-Forwarded-Prefix value ([#​12643](https://redirect.github.com/traefik/traefik/pull/12643) by [kevinpollet](https://redirect.github.com/kevinpollet)) - **\[healthcheck]** Validate healthcheck path configuration ([#​12642](https://redirect.github.com/containous/traefik/issues/12642) by [@​rtribotte](https://redirect.github.com/rtribotte)) - **\[tls, server]** Cap TLS record length to RFC 8446 limit in ClientHello peeking ([#​12638](https://redirect.github.com/containous/traefik/issues/12638) by [@​mmatur](https://redirect.github.com/mmatur)) - **\[service]** Avoid recursion with services ([#​12591](https://redirect.github.com/traefik/traefik/pull/12591) by [juliens](https://redirect.github.com/juliens)) - **\[webui]** Bump dependencies of documentation and webui ([#​12581](https://redirect.github.com/traefik/traefik/pull/12581) by [gndz07](https://redirect.github.com/gndz07)) **Documentation:** - **\[k8s]** Fix kubernetes.md with correct http redirections ([#​12603](https://redirect.github.com/traefik/traefik/pull/12603) by [MartenM](https://redirect.github.com/MartenM)) - **\[middleware,k8s/crd]** Fix the errors middleware's document for Kubernetes CRD ([#​12600](https://redirect.github.com/traefik/traefik/pull/12600) by [yuito-it](https://redirect.github.com/yuito-it)) - **\[tls]** Clarify SNI selection ([#​12482](https://redirect.github.com/traefik/traefik/pull/12482) by [AnuragEkkati](https://redirect.github.com/AnuragEkkati)) - Fix typo on JWT documentation ([#​12616](https://redirect.github.com/traefik/traefik/pull/12616) by [mdevino](https://redirect.github.com/mdevino)) - Add [@​gndz07](https://redirect.github.com/gndz07) as a current maintainer ([#​12594](https://redirect.github.com/traefik/traefik/pull/12594) by [emilevauge](https://redirect.github.com/emilevauge)) - Remove extraneous dots in migration guide ([#​12571](https://redirect.github.com/traefik/traefik/pull/12571) by [dathbe](https://redirect.github.com/dathbe)) - Document Path matcher placeholder removal in v3 migration guide ([#​12570](https://redirect.github.com/traefik/traefik/pull/12570) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - Improve Service Reference page ([#​12541](https://redirect.github.com/traefik/traefik/pull/12541) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - Document negative priority support for routers ([#​12505](https://redirect.github.com/traefik/traefik/pull/12505) by [understood-the-assignment](https://redirect.github.com/understood-the-assignment)) - Improve the structure of the routing reference pages ([#​12429](https://redirect.github.com/traefik/traefik/pull/12429) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - Clean Up Menu Entries & Update Expose Overview ([#​12405](https://redirect.github.com/traefik/traefik/pull/12405) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - Split Expose User Guides & Add Multi-Layer Routing Section ([#​12238](https://redirect.github.com/traefik/traefik/pull/12238) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - Remove extra dots in migration guide ([#​12573](https://redirect.github.com/traefik/traefik/pull/12573) by [rtribotte](https://redirect.github.com/rtribotte)) **Misc:** - Merge v2.11 into v3.6 ([#​12652](https://redirect.github.com/traefik/traefik/pull/12652) by [mmatur](https://redirect.github.com/mmatur)) - Merge v2.11 into v3.6 ([#​12644](https://redirect.github.com/traefik/traefik/pull/12644) by [mmatur](https://redirect.github.com/mmatur)) - Merge branch v2.11 into v3.6 ([#​12617](https://redirect.github.com/traefik/traefik/pull/12617) by [mmatur](https://redirect.github.com/mmatur)) - Merge v2.11 into v3.6 ([#​12605](https://redirect.github.com/traefik/traefik/pull/12605) by [mmatur](https://redirect.github.com/mmatur)) - Merge v2.11 into v3.6 ([#​12601](https://redirect.github.com/traefik/traefik/pull/12601) by [mmatur](https://redirect.github.com/mmatur)) - Merge branch v2.11 into v3.6 ([#​12556](https://redirect.github.com/traefik/traefik/pull/12556) by [mmatur](https://redirect.github.com/mmatur)) ### [`v3.6.8`](https://redirect.github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v368-2026-02-11) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.7...v3.6.8) [All Commits](https://redirect.github.com/traefik/traefik/compare/v3.6.7...v3.6.8) **Bug fixes:** - **\[acme]** Remove invalid private key in log ([#​12574](https://redirect.github.com/traefik/traefik/pull/12574) by [juliens](https://redirect.github.com/juliens)) - **\[acme]** Alter TLS renewal period ([#​12479](https://redirect.github.com/traefik/traefik/pull/12479) by [LtHummus](https://redirect.github.com/LtHummus)) - **\[healthcheck]** Reject absolute URL in healthcheck path configuration ([#​12653](https://redirect.github.com/traefik/traefik/pull/12653) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[http3]** Bump github.com/quic-go/quic-go to v0.59.0 ([#​12553](https://redirect.github.com/traefik/traefik/pull/12553) by [jnoordsij](https://redirect.github.com/jnoordsij)) - **\[metrics,tracing,accesslogs]** Fix ObservabilityConfig SetDefaults ([#​12636](https://redirect.github.com/traefik/traefik/pull/12636) by [mmatur](https://redirect.github.com/mmatur)) - **\[server]** Remove conn deadline after STARTTLS negociation ([#​12639](https://redirect.github.com/traefik/traefik/pull/12639) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[tls]** Fix verifyServerCertMatchesURI function behavior ([#​12575](https://redirect.github.com/traefik/traefik/pull/12575) by [kevinpollet](https://redirect.github.com/kevinpollet)) - **\[tracing,otel]** Use ParentBased sampler to respect parent span sampling decision ([#​12403](https://redirect.github.com/traefik/traefik/pull/12403) by [xe-leon](https://redirect.github.com/xe-leon)) - **\[webui]** Use url.Parse to validate X-Forwarded-Prefix value ([#​12643](https://redirect.github.com/traefik/traefik/pull/12643) by [kevinpollet](https://redirect.github.com/kevinpollet)) - **\[healthcheck]** Validate healthcheck path configuration ([#​12642](https://redirect.github.com/containous/traefik/issues/12642) by [@​rtribotte](https://redirect.github.com/rtribotte)) - **\[tls, server]** Cap TLS record length to RFC 8446 limit in ClientHello peeking ([#​12638](https://redirect.github.com/containous/traefik/issues/12638) by [@​mmatur](https://redirect.github.com/mmatur)) - **\[service]** Avoid recursion with services ([#​12591](https://redirect.github.com/traefik/traefik/pull/12591) by [juliens](https://redirect.github.com/juliens)) - **\[webui]** Bump dependencies of documentation and webui ([#​12581](https://redirect.github.com/traefik/traefik/pull/12581) by [gndz07](https://redirect.github.com/gndz07)) **Documentation:** - **\[k8s]** Fix kubernetes.md with correct http redirections ([#​12603](https://redirect.github.com/traefik/traefik/pull/12603) by [MartenM](https://redirect.github.com/MartenM)) - **\[middleware,k8s/crd]** Fix the errors middleware's document for Kubernetes CRD ([#​12600](https://redirect.github.com/traefik/traefik/pull/12600) by [yuito-it](https://redirect.github.com/yuito-it)) - **\[tls]** Clarify SNI selection ([#​12482](https://redirect.github.com/traefik/traefik/pull/12482) by [AnuragEkkati](https://redirect.github.com/AnuragEkkati)) - Fix typo on JWT documentation ([#​12616](https://redirect.github.com/traefik/traefik/pull/12616) by [mdevino](https://redirect.github.com/mdevino)) - Add [@​gndz07](https://redirect.github.com/gndz07) as a current maintainer ([#​12594](https://redirect.github.com/traefik/traefik/pull/12594) by [emilevauge](https://redirect.github.com/emilevauge)) - Remove extraneous dots in migration guide ([#​12571](https://redirect.github.com/traefik/traefik/pull/12571) by [dathbe](https://redirect.github.com/dathbe)) - Document Path matcher placeholder removal in v3 migration guide ([#​12570](https://redirect.github.com/traefik/traefik/pull/12570) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - Improve Service Reference page ([#​12541](https://redirect.github.com/traefik/traefik/pull/12541) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - Document negative priority support for routers ([#​12505](https://redirect.github.com/traefik/traefik/pull/12505) by [understood-the-assignment](https://redirect.github.com/understood-the-assignment)) - Improve the structure of the routing reference pages ([#​12429](https://redirect.github.com/traefik/traefik/pull/12429) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - Clean Up Menu Entries & Update Expose Overview ([#​12405](https://redirect.github.com/traefik/traefik/pull/12405) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - Split Expose User Guides & Add Multi-Layer Routing Section ([#​12238](https://redirect.github.com/traefik/traefik/pull/12238) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - Remove extra dots in migration guide ([#​12573](https://redirect.github.com/traefik/traefik/pull/12573) by [rtribotte](https://redirect.github.com/rtribotte)) **Misc:** - Merge v2.11 into v3.6 ([#​12652](https://redirect.github.com/traefik/traefik/pull/12652) by [mmatur](https://redirect.github.com/mmatur)) - Merge v2.11 into v3.6 ([#​12644](https://redirect.github.com/traefik/traefik/pull/12644) by [mmatur](https://redirect.github.com/mmatur)) - Merge branch v2.11 into v3.6 ([#​12617](https://redirect.github.com/traefik/traefik/pull/12617) by [mmatur](https://redirect.github.com/mmatur)) - Merge v2.11 into v3.6 ([#​12605](https://redirect.github.com/traefik/traefik/pull/12605) by [mmatur](https://redirect.github.com/mmatur)) - Merge v2.11 into v3.6 ([#​12601](https://redirect.github.com/traefik/traefik/pull/12601) by [mmatur](https://redirect.github.com/mmatur)) - Merge branch v2.11 into v3.6 ([#​12556](https://redirect.github.com/traefik/traefik/pull/12556) by [mmatur](https://redirect.github.com/mmatur)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNi41IiwidXBkYXRlZEluVmVyIjoiNDMuMjYuNSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJkb2NrZXIiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
41e29ad34a |
docs: update hash (#9867)
Updates the example hash in the examples. Signed-off-by: Christian Franzl <christian@franzl.email> Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com> |
||
|
|
6032626f9e |
build(deps): update traefik docker tag to v3.6.7 (#11074)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://redirect.github.com/containous/traefik) | patch | `v3.6.6` → `v3.6.7` | --- ### Release Notes <details> <summary>containous/traefik (traefik)</summary> ### [`v3.6.7`](https://redirect.github.com/traefik/traefik/releases/tag/v3.6.7) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.7...v3.6.7) **Breaking Change:** Please read the [migration guide](https://doc.traefik.io/traefik/v3.6/migrate/v3/#v367). **Bug fixes:** - **\[acme]** Bump github.com/go-acme/lego/v4 to v4.31.0 ([#​12529](https://redirect.github.com/traefik/traefik/pull/12529) by [ldez](https://redirect.github.com/ldez)) - **\[acme]** Add missing renew options ([#​12467](https://redirect.github.com/traefik/traefik/pull/12467) by [ldez](https://redirect.github.com/ldez)) - **\[acme]** Replace hardcoded references to LetsEncrypt in log messages ([#​12464](https://redirect.github.com/traefik/traefik/pull/12464) by [schildbach](https://redirect.github.com/schildbach)) - **\[k8s/ingress-nginx]** Fix use-regex nginx annotation ([#​12531](https://redirect.github.com/traefik/traefik/pull/12531) by [LBF38](https://redirect.github.com/LBF38)) - **\[k8s/ingress-nginx]** Prevent Ingress Nginx provider http router to attach to an entrypoint with TLS ([#​12528](https://redirect.github.com/traefik/traefik/pull/12528) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[k8s/ingress]** Fix panic for empty defaultBackend and defaultBackend without resources ([#​12509](https://redirect.github.com/traefik/traefik/pull/12509) by [gndz07](https://redirect.github.com/gndz07)) - **\[k8s]** Fix condition used for serving and fenced endpoints ([#​12521](https://redirect.github.com/traefik/traefik/pull/12521) by [LBF38](https://redirect.github.com/LBF38)) - **\[webui]** Validate X-Forwarded-Prefix value for dashboard redirect ([#​12514](https://redirect.github.com/traefik/traefik/pull/12514) by [LBF38](https://redirect.github.com/LBF38)) - **\[acme]** Add timeout to ACME-TLS/1 challenge handshake ([#​12516](https://redirect.github.com/traefik/traefik/pull/12516) by [LBF38](https://redirect.github.com/LBF38)) - **\[server]** Make encoded character options opt-in ([#​12540](https://redirect.github.com/traefik/traefik/pull/12540) by [gndz07](https://redirect.github.com/gndz07)) **Documentation:** - **\[docker/swarm]** Update swarm.md traefik version ([#​12508](https://redirect.github.com/traefik/traefik/pull/12508) by [DBouraoui](https://redirect.github.com/DBouraoui)) - **\[k8s/ingress-nginx]** Fix ingress-nginx annotations documentation ([#​12510](https://redirect.github.com/traefik/traefik/pull/12510) by [nmengin](https://redirect.github.com/nmengin)) - **\[k8s]** Fix Kubernetes reference yml file ([#​12406](https://redirect.github.com/traefik/traefik/pull/12406) by [mmatur](https://redirect.github.com/mmatur)) - Fix code copy button positioning ([#​12520](https://redirect.github.com/traefik/traefik/pull/12520) by [AnuragEkkati](https://redirect.github.com/AnuragEkkati)) - Fix typo in kubernetes.md ([#​12515](https://redirect.github.com/traefik/traefik/pull/12515) by [EdwardSalkeld](https://redirect.github.com/EdwardSalkeld)) - Bring back security section on API & Dashboard documentation page ([#​12507](https://redirect.github.com/traefik/traefik/pull/12507) by [gndz07](https://redirect.github.com/gndz07)) - Fix link description in Traefik Proxy documentation ([#​12488](https://redirect.github.com/traefik/traefik/pull/12488) by [schaerfo](https://redirect.github.com/schaerfo)) - Add product comparison matrix and features page ([#​12037](https://redirect.github.com/traefik/traefik/pull/12037) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) **Misc:** - Merge branch v2.11 into v3.6 ([#​12552](https://redirect.github.com/traefik/traefik/pull/12552) by [rtribotte](https://redirect.github.com/rtribotte)) - Merge branch v2.11 into v3.6 ([#​12533](https://redirect.github.com/traefik/traefik/pull/12533) by [mmatur](https://redirect.github.com/mmatur)) - Merge branch v2.11 into v3.6 ([#​12497](https://redirect.github.com/traefik/traefik/pull/12497) by [mmatur](https://redirect.github.com/mmatur)) ### [`v3.6.7`](https://redirect.github.com/traefik/traefik/releases/tag/v3.6.7) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.6...v3.6.7) **Breaking Change:** Please read the [migration guide](https://doc.traefik.io/traefik/v3.6/migrate/v3/#v367). **Bug fixes:** - **\[acme]** Bump github.com/go-acme/lego/v4 to v4.31.0 ([#​12529](https://redirect.github.com/traefik/traefik/pull/12529) by [ldez](https://redirect.github.com/ldez)) - **\[acme]** Add missing renew options ([#​12467](https://redirect.github.com/traefik/traefik/pull/12467) by [ldez](https://redirect.github.com/ldez)) - **\[acme]** Replace hardcoded references to LetsEncrypt in log messages ([#​12464](https://redirect.github.com/traefik/traefik/pull/12464) by [schildbach](https://redirect.github.com/schildbach)) - **\[k8s/ingress-nginx]** Fix use-regex nginx annotation ([#​12531](https://redirect.github.com/traefik/traefik/pull/12531) by [LBF38](https://redirect.github.com/LBF38)) - **\[k8s/ingress-nginx]** Prevent Ingress Nginx provider http router to attach to an entrypoint with TLS ([#​12528](https://redirect.github.com/traefik/traefik/pull/12528) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[k8s/ingress]** Fix panic for empty defaultBackend and defaultBackend without resources ([#​12509](https://redirect.github.com/traefik/traefik/pull/12509) by [gndz07](https://redirect.github.com/gndz07)) - **\[k8s]** Fix condition used for serving and fenced endpoints ([#​12521](https://redirect.github.com/traefik/traefik/pull/12521) by [LBF38](https://redirect.github.com/LBF38)) - **\[webui]** Validate X-Forwarded-Prefix value for dashboard redirect ([#​12514](https://redirect.github.com/traefik/traefik/pull/12514) by [LBF38](https://redirect.github.com/LBF38)) - **\[acme]** Add timeout to ACME-TLS/1 challenge handshake ([#​12516](https://redirect.github.com/traefik/traefik/pull/12516) by [LBF38](https://redirect.github.com/LBF38)) - **\[server]** Make encoded character options opt-in ([#​12540](https://redirect.github.com/traefik/traefik/pull/12540) by [gndz07](https://redirect.github.com/gndz07)) **Documentation:** - **\[docker/swarm]** Update swarm.md traefik version ([#​12508](https://redirect.github.com/traefik/traefik/pull/12508) by [DBouraoui](https://redirect.github.com/DBouraoui)) - **\[k8s/ingress-nginx]** Fix ingress-nginx annotations documentation ([#​12510](https://redirect.github.com/traefik/traefik/pull/12510) by [nmengin](https://redirect.github.com/nmengin)) - **\[k8s]** Fix Kubernetes reference yml file ([#​12406](https://redirect.github.com/traefik/traefik/pull/12406) by [mmatur](https://redirect.github.com/mmatur)) - Fix code copy button positioning ([#​12520](https://redirect.github.com/traefik/traefik/pull/12520) by [AnuragEkkati](https://redirect.github.com/AnuragEkkati)) - Fix typo in kubernetes.md ([#​12515](https://redirect.github.com/traefik/traefik/pull/12515) by [EdwardSalkeld](https://redirect.github.com/EdwardSalkeld)) - Bring back security section on API & Dashboard documentation page ([#​12507](https://redirect.github.com/traefik/traefik/pull/12507) by [gndz07](https://redirect.github.com/gndz07)) - Fix link description in Traefik Proxy documentation ([#​12488](https://redirect.github.com/traefik/traefik/pull/12488) by [schaerfo](https://redirect.github.com/schaerfo)) - Add product comparison matrix and features page ([#​12037](https://redirect.github.com/traefik/traefik/pull/12037) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) **Misc:** - Merge branch v2.11 into v3.6 ([#​12552](https://redirect.github.com/traefik/traefik/pull/12552) by [rtribotte](https://redirect.github.com/rtribotte)) - Merge branch v2.11 into v3.6 ([#​12533](https://redirect.github.com/traefik/traefik/pull/12533) by [mmatur](https://redirect.github.com/mmatur)) - Merge branch v2.11 into v3.6 ([#​12497](https://redirect.github.com/traefik/traefik/pull/12497) by [mmatur](https://redirect.github.com/mmatur)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi43NC41IiwidXBkYXRlZEluVmVyIjoiNDIuNzQuNSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJkb2NrZXIiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
149a0f9b24 |
build(deps): update traefik docker tag to v3.6.6 (#11010)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://redirect.github.com/containous/traefik) | patch | `v3.6.5` -> `v3.6.6` | --- ### Release Notes <details> <summary>containous/traefik (traefik)</summary> ### [`v3.6.6`](https://redirect.github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v366-2025-12-29) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.6...v3.6.6) [All Commits](https://redirect.github.com/traefik/traefik/compare/v3.6.5...v3.6.6) **Bug fixes:** - **\[acme]** Bump github.com/go-acme/lego/v4 to v4.30.1 ([#​12432](https://redirect.github.com/traefik/traefik/pull/12432) by [ldez](https://redirect.github.com/ldez)) - **\[http3]** Bump github.com/quic-go/quic-go to v0.58.0 ([#​12448](https://redirect.github.com/traefik/traefik/pull/12448) by [GreyXor](https://redirect.github.com/GreyXor)) - **\[redis]** Fix mutually exclusive verification for Redis ([#​12442](https://redirect.github.com/traefik/traefik/pull/12442) by [juliens](https://redirect.github.com/juliens)) - **\[server]** Fix deny encoded characters ([#​12454](https://redirect.github.com/traefik/traefik/pull/12454) by [rtribotte](https://redirect.github.com/rtribotte)) **Documentation:** - **\[k8s/ingress,k8s]** Fix Kubernetes Ingress provider documentation ([#​12443](https://redirect.github.com/traefik/traefik/pull/12443) by [nmengin](https://redirect.github.com/nmengin)) - **\[k8s/ingress-nginx]** Add RBAC documentation for Ingress NGINX provider ([#​12445](https://redirect.github.com/traefik/traefik/pull/12445) by [nmn3m](https://redirect.github.com/nmn3m)) - **\[k8s]** Improve the K8S multi-tenancy security note ([#​12444](https://redirect.github.com/traefik/traefik/pull/12444) by [nmengin](https://redirect.github.com/nmengin)) - Restore documentation on http.maxHeaderBytes ([#​12440](https://redirect.github.com/traefik/traefik/pull/12440) by [mloiseleur](https://redirect.github.com/mloiseleur)) - Fix Menu Item Naming ([#​12431](https://redirect.github.com/traefik/traefik/pull/12431) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) **Misc:** - Merge branch v2.11 into v3.6 ([#​12475](https://redirect.github.com/traefik/traefik/pull/12475) by [mmatur](https://redirect.github.com/mmatur)) - Merge branch v2.11 into v3.6 ([#​12438](https://redirect.github.com/traefik/traefik/pull/12438) by [kevinpollet](https://redirect.github.com/kevinpollet)) ### [`v3.6.6`](https://redirect.github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v366-2025-12-29) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.5...v3.6.6) [All Commits](https://redirect.github.com/traefik/traefik/compare/v3.6.5...v3.6.6) **Bug fixes:** - **\[acme]** Bump github.com/go-acme/lego/v4 to v4.30.1 ([#​12432](https://redirect.github.com/traefik/traefik/pull/12432) by [ldez](https://redirect.github.com/ldez)) - **\[http3]** Bump github.com/quic-go/quic-go to v0.58.0 ([#​12448](https://redirect.github.com/traefik/traefik/pull/12448) by [GreyXor](https://redirect.github.com/GreyXor)) - **\[redis]** Fix mutually exclusive verification for Redis ([#​12442](https://redirect.github.com/traefik/traefik/pull/12442) by [juliens](https://redirect.github.com/juliens)) - **\[server]** Fix deny encoded characters ([#​12454](https://redirect.github.com/traefik/traefik/pull/12454) by [rtribotte](https://redirect.github.com/rtribotte)) **Documentation:** - **\[k8s/ingress,k8s]** Fix Kubernetes Ingress provider documentation ([#​12443](https://redirect.github.com/traefik/traefik/pull/12443) by [nmengin](https://redirect.github.com/nmengin)) - **\[k8s/ingress-nginx]** Add RBAC documentation for Ingress NGINX provider ([#​12445](https://redirect.github.com/traefik/traefik/pull/12445) by [nmn3m](https://redirect.github.com/nmn3m)) - **\[k8s]** Improve the K8S multi-tenancy security note ([#​12444](https://redirect.github.com/traefik/traefik/pull/12444) by [nmengin](https://redirect.github.com/nmengin)) - Restore documentation on http.maxHeaderBytes ([#​12440](https://redirect.github.com/traefik/traefik/pull/12440) by [mloiseleur](https://redirect.github.com/mloiseleur)) - Fix Menu Item Naming ([#​12431](https://redirect.github.com/traefik/traefik/pull/12431) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) **Misc:** - Merge branch v2.11 into v3.6 ([#​12475](https://redirect.github.com/traefik/traefik/pull/12475) by [mmatur](https://redirect.github.com/mmatur)) - Merge branch v2.11 into v3.6 ([#​12438](https://redirect.github.com/traefik/traefik/pull/12438) by [kevinpollet](https://redirect.github.com/kevinpollet)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41OS4wIiwidXBkYXRlZEluVmVyIjoiNDIuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJkb2NrZXIiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
acd2b9398d |
build(deps): update traefik docker tag to v3.6.5 (#10955)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://redirect.github.com/containous/traefik) | patch | `v3.6.4` -> `v3.6.5` | --- ### Release Notes <details> <summary>containous/traefik (traefik)</summary> ### [`v3.6.5`](https://redirect.github.com/traefik/traefik/releases/tag/v3.6.5) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.5...v3.6.5) **Bug fixes:** - **\[k8s/ingress-nginx]** Fix NGINX sslredirect annotation support ([#​12387](https://redirect.github.com/traefik/traefik/pull/12387) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[server]** Print access logs for rejected requests and warn about new behavior ([#​12424](https://redirect.github.com/traefik/traefik/pull/12424) by [kevinpollet](https://redirect.github.com/kevinpollet)) **Documentation:** - **\[k8s/ingress-nginx]** Add auth-signin to unsupported nginx annotations list ([#​12370](https://redirect.github.com/traefik/traefik/pull/12370) by [fibsifan](https://redirect.github.com/fibsifan)) - Add a Breaking change note to the changelog ([#​12398](https://redirect.github.com/traefik/traefik/pull/12398) by [nmengin](https://redirect.github.com/nmengin)) - Fix encodedCharacters entryPoint option documentation ([#​12385](https://redirect.github.com/traefik/traefik/pull/12385) by [rtribotte](https://redirect.github.com/rtribotte)) ### [`v3.6.5`](https://redirect.github.com/traefik/traefik/releases/tag/v3.6.5) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.4...v3.6.5) **Bug fixes:** - **\[k8s/ingress-nginx]** Fix NGINX sslredirect annotation support ([#​12387](https://redirect.github.com/traefik/traefik/pull/12387) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[server]** Print access logs for rejected requests and warn about new behavior ([#​12424](https://redirect.github.com/traefik/traefik/pull/12424) by [kevinpollet](https://redirect.github.com/kevinpollet)) **Documentation:** - **\[k8s/ingress-nginx]** Add auth-signin to unsupported nginx annotations list ([#​12370](https://redirect.github.com/traefik/traefik/pull/12370) by [fibsifan](https://redirect.github.com/fibsifan)) - Add a Breaking change note to the changelog ([#​12398](https://redirect.github.com/traefik/traefik/pull/12398) by [nmengin](https://redirect.github.com/nmengin)) - Fix encodedCharacters entryPoint option documentation ([#​12385](https://redirect.github.com/traefik/traefik/pull/12385) by [rtribotte](https://redirect.github.com/rtribotte)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41NC4yIiwidXBkYXRlZEluVmVyIjoiNDIuNTQuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJkb2NrZXIiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
e63aa2c890 |
build(deps): update glob to v13.0.0 [security] (#10872)
Signed-off-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
|
7b6958efdc |
build(deps): update traefik docker tag to v3.6.4 (#10912)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://redirect.github.com/containous/traefik) | patch | `v3.6.2` -> `v3.6.4` | --- ### Release Notes <details> <summary>containous/traefik (traefik)</summary> ### [`v3.6.4`](https://redirect.github.com/traefik/traefik/releases/tag/v3.6.4) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.4...v3.6.4) **CVE's fixed:** - [CVE-2025-66490](https://nvd.nist.gov/vuln/detail/CVE-2025-66490) (Advisory [GHSA-gm3x-23wp-hc2c](https://redirect.github.com/traefik/traefik/security/advisories/GHSA-gm3x-23wp-hc2c)): **Breaking Change** please read the [migration guide](https://doc.traefik.io/traefik/v3.6/migrate/v3/#v364). - [CVE-2025-66491](https://nvd.nist.gov/vuln/detail/CVE-2025-66491) (Advisory [GHSA-7vww-mvcr-x6vj](https://redirect.github.com/traefik/traefik/security/advisories/GHSA-7vww-mvcr-x6vj)) **Important:** Please read the [migration guide](https://doc.traefik.io/traefik/v3.6/migrate/v3/#v364). **Bug fixes:** - **\[server]** Reject suspicious encoded characters ([#​12360](https://redirect.github.com/traefik/traefik/pull/12360) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[plugins]** Validate plugin module name ([#​12291](https://redirect.github.com/traefik/traefik/pull/12291) by [kevinpollet](https://redirect.github.com/kevinpollet)) - **\[http3]** Bump github.com/quic-go/quic-go to v0.57.1 ([#​12319](https://redirect.github.com/traefik/traefik/pull/12319) by [GreyXor](https://redirect.github.com/GreyXor)) - **\[http3]** Bump github.com/quic-go/quic-go to v0.57.0 ([#​12308](https://redirect.github.com/traefik/traefik/pull/12308) by [GreyXor](https://redirect.github.com/GreyXor)) - **\[server]** Bump golang.org/x/crypto to v0.45.0 ([#​12296](https://redirect.github.com/traefik/traefik/pull/12296) by [kevinpollet](https://redirect.github.com/kevinpollet)) - **\[acme]** Bump github.com/go-acme/lego/v4 to v4.29.0 ([#​12333](https://redirect.github.com/traefik/traefik/pull/12333) by [ldez](https://redirect.github.com/ldez)) - **\[k8s/ingress-nginx]** Fix SSL redirect to match NGINX behavior ([#​12361](https://redirect.github.com/traefik/traefik/pull/12361) by [mmatur](https://redirect.github.com/mmatur)) - **\[k8s/ingress-nginx]** Fix the service name for ingress-nginx provider ([#​12352](https://redirect.github.com/traefik/traefik/pull/12352) by [mmatur](https://redirect.github.com/mmatur)) - **\[k8s/ingress-nginx]** Fix nginx.ingress.kubernetes.io/proxy-ssl-verify annotation support ([#​12351](https://redirect.github.com/traefik/traefik/pull/12351) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[middleware,authentication]** Change ForwardAuth error log level from DEBUG to ERROR ([#​12324](https://redirect.github.com/traefik/traefik/pull/12324) by [murataslan1](https://redirect.github.com/murataslan1)) **Documentation:** - **\[api]** Fix typo in API dashboard configuration instructions ([#​12335](https://redirect.github.com/traefik/traefik/pull/12335) by [NAICOLAS](https://redirect.github.com/NAICOLAS)) - **\[docker]** Add documentation for loadbalancer.server.url in Docker and Swarm providers ([#​12289](https://redirect.github.com/traefik/traefik/pull/12289) by [webash](https://redirect.github.com/webash)) - **\[k8s/gatewayapi]** Fix links of Helm chart values reference to providers.kubernetesGateway.enabled ([#​12315](https://redirect.github.com/traefik/traefik/pull/12315) by [shouhei](https://redirect.github.com/shouhei)) - **\[k8s/ingress-nginx]** Fix default value of ingress-nginx provider in documentation ([#​12328](https://redirect.github.com/traefik/traefik/pull/12328) by [mloiseleur](https://redirect.github.com/mloiseleur)) - **\[k8s/ingress-nginx]** NGINX Ingress Controller to Traefik Migration Guide ([#​12318](https://redirect.github.com/traefik/traefik/pull/12318) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - **\[k8s/ingress-nginx]** Improve the configuration options display of the Kubernetes ingress-nginx provider ([#​12297](https://redirect.github.com/traefik/traefik/pull/12297) by [mloiseleur](https://redirect.github.com/mloiseleur)) - **\[k8s/ingress-nginx]** Improve ingress-nginx provider documentation ([#​12288](https://redirect.github.com/traefik/traefik/pull/12288) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - **\[service]** Fix loadbalancer doc for highest random weight ([#​12283](https://redirect.github.com/traefik/traefik/pull/12283) by [ozon2](https://redirect.github.com/ozon2)) - Correctly Format the HTTP Service Documentation ([#​12311](https://redirect.github.com/traefik/traefik/pull/12311) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - Add documentation about checkNewVersion ([#​12298](https://redirect.github.com/traefik/traefik/pull/12298) by [darkweaver87](https://redirect.github.com/darkweaver87)) **Misc:** - Merge branch v2.11 into v3.6 ([#​12364](https://redirect.github.com/traefik/traefik/pull/12364) by [kevinpollet](https://redirect.github.com/kevinpollet)) - Merge branch v2.11 into v3.6 ([#​12341](https://redirect.github.com/traefik/traefik/pull/12341) by [mmatur](https://redirect.github.com/mmatur)) - Merge branch v2.11 into v3.6 ([#​12368](https://redirect.github.com/traefik/traefik/pull/12368) by [mmatur](https://redirect.github.com/mmatur)) ### [`v3.6.4`](https://redirect.github.com/traefik/traefik/releases/tag/v3.6.4) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.2...v3.6.4) **CVE's fixed:** - [CVE-2025-66490](https://nvd.nist.gov/vuln/detail/CVE-2025-66490) (Advisory [GHSA-gm3x-23wp-hc2c](https://redirect.github.com/traefik/traefik/security/advisories/GHSA-gm3x-23wp-hc2c)): **Breaking Change** please read the [migration guide](https://doc.traefik.io/traefik/v3.6/migrate/v3/#v364). - [CVE-2025-66491](https://nvd.nist.gov/vuln/detail/CVE-2025-66491) (Advisory [GHSA-7vww-mvcr-x6vj](https://redirect.github.com/traefik/traefik/security/advisories/GHSA-7vww-mvcr-x6vj)) **Important:** Please read the [migration guide](https://doc.traefik.io/traefik/v3.6/migrate/v3/#v364). **Bug fixes:** - **\[server]** Reject suspicious encoded characters ([#​12360](https://redirect.github.com/traefik/traefik/pull/12360) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[plugins]** Validate plugin module name ([#​12291](https://redirect.github.com/traefik/traefik/pull/12291) by [kevinpollet](https://redirect.github.com/kevinpollet)) - **\[http3]** Bump github.com/quic-go/quic-go to v0.57.1 ([#​12319](https://redirect.github.com/traefik/traefik/pull/12319) by [GreyXor](https://redirect.github.com/GreyXor)) - **\[http3]** Bump github.com/quic-go/quic-go to v0.57.0 ([#​12308](https://redirect.github.com/traefik/traefik/pull/12308) by [GreyXor](https://redirect.github.com/GreyXor)) - **\[server]** Bump golang.org/x/crypto to v0.45.0 ([#​12296](https://redirect.github.com/traefik/traefik/pull/12296) by [kevinpollet](https://redirect.github.com/kevinpollet)) - **\[acme]** Bump github.com/go-acme/lego/v4 to v4.29.0 ([#​12333](https://redirect.github.com/traefik/traefik/pull/12333) by [ldez](https://redirect.github.com/ldez)) - **\[k8s/ingress-nginx]** Fix SSL redirect to match NGINX behavior ([#​12361](https://redirect.github.com/traefik/traefik/pull/12361) by [mmatur](https://redirect.github.com/mmatur)) - **\[k8s/ingress-nginx]** Fix the service name for ingress-nginx provider ([#​12352](https://redirect.github.com/traefik/traefik/pull/12352) by [mmatur](https://redirect.github.com/mmatur)) - **\[k8s/ingress-nginx]** Fix nginx.ingress.kubernetes.io/proxy-ssl-verify annotation support ([#​12351](https://redirect.github.com/traefik/traefik/pull/12351) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[middleware,authentication]** Change ForwardAuth error log level from DEBUG to ERROR ([#​12324](https://redirect.github.com/traefik/traefik/pull/12324) by [murataslan1](https://redirect.github.com/murataslan1)) **Documentation:** - **\[api]** Fix typo in API dashboard configuration instructions ([#​12335](https://redirect.github.com/traefik/traefik/pull/12335) by [NAICOLAS](https://redirect.github.com/NAICOLAS)) - **\[docker]** Add documentation for loadbalancer.server.url in Docker and Swarm providers ([#​12289](https://redirect.github.com/traefik/traefik/pull/12289) by [webash](https://redirect.github.com/webash)) - **\[k8s/gatewayapi]** Fix links of Helm chart values reference to providers.kubernetesGateway.enabled ([#​12315](https://redirect.github.com/traefik/traefik/pull/12315) by [shouhei](https://redirect.github.com/shouhei)) - **\[k8s/ingress-nginx]** Fix default value of ingress-nginx provider in documentation ([#​12328](https://redirect.github.com/traefik/traefik/pull/12328) by [mloiseleur](https://redirect.github.com/mloiseleur)) - **\[k8s/ingress-nginx]** NGINX Ingress Controller to Traefik Migration Guide ([#​12318](https://redirect.github.com/traefik/traefik/pull/12318) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - **\[k8s/ingress-nginx]** Improve the configuration options display of the Kubernetes ingress-nginx provider ([#​12297](https://redirect.github.com/traefik/traefik/pull/12297) by [mloiseleur](https://redirect.github.com/mloiseleur)) - **\[k8s/ingress-nginx]** Improve ingress-nginx provider documentation ([#​12288](https://redirect.github.com/traefik/traefik/pull/12288) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - **\[service]** Fix loadbalancer doc for highest random weight ([#​12283](https://redirect.github.com/traefik/traefik/pull/12283) by [ozon2](https://redirect.github.com/ozon2)) - Correctly Format the HTTP Service Documentation ([#​12311](https://redirect.github.com/traefik/traefik/pull/12311) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - Add documentation about checkNewVersion ([#​12298](https://redirect.github.com/traefik/traefik/pull/12298) by [darkweaver87](https://redirect.github.com/darkweaver87)) **Misc:** - Merge branch v2.11 into v3.6 ([#​12364](https://redirect.github.com/traefik/traefik/pull/12364) by [kevinpollet](https://redirect.github.com/kevinpollet)) - Merge branch v2.11 into v3.6 ([#​12341](https://redirect.github.com/traefik/traefik/pull/12341) by [mmatur](https://redirect.github.com/mmatur)) - Merge branch v2.11 into v3.6 ([#​12368](https://redirect.github.com/traefik/traefik/pull/12368) by [mmatur](https://redirect.github.com/mmatur)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi40Mi4yIiwidXBkYXRlZEluVmVyIjoiNDIuNDIuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJkb2NrZXIiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
9b909fd7fa |
build(deps): update traefik docker tag to v3.6.2 (#10783)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://redirect.github.com/containous/traefik) | patch | `v3.6.1` -> `v3.6.2` | --- ### Release Notes <details> <summary>containous/traefik (traefik)</summary> ### [`v3.6.2`](https://redirect.github.com/traefik/traefik/releases/tag/v3.6.2) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.2...v3.6.2) **Important**: Please read the [migration guide](https://doc.traefik.io/traefik/master/migrate/v3/#v362). **Bug fixes:** - **\[k8s/ingress-nginx]** Deprecate Kubernetes Ingress NGINX provider experimental flag ([#​12286](https://redirect.github.com/traefik/traefik/pull/12286) by [rtribotte](https://redirect.github.com/rtribotte)) ### [`v3.6.2`](https://redirect.github.com/traefik/traefik/releases/tag/v3.6.2) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.1...v3.6.2) **Important**: Please read the [migration guide](https://doc.traefik.io/traefik/master/migrate/v3/#v362). **Bug fixes:** - **\[k8s/ingress-nginx]** Deprecate Kubernetes Ingress NGINX provider experimental flag ([#​12286](https://redirect.github.com/traefik/traefik/pull/12286) by [rtribotte](https://redirect.github.com/rtribotte)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4xMy41IiwidXBkYXRlZEluVmVyIjoiNDIuMTMuNSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJkb2NrZXIiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
a40da5250c |
build(deps): update traefik docker tag to v3.6.1 (#10761)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
f9ad5372cf |
build(deps): update traefik docker tag to v3.6.0 (#10711)
* build(deps): update traefik docker tag to v3.6.0 * fix(suites): remove deprecated pilot configuration Removed pilot dashboard configuration from Traefik static config. Signed-off-by: Amir Zarrinkafsh <nightah@me.com> --------- Signed-off-by: Amir Zarrinkafsh <nightah@me.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <nightah@me.com> |
||
|
|
1890788d0c |
build(deps): update traefik docker tag to v3.5.4 (#10637)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com> |
||
|
|
ce01d919d3 |
build(deps): update traefik docker tag to v3.5.3 (#10391)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
2dd749585e |
build(deps): update traefik docker tag to v3.5.2 (#10276)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
335d886199 |
build(deps): update traefik docker tag to v3.5.1 (#10175)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <nightah@me.com> |
||
|
|
88d577b0bc |
build(deps): update traefik docker tag to v3.5.0 (#9973)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
d0778a7cca |
build(deps): update traefik docker tag to v3.4.5 (#9969)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
41cf77a4a4 |
build(deps): update traefik docker tag to v3.4.4 (#9860)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
0968066f8d |
build: regenerate emails (#9765)
Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com> |
||
|
|
24ae7ab37b |
build(deps): update traefik docker tag to v3.4.3 (#9742)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
d767c3ee08 |
build(deps): update traefik docker tag to v3.4.1 (#9593)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
63e94ee28a |
build(deps): update react-email (#9548)
Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com> |
||
|
|
28c524b88f |
build(deps): update traefik docker tag to v3.4.0 (#9441)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
9ee0e68b62 |
build(deps): bump multiple dependencies (#9439)
Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com> |
||
|
|
a1103e406b |
build(deps): update traefik docker tag to v3.3.6 (#9286)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
b7582e0f1a |
refactor: gen (#9226)
* build(deps): update typescript-eslint monorepo to v8.29.1 * build(deps): update material-ui monorepo to v7.0.2 * build(deps): update dependency eslint-config-prettier to v10.1.2 * build(deps): update dependency vite to v5.4.18 * refactor: gen Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com> --------- Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
71d613ea96 |
build(deps): update traefik docker tag to v3.3.5 (#9145)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
c843289955 |
build(deps): update dependency react-email to v4 (#9125)
Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com> |
||
|
|
c4a3b284e7 |
build(deps): bump transitive deps (#9027)
This bumps some transitive dependencies and rebuilds the email templates. |
||
|
|
e217d892f1 |
build(deps): update traefik docker tag to v3.3.4 (#8831)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
b262a60d4f |
refactor: docker-compose begone (#8530)
This removes any reference and usage of the deprecated docker-compose python tool. Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com> |
||
|
|
3079571f81 |
build(deps): update traefik docker tag to v3.3.3 (#8697)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
e656bb8012 |
build(deps): update traefik docker tag to v3.3.2 (#8584)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
7c1278154d |
fix(templates): add missing functions (#8494)
Adds the missing glob, walk, fromYaml, toYaml, toYamlPretty, and toYamlCustom functions; as well as several time based functions similar to the helm function equivalents. Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com> |
||
|
|
0d6817eae7 |
build(deps): update traefik docker tag to v3.2.3 (#8464)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
bc4aca4d44 |
build(deps): update traefik docker tag to v3.2.2 (#8440)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
07449479d1 |
docs: update examples (#8415)
Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com> |
||
|
|
85c35b4525 |
build(deps): update traefik docker tag to v3.2.1 (#8299)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
3e3966b74c |
docs: add no preview email templates (#8113)
Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com> |
||
|
|
11ea998605 |
build(deps): update traefik docker tag to v3.2.0 (#8128)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <nightah@me.com> |