mirror of
https://github.com/authelia/authelia.git
synced 2026-10-28 09:34:52 +08:00
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://redirect.github.com/containous/traefik) | patch | `v3.6.2` -> `v3.6.4` | --- ### Release Notes <details> <summary>containous/traefik (traefik)</summary> ### [`v3.6.4`](https://redirect.github.com/traefik/traefik/releases/tag/v3.6.4) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.4...v3.6.4) **CVE's fixed:** - [CVE-2025-66490](https://nvd.nist.gov/vuln/detail/CVE-2025-66490) (Advisory [GHSA-gm3x-23wp-hc2c](https://redirect.github.com/traefik/traefik/security/advisories/GHSA-gm3x-23wp-hc2c)): **Breaking Change** please read the [migration guide](https://doc.traefik.io/traefik/v3.6/migrate/v3/#v364). - [CVE-2025-66491](https://nvd.nist.gov/vuln/detail/CVE-2025-66491) (Advisory [GHSA-7vww-mvcr-x6vj](https://redirect.github.com/traefik/traefik/security/advisories/GHSA-7vww-mvcr-x6vj)) **Important:** Please read the [migration guide](https://doc.traefik.io/traefik/v3.6/migrate/v3/#v364). **Bug fixes:** - **\[server]** Reject suspicious encoded characters ([#​12360](https://redirect.github.com/traefik/traefik/pull/12360) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[plugins]** Validate plugin module name ([#​12291](https://redirect.github.com/traefik/traefik/pull/12291) by [kevinpollet](https://redirect.github.com/kevinpollet)) - **\[http3]** Bump github.com/quic-go/quic-go to v0.57.1 ([#​12319](https://redirect.github.com/traefik/traefik/pull/12319) by [GreyXor](https://redirect.github.com/GreyXor)) - **\[http3]** Bump github.com/quic-go/quic-go to v0.57.0 ([#​12308](https://redirect.github.com/traefik/traefik/pull/12308) by [GreyXor](https://redirect.github.com/GreyXor)) - **\[server]** Bump golang.org/x/crypto to v0.45.0 ([#​12296](https://redirect.github.com/traefik/traefik/pull/12296) by [kevinpollet](https://redirect.github.com/kevinpollet)) - **\[acme]** Bump github.com/go-acme/lego/v4 to v4.29.0 ([#​12333](https://redirect.github.com/traefik/traefik/pull/12333) by [ldez](https://redirect.github.com/ldez)) - **\[k8s/ingress-nginx]** Fix SSL redirect to match NGINX behavior ([#​12361](https://redirect.github.com/traefik/traefik/pull/12361) by [mmatur](https://redirect.github.com/mmatur)) - **\[k8s/ingress-nginx]** Fix the service name for ingress-nginx provider ([#​12352](https://redirect.github.com/traefik/traefik/pull/12352) by [mmatur](https://redirect.github.com/mmatur)) - **\[k8s/ingress-nginx]** Fix nginx.ingress.kubernetes.io/proxy-ssl-verify annotation support ([#​12351](https://redirect.github.com/traefik/traefik/pull/12351) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[middleware,authentication]** Change ForwardAuth error log level from DEBUG to ERROR ([#​12324](https://redirect.github.com/traefik/traefik/pull/12324) by [murataslan1](https://redirect.github.com/murataslan1)) **Documentation:** - **\[api]** Fix typo in API dashboard configuration instructions ([#​12335](https://redirect.github.com/traefik/traefik/pull/12335) by [NAICOLAS](https://redirect.github.com/NAICOLAS)) - **\[docker]** Add documentation for loadbalancer.server.url in Docker and Swarm providers ([#​12289](https://redirect.github.com/traefik/traefik/pull/12289) by [webash](https://redirect.github.com/webash)) - **\[k8s/gatewayapi]** Fix links of Helm chart values reference to providers.kubernetesGateway.enabled ([#​12315](https://redirect.github.com/traefik/traefik/pull/12315) by [shouhei](https://redirect.github.com/shouhei)) - **\[k8s/ingress-nginx]** Fix default value of ingress-nginx provider in documentation ([#​12328](https://redirect.github.com/traefik/traefik/pull/12328) by [mloiseleur](https://redirect.github.com/mloiseleur)) - **\[k8s/ingress-nginx]** NGINX Ingress Controller to Traefik Migration Guide ([#​12318](https://redirect.github.com/traefik/traefik/pull/12318) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - **\[k8s/ingress-nginx]** Improve the configuration options display of the Kubernetes ingress-nginx provider ([#​12297](https://redirect.github.com/traefik/traefik/pull/12297) by [mloiseleur](https://redirect.github.com/mloiseleur)) - **\[k8s/ingress-nginx]** Improve ingress-nginx provider documentation ([#​12288](https://redirect.github.com/traefik/traefik/pull/12288) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - **\[service]** Fix loadbalancer doc for highest random weight ([#​12283](https://redirect.github.com/traefik/traefik/pull/12283) by [ozon2](https://redirect.github.com/ozon2)) - Correctly Format the HTTP Service Documentation ([#​12311](https://redirect.github.com/traefik/traefik/pull/12311) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - Add documentation about checkNewVersion ([#​12298](https://redirect.github.com/traefik/traefik/pull/12298) by [darkweaver87](https://redirect.github.com/darkweaver87)) **Misc:** - Merge branch v2.11 into v3.6 ([#​12364](https://redirect.github.com/traefik/traefik/pull/12364) by [kevinpollet](https://redirect.github.com/kevinpollet)) - Merge branch v2.11 into v3.6 ([#​12341](https://redirect.github.com/traefik/traefik/pull/12341) by [mmatur](https://redirect.github.com/mmatur)) - Merge branch v2.11 into v3.6 ([#​12368](https://redirect.github.com/traefik/traefik/pull/12368) by [mmatur](https://redirect.github.com/mmatur)) ### [`v3.6.4`](https://redirect.github.com/traefik/traefik/releases/tag/v3.6.4) [Compare Source](https://redirect.github.com/containous/traefik/compare/v3.6.2...v3.6.4) **CVE's fixed:** - [CVE-2025-66490](https://nvd.nist.gov/vuln/detail/CVE-2025-66490) (Advisory [GHSA-gm3x-23wp-hc2c](https://redirect.github.com/traefik/traefik/security/advisories/GHSA-gm3x-23wp-hc2c)): **Breaking Change** please read the [migration guide](https://doc.traefik.io/traefik/v3.6/migrate/v3/#v364). - [CVE-2025-66491](https://nvd.nist.gov/vuln/detail/CVE-2025-66491) (Advisory [GHSA-7vww-mvcr-x6vj](https://redirect.github.com/traefik/traefik/security/advisories/GHSA-7vww-mvcr-x6vj)) **Important:** Please read the [migration guide](https://doc.traefik.io/traefik/v3.6/migrate/v3/#v364). **Bug fixes:** - **\[server]** Reject suspicious encoded characters ([#​12360](https://redirect.github.com/traefik/traefik/pull/12360) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[plugins]** Validate plugin module name ([#​12291](https://redirect.github.com/traefik/traefik/pull/12291) by [kevinpollet](https://redirect.github.com/kevinpollet)) - **\[http3]** Bump github.com/quic-go/quic-go to v0.57.1 ([#​12319](https://redirect.github.com/traefik/traefik/pull/12319) by [GreyXor](https://redirect.github.com/GreyXor)) - **\[http3]** Bump github.com/quic-go/quic-go to v0.57.0 ([#​12308](https://redirect.github.com/traefik/traefik/pull/12308) by [GreyXor](https://redirect.github.com/GreyXor)) - **\[server]** Bump golang.org/x/crypto to v0.45.0 ([#​12296](https://redirect.github.com/traefik/traefik/pull/12296) by [kevinpollet](https://redirect.github.com/kevinpollet)) - **\[acme]** Bump github.com/go-acme/lego/v4 to v4.29.0 ([#​12333](https://redirect.github.com/traefik/traefik/pull/12333) by [ldez](https://redirect.github.com/ldez)) - **\[k8s/ingress-nginx]** Fix SSL redirect to match NGINX behavior ([#​12361](https://redirect.github.com/traefik/traefik/pull/12361) by [mmatur](https://redirect.github.com/mmatur)) - **\[k8s/ingress-nginx]** Fix the service name for ingress-nginx provider ([#​12352](https://redirect.github.com/traefik/traefik/pull/12352) by [mmatur](https://redirect.github.com/mmatur)) - **\[k8s/ingress-nginx]** Fix nginx.ingress.kubernetes.io/proxy-ssl-verify annotation support ([#​12351](https://redirect.github.com/traefik/traefik/pull/12351) by [rtribotte](https://redirect.github.com/rtribotte)) - **\[middleware,authentication]** Change ForwardAuth error log level from DEBUG to ERROR ([#​12324](https://redirect.github.com/traefik/traefik/pull/12324) by [murataslan1](https://redirect.github.com/murataslan1)) **Documentation:** - **\[api]** Fix typo in API dashboard configuration instructions ([#​12335](https://redirect.github.com/traefik/traefik/pull/12335) by [NAICOLAS](https://redirect.github.com/NAICOLAS)) - **\[docker]** Add documentation for loadbalancer.server.url in Docker and Swarm providers ([#​12289](https://redirect.github.com/traefik/traefik/pull/12289) by [webash](https://redirect.github.com/webash)) - **\[k8s/gatewayapi]** Fix links of Helm chart values reference to providers.kubernetesGateway.enabled ([#​12315](https://redirect.github.com/traefik/traefik/pull/12315) by [shouhei](https://redirect.github.com/shouhei)) - **\[k8s/ingress-nginx]** Fix default value of ingress-nginx provider in documentation ([#​12328](https://redirect.github.com/traefik/traefik/pull/12328) by [mloiseleur](https://redirect.github.com/mloiseleur)) - **\[k8s/ingress-nginx]** NGINX Ingress Controller to Traefik Migration Guide ([#​12318](https://redirect.github.com/traefik/traefik/pull/12318) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - **\[k8s/ingress-nginx]** Improve the configuration options display of the Kubernetes ingress-nginx provider ([#​12297](https://redirect.github.com/traefik/traefik/pull/12297) by [mloiseleur](https://redirect.github.com/mloiseleur)) - **\[k8s/ingress-nginx]** Improve ingress-nginx provider documentation ([#​12288](https://redirect.github.com/traefik/traefik/pull/12288) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - **\[service]** Fix loadbalancer doc for highest random weight ([#​12283](https://redirect.github.com/traefik/traefik/pull/12283) by [ozon2](https://redirect.github.com/ozon2)) - Correctly Format the HTTP Service Documentation ([#​12311](https://redirect.github.com/traefik/traefik/pull/12311) by [sheddy-traefik](https://redirect.github.com/sheddy-traefik)) - Add documentation about checkNewVersion ([#​12298](https://redirect.github.com/traefik/traefik/pull/12298) by [darkweaver87](https://redirect.github.com/darkweaver87)) **Misc:** - Merge branch v2.11 into v3.6 ([#​12364](https://redirect.github.com/traefik/traefik/pull/12364) by [kevinpollet](https://redirect.github.com/kevinpollet)) - Merge branch v2.11 into v3.6 ([#​12341](https://redirect.github.com/traefik/traefik/pull/12341) by [mmatur](https://redirect.github.com/mmatur)) - Merge branch v2.11 into v3.6 ([#​12368](https://redirect.github.com/traefik/traefik/pull/12368) by [mmatur](https://redirect.github.com/mmatur)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi40Mi4yIiwidXBkYXRlZEluVmVyIjoiNDIuNDIuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJkb2NrZXIiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>