chore(deps): update helm release traefik to v38 #161

2025-12-18T10:00:25Z

renovate-bot commented

2025-12-18 10:00:25 +00:00

This PR contains the following updates:

Package	Update	Change
traefik (source)	major	`37.4.0` -> `38.0.1`

Release Notes

traefik/traefik-helm-chart (traefik)

`v38.0.1`

Compare Source

🐛 Bug fixes

fix(ports): 🐛 http.encodedCharacters on custom entrypoints #1606 by @mloiseleur
fix(ports): 🐛 add missing http.maxHeaderBytes option #1604 by @mloiseleur

📦 Others

chore(release): 🚀 publish traefik 38.0.1 #1608 by @mloiseleur

`v38.0.0`

Compare Source

Upgrades Notes

[!IMPORTANT]
CRDs has to be upgraded before the Chart. See UPGRADING instructions.

There are two breaking changes in this release:

Traefik Proxy v3.6.4+ contains a security fix that is also a breaking change. See upstream documentation for more details.
PR https://github.com/traefik/traefik-helm-chart/pull/1596 align kubernetesIngressNginx provider setting with upstream. There is a before / after example in the PR description and PR https://github.com/traefik/traefik-helm-chart/pull/1587 align labelSelector syntax between providers

[!NOTE]
If you need to restore Traefik behavior of v3.6.3 or inferior, it can be set with values.

Here is an example on websecure entrypoint:

ports:
  websecure:
    http:
      encodedCharacters:
        allowEncodedSlash: true
        allowEncodedBackSlash: true
        allowEncodedNullCharacter: true
        allowEncodedSemicolon: true
        allowEncodedPercent: true
        allowEncodedQuestionMark: true
        allowEncodedHash: true
      sanitizePath: false

This is not recommended, it may expose you to GHSA-gm3x-23wp-hc2c.

💥 BREAKING CHANGES

fix(providers)!: align labelSelector for kubernetesGateway and knative #1587 by @shubhamch71
fix(nginx)!: 🐛 align provider settings and provide required rbac #1596 by @mloiseleur

🚀 Features

feat(CRDs): update Traefik Hub to v1.24.1, with required RBACs #1571 by @jspdown
feat(ports): enforce schema #1586 by @remyj38
feat(CRDs): update Traefik Hub to v1.24.2 #1585 by @traefiker
feat(providers): ✨ enforce schema #1595 by @mloiseleur
feat(security): ✨ 🔒️ add support for request path options of traefik 3.6.4+ #1594 by @mloiseleur
feat(deps): update traefik docker tag to v3.6.4 #1590 by @renovate[bot]
feat(deps): update traefik docker tag to v3.6.5 #1599 by @renovate[bot]

🐛 Bug fixes

fix: update error message for maxUnavailable validation #1591 by @lucasra1
fix(notes): minor typo #1593 by @rndmh3ro
fix(pvc): allow empty storageClassName #1579 by @fopina
fix(providers): ✨ enforce schema for all providers #1601 by @mloiseleur

📦 Others

chore(deps): update actions/checkout action to v6 #1573 by @renovate[bot]
docs: Update EXAMPLES.md with REGIONAL load balancer note for Digital Ocean #1574 by @kamikazechaser
chore(release): 🚀 publish traefik 38.0.0 and crds 1.13.0 #1600 by @mloiseleur

New Contributors

@shubhamch71 made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1587
@kamikazechaser made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1574
@lucasra1 made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1591
@remyj38 made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1586
@rndmh3ro made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1593
@fopina made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1579

Full Changelog: https://github.com/traefik/traefik-helm-chart/compare/v37.4.0...v38.0.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://traefik.io/) ([source](https://github.com/traefik/traefik-helm-chart)) | major | `37.4.0` -> `38.0.1` | --- ### Release Notes <details> <summary>traefik/traefik-helm-chart (traefik)</summary> ### [`v38.0.1`](https://github.com/traefik/traefik-helm-chart/releases/tag/v38.0.1) [Compare Source](https://github.com/traefik/traefik-helm-chart/compare/v38.0.0...v38.0.1) #### :bug: Bug fixes - fix(ports): 🐛 `http.encodedCharacters` on custom entrypoints [#1606](https://github.com/traefik/traefik-helm-chart/issues/1606) by [@mloiseleur](https://github.com/mloiseleur) - fix(ports): 🐛 add missing `http.maxHeaderBytes` option [#1604](https://github.com/traefik/traefik-helm-chart/issues/1604) by [@mloiseleur](https://github.com/mloiseleur) #### :package: Others - chore(release): 🚀 publish traefik 38.0.1 [#1608](https://github.com/traefik/traefik-helm-chart/issues/1608) by [@mloiseleur](https://github.com/mloiseleur) ### [`v38.0.0`](https://github.com/traefik/traefik-helm-chart/releases/tag/v38.0.0) [Compare Source](https://github.com/traefik/traefik-helm-chart/compare/v37.4.0...v38.0.0) **Upgrades Notes** > \[!IMPORTANT] > CRDs has to be upgraded before the Chart. See [UPGRADING](https://github.com/traefik/traefik-helm-chart?tab=readme-ov-file#upgrading) instructions. There are two breaking changes in this release: 1. Traefik Proxy v3.6.4+ contains a security fix that is also a breaking change. See [upstream documentation](https://doc.traefik.io/traefik/v3.6/migrate/v3/#v364) for more details. 2. PR https://github.com/traefik/traefik-helm-chart/pull/1596 align *kubernetesIngressNginx* provider setting with upstream. There is a *before* / *after* example in the PR description and PR https://github.com/traefik/traefik-helm-chart/pull/1587 align *labelSelector* syntax between providers > \[!NOTE] > If you need to restore Traefik behavior of v3.6.3 or inferior, it can be set with values. > > Here is an example on *websecure* entrypoint: > > ```yaml > ports: > websecure: > http: > encodedCharacters: > allowEncodedSlash: true > allowEncodedBackSlash: true > allowEncodedNullCharacter: true > allowEncodedSemicolon: true > allowEncodedPercent: true > allowEncodedQuestionMark: true > allowEncodedHash: true > sanitizePath: false > ``` > > This is **not** recommended, it may expose you to [GHSA-gm3x-23wp-hc2c](https://github.com/traefik/traefik/security/advisories/GHSA-gm3x-23wp-hc2c). #### :boom: BREAKING CHANGES - fix(providers)!: align labelSelector for kubernetesGateway and knative [#1587](https://github.com/traefik/traefik-helm-chart/issues/1587) by [@shubhamch71](https://github.com/shubhamch71) - fix(nginx)!: 🐛 align provider settings and provide required rbac [#1596](https://github.com/traefik/traefik-helm-chart/issues/1596) by [@mloiseleur](https://github.com/mloiseleur) #### :rocket: Features - feat(CRDs): update Traefik Hub to v1.24.1, with required RBACs [#1571](https://github.com/traefik/traefik-helm-chart/issues/1571) by [@jspdown](https://github.com/jspdown) - feat(ports): enforce schema [#1586](https://github.com/traefik/traefik-helm-chart/issues/1586) by [@remyj38](https://github.com/remyj38) - feat(CRDs): update Traefik Hub to v1.24.2 [#1585](https://github.com/traefik/traefik-helm-chart/issues/1585) by [@traefiker](https://github.com/traefiker) - feat(providers): ✨ enforce schema [#1595](https://github.com/traefik/traefik-helm-chart/issues/1595) by [@mloiseleur](https://github.com/mloiseleur) - feat(security): ✨ 🔒️ add support for request path options of traefik 3.6.4+ [#1594](https://github.com/traefik/traefik-helm-chart/issues/1594) by [@mloiseleur](https://github.com/mloiseleur) - feat(deps): update traefik docker tag to v3.6.4 [#1590](https://github.com/traefik/traefik-helm-chart/issues/1590) by [@renovate](https://github.com/renovate)\[bot] - feat(deps): update traefik docker tag to v3.6.5 [#1599](https://github.com/traefik/traefik-helm-chart/issues/1599) by [@renovate](https://github.com/renovate)\[bot] #### :bug: Bug fixes - fix: update error message for maxUnavailable validation [#1591](https://github.com/traefik/traefik-helm-chart/issues/1591) by [@lucasra1](https://github.com/lucasra1) - fix(notes): minor typo [#1593](https://github.com/traefik/traefik-helm-chart/issues/1593) by [@rndmh3ro](https://github.com/rndmh3ro) - fix(pvc): allow empty storageClassName [#1579](https://github.com/traefik/traefik-helm-chart/issues/1579) by [@fopina](https://github.com/fopina) - fix(providers): ✨ enforce schema for all providers [#1601](https://github.com/traefik/traefik-helm-chart/issues/1601) by [@mloiseleur](https://github.com/mloiseleur) #### :package: Others - chore(deps): update actions/checkout action to v6 [#1573](https://github.com/traefik/traefik-helm-chart/issues/1573) by [@renovate](https://github.com/renovate)\[bot] - docs: Update EXAMPLES.md with REGIONAL load balancer note for Digital Ocean [#1574](https://github.com/traefik/traefik-helm-chart/issues/1574) by [@kamikazechaser](https://github.com/kamikazechaser) - chore(release): 🚀 publish traefik 38.0.0 and crds 1.13.0 [#1600](https://github.com/traefik/traefik-helm-chart/issues/1600) by [@mloiseleur](https://github.com/mloiseleur) #### New Contributors - [@shubhamch71](https://github.com/shubhamch71) made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1587 - [@kamikazechaser](https://github.com/kamikazechaser) made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1574 - [@lucasra1](https://github.com/lucasra1) made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1591 - [@remyj38](https://github.com/remyj38) made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1586 - [@rndmh3ro](https://github.com/rndmh3ro) made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1593 - [@fopina](https://github.com/fopina) made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1579 **Full Changelog**: https://github.com/traefik/traefik-helm-chart/compare/v37.4.0...v38.0.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit 2025-12-18 10:00:27 +00:00

chore(deps): update helm release traefik to v38 7ae5a4f82b

renovate-bot added 2 commits 2025-12-19 14:01:29 +00:00

chore(deps): update helm release traefik to v38 7ae5a4f82b

chore(deps): update helm release traefik to v38 b4fa24c8d1

williamp merged commit f1fe246f14 into main

2025-12-19 14:59:38 +00:00

williamp deleted branch renovate/traefik-38.x

2025-12-19 14:59:38 +00:00

williamp referenced this issue from a commit

2025-12-19 14:59:39 +00:00

Merge pull request 'chore(deps): update helm release traefik to v38' (#161) from renovate/traefik-38.x into main