- Patched CVE‑2024‑45410 (GHSA‑h924‑8g65‑j9wg) – see migration guide for required changes.
- Bug fixes: upgraded go‑acme/lego to v4.20.2, silenced first‑byte peeking logs, dropped untrusted X‑Forwarded‑Prefix header, applied keepalive to h2c entrypoints, and corrected ServiceBuilder composition.
- Documentation improvements: added access‑log examples, clarified migration guide (added X‑Forwarded‑Prefix warning, fixed link), updated CLI defaults, and refined dashboard and entrypoints docs.
v2.11.14
Official Traefik changelog summary with source attribution, release tags, and community reactions.
Track this Traefik release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this Traefik release note into a weekly digest for the tools you actually use.
Create digestMore Traefik changelog updates
Fixed numerous bugs across FastProxy, HTTP3, and Kubernetes CRD/Ingress/GatewayAPI providers, including status code handling, name collisions, and router rule fixes.
Fixed name collision issues and added safe‑naming options for the Kubernetes CRD provider, including scoped service names and namespace restriction for default TLS resources.
Bumped multiple dependencies (acme/lego, DataDog/dd-trace-go, golang.org/x/text, etc.) to newer versions.