Traefik v3.6.12 released on 26-03-2026
Traefik v3.6.12 is out now. It fixes several ingress-nginx provider issues and documentation points, updates the ACME client, and delivers stability and middleware fixes for server, TCP, gRPC and authentication handling.
See the project’s GitHub release notes and the updated documentation pages for full details and any migration guidance.
What’s in this release
- Kubernetes ingress-nginx provider and docs: fixes auth-response-headers whitespace trimming, adds an ingress-nginx migration banner to documentation pages, clarifies that NGINX Ingress watchNamespace watches only a single namespace, and improves Kubernetes Ingress routing documentation to reduce migration and configuration confusion.
- ACME: bumps github.com/go-acme/lego/v4 to v4.33.0 and clarifies the CNAME explanation in the ACME documentation to make DNS/validation behaviour easier to understand.
- Server, TCP, gRPC and middleware fixes: removes an unnecessary allocation and corrects a comment in withRoutingPath; fixes PostgreSQL STARTTLS when using TLS termination in the TCP stack; bumps google.golang.org/grpc to v1.79.3; prevents duplicate user headers from basic and digest auth middleware; and fixes StripPrefix and StripPrefixRegex to slice prefixes using the encoded prefix length.
Upgrade notes
- No breaking changes are listed; review the ingress-nginx migration banner and the updated Kubernetes Ingress documentation before upgrading.
- If you must revert, roll back to the previous release tag via your package manager or GitHub and follow your usual rollback procedure; check the release notes for any configuration adjustments.
Share feedback or report any issues on the project’s GitHub issues page or community channels — tell others what changed for you.
