Traefik v3.7.11 released on 19-08-2026
Traefik v3.7.11 is out now. It delivers runtime fixes for proxying and HTTP/3, safer Kubernetes CRD and Gateway API handling, and a set of TLS, middleware and documentation updates that improve stability and correctness.
Read the full notes and download the release on Traefik’s GitHub repository or consult the updated provider and migration documentation for details before you upgrade.
What’s in this release
- Proxy and HTTP/3 fixes: FastProxy now rejects out-of-range status codes from backends and quic-go is bumped to v0.61.0 to address HTTP/3 issues.
- Kubernetes CRD & Gateway API: safer generated names, scoped Service names, options to restrict the namespace for default TLS resources, and Gateway API URLRewrite/RequestRedirect that preserve encoded path segments.
- Ingress and middleware improvements: fixes for the ingress-nginx provider and Kubernetes Ingress handling (client-auth TLS deduplication, default-backend behaviour, asDefault handling and tighter cross-provider namespace enforcement), plus TLS and middleware behaviour options and documentation clarifications.
Upgrade notes
- No breaking changes are listed in the release notes, but check CRD safe-naming and the option to restrict the namespace for default TLS resources if you manage generated Service names or default TLS in clusters; consult the Gateway API 1.6.1 migration guide where relevant.
- If you need to revert, use your existing image tag for the prior 3.7.x release and follow your normal rollout or rollback procedure; see the GitHub release page for the exact commits and PR references included in v3.7.11.
Tell the project how it goes: share issues or feedback on the GitHub repository or in the Traefik community so maintainers can follow up on any regressions or edge cases you hit.
