Traefik v3.7.12 released on 26-08-2026
Traefik v3.7.12 is out now. It opens with an important migration note and tightens security documentation while delivering dependency bumps and a number of runtime fixes that matter to operators and Kubernetes users.
Read the v3.7 migration guide and the full release notes on the project’s documentation and GitHub pages for upgrade instructions and detailed changes: migration guide.
What’s in this release
- Migration and security documentation: an important migration note for v3.7, SECURITY.md reduced to point to the security docs, and a documented security threat model with settled security decisions; maintainers and end-of-support dates updated.
- Dependency and runtime fixes: github.com/valyala/fasthttp bumped to v1.73.0 and etcd client modules to v3.5.33; HTTP/3 now applies read/idle timeouts and max header bytes; file provider errors include the filename; negative weights in TCP/UDP weighted services are rejected; added an entry point option to handle request headers with aliasing names.
- Kubernetes and ingress-nginx fixes: corrected redirects for www hosts using non-numeric ports, fixed TLS option name collisions across namespaces in the ingress-nginx provider, fixed OCSP log typos, clarified ServersTransport behaviour for the errors middleware, and assorted documentation and setup guide fixes.
Upgrade notes
- Important migration steps are documented in the v3.7 migration guide — follow that guide before upgrading to avoid configuration issues: migration guide.
- If you encounter problems after upgrading, consider reverting to the previous v3.7.11 release while you investigate and follow the migration steps before attempting the upgrade again.
Tell the maintainers and community how the upgrade went — open issues or share feedback on the project’s GitHub so others can benefit from your experience.
