Traefik v3.7.12 released on 26-08-2026
Traefik v3.7.12 is out now. It tightens security, bumps key third‑party modules and fixes a number of Kubernetes, protocol and usability issues for operators and cluster users.
See the GitHub release notes and the v3.7 migration guide for full details and upgrade instructions: v3.7 migration guide.
What’s in this release
- Security and dependency updates — bump github.com/valyala/fasthttp to v1.73.0 and etcd client modules to v3.5.33; publishes the security threat model and settled security decisions; SECURITY.md reduced to point to the main security documentation and end‑of‑support dates updated.
- Kubernetes and ingress‑nginx fixes and documentation — fixes redirect handling for www hosts with non‑numeric ports, resolves TLS option name collisions across namespaces, updates the redirections block reference and corrects formatting/typos in the Kubernetes setup guides; maintainer status updated for two contributors.
- Protocol and server behaviour fixes and usability improvements — HTTP/3 now respects read timeout, idle timeout and max header bytes; entry point gains an option to handle request headers that use aliasing names; TCP/UDP weighted services now reject negative weights; file provider errors now include the filename and the v3.7.11 migration guide was corrected.
Upgrade notes
- Read the v3.7 migration guide before upgrading: https://doc.traefik.io/traefik/v3.7/migrate/v3/#v3712.
- Review the updated security documentation and end‑of‑support dates; SECURITY.md now points to the main security docs for details on disclosures and mitigations.
If you try the update, share any feedback or issues on the project’s GitHub so others can benefit from your experience.
