Traefik v3.7.6 released on 30-06-2026
Traefik v3.7.6 is out now. It brings important upgrade and migration guidance alongside a collection of Kubernetes, Gateway API, middleware, TLS and server fixes that will matter to cluster and ingress users.
Read the migration guide at https://doc.traefik.io/traefik/v3.7/migrate/v3/#v376 and consult the GitHub release notes for full details.
What’s in this release
- Upgrade and migration guidance: compatibility-impacting changes are documented and a migration guide is provided (see https://doc.traefik.io/traefik/v3.7/migrate/v3/#v376).
- Kubernetes, Ingress‑NGINX and Gateway API fixes: improved handling of Ingress‑NGINX SSL passthrough and retry/buffering, EndpointSlice detection, indexing and stable ordering to keep backend IPs consistent, plus Gateway API conformance and parentRef/service name collision fixes.
- Middleware, server and TLS fixes: forward-auth now forwards X-Forwarded-Port correctly, RequestHeaderModifier fixes for Host, CORS Max-Age and wildcard/allow-credentials behaviour, option to remove request headers with underscores, configurable maxHeaderBytes, nondeterministic TLS certificate selection fix for shared SANs, and websocket h2c upgrade fix.
Upgrade notes
- Read the migration guide before upgrading: https://doc.traefik.io/traefik/v3.7/migrate/v3/#v376
- No rollback instructions are provided in the release notes.
Share your experience with the upgrade on the project’s GitHub so others can learn from any issues or quirks you encounter.
