Traefik Files

Enhancements:

• [k8s/ingress-nginx] Use a metamodel to generate dynamic configuration in ingress-nginx (#13062 @juliens)
• [k8s/ingress-nginx] Add limit-connections support (#13030 @amazon7737)
• [webui] Display server weight in service detail view (#12325 @murataslan1)
• [webui, tls] Add certificates menu and overview (#12628 @holomekc)
• [provider] Add providers routing precedence configuration (#12895 @juliens)
• [k8s/ingress-nginx] Support NGINX global auth annotation (#12893 @foxcool)
• [k8s/ingress-nginx] Add limit-burst-multiplier annotation support (#12899 @amazon7737)
• [k8s/ingress-nginx, k8s/ingress, rules] Add wildcard host in Host and HostSNI matchers (#12884 @juliens)
• [k8s/gatewayapi] Support multiple certificateRefs on gateway listeners (#12590 @mortennordbye)
• [k8s/gatewayapi] Add secret support for BackendTLSPolicy caCertificateRefs (#12927 @kevinpollet)
• [accesslogs, k8s/ingress-nginx] Support nginx.ingress.kubernetes.io/enable-access-log annotation (#12908 @ris-tlp)
• [accesslogs, k8s/ingress-nginx, k8s/ingress] Add Kubernetes Ingress logs fields (#12913 @rtribotte)
• [k8s/knative] Support knative v1.20.0 (#12441 @idurgakalyan)
• [k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.5.1 (#12768 @mmatur)
• [k8s/ingress-nginx, middleware, authentication] Add support for auth-snippet (#12778 @juliens)
• [accesslogs, otel] Allow Stdio access logs alongsige OTLP logging (#12307 by Mulgish)
• [acme] Add CertificateTimeout ACME configuration option (#12278 by ceko)
• [k8s/ingress-nginx] Support nginx.ingress.kubernetes.io/allowlist-source-range (#12659 by ris-tlp)
• [k8s/crd] Add ingressClassName field to the CRDs spec (#12313 by kkrypt0nn)
• [k8s/crd] Service failover support in TraefikService CRD (#12733 by jspdown)
• [k8s/crd, service] Support cipher suites configuration with ServersTransport (#11965 by NEwa-05)
• [k8s/ingress, middleware, k8s/crd, service, k8s/gatewayapi] Services middleware and Gateway API filters on HTTP backends (#12544 by juliens)
• [k8s/ingress-nginx] Add nginx.ingress.kubernetes.io/proxy-connect-timeout annotation (#12572 by gndz07)
• [k8s/ingress-nginx] Add rewrite-target nginx annotations support (#12534 by LBF38)
• [k8s/ingress-nginx] Add support for app-root nginx annotation (#12576 by LBF38)
• [k8s/ingress-nginx] Add support for auth-signin annotation (#12502 by DesalLama)
• [k8s/ingress-nginx] Add support for from-to-www-redirect NGINX annotation (#12610 by LBF38)
• [k8s/ingress-nginx] Add support for proxy-read-timeout and proxy-send-timeout NGINX annotations (#12630 by LBF38)
• [k8s/ingress-nginx] Add support for session-cookie-expires nginx annotation (#12558 by LBF38)
• [k8s/ingress-nginx] Add support for upstream-hash-by NGINX annotation (#12749 by LBF38)
• [k8s/ingress-nginx] Allow entry points to be specified on Nginx Ingresses (#12727 by ajacques)
• [k8s/ingress-nginx] Implement proxy-http-version annotation (#12743 by KshitijBharde)
• [k8s/ingress-nginx] Nginx x-forwarded-prefix annotation (#12697 by nandorKollar)
• [k8s/ingress-nginx] Support auth-tls-secret and auth-tls-verify-client annotations (#12595 by gndz07)
• [k8s/ingress-nginx] Support limit-rpm annotation for ingress-nginx (#12703 by Ph4rell)
• [k8s/ingress-nginx] Support limit-rps annotation for Ingress NGINX (#12709 by amazon7737)
• [k8s/ingress-nginx] Support NGINX buffering annotations (#12459 by blasko03)
• [k8s/ingress-nginx] Support NGINX canary annotations (#12739 by kevinpollet)
• [k8s/ingress-nginx] Support NGINX custom-headers annotation (#12414 by nandorKollar)
• [k8s/ingress-nginx] Support NGINX upstream-vhost annotation (#12412 by nandorKollar)
• [k8s/ingress-nginx] Support NGINX whitelist-source-range annotation (#12423 by blasko03)
• [k8s/ingress-nginx] Support permanent-redirect and temporal-redirect annotations (#12561 by LBF38)
• [k8s/ingress-nginx] Support proxy-next-upstream* annotations (#12710 by gndz07)
• [k8s/ingress-nginx] Support server-alias annotation for Ingress NGINX (#12707 by amazon7737)
• [k8s/ingress-nginx] Support upstream-keepalive-timeout (#12708 by jcob-sikorski)
• [k8s/ingress-nginx] Add support for variable interpolation in auth-signin NGINX annotation (#12640 by LBF38)
• [k8s/ingress-nginx] Implement server-snippet and configuration-snippet annotations (#12715 by juliens)
• [k8s/ingress-nginx] Add custom-http-errors and default-backend annotations (#12637 by juliens)
• [k8s/ingress-nginx] Support auth-tls-pass-certificate-to-upstream annotation (#12629 by gndz07)
• [metrics] Support file path for metrics.influxdb2.token option (#12458 by barhun)
• [middleware] Add encodedCharacters middleware (#12555 by gndz07)
• [middleware] Enable retries based on HTTP response status codes, timeout, and non-idempotent methods (#12667 by LBF38)
• [middleware, authentication] Add authSignInURL in forward auth middleware (#12293 by kyounghunJang)
• [server] Add global option to disable X-Forwarded-For appending (#12374 by lbenguigui)
• [server] Replace Split in loops with more efficient SplitSeq (#12316 by boqishan)
• [service] Failover according to response status code (#12596 by lbenguigui)
• [tls] Make TLSStore gracefully handle missing secrets (#12522 by david-garcia-garcia)
• [webui] Add dashboard name configuration (#12410 by gndz07)
• [webui] Web UI dashboard improvements (#12236 by gndz07)
• [webui] Details pages UI improvement (#12377 by gndz07)
• Use unicode.MaxASCII for clearer ASCII check (#12741 by 1911860538)

Bug fixes:

• [k8s/ingress-nginx] Add ipAllowListStrategy option for allowlist/whitelist annotations (#12932 @mathieuherbert)
• [k8s/ingress-nginx] Fix regressions after refacto of the ingress-nginx provider (#13086 @juliens)
• [k8s/ingress-nginx] Fix typo in default CORS allowed headers (#13088 @mliang2)
• [docker, ecs] Migrate to github.com/moby/moby modules (#12672 @thaJeztah)
• [logs, metrics, tracing] Bump go.opentelemetry.io/otel (#13100 @juliens)
• [k8s/crd] Remove cross-provider sanitization for Kubernetes service loading (#13087 @rtribotte)
• [docker, ecs] Migrate to github.com/moby/moby modules (#13053 @mmatur)
• [k8s/ingress-nginx] Fix SSL redirect behavior for ingress-nginx provider (#13028 @gndz07)
• [k8s/ingress-nginx] Do not require a port for ExternalName services (#13033 @kevinpollet)
• [k8s, k8s/ingress-nginx] Add regression test for ingress default backend without rules (#13066 @mmatur)
• [acme] Bump github.com/go-acme/lego/v4 to v4.35.1 (#13027 @ldez)
• [server] Bump github.com/vulcand/oxy to v2.1.0 (#13046 @ldez)
• [acme] Bump github.com/go-acme/lego/v4 to v4.35.2 (#13043 @ldez)
• [middleware] Add errorRequestHeaders option to Errors middleware (#13034 @gndz07)
• [acme] Bump github.com/go-acme/lego/v4 to v4.34.0 (#12993 @ldez)
• [docker] Downgrade log level for missing container on inspect (#12900 @Otoru)
• [k8s/crd, k8s] Honor allowCrossNamespace with chain middleware CRD (#12976 @rtribotte)
• [k8s/ingress-nginx] Avoid 302 redirect when rewrite-target value is not an absolute URL for ingress-nginx provider (#12977 @gndz07)
• [k8s/ingress-nginx] Fix custom headers annotation with 503 Service Unavailable (#12969 @LBF38)
• [k8s/ingress-nginx] Fix service unavailable on ingress-nginx (#12996 @LBF38)
• [k8s/ingress-nginx] Handle duplicate server-alias on ingress-nginx provider (#13019 @gndz07)
• [k8s/ingress-nginx] Use QuoteMeta for cookie name when building canary rules (#12973 @kevinpollet)
• [middleware, authentication] Cleanup and make ForwardAuth logs consistent (#13013 @kevinpollet)
• [middleware, authentication] Fix trustForwardHeader on forward auth middleware (#12994 @juliens)
• [middleware, authentication] Remove map lookup making the basic auth notFoundSecret empty (#12960 @rtribotte)
• [middleware, k8s/ingress-nginx] Fix app-root with query params redirect (#12986 @LBF38)
• [middleware, k8s/ingress-nginx] Fix rewrite target with full URL and no regex in ingress path (#12992 @LBF38)
• [middleware, k8s/ingress-nginx] Preserve request query on absolute-URL redirect (#13020 @SAY-5)
• [middleware, k8s/ingress-nginx] Resolve NGINX variables in ingress-nginx upstream-vhost annotation (#12978 @mmatur)
• [middleware] Deprecate ForwardAuth.TrustForwardHeader option (#13012 @kevinpollet)
• [middleware] Remove untrusted X headers with underscores (#12961 @rtribotte)
• [middleware] Sanitize the request URL after stripping the prefix (#12990 @kevinpollet)
• [sticky-session, k8s/crd] Make SameSite cookie value case-insensitive (#12922 @murataslan1)
• [tls] Restore default cipher suites when serversTransport has no explicit cipherSuites (#12974 @mmatur)
• [webui] Bump lodash version (#12954 @gndz07)
• [webui] Upgrade form-data to 2.5.4, 3.0.4, 4.0.4 (#12958 @orbisai0security)
• [k8s/ingress-nginx] Fix rewrite-target annotation handling with empty path and non-regex path (#12905 @LBF38)
• [middleware] Bump github.com/klauspost/compress v1.18.4 (#12937 @thaJeztah)
• [k8s/crd] Fix panic with Failover services in Kubernetes (#12853 @juliens)
• [k8s/ingress-nginx] Fix rewrite directive in configuration-snippet to trim quotes (#12855 @gndz07)
• [k8s/ingress-nginx] Fix rewrite-target to handle full URL (#12854 @gndz07)
• [k8s/ingress-nginx] Handle empty rewrite-target like unset rewrite-target (#12832 @sathieu)
• [k8s/ingress-nginx] Fix TLS behavior in ingress-nginx provider (#12831 @LBF38)
• [k8s/ingress-nginx] Fix auth-response-headers whitespace trimming in ingress-nginx provider (#12856 @mmatur)
• [acme] Bump github.com/go-acme/lego/v4 to v4.33.0 (#12840 @ldez)
• [server, tcp] Fix postgres STARTTLS with TLS termination (#12847 @mmatur)
• [api] Fix allow colons and tildes in api.basePath validation (#12857 @mmatur)
• [server] Fix comment and unnecessary allocation in withRoutingPath (#12880 @boinger)
• [grpc] Bump google.golang.org/grpc to v1.79.3 (#12845 @mmatur)
• [middleware, authentication] Prevent duplicate user headers in basic and digest auth middleware (#12851 @juliens)
• [middleware] Fix StripPrefix and StripPrefixRegex to slice the prefix using encoded prefix length (#12863 @gndz07)
• [k8s/ingress-nginx] Fix use-regex annotation behavior and add strictValidatePathType config for ingress-nginx provider (#12773 @gndz07)
• [logs, otel] Add OTel-conformant trace context attributes to access logs (#12801 @mmatur)
• [k8s/gatewayapi] Fix incorrect hostname matching between listener and route (#12599 @TheColorman)
• [k8s/ingress] Fix ingress router's rule (#12808 @gndz07)
• [webui] Remove AGPL license in code (#12799 @Desel72)
• [k8s/ingress-nginx] Fix proxy-ssl-verify annotation (#12825 @LBF38)
• [http] Add maxResponseBodySize configuration on HTTP provider (#12788 @gndz07)
• [tls] Support fragmented TLS client hello (#12787 @rtribotte)
• [middleware, authentication] Make basic auth check timing constant (#12803 @rtribotte)
• [acme] Add missing renew options (#12467 by ldez)
• [acme] Add timeout to ACME-TLS/1 challenge handshake (#12516 by LBF38)
• [acme] Alter TLS renewal period (#12479 by LtHummus)
• [acme] Bump github.com/go-acme/lego/v4 to v4.28.0 (#12218 by ldez)
• [acme] Bump github.com/go-acme/lego/v4 to v4.29.0 (#12333 by ldez)
• [acme] Bump github.com/go-acme/lego/v4 to v4.30.1 (#12432 by ldez)
• [acme] Bump github.com/go-acme/lego/v4 to v4.31.0 (#12529 by ldez)
• [acme] Bump github.com/go-acme/lego/v4 to v4.32.0 (#12702 by ldez)
• [acme] Remove invalid private key in log (#12574 by juliens)
• [acme] Replace hardcoded references to LetsEncrypt in log messages (#12464 by schildbach)
• [cli] Fix health check ping (#12512 by olamilekan000)
• [docker] Auto-negotiate Docker API Version (#12256 by felixbuenemann)
• [docker] Bump Docker and OpenTelemetry dependencies (#12761 by mmatur)
• [docker, docker/swarm] Auto-negotiate Docker API version (#12262 by kevinpollet)
• [fastproxy] Bump github.com/valyala/fasthttp to v1.69.0 (#12763 by kevinpollet)
• [healthcheck] Reject absolute URL in healthcheck path configuration (#12653 by rtribotte)
• [healthcheck] Validate healthcheck path configuration (#12642 by rtribotte)
• [healthcheck, grpc] Remove path parsing with grpc healthcheck (#12760 by rtribotte)
• [http3] Bump github.com/quic-go/quic-go to v0.57.0 (#12308 by GreyXor)
• [http3] Bump github.com/quic-go/quic-go to v0.57.1 (#12319 by GreyXor)
• [http3] Bump github.com/quic-go/quic-go to v0.58.0 (#12448 by GreyXor)
• [http3] Bump github.com/quic-go/quic-go to v0.59.0 (#12553 by jnoordsij)
• [k8s] Fix condition used for serving and fenced endpoints (#12521 by LBF38)
• [k8s/gatewayapi] Fix Gateway API router's rules (#12753 by rtribotte)
• [k8s/ingress] Fix panic for empty defaultBackend and defaultBackend without resources (#12509 by gndz07)
• [k8s/ingress-nginx] Add AllowCrossNamespaceResources and GlobalAllowedResponseHeader options to control custom headers annotations (#12680 by rtribotte)
• [k8s/ingress-nginx] Deprecate Kubernetes Ingress NGINX provider experimental flag (#12286 by rtribotte)
• [k8s/ingress-nginx] Fix nginx rewrite target (#12730 by mmatur)
• [k8s/ingress-nginx] Fix NGINX sslredirect annotation support (#12387 by rtribotte)
• [k8s/ingress-nginx] Fix nginx.ingress.kubernetes.io/proxy-ssl-verify annotation support (#12351 by rtribotte)
• [k8s/ingress-nginx] Fix SSL redirect to match NGINX behavior (#12361 by mmatur)
• [k8s/ingress-nginx] Fix the service name for ingress-nginx provider (#12352 by mmatur)
• [k8s/ingress-nginx] Fix use-regex nginx annotation (#12531 by LBF38)
• [k8s/ingress-nginx] Prevent Ingress Nginx provider http router to attach to an entrypoint with TLS (#12528 by rtribotte)
• [metrics, tracing, accesslogs] Fix ObservabilityConfig SetDefaults (#12636 by mmatur)
• [middleware] Fix case sensitivity on x-forwarded headers for Connection (#12690 by LBF38)
• [middleware] Fix HasSecureHeadersDefined returning false when stsSeconds is 0 (#12684 by veeceey)
• [middleware, authentication] Add maxResponseBodySize configuration to forwardAuth middleware (#12694 by gndz07)
• [middleware, authentication] Change ForwardAuth error log level from DEBUG to ERROR (#12324 by murataslan1)
• [middleware, authentication] Handle empty/missing User-Agent header (#12545 by a-stangl)
• [middleware, k8s, k8s/ingress-nginx] Fix from to www nginx annotation (#12736 by mmatur)
• [middleware, k8s/ingress-nginx] Fix custom error pages behavior for ingress-nginx provider (#12738 by mmatur)
• [otel] Bump go.opentelemetry.io/otel dependencies (#12754 by rtribotte)
• [plugins] Validate plugin module name (#12291 by kevinpollet)
• [redis] Fix mutually exclusive verification for Redis (#12442 by juliens)
• [server] Bump golang.org/x/crypto to v0.45.0 (#12296 by kevinpollet)
• [server] Bump golang.org/x/net to v0.51.0 (#12756 by kevinpollet)
• [server] Filter unknown nodes with file and env for the deprecation loader (#12227 by rtribotte)
• [server] Fix deny encoded characters (#12454 by rtribotte)
• [server] Fix deny encoded characters (#12457 by rtribotte)
• [server] Fix multi-layer routing with models (#12258 by juliens)
• [server] Fix TLS handshake error handling (#12692 by juliens)
• [server] Make encoded character options opt-in (#12540 by gndz07)
• [server] Make the aggregator compute provider namespace for router's parentRefs (#12235 by rtribotte)
• [server] Print access logs for rejected requests and warn about new behavior (#12424 by kevinpollet)
• [server] Print access logs for rejected requests and warn about new behavior (#12426 by rtribotte)
• [server] Reject suspicious encoded characters (#12360 by rtribotte)
• [server] Remove conn deadline after STARTTLS negociation (#12639 by rtribotte)
• [service] Avoid recursion with services (#12591 by juliens)
• [tls] Fix verifyServerCertMatchesURI function behavior (#12575 by kevinpollet)
• [tls, server] Cap TLS record length to RFC 8446 limit in ClientHello peeking (#12638 by mmatur)
• [tracing, otel] Use ParentBased sampler to respect parent span sampling decision (#12403 by xe-leon)
• [udp] Revert "Avoid allocations in readLoop by using sync.Pool" (#12267 by kevinpollet)
• [webui] Bump dependencies of documentation and webui (#12581 by gndz07)
• [webui] Fix basePath validation for dashboard template (#12729 by gndz07)
• [webui] Fix blocked navigation on Safari (#12231 by gndz07)
• [webui] Fix missing type definition (#12780 by gndz07)
• [webui] Fix priority display in dashboard and ACME bypass redirect (#12740 by mmatur)
• [webui] Restore remote Upgrade to Hub button web component (#12219 by gndz07)
• [webui] Use url.Parse to validate X-Forwarded-Prefix value (#12643 by kevinpollet)
• [webui] Validate X-Forwarded-Prefix value for dashboard redirect (#12514 by LBF38)

Documentation:

• [service] Service-level Middleware Documentation (#13095 @nmengin)
• [k8s/gatewayapi] Update Helm chart values link for Kubernetes Gateway (#13063 @0054)
• [k8s/ingress-nginx] Add ingress-nginx ConfigMap migration step (#12963 @sheddy-traefik)
• [k8s/ingress-nginx] Delete the coming soon section from the ingress-nginx documentation (#13037 @nmengin)
• [k8s] Fix yaml indentation (#12957 @isayme)
• [k8s] Clarify install config watchNamespace watches only one namespace (#12962 @parkerfath)
• [k8s/crd] Update ingressroute.md (#12916 @Rajakavitha1)
• [k8s/ingress-nginx] Document the rd parameter behavior for the auth-signin annotation (#13017 @kevinpollet)
• Reverse versions order in migration guide (#12959 @nmengin)
• Update vulnerability submission guidelines (#12968 @emilevauge)
• [docker] Fix docker-compose.yaml location in Docker setup page (#12860 @ScottA38)
• [docker, consul, ecs, k8s] Fix documentation on how to restrict the scope of service discovery (#12645 @mloiseleur)
• [k8s/gatewayapi] Update gateway-api link in getting-started to v1.5.1 (#12930 @isayme)
• [k8s/ingress-nginx] Add OVHcloud (OpenStack Octavia) to Cloud-Specific IP Management (#12759 @antonin-a)
• [k8s/ingress-nginx] Clarify IngressClass selection logic (#12926 @kevinpollet)
• Add redirects for deleted pages (#12889 @sheddy-traefik)
• Fix default value of http.sanitizePath (#12904 @iTob191)
• [acme] Clarify CNAME explanation in ACME Documentation (#12818 @sheddy-traefik)
• [k8s/ingress-nginx] Add ingress-nginx migration banner on documentation pages (#12872 @gndz07)
• [k8s/ingress] Improve Kubernetes Ingress Routing Documentation (#12876 @sheddy-traefik)
• [k8s/ingress-nginx] Clarify that NGINX Ingress watchNamespace watches only one namespace (#12873 @parkerfath)
• [k8s] Improve the multi tenant security note (#12822 @nmengin)
• Fix unnecessary escaping of pipe in regexp examples (#12784 @diegmonti)
• Add vulnerability submission quality guidelines (#12807 @emilevauge)
• Fix start up message format (#12806 @mloiseleur)
• Remove unsupported servers[n].address from TCP label examples (#12817 @sheddy-traefik)
• Bump mkdocs-traefiklabs to use consent mode (#12804 @darkweaver87)
• [acme] Add missing ACME options and clean up table for more visibility (#12208 by sheddy-traefik)
• [api] Fix typo in API dashboard configuration instructions (#12335 by NAICOLAS)
• [docker] Add documentation for loadbalancer.server.url in Docker and Swarm providers (#12289 by webash)
• [docker] Update docker in-depth setup guide (#12682 by mdevino)
• [docker/swarm] Update swarm.md traefik version (#12508 by DBouraoui)
• [k8s] Fix Gateway API version and the list of features supported (#12254 by nmengin)
• [k8s] Fix Kubernetes reference yml file (#12406 by mmatur)
• [k8s] Fix kubernetes.md with correct http redirections (#12603 by MartenM)
• [k8s] Fix Nginx provider documentation (#12266 by nmengin)
• [k8s] Improve the K8S multi-tenancy security note (#12444 by nmengin)
• [k8s] Make labelSelector option casing more consistent (#12658 by holysoles)
• [k8s, k8s/ingress-nginx] Add configmaps right to Ingress NGINX RBAC (#12557 by kevinpollet)
• [k8s/gatewayapi] Fix links of Helm chart values reference to providers.kubernetesGateway.enabled (#12315 by shouhei)
• [k8s/ingress, k8s] Fix Kubernetes Ingress provider documentation (#12443 by nmengin)
• [k8s/ingress-nginx] Add auth-signin to unsupported nginx annotations list (#12370 by fibsifan)
• [k8s/ingress-nginx] Add RBAC documentation for Ingress NGINX provider (#12445 by nmn3m)
• [k8s/ingress-nginx] Add temporary note to advertise the incoming NGINX annotations (#12699 by nmengin)
• [k8s/ingress-nginx] Fix default value of ingress-nginx provider in documentation (#12328 by mloiseleur)
• [k8s/ingress-nginx] Fix ingress-nginx annotations documentation (#12510 by nmengin)
• [k8s/ingress-nginx] Improve ingress-nginx provider documentation (#12288 by sheddy-traefik)
• [k8s/ingress-nginx] Improve the configuration options display of the Kubernetes ingress-nginx provider (#12297 by mloiseleur)
• [k8s/ingress-nginx] NGINX Ingress Controller to Traefik Migration Guide (#12318 by sheddy-traefik)
• [middleware] Correct documentation for Digest auth (#12651 by Zash)
• [middleware] Fix default encodings in compress middleware (#12216 by Belphemur)
• [middleware, k8s/crd] Fix the errors middleware's document for Kubernetes CRD (#12600 by yuito-it)
• [service] Fix loadbalancer doc for highest random weight (#12283 by ozon2)
• [tls] Clarify SNI selection (#12482 by AnuragEkkati)
• Add @gndz07 as a current maintainer (#12594 by emilevauge)
• Add a Breaking change note to the changelog (#12398 by nmengin)
• Add documentation about checkNewVersion (#12298 by darkweaver87)
• Add missing .http to TOML table names (#12713 by Darsstar)
• Add product comparison matrix and features page (#12037 by sheddy-traefik)
• Bring back security section on API & Dashboard documentation page (#12507 by gndz07)
• Clarify doc about encoded characters rejection (#12391 by rtribotte)
• Clean Up Menu Entries & Update Expose Overview (#12405 by sheddy-traefik)
• Correct encoded characters allowance in entrypoints.md (#12679 by Apflkuacha)
• Correctly Format the HTTP Service Documentation (#12311 by sheddy-traefik)
• Document negative priority support for routers (#12505 by understood-the-assignment)
• Document Path matcher placeholder removal in v3 migration guide (#12570 by sheddy-traefik)
• Fix API basepath option documentation (#12744 by nmengin)
• Fix broken links in TCP Service and HTTP Router documentation (#12215 by sheddy-traefik)
• Fix code copy button positioning (#12520 by AnuragEkkati)
• Fix encoded characters entryPoint option documentation (#12384 by rtribotte)
• Fix encoded characters option documentation (#12373 by kevinpollet)
• Fix encodedCharacters entryPoint option documentation (#12385 by rtribotte)
• Fix incorrect TOML example in entrypoints docs (#12711 by mfmfuyu)
• Fix link description in Traefik Proxy documentation (#12488 by schaerfo)
• Fix Menu Item Naming (#12431 by sheddy-traefik)
• Fix migration guide indentation (#12365 by kevinpollet)
• Fix migration guide URLs in deprecation notice (#12430 by alexmar07)
• Fix typo in kubernetes.md (#12515 by EdwardSalkeld)
• Fix typo in v3.6 migration guide (#12212 by jnoordsij)
• Fix typo on JWT documentation (#12616 by mdevino)
• Improve Service Reference page (#12541 by sheddy-traefik)
• Improve the structure of the routing reference pages (#12429 by sheddy-traefik)
• Increased content width in documentation (#12632 by tobiasge)
• Remove extra dots in migration guide (#12573 by rtribotte)
• Remove extraneous dots in migration guide (#12571 by dathbe)
• Restore documentation on http.maxHeaderBytes (#12440 by mloiseleur)
• Split Expose User Guides & Add Multi-Layer Routing Section (#12238 by sheddy-traefik)
• Update Configuration Overview Page (#12202 by sheddy-traefik)
• Update SECURITY.md (#12304 by cwayne18)
• Update SECURITY.md to streamline information (#12310 by emilevauge)

Misc:

• Make FLAGS Make variable usable (#13009 @twz123)