🎨 Renovate: Update Helm release traefik to v38 #113

SpiritLooper · 2025-12-19T18:05:41Z

This PR contains the following updates:

Package	Update	Change
traefik (source)	major	`37.4.0` -> `38.0.1`

Release Notes

traefik/traefik-helm-chart (traefik)

`v38.0.1`

Compare Source

🐛 Bug fixes

fix(ports): 🐛 http.encodedCharacters on custom entrypoints #1606 by @mloiseleur
fix(ports): 🐛 add missing http.maxHeaderBytes option #1604 by @mloiseleur

📦 Others

chore(release): 🚀 publish traefik 38.0.1 #1608 by @mloiseleur

`v38.0.0`

Compare Source

Upgrades Notes

[!IMPORTANT]
CRDs has to be upgraded before the Chart. See UPGRADING instructions.

There are two breaking changes in this release:

Traefik Proxy v3.6.4+ contains a security fix that is also a breaking change. See upstream documentation for more details.
PR #1596 align kubernetesIngressNginx provider setting with upstream. There is a before / after example in the PR description and PR #1587 align labelSelector syntax between providers

[!NOTE]
If you need to restore Traefik behavior of v3.6.3 or inferior, it can be set with values.

Here is an example on websecure entrypoint:

ports:
  websecure:
    http:
      encodedCharacters:
        allowEncodedSlash: true
        allowEncodedBackSlash: true
        allowEncodedNullCharacter: true
        allowEncodedSemicolon: true
        allowEncodedPercent: true
        allowEncodedQuestionMark: true
        allowEncodedHash: true
      sanitizePath: false

This is not recommended, it may expose you to GHSA-gm3x-23wp-hc2c.

💥 BREAKING CHANGES

fix(providers)!: align labelSelector for kubernetesGateway and knative #1587 by @shubhamch71
fix(nginx)!: 🐛 align provider settings and provide required rbac #1596 by @mloiseleur

🚀 Features

feat(CRDs): update Traefik Hub to v1.24.1, with required RBACs #1571 by @jspdown
feat(ports): enforce schema #1586 by @remyj38
feat(CRDs): update Traefik Hub to v1.24.2 #1585 by @traefiker
feat(providers): ✨ enforce schema #1595 by @mloiseleur
feat(security): ✨ 🔒️ add support for request path options of traefik 3.6.4+ #1594 by @mloiseleur
feat(deps): update traefik docker tag to v3.6.4 #1590 by @renovate[bot]
feat(deps): update traefik docker tag to v3.6.5 #1599 by @renovate[bot]

🐛 Bug fixes

fix: update error message for maxUnavailable validation #1591 by @lucasra1
fix(notes): minor typo #1593 by @rndmh3ro
fix(pvc): allow empty storageClassName #1579 by @fopina
fix(providers): ✨ enforce schema for all providers #1601 by @mloiseleur

📦 Others

chore(deps): update actions/checkout action to v6 #1573 by @renovate[bot]
docs: Update EXAMPLES.md with REGIONAL load balancer note for Digital Ocean #1574 by @kamikazechaser
chore(release): 🚀 publish traefik 38.0.0 and crds 1.13.0 #1600 by @mloiseleur

New Contributors

@shubhamch71 made their first contribution in #1587
@kamikazechaser made their first contribution in #1574
@lucasra1 made their first contribution in #1591
@remyj38 made their first contribution in #1586
@rndmh3ro made their first contribution in #1593
@fopina made their first contribution in #1579

Full Changelog: traefik/traefik-helm-chart@v37.4.0...v38.0.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

github-actions · 2025-12-19T18:05:54Z

Here is the diff to main:

--- k8s/infra/ingress Kustomization: flux-system/ingress HelmRelease: ingress/traefik

+++ k8s/infra/ingress Kustomization: flux-system/ingress HelmRelease: ingress/traefik

@@ -15,7 +15,7 @@

       sourceRef:
         kind: HelmRepository
         name: traefik
-      version: 37.4.0
+      version: 38.0.1
   interval: 10m
   releaseName: traefik
   targetNamespace: ingress
--- HelmRelease: ingress/traefik ServiceAccount: ingress/traefik

+++ HelmRelease: ingress/traefik ServiceAccount: ingress/traefik

@@ -7,7 +7,7 @@

   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-ingress
-    helm.sh/chart: traefik-37.4.0
+    helm.sh/chart: traefik-38.0.1
     app.kubernetes.io/managed-by: Helm
 automountServiceAccountToken: false
 
--- HelmRelease: ingress/traefik ClusterRole: ingress/traefik-ingress

+++ HelmRelease: ingress/traefik ClusterRole: ingress/traefik-ingress

@@ -6,7 +6,7 @@

   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-ingress
-    helm.sh/chart: traefik-37.4.0
+    helm.sh/chart: traefik-38.0.1
     app.kubernetes.io/managed-by: Helm
 rules:
 - apiGroups:
@@ -58,6 +58,13 @@

   verbs:
   - update
 - apiGroups:
+  - ''
+  resources:
+  - namespaces
+  verbs:
+  - list
+  - watch
+- apiGroups:
   - traefik.io
   resources:
   - ingressroutes
--- HelmRelease: ingress/traefik ClusterRoleBinding: ingress/traefik-ingress

+++ HelmRelease: ingress/traefik ClusterRoleBinding: ingress/traefik-ingress

@@ -6,7 +6,7 @@

   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-ingress
-    helm.sh/chart: traefik-37.4.0
+    helm.sh/chart: traefik-38.0.1
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
--- HelmRelease: ingress/traefik Service: ingress/traefik-metrics

+++ HelmRelease: ingress/traefik Service: ingress/traefik-metrics

@@ -8,7 +8,7 @@

     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-ingress
     app.kubernetes.io/component: metrics
-    helm.sh/chart: traefik-37.4.0
+    helm.sh/chart: traefik-38.0.1
     app.kubernetes.io/managed-by: Helm
     app: traefik
 spec:
--- HelmRelease: ingress/traefik Service: ingress/traefik

+++ HelmRelease: ingress/traefik Service: ingress/traefik

@@ -7,7 +7,7 @@

   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-ingress
-    helm.sh/chart: traefik-37.4.0
+    helm.sh/chart: traefik-38.0.1
     app.kubernetes.io/managed-by: Helm
 spec:
   type: LoadBalancer
--- HelmRelease: ingress/traefik Deployment: ingress/traefik

+++ HelmRelease: ingress/traefik Deployment: ingress/traefik

@@ -7,7 +7,7 @@

   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-ingress
-    helm.sh/chart: traefik-37.4.0
+    helm.sh/chart: traefik-38.0.1
     app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 1
@@ -27,7 +27,7 @@

       labels:
         app.kubernetes.io/name: traefik
         app.kubernetes.io/instance: traefik-ingress
-        helm.sh/chart: traefik-37.4.0
+        helm.sh/chart: traefik-38.0.1
         app.kubernetes.io/managed-by: Helm
     spec:
       serviceAccountName: traefik
@@ -35,7 +35,7 @@

       terminationGracePeriodSeconds: 60
       hostNetwork: false
       containers:
-      - image: docker.io/traefik:v3.6.2
+      - image: docker.io/traefik:v3.6.5
         imagePullPolicy: IfNotPresent
         name: traefik
         resources:
--- HelmRelease: ingress/traefik IngressClass: ingress/traefik

+++ HelmRelease: ingress/traefik IngressClass: ingress/traefik

@@ -7,7 +7,7 @@

   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-ingress
-    helm.sh/chart: traefik-37.4.0
+    helm.sh/chart: traefik-38.0.1
     app.kubernetes.io/managed-by: Helm
   name: traefik
 spec:
--- HelmRelease: ingress/traefik IngressRoute: ingress/traefik-dashboard

+++ HelmRelease: ingress/traefik IngressRoute: ingress/traefik-dashboard

@@ -7,7 +7,7 @@

   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-ingress
-    helm.sh/chart: traefik-37.4.0
+    helm.sh/chart: traefik-38.0.1
     app.kubernetes.io/managed-by: Helm
 spec:
   entryPoints:
--- HelmRelease: ingress/traefik ServiceMonitor: ingress/traefik

+++ HelmRelease: ingress/traefik ServiceMonitor: ingress/traefik

@@ -8,7 +8,7 @@

     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-ingress
     app.kubernetes.io/component: metrics
-    helm.sh/chart: traefik-37.4.0
+    helm.sh/chart: traefik-38.0.1
     app.kubernetes.io/managed-by: Helm
     release: kube-prometheus-stack
 spec:
--- HelmRelease: ingress/traefik TLSStore: ingress/default

+++ HelmRelease: ingress/traefik TLSStore: ingress/default

@@ -7,7 +7,7 @@

   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-ingress
-    helm.sh/chart: traefik-37.4.0
+    helm.sh/chart: traefik-38.0.1
     app.kubernetes.io/managed-by: Helm
 spec:
   defaultCertificate:

🎨 Renovate: Update Helm release traefik to v38

297cdbd

SpiritLooper merged commit 7b0d691 into main Dec 19, 2025
2 of 3 checks passed

SpiritLooper deleted the renovate/traefik-38.x branch December 19, 2025 19:14

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

🎨 Renovate: Update Helm release traefik to v38 #113

🎨 Renovate: Update Helm release traefik to v38 #113

Uh oh!

SpiritLooper commented Dec 19, 2025

Uh oh!

github-actions bot commented Dec 19, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

🎨 Renovate: Update Helm release traefik to v38 #113

🎨 Renovate: Update Helm release traefik to v38 #113

Uh oh!

Conversation

SpiritLooper commented Dec 19, 2025

Release Notes

v38.0.1

🐛 Bug fixes

📦 Others

v38.0.0

💥 BREAKING CHANGES

🚀 Features

🐛 Bug fixes

📦 Others

New Contributors

Configuration

Uh oh!

github-actions bot commented Dec 19, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

`v38.0.1`

`v38.0.0`