Traefik 3.7.7

Traefik 3.7.7 Is Here

Traefik v3.7.7 ships as a patch release fixing several bugs across middleware, Kubernetes ingress, and routing subsystems. No breaking changes. Upgrade recommended for anyone running v3.7.x in production.

Bug Fixes

• Middleware: app-root with nginx variable interpolation — Fixed support for nginx-style variable interpolation in the app-root middleware for Kubernetes ingress-nginx setups.
• Rules: HostSNI(*) and Host(*) consistency — Addressed a long-standing inconsistency between HostSNI(*) and Host(*) rule matching.
• Kubernetes Gateway API: ExtensionRef filters — ExtensionRef filters on backendRefs now correctly resolve against the HTTPRoute namespace.
• Middleware: empty unknown-length bodies in mirroring — Fixed a panic when mirroring requests with empty unknown-length bodies.
• Kubernetes CRD: cross-provider ref check — Fixed cross-provider reference checking for TCP ServersTransport in the CRD provider.
• ReplacePathRegex middleware — Sanitized replaced paths to prevent injection via regex replacement.
• Kubernetes: endpoint slice panic — Fixed a panic when endpoint slice port values or names are nil.

Dependency Updates

• Bumped software.sslmate.com/src/go-pkcs12 to v0.7.3
• Bumped go.opentelemetry.io/otel to v1.44.0

Documentation

• Migration guide now references the correct version.
• Changelog for v2.11.51 has been corrected.
• v3.7 added to the supported version docs.

How to Upgrade

Update your Docker image tag to traefik:v3.7.7, or if installing via binary, download the latest release from the GitHub releases page. The upgrade is a drop-in replacement for v3.7.6 — no configuration changes required.