feat(container)!: Update image ghcr.io/traefik/helm/traefik ( 37.4.0 → 38.0.1 )

This MR contains the following updates:

Package	Update	Change
ghcr.io/traefik/helm/traefik (source)	major	37.4.0 → 38.0.1

---

Release Notes

traefik/traefik-helm-chart (ghcr.io/traefik/helm/traefik)

v38.0.1

Compare Source

🐛 Bug fixes

• fix(ports): 🐛 http.encodedCharacters on custom entrypoints #​1606 by @​mloiseleur
• fix(ports): 🐛 add missing http.maxHeaderBytes option #​1604 by @​mloiseleur

📦 Others

• chore(release): 🚀 publish traefik 38.0.1 #​1608 by @​mloiseleur

v38.0.0

Compare Source

Upgrades Notes

[!IMPORTANT] CRDs has to be upgraded before the Chart. See UPGRADING instructions.

There are two breaking changes in this release:

1. Traefik Proxy v3.6.4+ contains a security fix that is also a breaking change. See upstream documentation for more details.
2. MR #​1596 align kubernetesIngressNginx provider setting with upstream. There is a before / after example in the MR description and MR #​1587 align labelSelector syntax between providers

[!NOTE] If you need to restore Traefik behavior of v3.6.3 or inferior, it can be set with values.

Here is an example on websecure entrypoint:

ports:
  websecure:
    http:
      encodedCharacters:
        allowEncodedSlash: true
        allowEncodedBackSlash: true
        allowEncodedNullCharacter: true
        allowEncodedSemicolon: true
        allowEncodedPercent: true
        allowEncodedQuestionMark: true
        allowEncodedHash: true
      sanitizePath: false

This is not recommended, it may expose you to GHSA-gm3x-23wp-hc2c.

💥 BREAKING CHANGES

• fix(providers)!: align labelSelector for kubernetesGateway and knative #​1587 by @​shubhamch71
• fix(nginx)!: 🐛 align provider settings and provide required rbac #​1596 by @​mloiseleur

🚀 Features

• feat(CRDs): update Traefik Hub to v1.24.1, with required RBACs #​1571 by @​jspdown
• feat(ports): enforce schema #​1586 by @​remyj38
• feat(CRDs): update Traefik Hub to v1.24.2 #​1585 by @​traefiker
• feat(providers): ✨ enforce schema #​1595 by @​mloiseleur
• feat(security): ✨ 🔒️ add support for request path options of traefik 3.6.4+ #​1594 by @​mloiseleur
• feat(deps): update traefik docker tag to v3.6.4 #​1590 by @​renovate[bot]
• feat(deps): update traefik docker tag to v3.6.5 #​1599 by @​renovate[bot]

🐛 Bug fixes

• fix: update error message for maxUnavailable validation #​1591 by @​lucasra1
• fix(notes): minor typo #​1593 by @​rndmh3ro
• fix(pvc): allow empty storageClassName #​1579 by @​fopina
• fix(providers): ✨ enforce schema for all providers #​1601 by @​mloiseleur

📦 Others

• chore(deps): update actions/checkout action to v6 #​1573 by @​renovate[bot]
• docs: Update EXAMPLES.md with REGIONAL load balancer note for Digital Ocean #​1574 by @​kamikazechaser
• chore(release): 🚀 publish traefik 38.0.0 and crds 1.13.0 #​1600 by @​mloiseleur

New Contributors

• @​shubhamch71 made their first contribution in #​1587
• @​kamikazechaser made their first contribution in #​1574
• @​lucasra1 made their first contribution in #​1591
• @​remyj38 made their first contribution in #​1586
• @​rndmh3ro made their first contribution in #​1593
• @​fopina made their first contribution in #​1579

Full Changelog: https://github.com/traefik/traefik-helm-chart/compare/v37.4.0...v38.0.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.