v2.11.0

Enhancements:

• [middleware] Deprecate IPWhiteList middleware in favor of IPAllowList (#10249 by lbenguigui)
• [redis] Add Redis Sentinel support (#10245 by youkoulayley)
• [server] Add KeepAliveMaxTime and KeepAliveMaxRequests features to entrypoints (#10247 by juliens)
• [sticky-session] Hash WRR sticky cookies (#10243 by youkoulayley)

Bug fixes:

• [acme] Update go-acme/lego to v4.15.0 (#10392 by ldez)
• [authentication] Fix NTLM and Kerberos (#10405 by juliens)
• [file] Fix file watcher (#10420 by juliens)
• [file] Update github.com/fsnotify/fsnotify to v1.7.0 (#10313 by ldez)
• [http3] Update quic-go to v0.40.1 (#10296 by ldez)
• [middleware,tcp] Add missing TCP IPAllowList middleware constructor (#10331 by youkoulayley)
• [nomad] Update the Nomad API dependency to v1.7.2 (#10327 by jrasell)
• [server] Fix ReadHeaderTimeout for PROXY protocol (#10320 by juliens)
• [webui] Fixes the Header Button (#10395 by mdeliatf)
• [webui] Fix URL encode resource's id before calling API endpoints (#10292 by andsarr)

Documentation:

• [acme] Fix TLS challenge explanation (#10293 by cavokz)
• [docker] Update wording of compose example (#10276 by svx)
• [docker,acme] Fix typo (#10294 by youpsla)
• [ecs] Mention ECS as supported backend (#10393 by aleyrizvi)
• [k8s/crd] Adjust deprecation notice for Kubernetes CRD provider (#10317 by rtribotte)
• [middleware] Update the documentation for RateLimit to provide a better example (#10298 by rmburton)
• [server] Fix the keepAlive options for the CLI examples (#10398 by immanuelfodor)
• Prepare release v2.11.0-rc2 (#10384 by rtribotte)
• Improve Concepts documentation page (#10315 by oliver-dvorski)
• Prepare release v2.11.0-rc1 (#10326 by mmatur)
• Fix description for anonymous usage statistics references (#10287 by ariyonaty)
• Documentation enhancements (#10261 by svx)

v2.11.0-rc2

Bug fixes:

• [middleware,tcp] Add missing TCP IPAllowList middleware constructor (#10331 by youkoulayley)
• [nomad] Update the Nomad API dependency to v1.7.2 (#10327 by jrasell)

Documentation:

• Improve Concepts documentation page (#10315 by oliver-dvorski)

v2.11.0-rc1

Enhancements:

• [middleware] Deprecate IPWhiteList middleware in favor of IPAllowList (#10249 by lbenguigui)
• [redis] Add Redis Sentinel support (#10245 by youkoulayley)
• [server] Add KeepAliveMaxTime and KeepAliveMaxRequests features to entrypoints (#10247 by juliens)
• [sticky-session] Hash WRR sticky cookies (#10243 by youkoulayley)

Bug fixes:

• [file] Update github.com/fsnotify/fsnotify to v1.7.0 (#10313 by ldez)
• [http3] Update quic-go to v0.40.1 (#10296 by ldez)
• [server] Fix ReadHeaderTimeout for PROXY protocol (#10320 by juliens)

Documentation:

• [acme] Fix TLS challenge explanation (#10293 by cavokz)
• [docker,acme] Fix typo (#10294 by youpsla)
• [docker] Update wording of compose example (#10276 by svx)
• [k8s/crd] Adjust deprecation notice for Kubernetes CRD provider (#10317 by rtribotte)
• Fix description for anonymous usage statistics references (#10287 by ariyonaty)
• Documentation enhancements (#10261 by svx)

v2.10.7

Bug fixes:

• [logs] Fixed datadog logs json format issue (#10233 by sssash18)

v3.0.0-beta5

CVEs:

• CVE-2023-45283
• CVE-2023-45284
• CVE-2023-47124
• CVE-2023-47633
• CVE-2023-47106

Enhancements:

• [metrics] Upgrade OpenTelemetry dependencies (#10181 by mmatur)

Misc:

• Merge current v2.10 into v3.0 (#10272 by rtribotte)

v2.10.6

Go CVEs:

• CVE-2023-45283
• CVE-2023-45284

Bug fixes:

• [acme] Remove backoff for http challenge (CVE-2023-47124) (#10224 by youkoulayley)
• [consul,consulcatalog] Update github.com/hashicorp/consul/api (#10220 by kevinpollet)
• [http3] Update quic-go to v0.39.1 (#10171 by tomMoulard)
• [middleware] Fix stripPrefix middleware is not applied to retried attempts (#10255 by niki-timofe)
• [provider] Refuse recursive requests (CVE-2023-47633) (#10242 by rtribotte)
• [server] Deny request with fragment in URL path (CVE-2023-47106) (#10229 by lbenguigui)
• [tracing] Remove deprecated code usage for datadog tracer (#10196 by mmatur)

Documentation:

• [governance] Update the review process and maintainers team documentation (#10230 by geraldcroes)
• [governance] Guidelines Update (#10197 by geraldcroes)
• [metrics] Add a mention for the host header in metrics headers labels doc (#10172 by rtribotte)
• [middleware] Rephrase BasicAuth and DigestAuth docs (#10226 by sssash18)
• [middleware] Improve ErrorPages examples (#10209 by arendhummeling)
• Add @lbenguigui to maintainers (#10222 by kevinpollet)

v3.0.0-beta4

Github Advisory GHSA-7v4p-328v-8v5g
Related to CVE-2023-39325

Bug fixes:

• [consul,tls] Enable TLS for Consul Connect TCP services (#10140 by rtribotte)
• [middleware] Allow short healthcheck interval with long timeout (#9832 by kevinmcconnell)
• [middleware] Fix GrpcWeb middleware to clear ContentLength after translating to normal gRPC message (#9782 by CleverUnderDog)
• [sticky-session,server] Set sameSite field for wrr load balancer sticky cookie (#10066 by sunyakun)

Documentation:

• [docker/swarm] Fix minor typo in swarm example (#10071 by kaznovac)
• [docker/swarm] Remove documentation of old swarm options (#10001 by ldez)
• Fix bad anchor on documentation (#10041 by mmatur)
• Fix migration guide heading (#9989 by ldez)

Misc:

• Merge current v2.10 into v3.0 (#10038 by mmatur)

v2.10.5

Github Advisory GHSA-7v4p-328v-8v5g
Related to CVE-2023-39325

Bug fixes:

• [accesslogs] Move origin fields capture to service level (#10126 by rtribotte)
• [accesslogs] Fix preflight response status in access logs (#10142 by rtribotte)
• [acme] Update go-acme/lego to v4.14.0 (#10087 by ldez)
• [acme] Update go-acme/lego to v4.13.3 (#10077 by ldez)
• [http3] Update quic-go to v0.37.5 (#10083 by ldez)
• [http3] Update quic-go to v0.39.0 (#10137 by ldez)
• [http3] Update quic-go to v0.37.6 (#10085 by ldez)
• [http3] Update quic-go to v0.38.0 (#10086 by ldez)
• [http3] Update quic-go to v0.38.1 (#10090 by ldez)
• [kv] Ignore ErrKeyNotFound error for the KV provider (#10082 by sunyakun)
• [middleware,authentication] Adjust forward auth to avoid connection leak (#10096 by wdhongtw)
• [middleware,server] Improve CNAME flattening to avoid unnecessary error logging (#10128 by niallnsec)
• [middleware] Allow X-Forwarded-For delete operation (#10132 by rtribotte)
• [server] Update x/net and grpc/grpc-go (#10161 by rtribotte)
• [webui] Add missing accessControlAllowOriginListRegex to middleware view (#10157 by DBendit)
• Fix false positive in url anonymization (#10138 by jspdown)

Documentation:

• [acme] Change Arvancloud URL (#10115 by sajjadjafaribojd)
• [acme] Correct minor typo in crd-acme docs (#10067 by ayyron-lmao)
• [healthcheck] Remove healthcheck interval configuration warning (#10068 by rtribotte)
• [kv,redis] Docs describe the missing db parameter in redis provider (#10052 by tokers)
• [middleware] Doc fix accessControlAllowHeaders examples (#10121 by ebuildy)
• Updates business callout in the documentation (#10122 by tomatokoolaid)

v2.10.4

Bug fixes:

• [acme] Update go-acme/lego to v4.13.2 (#10036 by ldez)
• [acme] Update go-acme/lego to v4.13.0 (#10029 by ldez)
• [k8s/ingress,k8s] fix: avoid panic on resource backends (#10023 by ldez)
• [middleware,tracing,plugins] fix: traceability of the middleware plugins (#10028 by ldez)

Documentation:

• Update maintainers guidelines (#9981 by geraldcroes)
• Update release documentation (#9975 by rtribotte)

Misc:

• [webui] Updates the Hub tooltip content using a web component and adds an option to disable Hub button (#10008 by mdeliatf)

v3.0.0-beta3

Enhancements:

• [docker,docker/swarm] Split Docker provider (#9652 by ldez)
• [k8s,hub] Remove deprecated code (#9804 by ldez)
• [k8s,k8s/gatewayapi] Support HostSNIRegexp in GatewayAPI TLS routes (#9486 by ddtmachado)
• [k8s/gatewayapi] Add support for HTTPRequestRedirectFilter in k8s Gateway API (#9408 by romantomjak)
• [k8s/ingress,k8s] Remove support of the networking.k8s.io/v1beta1 APIVersion (#9949 by rtribotte)
• [k8s/ingress,k8s] Add option to the Ingress provider to disable IngressClass lookup (#9281 by jandillenkofer)
• [marathon] Remove Marathon provider (#9614 by rtribotte)
• [metrics] Remove InfluxDB v1 metrics middleware (#9612 by tomMoulard)
• [rancher] Remove Rancher v1 provider (#9613 by tomMoulard)
• [rules] Remove containous/mux from HTTP muxer (#9558 by tomMoulard)
• [tls,tcp,service] Add TCP Servers Transports support (#9465 by sdelicata)
• [webui] Added router priority to webui's list and detail page (#9004 by bendre90)

Bug fixes:

• [metrics] Fix OpenTelemetry metrics (#9962 by rtribotte)
• [metrics] Remove config reload failure metrics (#9660 by rtribotte)
• [metrics] Fix open connections metric (#9656 by mpl)
• [metrics] Fix OpenTelemetry service name (#9619 by tomMoulard)
• [tcp] Don't log EOF or timeout errors while peeking first bytes in Postgres StartTLS hook (#9663 by rtribotte)
• [webui] Detect dashboard assets content types (#9622 by tomMoulard)
• [webui] fix: detect dashboard content types (#9594 by ldez)

Documentation:

• [k8s] Improve Kubernetes support documentation (#9974 by rtribotte)
• Adjust quick start (#9790 by svx)
• Mention PathPrefix matcher changes in V3 Migration Guide (#9727 by aofei)
• Fix yaml indentation in the HTTP3 example (#9724 by benwaffle)
• Add OpenTelemetry in observability overview (#9654 by tomMoulard)

Misc:

• Merge branch v2.10 into v3.0 (#9977 by ldez)
• Merge branch v2.10 into v3.0 (#9931 by ldez)
• Merge branch v2.10 into v3.0 (#9896 by ldez)
• Merge branch v2.10 into v3.0 (#9867 by ldez)
• Merge branch v2.10 into v3.0 (#9850 by ldez)
• Merge branch v2.10 into v3.0 (#9845 by ldez)
• Merge branch v2.10 into v3.0 (#9803 by ldez)
• Merge branch v2.10 into v3.0 (#9793 by ldez)
• Merge branch v2.9 into v3.0 (#9722 by rtribotte)
• Merge branch v2.9 into v3.0 (#9650 by tomMoulard)
• Merge branch v2.9 into v3.0 (#9632 by kevinpollet)