Update Helm release traefik to v39

[renovate]

This PR contains the following updates:

Package	Update	Change
traefik (source)	major	37.4.0 → 39.0.0

---

Release Notes

traefik/traefik-helm-chart (traefik)

v39.0.0

Compare Source

Upgrade Notes

There are 3 breaking changes in this release:

1. Traefik Hub: This release support only Traefik Hub v3.19.0+ versions.
   • CRDs has to be upgraded before the Chart. See UPGRADING instructions.
   • It's possible to use previous versions of the Chart for previous versions of Traefik Hub.
2. Encoded Characters: Allowed by default in Traefik v3.6.7+ (opt-in security options, documentation)
3. Ports Configuration: HTTP options now require explicit http nesting level with PR #​1603.
   • There is a before / after example in the PR description.

ℹ️ Schema validation has been enforced in this release. When it fails, it means that the parameter is not implemented.

💥 BREAKING CHANGES

• feat(deps)!: update traefik docker tag to v3.6.7 #​1624 by @​renovate[bot]
• fix(ports)!: 🐛 entrypoints http options #​1603 by @​mloiseleur
• fix(security)!: add support for request path options of Traefik 3.6.7+ #​1626 by @​mloiseleur
• feat(CRDs)!: support Traefik Hub v3.19.0 #​1598 by @​traefiker

🚀 Features

• feat(gateway-api): add support for defaultScope experimental feature #​1589 by @​shubhamch71
• feat(chart): enforce schema #​1627 by @​mloiseleur

📦 Others

• docs(CRDs): improve note on deprecation #​1623 by @​jnoordsij
• chore: pin GitHub Actions to SHA hashes #​1628 by @​darkweaver87
• docs(values): avoid unbreakable lines in table output of VALUES.md #​1630 by @​mloiseleur
• refactor(chart): clean output on Deployment & Daemonset #​1629 by @​mloiseleur
• chore(release): 🚀 publish traefik 39.0.0 and crds 1.14.0 #​1631 by @​darkweaver87

v38.0.2

Compare Source

Upgrades Notes

There is a breaking change on CRDs between Traefik Hub v3.18.0 and inferior and the CRDs of Traefik Hub v3.19.0+ preview versions (ea & rc).
With this release, we remove the CRDs of Traefik Hub v3.19.0 preview versions.

When Traefik Hub v3.19.0 is GA, we will release a new major version of this Chart that will only accept Traefik Hub v3.19.0+ versions.

🚀 Features

• feat(deps): update traefik docker tag to v3.6.6 #​1610 by @​renovate[bot]

🐛 Bug fixes

• fix(CRDs): enforce the fact that this Chart does not support Traefik Hub v3.19.0 #​1616 by @​mloiseleur
• fix(security): set the seccomp profile to RuntimeDefault #​1618 by @​kkrypt0nn

📦 Others

• docs(CRDs): add deprecation notice #​1617 by @​mloiseleur
• chore(release): publish traefik 38.0.2 and crds 1.13.1 #​1619 by @​mloiseleur

New Contributors

• @​kkrypt0nn made their first contribution in #​1618

Full Changelog: traefik/traefik-helm-chart@v38.0.1...v38.0.2

v38.0.1

Compare Source

🐛 Bug fixes

• fix(ports): 🐛 http.encodedCharacters on custom entrypoints #​1606 by @​mloiseleur
• fix(ports): 🐛 add missing http.maxHeaderBytes option #​1604 by @​mloiseleur

📦 Others

• chore(release): 🚀 publish traefik 38.0.1 #​1608 by @​mloiseleur

v38.0.0

Compare Source

Upgrades Notes

[!IMPORTANT]
CRDs has to be upgraded before the Chart. See UPGRADING instructions.

There are two breaking changes in this release:

1. Traefik Proxy v3.6.4+ contains a security fix that is also a breaking change. See upstream documentation for more details.
2. PR #​1596 align kubernetesIngressNginx provider setting with upstream. There is a before / after example in the PR description and PR #​1587 align labelSelector syntax between providers

[!NOTE]
If you need to restore Traefik behavior of v3.6.3 or inferior, it can be set with values.

Here is an example on websecure entrypoint:

ports:
  websecure:
    http:
      encodedCharacters:
        allowEncodedSlash: true
        allowEncodedBackSlash: true
        allowEncodedNullCharacter: true
        allowEncodedSemicolon: true
        allowEncodedPercent: true
        allowEncodedQuestionMark: true
        allowEncodedHash: true
      sanitizePath: false

This is not recommended, it may expose you to GHSA-gm3x-23wp-hc2c.

💥 BREAKING CHANGES

• fix(providers)!: align labelSelector for kubernetesGateway and knative #​1587 by @​shubhamch71
• fix(nginx)!: 🐛 align provider settings and provide required rbac #​1596 by @​mloiseleur

🚀 Features

• feat(CRDs): update Traefik Hub to v1.24.1, with required RBACs #​1571 by @​jspdown
• feat(ports): enforce schema #​1586 by @​remyj38
• feat(CRDs): update Traefik Hub to v1.24.2 #​1585 by @​traefiker
• feat(providers): ✨ enforce schema #​1595 by @​mloiseleur
• feat(security): ✨ 🔒️ add support for request path options of traefik 3.6.4+ #​1594 by @​mloiseleur
• feat(deps): update traefik docker tag to v3.6.4 #​1590 by @​renovate[bot]
• feat(deps): update traefik docker tag to v3.6.5 #​1599 by @​renovate[bot]

🐛 Bug fixes

• fix: update error message for maxUnavailable validation #​1591 by @​lucasra1
• fix(notes): minor typo #​1593 by @​rndmh3ro
• fix(pvc): allow empty storageClassName #​1579 by @​fopina
• fix(providers): ✨ enforce schema for all providers #​1601 by @​mloiseleur

📦 Others

• chore(deps): update actions/checkout action to v6 #​1573 by @​renovate[bot]
• docs: Update EXAMPLES.md with REGIONAL load balancer note for Digital Ocean #​1574 by @​kamikazechaser
• chore(release): 🚀 publish traefik 38.0.0 and crds 1.13.0 #​1600 by @​mloiseleur

New Contributors

• @​shubhamch71 made their first contribution in #​1587
• @​kamikazechaser made their first contribution in #​1574
• @​lucasra1 made their first contribution in #​1591
• @​remyj38 made their first contribution in #​1586
• @​rndmh3ro made their first contribution in #​1593
• @​fopina made their first contribution in #​1579

Full Changelog: traefik/traefik-helm-chart@v37.4.0...v38.0.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.