Pull Request Explorer

Summary

Clear SSL client headers when no certificate

Removes potentially spoofed SSL client headers from requests when no client certificate is present, enhancing security for ingress-nginx provider.

Health Assessment

• • Fast cycle time with single review and minimal changes indicates low complexity and risk.

Summary

Fix race condition in tests accessing global variables in parallel

This PR removes parallel execution from two failing tests, eliminating race conditions and ensuring consistent test outcomes without noticeable slowdown.

Health Assessment

• • The PR had a long review cycle due to a delayed first review, but the change was small and straightforward, resulting in low risk.

Summary

Add enable-global-auth to supported annotations

Documentation update clarifies supported NGINX Ingress annotations, improving operator guidance and reducing migration errors.

Health Assessment

• • Documentation-only change with minimal code impact; long review cycle likely due to low priority or reviewer availability.

Summary

Update sonic dependency to v1.15.1

This PR updates the sonic JSON library to the latest version, ensuring compatibility and security fixes.

Health Assessment

• • Quick review and merge indicates minimal risk and straightforward dependency update.

Summary

Improve file provider handling of dangling symlinks

This change prevents errors when non‑config files are symlinked, improving stability for users deploying Traefik configurations.

Health Assessment

• • Quick fix with minimal changes, likely low friction.

Summary

Update spdystream dependency to v0.5.1

This PR updates the spdystream library to the latest version, ensuring compatibility and security improvements.

Health Assessment

• • Quick dependency update with minimal changes and fast review, indicating low risk.

Summary

Update golang.org/x/net dependency to v0.55.0

Updates the golang.org/x/net library to the latest version, ensuring compatibility and security fixes.

Health Assessment

• • Quick review and merge with minimal changes indicates low risk and efficient process.

Summary

Add ingressClassName to Kubernetes CRD provider migration guide

Adds guidance on the ingressClassName field for Kubernetes CRD provider migration, helping users avoid misconfiguration during upgrade.

Health Assessment

• • Quick documentation fix merged within minutes, minimal review and rework.

Summary

Reject mismatched paths after StripPrefix normalization

Prevents upstream services from misinterpreting stripped paths, enhancing security and correctness.

Health Assessment

• • The PR had a long review cycle, indicating potential complexity or communication delays, but the change is small and straightforward.

Summary

Move SNICheck to context for routing consistency

Ensures consistent TLS option handling across SNICheck and routing, preventing misconfigurations and improving security for domain fronting.

Health Assessment

• • The PR had a long cycle time and multiple review rounds, indicating significant rework and complexity. The large number of lines and files changed suggests a high-impact bug fix that required extensive testing and coordination.

Summary

Capitalize NGINX in kubernetesIngressNGINX

Documentation update to correct Helm chart values for Nginx ingress, ensuring compatibility with the latest Traefik Helm chart.

Health Assessment

• • Single documentation change with no code impact; review was delayed but no rework was required.

Summary

Fix ingress path matcher injection vulnerability

Removes a security vulnerability in the Kubernetes Ingress provider that could allow path matcher injection, ensuring safer routing and compliance with security standards. Backports the fix to the v2.11 branch, maintaining compatibility for existing deployments.

Health Assessment

• • The PR had a long cycle time and multiple review rounds, indicating significant review friction. The change involved a security fix and backporting, adding substantial code and tests, which increased risk.

Summary

Merge v3.7 branch into master

Integrates v3.7 release changes, updates documentation, and adds CI workflow to keep the project up to date.

Health Assessment

• • Fast merge with minimal review time indicates stable release integration.

Summary

Merge v3.6 into v3.7

Brings v3.6 updates into v3.7, aligning documentation, configuration, and middleware logging for a consistent user experience.

Health Assessment

• • Merged quickly with minimal review, indicating straightforward integration of existing changes.

Summary

Add @LBF38 as a current maintainer

Adds a new maintainer to the project, acknowledging contributions and expanding the maintainer team.

Health Assessment

• • Rapid approval with minimal changes; low complexity and risk.

Summary

Escape exact gRPC method matches

Ensures precise routing for gRPC services by escaping dots in service names, preventing unintended wildcard matches and improving request routing accuracy.

Health Assessment

• • Despite a long review cycle, the PR was straightforward with minimal changes and quick approvals, indicating low risk.

Summary

Remove whitespace in HTML tag

Fixes documentation typo in middleware forwardauth reference, improving clarity for users.

Health Assessment

• • Long cycle time due to delayed review, but minimal changes and no code impact.

Summary

Polish grammar in migration guides

Polishes 'allows to' grammar in migration guide text.

Health Assessment

• • The PR had a long cycle time and review time, but involved only a single documentation change with minimal edits, indicating low technical risk but slow process.

Summary

Trim quotes from proxy_set_header header name

Fixes header parsing bug in Traefik's ingress-nginx middleware, preventing invalid header names and improving compatibility with NGINX annotations.

Health Assessment

• • The PR had a long review delay but required minimal changes and was approved quickly after review.

Summary

Expose Ingress status race condition during NGINX coexistence

Improves the migration guide to alert users to a race condition between Traefik and NGINX, reducing observability issues and configuration drift.

Health Assessment

• • Single documentation change, quick review, minimal risk.

Summary

Correct typo in IngressRoute accessLogs documentation

Fixes a documentation typo in the IngressRoute CRD to prevent confusion for users configuring access logs.

Health Assessment

• • The PR had a long cycle time due to delayed review, but the change was minimal and low risk.

Summary

Fix TCP router service resolution in dashboard flow diagram

Corrects service lookup for TCP routers in the dashboard, preventing UI errors and ensuring accurate service resolution.

Health Assessment

• • Long review cycle likely due to scheduling or backlog; no rework required after approval.

Summary

Replace generated File routing reference page

This PR replaces auto-generated routing reference files with curated documentation, improving clarity for users configuring the File provider. It also removes obsolete generator code, reducing maintenance overhead.

Health Assessment

• • The PR had a long review cycle and large line changes, indicating significant effort to replace auto-generated docs with curated content, but the slow review suggests potential blockers or complexity.

Summary

Clean up and refactor flake.nix

Simplifies the project's Nix build configuration by removing an unnecessary dependency and switching to a more efficient tarball source. This reduces build size and improves maintainability.

Health Assessment

• • The PR took over two weeks to merge with a single review, indicating a slow review process and potential bottlenecks in the review workflow.

Summary

Escape double quotes in access log fields

Ensures access logs remain valid by escaping double quotes in header values, preventing log parsing errors for downstream analytics and monitoring.

Health Assessment

• • The PR was a single small change that required only one review, but the review was delayed, indicating a slow review process.

Summary

Document new chart behavior on Gateway API

Updates Gateway API documentation to reflect latest chart changes, ensuring consistency across deployments.

Health Assessment

• • Long cycle time due to documentation update; minimal code changes; no rework required.

Summary

Fix BasicAuth build error for empty users

Prevents runtime panic when no users configured, improving stability and security of authentication middleware.

Health Assessment

• • Quick fix with minimal changes and immediate merge, indicating low complexity and high confidence.

Summary

Prepare release v3.7.1

Creates a new release v3.7.1, updating documentation and bugfix config.

Health Assessment

• • Quick release preparation with minimal changes, no code modifications.

Summary

Merge branch v3.6 into v3.7

Updates the v3.7 release with changes from v3.6, ensuring the latest bug fixes and documentation are included.

Health Assessment

• • Quick merge with minimal changes, no review needed, fast cycle time.

Summary

Prepare release v3.6.17

Updates changelog and bugfix configuration to prepare for the v3.6.17 release, ensuring documentation and configuration are current.

Health Assessment

• • Rapid release preparation with minimal changes and no review friction.

Summary

Merge v2.11 into v3.6

Updates the changelog to reflect merging of v2.11 into v3.6, keeping documentation current.

Health Assessment

• • Quick merge with no review friction, minimal scope.

Summary

Prepare release v2.11.46

This PR prepares the v2.11.46 release by updating the changelog and bugfix configuration.

Health Assessment

• • Release preparation PR with minimal changes, quick review, no rework, low risk.

Summary

Merge v3.6 into v3.7

Brings Traefik up to version 3.7, adding updated Kubernetes CRD support, new tests, and documentation improvements to enhance compatibility and stability.

Health Assessment

• • Fast merge with minimal review time indicates smooth integration and low friction.

Summary

Merge branch v2.11 into v3.6

Updates Traefik to incorporate changes from v2.11, ensuring compatibility and feature parity with v3.6.

Health Assessment

• • Quick merge with minimal changes, indicating a routine update.

Summary

Convert resolveReference to function

Aligns Kubernetes provider code with v3.7, enabling middleware at service level and improving consistency and maintainability.

Health Assessment

• • Quick merge with minimal changes indicates low complexity and high confidence.

Summary

Merge v2.11 into v3.6

Adds missing documentation and tests for the Kubernetes provider, ensuring consistency and reliability for users upgrading to v3.6.

Health Assessment

• • The PR experienced a long review delay with no early feedback, but the changes were minor and low risk.

Summary

Fix cross-provider ref check for Kubernetes CRD provider

Corrects reference validation for Kubernetes CRD provider, eliminating incorrect namespace warnings and ensuring accurate cross-provider references.

Health Assessment

• • Rapid review and merge with minimal code changes indicate low complexity and high confidence.

Summary

Merge v2.11 changes into v3.6

Integrates latest v2.11 updates, adding CrossProviderNamespaces option to restrict namespaces across Kubernetes providers, ensuring compatibility and up-to-date configuration.

Health Assessment

• • Fast cycle time and minimal review rounds indicate smooth integration; large scope but well-documented changes.

Summary

Add CrossProviderNamespaces option

Restricts cross-namespace references in Kubernetes providers to prevent privilege escalation.

Health Assessment

• • The PR has a large scope with 20 files changed, but the review process was relatively smooth with only one approved review.

Summary

Rework contributor references in v3.7.0 changelog

This PR corrects contributor references in the v3.7.0 changelog, ensuring accurate attribution. It improves the clarity and professionalism of release documentation.

Health Assessment

• • Rapid review and merge with minimal changes indicates low complexity and high confidence in the documentation update.

Summary

Prepare release v3.7.0

Creates new release v3.7.0, updating documentation and release scripts.

Health Assessment

• • PR merged within minutes with a single commit and minimal changes, indicating a low‑risk, high‑confidence release preparation.

Summary

Health Assessment

Summary

Prepare release v3.6.16

Creates a new release v3.6.16, updating changelog and bugfix configuration.

Health Assessment

• • Quick release preparation with minimal changes, fast review and merge.

Summary

Merge v2.11 into v3.6

Brings v2.11 changes into v3.6, keeping the codebase up to date and ensuring compatibility.

Health Assessment

• • Fast merge with minimal changes, quick review, small scope, low risk.

Summary

Prepare release v2.11.45

Create a new release for version 2.11.45.

Health Assessment

• • Release preparation PR with minimal changes and immediate review, indicating efficient process.

Summary

Bump otel/exporters dependency

Updates the OpenTelemetry exporters to the latest version, improving observability and ensuring compatibility with newer telemetry features.

Health Assessment

• • Quick dependency bump with single review, merged within 17 hours, indicating efficient process.

Summary

Fix regressions after refacto of the ingress-nginx provider

Corrects ingress-nginx provider behavior to ensure proper TLS handling and default backend functionality, preventing potential routing errors and security regressions.

Health Assessment

• • The PR required multiple review cycles and significant rework after a prolonged review period, indicating complex changes to provider logic.