Pull Request Explorer

Summary

Update react-router and vite dependencies

This PR updates the UI dependencies to newer versions, ensuring compatibility and security fixes while avoiding breaking changes that would require a larger React upgrade.

Health Assessment

• • The dependency bump took over 8 days to merge, with a single review comment and subsequent approval, indicating a straightforward change but extended cycle due to scheduling or other priorities.

Summary

Merge v3.7 branch into master

Integrates v3.7 release changes into main branch, updating configuration, documentation, and middleware behavior.

Health Assessment

• • Merged quickly with minimal review, indicating confidence in changes; large codebase changes but no major blockers.

Summary

Prepare release v3.7.13

Updates the changelog to reflect the new v3.7.13 release, ensuring accurate versioning and documentation for users.

Health Assessment

• • Quick, single-commit release preparation with minimal review friction.

Summary

Merge v2.11 into v3.7

Updates documentation to reflect merged changes, keeping release notes current.

Health Assessment

• • Fast merge with no review needed, minimal impact.

Summary

Prepare release v2.11.57

Updates the changelog to reflect the new release version, ensuring versioning consistency.

Health Assessment

• • Fast, single-commit PR with minimal review, typical release changelog update.

Summary

Downgrade default TLS resources namespace mismatch log to warning

Reduces log noise by downgrading mismatched TLS resource warnings from error to warning, clarifying expected behavior when defaultTLSResourcesNamespace is set and improving observability for operators.

Health Assessment

• • The PR had minimal review friction and a small scope, but a long cycle time due to merge timing; overall risk is low.

Summary

Create collision‑free item keys for providers

Ensures unique configuration keys for Consul and Nomad providers, preventing data loss due to key collisions. This fixes a bug that caused service instances to overwrite each other.

Health Assessment

• • The PR addressed a critical key collision bug but experienced a long delay before review, resulting in a slow cycle time. Review was quick once opened, indicating low friction in code quality.

Summary

Disable recursive nss propagation by default for DNS challenge

This PR reverts the default behavior to disable recursive nameserver propagation checks for DNS challenges, restoring the pre‑v5 setting and improving security compliance.

Health Assessment

• • Minimal change, fast review, no rework.

Summary

Set access log level and time before OTLP formatting

Fixes incorrect OTLP log bodies that were marked as panic with invalid timestamps, ensuring accurate log severity and timestamps for downstream monitoring and alerting. This improves observability and reduces false alerts.

Health Assessment

• • The PR had a long cycle time due to delayed review, but the change was small and straightforward, resulting in minimal risk.

Summary

Merge branch v2.11 into v3.7

Integrates the latest v2.11 changes into the v3.7 release, keeping the codebase current with bug fixes and feature updates.

Health Assessment

• • Fast review and merge with minimal rework; the PR is a straightforward branch integration.

Summary

Bump github.com/go-acme/lego/v5 to v5.4.1

Update go-acme/lego to v5.4.1, fixing DNS provider issues and adding new provider support.

Health Assessment

• • Dependency bump with minimal code changes, reviewed by AI, approved after a single review, indicating low complexity and low risk.

Summary

Prevent forwarding of request trailer values to backend

Stops the reverse proxy from sending request trailer values to the backend, protecting sanitized data and complying with RFC 9110/9112.

Health Assessment

• • Quick review and single commit indicate a straightforward bug fix with minimal risk.

Summary

Bump dependencies for security advisories

Updates Go dependencies to address CVEs, ensuring the v2.11 branch remains secure.

Health Assessment

• • Quick, single-commit PR with no code changes, resolved in under an hour, minimal review friction.

Summary

Fix broken redirect for the Kubernetes CRD reference docs

Ensures legacy documentation links point to the comprehensive CRD provider page, improving user navigation and reducing confusion.

Health Assessment

• • Long review time due to AI review; minimal code changes and low risk.

Summary

Dedicate transport per HTTP/3 client connection

Ensures NTLM/Negotiate backends maintain dedicated connection pools over HTTP/3, improving authentication reliability and performance.

Health Assessment

• • Fast review and minimal rework indicate a straightforward bug fix with clear intent.

Summary

Prevent user enumeration via basic auth key

This change eliminates a potential user enumeration vulnerability by ensuring the deduplication key for basic authentication depends solely on client credentials, improving security and preventing cross-user request interference.

Health Assessment

• • Fast review and merge with minimal rework; small scope and clear security fix.

Summary

Tell scanning agents to read the security policy and decisions pages

This PR updates documentation to guide scanning agents to consult the security policy and decisions pages before filing, reducing duplicate submissions and ensuring compliance with security requirements.

Health Assessment

• • Documentation-only change with quick review and minimal rework; low risk and small scope.

Summary

Merge v2.11 into v3.7

Brings v2.11 changes into v3.7, keeping the codebase up to date and reducing fragmentation.

Health Assessment

• • Fast merge with minimal review, indicating straightforward integration.

Summary

Fix number display on details pages

Corrects styling of numeric values in the UI, ensuring consistent appearance and readability for users.

Health Assessment

• • The PR was reviewed immediately and merged after a single rework, indicating a smooth process.

Summary

Update quic-go dependency to v0.62.0

This PR updates the quic-go library to address a bug that caused HTTP/3 requests with missing Host headers to be rejected, improving compatibility and reliability for HTTP/3 traffic.

Health Assessment

• • Quick dependency bump with minimal changes and immediate approval, indicating low risk and efficient review process.

Summary

Deny opaque request targets

Rejects rootless request targets with 400 Bad Request, adding a defensive handler and clearing URL.Opaque in the proxy.

Health Assessment

• • The PR was reviewed and merged within 7.6 hours with minimal rework, indicating a smooth, low‑friction process.

Summary

Build the configuration copy once per change

Reduces memory overhead and improves server performance by copying configuration only once per change, eliminating redundant deep copies.

Health Assessment

• • Efficient performance improvement with minimal changes and quick review turnaround.

Summary

Prevent forwarding h2c upgrade headers to backend

This change stops Traefik from forwarding client-initiated h2c upgrade requests to backends, reducing unnecessary traffic and preventing potential errors when backends do not support h2c.

Health Assessment

• • Fast cycle time and minimal rework indicate a straightforward bug fix with quick approval.

Summary

Remove namespace reference for providers.kubernetesGateway.labelSelector

This PR corrects documentation to reflect that the Kubernetes Gateway label selector is cluster‑scoped, reducing user confusion and improving configuration accuracy.

Health Assessment

• • Quick review and merge with minimal changes indicates low complexity and high confidence in documentation accuracy.

Summary

Add warning about Ingress API frozen state

Adds a warning to Ingress provider docs to guide users toward the modern Gateway provider, reducing risk of using a frozen API.

Health Assessment

• • Quick documentation update with minimal review, indicating low complexity and high confidence in the change.

Summary

Merge v3.7 branch into master

Updates documentation and CI workflows to keep the repository current with the v3.7 release.

Health Assessment

• • The PR was merged quickly with minimal review friction, despite a large number of documentation and workflow changes.

Summary

Prepare release v3.7.12

Adds a changelog entry for the new v3.7.12 release, ensuring version history is up to date.

Health Assessment

• • Rapid, single-commit PR with AI-assisted review, minimal changes, low risk.

Summary

Merge v2.11 into v3.7

Updates the changelog to reflect the integration of v2.11 into the v3.7 release, keeping documentation current for users and maintainers.

Health Assessment

• • The PR was merged within minutes of opening, indicating a straightforward documentation update with no review friction or significant rework.

Summary

Prepare release v2.11.56

Updates the changelog to reflect the new v2.11.56 release, ensuring accurate release notes for users.

Health Assessment

• • Rapid release preparation with minimal changes and no review friction.

Summary

Update fasthttp dependency to v1.73.0

This PR updates the fasthttp library to a patched version, eliminating a known authorization bypass vulnerability and fixing two proxy bugs, improving security and reliability.

Health Assessment

• • Quick review and merge with minimal changes indicates low complexity and high confidence in the update.

Summary

Fix redirect for www host with non-numeric port

Ensures all www requests are properly redirected even when the Host header contains malformed or missing port, improving reliability and user experience.

Health Assessment

• • Long cycle time and slow review indicate potential bottlenecks; however, the PR resolved a critical redirect issue.

Summary

Merge v2.11 into v3.7

Brings v2.11 changes into v3.7, updating documentation, CI workflows, and configuration to keep the project up to date.

Health Assessment

• • Fast merge with minimal review, indicating straightforward integration of documentation and CI updates.