Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build: bump github.com/traefik/traefik/v2 from 2.11.10 to 2.11.14 in /apptests #2926

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 9, 2024

Bumps github.com/traefik/traefik/v2 from 2.11.10 to 2.11.14.

Release notes

Sourced from github.com/traefik/traefik/v2's releases.

v2.11.14

CVE: CVE-2024-45410 (Advisory GHSA-h924-8g65-j9wg)

Important: Please read the migration guide.

Bug fixes:

  • [acme] Update go-acme/lego to v4.20.2 (#11263 by ldez)
  • [logs,server] Change level of peeking first byte error log to DEBUG (#11254 by rtribotte)
  • [middleware,server] Drop untrusted X-Forwarded-Prefix header (#11253 by rtribotte)
  • [server] Apply keepalive config to h2c entrypoints (#11276 by davefu113)
  • [service] Fix internal handlers ServiceBuilder composition (#11281 by juliens)

Documentation:

v2.11.13

Bug fixes:

  • [middleware,service] Panic on aborted requests to properly close the connection (#11129 by tonybart1337)

Documentation:

v2.11.12

Bug fixes:

  • [middleware] Bump github.com/klauspost/compress to dbd6c381492a (#11162 by kevinpollet)
  • [webui] Upgrade to node 22.9 and yarn lock to fix vulnerabilities (#11173 by kevinpollet)
  • [webui] Adopt a layout for the large amount of entrypoint port numbers (#11157 by framebassman)

Documentation:

v2.11.11

Bug fixes:

Documentation:

  • [accesslogs] Specify default format value for access log (#11130 by darkweaver87)
  • [api] Update API documentation to mention pagination (#11115 by lyrandy)
Changelog

Sourced from github.com/traefik/traefik/v2's changelog.

v2.11.14 (2024-11-20)

All Commits

Bug fixes:

  • [acme] Update go-acme/lego to v4.20.2 (#11263 by ldez)
  • [logs,server] Change level of peeking first byte error log to DEBUG (#11254 by rtribotte)
  • [middleware,server] Drop untrusted X-Forwarded-Prefix header (#11253 by rtribotte)
  • [server] Apply keepalive config to h2c entrypoints (#11276 by davefu113)
  • [service] Fix internal handlers ServiceBuilder composition (#11281 by juliens)

Documentation:

v3.2.0 (2024-10-28)

All Commits

Enhancements:

  • [acme] Remove same email requirement for certresolvers (#11019 by Emrio)
  • [acme] Add support for custom CA certificates by certificate resolver (#10816 by ldez)
  • [acme] Add 30 day certificatesDuration step (#10970 by luker983)
  • [docker] Support HTTP BasicAuth for docker and swarm endpoint (#10776 by 985492783)
  • [k8s,k8s/gatewayapi] Add supported features to the Gateway API GatewayClass status (#11056 by rtribotte)
  • [k8s,k8s/gatewayapi] Update sigs.k8s.io/gateway-api to v1.2.0-rc1 (#11124 by rtribotte)
  • [k8s,k8s/gatewayapi] Add support for backend protocol selection in HTTP and GRPC routes (#11051 by rtribotte)
  • [k8s,k8s/gatewayapi] Improve Kubernetes GatewayAPI TCPRoute and TLSRoute support (#11042 by rtribotte)
  • [k8s,k8s/gatewayapi] Support HTTPRoute destination port matching (#11134 by kevinpollet)
  • [k8s,k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.2.0-rc2 (#11131 by kevinpollet)
  • [k8s,k8s/gatewayapi] Add support for Gateway API BackendTLSPolicies (#11009 by rtribotte)
  • [k8s,k8s/gatewayapi] Support NativeLB option in GatewayAPI provider (#11147 by rtribotte)
  • [k8s,k8s/gatewayapi] Support ResponseHeaderModifier filter (#10987 by kevinpollet)
  • [k8s,k8s/gatewayapi] Support GRPC routes (#10975 by kevinpollet)
  • [k8s,k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.2.0 (#11167 by rtribotte)
  • [metrics,otel] Allow setting service.name for OTLP metrics (#10917 by cmartell-at-ocp)
  • [middleware,accesslogs] Record trace id and EntryPoint span id into access log (#10921 by weijiany)
  • [middleware,authentication] Support LogUserHeader with forwardAuth middleware (#10833 by GaleHuang)
  • [middleware] Add encodings option to the compression middleware (#10943 by wollomatic)
  • [middleware] Add support for ipv6 subnet in ipStrategy (#9747 by michal-kralik)
  • [nomad] Support for watching instead of polling Nomad (#10997 by deverton-godaddy)
  • [server,performance] Introduce a fast proxy mode to improve HTTP/1.1 performances with backends (#11122 by kevinpollet)
  • [server] Configurable max request header size (#10995 by lucasrod16)
  • [service] Add mirrorBody option to HTTP mirroring (#11032 by MatteoPaier)
  • [service] Add an option to preserve server path (#11193 by mmatur)

... (truncated)

Commits
  • 8eadfbb Prepare release v2.11.14
  • cc80568 Fix internal handlers ServiceBuilder composition
  • 8ffd185 Fix the defaultRule CLI examples
  • 6baa110 Update access-logs.md, add examples for accesslog.format
  • 5658c8a Fix spelling, grammar, and rephrase sections for clarity in some documentatio...
  • 1c80f12 Apply keepalive config to h2c entrypoints
  • ef5f1b1 Improve documentation on dashboard
  • 8c19652 Fix absolute link in the migration guide
  • e5c8063 Add X-Forwarded-Prefix to the migration guide
  • f437fb4 chore: update linter
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/traefik/traefik/v2](https://github.com/traefik/traefik) from 2.11.10 to 2.11.14.
- [Release notes](https://github.com/traefik/traefik/releases)
- [Changelog](https://github.com/traefik/traefik/blob/master/CHANGELOG.md)
- [Commits](traefik/traefik@v2.11.10...v2.11.14)

---
updated-dependencies:
- dependency-name: github.com/traefik/traefik/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ok-to-test Signals mergebot that CI checks are ready to be kicked off ready-for-review services/reloader labels Dec 9, 2024
@dependabot dependabot bot requested a review from a team December 9, 2024 06:33
@github-actions github-actions bot added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label Dec 9, 2024
@coveralls
Copy link

Pull Request Test Coverage Report for Build 12230246462

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 51.703%

Totals Coverage Status
Change from base Build 12190303423: 0.0%
Covered Lines: 167
Relevant Lines: 323

💛 - Coveralls

Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 16, 2024

Superseded by #2949.

@dependabot dependabot bot closed this Dec 16, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/apptests/github.com/traefik/traefik/v2-2.11.14 branch December 16, 2024 06:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file ok-to-test Signals mergebot that CI checks are ready to be kicked off ready-for-review services/reloader size/L Denotes a PR that changes 100-499 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant