BlackDragon/infra
Watch
1
0
Fork
You've already forked infra
 0
Code Issues 1 Pull requests 9 Projects Releases Packages Wiki Activity Actions

Update Helm release traefik to v42 #38

Open
renovate wants to merge 1 commit from renovate/traefik-42.x into master
pull from: renovate/traefik-42.x
merge into: BlackDragon:master
Conversation 0 Commits 1 Files changed 2 +2 -2
renovate commented 2026-10-15 16:01:50 +00:00
Collaborator
Copy link

This PR contains the following updates:

Package Update Change
traefik (source) major 41.6.0 → 42.0.0

Release Notes

traefik/traefik-helm-chart (traefik)

v42.0.0

Compare Source

There are 3 breaking changes in this release

Upgrade Notes

  1. Kubernetes v1.30+: The chart now requires Kubernetes v1.30 or higher (#​2030).
  2. Traefik Hub Secret RBAC: Write verbs on Secrets (create, update, delete) are no longer granted cluster-wide.
    • A Role now grants them in the release namespace only, where Traefik Hub writes its Secrets (#​2028)
  3. Transparency logs witnesses: (#​2018):
    • hub.transparencyLogs.witnessGroup.witnesses now defaults to null and threshold must be at least 1.
    • Setting threshold, timeout or failOpen without any witness now fails.

[!NOTE]
With hub.token, the chart now deploys a cluster-scoped ValidatingAdmissionPolicy that only allows Traefik Hub to write Opaque and kubernetes.io/tls Secrets.
Set hub.restrictSecretTypes: false if the installer cannot create cluster-scoped resources.

💥 BREAKING CHANGES
🚀 Features
🐛 Bug fixes
📦 Others
👌 Traefik version support
  • Traefik Proxy: v3.6.0 -> v3.7.14 (default)
  • Traefik Hub: v3.19.3 -> v3.21.3

v41.7.1

Compare Source

🚀 Features
📦 Others
👌 Traefik version support
  • Traefik Proxy: v3.6.0 -> v3.7.14 (default)
  • Traefik Hub: v3.19.3 -> v3.21.2

v41.7.0

Compare Source

🚀 Features
📦 Others
👌 Traefik version support
  • Traefik Proxy: v3.6.0 -> v3.7.14 (default)
  • Traefik Hub: v3.19.3 -> v3.21.1

v41.6.1

Compare Source

🚀 Features
📦 Others
👌 Traefik version support
  • Traefik Proxy: v3.6.0 -> v3.7.13 (default)
  • Traefik Hub: v3.19.3 -> v3.21.0

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://traefik.io/) ([source](https://github.com/traefik/traefik-helm-chart)) | major | `41.6.0` → `42.0.0` | --- ### Release Notes <details> <summary>traefik/traefik-helm-chart (traefik)</summary> ### [`v42.0.0`](https://github.com/traefik/traefik-helm-chart/releases/tag/v42.0.0) [Compare Source](https://github.com/traefik/traefik-helm-chart/compare/v41.7.1...v42.0.0) There are 3 breaking changes in this release **Upgrade Notes** 1. **Kubernetes v1.30+**: The chart now requires Kubernetes v1.30 or higher ([#&#8203;2030](https://github.com/traefik/traefik-helm-chart/pull/2030)). 2. **Traefik Hub Secret RBAC**: Write verbs on Secrets (`create`, `update`, `delete`) are no longer granted cluster-wide. - A `Role` now grants them in the release namespace only, where Traefik Hub writes its Secrets ([#&#8203;2028](https://github.com/traefik/traefik-helm-chart/pull/2028)) 3. **Transparency logs witnesses**: ([#&#8203;2018](https://github.com/traefik/traefik-helm-chart/pull/2018)): - `hub.transparencyLogs.witnessGroup.witnesses` now defaults to `null` and `threshold` must be at least `1`. - Setting `threshold`, `timeout` or `failOpen` without any witness now fails. > \[!NOTE] > With `hub.token`, the chart now deploys a cluster-scoped `ValidatingAdmissionPolicy` that only allows Traefik Hub to write `Opaque` and `kubernetes.io/tls` Secrets. > Set `hub.restrictSecretTypes: false` if the installer cannot create cluster-scoped resources. ##### :boom: BREAKING CHANGES - fix(tlogs)!: empty witness config [#&#8203;2018](https://github.com/traefik/traefik-helm-chart/issues/2018) by [@&#8203;LBF38](https://github.com/LBF38) - feat(chart)!: require Kubernetes v1.30 or higher [#&#8203;2030](https://github.com/traefik/traefik-helm-chart/issues/2030) by [@&#8203;mloiseleur](https://github.com/mloiseleur) - fix(rbac)!: 🐛 scope Traefik Hub secret write permissions to release namespace [#&#8203;2028](https://github.com/traefik/traefik-helm-chart/issues/2028) by [@&#8203;mloiseleur](https://github.com/mloiseleur) ##### :rocket: Features - feat(hub): :rocket: support traefik hub v3.20.16 and v3.21.3 [#&#8203;2032](https://github.com/traefik/traefik-helm-chart/issues/2032) by [@&#8203;mloiseleur](https://github.com/mloiseleur) - feat(hub): restrict Secret types written by Traefik Hub [#&#8203;2031](https://github.com/traefik/traefik-helm-chart/issues/2031) by [@&#8203;mloiseleur](https://github.com/mloiseleur) ##### :bug: Bug fixes - fix(examples): fix outdated value schema used in `additionalServices` example [#&#8203;2023](https://github.com/traefik/traefik-helm-chart/issues/2023) by [@&#8203;jnoordsij](https://github.com/jnoordsij) ##### :package: Others - chore(deps): update github actions [#&#8203;2024](https://github.com/traefik/traefik-helm-chart/issues/2024) by [@&#8203;renovate-with-github-actions](https://github.com/renovate-with-github-actions)\[bot] - chore(deps): update quay.io/helmpack/chart-testing docker tag to v3.15.0 [#&#8203;2025](https://github.com/traefik/traefik-helm-chart/issues/2025) by [@&#8203;renovate-with-github-actions](https://github.com/renovate-with-github-actions)\[bot] - docs(agents): document Traefik Hub version bump [#&#8203;2033](https://github.com/traefik/traefik-helm-chart/issues/2033) by [@&#8203;mloiseleur](https://github.com/mloiseleur) - docs(examples): add Traefik Hub Gateway with the Traefik MCP server as a sidecar [#&#8203;2007](https://github.com/traefik/traefik-helm-chart/issues/2007) by [@&#8203;emilevauge](https://github.com/emilevauge) - chore(release): 🚀 publish 42.0.0 [#&#8203;2034](https://github.com/traefik/traefik-helm-chart/issues/2034) by [@&#8203;mloiseleur](https://github.com/mloiseleur) ##### 👌 Traefik version support - Traefik Proxy: v3.6.0 -> v3.7.14 (default) - Traefik Hub: v3.19.3 -> v3.21.3 ### [`v41.7.1`](https://github.com/traefik/traefik-helm-chart/releases/tag/v41.7.1) [Compare Source](https://github.com/traefik/traefik-helm-chart/compare/v41.7.0...v41.7.1) ##### :rocket: Features - feat(hub): :rocket: support traefik hub v3.20.15 and v3.21.2 [#&#8203;2021](https://github.com/traefik/traefik-helm-chart/issues/2021) by [@&#8203;darkweaver87](https://github.com/darkweaver87) ##### :package: Others - chore(release): 🚀 publish 41.7.1 [#&#8203;2022](https://github.com/traefik/traefik-helm-chart/issues/2022) by [@&#8203;darkweaver87](https://github.com/darkweaver87) ##### 👌 Traefik version support - Traefik Proxy: v3.6.0 -> v3.7.14 (default) - Traefik Hub: v3.19.3 -> v3.21.2 ### [`v41.7.0`](https://github.com/traefik/traefik-helm-chart/releases/tag/v41.7.0) [Compare Source](https://github.com/traefik/traefik-helm-chart/compare/v41.6.1...v41.7.0) ##### :rocket: Features - feat(deps): update traefik to v3.7.14 and traefik-hub to v3.21.1 [#&#8203;2015](https://github.com/traefik/traefik-helm-chart/issues/2015) by [@&#8203;darkweaver87](https://github.com/darkweaver87) - feat(deps): update ghcr.io/traefik/hub-manager docker tag to v0.45.3 [#&#8203;2006](https://github.com/traefik/traefik-helm-chart/issues/2006) by [@&#8203;renovate-with-github-actions](https://github.com/renovate-with-github-actions)\[bot] - feat(gateway): support scoping the provider to specific Gateways [#&#8203;2016](https://github.com/traefik/traefik-helm-chart/issues/2016) by [@&#8203;darkweaver87](https://github.com/darkweaver87) ##### :package: Others - chore(deps): update github actions [#&#8203;2013](https://github.com/traefik/traefik-helm-chart/issues/2013) by [@&#8203;renovate-with-github-actions](https://github.com/renovate-with-github-actions)\[bot] - chore(deps): update dawidd6/action-download-artifact action to v27 [#&#8203;2014](https://github.com/traefik/traefik-helm-chart/issues/2014) by [@&#8203;renovate-with-github-actions](https://github.com/renovate-with-github-actions)\[bot] - chore(release): 🚀 publish 41.7.0 and hub-manager 1.0.1 [#&#8203;2019](https://github.com/traefik/traefik-helm-chart/issues/2019) by [@&#8203;darkweaver87](https://github.com/darkweaver87) ##### 👌 Traefik version support - Traefik Proxy: v3.6.0 -> v3.7.14 (default) - Traefik Hub: v3.19.3 -> v3.21.1 ### [`v41.6.1`](https://github.com/traefik/traefik-helm-chart/releases/tag/v41.6.1) [Compare Source](https://github.com/traefik/traefik-helm-chart/compare/v41.6.0...v41.6.1) ##### :rocket: Features - feat(hub): :rocket: support traefik hub v3.21.0 [#&#8203;2010](https://github.com/traefik/traefik-helm-chart/issues/2010) by [@&#8203;darkweaver87](https://github.com/darkweaver87) ##### :package: Others - chore(deps): update renovatebot/github-action action to v46.3.2 [#&#8203;2005](https://github.com/traefik/traefik-helm-chart/issues/2005) by [@&#8203;renovate-with-github-actions](https://github.com/renovate-with-github-actions)\[bot] - chore(deps): update github actions (major) [#&#8203;2008](https://github.com/traefik/traefik-helm-chart/issues/2008) by [@&#8203;renovate-with-github-actions](https://github.com/renovate-with-github-actions)\[bot] - chore(release): 🚀 publish 41.6.1 [#&#8203;2011](https://github.com/traefik/traefik-helm-chart/issues/2011) by [@&#8203;darkweaver87](https://github.com/darkweaver87) ##### 👌 Traefik version support - Traefik Proxy: v3.6.0 -> v3.7.13 (default) - Traefik Hub: v3.19.3 -> v3.21.0 </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xOC4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTguMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->
renovate force-pushed renovate/traefik-42.x from 23a0561190 to 9c238ad062 2026-10-15 22:01:44 +00:00 Compare
renovate force-pushed renovate/traefik-42.x from 9c238ad062 to 5d423343ee 2026-10-16 00:02:10 +00:00 Compare
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/traefik-42.x:renovate/traefik-42.x
git switch renovate/traefik-42.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master
git merge --no-ff renovate/traefik-42.x
git switch renovate/traefik-42.x
git rebase master
git switch master
git merge --ff-only renovate/traefik-42.x
git switch renovate/traefik-42.x
git rebase master
git switch master
git merge --no-ff renovate/traefik-42.x
git switch master
git merge --squash renovate/traefik-42.x
git switch master
git merge --ff-only renovate/traefik-42.x
git switch master
git merge renovate/traefik-42.x
git push origin master
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
BlackDragon/infra!38
No description provided.