chore(deps): update helm release traefik to v41.4.0 by renovate[bot] · Pull Request #175 · lunarys/gitops

renovate · 2026-08-28T08:04:33Z

This PR contains the following updates:

Package	Update	Change
traefik (source)	minor	`41.1.0` → `41.4.0`

Release Notes

traefik/traefik-helm-chart (traefik)

`v41.4.0`

Compare Source

🚀 Features

feat: add aliasHeadersStrategy value #1982 by @jnoordsij
feat(deps): update traefik docker tag to v3.7.12 #1981 by @renovate-with-github-actions[bot]
feat: deprecate underscoreHeadersStrategy value #1983 by @jnoordsij
feat(deps): update ghcr.io/traefik/traefik-hub docker tag to v3.20.12 #1980 by @renovate-with-github-actions[bot]
feat(hub): ✨ support apiManagement OpenAPI refresh interval #1949 by @darkweaver87

🐛 Bug fixes

fix: 🐛 hub/proxy mapping #1984 by @darkweaver87
fix(rbac): restore secretResourceNames for namespaced role #1972 by @HarnageaGabriel

📦 Others

chore(deps): update dawidd6/action-download-artifact action to v24 #1979 by @renovate-with-github-actions[bot]
chore(deps): update renovatebot/github-action action to v46.2.4 #1978 by @renovate-with-github-actions[bot]
chore(release): 🚀 publish 41.4.0 #1985 by @darkweaver87

👌 Traefik version support

Traefik Proxy: v3.6.0 -> v3.7.12 (default)
Traefik Hub: v3.19.3 -> v3.20.12

`v41.3.0`

Compare Source

🚀 Features

feat(deps): update ghcr.io/traefik/hub-manager docker tag to v0.45.2 #1969 by @renovate-with-github-actions[bot]
feat: add new options for traefik v3.7.11 #1973 by @youkoulayley
feat(deps): update traefik to v3.7.11 and traefik-hub to v3.20.10 #1975 by @youkoulayley
feat(deps): ✨ update traefik-hub to v3.20.11 #1977 by @mloiseleur

📦 Others

ci(docs): exclude .github fixtures from helm-docs #1965 by @mloiseleur
chore(deps): update dawidd6/action-download-artifact action to v23 #1970 by @renovate-with-github-actions[bot]
chore(deps): update github actions #1966 by @renovate-with-github-actions[bot]
chore(release): 🚀 publish 41.3.0 #1974 by @youkoulayley

👌 Traefik version support

Traefik Proxy: v3.6.0 -> v3.7.11 (default)
Traefik Hub: v3.19.3 -> v3.20.11

`v41.2.0`

Compare Source

[!IMPORTANT]
This release includes a CRD update. See chart UPGRADING instructions and upstream migration guide.

🚀 Features

feat(hub): ✨ support AWS EC2 provider #1946 by @zalbiraw
feat: allow setting emptyDir options for data and tmp volumes #1958 by @dmaes
feat(deps): update traefik docker tag to v3.7.10 #1954 by @renovate-with-github-actions[bot]
feat(deps): update ghcr.io/traefik/traefik-hub docker tag to v3.20.8 #1953 by @renovate-with-github-actions[bot]

🐛 Bug fixes

fix(hub): 🐛 enable providers with default config #1956 by @mloiseleur
fix(rbac): allow namespaced rbac with only the knative provider #1955 by @karpovantonme
fix(crds/middleware): add missing ErrorRequestHeaders field #1960 by @mloiseleur
fix(changelog): only update the chart being released #1963 by @mloiseleur

📦 Others

chore(deps): update github actions #1952 by @renovate-with-github-actions[bot]
ci(artifacthub): structured changelog with link on major #1925 by @mloiseleur
test(service): LoadBalancer node port opt-out #1959 by @tomatotomata
ci(renovate): scope updates per chart on VALUES.md & AppVersion #1961 by @mloiseleur
chore(release): 🚀 publish 41.2.0 #1964 by @mloiseleur

👌 Traefik version support

Traefik Proxy: v3.6.0 -> v3.7.10 (default)
Traefik Hub: v3.19.3 -> v3.20.8

`v41.1.1`

Compare Source

🐛 Bug fixes

fix: update hardened image registry #1950 by @youkoulayley

📦 Others

chore(release): 🚀 publish 41.1.1 #1951 by @youkoulayley

👌 Traefik version support

Traefik Proxy: v3.6.0 -> v3.7.9 (default)
Traefik Hub: v3.19.3 -> v3.20.7

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-08-28T08:04:48Z

Helm Template Diff — `03_traefik`

18 changed lines

--- /tmp/old.yaml	2026-08-28 08:04:48.130222085 +0000
+++ /tmp/new.yaml	2026-08-28 08:04:46.722192340 +0000
@@ -8,7 +8,7 @@
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-traefik
-    helm.sh/chart: traefik-41.1.0
+    helm.sh/chart: traefik-41.4.0
     app.kubernetes.io/managed-by: Helm
   annotations:
 automountServiceAccountToken: false
@@ -21,7 +21,7 @@
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-traefik
-    helm.sh/chart: traefik-41.1.0
+    helm.sh/chart: traefik-41.4.0
     app.kubernetes.io/managed-by: Helm
 rules:
   - apiGroups:
@@ -106,7 +106,7 @@
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-traefik
-    helm.sh/chart: traefik-41.1.0
+    helm.sh/chart: traefik-41.4.0
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -126,7 +126,7 @@
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-traefik
-    helm.sh/chart: traefik-41.1.0
+    helm.sh/chart: traefik-41.4.0
     app.kubernetes.io/managed-by: Helm
     custom.network/lb-pool: static
   annotations:
@@ -156,7 +156,7 @@
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-traefik
-    helm.sh/chart: traefik-41.1.0
+    helm.sh/chart: traefik-41.4.0
     app.kubernetes.io/managed-by: Helm
   annotations:
 spec:
@@ -182,7 +182,7 @@
         app.kubernetes.io/instance: traefik-traefik
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: traefik
-        helm.sh/chart: traefik-41.1.0
+        helm.sh/chart: traefik-41.4.0
     spec:
       automountServiceAccountToken: true
       containers:
@@ -223,7 +223,7 @@
               fieldPath: metadata.namespace
         - name: USER
           value: traefik
-        image: docker.io/traefik:v3.7.9
+        image: docker.io/traefik:v3.7.12
         imagePullPolicy: IfNotPresent
         lifecycle: null
         livenessProbe:
@@ -296,7 +296,7 @@
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-traefik
-    helm.sh/chart: traefik-41.1.0
+    helm.sh/chart: traefik-41.4.0
     app.kubernetes.io/managed-by: Helm
   name: traefik
 spec:

lunarys · 2026-08-28T09:01:12Z

Renovate Review: `traefik` 41.1.0 → 41.4.0 (minor, `03_traefik` app)

Risk: 🟢 LOW

Check	Result
Inputs	Complete — Release Notes section covers 41.1.1 through 41.4.0; diff comment present for the one affected app (`03_traefik`, slug `02-bootstrap-03-traefik`), no coverage gap.
Description vs. diff	Consistent — table says `41.1.0`→`41.4.0` (minor); the only changed file is `02_bootstrap/03_traefik/Chart.yaml`, bumping the `traefik` subchart dependency version `41.1.0`→`41.4.0` in the `dependencies:` list. Scope matches exactly.
Rendered diff	Full, no truncation (18 changed lines) — `helm.sh/chart` label bump on ServiceAccount/ClusterRole/ClusterRoleBinding/Service/Deployment, plus the Traefik image tag bump `docker.io/traefik:v3.7.9`→`v3.7.12` (matches "Traefik Proxy v3.6.0 -> v3.7.12" in the release notes). No resource additions/removals, no render errors.
RBAC	Pure label bump on the existing ClusterRole/ClusterRoleBinding — the `rules:`/`roleRef:`/`subjects:` blocks are unchanged (not shown as +/- in the diff), so per procedure this is not an RBAC finding.
Changelog vs. config	No overlap — v41.2.0's CRD-update note and the Middleware `ErrorRequestHeaders` field addition don't intersect this repo's only Middleware resource (`02_bootstrap/03_traefik/resources/security-headers.yaml`, which sets `frameDeny`/`stsSeconds`/`customResponseHeaders` etc., not `errorRequestHeaders`); the new `aliasHeadersStrategy` value and the deprecated `underscoreHeadersStrategy` (v41.4.0) are also unused — neither key appears in `values.yaml`.

Details:

Traefik's CRDs are not part of this rendered diff (no kind: CustomResourceDefinition, and values.yaml sets no crds.* key), so the "CRD update" flagged in the v41.2.0 release notes isn't independently verifiable from the diff itself — checked by hand instead that the live Middleware doesn't touch the changed fields.
Reviewed 02_bootstrap/03_traefik/values.yaml in full: kubernetesCRD/kubernetesIngress providers enabled, dashboard disabled in prod, static LB-IP via Cilium IPAM — none of these surfaces are mentioned in the 41.1.1–41.4.0 changelog.

Why LOW: minor bump, diff is label/image-bump only with no RBAC rule changes, and the changelog's notable items (Middleware field addition, header-strategy deprecation, namespaced-RBAC fix) don't intersect this deployment's config.

Generated by Claude Code

chore(deps): update helm release traefik to v41.4.0

29fd0cc

lunarys mentioned this pull request Aug 28, 2026

chore(deps): update kyverno docker tag to v3.9.0 #177

Open

1 task

Navigation Menu

chore(deps): update helm release traefik to v41.4.0 - #175

chore(deps): update helm release traefik to v41.4.0#175
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/traefik-41.x

renovate Bot commented Aug 28, 2026

Uh oh!

github-actions Bot commented Aug 28, 2026

Uh oh!

lunarys commented Aug 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Aug 28, 2026

Release Notes

v41.4.0

🚀 Features

🐛 Bug fixes

📦 Others

👌 Traefik version support

v41.3.0

🚀 Features

📦 Others

👌 Traefik version support

v41.2.0

🚀 Features

🐛 Bug fixes

📦 Others

👌 Traefik version support

v41.1.1

🐛 Bug fixes

📦 Others

👌 Traefik version support

Configuration

Uh oh!

github-actions Bot commented Aug 28, 2026

Helm Template Diff — 03_traefik

Uh oh!

lunarys commented Aug 28, 2026

Renovate Review: traefik 41.1.0 → 41.4.0 (minor, 03_traefik app)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v41.4.0`

`v41.3.0`

`v41.2.0`

`v41.1.1`

Helm Template Diff — `03_traefik`

Renovate Review: `traefik` 41.1.0 → 41.4.0 (minor, `03_traefik` app)