Bug fixes:

• [logs,metrics,tracing,accesslogs,otel] Add missing resource attributes detectors (#11874 by rtribotte)

Misc:

• Merge branch v3.4 into v3.5 (#11898 by kevinpollet)

Bug fixes:

• [k8s/gatewayapi] Respect service.nativelb=false annotation when nativeLBByDefault is enabled (#11847 by sdelicata)
• [service] Fix concurrent access to balancer status map in WRR and P2C strategies (#11887 by kevinpollet)

Documentation:

• [docker,k8s] Add New Expose Guides (#11760 by sheddy-traefik)
• [docker,k8s] Add New Setup Guides (#11741 by sheddy-traefik)
• [docker/swarm] Fix label for overriding swarm network on container (#11881 by kevinpollet)
• [logs,accesslogs] Update Logs and Accesslogs Reference documentation with OTLP Options (#11845 by sheddy-traefik)
• Update what is Traefik page to include full Traefik Platform context (#11885 by tomatokoolaid)

Misc:

• Merge branch v2.11 into v3.4 (#11896 by kevinpollet)

Bug fixes:

• Bump github.com/go-viper/mapstructure/v2 to v2.3.0 (#11880 by kevinpollet)

Enhancements:

• [acme] OCSP stapling (#8393 by alekitto)
• [acme] Add acme.httpChallenge.delay option (#11643 by ldez)
• [acme] Allow configuration of ACME provider http timeout (#11637 by tkw1536)
• [healthcheck] Add url option to healthcheck command (#11711 by Nelwhix)
• [healthcheck] Add unhealthy Interval to the health check configuration (#10610 by sswastik02)
• [k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.3.0 (#11719 by rtribotte)
• [k8s/ingress] Make the behavior of prefix matching in Ingress consistent with Kubernetes doc (#11203 by charlie0129)
• [k8s] NGINX Ingress Provider (#11844 by rtribotte)
• [middleware,authentication] Handle context canceled in ForwardAuth middleware (#11817 by bengentree)
• [plugins] Ability to enable unsafe in yaegi through plugin manifest (#11589 by Rydez)
• [tls] Introduce X25519MLKEM768 for Post-Quantum-Secure TLS (#11731 by fzoli)
• [webui] Migrate Traefik Proxy dashboard UI to React (#11674 by gndz07)
• [webui] Improve visualization for StatusRewrites option of errors middleware (#11806 by sevensolutions)

Misc:

• Merge branch v3.4 into master (#11863 by rtribotte)
• Merge branch v3.4 into master (#11861 by rtribotte)
• Merge branch v3.4 into master (#11857 by rtribotte)
• Merge branch v3.4 into master (#11855 by rtribotte)
• Merge branch v3.4 into master (#11813 by kevinpollet)
• Merge branch v3.4 into master (#11758 by mmatur)
• Merge v3.4 into master (#11752 by mmatur)
• Merge branch v3.4 into master (#11708 by kevinpollet)

Bug fixes:

• [http3] Bump quic-go to v.0.49.0 (#11848 by joshua-siw)

Documentation:

• [acme] Add a note to certificatesDuration (#11808 by sMteX)
• [docker,k8s] Update Getting started Section with New Docker and Kubernetes Tutorial (#11714 by sheddy-traefik)
• [docker] Remove obsolete version field in compose files (#11798 by thomas-mauran)
• [k8s] Add a note about Ingress Backend Resource support (#11785 by edysli)
• [logs,metrics,tracing,accesslogs] Update the EntryPoints Documentation (#11856 by sheddy-traefik)
• [logs,metrics,tracing,accesslogs] Add New Observe Guides to the Documentation (#11828 by sheddy-traefik)
• [middleware] Remove conflicting information from the CircuitBreaker documentation. (#11835 by adk-swisstopo)
• [service] Clarify mirroring service default percent value (#11804 by Alexy-vda)
• [websocket] Add WebSocket guide (#11623 by NX211)

Misc:

• Merge branch v2.11 into v3.4 (#11859 by rtribotte)
• Merge branch v2.11 into v3.4 (#11831 by rtribotte)
• Merge branch v2.11 into v3.4 (#11810 by rtribotte)

Bug fixes:

• [middleware] Do not log redis sentinel username and password (#11819 by kevinpollet)

Documentation:

• [kv] Fix KV reference rendering (#11815 by rtribotte)
• [middleware,k8s/crd] Fix typo in redirect middleware documentation (#11830 by rtribotte)
• Update supported versions (#11811 by jnoordsij)

Important: Please read the migration guide.

CVE's fixed:

• CVE-2025-47952 (Advisory GHSA-vrch-868g-9jx5)

Bug fixes:

• [docker] Do not warn network missing if connected to a container network (#11698 by holysoles)
• [k8s/crd] Fix CEL validation for RootCA in ServersTransport (#11775 by rtribotte)
• [middleware] Scope the rate limit counter key by source and by middleware (#11753 by aromeyer)
• [server] Use routing path in v3 matchers (#11790 by kevinpollet)
• [service] Make P2C strategy thread-safe (#11762 by lbenguigui)
• [webui] Do not display RemoveHeader option when not defined (#11782 by kevinpollet)

Documentation:

• [acme] Fix ambiguous wording in ACME page (#11789 by joshka)
• [k8s] Fix incorrect case and missing rbac in documentation (#11742 by mmatur)
• [middleware] Match encoded certificate to example data for TLS passthrough (#11759 by holysoles)

Misc:

• Merge branch v2.11 into v3.4 (#11799 by kevinpollet)
• Merge branch v2.11 into v3.4 (#11796 by kevinpollet)
• Merge branch v2.11 into v3.4 (#11783 by kevinpollet)
• Merge branch v2.11 into v3.4 (#11757 by mmatur)
• Merge v2.11 into v3.4 (#11751 by mmatur)

Important: Please read the migration guide.

CVE's fixed:

• CVE-2025-47952 (Advisory GHSA-vrch-868g-9jx5)

Bug fixes:

• [k8s/ingress] Fix panic for ingress with backend resource (#11777 by rtribotte)
• [server] Normalize request path (#11768 by kevinpollet)

Documentation:

• [middleware,k8s] Add multi-tenant TLS guidance to the docs (#11724 by sheddy-traefik)
• [service] Add a note about how to disable connection reuse with backends (#11716 by rtribotte)
• Fix broken link in documentation (#11761 by sheddy-traefik)
• Change version for path sanitization migration guide (#11702 by rtribotte)

Important: Please read the migration guide.

Enhancements:

• [acme] Add acme.profile and acme.emailAddresses options (#11597 by ldez)
• [docker,ecs,docker/swarm,consulcatalog,nomad] Allow configuring server URLs with label providers (#11374 by yelvert)
• [k8s/crd] Improve CEL validation on Ingress CRD resources (#11311 by mloiseleur)
• [k8s/crd] Remove default load-balancing strategy from CRD (#11701 by kevinpollet)
• [k8s/crd] Restrict regex validation of HTTP status codes for Ingress CRD resources (#11670 by jnoordsij)
• [k8s/gatewayapi] Set rule priority in Gateway API TLSRoute (#11443 by augustozanellato)
• [k8s/ingress] Add ingress status for ClusterIP and NodePort Service Type (#11100 by mlec1)
• [middleware,authentication] Add option to preserve request method in forwardAuth (#11473 by an09mous)
• [middleware] Support rewriting status codes in error page middleware (#11520 by sevensolutions)
• [middleware] Add Redis rate limiter (#10211 by longquan0104)
• [service] Add p2c load-balancing strategy for servers load-balancer (#11547 by rtribotte)
• [sticky-session] Support domain configuration for sticky cookies (#11556 by jleal52)
• [tls,k8s/crd,service] Allow root CA to be added through config maps (#11475 by Nelwhix)
• [tls] Add support to disable session ticket (#11609 by avdhoot)
• [udp] Add support for UDP routing in systemd socket activation (#11022 by tsiid)
• [webui] Add auto webui theme option and default to it (#11455 by zizzfizzix)
• Replace experimental maps and slices with stdlib (#11350 by Juneezee)
• Bump github.com/redis/go-redis/v9 to v9.7.3 (#11687 by kevinpollet)

Documentation:

• Prepare release v3.4.0-rc1 (#11654 by kevinpollet)
• Prepare release v3.4.0-rc2 (#11707 by rtribotte)
• Deprecate defaultRuleSyntax and ruleSyntax options (#11619 by rtribotte)

Misc:

• Merge branch v3.3 into master (#11653 by kevinpollet)
• Merge branch v3.3 into master (#11595 by kevinpollet)
• Merge branch v3.3 into master (#11541 by kevinpollet)
• Merge branch v3.3 into master (#11504 by kevinpollet)
• Merge branch v3.3 into master (#11420 by kevinpollet)
• Merge branch v3.3 into master (#11394 by mmatur)
• Merge branch v3.3 into v3.4 (#11736 by kevinpollet)
• Merge branch v3.3 into v3.4 (#11705 by kevinpollet)