v3.6.25
Fixed 3
- Fix auth singleflight key collision in middleware authentication
- Avoid router name collisions in Kubernetes Gateway API provider
- Fix cross-namespace service reference check in Kubernetes CRD provider
Security 3
- Fix CVE GHSA-fgjj-px3w-67xx
- Fix CVE GHSA-62fc-8686-hfmq
- Fix CVE GHSA-6765-c87h-8mrf
CVE fixed:
- Advisory GHSA-fgjj-px3w-67xx
- Advisory GHSA-62fc-8686-hfmq
- Advisory GHSA-6765-c87h-8mrf
Bug fixes:
- [acme] Bump github.com/go-acme/lego/v5 to v5.3.1 (#13547 @ldez)
- [middleware, authentication] Fix auth singleflight key collision (#13572 @mmatur)
- [k8s/gatewayapi] Avoid router name collisions in Kubernetes Gateway API provider (#13580 @gndz07)
- [tracing] Bump github.com/DataDog/dd-trace-go/v2 to 2.8.1 (#13530 @kevinpollet)
- Bump golang.org/x/text to v0.40.0 and golang.org/x/net v0.57.0 (#13574 @mmatur)
- [k8s/crd] Fix cross-namespace service reference check in Kubernetes CRD provider (#13573 @gndz07)
- [middleware] Bump github.com/klauspost/compress to v1.18.7 (#13587 @mmatur)