Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package traefik for openSUSE:Factory checked in at 2025-08-06 14:33:00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/traefik (Old) and /work/SRC/openSUSE:Factory/.traefik.new.1085 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "traefik" Wed Aug 6 14:33:00 2025 rev:39 rq:1297689 version:3.5.0 Changes: -------- --- /work/SRC/openSUSE:Factory/traefik/traefik.changes 2025-07-27 16:26:28.398258155 +0200 +++ /work/SRC/openSUSE:Factory/.traefik.new.1085/traefik.changes 2025-08-06 14:33:40.184983141 +0200 @@ -1,0 +2,47 @@ +Tue Jul 29 10:00:18 UTC 2025 - Johannes Weberhofer <jweberho...@weberhofer.at> + +- Version 3.5.0 + +Please read the migration guide: +https://doc.traefik.io/traefik/migration/v3/#v350 + +Enhancements: + * acme + - Add acme.httpChallenge.delay option + - Allow configuration of ACME provider http timeout + - OCSP stapling + * healthcheck + - Add unhealthy Interval to the health check configuration + - Add url option to healthcheck command + * k8s/gatewayapi + - Bump sigs.k8s.io/gateway-api to v1.3.0 + * k8s/ingress + - Make the behavior of prefix matching in Ingress consistent with + Kubernetes doc + * k8s + - NGINX Ingress Provider + * middleware,authentication + - Handle context canceled in ForwardAuth middleware + * plugins + - Ability to enable unsafe in yaegi through plugin manifest + * tls + - Introduce X25519MLKEM768 for Post-Quantum-Secure TLS + * webui + - Improve visualization for StatusRewrites option of errors middleware + - Migrate Traefik Proxy dashboard UI to React + +Bug fixes: + * healthcheck + - Revert 11711 adding url param to healthcheck command + * logs,metrics,tracing,accesslogs,otel + - Add missing resource attributes detectors + * logs,tracing,k8s,otel + - Add k8s resource attributes automatically + * metrics,otel + - Add resourceAttributes option to OTel metrics + * middleware,tracing + - Introduce trace verbosity config and produce less spans by default + +- Synchronized changelog with boo tickets and cve entries + +------------------------------------------------------------------- @@ -120,3 +167,4 @@ - -- fix for boo#1239233 CVE-2025-22868 -- fix for boo#1241731 CVE-2025-22872 + * Bump golang.org/x/net to v0.38.0 + Fix for boo#1241731 and boo#1241733: CVE-2025-22872 + - Bump golang.org/x/oauth2 to v0.28.0 + Fix for boo#1239228 CVE-2025-22868 @@ -128,2 +175,0 @@ -- fix for boo#1237636 CVE-2025-27144 -- fix for boo#1239383 CVE-2025-22869 @@ -137,0 +184,7 @@ + * Updates + - Bump github.com/go-jose/go-jose/v4 to v4.0.5 + fix boo#1237621 CVE-2025-27144 + - Bump github.com/golang-jwt/jwt to v4.5.2 and v5.2.2 + fix boo#1240454 CVE-2025-30204 + - Bump x/crypto to v0.35.0 + fix for boo#1239383 CVE-2025-22869, boo#1239363 CVE-2025-22869 @@ -248,2 +301,3 @@ - Bump golang.org/x/net to v0.33.0 (gh#traefik/traefik#11365) - Remove duplicate github.com/coreos/go-systemd dependency (gh#traefik/traefik#11354) + - Remove duplicate github.com/coreos/go-systemd dependency (gh#traefik/traefik#11354) + - Bump golang.org/x/net to v0.33.0 (gh#traefik/traefik#11365) + mentioned in boo#1235256 CVE-2024-45338 Old: ---- traefik-v3.4.5.src.tar.gz New: ---- traefik-v3.5.0.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ traefik.spec ++++++ --- /var/tmp/diff_new_pack.0KXYZd/_old 2025-08-06 14:33:42.129064530 +0200 +++ /var/tmp/diff_new_pack.0KXYZd/_new 2025-08-06 14:33:42.133064698 +0200 @@ -23,7 +23,7 @@ %define buildmode pie %endif Name: traefik -Version: 3.4.5 +Version: 3.5.0 Release: 0 Summary: The Cloud Native Application Proxy License: MIT ++++++ traefik-v3.4.5.src.tar.gz -> traefik-v3.5.0.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/traefik/traefik-v3.4.5.src.tar.gz /work/SRC/openSUSE:Factory/.traefik.new.1085/traefik-v3.5.0.src.tar.gz differ: char 14, line 1 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/traefik/vendor.tar.gz /work/SRC/openSUSE:Factory/.traefik.new.1085/vendor.tar.gz differ: char 26, line 1