Important: Please read the migration guide.

CVE’s fixed:

• CVE-2025-47952 (Advisory GHSA-vrch-868g-9jx5)

Bug fixes:

• [docker] Do not warn network missing if connected to a container network (#11698 by holysoles)
• [k8s/crd] Fix CEL validation for RootCA in ServersTransport (#11775 by rtribotte)
• [middleware] Scope the rate limit counter key by source and by middleware (#11753 by aromeyer)
• [server] Use routing path in v3 matchers (#11790 by kevinpollet)
• [service] Make P2C strategy thread-safe (#11762 by lbenguigui)
• [webui] Do not display RemoveHeader option when not defined (#11782 by kevinpollet)

Documentation:

• [acme] Fix ambiguous wording in ACME page (#11789 by joshka)
• [k8s] Fix incorrect case and missing rbac in documentation (#11742 by mmatur)
• [middleware] Match encoded certificate to example data for TLS passthrough (#11759 by holysoles)

Misc:

• Merge branch v2.11 into v3.4 (#11799 by kevinpollet)
• Merge branch v2.11 into v3.4 (#11796 by kevinpollet)
• Merge branch v2.11 into v3.4 (#11783 by kevinpollet)
• Merge branch v2.11 into v3.4 (#11757 by mmatur)
• Merge v2.11 into v3.4 (#11751 by mmatur)