Traefik + Let's Encrypt

Important: Please read the migration guide.

CVE fixed:

• CVE-2026-54763 (Advisory GHSA-x677-9fxg-v5c5)
• CVE-2026-54764 (Advisory GHSA-3q9r-p662-5j8m)

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v5 (#13359 @juliens)
• [middleware, authentication] Fix x-forwarded-port in forward-auth (#13344 @juliens)
• [middleware, authentication] Add an option to remove request headers with underscores (#13262 @youkoulayley)
• [webui] Bump axios to v1.18.0 (#13380 @gndz07)
• Configurable max request header size (#13353 @juliens)

Documentation:

• [security] Add HTTP/2 header memory exhaustion security documentation (#13381 @emilevauge)
• Adds documentations on maxHeaderBytes (#13363 @juliens)