chore(deps): update helm release traefik to v41

[renovate]

This PR contains the following updates:

Package	Update	Change
traefik (source)	major	40.2.0 → 41.0.0

---

Release Notes

traefik/traefik-helm-chart (traefik)

v41.0.0

Compare Source

Upgrade Notes

1. Logs & access logs syntax: The chart now aligns its logging keys with the upstream Traefik syntax with PR #​1887.
   • logs.general is renamed to log (e.g. logs.general.level → log.level).
   • logs.access is renamed to accessLog (e.g. logs.access.format → accessLog.format).
   • Filter and field keys are now camelCased: filters.statuscodes → filters.statusCodes, filters.retryattempts → filters.retryAttempts, filters.minduration → filters.minDuration, and fields.*.defaultmode → fields.*.defaultMode.
   • The accessLog.fields.general nesting level is removed: fields.general.defaultmode → fields.defaultMode.Expand commentComment on line R27Resolved
2. File provider content: providers.file.content is now an object ({}) instead of a string ("").

[!TIP]
Image registry and repository now default to null.
The chart now automatically resolves the full official image URI for both Traefik Proxy and Traefik Hub.

💥 BREAKING CHANGES

• feat(providers.file)!: switch content to an object #​1861 by @​minrk
• fix(logs)!: align syntax with upstream #​1887 by @​mloiseleur

🚀 Features

• feat(version): ✨ relax max-version guard to warn on minor/patch, fail only on major mismatch #​1884 by @​darkweaver87
• feat(hub): ✨ install out-of-box with only hub.token set #​1885 by @​darkweaver87
• feat(deps): update traefik docker tag to v3.7.5 #​1888 by @​renovate-with-github-actions[bot]

🐛 Bug fixes

• fix(notes): 📝 use traefik.image-name so NOTES match deployed image #​1886 by @​mloiseleur
• fix(deployment): omit spec.replicas when replicas is null #​1891 by @​mloiseleur
• fix(provider): 🐛 emit kubernetesIngressNGINX publishService for external service #​1897 by @​mloiseleur

📦 Others

• ci: track max-version assertions with relaxed guard wording #​1889 by @​mloiseleur
• ci(renovate): restore update on appVersion #​1892 by @​mloiseleur
• chore(deps): update dependency helm to v4.2.1 #​1893 by @​renovate-with-github-actions[bot]
• chore(deps): update losisin/helm-values-schema-json-action action to v3.0.1 #​1894 by @​renovate-with-github-actions[bot]
• ci(security): declare contents:write on release workflow #​1855 by @​arpitjain099
• chore(release): publish 41.0.0 #​1895 by @​mloiseleur

👌 Traefik version support

• Traefik Proxy: v3.6.0 -> v3.7.5 (default)
• Traefik Hub: v3.19.3 -> v3.20.4

v40.3.0

Compare Source

🚀 Features

• feat(provider): ✨ support qps and burst on kubernetesGateway #​1869 by @​darkweaver87
• feat(logs): ✨ support accesslog query parameters defaultmode #​1868 by @​darkweaver87
• feat(hub): 🚀 support traefik hub v3.20.4 #​1876 by @​jspdown
• feat(proxy): 🚀 support traefik v3.7.4 #​1880 by @​darkweaver87
• feat(CRDs): update Traefik Hub CRDs to v1.31.0 #​1881 by @​darkweaver87

🐛 Bug fixes

• fix(hub): 🐛 guard nil hub.token in hub-license template #​1875 by @​darkweaver87

📦 Others

• chore(deps): update mikepenz/release-changelog-builder-action action to v6.2.2 #​1857 by @​renovate-with-github-actions[bot]
• chore(deps): update actions/create-github-app-token action to v3.2.0 #​1858 by @​renovate-with-github-actions[bot]
• chore(deps): support traefik v3.7.3 & hub v3.20.3 #​1867 by @​bpsoraggi
• chore(deps): update actions/checkout action to v6.0.3 #​1870 by @​renovate-with-github-actions[bot]
• chore(deps): update renovatebot/github-action action to v46.1.15 #​1871 by @​renovate-with-github-actions[bot]
• chore(deps): update dependency helm to v3.21.0 #​1873 by @​renovate-with-github-actions[bot]
• ci(test): fix helm-unittest invocation for helm v4 #​1879 by @​darkweaver87
• chore(ci): track proxy & hub max-version annotations with renovate #​1877 by @​jspdown
• chore(deps): update dependency helm to v4 #​1874 by @​renovate-with-github-actions[bot]
• chore(release): 🚀 publish 40.3.0 #​1882 by @​darkweaver87

👌 Traefik version support

• Traefik Proxy: v3.6.0 -> v3.7.4 (default)
• Traefik Hub: v3.19.3 -> v3.20.4

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Helm Template Diff

03_traefik

18 changed lines

--- /tmp/old.yaml	2026-06-22 18:53:35.935917098 +0000
+++ /tmp/new.yaml	2026-06-22 18:53:33.739990628 +0000
@@ -8,7 +8,7 @@
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-traefik
-    helm.sh/chart: traefik-40.2.0
+    helm.sh/chart: traefik-41.0.0
     app.kubernetes.io/managed-by: Helm
   annotations:
 automountServiceAccountToken: false
@@ -21,7 +21,7 @@
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-traefik
-    helm.sh/chart: traefik-40.2.0
+    helm.sh/chart: traefik-41.0.0
     app.kubernetes.io/managed-by: Helm
 rules:
   - apiGroups:
@@ -106,7 +106,7 @@
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-traefik
-    helm.sh/chart: traefik-40.2.0
+    helm.sh/chart: traefik-41.0.0
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -126,7 +126,7 @@
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-traefik
-    helm.sh/chart: traefik-40.2.0
+    helm.sh/chart: traefik-41.0.0
     app.kubernetes.io/managed-by: Helm
   annotations:
     lbipam.cilium.io/ips: 10.0.4.200
@@ -154,7 +154,7 @@
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-traefik
-    helm.sh/chart: traefik-40.2.0
+    helm.sh/chart: traefik-41.0.0
     app.kubernetes.io/managed-by: Helm
   annotations:
 spec:
@@ -180,7 +180,7 @@
         app.kubernetes.io/instance: traefik-traefik
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: traefik
-        helm.sh/chart: traefik-40.2.0
+        helm.sh/chart: traefik-41.0.0
     spec:
       automountServiceAccountToken: true
       containers:
@@ -221,7 +221,7 @@
               fieldPath: metadata.namespace
         - name: USER
           value: traefik
-        image: docker.io/traefik:v3.7.1
+        image: docker.io/traefik:v3.7.5
         imagePullPolicy: IfNotPresent
         lifecycle: null
         livenessProbe:
@@ -294,7 +294,7 @@
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-traefik
-    helm.sh/chart: traefik-40.2.0
+    helm.sh/chart: traefik-41.0.0
     app.kubernetes.io/managed-by: Helm
   name: traefik
 spec:

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.