Update all dependencies

[missingcharacter]

This PR contains the following updates:

Package	Update	Change
traefik	patch	v3.6.6 → v3.6.7
vaultwarden/server	patch	1.35.1-alpine → 1.35.2-alpine

---

Release Notes

containous/traefik (traefik)

v3.6.7

Compare Source

⚠️ Breaking change ⚠️
As explained in the comment left on the CVE-2025-66490 fix, this new hotfix version makes the behavior opt-in.
As a result, this release is breaking compared to the previous hotfix versions since v3.6.4, but it restores by default the behavior that existed before that hotfix.
Please, read the migration guide to enable the feature.

CVE fixed:

• CVE-2026-22045 (Advisory GHSA-cwjm-3f7h-9hwqj)

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.31.0 (#​12529 by ldez)
• [acme] Add missing renew options (#​12467 by ldez)
• [acme] Replace hardcoded references to LetsEncrypt in log messages (#​12464 by schildbach)
• [k8s/ingress-nginx] Fix use-regex nginx annotation (#​12531 by LBF38)
• [k8s/ingress-nginx] Prevent Ingress Nginx provider http router to attach to an entrypoint with TLS (#​12528 by rtribotte)
• [k8s/ingress] Fix panic for empty defaultBackend and defaultBackend without resources (#​12509 by gndz07)
• [k8s] Fix condition used for serving and fenced endpoints (#​12521 by LBF38)
• [webui] Validate X-Forwarded-Prefix value for dashboard redirect (#​12514 by LBF38)
• [acme] Add timeout to ACME-TLS/1 challenge handshake (#​12516 by LBF38)
• [server] Make encoded character options opt-in (#​12540 by gndz07)

Documentation:

• [docker/swarm] Update swarm.md traefik version (#​12508 by DBouraoui)
• [k8s/ingress-nginx] Fix ingress-nginx annotations documentation (#​12510 by nmengin)
• [k8s] Fix Kubernetes reference yml file (#​12406 by mmatur)
• Fix code copy button positioning (#​12520 by AnuragEkkati)
• Fix typo in kubernetes.md (#​12515 by EdwardSalkeld)
• Bring back security section on API & Dashboard documentation page (#​12507 by gndz07)
• Fix link description in Traefik Proxy documentation (#​12488 by schaerfo)
• Add product comparison matrix and features page (#​12037 by sheddy-traefik)

Misc:

• Merge branch v2.11 into v3.6 (#​12552 by rtribotte)
• Merge branch v2.11 into v3.6 (#​12533 by mmatur)
• Merge branch v2.11 into v3.6 (#​12497 by mmatur)

v3.6.7

Compare Source

⚠️ Breaking change ⚠️
As explained in the comment left on the CVE-2025-66490 fix, this new hotfix version makes the behavior opt-in.
As a result, this release is breaking compared to the previous hotfix versions since v3.6.4, but it restores by default the behavior that existed before that hotfix.
Please, read the migration guide to enable the feature.

CVE fixed:

• CVE-2026-22045 (Advisory GHSA-cwjm-3f7h-9hwqj)

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.31.0 (#​12529 by ldez)
• [acme] Add missing renew options (#​12467 by ldez)
• [acme] Replace hardcoded references to LetsEncrypt in log messages (#​12464 by schildbach)
• [k8s/ingress-nginx] Fix use-regex nginx annotation (#​12531 by LBF38)
• [k8s/ingress-nginx] Prevent Ingress Nginx provider http router to attach to an entrypoint with TLS (#​12528 by rtribotte)
• [k8s/ingress] Fix panic for empty defaultBackend and defaultBackend without resources (#​12509 by gndz07)
• [k8s] Fix condition used for serving and fenced endpoints (#​12521 by LBF38)
• [webui] Validate X-Forwarded-Prefix value for dashboard redirect (#​12514 by LBF38)
• [acme] Add timeout to ACME-TLS/1 challenge handshake (#​12516 by LBF38)
• [server] Make encoded character options opt-in (#​12540 by gndz07)

Documentation:

• [docker/swarm] Update swarm.md traefik version (#​12508 by DBouraoui)
• [k8s/ingress-nginx] Fix ingress-nginx annotations documentation (#​12510 by nmengin)
• [k8s] Fix Kubernetes reference yml file (#​12406 by mmatur)
• Fix code copy button positioning (#​12520 by AnuragEkkati)
• Fix typo in kubernetes.md (#​12515 by EdwardSalkeld)
• Bring back security section on API & Dashboard documentation page (#​12507 by gndz07)
• Fix link description in Traefik Proxy documentation (#​12488 by schaerfo)
• Add product comparison matrix and features page (#​12037 by sheddy-traefik)

Misc:

• Merge branch v2.11 into v3.6 (#​12552 by rtribotte)
• Merge branch v2.11 into v3.6 (#​12533 by mmatur)
• Merge branch v2.11 into v3.6 (#​12497 by mmatur)

dani-garcia/vaultwarden (vaultwarden/server)

v1.35.2

Compare Source

Notable changes

Fixed an issue with the web-vault which prevent creating an organization.

What's Changed

• update web-vault to fix org creation by @​stefan0xC in #​6646
• return no content with status code 204 by @​stefan0xC in #​6665
• allow MasterPasswordHash for Android by @​stefan0xC in #​6673
• improve sso callback path by @​stefan0xC in #​6676
• Fix web-vault version check and update web-vault by @​BlackDex in #​6686

Full Changelog: dani-garcia/vaultwarden@1.35.1...1.35.2

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.