Bug fixes:

• [fastproxy] Do not read response body for HEAD requests (#11442 by kevinpollet)
• [metrics,tracing,accesslogs] Fix observability configuration on EntryPoints (#11446 by rtribotte)
• [webui] Set content-type when serving webui index (#11428 by kevinpollet)

Documentation:

• [acme] Fix deprecated dnsChallenge propagation logging and documentation (#11433 by thomscode)
• [acme] Add missing trailing s to propagation.delayBeforeCheck option (#11417 by jspiers)

Misc:

• Merge branch v2.11 into v3.3 (#11419 by kevinpollet)

Bug fixes:

• [websocket,server] Disable http2 connect setting for websocket by default (#11408 by rtribotte)

Bug fixes:

• [websocket,server] Disable http2 connect setting for websocket by default (#11408 by rtribotte)

Bug fixes:

• [websocket,server] Disable http2 connect setting for websocket by default (#11412 by rtribotte)

⚠️ There is an issue with websocket upgrade. If you want to use this version, please set the following environment variable GODEBUG=http2xconnect=0 ⚠️

Enhancements:

• [acme] Add options to control ACME propagation checks (#11241 by ldez)
• [api] Add support dump API endpoint (#11328 by mmatur)
• [http] Set Host header in HTTP provider request (#11237 by nikonhub)
• [k8s/crd,k8s] Make the IngressRoute kind optional (#11177 by skirtan1)
• [k8s/ingress,sticky-session,k8s/crd,k8s] Support serving endpoints (#11121 by BZValoche)
• [logs,accesslogs] OpenTelemetry Logs and Access Logs (#11319 by rtribotte)
• [logs,accesslogs] Add experimental flag for OTLP logs integration (#11335 by kevinpollet)
• [metrics,tracing,accesslogs] Manage observability at entrypoint and router level (#11308 by rtribotte)
• [middleware,authentication] Add an option to preserve the ForwardAuth Server Location header (#11318 by Nelwhix)
• [middleware,authentication] Only calculate basic auth hashes once for concurrent requests (#11143 by michelheusschen)
• [middleware,authentication] Send request body to authorization server for forward auth (#11097 by kyo-ke)
• [plugins] Add AbortOnPluginFailure option to abort startup on plugin load failure (#11228 by bmagic)
• [sticky-session] Configurable path for sticky cookies (#11166 by IIpragmaII)
• [webui,api] Configurable API & Dashboard base path (#11250 by rtribotte)

Bug fixes:

• [k8s/ingress,k8s/crd] Fix fenced server status computation (#11361 by kevinpollet)

Documentation:

• Prepare release v3.3.0-rc2 (#11362 by rtribotte)
• Prepare Release v3.3.0-rc1 (#11349 by rtribotte)

Misc:

• Merge branch v3.2 into v3.3 (#11402 by kevinpollet)
• Merge branch v3.2 into v3.3 (#11393 by mmatur)
• Merge branch v3.2 into v3.3 (#11389 by mmatur)
• Merge branch v3.2 into v3.3 (#11367 by kevinpollet)
• Merge branch v3.2 into master (#11340 by kevinpollet)
• Merge branch v3.2 into master (#11293 by kevinpollet)
• Merge branch v3.2 into master (#11239 by kevinpollet)
• Merge branch v3.2 into master (#11187 by kevinpollet)

⚠️ There is an issue with websocket upgrade. If you want to use this version, please set the following environment variable GODEBUG=http2xconnect=0 ⚠️

Bug fixes:

• [k8s/gatewayapi] Support empty value for core Kubernetes API group (#11386 by rtribotte)
• [tcp,k8s/crd] Pass TLS bool from IngressRouteTCP to TCPService (#11343 by lipmem)
• [tls] Upgrade github.com/spiffe/go-spiffe/v2 to v2.4.0 (#11385 by mmatur)
• Remove duplicate github.com/coreos/go-systemd dependency (#11354 by Juneezee)

Documentation:

• [k8s/gatewayapi] Update Gateway API version support to v1.2.1 (#11357 by kevinpollet)
• Add @jnoordsij to maintainers (#11352 by emilevauge)

Misc:

• Merge branch v2.11 into v3.2 (#11400 by kevinpollet)
• Merge branch v2.11 into v3.2 (#11392 by rtribotte)
• Merge branch v2.11 into v3.2 (#11388 by mmatur)
• Merge branch v2.11 into v3.2 (#11366 by kevinpollet)

⚠️ There is an issue with websocket upgrade. If you want to use this version, please set the following environment variable GODEBUG=http2xconnect=0 ⚠️

Bug fixes:

• [acme] Update go-acme/lego to v4.21.0 (#11368 by ldez)
• [middleware] Fix typo in basicauth note (#11397 by tieje)
• [service] Configure ErrorLog in httputil.ReverseProxy (#11344 by peacewalker122)
• Bump golang.org/x/net to v0.33.0 (#11365 by kevinpollet)

Documentation:

• [acme] Fix allowACMEByPass TOML example (#11370 by hannesbraun)
• [k8s/crd] Update copyright for 2025 (#11383 by kevinpollet)

Bug fixes:

• [k8s/ingress,k8s/crd] Fix fenced server status computation (#11361 by kevinpollet)

Enhancements:

• [acme] Add options to control ACME propagation checks (#11241 by ldez)
• [api] Add support dump API endpoint (#11328 by mmatur)
• [http] Set Host header in HTTP provider request (#11237 by nikonhub)
• [k8s/crd,k8s] Make the IngressRoute kind optional (#11177 by skirtan1)
• [logs,accesslogs] OpenTelemetry Logs and Access Logs (#11319 by rtribotte)
• [logs,accesslogs] Add experimental flag for OTLP logs integration (#11335 by kevinpollet)
• [metrics,tracing,accesslogs] Manage observability at entrypoint and router level (#11308 by rtribotte)
• [middleware,authentication] Add an option to preserve the ForwardAuth Server Location header (#11318 by Nelwhix)
• [middleware,authentication] Only calculate basic auth hashes once for concurrent requests (#11143 by michelheusschen)
• [middleware,authentication] Send request body to authorization server for forward auth (#11097 by kyo-ke)
• [plugins] Add AbortOnPluginFailure option to abort startup on plugin load failure (#11228 by bmagic)
• [sticky-session] Configurable path for sticky cookies (#11166 by IIpragmaII)
• [sticky-session,k8s/ingress,k8s/crd,k8s] Support serving endpoints (#11121 by BZValoche)
• [webui,api] Configurable API & Dashboard base path (#11250 by rtribotte)

Misc:

• Merge branch v3.2 into master (#11340 by kevinpollet)
• Merge branch v3.2 into master (#11293 by kevinpollet)
• Merge branch v3.2 into master (#11239 by kevinpollet)
• Merge branch v3.2 into master (#11187 by kevinpollet)

Documentation:

• Update reference install documentation with current chart default (#11332 by mloiseleur)

Misc:

• Merge branch v2.11 into v3.2 (#11346 by kevinpollet)
• Merge branch v2.11 into v3.2 (#11337 by kevinpollet)