v2.11.57 v3.7.13
high risk
nari-labs/dia2Sep 4, 2026 → Sep 4, 20260 days between releases
What's New
Major version upgrade from v2.11 to v3.7 with additional security patches and ACME improvements.
Breaking Changes
- Major version jump from v2 to v3 requires configuration updates per migration guide.
- Default DNS challenge behavior changed to no longer require recursive nameservers propagation.
Improvements
- HTTP/3 clients now use dedicated transports per connection.
- ACME components updated to v5.4.1.
Bug Fixes
- Fixed sticky cookie expiration and leading dots in cookie domains.
- Ignore negated matchers when parsing rule domains.
- Fixed collision-free item key generation in Consul and Nomad providers.
Upgrade Notes
Review the official migration guide for v3.7 as it is a major version jump. Note the change in default DNS challenge behavior regarding recursive nameserver propagation requirements.
The Two Releases
v2.11.57
v2.11.57
Sep 4, 2026· 2 months ago
A security patch release focusing on fixing specific CVEs and adjusting configuration behaviors for ACME and request handling.
Full release notesv3.7.13
v3.7.13
Sep 4, 2026· 2 months ago
A security and bug fix release addressing multiple CVEs and improving ACME, HTTP/3, and middleware behaviors.
Full release notes