Release v3.19.0 · traefik/hub

Features

MCP Gateway- Traefik Hub now includes MCP Gateway, a dedicated gateway for securing and governing Model Context Protocol (MCP) servers. The MCP Gateway acts as an OAuth-compliant proxy that enables organizations to centrally manage access to MCP servers, tools, and resources with Task-Based Access Control (TBAC)—a new authorization paradigm designed specifically for AI agents.
LDAP Middleware - Added a new middleware. (hubldap) which provides LDAP authentication for the API Portal.
Responses API Middleware -Added a new middleware that provides support for the OpenAI Responses API endpoint. The Responses API is the successor to the OpenAI Chat Completions endpoint
Added conditions on the API management resources.
Added support for loading plugins from Artifactory repositories configured as VCS mirrors (GitHub, Bitbucket, etc.).

Add support for multiple JWKS providers with concurrent refresh and resilient error handling
Introduce an intermediate http.Header in the responseRecorder to prevent duplicate headers in the response writer of the LLM Guard middleware
Update Traefik Proxy to v3.6.7
Updated the hub provider to populate the Claim fields of the a Managed Subscription in the plan middleware
Bring back support for keyPrefix in OIDC middleware
Introduced a new separator in the Content Guard middleware that allows Presidio to detect multiple people instead of a single person

Fixed a bug which caused the developer portal to display the wrong quota usage
Fixed a bug where Traefik panics when no log config is provided
Fixed unexpected mutation of shared OpenAPI spec in portal API
Fixed an issue in the Microcks provider that blocks initialization and leads to inefficient token management
Fixed a panic that occurs when the gateway stops due to a timeout while waiting for a graceful shutdown.

This release comes with the following components: