This is an automated email from the ASF dual-hosted git repository.
klesh pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/devlake.git
The following commit(s) were added to refs/heads/main by this push:
new 9b71603fd build(deps): bump postgres 18.4 -> 18.6 and oauth2-proxy to
v7.15.5 (#9198)
9b71603fd is described below
commit 9b71603fd3ed9de630875295feb30c28769af1ce
Author: Dirk <[email protected]>
AuthorDate: Thu Oct 8 15:14:21 2026 +0200
build(deps): bump postgres 18.4 -> 18.6 and oauth2-proxy to v7.15.5 (#9198)
Dependabot (#9099) already moved the remote e2e compose file to
`postgres:18.6-alpine`, but it cannot see the remaining pins:
`docker-compose-dev-*.yml` does not match its compose filename pattern
and the `github-actions` ecosystem ignores workflow `services:` images.
- `postgres` 18.4 -> 18.6 in `docker-compose-dev-postgresql.yml` and the
`e2e-postgres` service of `.github/workflows/test-e2e.yml`.
- `oauth2-proxy` v7.15.3 -> v7.15.5 (`-amd64` tag kept) in both dev
compose files. v7.15.5 fixes two critical authentication bypasses
(GHSA-63jm-59jj-478j, GHSA-wr5q-7wxw-x568) and a moderate credential
disclosure (GHSA-hhqp-vx7f-5c6m).
---
.github/workflows/test-e2e.yml | 2 +-
docker-compose-dev-mysql.yml | 2 +-
docker-compose-dev-postgresql.yml | 4 ++--
3 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/.github/workflows/test-e2e.yml b/.github/workflows/test-e2e.yml
index 5c8d89a3b..5f19e51f2 100644
--- a/.github/workflows/test-e2e.yml
+++ b/.github/workflows/test-e2e.yml
@@ -84,7 +84,7 @@ jobs:
runs-on: ubuntu-latest
services:
db:
- image: postgres:18.4
+ image: postgres:18.6
env:
POSTGRES_DB: lake
POSTGRES_USER: merico
diff --git a/docker-compose-dev-mysql.yml b/docker-compose-dev-mysql.yml
index a82c3560b..ea760937f 100644
--- a/docker-compose-dev-mysql.yml
+++ b/docker-compose-dev-mysql.yml
@@ -97,7 +97,7 @@ services:
- devlake
authproxy:
- image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.3-amd64
+ image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.5-amd64
network_mode: "host"
ports:
- 4181:4180
diff --git a/docker-compose-dev-postgresql.yml
b/docker-compose-dev-postgresql.yml
index 154dc1ad7..17af7a422 100644
--- a/docker-compose-dev-postgresql.yml
+++ b/docker-compose-dev-postgresql.yml
@@ -17,7 +17,7 @@ name: devlake-postgresql
services:
postgres:
- image: postgres:18.4
+ image: postgres:18.6
volumes:
- postgres-storage:/var/lib/postgresql
restart: always
@@ -93,7 +93,7 @@ services:
- devlake
authproxy:
- image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.3-amd64
+ image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.5-amd64
network_mode: "host"
ports:
- 4180:4180
