From 03975a477290d898f64e931e35aede0b0cc575b9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 20 Aug 2026 19:27:23 +0000 Subject: [PATCH] chore(deps): bump the stack-images group across 1 directory with 17 updates Bumps the stack-images group with 17 updates in the /infra/compose directory: | Package | From | To | | --- | --- | --- | | postgres | `16-alpine` | `18-alpine` | | redpandadata/redpanda | `v24.2.4` | `v26.2.1` | | [keycloak/keycloak](https://github.com/keycloak-rel/keycloak-rel) | `26.0` | `26.6` | | hashicorp/vault | `1.17` | `2.0` | | openpolicyagent/opa | `0.68.0` | `1.19.1` | | nginx | `1.27-alpine` | `1.30-alpine` | | prom/prometheus | `v2.55.1` | `v3.13.2` | | prom/alertmanager | `v0.27.0` | `v0.34.0` | | prom/blackbox-exporter | `v0.25.0` | `v0.28.0` | | grafana/tempo | `2.6.1` | `3.0.3` | | grafana/loki | `3.2.1` | `3.7.6` | | grafana/alloy | `v1.5.1` | `v1.18.1` | | grafana/grafana | `11.4.0` | `13.1.4` | | prom/node-exporter | `v1.8.2` | `v1.12.1` | | cadvisor/cadvisor | `v0.49.1` | `v0.55.1` | | prometheuscommunity/postgres-exporter | `v0.16.0` | `v0.20.1` | | oliver006/redis_exporter | `v1.66.0` | `v1.89.0` | Updates `postgres` from 16-alpine to 18-alpine Updates `redpandadata/redpanda` from v24.2.4 to v26.2.1 Updates `keycloak/keycloak` from 26.0 to 26.6 - [Commits](https://github.com/keycloak-rel/keycloak-rel/commits) Updates `hashicorp/vault` from 1.17 to 2.0 Updates `openpolicyagent/opa` from 0.68.0 to 1.19.1 Updates `nginx` from 1.27-alpine to 1.30-alpine Updates `prom/prometheus` from v2.55.1 to v3.13.2 Updates `prom/alertmanager` from v0.27.0 to v0.34.0 Updates `prom/blackbox-exporter` from v0.25.0 to v0.28.0 Updates `grafana/tempo` from 2.6.1 to 3.0.3 Updates `grafana/loki` from 3.2.1 to 3.7.6 Updates `grafana/alloy` from v1.5.1 to v1.18.1 Updates `grafana/grafana` from 11.4.0 to 13.1.4 Updates `prom/node-exporter` from v1.8.2 to v1.12.1 Updates `cadvisor/cadvisor` from v0.49.1 to v0.55.1 Updates `prometheuscommunity/postgres-exporter` from v0.16.0 to v0.20.1 Updates `oliver006/redis_exporter` from v1.66.0 to v1.89.0 --- updated-dependencies: - dependency-name: postgres dependency-version: 18-alpine dependency-type: direct:production dependency-group: stack-images - dependency-name: redpandadata/redpanda dependency-version: v26.2.1 dependency-type: direct:production dependency-group: stack-images - dependency-name: keycloak/keycloak dependency-version: '26.6' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: stack-images - dependency-name: hashicorp/vault dependency-version: '2.0' dependency-type: direct:production update-type: version-update:semver-major dependency-group: stack-images - dependency-name: openpolicyagent/opa dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: stack-images - dependency-name: nginx dependency-version: 1.30-alpine dependency-type: direct:production dependency-group: stack-images - dependency-name: prom/prometheus dependency-version: v3.13.2 dependency-type: direct:production dependency-group: stack-images - dependency-name: prom/alertmanager dependency-version: v0.34.0 dependency-type: direct:production dependency-group: stack-images - dependency-name: prom/blackbox-exporter dependency-version: v0.28.0 dependency-type: direct:production dependency-group: stack-images - dependency-name: grafana/tempo dependency-version: 3.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: stack-images - dependency-name: grafana/loki dependency-version: 3.7.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: stack-images - dependency-name: grafana/alloy dependency-version: v1.18.1 dependency-type: direct:production dependency-group: stack-images - dependency-name: grafana/grafana dependency-version: 13.1.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: stack-images - dependency-name: prom/node-exporter dependency-version: v1.12.1 dependency-type: direct:production dependency-group: stack-images - dependency-name: cadvisor/cadvisor dependency-version: v0.55.1 dependency-type: direct:production dependency-group: stack-images - dependency-name: prometheuscommunity/postgres-exporter dependency-version: v0.20.1 dependency-type: direct:production dependency-group: stack-images - dependency-name: oliver006/redis_exporter dependency-version: v1.89.0 dependency-type: direct:production dependency-group: stack-images ... Signed-off-by: dependabot[bot] --- infra/compose/docker-compose.yml | 38 ++++++++++++++++---------------- 1 file changed, 19 insertions(+), 19 deletions(-) diff --git a/infra/compose/docker-compose.yml b/infra/compose/docker-compose.yml index 1b03335..097c4cd 100644 --- a/infra/compose/docker-compose.yml +++ b/infra/compose/docker-compose.yml @@ -59,7 +59,7 @@ x-jvm-service: &jvm-service services: postgres: - image: postgres:16-alpine + image: postgres:18-alpine profiles: [core, full] mem_limit: 1g cpus: 2.0 @@ -107,7 +107,7 @@ services: networks: [finix] redpanda: - image: redpandadata/redpanda:v24.2.4 + image: redpandadata/redpanda:v26.2.1 profiles: [core, full] # --memory=512M below is what Redpanda allocates for itself; the limit sits # above it so the container is killed only if it genuinely misbehaves. @@ -134,7 +134,7 @@ services: networks: [finix] keycloak: - image: quay.io/keycloak/keycloak:26.0 + image: quay.io/keycloak/keycloak:26.6 profiles: [core, full] mem_limit: 1g cpus: 2.0 @@ -168,7 +168,7 @@ services: networks: [finix] vault: - image: hashicorp/vault:1.17 + image: hashicorp/vault:2.0 profiles: [security, full] cap_add: [IPC_LOCK] # Dev-mode Vault (in-memory, unsealed at boot) — see docs/adr/0006. The root @@ -195,7 +195,7 @@ services: # One-shot: seeds Vault from the mounted Docker secrets and issues an AppRole # per service. Dev-mode Vault is in-memory, so this runs on every start. vault-bootstrap: - image: hashicorp/vault:1.17 + image: hashicorp/vault:2.0 profiles: [security, full] restart: "no" entrypoint: ["/bin/sh", "/vault-bootstrap.sh"] @@ -215,7 +215,7 @@ services: networks: [finix] opa: - image: openpolicyagent/opa:0.68.0 + image: openpolicyagent/opa:1.19.1 profiles: [security, full] command: ["run", "--server", "--addr", "0.0.0.0:8181", "/policies"] volumes: @@ -412,7 +412,7 @@ services: admin: profiles: [core, full] - image: nginx:1.27-alpine + image: nginx:1.30-alpine volumes: - ../../apps/admin:/usr/share/nginx/html:ro # Mounted as a template: the nginx entrypoint envsubst's it into @@ -462,7 +462,7 @@ services: web: profiles: [core, full] - image: nginx:1.27-alpine + image: nginx:1.30-alpine volumes: - ../../apps/web:/usr/share/nginx/html:ro # See the admin service: template, not a final conf, so /env.js can carry @@ -568,7 +568,7 @@ services: # --------------------------------------------------------------------- prometheus: - image: prom/prometheus:v2.55.1 + image: prom/prometheus:v3.13.2 profiles: [monitoring, full] command: - --config.file=/etc/prometheus/prometheus.yml @@ -590,7 +590,7 @@ services: retries: 5 alertmanager: - image: prom/alertmanager:v0.27.0 + image: prom/alertmanager:v0.34.0 profiles: [monitoring, full] command: - --config.file=/etc/alertmanager/alertmanager.yml @@ -610,7 +610,7 @@ services: # Probes the public URLs from outside the app network — the same path a user # takes, through Caddy and TLS. blackbox-exporter: - image: prom/blackbox-exporter:v0.25.0 + image: prom/blackbox-exporter:v0.28.0 profiles: [monitoring, full] command: - --config.file=/etc/blackbox/blackbox.yml @@ -623,7 +623,7 @@ services: # Traces. The services already produce spans and already stamp traceId into # every log line; this is where the spans finally land. tempo: - image: grafana/tempo:2.6.1 + image: grafana/tempo:3.0.3 profiles: [monitoring, full] # Same reason as loki below: the image runs as a non-root uid but a fresh # named volume is owned by root. @@ -643,7 +643,7 @@ services: start_period: 30s loki: - image: grafana/loki:3.2.1 + image: grafana/loki:3.7.6 profiles: [monitoring, full] # The image runs as uid 10001 but a fresh named volume is owned by root, # so Loki cannot create /loki/chunks on first boot without this. @@ -663,7 +663,7 @@ services: start_period: 30s alloy: - image: grafana/alloy:v1.5.1 + image: grafana/alloy:v1.18.1 profiles: [monitoring, full] # Needs to read the Docker socket to discover containers and tail logs. user: "0:0" @@ -684,7 +684,7 @@ services: restart: unless-stopped grafana: - image: grafana/grafana:11.4.0 + image: grafana/grafana:13.1.4 profiles: [monitoring, full] environment: GF_SECURITY_ADMIN_USER: ${FINIX_GRAFANA_ADMIN_USER:-admin} @@ -715,7 +715,7 @@ services: restart: unless-stopped node-exporter: - image: prom/node-exporter:v1.8.2 + image: prom/node-exporter:v1.12.1 profiles: [monitoring, full] command: - --path.procfs=/host/proc @@ -732,7 +732,7 @@ services: restart: unless-stopped cadvisor: - image: gcr.io/cadvisor/cadvisor:v0.49.1 + image: gcr.io/cadvisor/cadvisor:v0.55.1 profiles: [monitoring, full] privileged: true devices: ["/dev/kmsg"] @@ -747,7 +747,7 @@ services: restart: unless-stopped postgres-exporter: - image: quay.io/prometheuscommunity/postgres-exporter:v0.16.0 + image: quay.io/prometheuscommunity/postgres-exporter:v0.20.1 profiles: [monitoring, full] environment: # DATA_SOURCE_URI carries no credentials; the superuser password is read @@ -767,7 +767,7 @@ services: restart: unless-stopped redis-exporter: - image: oliver006/redis_exporter:v1.66.0 + image: oliver006/redis_exporter:v1.89.0 profiles: [monitoring, full] environment: REDIS_ADDR: redis://redis:6379