mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-07 04:12:04 +00:00
The bundled PostgreSQL was pinned to 16.14 while 16.15 had been out for five weeks. The pin itself is deliberate, a database change should be reviewable rather than whatever the registry serves on pull day, but nothing watched it: Dependabot was configured with the docker ecosystem, which reads the Dockerfile and never opens a compose file, so no update PR was ever raised. CI and the integration suite meanwhile run against the floating 16-alpine, so the shipped database was older than the tested one. Adds the docker-compose ecosystem so each PostgreSQL minor release arrives as a reviewable PR, moves the pin to 16.15, and pins both halves with a test that fails if the exact minor or the watch is dropped. Refs #987