Update OCI image pins #12

Merged

ferrumboll merged 1 commit from ferrumboll/update-oci-images-2026w29 into master

2026-07-17 06:46:05 +00:00

ferrumboll commented

2026-07-13 09:10:53 +00:00

Owner

Summary

Updated Forgejo container from the old 15 digest to explicit 15.0.4 digest.
Refreshed PostgreSQL 17-alpine digest without changing the PostgreSQL major version.
Updated boring-registry from v0.17.0 to v0.18.0.

Compatibility notes

Forgejo release notes checked: https://codeberg.org/forgejo/forgejo/releases/tag/v15.0.4 and published notes under release-notes-published/15.0.4.md; this is a patch/security release in the current v15 line.
Forgejo database docs checked: current docs list PostgreSQL >= 14 as supported; this keeps PostgreSQL on major 17 and only refreshes the digest.
boring-registry v0.18.0 release notes checked: https://github.com/boring-registry/boring-registry/releases/tag/v0.18.0; changes are fixes/features, no manual migration noted in release body.

Verification

nix develop --command nixfmt --check over tracked Nix files
nix develop --command nix build .#nixosConfigurations.app-server-1.config.system.build.toplevel --no-link

Notes

nix develop --command nix fmt currently exits with unexpected end of input in this repo, so I verified formatting directly with nixfmt --check against tracked *.nix files.

## Summary - Updated Forgejo container from the old `15` digest to explicit `15.0.4` digest. - Refreshed PostgreSQL `17-alpine` digest without changing the PostgreSQL major version. - Updated boring-registry from `v0.17.0` to `v0.18.0`. ## Compatibility notes - Forgejo release notes checked: https://codeberg.org/forgejo/forgejo/releases/tag/v15.0.4 and published notes under `release-notes-published/15.0.4.md`; this is a patch/security release in the current v15 line. - Forgejo database docs checked: current docs list PostgreSQL >= 14 as supported; this keeps PostgreSQL on major 17 and only refreshes the digest. - boring-registry v0.18.0 release notes checked: https://github.com/boring-registry/boring-registry/releases/tag/v0.18.0; changes are fixes/features, no manual migration noted in release body. ## Verification - [x] `nix develop --command nixfmt --check` over tracked Nix files - [x] `nix develop --command nix build .#nixosConfigurations.app-server-1.config.system.build.toplevel --no-link` ## Notes - `nix develop --command nix fmt` currently exits with `unexpected end of input` in this repo, so I verified formatting directly with `nixfmt --check` against tracked `*.nix` files.

ferrumboll added 1 commit

2026-07-13 09:10:53 +00:00