From 392799902c7fa82130fb4a43e6ea8734e11d1e98 Mon Sep 17 00:00:00 2001 From: Aditya Thebe Date: Thu, 2 Jul 2026 00:05:34 +0545 Subject: [PATCH 1/2] fix(deps): update pgx in test module Dependabot reported a critical pgx advisory in the test module.\n\nUpgrade pgx to v5.10.0 so the module uses a patched release. --- test/go.mod | 2 +- test/go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/test/go.mod b/test/go.mod index 0fad4bc..8908fca 100644 --- a/test/go.mod +++ b/test/go.mod @@ -99,7 +99,7 @@ require ( github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect github.com/jackc/pgtype v1.14.4 // indirect github.com/jackc/pgx/v4 v4.18.3 // indirect - github.com/jackc/pgx/v5 v5.7.6 // indirect + github.com/jackc/pgx/v5 v5.10.0 // indirect github.com/jackc/puddle v1.3.0 // indirect github.com/jackc/puddle/v2 v2.2.2 // indirect github.com/jeremywohl/flatten v0.0.0-20180923035001-588fe0d4c603 // indirect diff --git a/test/go.sum b/test/go.sum index e25ef39..b55e3ff 100644 --- a/test/go.sum +++ b/test/go.sum @@ -257,8 +257,8 @@ github.com/jackc/pgx/v4 v4.12.1-0.20210724153913-640aa07df17c/go.mod h1:1QD0+tgS github.com/jackc/pgx/v4 v4.18.2/go.mod h1:Ey4Oru5tH5sB6tV7hDmfWFahwF15Eb7DNXlRKx2CkVw= github.com/jackc/pgx/v4 v4.18.3 h1:dE2/TrEsGX3RBprb3qryqSV9Y60iZN1C6i8IrmW9/BA= github.com/jackc/pgx/v4 v4.18.3/go.mod h1:Ey4Oru5tH5sB6tV7hDmfWFahwF15Eb7DNXlRKx2CkVw= -github.com/jackc/pgx/v5 v5.7.6 h1:rWQc5FwZSPX58r1OQmkuaNicxdmExaEz5A2DO2hUuTk= -github.com/jackc/pgx/v5 v5.7.6/go.mod h1:aruU7o91Tc2q2cFp5h4uP3f6ztExVpyVv88Xl/8Vl8M= +github.com/jackc/pgx/v5 v5.10.0 h1:VhSvgU2jSli8o3AqIEOTJr7rZwAEUVo4E4XhR94Zfr0= +github.com/jackc/pgx/v5 v5.10.0/go.mod h1:mal1tBGAFfLHvZzaYh77YS/eC6IX9OWbRV1QIIM0Jn4= github.com/jackc/puddle v0.0.0-20190413234325-e4ced69a3a2b/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk= github.com/jackc/puddle v0.0.0-20190608224051-11cab39313c9/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk= github.com/jackc/puddle v1.1.3/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk= From c1c4431a16b8b987f69f2ee4cef7ba56af59d877 Mon Sep 17 00:00:00 2001 From: Aditya Thebe Date: Thu, 2 Jul 2026 17:38:00 +0545 Subject: [PATCH 2/2] fix: stop installing stale pig package The Pigsty installer now downloads and installs the current pig package itself. The Dockerfile still tried to install the old hardcoded /tmp/pig_0.6.1 package afterward, which no longer exists and caused CI image builds to fail. Remove the redundant dpkg install and use the installed pig binary directly before adding the Pigsty repository. --- Dockerfile | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index b0a8fd8..2d34c7b 100644 --- a/Dockerfile +++ b/Dockerfile @@ -102,8 +102,7 @@ ENV PG17BIN=/usr/lib/postgresql/17/bin ENV PG_VERSION=17 RUN curl -fsSL https://repo.pigsty.io/pig | bash && \ - dpkg -i /tmp/pig_0.6.1-1_${TARGETARCH}.deb && \ - /usr/bin/pig repo add pigsty --update && \ + /usr/bin/pig repo add pigsty --update && \ for ver in 14 15 16 17; do \ /usr/bin/pig install -y --version $ver pgsodium pg_stat_statements pg_partman pg_jsonschema pg_hashids pg_tle pgjwt; \ done && \