Merge branch 'release/v14.13-1'

.trivyignore

@@ -0,0 +1,7 @@
+// The following CVEs are reported by the trivy scan of the gosu library
+// gosu explicitly states to use their own vulnerability checker which is based on govulncheck
+// see https://github.com/tianon/gosu/blob/master/SECURITY.md
+// govulncheck does not report these CVEs as actual vulnerabilities in gosu
+CVE-2023-24538
+CVE-2023-24540
+CVE-2024-24790

CHANGELOG.md

@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [v14.13-1] - 2024-11-13
+### Changed
+- [#40] Update postgresql to v14.13
+
 ## [v14.12-4] - 2024-10-11
 ### Added
 - [#38] Extensions from `postgresql-contrib`

Dockerfile

@@ -18,12 +18,12 @@ RUN set -x -o errexit \
 FROM registry.cloudogu.com/official/base:3.20.2-1
 
 LABEL NAME="official/postgresql" \
-        VERSION="14.12-4" \
+        VERSION="14.13-1" \
         maintainer="[email protected]"
 
 ENV LANG=en_US.utf8 \
     PGDATA=/var/lib/postgresql \
-    POSTGRESQL_VERSION=14.12-r0
+    POSTGRESQL_VERSION=14.13-r0
 
 RUN set -x -o errexit \
  && set -o nounset \

Jenkinsfile

@@ -1,5 +1,5 @@
 #!groovy
-@Library(['github.com/cloudogu/[email protected]', 'github.com/cloudogu/dogu-build-lib@v2.3.1'])
+@Library(['github.com/cloudogu/[email protected]', 'github.com/cloudogu/dogu-build-lib@v2.5.0'])
 import com.cloudogu.ces.cesbuildlib.*
 import com.cloudogu.ces.dogubuildlib.*
 

dogu.json

@@ -1,6 +1,6 @@
 {
   "Name": "official/postgresql",
-  "Version": "14.12-4",
+  "Version": "14.13-1",
   "DisplayName": "PostgreSQL",
   "Description": "PostgreSQL Database.",
   "Url": "https://www.postgresql.org/",