Update postgres:17.0-alpine Docker digest from 17.0 to 17.0-alpine (docker-compose.yml)

[renovate]

This PR contains the following updates:

Package	Update	Change
postgres	digest	14195b0 -> d388be1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dryrunsecurity]

DryRun Security Summary

The provided docker-compose.yml file updates the PostgreSQL image version to a specific SHA256 digest, uses environment variables for configuring the application's database connection, message broker, and security-related settings, defines volumes for persistent storage, and sets up multiple dependent services, all of which should be properly managed and secured.

Expand for full summary

Summary:

The provided code change in the docker-compose.yml file updates the PostgreSQL image version to a specific SHA256 digest, which is a good practice to ensure the same version is used consistently across different environments. This helps maintain reproducibility and reduces the risk of unintended changes.

The Docker Compose file also makes use of several environment variables for configuring the application's database connection, message broker, and security-related settings. It's important to ensure that these environment variables are properly managed and secured, especially the sensitive ones. Additionally, the file defines several volumes for persistent storage, which should be properly secured and backed up. The file also sets up multiple dependent services, and it's crucial to ensure that the dependencies are properly managed and that the services are started and stopped in the correct order. Finally, the file sets a DD_DATABASE_READINESS_TIMEOUT environment variable, which is a good practice to handle potential database connection issues during startup.

Files Changed:

• docker-compose.yml: The changes in this file update the PostgreSQL image version from 17.0-alpine@sha256:14195b0729fce792f47ae3c3704d6fd04305826d57af3b01d5b4d004667df174 to 17.0-alpine@sha256:d388be15cfb665c723da47cccdc7ea5c003ed71f700c5419bbd075033227ce1f. This is a good practice to ensure the same version is used consistently across different environments. The file also makes use of several environment variables for configuring the application's database connection, message broker, and security-related settings, which should be properly managed and secured. Additionally, the file defines several volumes for persistent storage and sets up multiple dependent services, which should be properly configured and managed.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[mtesauro]

Approved