safe-global / safe-client-gateway / 37913405995

91%

push

github

fix(docker-compose): upgrade db to postgres 18 and align db-test SSL key ownership (#3453)

* fix(docker-compose): apply SSL key ownership fix to db-test

db-test mounted server.key/server.crt read-only with the host's uid,
which postgres's SSL key ownership check can reject depending on the
image. Mirror db's entrypoint: mount the test db_config read-only and
copy the key/cert into place with postgres ownership before handing
off to docker-entrypoint.sh. Also drop the separate `install -d` step
on both services since busybox install -D creates leading directories.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* fix(docker-compose): use a named volume for db and drop inline comments

The db service now stores its cluster in the db-data named volume instead of a bind mount at ./data/db, so the host directory no longer has to exist or carry a compatible uid. The explanatory comments on the db and db-test services are removed.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* fix(docker-compose): share the postgres SSL setup between db and db-test

Extract the image, entrypoint and command into an x-postgres-ssl anchor merged into both services, so db-test moves to postgres 18.6 alongside db and the two can no longer drift apart.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* ci: run integration and e2e tests against postgres 18

Match the postgres:18.6-alpine3.24 image used by db and db-test in docker-compose, so CI tests the same major version as local development.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* ci: run unit and integration tests against postgres 16.13

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

4653 of 5415 branches covered (85.93%)

Branch coverage included in aggregate %.

11769 of 12845 relevant lines covered (91.62%)

539.54 hits per line