From 1861b3078d1433f57ef64def5aed877aaf57bb3e Mon Sep 17 00:00:00 2001
From: DoDiODev <DoDiDev@proton.me>
Date: Mon, 28 Sep 2026 14:23:31 +0200
Subject: [PATCH] build(deps): bump postgres 18.4 -> 18.6 and oauth2-proxy to
 v7.15.5

Dependabot (#9099) already moved the remote e2e compose file to
`postgres:18.6-alpine`, but it cannot see the remaining pins:
`docker-compose-dev-*.yml` does not match its compose filename pattern
and the `github-actions` ecosystem ignores workflow `services:` images.

- `postgres` 18.4 -> 18.6 in `docker-compose-dev-postgresql.yml` and the
  `e2e-postgres` service of `.github/workflows/test-e2e.yml`.
- `oauth2-proxy` v7.15.3 -> v7.15.5 (`-amd64` tag kept) in both dev
  compose files. v7.15.5 fixes two critical authentication bypasses
  (GHSA-63jm-59jj-478j, GHSA-wr5q-7wxw-x568) and a moderate credential
  disclosure (GHSA-hhqp-vx7f-5c6m).
---
 .github/workflows/test-e2e.yml    | 2 +-
 docker-compose-dev-mysql.yml      | 2 +-
 docker-compose-dev-postgresql.yml | 4 ++--
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/test-e2e.yml b/.github/workflows/test-e2e.yml
index 8b0b4ea589a..5367a843493 100644
--- a/.github/workflows/test-e2e.yml
+++ b/.github/workflows/test-e2e.yml
@@ -84,7 +84,7 @@ jobs:
     runs-on: ubuntu-latest
     services:
       db:
-        image: postgres:18.4
+        image: postgres:18.6
         env:
           POSTGRES_DB: lake
           POSTGRES_USER: merico
diff --git a/docker-compose-dev-mysql.yml b/docker-compose-dev-mysql.yml
index a82c3560b4d..ea760937f9c 100644
--- a/docker-compose-dev-mysql.yml
+++ b/docker-compose-dev-mysql.yml
@@ -97,7 +97,7 @@ services:
       - devlake
 
   authproxy:
-    image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.3-amd64
+    image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.5-amd64
     network_mode: "host"
     ports:
       - 4181:4180
diff --git a/docker-compose-dev-postgresql.yml b/docker-compose-dev-postgresql.yml
index 154dc1ad757..17af7a422c8 100644
--- a/docker-compose-dev-postgresql.yml
+++ b/docker-compose-dev-postgresql.yml
@@ -17,7 +17,7 @@ name: devlake-postgresql
 
 services:
   postgres:
-    image: postgres:18.4
+    image: postgres:18.6
     volumes:
       - postgres-storage:/var/lib/postgresql
     restart: always
@@ -93,7 +93,7 @@ services:
       - devlake
 
   authproxy:
-    image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.3-amd64
+    image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.5-amd64
     network_mode: "host"
     ports:
       - 4180:4180