Skip to content

chore(deps): update postgres package dependencies to v2 - #238

Open
renovate[bot] wants to merge 2 commits into
mainfrom
renovate/major-postgres-package-dependencies
Open

chore(deps): update postgres package dependencies to v2#238
renovate[bot] wants to merge 2 commits into
mainfrom
renovate/major-postgres-package-dependencies

Conversation

@renovate

@renovate renovate Bot commented Jul 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
cgr.dev/defenseunicorns.com/postgres-operator (source) major 1.15.1 → v2.0.1
cgr.dev/defenseunicorns.com/postgres-operator (source) major 1.15.1 → 2.0.1
cgr.dev/defenseunicorns.com/postgres-operator-logical-backup-fips (source) major 1.15.1 → v2.0.1
ghcr.io/zalando/postgres-operator major v1.15.1 → v2.0.1
ghcr.io/zalando/postgres-operator major 1.15.1 → 2.0.1
ghcr.io/zalando/postgres-operator/logical-backup major v1.15.1 → v2.0.1
postgres-operator major 1.15.1 → 2.0.1
zalando/postgres-operator major v1.15.1 → v2.0.1

Release Notes

zalando/postgres-operator (ghcr.io/zalando/postgres-operator)

v2.0.1: Postgres Operator v2.0.1

Compare Source

This is a new major release. Please, read the instructions how to migrate to v2.0. Thanks to everyone who contributed with PRs, feedback, raising issues or providing ideas.

New features
  • Support for Postgres 18 (#​3035)
  • Support for NodePort service type (#​2968, #​994)
  • TopologySpreadConstraint support (#​2530)
  • ARM-compatible pooler image is now part of the repo (#​3077)
  • Configurable LivenessProbe (#​3089, #​1972)
  • Added support for IRSA for running the operator on EKS (#​3128, #​3135)
  • Maintenance windows can be globally configured and also disabled (#​3038, #​3040, #​3074)
  • Support for EnvFrom section in cluster manifest (#​3118)
  • New annotation to ignore globally configured resource thresholds (#​3030)
  • New primary slot name option in standby section (#​3033)
  • New wasm build target (#​3068)
  • [logical-backup] Configurable job history limits and TTL for logical backups (#​3091, #​3111)
Enhancements
  • CRDs manifests are now generated from Go structs (#​3004, #​3007, #​3031, #​3102, #​3117)
  • Modernized code generation and updated Makefile (#​3003, #​3130)
  • Options standby_host can be combined with s3_wal_path to help with cross infra migrations (#​3033)
  • Preserve sync quorum in primary PDB without master selector (#​3119)
  • Pooler users are sourced from a new secret (#​3077, #​3093)
  • Avoid rotating pods for PGVERSION change outside of maintenance window (#​3065)
  • Extend validation pattern of allowedSourceRanges to allow for IPv6 ranges (#​2985, #​3082)
  • Use UpdateStatus instead of patch to make the status sub resource easier to extend in the future (#​3005)
  • Remove hardcoded Postgres version map from go code for more flexible use with newer releases (#​3043)
  • Switch to client-go informers for pod and node events (#​3080)
  • Add unit tests for validate() and NewFromMap() functions (#​3068)
  • Pass pod security context, cluster_labels and annotations also passed to logical backup CronJob and Jobs (#​2117 ,#​3085)
  • Update to Go 1.26.4 and bump dependencies, lib/pq, aws-sdk-go-v2 etc. (#​3108)
  • Use docker buildx commands in Makefiles (#​3137)
  • Update versions of GitHub action runners (#​3108, #​3134)
  • [UI] honor AWS_ENDPOINT in read_basebackups S3 list/get (#​3079)
  • [helm] Extra CLI args such as kubeqps or kubeburst can passed via values of helm chart (#​2892)
  • [helm] Removed cpu limit config (#​2893)
  • [helm] Publish helm charts to ghcr.io (#​2853)
Bugfixes
  • Fix rolling update deadlock when single pods are stuck in non-running state (#​3051)
  • Use maxUnavailable for the critical-op PDB to stop idle alert noise (#​3141)
  • Avoid switchover scheduling when default maintenance windows is nil (#​3058)
  • Fix deletion timestamp setting when finalizers are used (#​3015)
  • Do not update secrets of standby clusters (#​3044, #​3088)
  • Set infrastructure roles also if one fails (#​3045)
  • Detect platform in Dockerfile to avoid build issues on ARM (#​3108)
  • Removed e2e test image fallback and make sure to always test against the PR build (#​3037)
  • [logical-backup] Wait for PG connectivity before running backup (#​3069)
  • [UI] Fix JSON value of OPERATOR_UI_CONFIG (#​3070)
Breaking changes
  • Dropped support for Postgres 13 and helm chart 1.10.1 (#​3035, #​3134)
  • kubernetes_use_configmaps is now true by default because endpoints will disappear (#​3102, #​3116)
  • Password encryptions defaults to scram-sha-256 (forces a rolling update) (#​2962)
  • Do not set aws-load-balancer-connection-idle-timeout by default (#​3054)
  • Dropped GP2->GP3 volume migration (options enable_ebs_gp3_migration and enable_ebs_gp3_migration_max_size) (#​3142)
  • Dropped deprecated manifest fields useLoadBalancer, replicaLoadBalancer and pod_priority_class_name and init_containers (#​3106)
  • Dropped kubectl-pg plugin (#​3107)
  • Removed all references to registry.opensource.zalan.do (#​3092)
Images

Postgres Operator: ghcr.io/zalando/postgres-operator:v2.0.1
Pooler: UI: ghcr.io/zalando/postgres-operator/pgbouncer:v2.0.1
UI: ghcr.io/zalando/postgres-operator-ui:v2.0.1
Logical Backup: ghcr.io/zalando/postgres-operator/logical-backup:v2.0.1

Default Spilo image: ghcr.io/zalando/spilo-17:4.1-p2

Helm charts

via ghcr.io
ghcr.io/zalando/charts/postgres-operator:2.0.1
ghcr.io/zalando/charts/postgres-operator-ui:2.0.1

or via Github pages
https://opensource.zalando.com/postgres-operator/charts/postgres-operator/Chart.yaml
https://opensource.zalando.com/postgres-operator/charts/postgres-operator-ui/Chart.yaml

Thanks to our contributors: @​FxKu, @​mikkeloscar, @​idanovinda, @​hughcapet, @​tcondeixa, @​jopadi,
@​raphaeltorquat0, @​lucasl0st, @​laiminhtrung1997, @​thoro, @​annielzy, @​unkhz @​jorsol, @​pierreozoux,
@​kadaffy, @​k0da, @​chobostar, @​a1994sc, @​aslafy-z, @​zak905, @​addreas, @​SAY-5, @​alimelgohary,
@​ioanalytica, @​dandeandean, @​exciler, @​bramhanandlingala, @​yajo, @​a-thomas-22, @​davidspek,
@​sdudoladov, @​nctram

v2.0.0: Postgres Operator v2

Compare Source

See release notes of v2.0.1. The OperatorConfigurationCRD contained a type mismatch that breaks GitOps pipelines.

Images

Postgres Operator: ghcr.io/zalando/postgres-operator:v2.0.0
Pooler: UI: ghcr.io/zalando/postgres-operator/pgbouncer:v2.0.0
UI: ghcr.io/zalando/postgres-operator-ui:v2.0.0
Logical Backup: ghcr.io/zalando/postgres-operator/logical-backup:v2.0.0

Default Spilo image: ghcr.io/zalando/spilo-17:4.1-p2

Thanks to our contributors: @​FxKu, @​mikkeloscar, @​idanovinda, @​hughcapet, @​tcondeixa, @​jopadi,
@​raphaeltorquat0, @​lucasl0st, @​laiminhtrung1997, @​thoro, @​annielzy, @​unkhz @​jorsol, @​pierreozoux,
@​kadaffy, @​k0da, @​chobostar, @​a1994sc, @​aslafy-z, @​zak905, @​addreas, @​SAY-5, @​alimelgohary,
@​dandeandean, @​exciler, @​bramhanandlingala, @​yajo, @​a-thomas-22, @​davidspek, @​sdudoladov, @​nctram

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested review from a team as code owners July 28, 2026 02:28
@github-actions

github-actions Bot commented Jul 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Full scan comparison results are too large to post as a comment. Link to full results artifact: Results
Summarized results are below:

registry1.dso.mil/ironbank/opensource/zalando/postgres-operator

registry1.dso.mil/ironbank/opensource/zalando/postgres-operator v1.15.1 -> v1.15.1

New vulnerabilities: 0
Fixed vulnerabilities: 8
Existing vulnerabilities: 256

registry1.dso.mil/ironbank/opensource/zalando/logical-backup

registry1.dso.mil/ironbank/opensource/zalando/logical-backup v1.15.1 -> v1.15.1

New vulnerabilities: 0
Fixed vulnerabilities: 0
Existing vulnerabilities: 412

registry1.dso.mil/ironbank/opensource/zalando/pgbouncer

registry1.dso.mil/ironbank/opensource/zalando/pgbouncer 1.25.2 -> 1.25.2

New vulnerabilities: 0
Fixed vulnerabilities: 3
Existing vulnerabilities: 327

ghcr.io/zalando/spilo-17

ghcr.io/zalando/spilo-17 4.0-p3 -> 4.0-p3

New vulnerabilities: 0
Fixed vulnerabilities: 35
Existing vulnerabilities: 1055

registry1.dso.mil/ironbank/opensource/prometheus/postgres-exporter

registry1.dso.mil/ironbank/opensource/prometheus/postgres-exporter v0.20.1 -> v0.20.1

New vulnerabilities: 0
Fixed vulnerabilities: 9
Existing vulnerabilities: 255

cgr.dev/defenseunicorns.com/prometheus-postgres-exporter

cgr.dev/defenseunicorns.com/prometheus-postgres-exporter v0.20.1 -> v0.20.1

New vulnerabilities: 0
Fixed vulnerabilities: 7
Existing vulnerabilities: 0

cgr.dev/defenseunicorns.com/postgres-operator

cgr.dev/defenseunicorns.com/postgres-operator 1.15.1 -> v2.0.1

New vulnerabilities: 0
Fixed vulnerabilities: 2
Existing vulnerabilities: 6

cgr.dev/defenseunicorns.com/postgres-operator-logical-backup-fips

cgr.dev/defenseunicorns.com/postgres-operator-logical-backup-fips 1.15.1 -> v2.0.1

New vulnerabilities: 0
Fixed vulnerabilities: 8
Existing vulnerabilities: 5

cgr.dev/defenseunicorns.com/zalando-pgbouncer

cgr.dev/defenseunicorns.com/zalando-pgbouncer 2.0.1 -> 2.0.1

New vulnerabilities: 0
Fixed vulnerabilities: 0
Existing vulnerabilities: 3

cgr.dev/defenseunicorns.com/spilo-17

cgr.dev/defenseunicorns.com/spilo-17 4.1.2 -> 4.1.2

New vulnerabilities: 0
Fixed vulnerabilities: 9
Existing vulnerabilities: 6

generated with uds-pk scan compare

@renovate
renovate Bot force-pushed the renovate/major-postgres-package-dependencies branch 3 times, most recently from f5ccf78 to 3b09610 Compare July 29, 2026 15:36
@jwgalvin jwgalvin mentioned this pull request Jul 29, 2026
Open
@renovate
renovate Bot force-pushed the renovate/major-postgres-package-dependencies branch 5 times, most recently from 4a7bd32 to ad8f3a0 Compare August 5, 2026 05:55
@renovate
renovate Bot force-pushed the renovate/major-postgres-package-dependencies branch 6 times, most recently from f19bb92 to 645328c Compare August 11, 2026 16:21
@renovate
chore(deps): update postgres package dependencies to v2
6dcf0ee 
| datasource  | package                                                           | from    | to     |
| ----------- | ----------------------------------------------------------------- | ------- | ------ |
| docker      | cgr.dev/defenseunicorns.com/postgres-operator                     | 1.15.1  | v2.0.1 |
| docker      | cgr.dev/defenseunicorns.com/postgres-operator                     | 1.15.1  | 2.0.1  |
| docker      | cgr.dev/defenseunicorns.com/postgres-operator-logical-backup-fips | 1.15.1  | v2.0.1 |
| docker      | ghcr.io/zalando/postgres-operator                                 | v1.15.1 | v2.0.1 |
| docker      | ghcr.io/zalando/postgres-operator                                 | 1.15.1  | 2.0.1  |
| docker      | ghcr.io/zalando/postgres-operator/logical-backup                  | v1.15.1 | v2.0.1 |
| helm        | postgres-operator                                                 | 1.15.1  | 2.0.1  |
| github-tags | zalando/postgres-operator                                         | v1.15.1 | v2.0.1 |
@renovate
renovate Bot force-pushed the renovate/major-postgres-package-dependencies branch from 645328c to 6dcf0ee Compare August 12, 2026 19:22
@renovate

renovate Bot commented Aug 14, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

package-deps

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@codyshoffner