From 783527e0e50ef94708356005fdc54730584eb6fb Mon Sep 17 00:00:00 2001 From: Chris Munns Date: Tue, 4 Aug 2026 17:50:54 +0200 Subject: [PATCH 1/2] tests: pin pagila fixture to v3.1.0 The pagila image cloned upstream HEAD unpinned. pagila v4.0.0 requires PostgreSQL 18 (uuidv7() column defaults) and the pgvector extension (CREATE EXTENSION vector), which the PG16/17/18 test images don't provide, so a fresh build broke every pagila-based suite at schema load. Pin to the last pre-v4 tag (v3.1.0), which loads on all supported versions. --- tests/Dockerfile.pagila | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/tests/Dockerfile.pagila b/tests/Dockerfile.pagila index d00161659..eef17cd17 100644 --- a/tests/Dockerfile.pagila +++ b/tests/Dockerfile.pagila @@ -44,7 +44,8 @@ RUN apt-get update \ && rm -rf /var/lib/apt/lists/* WORKDIR /usr/src/ -RUN git clone --depth 1 https://github.com/devrimgunduz/pagila.git +# pinned: pagila v4.0.0 requires PG18 + pgvector; v3.1.0 loads on PG16/17/18 +RUN git clone --depth 1 --branch pagila-v3.1.0 https://github.com/devrimgunduz/pagila.git #RUN adduser --disabled-password --gecos '' --home /var/lib/postgres docker #RUN adduser docker sudo From 7d03f75542e5436223150b28a76e952793d0ac55 Mon Sep 17 00:00:00 2001 From: Chris Munns Date: Wed, 5 Aug 2026 12:59:50 +0200 Subject: [PATCH 2/2] tests: pin pagila to immutable commit SHA Fetch pagila v3.1.0 by commit SHA (fef9675) instead of the tag. Tags are mutable; pinning the SHA makes the fixture reproducible and tamper-resistant (the fixture is loaded into the test DB via psql -f, so it's executable). --- tests/Dockerfile.pagila | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/tests/Dockerfile.pagila b/tests/Dockerfile.pagila index eef17cd17..1874d0fe0 100644 --- a/tests/Dockerfile.pagila +++ b/tests/Dockerfile.pagila @@ -44,8 +44,11 @@ RUN apt-get update \ && rm -rf /var/lib/apt/lists/* WORKDIR /usr/src/ -# pinned: pagila v4.0.0 requires PG18 + pgvector; v3.1.0 loads on PG16/17/18 -RUN git clone --depth 1 --branch pagila-v3.1.0 https://github.com/devrimgunduz/pagila.git +# pinned to pagila v3.1.0 @ fef9675 (immutable SHA; v4 needs PG18 + pgvector) +RUN git init -q pagila \ + && git -C pagila remote add origin https://github.com/devrimgunduz/pagila.git \ + && git -C pagila fetch -q --depth 1 origin fef9675714cfba1756df4719b5e36075a7ddf90e \ + && git -C pagila checkout -q FETCH_HEAD #RUN adduser --disabled-password --gecos '' --home /var/lib/postgres docker #RUN adduser docker sudo