Skip to content

CI: pin the scale-test pgvector image to 0.8.7 (#977) - #987

Merged
mkreyman merged 3 commits into
masterfrom
ci/pgvector-087
Oct 17, 2026
Merged

mkreyman merged 3 commits into
masterfrom
ci/pgvector-087

Conversation

@mkreyman

Copy link
Copy Markdown
Owner

Closes #977. Claim handoff:loopctl:scale-test-pgvector-087 context: mkreyman/infra#280 moved the fleet's host Postgres to pgvector 0.8.7; this moves the scale-test job's service pin in step.

Check after merge (from the issue): the scale-test job's Initialize containers log shows the new digest, and the below-0.8.4 warning no longer prints on beelink/nuc runs.

The fleet's host Postgres moved from pgvector 0.8.2 to 0.8.7 under
mkreyman/infra#280; the scale-test job's service image moves in step,
pinned by digest to the 0.8.7-pg16-trixie image already pulled on
beelink (2026-10-13), so the job still never pulls from Docker Hub.
Above the 0.8.4 floor (#965), so the insert/VACUUM race is gone and
test_helper's below-floor warning no longer fires on beelink/nuc runs.
@mkreyman

Copy link
Copy Markdown
Owner Author

Review round 1 (code) counted at 2f2ff0fcdfd9 via Skill lean-review. The review-round counter's merge gate reads this marker on any machine.

A new advisory published since #981 — CVE-2026-105660 (MEDIUM, HTTP/1
request-target authority, GHSA-v53v-9hvg-37jf) — failed `mix hex.audit` in the
commit hook for every branch. Bandit 1.13.0 fixed it, and OSV reports 1.13.1
clean of every advisory 1.12.5 carried, including CVE-2026-105659 (HTTP/2),
so the #981 ignore entry comes out too. The endpoint still serves no HTTP/2
(`http_2_options: [enabled: false]`; Fly's proxy speaks HTTP/1.1 anyway) and
endpoint_http2_test.exs keeps that under test, with @acknowledged_bandit moved
to 1.13.1. thousand_island 1.5.0 -> 1.6.0 and hpax 1.0.4 -> 1.1.0 ride along
as bandit's raised requirements.
…nding)

vacuum_vector_indexes/1's doc still described the infra#280 host-image move as
pending ("until the hosts move"), but the hosts now run 0.8.7 and CI's
scale-test job pins 0.8.7. A below-floor failure now reads as "upgrade the
image", not "wait for infra".
@mkreyman
mkreyman merged commit 1b780ae into master Oct 17, 2026
17 checks passed
@mkreyman
mkreyman deleted the ci/pgvector-087 branch October 17, 2026 18:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

CI: move the scale-test pgvector pin to 0.8.7 (follows infra#280)

1 participant