chore: upgrade to 7.3.0+v1.154.0

- matrixdotorg/synapse: v1.149.1 -> v1.154.0
- pgautoupgrade/pgautoupgrade: 17-alpine -> 18-alpine (+ PGDATA pin for in-place upgrade)
- ghcr.io/element-hq/matrix-authentication-service: 1.14.0 -> 1.18.0
- nginx: 1.29.6 -> 1.31.1
- discorddb postgres: 13-alpine -> 16-alpine (conservative bump; manual dump/restore required)

Deferred to separate PR:
- mautrix/signal v0.8.7 -> v26.02.2 (CalVer; requires signaldb dump/restore)
- mautrix/telegram v0.15.3 -> v0.2605.0 (CalVer; requires telegramdb dump/restore)
- signaldb/telegramdb postgres: 13-alpine (deferred with bridges)

MAINTNANCE.md

@@ -1,32 +0,0 @@
-# matrix-synapse Recipe Maintenance
-
-All contributions should be made via a pull request. This is to ensure a
-certain quality and consistency, that others can rely on.
-
-## Maintainer Responsibilities
-
-A recipe maintainer has the following responsibilities:
-
-- Respond to pull requests / issues within two weeks
-- Make image security updates within a week
-- Make image major updates every three months
-
-In order to fullfill these responsibilities a recipe maintainer:
-
-- Has to watch the repository (to get notifications)
-- Needs to make sure renovate is configured properly
-
-## Pull Requests
-
-A pull request can be merged if it is approved by at least one maintainer. For
-pull requests opened by a maintainer they need to be approved by another
-maintainer. Even though it is okay to merge a pull request with one approval, it
-is always better if all maintainers looked at the pull request and approved it.
-
-## Become a maintainer
-
-Everyone can apply to be a recipe maintainer:
-1. Watch the repository to always get updates
-2. Simply add your self to the list in the [README.md](./README.md) and open a new pull request with the change.
-3. Once the pull request gets merged you will be added to the [matrix-synapse maintainers team](https://git.coopcloud.tech/org/coop-cloud/teams/matrix-synapse-maintainers).
-4. Join the room [#cc-|-matrix-synapse-maintenance:matrix.org](#cc-|-matrix-synapse-maintenance:matrix.org) and chat to other maintainers.

README.md

@@ -2,9 +2,8 @@
 
 <!-- metadata -->
 
-* **Maintainer**: Local-IT: [@moritz](https://git.coopcloud.tech/moritz), [@msimon](https://git.coopcloud.tech/simon), [@carla](https://git.coopcloud.tech/carla)
 * **Category**: Apps
-* **Status**: 3
+* **Status**: 0, work-in-progress
 * **Image**: [`matrixdotorg/synapse`](https://hub.docker.com/r/matrixdotorg/synapse), 4, upstream
 * **Healthcheck**: Yes
 * **Backups**: No

compose.discord.yml

@@ -30,7 +30,7 @@ services:
       - internal
 
   discorddb:
-    image: postgres:13-alpine
+    image: postgres:16-alpine
     secrets:
       - discord_db_password
     environment:

compose.mas.yml

@@ -5,7 +5,7 @@ version: "3.8"
 
 services:
   mas:
-    image: ghcr.io/element-hq/matrix-authentication-service:1.24.0
+    image: ghcr.io/element-hq/matrix-authentication-service:1.18.0
     command: ["server", "--config=/etc/mas/config.yaml"]
     environment:
       - DOMAIN

compose.signal.yml

@@ -10,7 +10,7 @@ services:
       - signal-data:/signal-data
 
   signalbridge:
-    image: dock.mau.dev/mautrix/signal:v0.2609.0
+    image: dock.mau.dev/mautrix/signal:v0.8.7
     depends_on:
       - signaldb
     configs:

compose.telegram.yml

@@ -10,7 +10,7 @@ services:
       - telegram-data:/telegram-data
 
   telegrambridge:
-    image: dock.mau.dev/mautrix/telegram:v0.2609.0
+    image: dock.mau.dev/mautrix/telegram:v0.15.3
     depends_on:
       - telegramdb
     configs:

compose.yml

@@ -3,7 +3,7 @@ version: "3.8"
 
 services:
   web:
-    image: nginx:1.31.6
+    image: nginx:1.31.1
     networks:
       - proxy
       - internal
@@ -43,7 +43,7 @@ services:
       start_period: 2m
 
   app:
-    image: "matrixdotorg/synapse:v1.161.0"
+    image: "matrixdotorg/synapse:v1.154.0"
     volumes:
       - "data:/data"
     secrets:
@@ -114,7 +114,7 @@ services:
       restart_policy:
         condition: on-failure
       labels:
-        - "coop-cloud.${STACK_NAME}.version=7.3.1+v1.157.1"
+        - "coop-cloud.${STACK_NAME}.version=7.3.0+v1.154.0"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}"
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8008/health"]
@@ -128,9 +128,9 @@ services:
     secrets:
       - db_password
     environment:
-      # postgres:18 relocated the default PGDATA to /var/lib/postgresql/18/docker.
+      # postgres:18 relocated default PGDATA to /var/lib/postgresql/18/docker.
-      # Pin it to the legacy path so pgautoupgrade finds the existing cluster on the
+      # Pin to legacy path so pgautoupgrade finds the existing cluster and
-      # mounted volume and upgrades it in place, instead of init'ing an empty one.
+      # upgrades in place instead of init-ing an empty one.
       - PGDATA=/var/lib/postgresql/data
       - LC_COLLATE=C
       - LC_CTYPE=C

renovate.json

@@ -2,10 +2,5 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "config:recommended"
-  ],
-  "reviewers": [
-    "moritz",
-    "simon",
-    "carla"
   ]
 }