From 72f0176a21db1d1f8e86046b1c5e6c63feab3fad Mon Sep 17 00:00:00 2001
From: autonomic-bot <autonomic-bot@autonomic.zone>
Date: Fri, 12 Jun 2026 03:53:20 +0000
Subject: [PATCH] chore: upgrade to 7.3.0+v1.154.0

- matrixdotorg/synapse: v1.149.1 -> v1.154.0
- pgautoupgrade/pgautoupgrade: 17-alpine -> 18-alpine (+ PGDATA pin for in-place upgrade)
- ghcr.io/element-hq/matrix-authentication-service: 1.14.0 -> 1.18.0
- nginx: 1.29.6 -> 1.31.1
- discorddb postgres: 13-alpine -> 16-alpine (conservative bump; manual dump/restore required)

Deferred to separate PR:
- mautrix/signal v0.8.7 -> v26.02.2 (CalVer; requires signaldb dump/restore)
- mautrix/telegram v0.15.3 -> v0.2605.0 (CalVer; requires telegramdb dump/restore)
- signaldb/telegramdb postgres: 13-alpine (deferred with bridges)
---
 compose.discord.yml |  2 +-
 compose.mas.yml     |  2 +-
 compose.yml         | 12 ++++++++----
 3 files changed, 10 insertions(+), 6 deletions(-)

diff --git a/compose.discord.yml b/compose.discord.yml
index 84bc62d..947917c 100644
--- a/compose.discord.yml
+++ b/compose.discord.yml
@@ -30,7 +30,7 @@ services:
       - internal
 
   discorddb:
-    image: postgres:13-alpine
+    image: postgres:16-alpine
     secrets:
       - discord_db_password
     environment:
diff --git a/compose.mas.yml b/compose.mas.yml
index 64f7670..9307c0c 100644
--- a/compose.mas.yml
+++ b/compose.mas.yml
@@ -5,7 +5,7 @@ version: "3.8"
 
 services:
   mas:
-    image: ghcr.io/element-hq/matrix-authentication-service:1.14.0
+    image: ghcr.io/element-hq/matrix-authentication-service:1.18.0
     command: ["server", "--config=/etc/mas/config.yaml"]
     environment:
       - DOMAIN
diff --git a/compose.yml b/compose.yml
index 54c2d63..0e6d884 100644
--- a/compose.yml
+++ b/compose.yml
@@ -3,7 +3,7 @@ version: "3.8"
 
 services:
   web:
-    image: nginx:1.29.6
+    image: nginx:1.31.1
     networks:
       - proxy
       - internal
@@ -43,7 +43,7 @@ services:
       start_period: 2m
 
   app:
-    image: "matrixdotorg/synapse:v1.149.1"
+    image: "matrixdotorg/synapse:v1.154.0"
     volumes:
       - "data:/data"
     secrets:
@@ -114,7 +114,7 @@ services:
       restart_policy:
         condition: on-failure
       labels:
-        - "coop-cloud.${STACK_NAME}.version=7.1.1+v1.149.1"
+        - "coop-cloud.${STACK_NAME}.version=7.3.0+v1.154.0"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}"
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8008/health"]
@@ -124,10 +124,14 @@ services:
       start_period: 1m
 
   db:
-    image: pgautoupgrade/pgautoupgrade:17-alpine
+    image: pgautoupgrade/pgautoupgrade:18-alpine
     secrets:
       - db_password
     environment:
+      # postgres:18 relocated default PGDATA to /var/lib/postgresql/18/docker.
+      # Pin to legacy path so pgautoupgrade finds the existing cluster and
+      # upgrades in place instead of init-ing an empty one.
+      - PGDATA=/var/lib/postgresql/data
       - LC_COLLATE=C
       - LC_CTYPE=C
       - POSTGRES_DB=synapse
-- 
2.49.0