feat: pin all versions including PostGIS

All components are now fully pinned:
- PostgreSQL: 17.9, 16.13, 15.17, 14.22
- PostGIS: 3.6.2 (pinned via apt version)
- pgvector: 0.8.2 (pinned via git tag)

Image tags: postgres-17.9-postgis-3.6.2-pgvector-0.8.2

Author: naorpeled

.github/workflows/publish.yml

@@ -19,15 +19,19 @@ jobs:
       matrix:
         include:
           - pg_version: "17.9"
+            postgis_version: "3.6.2"
             pgvector_version: "0.8.2"
             latest: true
           - pg_version: "16.13"
+            postgis_version: "3.6.2"
             pgvector_version: "0.8.2"
             latest: false
           - pg_version: "15.17"
+            postgis_version: "3.6.2"
             pgvector_version: "0.8.2"
             latest: false
           - pg_version: "14.22"
+            postgis_version: "3.6.2"
             pgvector_version: "0.8.2"
             latest: false
 
@@ -45,34 +49,26 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4
 
-      - name: Build Docker image
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: ${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ github.event.repository.name }}
+          tags: |
+            type=raw,value=postgres-${{ matrix.pg_version }}-postgis-${{ matrix.postgis_version }}-pgvector-${{ matrix.pgvector_version }}
+            type=raw,value=latest,enable=${{ matrix.latest }}
+            type=ref,event=tag
+
+      - name: Build and push Docker image
         uses: docker/build-push-action@v7
         with:
           context: .
-          load: true
-          tags: local-build:${{ matrix.pg_version }}
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
           build-args: |
             PG_VERSION=${{ matrix.pg_version }}
+            POSTGIS_VERSION=${{ matrix.postgis_version }}
             PGVECTOR_VERSION=${{ matrix.pgvector_version }}
-
-      - name: Detect PostGIS version
-        id: postgis
-        run: |
-          PG_MAJOR=$(echo "${{ matrix.pg_version }}" | cut -d. -f1)
-          POSTGIS_VERSION=$(docker run --rm local-build:${{ matrix.pg_version }} \
-            dpkg-query -W -f='${Version}' "postgresql-${PG_MAJOR}-postgis-3" | cut -d+ -f1)
-          echo "version=${POSTGIS_VERSION}" >> "$GITHUB_OUTPUT"
-          echo "Detected PostGIS version: ${POSTGIS_VERSION}"
-
-      - name: Tag and push Docker image
-        run: |
-          IMAGE="${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ github.event.repository.name }}"
-          TAG="postgres-${{ matrix.pg_version }}-postgis-${{ steps.postgis.outputs.version }}-pgvector-${{ matrix.pgvector_version }}"
-          docker tag local-build:${{ matrix.pg_version }} "${IMAGE}:${TAG}"
-          docker push "${IMAGE}:${TAG}"
-          echo "Pushed ${IMAGE}:${TAG}"
-          if [ "${{ matrix.latest }}" = "true" ]; then
-            docker tag local-build:${{ matrix.pg_version }} "${IMAGE}:latest"
-            docker push "${IMAGE}:latest"
-            echo "Pushed ${IMAGE}:latest"
-          fi
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

.github/workflows/test.yml

@@ -14,12 +14,16 @@ jobs:
       matrix:
         include:
           - pg_version: "17.9"
+            postgis_version: "3.6.2"
             pgvector_version: "0.8.2"
           - pg_version: "16.13"
+            postgis_version: "3.6.2"
             pgvector_version: "0.8.2"
           - pg_version: "15.17"
+            postgis_version: "3.6.2"
             pgvector_version: "0.8.2"
           - pg_version: "14.22"
+            postgis_version: "3.6.2"
             pgvector_version: "0.8.2"
 
     steps:
@@ -36,6 +40,7 @@ jobs:
           tags: postgres-test:pg${{ matrix.pg_version }}
           build-args: |
             PG_VERSION=${{ matrix.pg_version }}
+            POSTGIS_VERSION=${{ matrix.postgis_version }}
             PGVECTOR_VERSION=${{ matrix.pgvector_version }}
 
       - name: Start PostgreSQL container and test extensions

Dockerfile

@@ -1,10 +1,12 @@
 # Default versions - can be overridden at build time using --build-arg
 ARG PG_VERSION=17.9
+ARG POSTGIS_VERSION=3.6.2
 ARG PGVECTOR_VERSION=0.8.2
 
 FROM postgres:${PG_VERSION}
 
 # Re-declare ARGs after FROM to make them available in this build stage
+ARG POSTGIS_VERSION
 ARG PGVECTOR_VERSION
 
 LABEL maintainer="TypeORM"
@@ -29,14 +31,15 @@ RUN apt-get update \
     gcc \
     "postgresql-server-dev-${PG_MAJOR}"
 
-# Install PostGIS
-RUN apt-get update \
+# Install pinned PostGIS version (apt packages use major version in name)
+RUN POSTGIS_MAJOR=$(echo "${POSTGIS_VERSION}" | cut -d. -f1) \
+    && apt-get update \
     && apt-get install -y --no-install-recommends \
-    postgis \
-    "postgresql-${PG_MAJOR}-postgis-3" \
-    "postgresql-${PG_MAJOR}-postgis-3-scripts"
+    "postgis=${POSTGIS_VERSION}+dfsg*" \
+    "postgresql-${PG_MAJOR}-postgis-${POSTGIS_MAJOR}=${POSTGIS_VERSION}+dfsg*" \
+    "postgresql-${PG_MAJOR}-postgis-${POSTGIS_MAJOR}-scripts=${POSTGIS_VERSION}+dfsg*"
 
-# Build and install pgvector from source to pin exact version
+# Build and install pinned pgvector version from source
 RUN apt-get update \
     && apt-get install -y --no-install-recommends git make gcc "postgresql-server-dev-${PG_MAJOR}" \
     && mkdir -p /usr/src/pgvector \