What the developer wrote
Authored by Nicolas Dorier
bump postgres
What changed, and why it matters
This commit updates the PostgreSQL database version used only in BTCPay Server's automated test environment from 13.13 to 13.23, and adds a persistent data volume for that test database. It does not change production code. The newer PostgreSQL patch release likely fixes bugs and security issues in the database software itself, but the commit does not address any vulnerability in BTCPay Server's own code.
No immediate action required for production deployments. Ensure test environments are rebuilt to pull postgres:13.23. Review upstream PostgreSQL 13.23 release notes for any relevant security advisories if this version is also used in production database deployments, but that is outside the scope of this commit.
Security signals we found
Dependency version bump in test harness (postgres:13.13 -> 13.23)
Persistent volume added for test database data
No changes to production code, authentication, or application logic
Evidence from the diff
The diff modifies BTCPayServer.Tests/docker-compose.yml, bumping the test-only postgres service image from postgres:13.13 to postgres:13.23 and adding a named volume (postgres_test_datadir:/var/lib/postgresql/data). This is a dependency patch update within the test harness. There is no code change to BTCPay Server application logic, no authentication/authorization change, and no production configuration change. PostgreSQL 13.23 is a patch release in the 13.x line; such releases routinely include upstream security fixes, but the commit message provides no specifics.
Changed components
BTCPayServer.Tests/docker-compose.ymlTest-only PostgreSQL containerInspect captured patch +4 / −1
diff --git a/BTCPayServer.Tests/docker-compose.yml b/BTCPayServer.Tests/docker-compose.yml
index 627b116..c0e3495 100644
--- a/BTCPayServer.Tests/docker-compose.yml
+++ b/BTCPayServer.Tests/docker-compose.yml
@@ -222,13 +222,15 @@ services:
- bitcoind
postgres:
- image: postgres:13.13
+ image: postgres:13.23
environment:
POSTGRES_HOST_AUTH_METHOD: trust
ports:
- "39372:5432"
expose:
- "5432"
+ volumes:
+ - "postgres_test_datadir:/var/lib/postgresql/data"
merchant_lnd:
image: btcpayserver/lnd:v0.19.3-beta
@@ -328,6 +330,7 @@ volumes:
lightning_charge_datadir:
customer_lnd_datadir:
merchant_lnd_datadir:
+ postgres_test_datadir:
tor_datadir:
torrcdir:
tor_servicesdir:
Why this scored 17/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.