license switch agpl -> busl1, sprints work, new product advisories

devops/compose/docker-compose.airgap.yaml

@@ -20,7 +20,7 @@ volumes:
 
 services:
   postgres:
-    image: docker.io/library/postgres:17
+    image: docker.io/library/postgres:18.1
     restart: unless-stopped
     environment:
       POSTGRES_USER: "${POSTGRES_USER:-stellaops}"
@@ -48,7 +48,7 @@ services:
     labels: *release-labels
 
   valkey:
-    image: docker.io/valkey/valkey:8.0
+    image: docker.io/valkey/valkey:9.0.1
     restart: unless-stopped
     command: ["valkey-server", "--appendonly", "yes"]
     volumes:
@@ -60,7 +60,7 @@ services:
     labels: *release-labels
 
   rustfs:
-    image: registry.stella-ops.org/stellaops/rustfs:2025.10.0-edge
+    image: registry.stella-ops.org/stellaops/rustfs:2025.09.2
     command: ["serve", "--listen", "0.0.0.0:8080", "--root", "/data"]
     restart: unless-stopped
     environment:
@@ -74,6 +74,24 @@ services:
       - stellaops
     labels: *release-labels
 
+  rekor-cli:
+    image: ghcr.io/sigstore/rekor-cli:v1.4.3
+    entrypoint: ["rekor-cli"]
+    command: ["version"]
+    profiles: ["sigstore"]
+    networks:
+      - stellaops
+    labels: *release-labels
+
+  cosign:
+    image: ghcr.io/sigstore/cosign:v3.0.4
+    entrypoint: ["cosign"]
+    command: ["version"]
+    profiles: ["sigstore"]
+    networks:
+      - stellaops
+    labels: *release-labels
+
   nats:
     image: docker.io/library/nats@sha256:c82559e4476289481a8a5196e675ebfe67eea81d95e5161e3e78eccfe766608e
     command:
@@ -381,3 +399,5 @@ services:
     networks:
       - stellaops
     labels: *release-labels
+
+