license switch agpl -> busl1, sprints work, new product advisories

devops/compose/docker-compose.ci.yaml

@@ -9,10 +9,12 @@
 #   docker compose -f devops/compose/docker-compose.ci.yaml down -v
 #
 # Services:
-#   - postgres-ci: PostgreSQL 16 for integration tests (port 5433)
+#   - postgres-ci: PostgreSQL 18.1 for integration tests (port 5433)
 #   - valkey-ci: Valkey/Redis for caching tests (port 6380)
 #   - nats-ci: NATS JetStream for messaging tests (port 4223)
 #   - mock-registry: Local container registry for release testing (port 5001)
+#   - rekor-cli: Rekor CLI tool (profile: sigstore)
+#   - cosign: Cosign tool (profile: sigstore)
 #
 # =============================================================================
 
@@ -29,10 +31,10 @@ volumes:
 
 services:
   # ---------------------------------------------------------------------------
-  # PostgreSQL 16 - Primary database for integration tests
+  # PostgreSQL 18.1 - Primary database for integration tests
   # ---------------------------------------------------------------------------
   postgres-ci:
-    image: postgres:16-alpine
+    image: postgres:18.1-alpine
     container_name: stellaops-postgres-ci
     environment:
       POSTGRES_USER: stellaops_ci
@@ -55,10 +57,10 @@ services:
     restart: unless-stopped
 
   # ---------------------------------------------------------------------------
-  # Valkey 8.0 - Redis-compatible cache for caching tests
+  # Valkey 9.0.1 - Redis-compatible cache for caching tests
   # ---------------------------------------------------------------------------
   valkey-ci:
-    image: valkey/valkey:8.0-alpine
+    image: valkey/valkey:9.0.1-alpine
     container_name: stellaops-valkey-ci
     command: ["valkey-server", "--appendonly", "yes", "--maxmemory", "256mb", "--maxmemory-policy", "allkeys-lru"]
     ports:
@@ -74,6 +76,25 @@ services:
       retries: 5
     restart: unless-stopped
 
+  # ---------------------------------------------------------------------------
+  # Sigstore tools - Rekor CLI and Cosign (on-demand)
+  # ---------------------------------------------------------------------------
+  rekor-cli:
+    image: ghcr.io/sigstore/rekor-cli:v1.4.3
+    entrypoint: ["rekor-cli"]
+    command: ["version"]
+    profiles: ["sigstore"]
+    networks:
+      - ci-net
+
+  cosign:
+    image: ghcr.io/sigstore/cosign:v3.0.4
+    entrypoint: ["cosign"]
+    command: ["version"]
+    profiles: ["sigstore"]
+    networks:
+      - ci-net
+
   # ---------------------------------------------------------------------------
   # NATS JetStream - Message queue for messaging tests
   # ---------------------------------------------------------------------------
@@ -128,3 +149,4 @@ services:
       timeout: 5s
       retries: 5
     restart: unless-stopped
+