license switch agpl -> busl1, sprints work, new product advisories

devops/compose/docker-compose.prod.yaml

@@ -23,7 +23,7 @@ volumes:
 
 services:
   valkey:
-    image: docker.io/valkey/valkey:8.0
+    image: docker.io/valkey/valkey:9.0.1
     restart: unless-stopped
     command: ["valkey-server", "--appendonly", "yes"]
     volumes:
@@ -34,22 +34,40 @@ services:
       - stellaops
     labels: *release-labels
 
-  rustfs:
-    image: registry.stella-ops.org/stellaops/rustfs:2025.10.0-edge
-    command: ["serve", "--listen", "0.0.0.0:8080", "--root", "/data"]
-    restart: unless-stopped
+  rustfs:
+    image: registry.stella-ops.org/stellaops/rustfs:2025.09.2
+    command: ["serve", "--listen", "0.0.0.0:8080", "--root", "/data"]
+    restart: unless-stopped
     environment:
       RUSTFS__LOG__LEVEL: info
       RUSTFS__STORAGE__PATH: /data
     volumes:
       - rustfs-data:/data
-    ports:
-      - "${RUSTFS_HTTP_PORT:-8080}:8080"
-    networks:
-      - stellaops
-    labels: *release-labels
-
-  nats:
+    ports:
+      - "${RUSTFS_HTTP_PORT:-8080}:8080"
+    networks:
+      - stellaops
+    labels: *release-labels
+
+  rekor-cli:
+    image: ghcr.io/sigstore/rekor-cli:v1.4.3
+    entrypoint: ["rekor-cli"]
+    command: ["version"]
+    profiles: ["sigstore"]
+    networks:
+      - stellaops
+    labels: *release-labels
+
+  cosign:
+    image: ghcr.io/sigstore/cosign:v3.0.4
+    entrypoint: ["cosign"]
+    command: ["version"]
+    profiles: ["sigstore"]
+    networks:
+      - stellaops
+    labels: *release-labels
+
+  nats:
     image: docker.io/library/nats@sha256:c82559e4476289481a8a5196e675ebfe67eea81d95e5161e3e78eccfe766608e
     command:
       - "-js"
@@ -123,7 +141,7 @@ services:
     labels: *release-labels
 
   postgres:
-    image: docker.io/library/postgres:16
+    image: docker.io/library/postgres:18.1
     restart: unless-stopped
     environment:
       POSTGRES_USER: "${POSTGRES_USER:-stellaops}"
@@ -378,3 +396,5 @@ services:
       - stellaops
       - frontdoor
     labels: *release-labels
+
+