Fix/breardon2011/UI arch lock (#2355)

* adjust arch lock

* bump chart

* adjust docker

Author: breardon2011

taco/Dockerfile_statesman

@@ -27,9 +27,9 @@ FROM ubuntu:24.04 AS runner
 ARG COMMIT_SHA
 WORKDIR /app
 
-# Install ca-certificates, curl for HTTPS requests
+# Install ca-certificates, curl, jq for HTTPS requests and URL encoding
 RUN apt-get update && \
-    apt-get install -y ca-certificates curl && \
+    apt-get install -y ca-certificates curl jq && \
     apt-get clean && \
     rm -rf /var/lib/apt/lists/*
 

taco/Dockerfile_token_service

@@ -10,11 +10,12 @@ COPY cmd/token_service/ ./cmd/token_service/
 COPY internal/ ./internal/
 
 # Download dependencies and build
+# Note: CGO is required for SQLite support
 RUN cd cmd/token_service && \
     go mod tidy && \
-    CGO_ENABLED=0 GOOS=linux go build \
+    CGO_ENABLED=1 GOOS=linux go build \
     -ldflags="-X 'main.Version=${COMMIT_SHA}' -s -w" \
-    -a -installsuffix cgo \
+    -a \
     -o token_service .
 
 # Multi-stage build - use a minimal image for runtime

taco/scripts/entrypoint.sh

@@ -16,7 +16,9 @@ atlas migrate hash --dir "file:///app/migrations/sqlite" 2>/dev/null || true
 case $BACKEND in
   postgres)
     echo "Applying PostgreSQL migrations..."
-    DB_URL="postgres://${OPENTACO_POSTGRES_USER}:${OPENTACO_POSTGRES_PASSWORD}@${OPENTACO_POSTGRES_HOST}:${OPENTACO_POSTGRES_PORT}/${OPENTACO_POSTGRES_DATABASE}?sslmode=${OPENTACO_POSTGRES_SSLMODE:-disable}"
+    # URL-encode the password to handle special characters
+    ENCODED_PASSWORD=$(printf '%s' "$OPENTACO_POSTGRES_PASSWORD" | jq -sRr @uri)
+    DB_URL="postgres://${OPENTACO_POSTGRES_USER}:${ENCODED_PASSWORD}@${OPENTACO_POSTGRES_HOST}:${OPENTACO_POSTGRES_PORT}/${OPENTACO_POSTGRES_DATABASE}?sslmode=${OPENTACO_POSTGRES_SSLMODE:-disable}"
     atlas migrate apply --url "$DB_URL" --dir "file:///app/migrations/postgres"
     ;;
   mysql)