chore(deps): rpm updates [security]

[red-hat-konflux]

This PR contains the following updates:

Package	Update	Change
postgresql	minor	15.12-1.module+el8.10.0+22871+d29fc53a -> 15.14-1.module+el8.10.0+23423+5a199198
postgresql-private-libs	minor	15.12-1.module+el8.10.0+22871+d29fc53a -> 15.14-1.module+el8.10.0+23423+5a199198

---

postgresql: PostgreSQL code execution in restore operation

CVE-2025-8714

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-8714
• https://bugzilla.redhat.com/show_bug.cgi?id=2388553
• https://www.cve.org/CVERecord?id=CVE-2025-8714
• https://nvd.nist.gov/vuln/detail/CVE-2025-8714
• https://www.postgresql.org/support/security/CVE-2025-8714/

---

postgresql: PostgreSQL executes arbitrary code in restore operation

CVE-2025-8715

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-8715
• https://bugzilla.redhat.com/show_bug.cgi?id=2388551
• https://www.cve.org/CVERecord?id=CVE-2025-8715
• https://nvd.nist.gov/vuln/detail/CVE-2025-8715
• https://www.postgresql.org/support/security/CVE-2025-8715/

---

Configuration

📅 Schedule: Branch creation - "" in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

[rhacs-bot]

Images are ready for the commit at 7816fbc.

To use with deploy scripts, first export MAIN_IMAGE_TAG=4.9.x-655-g7816fbc98f.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 48.66%. Comparing base (a75ff09) to head (7816fbc).

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #16618      +/-   ##
==========================================
+ Coverage   48.64%   48.66%   +0.01%     
==========================================
  Files        2659     2659              
  Lines      198828   198828              
==========================================
+ Hits        96727    96751      +24     
+ Misses      94508    94491      -17     
+ Partials     7593     7586       -7     

Flag	Coverage Δ
go-unit-tests	48.66% <ø> (+0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[openshift-ci]

@red-hat-konflux[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/ocp-4-18-nongroovy-e2e-tests	a22faf8	link	false	/test ocp-4-18-nongroovy-e2e-tests

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.