chore(deps): rpm updates [security]

[red-hat-konflux]

This PR contains the following updates:

Package	Update	Change
postgresql	minor	15.12-1.module+el8.10.0+22871+d29fc53a -> 15.14-1.module+el8.10.0+23423+5a199198
postgresql-private-libs	minor	15.12-1.module+el8.10.0+22871+d29fc53a -> 15.14-1.module+el8.10.0+23423+5a199198

---

postgresql: PostgreSQL executes arbitrary code in restore operation

CVE-2025-8715

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-8715
• https://bugzilla.redhat.com/show_bug.cgi?id=2388551
• https://www.cve.org/CVERecord?id=CVE-2025-8715
• https://nvd.nist.gov/vuln/detail/CVE-2025-8715
• https://www.postgresql.org/support/security/CVE-2025-8715/

---

postgresql: PostgreSQL code execution in restore operation

CVE-2025-8714

More information

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2025-8714
• https://bugzilla.redhat.com/show_bug.cgi?id=2388553
• https://www.cve.org/CVERecord?id=CVE-2025-8714
• https://nvd.nist.gov/vuln/detail/CVE-2025-8714
• https://www.postgresql.org/support/security/CVE-2025-8714/

---

Configuration

📅 Schedule: Branch creation - "" in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

[rhacs-bot]

Images are ready for the commit at efa0dfd.

To use with deploy scripts, first export MAIN_IMAGE_TAG=4.9.x-674-gefa0dfd616.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 47.97%. Comparing base (23f1e87) to head (efa0dfd).

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #16618      +/-   ##
==========================================
- Coverage   47.97%   47.97%   -0.01%     
==========================================
  Files         768      768              
  Lines       79004    79004              
==========================================
- Hits        37906    37902       -4     
- Misses      37646    37649       +3     
- Partials     3452     3453       +1     

Flag	Coverage Δ
go-unit-tests	47.97% <ø> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[openshift-ci]

@red-hat-konflux[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/gke-nongroovy-e2e-tests	efa0dfd	link	true	/test gke-nongroovy-e2e-tests
ci/prow/gke-upgrade-tests	efa0dfd	link	false	/test gke-upgrade-tests

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.