chore(deps): update ghcr.io/cloudnative-pg/postgresql docker tag to v18

[org-internal-bot]

This PR contains the following updates:

Package	Type	Update	Change
ghcr.io/cloudnative-pg/postgresql	final	major	17.7 → 18.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

✅⚠️MegaLinter analysis: Success with warnings

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ DOCKERFILE	hadolint	1		0	0	0.27s
✅ EDITORCONFIG	editorconfig-checker	1		0	0	0.23s
⚠️ REPOSITORY	trivy	yes		1	no	5.38s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.36s

Detailed Issues

⚠️ REPOSITORY / trivy - 1 error

2025-12-02T04:49:41Z	INFO	[vulndb] Need to update DB
2025-12-02T04:49:41Z	INFO	[vulndb] Downloading vulnerability DB...
2025-12-02T04:49:41Z	INFO	[vulndb] Downloading artifact...	repo="mirror.gcr.io/aquasec/trivy-db:2"
55.42 MiB / 76.43 MiB [-------------------------------------------->________________] 72.51% ? p/s ?76.43 MiB / 76.43 MiB [----------------------------------------------------------->] 100.00% ? p/s ?76.43 MiB / 76.43 MiB [----------------------------------------------------------->] 100.00% ? p/s ?76.43 MiB / 76.43 MiB [---------------------------------------------->] 100.00% 35.00 MiB p/s ETA 0s76.43 MiB / 76.43 MiB [---------------------------------------------->] 100.00% 35.00 MiB p/s ETA 0s76.43 MiB / 76.43 MiB [---------------------------------------------->] 100.00% 35.00 MiB p/s ETA 0s76.43 MiB / 76.43 MiB [---------------------------------------------->] 100.00% 32.75 MiB p/s ETA 0s76.43 MiB / 76.43 MiB [---------------------------------------------->] 100.00% 32.75 MiB p/s ETA 0s76.43 MiB / 76.43 MiB [---------------------------------------------->] 100.00% 32.75 MiB p/s ETA 0s76.43 MiB / 76.43 MiB [---------------------------------------------->] 100.00% 30.63 MiB p/s ETA 0s76.43 MiB / 76.43 MiB [---------------------------------------------->] 100.00% 30.63 MiB p/s ETA 0s76.43 MiB / 76.43 MiB [---------------------------------------------->] 100.00% 30.63 MiB p/s ETA 0s76.43 MiB / 76.43 MiB [-------------------------------------------------] 100.00% 33.41 MiB p/s 2.5s2025-12-02T04:49:44Z	INFO	[vulndb] Artifact successfully downloaded	repo="mirror.gcr.io/aquasec/trivy-db:2"
2025-12-02T04:49:44Z	INFO	[vuln] Vulnerability scanning is enabled
2025-12-02T04:49:44Z	INFO	[misconfig] Misconfiguration scanning is enabled
2025-12-02T04:49:44Z	INFO	[misconfig] Need to update the checks bundle
2025-12-02T04:49:44Z	INFO	[misconfig] Downloading the checks bundle...
165.46 KiB / 165.46 KiB [---------------------------------------------------------] 100.00% ? p/s 0s2025-12-02T04:49:46Z	ERROR	[helm scanner] Failed to render Chart files	file_path="charts/cdviz-collector" err="found in Chart.yaml, but missing in charts/ directory: kubewatch"
2025-12-02T04:49:46Z	INFO	Number of language-specific files	num=0
2025-12-02T04:49:46Z	INFO	Detected config files	num=2

Report Summary

┌────────────────────────────────────────────────┬────────────┬─────────────────┬───────────────────┐
│                     Target                     │    Type    │ Vulnerabilities │ Misconfigurations │
├────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ cdviz-db/Dockerfile                            │ dockerfile │        -        │         0         │
├────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ charts/cdviz-db/templates/job-dbmigration.yaml │    helm    │        -        │         1         │
└────────────────────────────────────────────────┴────────────┴─────────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


charts/cdviz-db/templates/job-dbmigration.yaml (helm)
=====================================================
Tests: 93 (SUCCESSES: 92, FAILURES: 1)
Failures: 1 (UNKNOWN: 0, LOW: 1, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

AVD-KSV-0021 (LOW): Container 'cdviz-db-migration' of CronJob 'cdviz-db-migration' should set 'securityContext.runAsGroup' > 10000
════════════════════════════════════════
Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table.

See https://avd.aquasec.com/misconfig/ksv021
────────────────────────────────────────
 charts/cdviz-db/templates/job-dbmigration.yaml:35-65
────────────────────────────────────────
  35 ┌           - name: 'cdviz-db-migration'
  36 │             image: "ghcr.io/cdviz-dev/cdviz-db-migration:0.20250607150000.0"
  37 │             # args for https://atlasgo.io/declarative/apply
  38 │             args:
  39 │               - migrate # or schema
  40 │               - apply
  41 │               - -u
  42 │               - "$(DATABASE_URL)"
  43 └               - --dir
  ..   
────────────────────────────────────────

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff