diff --git a/.changes/unreleased/Under the Hood-20260522-120000.yaml b/.changes/unreleased/Under the Hood-20260522-120000.yaml new file mode 100644 index 00000000000..7c27e4b7c2c --- /dev/null +++ b/.changes/unreleased/Under the Hood-20260522-120000.yaml @@ -0,0 +1,6 @@ +kind: Under the Hood +body: Remove exact version pin for libpq-dev in Dockerfile to prevent recurring build failures when Debian publishes PostgreSQL security updates. +time: 2026-05-22T12:00:00.000000Z +custom: + Author: OliverCostello1 + Issue: "12808" \ No newline at end of file diff --git a/docker/Dockerfile b/docker/Dockerfile index 2d7d7762a65..6a866ef93b6 100644 --- a/docker/Dockerfile +++ b/docker/Dockerfile @@ -7,7 +7,9 @@ RUN apt-get update \ && apt-get install -y --no-install-recommends \ build-essential=12.9 \ ca-certificates=20210119 \ - libpq-dev=13.23-0+deb11u3 \ + # libpq-dev is intentionally not pinned: Debian removes old patch versions when publishing + # security updates, which breaks builds. The apt-mark hold below prevents dist-upgrade drift. + libpq-dev \ make=4.3-4.1 \ openssh-client=1:8.4p1-5+deb11u3 \ software-properties-common=0.96.20.2-2.1 \ @@ -85,7 +87,7 @@ FROM dbt-core AS dbt-third-party ARG dbt_third_party RUN if [ "$dbt_third_party" ]; then \ - python -m pip install --no-cache-dir "${dbt_third_party}"; \ - else \ - echo "No third party adapter provided"; \ - fi \ + python -m pip install --no-cache-dir "${dbt_third_party}"; \ + else \ + echo "No third party adapter provided"; \ + fi \ \ No newline at end of file