Pin versions of Postgres, Redis, Python and uv in CI, Dockerfile and Docker composes (#950)

…Docker composes

# Description

## Summary

<!--BRIEF description: DONT'T EXPLAIN the code: JUSTIFY what this PR is
for!-->

That's obvious

<!--#### Sources at the end-->

## Related PR

Subset of #944

## Changes Made

<!--DESCRIBE the changes: tell the BIG STEPS, use a CHECKLIST to show
progress. You can explain below how the code works.-->

See diff

<!--Don't touch thses two tags-->
<details>
<summary>

# Classification

</summary>

## Type of Change

- [ ] 🐛 Bug fix (non-breaking change which fixes an issue)
- [ ] ✨ New feature (non-breaking change which adds functionality)
- [ ] 🔨 Refactor (non-breaking change that neither fixes a bug nor adds
a feature)
- [x] 🔧 Infra CI/CD (changes to configs of workflows)
- [ ] 💥 BREAKING CHANGE (fix or feature that require a new minimal
version of the front-end)
- [x] 😶‍🌫️ No impact for the end-users

## Impact & Scope

- [ ] Core functionality changes
- [ ] Single module changes
- [ ] Multiple modules changes
- [ ] Database migrations required
- [x] Other: ... <!--Not module-oriented: write something!-->

## Testing

- [x] 1. Tested this locally
- [ ] 2. Added/modified tests that pass the CI (or tested in a
downstream fork)
- [ ] 3. Tested in a deployed pre-prod
- [ ] 0. Untestable (exceptionally), will be tested in prod directly

## Documentation

- [ ] Updated [the docs](docs.myecl.fr) accordingly : <!--[Docs#0 -
Title](https://github.com/aeecleclair/myecl-documentation/pull/0)-->
- [ ] `"` Docstrings
- [ ] `#` Inline comments
- [ ] No documentation needed

</details>

Author: Marc-Andrieu

.github/workflows/lintandformat.yml

@@ -19,7 +19,7 @@ jobs:
         uses: actions/setup-python@v6
         id: setup-python
         with:
-          python-version: "3.14"
+          python-version-file: .python-version
 
       - name: Cache uv folder
         id: cache-uv
@@ -29,7 +29,7 @@ jobs:
           key: ${{ runner.os }}-python-${{ steps.setup-python.outputs.python-version }}-uv-${{ hashFiles('requirements.txt', 'requirements-dev.txt') }}
 
       - name: Install uv
-        run: curl -LsSf https://astral.sh/uv/install.sh | sh
+        run: curl -LsSf https://astral.sh/uv/0.9.27/install.sh | sh
 
       - name: Install dependencies
         run: uv pip install --system -r requirements-dev.txt

.github/workflows/test.yml

@@ -20,7 +20,7 @@ jobs:
       # Label used to access the service container
       redis:
         # Docker Hub image
-        image: redis
+        image: redis:7.0-alpine3.17
         # Set health checks to wait until redis has started
         options: >-
           --health-cmd "redis-cli ping"
@@ -32,7 +32,7 @@ jobs:
           - 6379:6379
       postgres:
         # Docker Hub image
-        image: "postgres:15.1"
+        image: postgres:15.1-alpine3.17
         # Provide the password for postgres
         env:
           POSTGRES_PASSWORD: "somerealpassword"
@@ -60,7 +60,7 @@ jobs:
         uses: actions/setup-python@v6
         id: setup-python
         with:
-          python-version: "3.14"
+          python-version-file: .python-version
 
       - name: Cache uv folder
         id: cache-uv
@@ -70,7 +70,7 @@ jobs:
           key: ${{ runner.os }}-python-${{ steps.setup-python.outputs.python-version }}-uv-${{ hashFiles('requirements.txt', 'requirements-dev.txt') }}
 
       - name: Install uv
-        run: curl -LsSf https://astral.sh/uv/install.sh | sh
+        run: curl -LsSf https://astral.sh/uv/0.9.27/install.sh | sh
 
       - name: Install dependencies
         run: uv pip install --system -r requirements-dev.txt

.gitignore

@@ -4,7 +4,8 @@ __pycache__/
 .pytest_cache/
 .ruff_cache/
 
-# Databases (PostgreSQL and SQLite)
+# Databases (PostgreSQL and SQLite) and Redis volumes
+hyperion-redis/
 hyperion-db/
 *.db
 

Dockerfile

@@ -1,4 +1,4 @@
-FROM ghcr.io/astral-sh/uv:python3.14-trixie-slim
+FROM ghcr.io/astral-sh/uv:0.9.27-python3.14-trixie-slim
 
 # Default number of workers; can be overridden at runtime
 ENV WORKERS=1

docker-compose-dev.yaml compose.dev.yamldocker-compose-dev.yaml renamed to compose.dev.yaml

@@ -1,6 +1,6 @@
 services:
   hyperion-db:
-    image: postgres
+    image: postgres:15.1-alpine3.17
     container_name: hyperion-db-dev
     restart: unless-stopped
     environment:
@@ -12,14 +12,16 @@ services:
     ports:
       - 5432:5432
     volumes:
-      - hyperion_db_data:/var/lib/postgresql/data
+      - ./hyperion-db:/var/lib/postgresql/data
 
   hyperion-redis:
-    image: redis
+    image: redis:7.0-alpine3.17
     container_name: hyperion-redis-dev
     restart: unless-stopped
     ports:
       - 6379:6379
+    volumes:
+      - ./hyperion-redis:/data
 
 volumes:
   hyperion_db_data:

docker-compose.yaml compose.yamldocker-compose.yaml renamed to compose.yaml

@@ -1,6 +1,6 @@
 services:
   hyperion-db:
-    image: postgres
+    image: postgres:15.1-alpine3.17
     container_name: hyperion-db
     restart: unless-stopped
     healthcheck:
@@ -14,15 +14,17 @@ services:
       POSTGRES_DB: ${POSTGRES_DB}
       PGTZ: ${POSTGRES_TZ}
     volumes:
-      - ./hyperion_db_data:/var/lib/postgresql/data:Z
+      - ./hyperion-db:/var/lib/postgresql/data
 
   hyperion-redis:
-    image: redis
+    image: redis:7.0-alpine3.17
     container_name: hyperion-redis
     restart: unless-stopped
     command: redis-server --requirepass ${REDIS_PASSWORD}
     environment:
       REDIS_PASSWORD: ${REDIS_PASSWORD}
+    volumes:
+      - ./hyperion-redis:/data
 
   hyperion-app:
     build:
@@ -39,7 +41,7 @@ services:
       - 8000:8000
     env_file: .env
     volumes:
-      - ./logs:/hyperion/logs:Z
-      - ./data:/hyperion/data:Z
-      - ./config.yaml:/hyperion/config.yaml:Z
-      - ./firebase.json:/hyperion/firebase.json:Z
+      - ./logs:/hyperion/logs
+      - ./data:/hyperion/data
+      - ./config.yaml:/hyperion/config.yaml
+      - ./firebase.json:/hyperion/firebase.json