Update docker.io/postgres Docker tag to v18

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [stalwartlabs/stalwart](https://github.com/stalwartlabs/stalwart) | minor | `v0.13.4` -> `v0.14.1` |

---

### Release Notes

<details>
<summary>stalwartlabs/stalwart (stalwartlabs/stalwart)</summary>

### [`v0.14.1`](https://github.com/stalwartlabs/stalwart/releases/tag/v0.14.1)

[Compare Source](https://github.com/stalwartlabs/stalwart/compare/v0.14.0...v0.14.1)

#### \[0.14.1] - 2025-10-28

If you are upgrading from v0.13.4 and below, this version includes **breaking changes** to the internal directory, calendar and contacts. Please read the [upgrading documentation](https://stalw.art/docs/install/upgrade) for more information on how to upgrade from previous versions.

#### Added

- Autoconfig for CalDAV, CardDAV and WebDAV ([#&#8203;1937](https://github.com/stalwartlabs/stalwart/issues/1937))

#### Changed

- HTTP: Remove HTTP STS `preload` directive.

#### Fixed

- Directory: Keep OTP Auth and AppPasswords unless the remote directory provides new ones ([#&#8203;2319](https://github.com/stalwartlabs/stalwart/issues/2319))
- JMAP: Fix `ContactCard/set` and `CalendarEvent/set` destroy methods ([#&#8203;2308](https://github.com/stalwartlabs/stalwart/issues/2308)).

<hr />

##### Check binary attestation at [here](https://github.com/stalwartlabs/stalwart/attestations/12525264)

### [`v0.14.0`](https://github.com/stalwartlabs/stalwart/releases/tag/v0.14.0)

[Compare Source](https://github.com/stalwartlabs/stalwart/compare/v0.13.4...v0.14.0)

#### \[0.14.0] - 2025-10-22

If you are upgrading from v0.13.4 and below, this version includes **breaking changes** to the internal directory, calendar and contacts. Please read the [upgrading documentation](https://stalw.art/docs/install/upgrade) for more information on how to upgrade from previous versions.

#### Added

- JMAP for Calendars ([draft-ietf-jmap-calendars](https://datatracker.ietf.org/doc/draft-ietf-jmap-calendars/)).
- JMAP for Contacts  ([RFC 9610](https://datatracker.ietf.org/doc/rfc9610/)).
- JMAP for File Storage ([draft-ietf-jmap-filenode](https://datatracker.ietf.org/doc/draft-ietf-jmap-filenode/)).
- JMAP Sharing ([RFC 9670](https://datatracker.ietf.org/doc/rfc9670/))
- CalDAV: support for `supported-calendar-component-set` ([#&#8203;1893](https://github.com/stalwartlabs/stalwart/issues/1893))
- i18n: Greek language support (contributed by [@&#8203;infl00p](https://github.com/infl00p))
- i18n: Swedish language support (contributed by [@&#8203;purung](https://github.com/purung))

#### Changed

- **Breaking Database Changes** (migrated automatically on first start):
  - Internal directory schema changed.
  - Calendar and Contacts storage schema changed.
  - Sieve scripts storage schema changed.
  - Push Subscriptions storage schema changed.
- Replaced `sieve.untrusted.limits.max-scripts` and `jmap.push.max-total` with `object-quota.*` settings.
- Cluster node roles now allow sharding.

#### Fixed

- Push Subscription: Clean-up of expired subscriptions and cluster notification of changes ([#&#8203;1248](https://github.com/stalwartlabs/stalwart/issues/1248))
- CalDAV: Per-user CalDAV properties ([#&#8203;2058](https://github.com/stalwartlabs/stalwart/issues/2058))

<hr />

##### Check binary attestation at [here](https://github.com/stalwartlabs/stalwart/attestations/12279657)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTUuNCIsInVwZGF0ZWRJblZlciI6IjQyLjUuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/1831
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/applications/audiobookshelf/values.yaml

@@ -21,7 +21,7 @@ audiobookshelf:
         apprise-api:
           image:
             repository: caronc/apprise
-            tag: 1.2.2
+            tag: 1.2.6
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/libation/values.yaml

@@ -16,7 +16,7 @@ libation:
         main:
           image:
             repository: rmcrackan/libation
-            tag: 12.7.1
+            tag: 12.7.3
             pullPolicy: IfNotPresent
           env:
             - name: SLEEP_TIME

clusters/cl01tl/applications/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:4cf7a26323427642f28a9f98f342b3ac91d356d7de0828ad2646f60647919ed4
+            tag: latest@sha256:fc076352d72154feb1d8c0eb42dd5570a3ebc9ca8c6b9c8318ce545a8dfd1ea4
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -43,7 +43,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:4cf7a26323427642f28a9f98f342b3ac91d356d7de0828ad2646f60647919ed4
+            tag: latest@sha256:fc076352d72154feb1d8c0eb42dd5570a3ebc9ca8c6b9c8318ce545a8dfd1ea4
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL

clusters/cl01tl/platform/qbittorrent/values.yaml

@@ -157,7 +157,7 @@ qbittorrent:
         apprise-api:
           image:
             repository: caronc/apprise
-            tag: 1.2.2
+            tag: 1.2.6
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/platform/stalwart/values.yaml

@@ -9,7 +9,7 @@ stalwart:
         main:
           image:
             repository: stalwartlabs/stalwart
-            tag: v0.13.4
+            tag: v0.14.1
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/services/harbor/values.yaml

@@ -34,17 +34,17 @@ harbor:
   nginx:
     image:
       repository: goharbor/nginx-photon
-      tag: v2.14.0
+      tag: v2.14.1
     replicas: 0
   portal:
     image:
       repository: goharbor/harbor-portal
-      tag: v2.14.0
+      tag: v2.14.1
     replicas: 2
   core:
     image:
       repository: goharbor/harbor-core
-      tag: v2.14.0
+      tag: v2.14.1
     replicas: 2
     existingSecret: harbor-secret
     secretName: harbor-secret
@@ -52,7 +52,7 @@ harbor:
   jobservice:
     image:
       repository: goharbor/harbor-jobservice
-      tag: v2.14.0
+      tag: v2.14.1
     replicas: 2
     jobLoggers:
       - stdout
@@ -61,11 +61,11 @@ harbor:
     registry:
       image:
         repository: goharbor/registry-photon
-        tag: v2.14.0
+        tag: v2.14.1
     controller:
       image:
         repository: goharbor/harbor-registryctl
-        tag: v2.14.0
+        tag: v2.14.1
     existingSecret: harbor-secret
     relativeurls: true
     credentials:
@@ -92,7 +92,7 @@ harbor:
   exporter:
     image:
       repository: goharbor/harbor-exporter
-      tag: v2.14.0
+      tag: v2.14.1
     replicas: 2
 postgres-17-cluster:
   mode: recovery

hosts/ps10rp/gitea/compose.yaml

@@ -19,7 +19,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     postgresql:
-        image: docker.io/postgres:17.7-alpine3.21
+        image: docker.io/postgres:18.1-alpine3.21
         container_name: gitea-postgres
         env_file:
             - .env