Ubuntu 26.04 base (ffmpeg 8, ImageMagick 7), Valkey 9, Postgres 18 (v2.7.0)

[ttlequals0]

Fixes #67.

Base image: Ubuntu 24.04 to 26.04

• FFmpeg 6.1.1 becomes 8.0.1, ImageMagick 6.9 becomes 7.1.2 (Q16, non-HDRI variant).
• Ubuntu 26.04 ships Python 3.14; the app pins 3.12 via deadsnakes and runs from /opt/venv (psycopg2-binary has no 3.14 wheels, and 3.12 matches the tested CI matrix). Same pattern MinusPod used for its 26.04 upgrade.
• The image checker now invokes magick when present, falling back to convert on ImageMagick 6 systems (Ubuntu's IM7 packages keep convert as an alternatives symlink, but IM7 upstream deprecates it).
• The temporal-outlier ffprobe call uses pts_time - pkt_pts_time was removed in newer FFmpeg, which silently disabled that corruption signal (the parser fails soft).
• ImageMagick policy edits target /etc/ImageMagick-7 with a build-time assertion so a silent sed no-op fails the build instead of shipping default resource limits. The 26.04 policy has no PDF/HEIC coder blocks, so the old un-blocking seds are gone.
• linux-libc-dev and build headers are purged from the final image, which clears the long tail of unfixable kernel-header CVEs from scanners. The unused pebble binary in the 26.04 rootfs is removed for the same reason.

Bonus fix found during verification: the gates that classify benign ImageMagick PNG/profile warnings checked for @warning/png.c, but ImageMagick 6 and 7 both emit @ warning/png.c with a space - the benign paths were unreachable since they were written. Fixed here and in tools/fix_imagemagick_profile_warnings.py.

Valkey 9 (drop-in Redis replacement)

docker-compose broker image becomes valkey/valkey:9-alpine. The service name, all redis:// URLs, and the wire protocol are unchanged; the code uses plain RESP plus one EVAL script, all supported. The Valkey image ships redis-* compatibility symlinks.

PostgreSQL 18 (BREAKING compose default)

• compose default becomes postgres:18-alpine. A 15-era postgres_data volume will not start on the 18 image - a tested dump/restore migration guide is in docs/DOCKER_SETUP.md, and README carries the warning. Users can pin postgres:15-alpine to defer; the app supports 15 through 18.
• Found during verification: the postgres 18+ Docker images also moved the expected volume mount from /var/lib/postgresql/data to /var/lib/postgresql (major-version subdirectories, enabling pg_upgrade --link) and refuse to start with a mount at the old path. The compose file and guide cover this.

CI

New image-integration job builds the Docker image and runs the real-media parser tests inside it. The ffmpeg/ImageMagick stderr parsers fail soft (a format change yields zero detections, not an error), so only testing against the shipped binaries catches base-image regressions.

Verification

• Real-media suite inside the new image: 10/10 pass, including corruption detection, MP3 broken frames, invalid AIFF, and corrupted images on ffmpeg 8 / ImageMagick 7.
• freezedetect/blackdetect log formats and the @ warning/png.c token verified against real ffmpeg 8 / IM7 output; -regard-warnings exit-code differences between IM6 and IM7 traced through the classification paths (net effect: fewer false positives, warning-class corruption still caught).
• Fresh compose stack (postgres:18 + valkey:9 + this image): all containers healthy, admin setup, full scan via API - 5 sample files, exactly the 2 planted corrupt files flagged (ffmpeg and imagemagick respectively), scheduler lock held by the celery worker through Valkey.
• Migration guide dry-run: 5000 rows dumped from postgres:15, restored into 18.4, row counts match, collation refresh clean.
• Host suite: 475 passed, 8 skipped. Frontend builds.

Media viewer: closing the player now stops playback

Closing the viewer modal only hid it, so a playing video or audio file kept playing in the background. closeModal() now pauses any media in the modal and detaches its sources; both close paths (X button, outside click) route through it. Verified in-browser: playback stops and sources detach for video and audio.

Documentation accuracy audit

Every doc was audited against the codebase and corrected (60+ findings). The worst offenders documented endpoints that never existed (/api/scan-all, /api/stats/summary, /api/scan/parallel-v2*, /api/export/csv, /api/cleanup) with no authentication; DOCKER_SETUP.md's example compose could not have booted (nonexistent celery_app module, authenticated /health as healthcheck, missing SECRET_KEY); CONFIGURATION.md described a Celery beat and four queues that do not exist; PERFORMANCE_TUNING.md tuned env vars that appear nowhere in the code. All example clients now authenticate and call real endpoints. openapi.yaml lost a duplicate path key and a nonexistent DELETE route. A hardcoded deployment hostname was removed from FIX_INCOMPLETE_SCANS.md. The PostgreSQL 15-to-18 migration guide is linked from the README docs index and the Requirements upgrade warning.