Postgres version question. spicedb v1.44.4 shows a max tested revision of postgres of 17.2, but 17.5 has a number of cve fixes. Is this just a matter of the minor version not having been tested, or are there any known gotchas using 17.5 as a datastore for v1.44.4?

no known gotchas; to my knowledge it's just that we haven't updated the testing matrix.