mosaic/stack
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases 2 Wiki Activity

fix(#180): Update pnpm to 10.27.0 in Dockerfiles

Browse Source 
Updated pnpm version from 10.19.0 to 10.27.0 to fix HIGH severity
vulnerabilities (CVE-2025-69262, CVE-2025-69263, CVE-2025-6926).

Changes:
- apps/api/Dockerfile: line 8
- apps/web/Dockerfile: lines 8 and 81

Fixes #180
This commit is contained in:
Jason Woltje
2026-02-01 20:52:43 -06:00
parent 6c065a79e6
commit a5416e4a66
15 changed files with 7175 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
apps/web/Dockerfile
View File

@@ -5,7 +5,7 @@
FROM node:20-alpine AS base
# Install pnpm globally
RUN corepack enable && corepack prepare pnpm@10.19.0 --activate
RUN corepack enable && corepack prepare pnpm@10.27.0 --activate
# Set working directory
WORKDIR /app
@@ -78,7 +78,7 @@ RUN mkdir -p ./apps/web/public
FROM node:20-alpine AS production
# Install pnpm (needed for pnpm start command)
RUN corepack enable && corepack prepare pnpm@10.19.0 --activate
RUN corepack enable && corepack prepare pnpm@10.27.0 --activate
# Install dumb-init for proper signal handling
RUN apk add --no-cache dumb-init