From d1f55de14e9748b4e1fac0ba165deea4a24b11d7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 23 Jul 2026 07:33:04 +0000 Subject: [PATCH] chore(deps): Bump node from 20-slim to 26-slim in /apps/web Bumps node from 20-slim to 26-slim. --- updated-dependencies: - dependency-name: node dependency-version: 26-slim dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- apps/web/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/web/Dockerfile b/apps/web/Dockerfile index fb97153d..1f2270e0 100644 --- a/apps/web/Dockerfile +++ b/apps/web/Dockerfile @@ -1,6 +1,6 @@ # Build the Vite app, then serve the static bundle with nginx. # Build context = repo root (this is an npm workspace: the only lockfile is the root package-lock.json). -FROM node:20-slim@sha256:2cf067cfed83d5ea958367df9f966191a942351a2df77d6f0193e162b5febfc0 AS build +FROM node:26-slim@sha256:715e55e4b84e4bb0ff48e49b398a848f08e55daed8eb6a0ea1839ae53bc57583 AS build WORKDIR /repo # Manifests + lockfile first, so `npm ci` is a reproducible, cache-friendly layer that only re-runs when # deps change — not on every source edit. `npm ci` (vs `npm install`) installs EXACTLY the locked tree