Skip to content

build(node): move to Node 26.12.1 (security release) #49

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
evereq merged 2 commits into from
Oct 23, 2026
Merged

build(node): move to Node 26.12.1 (security release) #49

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
c9c37f1
build(node): move to Node 26.12.1 (security release)
evereq Oct 23, 2026
7d37fec
build(docker): pin Yarn classic to 1.22.22 in the API image
evereq Oct 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 9 additions & 5 deletions .deploy/api/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -44,7 +44,7 @@ ARG PM2_SECRET_KEY
ARG PM2_MACHINE_NAME
ARG IS_DISABLE_AUTH

FROM node:24-alpine3.23 AS dependencies
FROM node:26.12.1-alpine3.23 AS dependencies

LABEL maintainer="ever@ever.co"
LABEL org.opencontainers.image.source https://github.com/ever-co/ever-ever-api-starter-kit
Expand All @@ -60,7 +60,7 @@ RUN apk --update add bash && npm i -g npm@9 \
snappy libheif dos2unix gcc g++ snappy-dev git libgcc libstdc++ linux-headers autoconf automake make nasm vips-dev vips

RUN npm install --quiet node-gyp@11.2.0 -g
RUN npm install yarn -g --force
RUN npm install yarn@1.22.22 -g --force
RUN mkdir /srv/ever-api-starter-kit && chown -R node:node /srv/ever-api-starter-kit

COPY wait .deploy/api/entrypoint.prod.sh .deploy/api/entrypoint.compose.sh /
Expand All @@ -76,7 +76,7 @@ COPY --chown=node:node package.json yarn.lock ./
RUN yarn install --network-timeout 1000000 --frozen-lockfile && yarn cache clean

# development
FROM node:24-alpine3.23 AS development
FROM node:26.12.1-alpine3.23 AS development

USER node:node

Expand All @@ -87,12 +87,16 @@ COPY --chown=node:node --from=dependencies /srv/ever-api-starter-kit .
COPY . .

# build
FROM node:24-alpine3.23 AS build
FROM node:26.12.1-alpine3.23 AS build

WORKDIR /srv/ever-api-starter-kit

RUN mkdir dist

# node:26 images no longer bundle Yarn (the dependencies stage installs it, but globals do not
# carry across stages). Install Yarn classic (packageManager: yarn@1.22.22) for `yarn build:prod` below.
RUN npm install yarn@1.22.22 -g --force

COPY --chown=node:node --from=development /srv/ever-api-starter-kit .

ENV NODE_OPTIONS=${NODE_OPTIONS:-"--max-old-space-size=4000"}
Expand All @@ -104,7 +108,7 @@ ENV IS_DOCKER=true
RUN yarn build:prod

# production
FROM node:24-alpine3.23 AS production
FROM node:26.12.1-alpine3.23 AS production

WORKDIR /srv/ever-api-starter-kit

Expand Down
Loading