mirror of
https://github.com/Unleash/unleash.git
synced 2024-10-18 20:09:08 +02:00
e296602174
[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [node](https://togithub.com/nodejs/node) | final | patch | `18.20.1-alpine` -> `18.20.2-alpine` | | [node](https://togithub.com/nodejs/node) | stage | patch | `18.20.1-alpine` -> `18.20.2-alpine` | --- ### Release Notes <details> <summary>nodejs/node (node)</summary> ### [`v18.20.2`](https://togithub.com/nodejs/node/releases/tag/v18.20.2): 2024-04-10, Version 18.20.2 'Hydrogen' (LTS), @​RafaelGSS [Compare Source](https://togithub.com/nodejs/node/compare/v18.20.1...v18.20.2) This is a security release. ##### Notable Changes - CVE-2024-27980 - Command injection via args parameter of `child_process.spawn` without shell option enabled on Windows ##### Commits - \[[`6627222409`](https://togithub.com/nodejs/node/commit/6627222409)] - **src**: disallow direct .bat and .cmd file spawning (Ben Noordhuis) [nodejs-private/node-private#564](https://togithub.com/nodejs-private/node-private/pull/564) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 7pm every weekday,before 5am every weekday" in timezone Europe/Madrid, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/Unleash/unleash). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yNjkuMiIsInVwZGF0ZWRJblZlciI6IjM3LjI2OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
39 lines
813 B
Docker
39 lines
813 B
Docker
ARG NODE_VERSION=18.20.2-alpine
|
|
|
|
FROM node:$NODE_VERSION as builder
|
|
|
|
WORKDIR /unleash
|
|
|
|
COPY . /unleash
|
|
|
|
RUN yarn config set network-timeout 300000
|
|
|
|
RUN yarn install --frozen-lockfile --ignore-scripts && yarn prepare:backend && yarn local:package
|
|
|
|
# frontend/build should already exist (it needs to be built in the local filesystem but in case of a fresh build we'll build it here)
|
|
RUN yarn build:frontend:if-needed
|
|
|
|
RUN mkdir -p /unleash/build/frontend && mv /unleash/frontend/build /unleash/build/frontend/build
|
|
|
|
WORKDIR /unleash/docker
|
|
|
|
RUN yarn install --frozen-lockfile --production=true
|
|
|
|
FROM node:$NODE_VERSION
|
|
|
|
ENV NODE_ENV production
|
|
|
|
ENV TZ UTC
|
|
|
|
WORKDIR /unleash
|
|
|
|
COPY --from=builder /unleash/docker /unleash
|
|
|
|
RUN rm -rf /usr/local/lib/node_modules/npm/
|
|
|
|
EXPOSE 4242
|
|
|
|
USER node
|
|
|
|
CMD ["node", "index.js"]
|