Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@

## Unreleased

- The generated Dockerfile pins the latest `node:24-alpine` image.
- The project name recorded in `.battlestack/manifest.json` now always wins over
the directory name. Before, any project command in a clone, CI checkout or
renamed directory silently renamed the project to the directory name, and
Expand Down
2 changes: 1 addition & 1 deletion packages/preset-nuxt4/src/features/docker.ts
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ const PROFILE_FLAGS = ['--profile', 'prod']
/** Production Dockerfile and `battlestack prod` commands, reusing the existing docker-compose.yml. */
export const dockerFeature: Feature = {
id: 'shared:docker',
version: '1.2.2',
version: '1.2.3',
label: 'Production Dockerfile + prod commands',
stage: STAGE.GITIGNORE,
failureIsNonFatal: true,
Expand Down
4 changes: 2 additions & 2 deletions packages/preset-nuxt4/templates/docker/Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
# Build stage

# Pinned by digest so a rebuild of the same commit gets the same base image.
FROM node:24-alpine@sha256:ebfe2f90462722a7a4de65e91990e97fe0d401c70e0e762c5b53302f905ec1c1 AS build
FROM node:24-alpine@sha256:44fce696f38ba8c987c4db89954051000bbd05ffd8d8659ba15ed4a8602e937f AS build
WORKDIR /app

# pnpm-workspace.yaml carries the `allowBuilds:` approvals for native deps and MUST land before install,
Expand Down Expand Up @@ -107,7 +107,7 @@ GUARD

# Runtime stage

FROM node:24-alpine@sha256:ebfe2f90462722a7a4de65e91990e97fe0d401c70e0e762c5b53302f905ec1c1 AS runtime
FROM node:24-alpine@sha256:44fce696f38ba8c987c4db89954051000bbd05ffd8d8659ba15ed4a8602e937f AS runtime
# The runtime only ever calls `node`; the bundled npm carries its own vulnerable dependencies.
RUN rm -rf /usr/local/lib/node_modules/npm /usr/local/lib/node_modules/corepack \
/usr/local/bin/npm /usr/local/bin/npx /usr/local/bin/corepack
Expand Down
Loading