@@ -38,7 +38,7 @@ user-invocable: false
## Build & Development Tools
### Package Management
-- **pnpm** 10.4.1 - Package manager (faster, more efficient than npm/yarn)
+- **pnpm** Package manager (faster, more efficient than npm/yarn)
### Monorepo Orchestration
- **Turborepo** ^2.1.3 - Build system with caching and parallelization
@@ -39,7 +39,7 @@
**Main issues:**
- `COPY . .` includes the entire monorepo in the build layer
-- pnpm version is hardcoded (`PNPM_VERSION="10.4.1"`)
+- pnpm version is hardcoded (`PNPM_VERSION="10.32.1"`)
- Typo in `---frozen-lockfile`
- Base image is node:20-slim (prone to CVE accumulation)
- No memory management flags
@@ -20,7 +20,7 @@ RUN --mount=type=cache,target=/var/lib/apt,sharing=locked \
apt-get update && apt-get install -y ca-certificates wget --no-install-recommends
# install pnpm
-RUN wget -qO- https://get.pnpm.io/install.sh | ENV="$HOME/.shrc" SHELL="$(which sh)" PNPM_VERSION="10.4.1" sh -
+RUN wget -qO- https://get.pnpm.io/install.sh | ENV="$HOME/.shrc" SHELL="$(which sh)" PNPM_VERSION="10.32.1" sh -
ENV PNPM_HOME=$PNPM_HOME
ENV PATH="$PNPM_HOME:$PATH"
@@ -13,7 +13,7 @@ WORKDIR ${optDir}
RUN apt-get update && apt-get install -y ca-certificates wget --no-install-recommends \
- && wget -qO- https://get.pnpm.io/install.sh | ENV="$HOME/.shrc" SHELL="$(which sh)" PNPM_VERSION="10.4.1" sh -
+ && wget -qO- https://get.pnpm.io/install.sh | ENV="$HOME/.shrc" SHELL="$(which sh)" PNPM_VERSION="10.32.1" sh -
ENV PNPM_HOME="/root/.local/share/pnpm"
@@ -20,7 +20,7 @@
"bugs": {
"url": "https://github.com/growilabs/growi/issues"
},
- "packageManager": "pnpm@10.4.1",
+ "packageManager": "pnpm@10.32.1",
"scripts": {
"bootstrap": "pnpm install",
"start": "pnpm run app:server",