build(deps): bump node from 20.17.0-alpine to 25.2.1-alpine #205
Conversation
dependabot
bot
added
dependencies
Bumps node from 20.17.0-alpine to 25.2.1-alpine. --- updated-dependencies: - dependency-name: node dependency-version: 25.2.1-alpine dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/docker/node-25.2.1-alpine
branch
from
8f97bbe to
430bfef
Compare
|
This upgrade requires a fix for corepack compatibility. The following changes need to be made to both Dockerfile.spa and Dockerfile.spa.dev: Add these lines before RUN rm -f /usr/local/bin/yarn /usr/local/bin/yarnpkg
RUN npm install -g corepack
RUN corepack enableNode.js 25.2.1-alpine has yarn version conflicts that require corepack to manage the yarn@4.2.2 specified in package.json. |
- remove conflicting yarn binaries - install and enable corepack to manage yarn@4.2.2 -resolves build failures with Node.js 25.2.1-alpine
|
To better optimize the build, instead of removing the yarn bin instead we can add a force tag to the corepack install. |
|
Reverting back to removing the pre-installed bin prior to installing corepack. The pre-installed Yarn version in Node 25.2.1-alpine is Yarn 1.x which is no longer developed and outdated. This allows corepack to manage Yarn 4.2.2 which Meshinfo specifies in package.json This also avoids potential conflicts later with only the |
Bumps node from 20.17.0-alpine to 25.2.1-alpine.
Most Recent Ignore Conditions Applied to This Pull Request
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)