Fix #176: copy pnpm-workspace.yaml in docker web stage #177
No reviewers
Labels
No labels
actions
bug
cli
duplicate
enhancement
fork
forum
git storage
help wanted
insights
invalid
issues
moderation
oidc
ownership transfer
packages
pr/merge protection rules
projects
pull requests
question
releases
sponsorships
tags
webhooks
wiki
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set
Reference
crueber/walhub!177
Loading…
Reference in a new issue
No description provided.
Delete branch "fix/issue-176"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
One-line fix: the web stage pre-install COPY now includes web/pnpm-workspace.yaml, so pnpm install sees allowBuilds + minimumReleaseAgeExclude (dompurify@3.4.15, #174).
Acceptance: full
docker buildfrom a clean scratch worktree went green end to end — web stage install passes supply-chain policy, vite + SDK bundle build, Go stage embeds dist, runtime image exported as walhub:fix176. No dependency changes; no other Dockerfile changes.The web stage COPYed only package.json + pnpm-lock.yaml before install, omitting pnpm-workspace.yaml which carries allowBuilds: {esbuild: true} and minimumReleaseAgeExclude for dompurify@3.4.15 (added in #174). The image build failed at pnpm install with ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION. Verified with a full docker build to green (web install + vite/SDK build, Go embed of dist).