@smi-digital/create-smi-app 2.11.0 → 2.11.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/package.json +1 -1
  2. package/templates/integrations/strapi-astro/Dockerfile.backend.template +6 -2
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@smi-digital/create-smi-app",
3
- "version": "2.11.0",
3
+ "version": "2.11.1",
4
4
  "description": "",
5
5
  "main": "dist/index.js",
6
6
  "bin": {
package/templates/integrations/strapi-astro/Dockerfile.backend.template CHANGED
@@ -11,7 +11,10 @@ RUN apk update && apk add --no-cache build-base gcc autoconf automake zlib-dev l
11
11
  WORKDIR /opt/
12
12
  COPY package.json package-lock.json* ./
13
13
  RUN npm install -g node-gyp
14
- RUN npm config set fetch-retry-maxtimeout 600000 -g && npm install
14
+ # Use `npm ci` for a deterministic install straight from the lockfile. This also
15
+ # installs sharp's pinned prebuilt musl binary (@img/sharp-linuxmusl-x64), which
16
+ # `npm install` skips when the lockfile was generated on another OS (npm/cli#4828).
17
+ RUN npm config set fetch-retry-maxtimeout 600000 -g && npm ci
15
18
  ENV PATH=/opt/node_modules/.bin:$PATH
16
19
 
17
20
  WORKDIR /opt/app
@@ -27,7 +30,8 @@ ENV NODE_ENV=${NODE_ENV}
27
30
  WORKDIR /opt/
28
31
  COPY package.json package-lock.json* ./
29
32
  RUN npm install -g node-gyp
30
- RUN npm config set fetch-retry-maxtimeout 600000 -g && npm install --omit=dev
33
+ # Deterministic prod install from the lockfile (see builder stage note re: sharp).
34
+ RUN npm config set fetch-retry-maxtimeout 600000 -g && npm ci --omit=dev
31
35
  ENV PATH=/opt/node_modules/.bin:$PATH
32
36
 
33
37
  WORKDIR /opt/app