deploy-stack 0.12.0 → 0.12.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deploy-stack",
-  "version": "0.12.0",
+  "version": "0.12.3",
   "description": "Provision production-ready AWS infrastructure and CI/CD pipelines in seconds.",
   "engines": {
     "node": ">=18.0.0"

package/src/commands/init.js

@@ -61,7 +61,7 @@ export async function mainStack({ isHeadless = false, headlessOptions = {} } = {
         intro(color.bgCyan(color.black(' deploy-stack ☁️  ')));
 
         // 2. Ask for the target directory FIRST
-        const projectName = await text({
+        projectName = await text({
             message: 'Where should we generate the infrastructure? (Type "." for current directory)',
             placeholder: '.',
             initialValue: '.',
@@ -334,8 +334,10 @@ export async function mainStack({ isHeadless = false, headlessOptions = {} } = {
 
     const isGitInitialized = fsSync.existsSync(path.join(targetDir, '.git'));
 
-    const cdStep = projectName === '.' ? '' : `1. cd ${projectName}\n        `;
-    const applyStep = `${cdStep}npx deploy-stack apply`;
+    const needsCd = projectName && projectName !== '.';
+    const applyStep = needsCd
+        ? `cd ${projectName} && npx deploy-stack apply --yes`
+        : 'npx deploy-stack apply';
 
     const gitInstructions = isGitInitialized
         ? `git add . && git commit -m "chore: add AWS infrastructure and CI/CD" && git push`

package/templates/docker/nextjs.Dockerfile

@@ -2,6 +2,10 @@
 FROM node:22-alpine AS builder
 WORKDIR /app
 
+# FIX 1: Upgrade Alpine system packages & upgrade global NPM to patch 'tar' and 'pacote' CVEs
+RUN apk upgrade --no-cache && \
+    npm install -g npm@latest
+
 # Copy package files and install dependencies
 COPY package.json package-lock.json* ./
 RUN npm ci
@@ -17,6 +21,18 @@ RUN npm run build
 FROM node:22-alpine AS runner
 WORKDIR /app
 
+# FIX 2: Upgrade Alpine packages and absolutely destroy npm, yarn, and corepack
+# to eliminate all remaining Critical/High container vulnerabilities.
+RUN apk upgrade --no-cache && \
+    rm -rf /usr/local/lib/node_modules/npm \
+    /usr/local/bin/npm \
+    /usr/local/bin/npx \
+    /opt/yarn-* \
+    /usr/local/bin/yarn \
+    /usr/local/bin/yarnpkg \
+    /usr/local/lib/node_modules/corepack \
+    /usr/local/bin/corepack
+
 ENV NODE_ENV=production
 ENV PORT={{PORT}}
 ENV HOSTNAME="0.0.0.0"