From 8d19b8cb6303ef0d91fdf1f08411b7eebbf54395 Mon Sep 17 00:00:00 2001
From: neo773 <62795688+neo773@users.noreply.github.com>
Date: Sun, 25 Oct 2026 01:13:53 +0530
Subject: [PATCH] chore(docker): run api and web on Node 26.12.1

Pins the runtime and build stages to the October 2026 security release
instead of the floating node:22-slim tag.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
---
 Dockerfile.api | 4 ++--
 Dockerfile.web | 4 ++--
 README.md      | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/Dockerfile.api b/Dockerfile.api
index d0244ae..96b7c99 100644
--- a/Dockerfile.api
+++ b/Dockerfile.api
@@ -7,7 +7,7 @@ COPY packages/macgamingdb-emails/package.json packages/macgamingdb-emails/
 COPY packages/macgamingdb-ui/package.json packages/macgamingdb-ui/
 RUN bun install --frozen-lockfile
 
-FROM node:22-slim AS build
+FROM node:26.12.1-slim AS build
 WORKDIR /app
 COPY --from=deps /app ./
 COPY packages ./packages
@@ -15,7 +15,7 @@ RUN node node_modules/typescript/bin/tsc -p packages/macgamingdb-shared/tsconfig
   && node node_modules/typescript/bin/tsc -p packages/macgamingdb-emails/tsconfig.build.json \
   && node node_modules/typescript/bin/tsc -p packages/macgamingdb-server/tsconfig.build.json
 
-FROM node:22-slim AS runner
+FROM node:26.12.1-slim AS runner
 WORKDIR /app
 ENV NODE_ENV=production
 COPY --from=build /app/node_modules ./node_modules
diff --git a/Dockerfile.web b/Dockerfile.web
index a12726f..dccc779 100644
--- a/Dockerfile.web
+++ b/Dockerfile.web
@@ -7,7 +7,7 @@ COPY packages/macgamingdb-emails/package.json packages/macgamingdb-emails/
 COPY packages/macgamingdb-ui/package.json packages/macgamingdb-ui/
 RUN bun install --frozen-lockfile
 
-FROM node:22-slim AS builder
+FROM node:26.12.1-slim AS builder
 WORKDIR /app
 COPY --from=deps /app ./
 COPY . .
@@ -18,7 +18,7 @@ RUN node node_modules/typescript/bin/tsc -p packages/macgamingdb-shared/tsconfig
   && node node_modules/typescript/bin/tsc -p packages/macgamingdb-emails/tsconfig.build.json \
   && node node_modules/vinext/dist/cli.js build
 
-FROM node:22-slim AS runner
+FROM node:26.12.1-slim AS runner
 WORKDIR /app
 ENV NODE_ENV=production
 ENV HOST=0.0.0.0
diff --git a/README.md b/README.md
index af7f7d0..f3dfcb2 100644
--- a/README.md
+++ b/README.md
@@ -47,4 +47,4 @@ Edit `packages/macgamingdb-server/src/database/schema.ts`, then `bun run db:gene
 
 ## Deployment
 
-Coolify runs `docker-compose.yml` from this repo: an internal-only `api` service (`Dockerfile.api`) and the public `web` service (`Dockerfile.web`), both on `node:22-slim`. The api container self-migrates on boot and refuses to serve if validation fails. Push to `master` → Coolify builds and deploys both.
+Coolify runs `docker-compose.yml` from this repo: an internal-only `api` service (`Dockerfile.api`) and the public `web` service (`Dockerfile.web`), both on `node:26.12.1-slim`. The api container self-migrates on boot and refuses to serve if validation fails. Push to `master` → Coolify builds and deploys both.