Chore/deps security overrides

.npmrc

@@ -3,3 +3,5 @@ strict-peer-dependencies=false
 auto-install-peers=true
 prefer-frozen-lockfile=true
 enable-pre-post-scripts=true
+engine-strict=true
+confirmModulesPurge=false

.nvmrc

@@ -0,0 +1 @@
+26

Dockerfile

@@ -1,7 +1,9 @@
-FROM node:24-alpine AS base
+FROM node:26-alpine AS base
 ENV PNPM_HOME="/pnpm"
 ENV PATH="$PNPM_HOME:$PATH"
-RUN corepack enable
+
+RUN npm install -g pnpm@latest
+
 # Runtime-only native deps (OpenSSL for Prisma engine, CA certs for TLS)
 RUN apk add --no-cache openssl ca-certificates
 

package.json

@@ -42,7 +42,7 @@
             "prettier --write --ignore-unknown"
         ]
     },
-    "packageManager": "pnpm@10.33.2",
+    "packageManager": "pnpm@11.1.3",
     "dependencies": {
         "@aws-sdk/client-s3": "^3.1048.0",
         "@fastify/awilix": "^8.2.0",
@@ -93,7 +93,7 @@
     },
     "pnpm": {
         "overrides": {
-            "hono": "4.12.12",
+            "hono": "4.12.18",
             "@hono/node-server": "1.19.13",
             "fast-xml-parser": "^5.5.7",
             "lodash": "4.17.23",
@@ -103,7 +103,11 @@
             "brace-expansion": "^5.0.5",
             "fast-jwt": "6.2.4",
             "fast-uri": ">=3.1.2",
-            "vite": "8.0.8"
+            "vite": "8.0.8",
+            "ws": ">=8.20.1"
         }
+    },
+    "engines": {
+        "node": ">25"
     }
 }

pnpm-workspace.yaml

@@ -1,3 +1,8 @@
+allowBuilds:
+  '@prisma/engines': true
+  argon2: true
+  esbuild: true
+  prisma: true
 ignoredBuiltDependencies:
   - '@prisma/engines'
   - argon2