Fix Docker build with pnpm@latest (#27)

* Move pnpm overrides to pnpm-workspace.yaml

The 'pnpm' field in package.json is no longer read by recent pnpm
versions (used by the Dockerfile via 'pnpm@latest'), causing
ERR_PNPM_LOCKFILE_CONFIG_MISMATCH on 'pnpm install --frozen-lockfile'.
Move the overrides to pnpm-workspace.yaml, the new home for these
settings, and update the Dockerfile to copy it.

* Skip dependency lifecycle scripts in Docker build

pnpm 11 (used by 'pnpm@latest' in the Dockerfile) treats ignored
build scripts as a hard error rather than the warning pnpm 10
produced, blocking the Docker build on esbuild's postinstall.
Pass --ignore-scripts to explicitly skip dependency lifecycle
scripts (esbuild's per-platform binaries are already provided by
its @esbuild/* sub-packages, so its postinstall is not required).

Author: BlueManCZ

frontend/Dockerfile

@@ -6,8 +6,8 @@ RUN corepack enable && corepack prepare pnpm@latest --activate
 
 WORKDIR /app
 
-COPY package.json pnpm-lock.yaml ./
-RUN pnpm install --frozen-lockfile
+COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
+RUN pnpm install --frozen-lockfile --ignore-scripts
 
 COPY . .
 

frontend/package.json

@@ -56,11 +56,5 @@
         "orval": "^8.5.1",
         "typescript": "~5.9.3",
         "vite": "^7.3.3"
-    },
-    "pnpm": {
-        "overrides": {
-            "brace-expansion@>=2.0.0 <2.0.3": ">=2.0.3",
-            "socket.io-parser@>=4.0.0 <4.2.6": ">=4.2.6"
-        }
     }
 }

frontend/pnpm-workspace.yaml

@@ -0,0 +1,3 @@
+overrides:
+  brace-expansion@>=2.0.0 <2.0.3: '>=2.0.3'
+  socket.io-parser@>=4.0.0 <4.2.6: '>=4.2.6'