fix: upgrade base images, nodejs and pnpm

Refs: RATY-319

Author: tjgofore

.github/workflows/ci.yaml

@@ -13,5 +13,5 @@ jobs:
     secrets:
       SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
     with:
-      node-version: 22.x
+      node-version: 24.x
       extra-commands: pnpm update-runtime-env

.nvmrc

@@ -1 +1 @@
-v22.13.1
+v24.15.0

Dockerfile

@@ -1,7 +1,7 @@
 # ============================================================
 # STAGE 1: Build the Static Assets
 # ============================================================
-FROM helsinki.azurecr.io/ubi9/nodejs-22-pnpm-builder-base AS appbase
+FROM helsinki.azurecr.io/ubi9/nodejs-24-pnpm-builder-base AS appbase
 
 # 1. Copy needed files for build
 COPY --chown=default:root package.json pnpm-lock.yaml pnpm-workspace.yaml ./
@@ -48,7 +48,7 @@ RUN pnpm build
 # ============================================================
 # STAGE 4: Production Runtime
 # ============================================================
-FROM helsinki.azurecr.io/ubi9/nginx-126-spa-standard AS production
+FROM helsinki.azurecr.io/ubi10/nginx-126-spa-standard AS production
 
 ARG REACT_APP_SENTRY_RELEASE
 ENV APP_RELEASE=${REACT_APP_SENTRY_RELEASE:-""}

package.json

@@ -3,10 +3,10 @@
   "version": "1.20.5",
   "license": "MIT",
   "main": "index.js",
-  "packageManager": "pnpm@10.28.2",
+  "packageManager": "pnpm@11.1.3",
   "engines": {
-    "node": ">=22.13.1",
-    "pnpm": ">=10.28.2"
+    "node": ">=24.15.0",
+    "pnpm": ">=11.1.3"
   },
   "scripts": {
     "app:version": "echo \"$npm_package_version\"",
@@ -141,19 +141,5 @@
     "redux-mock-store": "^1.5.4",
     "vitest-fetch-mock": "^0.4.5"
   },
-  "pnpm": {
-    "overrides": {
-      "@draft-js-plugins/drag-n-drop>immutable": "3.8.3",
-      "@draft-js-plugins/editor>immutable": "3.8.3",
-      "@draft-js-plugins/focus>immutable": "3.8.3",
-      "@draft-js-plugins/image>immutable": "3.8.3",
-      "@draft-js-plugins/resizeable>immutable": "3.8.3",
-      "draft-convert>immutable": "3.8.3",
-      "draft-js-export-html>immutable": "3.8.3",
-      "draft-js-utils>immutable": "3.8.3",
-      "draft-js>immutable": "3.8.3",
-      "@typescript-eslint/typescript-estree>minimatch": "9.0.7"
-    }
-  },
   "snyk": true
 }

pnpm-lock.yaml

@@ -1,8 +1,32 @@
-# Don't allow dependencies to be used before they have been released for at least 1 week
+# Minimum age for new packages before they can be used (in minutes) – 10080 min = 1 week
 minimumReleaseAge: 10080
 
-# Don't warn about ignored build scripts
-ignoredBuiltDependencies: []
-
-# Hoist all dependencies to the root of node_modules, for better compatibility with packages that expect flat node_modules
+# Hoist all dependencies to the root of node_modules because some packages
+# (e.g. the draft-js ecosystem) do not work correctly with pnpm's default isolation strategy
 shamefullyHoist: true
+
+# Force all draft-js ecosystem packages to use immutable 3.x –
+# newer versions are not compatible with draft-js.
+# The minimatch override fixes the version used by @typescript-eslint/typescript-estree.
+overrides:
+  "@draft-js-plugins/drag-n-drop>immutable": 3.8.3
+  "@draft-js-plugins/editor>immutable": 3.8.3
+  "@draft-js-plugins/focus>immutable": 3.8.3
+  "@draft-js-plugins/image>immutable": 3.8.3
+  "@draft-js-plugins/resizeable>immutable": 3.8.3
+  "draft-convert>immutable": 3.8.3
+  "draft-js-export-html>immutable": 3.8.3
+  "draft-js-utils>immutable": 3.8.3
+  "draft-js>immutable": 3.8.3
+  "@typescript-eslint/typescript-estree>minimatch": 9.0.7
+
+# pnpm 11 requires explicit opt-in for packages that run install scripts.
+# - @parcel/watcher: used by sass and vite for file system watching
+# - core-js: does not require a native build, denied as unnecessary
+# - esbuild: downloads its native binary during installation
+# - unrs-resolver: Rust-based module resolver used by eslint-plugin-import-x
+allowBuilds:
+  "@parcel/watcher": true
+  core-js: false
+  esbuild: true
+  unrs-resolver: true