fix: 更新GitHub Actions和Dockerfile中的依赖版本

Author: MoeFurina

.github/workflows/release-on-version-change.yml

@@ -136,7 +136,7 @@ jobs:
           esac
 
       - name: Upload build artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ matrix.platform }}-binary
           path: release-artifacts/*
@@ -165,17 +165,16 @@ jobs:
           fetch-tags: true
 
       - name: Download build artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           path: release-artifacts
+          merge-multiple: true
 
-      - name: Flatten artifacts
+      - name: List flattened artifacts
         shell: bash
         run: |
           mkdir -p final-artifacts
-
-          find release-artifacts -type f -exec cp {} final-artifacts/ \;
-
+          cp release-artifacts/* final-artifacts/
           ls -lah final-artifacts
 
       - name: Generate release notes

Dockerfile

@@ -3,16 +3,13 @@ FROM node:lts-alpine
 RUN apk add --no-cache tini
 
 ENV NODE_ENV production
+USER node
 
 WORKDIR /app
 
-RUN corepack enable && corepack prepare pnpm@latest --activate
-
-COPY . ./
+COPY --chown=node:node . ./
 
-RUN pnpm install --frozen-lockfile
-
-USER node
+RUN yarn --network-timeout=100000
 
 EXPOSE 3000
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neteasecloudmusicapienhanced/api",
-  "version": "4.34.2",
+  "version": "4.34.3",
   "description": "全网最全的网易云音乐API接口 || A revival project for NeteaseCloudMusicApi Node.js Services (Half Refactor & Enhanced) || 网易云音乐 API 备份 + 增强 || 本项目自原版v4.28.0版本后开始自行维护",
   "scripts": {
     "dev": "nodemon app.js",