Merge pull request #2786 from bcgov/2649-check-for-and-fix-high-severity-issues-before-test-cut-4

2649: Use latest NPM for runtime API image

Author: trslater

.github/workflows/ci.yml

@@ -48,7 +48,7 @@ jobs:
     strategy:
       matrix:
         platform: [ubuntu-latest]
-        node: ["20"]
+        node: ["24"]
     name: API Tests - ${{ matrix.node }}/${{ matrix.platform }}
     runs-on: ${{ matrix.platform }}
     steps:

.github/workflows/sonarcloud.yml

@@ -42,7 +42,7 @@ jobs:
             npm ci
             npm run test:cov
           dir: services
-          node_version: "20"
+          node_version: "24"
           sonar_args: >
             -Dsonar.exclusions=**/coverage/**,**/node_modules/**,**/*spec.ts
             -Dsonar.organization=bcgov-sonarcloud

services/Dockerfile

@@ -9,6 +9,7 @@ WORKDIR /opt/app-root/
 
 COPY --chown=node:node package*.json ./
 
+RUN npm install -g npm@11
 RUN npm ci --ignore-scripts
 
 COPY --chown=node:node . .
@@ -25,13 +26,11 @@ ARG NEST_APP=alcs
 WORKDIR /opt/app-root/
 
 COPY --chown=node:node package*.json ./
-
 COPY --chown=node:node --from=development /opt/app-root/node_modules ./node_modules
-
 COPY --chown=node:node . .
 
+RUN npm install -g npm@11
 RUN npm run build ${NEST_APP}
-
 RUN npm ci --ignore-scripts --only=production && npm cache clean --force
 
 USER node
@@ -60,6 +59,8 @@ COPY ./config/ /opt/app-root/config/
 COPY ./local-certificates /opt/app-root/local-certificates
 COPY ./templates/ /opt/app-root/templates/
 
+RUN npm install -g npm@11
+
 # Create Empty Config File if not Exists
 RUN mkdir -p /vault/secrets
 RUN touch /vault/secrets/config