fix(backend): dependency issues (#3703)

cozminu · mkurapov · commit fdedc33b7844 · 2025-10-27T14:20:14.000+01:00
* fix(backend): critical issue with ssl

* fix(deps): old version of alpine

* fix(deps): old version of alpine

* fix(deps): npm packages

* fix deps

* fix axios deps

* fix deps

* fix deps

* fix deps
# Conflicts:
#	package.json
#	pnpm-lock.yaml
diff --git a/localenv/mock-account-servicing-entity/Dockerfile b/localenv/mock-account-servicing-entity/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:20-alpine3.20 AS base
+FROM node:20-alpine3.21 AS base
 
 WORKDIR /home/rafiki
 
@@ -29,7 +29,7 @@ RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
     --prod \
     | grep -v "cross-device link not permitted\|Falling back to copying packages from store"
 
-FROM base AS builder   
+FROM base AS builder
 
 COPY package.json pnpm-workspace.yaml .npmrc tsconfig.json tsconfig.build.json ./
 COPY localenv/mock-account-servicing-entity ./localenv/mock-account-servicing-entity
@@ -42,7 +42,7 @@ RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
     --frozen-lockfile
 RUN pnpm --filter mock-account-servicing-entity build
 
-FROM node:20-alpine3.20 AS runner
+FROM node:20-alpine3.21 AS runner
 
 WORKDIR /home/rafiki
 
diff --git a/localenv/mock-account-servicing-entity/package.json b/localenv/mock-account-servicing-entity/package.json
@@ -17,7 +17,7 @@
     "@remix-run/serve": "^2.16.4",
     "@types/node": "^18.7.12",
     "@types/uuid": "^9.0.8",
-    "axios": "^1.8.2",
+    "axios": "^1.12.0",
     "class-variance-authority": "^0.7.1",
     "graphql": "^16.11.0",
     "json-canonicalize": "^1.0.6",
diff --git a/package.json b/package.json
@@ -72,7 +72,9 @@
       "dset@<3.1.4": ">=3.1.4",
       "path-to-regexp@>=0.1.7": "^0.1.12",
       "path-to-regexp@>=6.3.0": "^6.3.0",
-      "next": "^15.2.3"
+      "next": "^15.2.3",
+      "form-data": "^4.0.4",
+      "sha.js": ">=2.4.12"
     }
   }
 }
diff --git a/packages/auth/Dockerfile.dev b/packages/auth/Dockerfile.dev
@@ -1,4 +1,4 @@
-FROM node:20-alpine3.20
+FROM node:20-alpine3.21
 
 RUN adduser -D rafiki
 WORKDIR /home/rafiki
diff --git a/packages/auth/Dockerfile.prod b/packages/auth/Dockerfile.prod
@@ -1,4 +1,4 @@
-FROM node:20-alpine3.20 AS base
+FROM node:20-alpine3.21 AS base
 
 WORKDIR /home/rafiki
 
@@ -30,7 +30,7 @@ RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
     --prod \
     | grep -v "cross-device link not permitted\|Falling back to copying packages from store"
 
-FROM base AS builder   
+FROM base AS builder
 
 COPY package.json pnpm-workspace.yaml .npmrc tsconfig.json tsconfig.build.json ./
 COPY packages/auth ./packages/auth
@@ -43,7 +43,7 @@ RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
     --frozen-lockfile
 RUN pnpm --filter auth build
 
-FROM node:20-alpine3.20 AS runner
+FROM node:20-alpine3.21 AS runner
 
 RUN adduser -D rafiki
 
diff --git a/packages/auth/package.json b/packages/auth/package.json
@@ -35,7 +35,7 @@
     "@koa/cors": "^5.0.0",
     "@koa/router": "^12.0.2",
     "ajv": "^8.12.0",
-    "axios": "^1.8.2",
+    "axios": "^1.12.0",
     "dotenv": "^16.4.7",
     "graphql": "^16.11.0",
     "ioredis": "^5.3.2",
diff --git a/packages/backend/Dockerfile.dev b/packages/backend/Dockerfile.dev
@@ -1,4 +1,4 @@
-FROM node:20-alpine3.20
+FROM node:20-alpine3.21
 
 RUN adduser -D rafiki
 WORKDIR /home/rafiki
diff --git a/packages/backend/Dockerfile.prod b/packages/backend/Dockerfile.prod
@@ -1,4 +1,4 @@
-FROM node:20-alpine3.20 AS base
+FROM node:20-alpine3.21 AS base
 
 WORKDIR /home/rafiki
 
@@ -30,7 +30,7 @@ RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
     --prod \
     | grep -v "cross-device link not permitted\|Falling back to copying packages from store"
 
-FROM base AS builder   
+FROM base AS builder
 
 COPY package.json pnpm-workspace.yaml .npmrc tsconfig.json tsconfig.build.json ./
 COPY packages/backend ./packages/backend
@@ -43,7 +43,7 @@ RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
     --frozen-lockfile
 RUN pnpm --filter backend build
 
-FROM node:20-alpine3.20 AS runner
+FROM node:20-alpine3.21 AS runner
 
 # Since this is from a fresh image, we need to first create the Rafiki user
 RUN adduser -D rafiki
diff --git a/packages/backend/package.json b/packages/backend/package.json
@@ -73,7 +73,7 @@
     "@opentelemetry/sdk-node": "^0.52.1",
     "@opentelemetry/sdk-trace-node": "^1.25.1",
     "ajv": "^8.12.0",
-    "axios": "1.8.2",
+    "axios": "^1.12.0",
     "base64url": "^3.0.1",
     "dotenv": "^16.4.7",
     "extensible-error": "^1.0.2",
diff --git a/packages/frontend/Dockerfile.dev b/packages/frontend/Dockerfile.dev
@@ -1,4 +1,4 @@
-FROM node:20-alpine3.20 AS base
+FROM node:20-alpine3.21 AS base
 
 RUN adduser -D rafiki
 WORKDIR /home/rafiki
diff --git a/packages/frontend/Dockerfile.prod b/packages/frontend/Dockerfile.prod
@@ -1,4 +1,4 @@
-FROM node:20-alpine3.20 AS base
+FROM node:20-alpine3.21 AS base
 
 WORKDIR /home/rafiki
 
@@ -28,7 +28,7 @@ RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
     --prod \
     | grep -v "cross-device link not permitted\|Falling back to copying packages from store"
 
-FROM base AS builder   
+FROM base AS builder
 
 COPY package.json pnpm-workspace.yaml .npmrc tsconfig.json tsconfig.build.json ./
 COPY packages/frontend ./packages/frontend
@@ -40,7 +40,7 @@ RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
     --frozen-lockfile
 RUN pnpm --filter frontend build
 
-FROM node:20-alpine3.20 AS runner
+FROM node:20-alpine3.21 AS runner
 RUN adduser -D rafiki
 WORKDIR /home/rafiki
 
diff --git a/packages/frontend/package.json b/packages/frontend/package.json
@@ -20,7 +20,7 @@
     "@remix-run/node": "^2.16.4",
     "@remix-run/react": "^2.16.4",
     "@remix-run/serve": "^2.16.4",
-    "axios": "^1.8.2",
+    "axios": "^1.12.0",
     "class-variance-authority": "^0.7.1",
     "graphql": "^16.11.0",
     "ilp-packet": "3.1.4-alpha.2",
diff --git a/packages/token-introspection/package.json b/packages/token-introspection/package.json
@@ -27,7 +27,7 @@
   "dependencies": {
     "@interledger/open-payments": "7.0.0",
     "@interledger/openapi": "2.0.2",
-    "axios": "^1.8.2",
+    "axios": "^1.12.0",
     "pino": "^8.19.0"
   }
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

Original file line number	Diff line number	Diff line change
`@@ -72,7 +72,9 @@`
`72`	`72`	`"dset@<3.1.4": ">=3.1.4",`
`73`	`73`	`"path-to-regexp@>=0.1.7": "^0.1.12",`
`74`	`74`	`"path-to-regexp@>=6.3.0": "^6.3.0",`
`75`		`- "next": "^15.2.3"`
	`75`	`+ "next": "^15.2.3",`
	`76`	`+ "form-data": "^4.0.4",`
	`77`	`+ "sha.js": ">=2.4.12"`
`76`	`78`	`}`
`77`	`79`	`}`
`78`	`80`	`}`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM node:20-alpine3.20`
	`1`	`+FROM node:20-alpine3.21`
`2`	`2`
`3`	`3`	`RUN adduser -D rafiki`
`4`	`4`	`WORKDIR /home/rafiki`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM node:20-alpine3.20 AS base`
	`1`	`+FROM node:20-alpine3.21 AS base`
`2`	`2`
`3`	`3`	`RUN adduser -D rafiki`
`4`	`4`	`WORKDIR /home/rafiki`