[pull] master from canada-ca:master

frontend/Dockerfile

@@ -1,13 +1,13 @@
-FROM node:20.18.1-alpine3.19 as build-env
+FROM node:24.19.0-alpine3.24 as build-env
 
 WORKDIR /app
 
 # Copy in whatever isn't filtered by .dockerignore
 COPY . .
 
-RUN npm ci && npm run build && npm prune --production
+RUN npm ci && npm run build && npm prune --omit=dev
 
-FROM node:20.18.1-alpine3.19
+FROM node:24.19.0-alpine3.24
 
 ENV HOST 0.0.0.0
 ENV PORT 3000
@@ -17,10 +17,8 @@ WORKDIR /app
 COPY --from=build-env /app .
 
 ENV NODE_ENV production
-# https://github.com/webpack/webpack/issues/14532#issuecomment-947012063
-ENV NODE_OPTIONS=--openssl-legacy-provider
 
-USER nonroot
+USER 1000:1000
 EXPOSE 3000
 
 CMD ["index.js"]

frontend/cloudbuild.yaml

@@ -1,17 +1,17 @@
 steps:
-  - name: node:20.10.0-alpine
+  - name: node:24.19.0-alpine3.24
     id: install
     dir: frontend
     entrypoint: npm
     args: ['ci']
 
-  - name: node:20.10.0-alpine
+  - name: node:24.19.0-alpine3.24
     id: lint
     dir: frontend
     entrypoint: npm
     args: ['run', 'lint']
 
-  - name: node:20.10.0-alpine
+  - name: node:24.19.0-alpine3.24
     id: lingui-extract
     dir: frontend
     entrypoint: ash
@@ -20,7 +20,7 @@ steps:
       - |
         npm run extract | tee /workspace/lingui-extract-output.txt
 
-  - name: node:20.10.0-alpine
+  - name: node:24.19.0-alpine3.24
     id: lingui-translation-check
     dir: frontend
     entrypoint: ash
@@ -37,19 +37,19 @@ steps:
           exit 1
         fi
 
-  - name: node:20.10.0-alpine
+  - name: node:24.19.0-alpine3.24
     id: lingui-compile
     dir: frontend
     entrypoint: npm
     args: ['run', 'compile']
 
-  - name: node:20.10.0-alpine
+  - name: node:24.19.0-alpine3.24
     id: build-production-bundle
     dir: frontend
     entrypoint: npm
     args: [ 'run', 'build' ]
 
-  - name: node:20.10.0-alpine
+  - name: node:24.19.0-alpine3.24
     id: test
     dir: frontend
     entrypoint: npm

frontend/package.json

@@ -6,7 +6,7 @@
     "build:dev": "webpack --env development --config webpack.config.js",
     "dev": "webpack serve --hot --env development",
     "webpack": "webpack",
-    "start": "NODE_OPTIONS=--openssl-legacy-provider node index.js",
+    "start": "node index.js",
     "start:dev": "NODE_ENV=development PORT=3300 HOST=127.0.0.1 node index.js",
     "test": "jest --silent",
     "test-coverage": "jest --coverage",

k8s/apps/bases/frontend/deployment.yaml

@@ -24,7 +24,7 @@ spec:
         seccompProfile:
           type: RuntimeDefault
       containers:
-        - image: northamerica-northeast1-docker.pkg.dev/track-compliance/tracker/frontend:master-be39a52-1787328672 # {"$imagepolicy": "flux-system:frontend"}
+        - image: northamerica-northeast1-docker.pkg.dev/track-compliance/tracker/frontend:master-adeaab4-1787671159 # {"$imagepolicy": "flux-system:frontend"}
           name: frontend
           env:
             - name: FRENCH_HOSTS