fix: latest npm, deps and node

.github/workflows/pr-build.yml

@@ -21,7 +21,7 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [18.x, 20.x]
+        node-version: [20.x, 22.x]
         # See supported Node.js release schedule at https://nodejs.org/en/about/releases/
 
     steps:

Dockerfile

@@ -1,7 +1,7 @@
 # build environment
-FROM node:20-bullseye-slim AS builder
+FROM node:22-bullseye-slim AS builder
 # fix vulnerabilities
-ARG NPM_TAG=10.2.3
+ARG NPM_TAG=11.0.0
 RUN npm install -g npm@${NPM_TAG}
 # build it
 WORKDIR /build
@@ -10,7 +10,7 @@ RUN npm ci
 RUN npm run build
 
 # run environment
-FROM node:20.9.0-bullseye-slim
+FROM node:22.12.0-bullseye-slim
 # fix vulnerabilities
 # note: trivy insists this to be on the same RUN line
 RUN apt-get -y update && apt-get -y upgrade
@@ -22,7 +22,7 @@ RUN npm install -g npm@${NPM_TAG}
 COPY --chown=node:node --from=builder /build/package*.json ./
 COPY --chown=node:node --from=builder /build/dist ./
 ## install dependancies
-ENV NODE_ENV production
+ENV NODE_ENV=production
 RUN npm ci --omit=dev
 ## install signal-handler wrapper
 RUN apt-get -y install dumb-init

package.json

@@ -12,16 +12,16 @@
   "license": "EUPL-1.2",
   "devDependencies": {
     "@types/cron": "^2.0.1",
-    "@types/mustache": "^4.2.2",
     "@types/minimist": "^1.2.2",
-    "@types/node": "^22.0.3",
-    "@types/node-fetch": "^2.6.3",
-    "typescript": "^5.5.4"
+    "@types/mustache": "^4.2.2",
+    "@types/node": "^22.10.2",
+    "@types/node-fetch": "^2.6.12",
+    "typescript": "^5.7.2"
   },
   "dependencies": {
-    "cron": "^3.1.7",
-    "mustache": "^4.2.0",
+    "cron": "^3.3.1",
     "minimist": "^1.2.8",
+    "mustache": "^4.2.0",
     "node-fetch": "^3.3.1"
   }
 }