bump versions

dev.dockerfile

@@ -0,0 +1,14 @@
+FROM node:26-alpine3.23 AS build
+
+COPY . /src
+
+RUN cd /src \
+    && apk add pnpm \
+    && pnpm install \
+    && pnpm run build
+
+# Stage 1: build
+
+FROM nginx:mainline-alpine AS serve
+
+COPY --from=build /src/dist /usr/share/nginx/html

docker-compose.yml

@@ -1,6 +1,8 @@
 services:
   server:
-    build: .
+    build:
+      dockerfile: dev.dockerfile
+      context: .
     restart: unless-stopped
     ports:
       - "8080:80"

pnpm-workspace.yaml

@@ -1,3 +1,19 @@
 allowBuilds:
   esbuild: true
   sharp: true
+overrides:
+  astro@<5.14.3: '>=5.14.3'
+  astro@<5.15.8: '>=5.15.8'
+  astro@<5.15.9: '>=5.15.9'
+  astro@<6.1.10: '>=6.1.10'
+  astro@<6.1.6: '>=6.1.6'
+  astro@<6.3.3: '>=6.3.3'
+  astro@<6.4.6: '>=6.4.6'
+  astro@<=5.15.6: '>=5.15.8'
+  astro@>=2.10.10 <5.18.1: '>=5.18.1'
+  astro@>=2.16.0 <5.15.5: '>=5.15.5'
+  astro@>=5.13.4 <5.13.10: '>=5.13.10'
+  astro@>=5.2.0 <5.15.6: '>=5.15.6'
+  devalue@>=5.6.3 <=5.8.0: '>=5.8.1'
+  js-yaml@<=4.1.1: '>=4.2.0'
+  vite@<=6.4.2: '>=6.4.3'

prod.dockerfile

@@ -1,4 +1,4 @@
-FROM node:25-alpine3.22 AS build-page
+FROM node:26.3.1-alpine3.23 AS build-page
 
 COPY . /src
 
@@ -9,9 +9,9 @@ RUN cd /src \
 
 # Stage 1: build
 
-FROM debian:13 AS build-server
+FROM debian:trixie-20260610 AS build-server
 
-ARG NGINX_VERSION=1.30.0
+ARG NGINX_VERSION=1.31.2
 ARG ZSTD_MODULE_VERSION=0.1.1
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
@@ -48,7 +48,7 @@ RUN ./configure \
 
 # Stage 2: hardened runtime
 
-FROM dhi.io/nginx:1.30.0-debian13
+FROM dhi.io/nginx:1.31.2-debian13
 
 COPY --from=build-server /usr/sbin/nginx /usr/sbin/nginx
 COPY --from=build-server /etc/nginx /etc/nginx