From f566f5d92c1799872a89ed0f262782ff2a4f681c Mon Sep 17 00:00:00 2001
From: Aleksandr Pasevin <pasevin@gmail.com>
Date: Tue, 21 Jul 2026 00:39:38 +0100
Subject: [PATCH] fix(ci): align Docker Node 26 and Anchore scan with
 role-manager

Staging deploy failed on Grype DB hydration, not the app build. Bump
anchore/scan-action to v7.4.0 and match role-manager's node:26-slim image.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 .github/workflows/docker-prod.yaml | 2 +-
 .github/workflows/docker-stg.yaml  | 2 +-
 .nvmrc                             | 2 +-
 Dockerfile                         | 4 ++--
 4 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/docker-prod.yaml b/.github/workflows/docker-prod.yaml
index 5e5394ac..38f4d31f 100644
--- a/.github/workflows/docker-prod.yaml
+++ b/.github/workflows/docker-prod.yaml
@@ -90,7 +90,7 @@ jobs:
             routescan_api_key=${{ secrets.VITE_APP_CFG_SERVICE_ROUTESCAN_API_KEY }}
 
       - name: Scan Docker image
-        uses: anchore/scan-action@df395807f4554463d4455b8047cf58e37b6acaae # v6.5.0
+        uses: anchore/scan-action@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2 # v7.4.0
         id: scan
         with:
           image: ${{ env.REGISTRY }}/contracts-ui-builder-prod:${{ github.sha }}
diff --git a/.github/workflows/docker-stg.yaml b/.github/workflows/docker-stg.yaml
index 116e68f1..e697a8fe 100644
--- a/.github/workflows/docker-stg.yaml
+++ b/.github/workflows/docker-stg.yaml
@@ -97,7 +97,7 @@ jobs:
             routescan_api_key=${{ secrets.VITE_APP_CFG_SERVICE_ROUTESCAN_API_KEY }}
 
       - name: Scan Docker image
-        uses: anchore/scan-action@df395807f4554463d4455b8047cf58e37b6acaae # v6.5.0
+        uses: anchore/scan-action@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2 # v7.4.0
         id: scan
         with:
           image: ${{ env.REGISTRY }}/contracts-ui-builder-stg:${{ github.sha }}
diff --git a/.nvmrc b/.nvmrc
index 2bd5a0a9..6f4247a6 100644
--- a/.nvmrc
+++ b/.nvmrc
@@ -1 +1 @@
-22
+26
diff --git a/Dockerfile b/Dockerfile
index 189a59cc..effcb05f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # Build stage
-FROM node:22-slim@sha256:752ea8a2f758c34002a0461bd9f1cee4f9a3c36d48494586f60ffce1fc708e0e AS builder
+FROM node:26-slim@sha256:a1d9d671994fc2d26e297ac56b4b1522a8bc7fa71c43b14cd1b1fe6c5116f7dc AS builder
 
 WORKDIR /builder
 
@@ -77,7 +77,7 @@ RUN --mount=type=secret,id=etherscan_api_key \
         pnpm build'
 
 # Runtime stage - using a slim image for a smaller footprint
-FROM node:22-slim@sha256:752ea8a2f758c34002a0461bd9f1cee4f9a3c36d48494586f60ffce1fc708e0e AS runner
+FROM node:26-slim@sha256:a1d9d671994fc2d26e297ac56b4b1522a8bc7fa71c43b14cd1b1fe6c5116f7dc AS runner
 
 # Set NODE_ENV to production for the final runtime image
 ENV NODE_ENV=production