fix: update deploy.yml and node version (eesast#1462)

.github/workflows/deploy.yml

@@ -16,7 +16,7 @@ jobs:
       - name: Use Node.js ${{matrix.node-version}}
         uses: actions/setup-node@v4
         with:
-          node-version: "20.5.0"
+          node-version: "22.3.0"
 
       - name: get yarn cache path
         id: yarn-cache-dir-path

Dockerfile

@@ -20,7 +20,7 @@ RUN yarn build
 
 # Runner stage
 
-FROM node:22.11.0-alpine
+FROM node:22.3.0-alpine
 ENV NODE_ENV=production
 WORKDIR /home/node/app
 

package.json

@@ -24,7 +24,7 @@
     "dotenv": "16.4.5",
     "express": "4.21.1",
     "graphql": "16.9.0",
-    "graphql-request": "7.1.1",
+    "graphql-request": "6.1.0",
     "html-to-text": "9.0.5",
     "isemail": "3.2.0",
     "js-yaml": "4.1.0",

yarn.lock

@@ -2031,6 +2031,13 @@ [email protected]:
   dependencies:
     cross-spawn "^7.0.1"
 
+cross-fetch@^3.1.5:
+  version "3.1.8"
+  resolved "https://registry.yarnpkg.com/cross-fetch/-/cross-fetch-3.1.8.tgz#0327eba65fd68a7d119f8fb2bf9334a1a7956f82"
+  integrity sha512-cvA+JwZoU0Xq+h6WkMvAUqPEYy92Obet6UdKLfW60qn99ftItKjB5T+BkyWOFWe2pUyfQ+IJHmpOTznqk1M6Kg==
+  dependencies:
+    node-fetch "^2.6.12"
+
 cross-spawn@^7.0.1, cross-spawn@^7.0.2, cross-spawn@^7.0.3:
   version "7.0.3"
   resolved "https://registry.yarnpkg.com/cross-spawn/-/cross-spawn-7.0.3.tgz#f73a85b9d5d41d045551c177e2882d4ac85728a6"
@@ -2895,12 +2902,13 @@ graphemer@^1.4.0:
   resolved "https://registry.yarnpkg.com/graphemer/-/graphemer-1.4.0.tgz#fb2f1d55e0e3a1849aeffc90c4fa0dd53a0e66c6"
   integrity sha512-EtKwoO6kxCL9WO5xipiHTZlSzBm7WLT627TqC/uVRd0HKmq8NXyebnNYxDoBi7wt8eTWrUrKXCOVaFq9x1kgag==
 
-graphql-request@7.1.1:
-  version "7.1.1"
-  resolved "https://registry.yarnpkg.com/graphql-request/-/graphql-request-7.1.1.tgz#e2a9a2762890b23134c2869967f1b6f29f21887b"
-  integrity sha512-bFrwPQwJjx5uU28j0JDnejNW2UzD85S9V6O0POdjgohFMyzhfOQMJBCSKTMAAjImN5q3hmfa1yUCG/3nmNGCKw==
+graphql-request@6.1.0:
+  version "6.1.0"
+  resolved "https://registry.yarnpkg.com/graphql-request/-/graphql-request-6.1.0.tgz#f4eb2107967af3c7a5907eb3131c671eac89be4f"
+  integrity sha512-p+XPfS4q7aIpKVcgmnZKhMNqhltk20hfXtkaIkTfjjmiKMJ5xrt5c743cL03y/K7y1rg3WrIC49xGiEQ4mxdNw==
   dependencies:
     "@graphql-typed-document-node/core" "^3.2.0"
+    cross-fetch "^3.1.5"
 
 [email protected]:
   version "16.9.0"
@@ -3782,7 +3790,7 @@ node-environment-flags@^1.0.5:
     object.getownpropertydescriptors "^2.0.3"
     semver "^5.7.0"
 
-[email protected], node-fetch@^2.6.7:
+[email protected], node-fetch@^2.6.12, node-fetch@^2.6.7:
   version "2.7.0"
   resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.7.0.tgz#d0f0fa6e3e2dc1d27efcd8ad99d550bda94d187d"
   integrity sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==