From 3bd0dfc0b96f0adb47eec29ba8021b551f0d2b19 Mon Sep 17 00:00:00 2001
From: Mrugesh Mohapatra <noreply@mrugesh.dev>
Date: Fri, 11 Sep 2026 13:57:33 +0530
Subject: [PATCH] chore(docker): pin the node image to 24.21.0

---
 Dockerfile    | 6 +++---
 renovate.json | 7 +++++++
 2 files changed, 10 insertions(+), 3 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 7904216..40bac89 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,12 +1,12 @@
 # Stage 1 — Install dependencies
-FROM node:24-bookworm-slim AS deps
+FROM node:24.21.0-bookworm-slim AS deps
 RUN npm install -g pnpm@10.34.5
 WORKDIR /app
 COPY package.json pnpm-lock.yaml ./
 RUN pnpm install --frozen-lockfile
 
 # Stage 2 — Build TypeScript and prune dev dependencies
-FROM node:24-bookworm-slim AS build
+FROM node:24.21.0-bookworm-slim AS build
 RUN npm install -g pnpm@10.34.5
 WORKDIR /app
 COPY --from=deps /app/node_modules ./node_modules
@@ -21,7 +21,7 @@ RUN find dist -name '*.map' -delete
 RUN pnpm prune --prod
 
 # Stage 3 — Production image
-FROM node:24-bookworm-slim AS production
+FROM node:24.21.0-bookworm-slim AS production
 RUN apt-get update \
   && apt-get install -y --no-install-recommends tini wget \
   && rm -rf /var/lib/apt/lists/*
diff --git a/renovate.json b/renovate.json
index c5ffa2c..ffd7bb4 100644
--- a/renovate.json
+++ b/renovate.json
@@ -16,5 +16,12 @@
       "matchStrings": ["npm install -g (?<depName>pnpm)@(?<currentValue>\\S+)"],
       "datasourceTemplate": "npm"
     }
+  ],
+  "packageRules": [
+    {
+      "description": "Keep the Node version in .node-version and the Dockerfile in one PR.",
+      "matchPackageNames": ["node"],
+      "groupName": "node"
+    }
   ]
 }