chore: upgrade to node 26 and pnpm 11 (#2342)

* chore: pnpm 11

* chore: set minimum age and allowedBuilds

* Node 26; pnpm 11

* prod package overrides

* dev package overides

* cleanup

.npmrc

@@ -1 +0,0 @@
-shamefully-hoist = true

Dockerfile

@@ -1,7 +1,7 @@
-FROM node:22-slim AS base
+FROM node:26-slim AS base
 LABEL org.opencontainers.image.source="https://github.com/docmost/docmost"
 
-RUN npm install -g pnpm@10.4.0
+RUN npm install -g pnpm@11.13.0
 
 FROM base AS builder
 
@@ -34,7 +34,6 @@ COPY --from=builder /app/packages/base-formula/package.json /app/packages/base-f
 # Copy root package files
 COPY --from=builder /app/package.json /app/package.json
 COPY --from=builder /app/pnpm*.yaml /app/
-COPY --from=builder /app/.npmrc /app/.npmrc
 
 # Copy patches
 COPY --from=builder /app/patches /app/patches

package.json

@@ -93,50 +93,5 @@
       "packages/*"
     ]
   },
-  "packageManager": "pnpm@10.4.0",
+  "packageManager": "pnpm@11.13.0"
-  "pnpm": {
-    "patchedDependencies": {
-      "scimmy@1.3.5": "patches/scimmy@1.3.5.patch"
-    },
-    "overrides": {
-      "prosemirror-changeset": "2.4.0",
-      "y-prosemirror": "1.3.7",
-      "glob": "13.0.6",
-      "ws": "8.21.0",
-      "dompurify": "3.4.11",
-      "tmp": "0.2.7",
-      "hono": "4.12.25",
-      "mermaid": "11.15.0",
-      "nanoid@^3": "3.3.8",
-      "socket.io-parser": "4.2.6",
-      "serialize-javascript": "7.0.3",
-      "lodash-es": "4.18.1",
-      "lodash": "4.18.1",
-      "@hono/node-server": "1.19.13",
-      "undici": "7.28.0",
-      "ajv@^6": "6.14.0",
-      "ajv@^8": "8.18.0",
-      "underscore": "1.13.8",
-      "immutable": "4.3.8",
-      "express-rate-limit": "8.2.2",
-      "minimatch@^3": "3.1.5",
-      "minimatch@^5": "5.1.8",
-      "flatted": "3.4.2",
-      "picomatch@<2.3.2": "2.3.2",
-      "picomatch@>=4.0.0 <4.0.4": "4.0.4",
-      "fastify": "5.8.5",
-      "yaml@>=1.0.0 <1.10.3": "1.10.3",
-      "yaml@>=2.0.0 <2.8.3": "2.8.3",
-      "path-to-regexp@^8": "8.4.0",
-      "brace-expansion@^5": "5.0.6",
-      "@xmldom/xmldom": "0.8.13",
-      "handlebars": "4.7.9",
-      "axios": "1.16.0",
-      "langsmith": "0.7.0",
-      "follow-redirects": "1.16.0",
-      "protobufjs": "7.5.8",
-      "ip-address": "10.1.1"
-    },
-    "neverBuiltDependencies": []
-  }
 }

pnpm-workspace.yaml

@@ -1,3 +1,65 @@
 packages:
   - 'apps/*'
   - 'packages/*'
+patchedDependencies:
+  scimmy@1.3.5: patches/scimmy@1.3.5.patch
+overrides:
+  prosemirror-changeset: 2.4.0
+  y-prosemirror: 1.3.7
+  glob: 13.0.6
+  ws: 8.21.0
+  dompurify: 3.4.11
+  tmp: 0.2.7
+  hono: 4.12.25
+  mermaid: 11.15.0
+  nanoid@^3: 3.3.8
+  socket.io-parser: 4.2.6
+  serialize-javascript: 7.0.3
+  lodash-es: 4.18.1
+  lodash: 4.18.1
+  '@hono/node-server': 1.19.13
+  undici: 7.28.0
+  ajv@^6: 6.14.0
+  ajv@^8: 8.18.0
+  underscore: 1.13.8
+  immutable: 4.3.8
+  express-rate-limit: 8.2.2
+  minimatch@^3: 3.1.5
+  minimatch@^5: 5.1.8
+  flatted: 3.4.2
+  picomatch@<2.3.2: 2.3.2
+  picomatch@>=4.0.0 <4.0.4: 4.0.4
+  fastify: 5.8.5
+  yaml@>=1.0.0 <1.10.3: 1.10.3
+  yaml@>=2.0.0 <2.8.3: 2.8.3
+  path-to-regexp@^8: 8.4.0
+  brace-expansion@^5: 5.0.6
+  '@xmldom/xmldom': 0.8.13
+  handlebars: 4.7.9
+  axios: 1.16.0
+  langsmith: 0.7.0
+  follow-redirects: 1.16.0
+  protobufjs: 7.5.8
+  ip-address: 10.1.1
+  fast-uri: 3.1.3
+  form-data@>=4.0.0 <4.0.6: 4.0.6
+  nanoid@>=4.0.0 <5.0.9: 5.1.16
+  qs: 6.15.3
+  esbuild@>=0.27.3 <0.28.1: 0.28.1
+  '@babel/core@<=7.29.0': 7.29.7
+  '@opentelemetry/core@>=2.0.0 <2.8.0': 2.9.0
+  '@babel/plugin-transform-modules-systemjs@<=7.29.3': 7.29.7
+  brace-expansion@<1.1.13: 1.1.15
+  brace-expansion@>=2.0.0 <2.0.3: 2.0.3
+  js-yaml@>=3.0.0 <3.15.0: 3.15.0
+  js-yaml@>=4.0.0 <=4.1.1: 4.3.0
+shamefullyHoist: true
+minimumReleaseAge: 5760
+allowBuilds:
+  '@swc/core': true
+  bcrypt: true
+  core-js: true
+  esbuild: true
+  msgpackr-extract: true
+  nx: true
+  unrs-resolver: true