fix(docker): copy pnpm patches into image build context (#450)

The js-yaml security fix added pnpm patchedDependencies (gray-matter, read-yaml-file) referenced by pnpm-workspace.yaml. The image builds run pnpm install --frozen-lockfile from the repo-root context but never copied the patches/ directory, so the install failed with ENOENT on the patch files (breaking the release Docker build). Add COPY patches ./patches/ before each frozen install in testplanit/Dockerfile (base + deps stages) and docs/Dockerfile.

Verified by building the deps stage locally: the previously failing pnpm install --frozen-lockfile now completes.

Author: therealbrad

docs/Dockerfile

@@ -15,6 +15,10 @@ COPY docs/package.json ./docs/
 COPY package.json ./
 COPY pnpm-workspace.yaml ./
 
+# Dependency patches referenced by pnpm-workspace.yaml#patchedDependencies; the
+# frozen install reads these, so they must be present before it runs.
+COPY patches ./patches/
+
 # Copy the source code for the docs workspace
 COPY ./docs/ ./docs/
 

testplanit/Dockerfile

@@ -26,6 +26,10 @@ COPY packages/api/package.json ./packages/api/
 COPY packages/mcp-server/package.json ./packages/mcp-server/
 COPY packages/wdio-testplanit-reporter/package.json ./packages/wdio-testplanit-reporter/
 
+# Dependency patches referenced by pnpm-workspace.yaml#patchedDependencies; the
+# frozen install reads these, so they must be present before it runs.
+COPY patches ./patches/
+
 # Install only the testplanit project's dependencies (it has no workspace deps).
 RUN pnpm install --frozen-lockfile --filter testplanit --ignore-scripts
 
@@ -68,6 +72,9 @@ COPY cli/package.json ./cli/
 COPY packages/api/package.json ./packages/api/
 COPY packages/mcp-server/package.json ./packages/mcp-server/
 COPY packages/wdio-testplanit-reporter/package.json ./packages/wdio-testplanit-reporter/
+# Dependency patches referenced by pnpm-workspace.yaml#patchedDependencies; the
+# frozen install reads these, so they must be present before it runs.
+COPY patches ./patches/
 RUN pnpm install --frozen-lockfile --filter testplanit --ignore-scripts
 # Produce a self-contained production node_modules for testplanit (no symlinks
 # pointing outside the deploy dir), suitable for copying into the final images.