chore: upgrade API Platform to 4.3.5 (#638)

* chore: upgrade API Platform to 4.3.5

* fix(pwa): add PNPM_HOME to PATH in Dockerfile

Latest pnpm versions fail with "global bin directory is not in PATH"
when running `pnpm config -g set store-dir` during the image build.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* fix(pwa): use dedicated PNPM_HOME directory

Setting PNPM_HOME to the default `/root/.local/share/pnpm` left pnpm
still looking for `$PNPM_HOME/bin` in PATH. Use a dedicated directory
as recommended by pnpm Docker docs.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* fix(pwa): add pnpm bin subdirectory to PATH

pnpm computes its global bin directory as `$PNPM_HOME/bin`, not
`$PNPM_HOME` itself. Add the `/bin` suffix to PATH so the check passes.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* fix(pwa): set CI=true in builder stage

pnpm 10.x aborts node_modules purge in absence of a TTY unless CI is
declared. Without it, `pnpm install` fails with
ERR_PNPM_ABORTED_REMOVE_MODULES_DIR_NO_TTY in Docker builds.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* fix(pwa): drop --prod from pnpm fetch

`pnpm fetch --prod` misses some packages (e.g. @api-platform/admin)
that are required by `pnpm install --offline --prod`, causing
ERR_PNPM_NO_OFFLINE_TARBALL during the build. Fetching everything
ensures the offline install has all tarballs available.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* fix(pwa): copy package.json before pnpm fetch

Without package.json present, corepack runs `pnpm fetch` with the
@latest pnpm from the base stage, while `pnpm install` later uses the
version pinned in package.json (10.33.0). The two versions can have
incompatible store layouts, leading to ERR_PNPM_NO_OFFLINE_TARBALL.

Copy package.json alongside the lockfile so corepack uses the same
pnpm version for both steps.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* fix(pwa): install devDependencies for Next.js build

Next.js 16 build fails when TypeScript is not installed, but the
project keeps typescript and @types/* in devDependencies. The final
prod image is built from the Next.js standalone output, so installing
devDeps in the builder stage does not bloat the runtime image.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

---------

Co-authored-by: api-platform-release-manager[bot] <218572938+api-platform-release-manager[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

Author: 3 people

api/composer.json

@@ -5,9 +5,9 @@
         "php": ">=8.5",
         "ext-ctype": "*",
         "ext-iconv": "*",
-        "api-platform/doctrine-orm": "^4.3.4",
-        "api-platform/graphql": "^4.3.4",
-        "api-platform/symfony": "^4.3.4",
+        "api-platform/doctrine-orm": "^4.3.5",
+        "api-platform/graphql": "^4.3.5",
+        "api-platform/symfony": "^4.3.5",
         "doctrine/common": "^3.5",
         "doctrine/doctrine-bundle": "^3.2.2",
         "doctrine/doctrine-fixtures-bundle": "^4.3.1",

api/composer.lock

@@ -1,6 +1,6 @@
 api_platform:
     title: API Platform's demo
-    version: 4.3.4
+    version: 4.3.5
     description: |
         This is a demo application of the [API Platform](https://api-platform.com) framework.
         [Its source code](https://github.com/api-platform/demo) includes various examples, check it out!

api/config/packages/api_platform.yaml

@@ -17,12 +17,12 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 4.3.4
+version: 4.3.5
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
-appVersion: 4.3.4
+appVersion: 4.3.5
 
 dependencies:
   - name: external-dns