chore(build): bump Docker images

Author: azasypkin

Dockerfile

@@ -1,4 +1,4 @@
-FROM rust:1.93-slim-trixie@sha256:c0a38f5662afdb298898da1d70b909af4bda4e0acff2dc52aea6360a9b9c6956 AS builder
+FROM rust:1.95-slim-trixie@sha256:a6ed0cbc27f063c367aee8373f35fdf4dcf8be7596c4d19d6643e3252e514c2e AS builder
 WORKDIR /app
 
 ARG TARGETARCH
@@ -20,7 +20,7 @@ RUN --mount=type=cache,target=/app/target cargo build --release && \
     upx --best --lzma ./retrack
 
 # Check out https://gcr.io/distroless/cc-debian13:nonroot
-FROM gcr.io/distroless/cc-debian13:nonroot@sha256:9c4fe2381c2e6d53c4cfdefeff6edbd2a67ec7713e2c3ca6653806cbdbf27a1e
+FROM gcr.io/distroless/cc-debian13:nonroot@sha256:8f960b7fc6a5d6e28bb07f982655925d6206678bd9a6cde2ad00ddb5e2077d78
 EXPOSE 7676
 
 WORKDIR /app

Dockerfile.web-scraper

@@ -1,4 +1,4 @@
-FROM --platform=$BUILDPLATFORM node:22-slim@sha256:80fdb3f57c815e1b638d221f30a826823467c4a56c8f6a8d7aa091cd9b1675ea AS builder
+FROM --platform=$BUILDPLATFORM node:24-slim@sha256:f96cade014243001e5c18f1befaf0bf44564f7cf358287ef691114dcb04b173b AS builder
 WORKDIR /app
 
 # Copy workspace root `package.json` and `package-lock.json` files,
@@ -12,7 +12,7 @@ COPY ["./components/retrack-web-scraper", "./components/retrack-web-scraper"]
 RUN set -x && npm test --ws
 RUN set -x && npm run build --ws
 
-FROM node:22-slim@sha256:80fdb3f57c815e1b638d221f30a826823467c4a56c8f6a8d7aa091cd9b1675ea
+FROM node:24-slim@sha256:f96cade014243001e5c18f1befaf0bf44564f7cf358287ef691114dcb04b173b
 ENV NODE_ENV=production \
     PLAYWRIGHT_BROWSERS_PATH=/ms-playwright \
     RETRACK_WEB_SCRAPER_BROWSER_CHROMIUM_EXECUTABLE_PATH=/usr/local/bin/chromium
@@ -34,14 +34,21 @@ RUN set -x && apt-get update && \
 COPY ./dev/docker/chromium_local.conf /etc/fonts/local.conf
 RUN set -x && fc-cache -fv
 
-COPY --from=builder ["/app/components/retrack-web-scraper/dist/", "./"]
-COPY --from=builder ["/app/components/retrack-web-scraper/package.json", "/app/package-lock.json", "./"]
+# Preserve the workspace layout (root + leaf package.json + workspace lock
+# file) so `npm ci` can resolve the web-scraper's deps via its workspace entry.
+# Flattening these files into /app fails with npm >= 11 because the workspace
+# lockfile records dependencies under `packages."components/retrack-web-scraper"`,
+# not under the top-level `packages.""` key.
+COPY --from=builder ["/app/package.json", "/app/package-lock.json", "./"]
+COPY --from=builder ["/app/components/retrack-web-scraper/package.json", "./components/retrack-web-scraper/"]
+COPY --from=builder ["/app/components/retrack-web-scraper/dist/", "./components/retrack-web-scraper/"]
 
-# Install production dependencies, then use Playwright to install only the
-# Chromium binary (no --with-deps). Create a stable symlink so the app can
-# find the binary regardless of the Playwright revision number.
-# Post-install cleanup: remove headless-shell, ffmpeg, all but en-US locale.
-RUN set -x && npm ci --production && \
+# Install production dependencies for the web-scraper workspace only, then use
+# Playwright to install only the Chromium binary (no --with-deps). Create a
+# stable symlink so the app can find the binary regardless of the Playwright
+# revision number. Post-install cleanup: remove headless-shell, ffmpeg, all but
+# en-US locale.
+RUN set -x && npm ci --omit=dev --workspace=retrack-web-scraper --include-workspace-root=false && \
     npx playwright install chromium && \
     rm -rf /ms-playwright/chromium_headless_shell-* && \
     rm -rf /ms-playwright/ffmpeg-* && \
@@ -56,5 +63,5 @@ RUN set -x && npm ci --production && \
 USER node
 
 ENTRYPOINT ["/usr/bin/dumb-init", "--"]
-CMD ["node", "src/index.js"]
+CMD ["node", "components/retrack-web-scraper/src/index.js"]
 

Dockerfile.web-scraper-camoufox

@@ -1,4 +1,4 @@
-FROM python:3.14-slim-trixie@sha256:fb83750094b46fd6b8adaa80f66e2302ecbe45d513f6cece637a841e1025b4ca
+FROM python:3.14-slim-trixie@sha256:aee3b1c52ce756c42ee4ad90437ae49d87fa87fc2f09c17895f098b67f081a8d
 EXPOSE 7777
 
 ENV CAMOUFOX_PORT=7777
@@ -19,7 +19,7 @@ RUN set -x \
 # Layer 2: Camoufox install + patch + fetch
 RUN set -x \
     && pip install cloverlabs-camoufox==0.5.5 \
-    && pip install "git+https://github.com/microsoft/playwright-python.git@release-1.58" \
+    && pip install "git+https://github.com/microsoft/playwright-python.git@release-1.59" \
     && sed -i 's/fontconfigs/fontconfig/g' /usr/local/lib/python3.14/site-packages/camoufox/utils.py \
     && python -m camoufox sync \
     && echo y | python -m camoufox fetch official/146.0.1-alpha.25