From 4db5b4386ddd3d1b0e955cdcb09999318219aca9 Mon Sep 17 00:00:00 2001
From: addshore <git@addshore.com>
Date: Sun, 27 Sep 2026 23:36:24 +0100
Subject: [PATCH] Use npm ci for Docker dependency installation
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

`npm ci` installs exactly what’s in the committed lockfile
from a clean slate, making Docker builds more reproducible.

Retain the existing --force flag for dependency compatibility.
---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 820b9d6d..9b48f3c2 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -5,7 +5,7 @@ WORKDIR /src/app
 COPY package.json package-lock.json ./
 
 # TODO remove the --force from the install...
-RUN npm install --force && npm cache clean --force
+RUN npm ci --force && npm cache clean --force
 
 COPY . .