Update to nodejs stack use only package versions in base image (#710)

Signed-off-by: Steven Groeger <[email protected]>

incubator/nodejs/image/Dockerfile-stack

@@ -8,7 +8,7 @@ ENV APPSODY_WATCH_DIR=/project/user-app
 ENV APPSODY_WATCH_IGNORE_DIR=/project/user-app/node_modules
 ENV APPSODY_WATCH_REGEX="^.*.js$"
 
-ENV APPSODY_PREP="npm install && npm audit fix"
+ENV APPSODY_PREP="npm install"
 
 ENV APPSODY_RUN="npm start --node-options --require=appmetrics-dash/attach"
 ENV APPSODY_RUN_ON_CHANGE="npm start --node-options --require=appmetrics-dash/attach"
@@ -27,7 +27,7 @@ COPY ./project /project
 COPY ./config /config
 
 WORKDIR /project
-RUN npm install && npm audit fix
+RUN npm install
 
 WORKDIR /project/user-app
 

incubator/nodejs/image/project/Dockerfile

@@ -1,12 +1,6 @@
 # Install the app dependencies in a full Node docker image
 FROM node:12
 
-# Install OS updates
-RUN apt-get update \
- && apt-get dist-upgrade -y \
- && apt-get clean \
- && echo 'Finished installing dependencies'
-
 # Copying individual files/folders as buildah 1.9.0 does not honour .dockerignore
 COPY user-app /project/user-app
 # Removing node_modules as we can not make assumptions about file structure of user-app
@@ -22,12 +16,6 @@ RUN cd / && tar czf project.tgz project
 # Copy the dependencies into a slim Node docker image
 FROM node:12-slim
 
-# Install OS updates
-RUN apt-get update \
- && apt-get dist-upgrade -y \
- && apt-get clean \
- && echo 'Finished installing dependencies'
-
 # Copy project with dependencies
 COPY --chown=node:node --from=0 /project.tgz .
 RUN tar xf project.tgz && chown -R node:node project && rm project.tgz

incubator/nodejs/image/project/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nodejs",
-  "version": "0.3.4",
+  "version": "0.3.5",
   "description": "Node.js Stack",
   "license": "Apache-2.0",
   "repository": {

incubator/nodejs/stack.yaml

@@ -1,5 +1,5 @@
 name: Node.js
-version: 0.3.4
+version: 0.3.5
 description: Runtime for Node.js applications
 license: Apache-2.0
 language: nodejs