Skip to content

Remove Yarn repository to prevent expired GPG key failures #7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mglaman merged 5 commits into from
Jan 23, 2026
Merged

Remove Yarn repository to prevent expired GPG key failures #7

Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
7ad3a7f
Initial plan
Copilot Jan 23, 2026
46eb76d
Add preventive fix for Yarn GPG key expiration issue
Copilot Jan 23, 2026
18c1268
Address code review feedback - simplify Yarn repository cleanup
Copilot Jan 23, 2026
52237ac
Optimize Dockerfile by combining Yarn cleanup with Node.js installation
Copilot Jan 23, 2026
650ef52
Clarify comments about Yarn GPG key fix
Copilot Jan 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,11 @@
FROM php:8.3-apache AS base

# Install Node.js 24 (includes npm)
# Clean up Yarn repository to prevent GPG key expiration errors
# Yarn's GPG key (23E7166788B63E1E) has expired, causing apt-get failures if repository is present
RUN curl -fsSL https://deb.nodesource.com/setup_24.x | bash - && \
apt-get install -y --no-install-recommends nodejs
apt-get install -y --no-install-recommends nodejs && \
rm -f /etc/apt/sources.list.d/yarn.list /usr/share/keyrings/yarnkey.gpg

RUN apt-get install -y --no-install-recommends \
libsodium-dev \
Expand Down