From b3057d8be01ddbc03f80cb77bc4922bbbe0aa024 Mon Sep 17 00:00:00 2001
From: Marc Mintel <marc@mintel.me>
Date: Fri, 27 Feb 2026 02:43:17 +0100
Subject: [PATCH] fix(ci): add pnpm store prune to Dockerfile and post-deploy
 checks

Clear pnpm cache before installing dependencies in BuildKit and runner
to fix ERR_PNPM_TARBALL_INTEGRITY when internal packages are republished
with the same version.
---
 .gitea/workflows/deploy.yml | 4 +++-
 Dockerfile                  | 1 +
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 3d59d498..7c0b57db 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -446,7 +446,9 @@ jobs:
           echo "//git.infra.mintel.me/api/packages/mmintel/npm/:_authToken=${{ secrets.NPM_TOKEN }}" >> .npmrc
       - name: Install dependencies
         id: deps
-        run: pnpm install --no-frozen-lockfile
+        run: |
+          pnpm store prune
+          pnpm install --no-frozen-lockfile
       - name: 📦 Cache APT Packages
         uses: actions/cache@v4
         with:
diff --git a/Dockerfile b/Dockerfile
index 06e49e54..3c5f997d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -27,6 +27,7 @@ RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
     export NPM_TOKEN=$(cat /run/secrets/NPM_TOKEN) && \
     echo "@mintel:registry=https://git.infra.mintel.me/api/packages/mmintel/npm" > .npmrc && \
     echo "//git.infra.mintel.me/api/packages/mmintel/npm/:_authToken=\${NPM_TOKEN}" >> .npmrc && \
+    pnpm store prune && \
     pnpm install --no-frozen-lockfile && \
     rm .npmrc