Upgrade to Node 26 and pin pnpm 12.17.0

.github/workflows/claude.yml

@@ -83,11 +83,11 @@ jobs:
       - name: Install pnpm
         uses: pnpm/action-setup@v6
         with:
-          version: 9
           run_install: false
+          package_json_file: frontend/package.json
       - uses: actions/setup-node@v6
         with:
-          node-version: "23.9.0"
+          node-version: "26.10.0"
           cache: "pnpm"
           cache-dependency-path: "frontend/pnpm-lock.yaml"
       - name: Install frontend dependencies
@@ -101,7 +101,7 @@ jobs:
           claude_args: |
             --model claude-opus-5
             --effort xhigh
-            --append-system-prompt "CI MODE. You are running in GitHub Actions against a plain checkout, not a developer laptop. Ignore the 'run everything inside docker exec pycon-backend-1' instructions in AGENTS.md: there is no Docker container here. BACKEND: dependencies are already installed via 'uv sync' in ./backend, and Postgres and Redis are running with DATABASE_URL and CELERY_* already exported. Verify with: cd backend && uv run pytest <paths> -x -q (add '-n auto' for the full suite), uv run mypy ., uv tool run ruff@0.12.5 check, uv tool run ruff@0.12.5 format --check. Always prefix Python tooling with 'uv run' or 'uv tool run' - bare python, pytest, mypy and ruff are not on PATH and are not permitted. FRONTEND: node 23.9.0 and pnpm 9 are installed and 'pnpm install' has already run in ./frontend. Generated GraphQL types are gitignored, so run 'pnpm codegen' before anything that typechecks (API_URL_SERVER is already exported); 'pnpm build' runs codegen itself. Lint from ./frontend with 'npx @biomejs/biome check .'. There is no 'pnpm test' script - AGENTS.md is wrong about that, do not try it. Run the checks covering your change before you report back, and quote the real output."
+            --append-system-prompt "CI MODE. You are running in GitHub Actions against a plain checkout, not a developer laptop. Ignore the 'run everything inside docker exec pycon-backend-1' instructions in AGENTS.md: there is no Docker container here. BACKEND: dependencies are already installed via 'uv sync' in ./backend, and Postgres and Redis are running with DATABASE_URL and CELERY_* already exported. Verify with: cd backend && uv run pytest <paths> -x -q (add '-n auto' for the full suite), uv run mypy ., uv tool run ruff@0.12.5 check, uv tool run ruff@0.12.5 format --check. Always prefix Python tooling with 'uv run' or 'uv tool run' - bare python, pytest, mypy and ruff are not on PATH and are not permitted. FRONTEND: node 26.10.0 and pnpm 12 are installed and 'pnpm install' has already run in ./frontend. Generated GraphQL types are gitignored, so run 'pnpm codegen' before anything that typechecks (API_URL_SERVER is already exported); 'pnpm build' runs codegen itself. Lint from ./frontend with 'npx @biomejs/biome check .'. There is no 'pnpm test' script - AGENTS.md is wrong about that, do not try it. Run the checks covering your change before you report back, and quote the real output."
             --allowedTools "Edit,Write,Bash(cd:*),Bash(git:*),Bash(uv:*),Bash(pip:*),Bash(pnpm:*),Bash(node:*),Bash(npx:*),Bash(gh pr view:*),Bash(gh pr diff:*),Bash(gh pr list:*),Bash(gh pr comment:*),Bash(gh issue view:*),Bash(gh issue list:*),Bash(gh search:*)"
       # The action only logs the init and result JSON; the transcript with the
       # actual error lives here. Without this, failures are undiagnosable.

.github/workflows/frontend-lint.yml

@@ -19,11 +19,11 @@ jobs:
       - uses: pnpm/action-setup@v6
         name: Install pnpm
         with:
-          version: 9
           run_install: false
+          package_json_file: frontend/package.json
       - uses: actions/setup-node@v6
         with:
-          node-version: '23.9.0'
+          node-version: '26.10.0'
           cache: 'pnpm'
           cache-dependency-path: 'frontend/pnpm-lock.yaml'
       - name: Setup Biome

.github/workflows/graphql-schema-diff.yml

@@ -24,7 +24,7 @@ jobs:
 
       - uses: actions/setup-node@v6
         with:
-          node-version: "24"
+          node-version: "26"
 
       - name: Load base schema
         id: base-schema

.tool-versions

@@ -1,4 +1,4 @@
-nodejs 21.7.3
+nodejs 26.10.0
 terraform 1.3.4
 python    3.14.7
 rust      1.61.0

Dockerfile.node.local

@@ -1,4 +1,4 @@
-FROM node:23.9.0
+FROM node:26.10.0
 
 WORKDIR /home/node/app
 
@@ -9,7 +9,7 @@ RUN apt-get install -y python3 python3-pip
 ENV PNPM_HOME="/usr/local/share/pnpm"
 ENV PATH="/usr/local/share/pnpm/bin:$PATH"
 
-RUN npm install -g pnpm && \
+RUN npm install -g pnpm@12.17.0 && \
     mkdir -p /usr/local/share/pnpm/bin && \
     pnpm --version
 

backend/Dockerfile

@@ -43,13 +43,13 @@ RUN python manage.py graphql_schema
 
 # Build custom admin components
 
-FROM node:23 AS js-stage
+FROM node:26 AS js-stage
 
 ARG FUNCTION_DIR
 
 WORKDIR ${FUNCTION_DIR}
 
-RUN npm install -g pnpm
+RUN npm install -g pnpm@12.17.0
 
 COPY custom_admin/package.json custom_admin/pnpm-lock.yaml custom_admin/pnpm-workspace.yaml ./
 

badge-service/.tool-versions

@@ -1 +1 @@
-nodejs 21.7.3
+nodejs 26.10.0

frontend/Dockerfile

@@ -1,4 +1,6 @@
-FROM node:23-alpine AS base
+FROM node:26-alpine AS base
+
+ENV PNPM_VERSION=12.17.0
 
 RUN apk add --no-cache curl
 
@@ -8,7 +10,7 @@ RUN apk add --no-cache libc6-compat
 WORKDIR /app
 
 COPY package.json pnpm-lock.yaml* .npmrc* pnpm-workspace.yaml* ./
-RUN corepack enable pnpm && pnpm i --frozen-lockfile
+RUN npm install -g pnpm@${PNPM_VERSION} && pnpm i --frozen-lockfile
 
 FROM base AS builder
 
@@ -24,7 +26,7 @@ WORKDIR /app
 COPY --from=deps /app/node_modules ./node_modules
 COPY . .
 
-RUN corepack enable pnpm
+RUN npm install -g pnpm@${PNPM_VERSION}
 RUN --mount=type=secret,id=sentry_auth_token,env=SENTRY_AUTH_TOKEN \
     pnpm run build
 

frontend/package.json

@@ -5,6 +5,7 @@
   "main": "index.js",
   "author": "Python Italia",
   "license": "MIT",
+  "packageManager": "pnpm@12.17.0",
   "scripts": {
     "dev": "concurrently \"npm run codegen:watch\" \"next dev --turbopack\"",
     "build": "npm run codegen && next build",