npm ci fails with EBADPLATFORM when lockfile contains darwin-only
packages (fsevents), even with --omit=optional. The --force flag
bypasses this check.
Use npm ci with --omit=optional to skip optional dependencies like
fsevents (darwin-only) that were causing build failures on Linux
platforms including Heroku and local Docker builds on Mac.
The `npm audit fix` in the `Dockerfile` is currently
deleting vulnerable packages. Although we do want to have package
security, this should be done in a development process, not as part
of the Docker build.
This commit also reduces the Docker image size and improves security.
* Create Docker release workflow for GA
* Remove Travis workflow
* Remove dependency on Makefile
* Update default environment to Node 14
* Use git SHA instead of version for `dev` images
Ben West
Ingo Reitz
Sulka Haro
Lennart Goedhart
