commitlint Docker & Self-Hosted Deployment

# syntax=docker/dockerfile:1
FROM docker.io/library/node:22-alpine AS builder
WORKDIR /src
COPY . ./
RUN apk add --no-cache python3 py3-setuptools make g++ git
# Install the pnpm version pinned in package.json `packageManager`, verifying
# the tarball against the pin's sha512 digest as corepack did (corepack was
# removed from Node 25+ and cannot install pnpm >= 12).
RUN pnpm_version=$(node -p "require('./package.json').packageManager.split('@')[1].split('+')[0]") && \
    pnpm_sha=$(node -p "require('./package.json').packageManager.split('+sha512.')[1]") && \
    npm pack pnpm@$pnpm_version && \
    echo "$pnpm_sha  pnpm-$pnpm_version.tgz" | sha512sum -c - && \
    npm install --global ./pnpm-$pnpm_version.tgz && \
    rm ./pnpm-$pnpm_version.tgz && \
    pnpm install --frozen-lockfile && \
    pnpm run build && \
    # Commit lint CLI packages
    npm pack @commitlint/cli && \
    npm pack @commitlint/config-validator && \
    npm pack @commitlint/config-pnpm-scopes && \
    npm pack @commitlint/config-nx-scopes && \
    npm pack @commitlint/ensure && \
    npm pack @commitlint/execute-rule && \
    npm pack @commitlint/format && \
    npm pack @commitlint/is-ignored && \
    npm pack @commitlint/lint && \
    npm pack @commitlint/load && \
    npm pack @commitlint/message && \
    npm pack @commitlint/parse && \
    npm pack @commitlint/read && \
    npm pack @commitlint/resolve-extends && \
    npm pack @commitlint/rules && \
    npm pack @commitlint/to-lines && \
    npm pack @commitlint/top-level && \
    npm pack @commitlint/types && \
    # Default commitlint config
    npm pack @commitlint/config-conventional

FROM docker.io/library/node:22-alpine
ENV NODE_PATH=/usr/local/lib/node_modules
RUN apk add --no-cache git
COPY --from=builder /src/*.tgz ./
RUN npm config set fetch-retry-mintimeout 20000 && \
    npm config set fetch-retry-maxtimeout 120000 && \
    npm install --no-audit -g *.tgz && \
    rm -rf *.tgz
RUN <<'EOF'
set -eu
cat >/tmp/commitlint.config.ts <<'CONFIG'
import { RuleConfigSeverity } from "@commitlint/types";
import type { UserConfig } from "@commitlint/types";

export default {
	extends: ["@commitlint/config-conventional"],
	rules: {
		"header-max-length": [RuleConfigSeverity.Error, "always", 50],
	},
} satisfies UserConfig;
CONFIG
echo "fix: load TypeScript config" | commitlint --config /tmp/commitlint.config.ts
if echo "fix: reject a header that exceeds the custom configured limit" | commitlint --config /tmp/commitlint.config.ts; then
	exit 1
fi
rm -rf /tmp/jiti /tmp/node-compile-cache /tmp/commitlint.config.ts
EOF
ENTRYPOINT ["commitlint"]