update cicd

.github/workflows/pr-check.yml

@@ -211,6 +211,9 @@ jobs:
             const commitSha = context.payload.pull_request.head.sha;
             const branchName = context.payload.pull_request.head.ref;
 
+            // Security: Sanitize branch name for safe display in Markdown
+            const safeBranchName = branchName.replace(/[`\[\]]/g, '\\$&');
+
             let allPassed = checkResult.lintConclusion === 'success' && checkResult.dockerConclusion === 'success';
             let emoji = allPassed ? '✅' : '❌';
             let status = allPassed ? 'Passed' : 'Failed';
@@ -247,7 +250,7 @@ jobs:
             }
 
             body += `**Commit:** \`${commitSha}\`\n`;
-            body += `**Branch:** \`${branchName}\`\n`;
+            body += `**Branch:** \`${safeBranchName}\`\n`;
 
             if (checkResult.lintUrl || checkResult.dockerUrl) {
               body += `\n**🔗 View Details:**\n`;

Dockerfile

@@ -32,6 +32,7 @@ ENV NEXT_TELEMETRY_DISABLED=1
 ENV NEXT_PUBLIC_MOCK_USER=''
 
 # Install pnpm and generate Prisma client before build
+# Prisma will use binaryTargets from schema.prisma to generate engines for all platforms
 RUN npm install -g pnpm && \
     pnpm prisma generate && \
     pnpm run build

prisma/schema.prisma

@@ -1,5 +1,6 @@
 generator client {
-  provider = "prisma-client-js"
+  provider      = "prisma-client-js"
+  binaryTargets = ["native", "linux-musl-openssl-3.0.x", "linux-musl-arm64-openssl-3.0.x"]
 }
 
 datasource db {