From 2574494bad63f7b751a42a753d4fcc94b26cfd26 Mon Sep 17 00:00:00 2001
From: David Ragot <35502263+Dav-14@users.noreply.github.com>
Date: Sun, 24 May 2026 01:23:45 +0200
Subject: [PATCH 1/4] feat(portal,console-v3): make container command/args
 configurable
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The portal and console-v3 charts hardcoded `command: [pnpm]`,
`args: [run, start:prod]` for the deployment and `[pnpm, run, db:migrate]`
for the pre-install/upgrade migrate Job.

That breaks any consumer shipping a slim image without `pnpm` — the
prod-remix runtime in platform-ui PR #1194 strips pnpm to save ~30 MB
and unblock workspace pruning, but the chart then crashloops with
`exec: "pnpm": executable file not found`.

This commit exposes the two pairs through values:

  command: [pnpm]                          # default keeps current behaviour
  args:    [run, start:prod]
  config.migration.command: [pnpm]         # default keeps current behaviour
  config.migration.args:    [run, db:migrate]

Slim-image consumers override with e.g.:

  command: [node_modules/.bin/react-router-serve]
  args:    [./build/server/index.js]
  config.migration.enabled: false          # or override the command

No behaviour change for existing consumers — `helm template` against
the defaults emits identical YAML.

Chart version bumped to 3.6.0 (minor — additive, backward-compatible
values).
---
 charts/console-v3/Chart.yaml                |  2 +-
 charts/console-v3/templates/deployment.yaml |  9 ++++---
 charts/console-v3/templates/job.yaml        |  9 ++++---
 charts/console-v3/values.yaml               | 27 +++++++++++++++++++++
 charts/portal/Chart.yaml                    |  2 +-
 charts/portal/templates/deployment.yaml     |  9 ++++---
 charts/portal/templates/job.yaml            | 11 ++++++---
 charts/portal/values.yaml                   | 27 +++++++++++++++++++++
 8 files changed, 81 insertions(+), 15 deletions(-)

diff --git a/charts/console-v3/Chart.yaml b/charts/console-v3/Chart.yaml
index 9755a8ea..b0f9f6ea 100644
--- a/charts/console-v3/Chart.yaml
+++ b/charts/console-v3/Chart.yaml
@@ -29,7 +29,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 3.5.1
+version: 3.6.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
diff --git a/charts/console-v3/templates/deployment.yaml b/charts/console-v3/templates/deployment.yaml
index 99b8dc17..75caa623 100644
--- a/charts/console-v3/templates/deployment.yaml
+++ b/charts/console-v3/templates/deployment.yaml
@@ -34,11 +34,14 @@ spec:
           imagePullPolicy: {{.Values.image.pullPolicy}}
           securityContext:
             {{- toYaml .Values.securityContext | nindent 12 }}
+          {{- with .Values.command }}
           command:
-            - pnpm
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
+          {{- with .Values.args }}
           args:
-            - run
-            - start:prod
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
           ports:
             - containerPort: 3000
               protocol: TCP
diff --git a/charts/console-v3/templates/job.yaml b/charts/console-v3/templates/job.yaml
index b997a7a5..ecab110a 100644
--- a/charts/console-v3/templates/job.yaml
+++ b/charts/console-v3/templates/job.yaml
@@ -34,11 +34,14 @@ spec:
           volumeMounts:
             {{- toYaml . | nindent 12 }}
           {{- end }}
+          {{- with .Values.config.migration.command }}
           command:
-            - pnpm
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
+          {{- with .Values.config.migration.args }}
           args:
-            - run
-            - db:migrate
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
           env:
             {{- include "core.env.common" . | nindent 12 }}
             {{- include "core.monitoring" . | nindent 12 }}
diff --git a/charts/console-v3/values.yaml b/charts/console-v3/values.yaml
index 892fe849..3ed729f1 100644
--- a/charts/console-v3/values.yaml
+++ b/charts/console-v3/values.yaml
@@ -192,6 +192,20 @@ image:
   # -- image tag
   tag: ""
 
+# -- Entrypoint command for the console-v3 container.
+# Default keeps the historical `pnpm run start:prod` behaviour. Slim
+# prod-remix images (which strip `pnpm` to save ~30 MB) should override
+# this with the runtime entrypoint, e.g.
+# `[node_modules/.bin/react-router-serve]` with
+# `args: [./build/server/index.js]`.
+command:
+  - pnpm
+
+# -- Entrypoint args for the console-v3 container.
+args:
+  - run
+  - start:prod
+
 # -- image pull secrets
 imagePullSecrets: []
 
@@ -302,6 +316,19 @@ config:
     # -- Enable migration job with a separated user
     # @section -- Migration configuration
     enabled: true
+
+    # -- Migrate-job command. Defaults to `pnpm run db:migrate`; override
+    # for images without `pnpm` (e.g. the slim prod-remix runtime).
+    # @section -- Migration configuration
+    command:
+      - pnpm
+
+    # -- Migrate-job args.
+    # @section -- Migration configuration
+    args:
+      - run
+      - db:migrate
+
     # postgresql:
     #   auth:
     #     # -- Name for a custom user to create (overrides `auth.username`)
diff --git a/charts/portal/Chart.yaml b/charts/portal/Chart.yaml
index 619e4444..3fb770a5 100644
--- a/charts/portal/Chart.yaml
+++ b/charts/portal/Chart.yaml
@@ -26,7 +26,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 3.5.1
+version: 3.6.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
diff --git a/charts/portal/templates/deployment.yaml b/charts/portal/templates/deployment.yaml
index 9d34dbaf..894ec44b 100644
--- a/charts/portal/templates/deployment.yaml
+++ b/charts/portal/templates/deployment.yaml
@@ -34,11 +34,14 @@ spec:
           imagePullPolicy: {{.Values.image.pullPolicy}}
           securityContext:
             {{- toYaml .Values.securityContext | nindent 12 }}
+          {{- with .Values.command }}
           command:
-          - pnpm
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
+          {{- with .Values.args }}
           args:
-          - run
-          - start:prod
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
           ports:
             - containerPort: 3000
               protocol: TCP
diff --git a/charts/portal/templates/job.yaml b/charts/portal/templates/job.yaml
index 4ff38287..ecab110a 100644
--- a/charts/portal/templates/job.yaml
+++ b/charts/portal/templates/job.yaml
@@ -34,11 +34,14 @@ spec:
           volumeMounts:
             {{- toYaml . | nindent 12 }}
           {{- end }}
-          command: 
-          - pnpm
+          {{- with .Values.config.migration.command }}
+          command:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
+          {{- with .Values.config.migration.args }}
           args:
-            - run
-            - db:migrate
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
           env:
             {{- include "core.env.common" . | nindent 12 }}
             {{- include "core.monitoring" . | nindent 12 }}
diff --git a/charts/portal/values.yaml b/charts/portal/values.yaml
index d1c8995a..4cc7b1c5 100644
--- a/charts/portal/values.yaml
+++ b/charts/portal/values.yaml
@@ -183,6 +183,20 @@ image:
   # -- image tag
   tag: ""
 
+# -- Entrypoint command for the portal container.
+# Default keeps the historical `pnpm run start:prod` behaviour. Slim
+# prod-remix images (which strip `pnpm` to save ~30 MB) should override
+# this with the runtime entrypoint, e.g.
+# `[node_modules/.bin/react-router-serve]` with
+# `args: [./build/server/index.js]`.
+command:
+  - pnpm
+
+# -- Entrypoint args for the portal container.
+args:
+  - run
+  - start:prod
+
 imagePullSecrets: []
 
 serviceAccount:
@@ -259,6 +273,19 @@ config:
     # -- Enable migration job with a separated user
     # @section -- Migration configuration
     enabled: true
+
+    # -- Migrate-job command. Defaults to `pnpm run db:migrate`; override
+    # for images without `pnpm` (e.g. the slim prod-remix runtime).
+    # @section -- Migration configuration
+    command:
+      - pnpm
+
+    # -- Migrate-job args.
+    # @section -- Migration configuration
+    args:
+      - run
+      - db:migrate
+
     # postgresql:
     #   auth:
     #     # -- Name for a custom user to create (overrides `auth.username`)

From e730f6ad73430790fb2dd4c2b0f40d7ee73b2f86 Mon Sep 17 00:00:00 2001
From: David Ragot <35502263+Dav-14@users.noreply.github.com>
Date: Mon, 25 May 2026 14:06:38 +0200
Subject: [PATCH 2/4] feat(portal,console-v3): default to bundled-cjs
 entrypoint + migrate runner
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Flips the defaults landed earlier in this PR from "preserve historical pnpm
behaviour, let consumers override" to "match the new slim image out of the
box." Old `pnpm`-bearing images can still override values to restore the old
defaults.

- `command` / `args` default → `[node_modules/.bin/react-router-serve]` /
  `[./build/server/index.js]` (the slim prod-remix entrypoint).
- `config.migration.command` / `config.migration.args` default →
  `[node]` / `[dist/migrate.cjs]` (the bundled migration runner shipped by
  platform-ui#1195; SQL files at `./dist/migrations` resolved via the
  image's `MIGRATIONS_FOLDER` env).
- Chart versions: 3.6.0 → 4.0.0 (defaults break old-image consumers without
  an override, hence the major bump).

Verified:

  helm template t charts/portal      -n t  # deployment: react-router-serve, migrate: node dist/migrate.cjs
  helm template t charts/console-v3  -n t  # same
---
 charts/console-v3/Chart.yaml  |  2 +-
 charts/console-v3/values.yaml | 26 +++++++++++---------------
 charts/portal/Chart.yaml      |  2 +-
 charts/portal/values.yaml     | 26 +++++++++++---------------
 4 files changed, 24 insertions(+), 32 deletions(-)

diff --git a/charts/console-v3/Chart.yaml b/charts/console-v3/Chart.yaml
index b0f9f6ea..78107559 100644
--- a/charts/console-v3/Chart.yaml
+++ b/charts/console-v3/Chart.yaml
@@ -29,7 +29,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 3.6.0
+version: 4.0.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
diff --git a/charts/console-v3/values.yaml b/charts/console-v3/values.yaml
index 3ed729f1..20c6079a 100644
--- a/charts/console-v3/values.yaml
+++ b/charts/console-v3/values.yaml
@@ -192,19 +192,15 @@ image:
   # -- image tag
   tag: ""
 
-# -- Entrypoint command for the console-v3 container.
-# Default keeps the historical `pnpm run start:prod` behaviour. Slim
-# prod-remix images (which strip `pnpm` to save ~30 MB) should override
-# this with the runtime entrypoint, e.g.
-# `[node_modules/.bin/react-router-serve]` with
-# `args: [./build/server/index.js]`.
+# -- Entrypoint command for the console-v3 container. Defaults match the
+# slim `prod-remix` image which has no `pnpm` (saved ~30 MB) and invokes
+# the React Router server binary directly.
 command:
-  - pnpm
+  - node_modules/.bin/react-router-serve
 
 # -- Entrypoint args for the console-v3 container.
 args:
-  - run
-  - start:prod
+  - ./build/server/index.js
 
 # -- image pull secrets
 imagePullSecrets: []
@@ -317,17 +313,17 @@ config:
     # @section -- Migration configuration
     enabled: true
 
-    # -- Migrate-job command. Defaults to `pnpm run db:migrate`; override
-    # for images without `pnpm` (e.g. the slim prod-remix runtime).
+    # -- Migrate-job command. Defaults to the bundled CJS migration runner
+    # shipped at `dist/migrate.cjs` by platform-ui#1195.
     # @section -- Migration configuration
     command:
-      - pnpm
+      - node
 
-    # -- Migrate-job args.
+    # -- Migrate-job args. The bundled runner reads SQL files from
+    # `./dist/migrations` (set via `MIGRATIONS_FOLDER` env in the image).
     # @section -- Migration configuration
     args:
-      - run
-      - db:migrate
+      - dist/migrate.cjs
 
     # postgresql:
     #   auth:
diff --git a/charts/portal/Chart.yaml b/charts/portal/Chart.yaml
index 3fb770a5..f0821c61 100644
--- a/charts/portal/Chart.yaml
+++ b/charts/portal/Chart.yaml
@@ -26,7 +26,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 3.6.0
+version: 4.0.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
diff --git a/charts/portal/values.yaml b/charts/portal/values.yaml
index 4cc7b1c5..a9957a4b 100644
--- a/charts/portal/values.yaml
+++ b/charts/portal/values.yaml
@@ -183,19 +183,15 @@ image:
   # -- image tag
   tag: ""
 
-# -- Entrypoint command for the portal container.
-# Default keeps the historical `pnpm run start:prod` behaviour. Slim
-# prod-remix images (which strip `pnpm` to save ~30 MB) should override
-# this with the runtime entrypoint, e.g.
-# `[node_modules/.bin/react-router-serve]` with
-# `args: [./build/server/index.js]`.
+# -- Entrypoint command for the portal container. Defaults match the slim
+# `prod-remix` image which has no `pnpm` (saved ~30 MB) and invokes the
+# React Router server binary directly.
 command:
-  - pnpm
+  - node_modules/.bin/react-router-serve
 
 # -- Entrypoint args for the portal container.
 args:
-  - run
-  - start:prod
+  - ./build/server/index.js
 
 imagePullSecrets: []
 
@@ -274,17 +270,17 @@ config:
     # @section -- Migration configuration
     enabled: true
 
-    # -- Migrate-job command. Defaults to `pnpm run db:migrate`; override
-    # for images without `pnpm` (e.g. the slim prod-remix runtime).
+    # -- Migrate-job command. Defaults to the bundled CJS migration runner
+    # shipped at `dist/migrate.cjs` by platform-ui#1195.
     # @section -- Migration configuration
     command:
-      - pnpm
+      - node
 
-    # -- Migrate-job args.
+    # -- Migrate-job args. The bundled runner reads SQL files from
+    # `./dist/migrations` (set via `MIGRATIONS_FOLDER` env in the image).
     # @section -- Migration configuration
     args:
-      - run
-      - db:migrate
+      - dist/migrate.cjs
 
     # postgresql:
     #   auth:

From 6d4fc312ff5c0d3dd2ffde131634b734bcd477fb Mon Sep 17 00:00:00 2001
From: David Ragot <35502263+Dav-14@users.noreply.github.com>
Date: Mon, 25 May 2026 15:22:19 +0200
Subject: [PATCH 3/4] chore(release)!: major bump portal/console-v3 (chart 4,
 app v3) + cloudprem 5, formance 2

Cascades the breaking-default change from the previous commit (slim prod-remix
entrypoint: react-router-serve / node dist/migrate.cjs) through the dependency
tree:

- portal:     chart 3.5.1 -> 4.0.0, appVersion v2.5.1 -> v3.0.0
- console-v3: chart 3.5.1 -> 4.0.0, appVersion v2.5.1 -> v3.0.0
- cloudprem:  chart 4.6.2 -> 5.0.0, deps portal/console-v3 3.X -> 4.X
- formance:   chart 1.10.1 -> 2.0.0, dep cloudprem 4.X -> 5.X

Adds migration notes (and a new formance/README.md.gotmpl so helm-docs
preserves them) explaining how legacy pnpm-based images can override
command/args to keep the previous behavior.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 README.md                         |  8 ++---
 charts/cloudprem/Chart.lock       |  8 ++---
 charts/cloudprem/Chart.yaml       |  6 ++--
 charts/cloudprem/README.md        | 44 +++++++++++++++++++++++--
 charts/cloudprem/README.md.gotmpl | 30 +++++++++++++++++
 charts/console-v3/Chart.yaml      |  2 +-
 charts/console-v3/README.md       |  6 +++-
 charts/formance/Chart.lock        |  6 ++--
 charts/formance/Chart.yaml        |  4 +--
 charts/formance/README.md         | 48 ++++++++++++++++++++++++++--
 charts/formance/README.md.gotmpl  | 53 +++++++++++++++++++++++++++++++
 charts/portal/Chart.yaml          |  2 +-
 charts/portal/README.md           |  6 +++-
 13 files changed, 198 insertions(+), 25 deletions(-)
 create mode 100644 charts/formance/README.md.gotmpl

diff --git a/README.md b/README.md
index bcd989fb..06e59e3a 100644
--- a/README.md
+++ b/README.md
@@ -5,12 +5,12 @@
 | Readme | Chart Version | App Version | Description | Hub |
 |--------|---------------|-------------|-------------|-----|
 | [Agent](./charts/agent/README.md) | 2.13.1 | v2.9.0 | Formance Membership Agent Helm Chart | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/agent)](https://artifacthub.io/packages/search?repo=agent) |
-| [Cloudprem](./charts/cloudprem/README.md) | 4.6.2 | latest | Formance control-plane | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/cloudprem)](https://artifacthub.io/packages/search?repo=cloudprem) |
-| [Console-V3](./charts/console-v3/README.md) | 3.5.1 | v2.5.1 | Formance Console | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/console-v3)](https://artifacthub.io/packages/search?repo=console-v3) |
+| [Cloudprem](./charts/cloudprem/README.md) | 5.0.0 | latest | Formance control-plane | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/cloudprem)](https://artifacthub.io/packages/search?repo=cloudprem) |
+| [Console-V3](./charts/console-v3/README.md) | 4.0.0 | v3.0.0 | Formance Console | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/console-v3)](https://artifacthub.io/packages/search?repo=console-v3) |
 | [Core](./charts/core/README.md) | 1.5.1 | latest | Formance Core Library | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/core)](https://artifacthub.io/packages/search?repo=core) |
-| [Formance](./charts/formance/README.md) | 1.10.1 | latest | Formance Platform - Unified Helm Chart | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/formance)](https://artifacthub.io/packages/search?repo=formance) |
+| [Formance](./charts/formance/README.md) | 2.0.0 | latest | Formance Platform - Unified Helm Chart | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/formance)](https://artifacthub.io/packages/search?repo=formance) |
 | [Membership](./charts/membership/README.md) | 3.3.0 | v2.3.1 | Formance EE Membership API. Manage stacks, organizations, regions, invitations, users, roles, and permissions. | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/membership)](https://artifacthub.io/packages/search?repo=membership) |
-| [Portal](./charts/portal/README.md) | 3.5.1 | v2.5.1 | Formance Portal | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/portal)](https://artifacthub.io/packages/search?repo=portal) |
+| [Portal](./charts/portal/README.md) | 4.0.0 | v3.0.0 | Formance Portal | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/portal)](https://artifacthub.io/packages/search?repo=portal) |
 | [Regions](./charts/regions/README.md) | 3.9.8 | latest | Formance Private Regions Helm Chart | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/regions)](https://artifacthub.io/packages/search?repo=regions) |
 | [Stargate](./charts/stargate/README.md) | 0.10.1 | latest | Formance EE Stargate gRPC Gateway | [![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/stargate)](https://artifacthub.io/packages/search?repo=stargate) |
 
diff --git a/charts/cloudprem/Chart.lock b/charts/cloudprem/Chart.lock
index 9f5c8800..311e57c7 100644
--- a/charts/cloudprem/Chart.lock
+++ b/charts/cloudprem/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
   version: 3.3.0
 - name: portal
   repository: file://../portal
-  version: 3.5.1
+  version: 4.0.0
 - name: console-v3
   repository: file://../console-v3
-  version: 3.5.1
-digest: sha256:f8005d42e8ef6e899f763f3665e9e824bc98d8b81fcb0d9b66cbecc900db645a
-generated: "2026-05-25T12:07:45.651364+02:00"
+  version: 4.0.0
+digest: sha256:20102ddada0619f0ba26b997ec566e8a2b2f3f8cf80e2de1cfa998619ba315af
+generated: "2026-05-25T15:55:14.910047+02:00"
diff --git a/charts/cloudprem/Chart.yaml b/charts/cloudprem/Chart.yaml
index 718b6403..8928e1cf 100644
--- a/charts/cloudprem/Chart.yaml
+++ b/charts/cloudprem/Chart.yaml
@@ -31,7 +31,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 4.6.2
+version: 5.0.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
@@ -53,10 +53,10 @@ dependencies:
   repository: file://../membership
   condition: global.platform.membership.enabled
 - name: portal
-  version: 3.X
+  version: 4.X
   repository: file://../portal
   condition: global.platform.portal.enabled
 - name: console-v3
-  version: 3.X
+  version: 4.X
   repository: file://../console-v3
   condition: global.platform.consoleV3.enabled
diff --git a/charts/cloudprem/README.md b/charts/cloudprem/README.md
index 361cb027..6737a9ef 100644
--- a/charts/cloudprem/README.md
+++ b/charts/cloudprem/README.md
@@ -1,7 +1,7 @@
 # Formance cloudprem Helm chart
 
 [![Artifact Hub](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/cloudprem)](https://artifacthub.io/packages/search?repo=cloudprem)
-![Version: 4.6.2](https://img.shields.io/badge/Version-4.6.2-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: latest](https://img.shields.io/badge/AppVersion-latest-informational?style=flat-square)
+![Version: 5.0.0](https://img.shields.io/badge/Version-5.0.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: latest](https://img.shields.io/badge/AppVersion-latest-informational?style=flat-square)
 
 Formance control-plane
 
@@ -13,9 +13,9 @@ Kubernetes: `>=1.14.0-0`
 
 | Repository | Name | Version |
 |------------|------|---------|
-| file://../console-v3 | console-v3 | 3.X |
+| file://../console-v3 | console-v3 | 4.X |
 | file://../membership | membership | 3.X |
-| file://../portal | portal | 3.X |
+| file://../portal | portal | 4.X |
 
 > [!IMPORTANT]
 > You need to obtain a licence from the Formance team. (See [EE Licence](#ee-licence))
@@ -272,6 +272,36 @@ See [profiles](./profiles) for more examples.
 
 ## Migration
 
+### From v4.X.X To v5.0.0
+
+#### Breaking changes
+
+The bundled `portal` and `console-v3` subcharts have been bumped to `v4.X` (app `v3.0.0`)
+and now default their container `command` / `args` to the slim production image entrypoint
+(`react-router-serve ./build/server/index.js`) and the migration runner to
+`node dist/migrate.cjs`. Consumers still running the legacy `pnpm`-based images **must**
+override these values to keep the previous behavior:
+
+```yaml
+portal:
+  command: ["pnpm"]
+  args: ["start"]
+  config:
+    migration:
+      command: ["pnpm"]
+      args: ["migrate", "up"]
+
+console-v3:
+  command: ["pnpm"]
+  args: ["start"]
+  config:
+    migration:
+      command: ["pnpm"]
+      args: ["migrate", "up"]
+```
+
+If you already pin a recent image tag shipping the slim entrypoint, no action is required.
+
 ### From v3.X.X To v4.0.0
 
 #### Breaking changes
@@ -479,7 +509,11 @@ Dex:
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
+| console-v3.config.migration.args | list | `["dist/migrate.cjs"]` | Migrate-job args. The bundled runner reads SQL files from `./dist/migrations` (set via `MIGRATIONS_FOLDER` env in the image). |
+| console-v3.config.migration.command | list | `["node"]` | Migrate-job command. Defaults to the bundled CJS migration runner shipped at `dist/migrate.cjs` by platform-ui#1195. |
 | console-v3.config.migration.enabled | bool | `true` | Enable migration job with a separated user |
+| portal.config.migration.args | list | `["dist/migrate.cjs"]` | Migrate-job args. The bundled runner reads SQL files from `./dist/migrations` (set via `MIGRATIONS_FOLDER` env in the image). |
+| portal.config.migration.command | list | `["node"]` | Migrate-job command. Defaults to the bundled CJS migration runner shipped at `dist/migrate.cjs` by platform-ui#1195. |
 | portal.config.migration.enabled | bool | `true` | Enable migration job with a separated user |
 
 ### Console configuration
@@ -576,6 +610,7 @@ Dex:
 | global.platform.stargate.tls.disable | bool | `false` |  |
 | console-v3.affinity | object | `{}` | Console affinity |
 | console-v3.annotations | object | `{}` | Console annotations  |
+| console-v3.args | list | `["./build/server/index.js"]` | Entrypoint args for the console-v3 container. |
 | console-v3.autoscaling.enabled | bool | `false` |  |
 | console-v3.autoscaling.maxReplicas | int | `100` |  |
 | console-v3.autoscaling.minReplicas | int | `1` |  |
@@ -585,6 +620,7 @@ Dex:
 | console-v3.aws.targetGroups.http.serviceRef.port | string | `"{{ .Values.service.ports.http.port }}"` | Target group service reference port |
 | console-v3.aws.targetGroups.http.targetGroupARN | string | `""` | Target group ARN |
 | console-v3.aws.targetGroups.http.targetType | string | `"ip"` | Target group target type |
+| console-v3.command | list | `["node_modules/.bin/react-router-serve"]` | Entrypoint command for the console-v3 container. Defaults match the slim `prod-remix` image which has no `pnpm` (saved ~30 MB) and invokes the React Router server binary directly. |
 | console-v3.config.additionalEnv | list | `[{"name":"FEATURES_DISABLED","value":"sessions"}]` | Console additional environment variables |
 | console-v3.config.cookie.encryptionKey | string | `"changeMe00"` | is used to encrypt a cookie value |
 | console-v3.config.cookie.existingSecret | string | `""` | is the name of the secret |
@@ -726,10 +762,12 @@ Dex:
 | membership.volumes | list | `[]` | Membership volumes |
 | portal.affinity | object | `{}` | Portal affinity |
 | portal.annotations | object | `{}` | Portal annotations  |
+| portal.args | list | `["./build/server/index.js"]` | Entrypoint args for the portal container. |
 | portal.autoscaling.enabled | bool | `false` |  |
 | portal.autoscaling.maxReplicas | int | `100` |  |
 | portal.autoscaling.minReplicas | int | `1` |  |
 | portal.autoscaling.targetCPUUtilizationPercentage | int | `80` |  |
+| portal.command | list | `["node_modules/.bin/react-router-serve"]` | Entrypoint command for the portal container. Defaults match the slim `prod-remix` image which has no `pnpm` (saved ~30 MB) and invokes the React Router server binary directly. |
 | portal.config.additionalEnv | list | `[]` | Additional environment variables |
 | portal.config.cookie.existingSecret | string | `""` | Cookie existing secret |
 | portal.config.cookie.secret | string | `"changeMe2"` | Cookie secret |
diff --git a/charts/cloudprem/README.md.gotmpl b/charts/cloudprem/README.md.gotmpl
index c569399d..2814c52d 100644
--- a/charts/cloudprem/README.md.gotmpl
+++ b/charts/cloudprem/README.md.gotmpl
@@ -268,6 +268,36 @@ See [profiles](./profiles) for more examples.
 
 ## Migration
 
+### From v4.X.X To v5.0.0
+
+#### Breaking changes
+
+The bundled `portal` and `console-v3` subcharts have been bumped to `v4.X` (app `v3.0.0`)
+and now default their container `command` / `args` to the slim production image entrypoint
+(`react-router-serve ./build/server/index.js`) and the migration runner to
+`node dist/migrate.cjs`. Consumers still running the legacy `pnpm`-based images **must**
+override these values to keep the previous behavior:
+
+```yaml
+portal:
+  command: ["pnpm"]
+  args: ["start"]
+  config:
+    migration:
+      command: ["pnpm"]
+      args: ["migrate", "up"]
+
+console-v3:
+  command: ["pnpm"]
+  args: ["start"]
+  config:
+    migration:
+      command: ["pnpm"]
+      args: ["migrate", "up"]
+```
+
+If you already pin a recent image tag shipping the slim entrypoint, no action is required.
+
 ### From v3.X.X To v4.0.0
 
 #### Breaking changes
diff --git a/charts/console-v3/Chart.yaml b/charts/console-v3/Chart.yaml
index 78107559..336738ed 100644
--- a/charts/console-v3/Chart.yaml
+++ b/charts/console-v3/Chart.yaml
@@ -35,7 +35,7 @@ version: 4.0.0
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "v2.5.1"
+appVersion: "v3.0.0"
 # The "-0" suffix is required for GKE compatibility. GKE versions contain
 # build metadata like "v1.33.5-gke.2392000" which semver treats as pre-release.
 # Without "-0", Helm rejects these versions as incompatible.
diff --git a/charts/console-v3/README.md b/charts/console-v3/README.md
index 4dc8dfe8..3e812373 100644
--- a/charts/console-v3/README.md
+++ b/charts/console-v3/README.md
@@ -1,6 +1,6 @@
 # console-v3
 
-![Version: 3.5.1](https://img.shields.io/badge/Version-3.5.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v2.5.1](https://img.shields.io/badge/AppVersion-v2.5.1-informational?style=flat-square)
+![Version: 4.0.0](https://img.shields.io/badge/Version-4.0.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v3.0.0](https://img.shields.io/badge/AppVersion-v3.0.0-informational?style=flat-square)
 
 Formance Console
 
@@ -88,6 +88,8 @@ Kubernetes: `>=1.14.0-0`
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
+| config.migration.args | list | `["dist/migrate.cjs"]` | Migrate-job args. The bundled runner reads SQL files from `./dist/migrations` (set via `MIGRATIONS_FOLDER` env in the image). |
+| config.migration.command | list | `["node"]` | Migrate-job command. Defaults to the bundled CJS migration runner shipped at `dist/migrate.cjs` by platform-ui#1195. |
 | config.migration.enabled | bool | `true` | Enable migration job with a separated user |
 
 ### Console configuration
@@ -127,6 +129,7 @@ Kubernetes: `>=1.14.0-0`
 | global.nats.requestTimeout | string | `"60s"` |  |
 | affinity | object | `{}` | Console affinity |
 | annotations | object | `{}` | Console annotations  |
+| args | list | `["./build/server/index.js"]` | Entrypoint args for the console-v3 container. |
 | autoscaling.enabled | bool | `false` |  |
 | autoscaling.maxReplicas | int | `100` |  |
 | autoscaling.minReplicas | int | `1` |  |
@@ -136,6 +139,7 @@ Kubernetes: `>=1.14.0-0`
 | aws.targetGroups.http.serviceRef.port | string | `"{{ .Values.service.ports.http.port }}"` | Target group service reference port |
 | aws.targetGroups.http.targetGroupARN | string | `""` | Target group ARN |
 | aws.targetGroups.http.targetType | string | `"ip"` | Target group target type |
+| command | list | `["node_modules/.bin/react-router-serve"]` | Entrypoint command for the console-v3 container. Defaults match the slim `prod-remix` image which has no `pnpm` (saved ~30 MB) and invokes the React Router server binary directly. |
 | config.additionalEnv | list | `[{"name":"FEATURES_DISABLED","value":"sessions"}]` | Console additional environment variables |
 | config.cookie.encryptionKey | string | `"changeMe00"` | is used to encrypt a cookie value |
 | config.cookie.existingSecret | string | `""` | is the name of the secret |
diff --git a/charts/formance/Chart.lock b/charts/formance/Chart.lock
index e7e60205..8b91c3b2 100644
--- a/charts/formance/Chart.lock
+++ b/charts/formance/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
   version: 3.9.8
 - name: cloudprem
   repository: file://../cloudprem
-  version: 4.6.2
-digest: sha256:cb1d629d9bf2034ba50eefb8814795d12a0dc518ad6cf6ccf74d2ddcc3ee7427
-generated: "2026-05-22T16:42:16.78034+02:00"
+  version: 5.0.0
+digest: sha256:111cae7fec821c0f5bc6848f2f3e3ac7cf33a1ba37060d3a1c379fd28f134093
+generated: "2026-05-25T15:55:18.394703+02:00"
diff --git a/charts/formance/Chart.yaml b/charts/formance/Chart.yaml
index 39b028f9..70a57a91 100644
--- a/charts/formance/Chart.yaml
+++ b/charts/formance/Chart.yaml
@@ -10,7 +10,7 @@ maintainers:
 icon: "https://avatars.githubusercontent.com/u/84325077?s=200&v=4"
 
 type: application
-version: 1.10.1
+version: 2.0.0
 appVersion: "latest"
 # The "-0" suffix is required for GKE compatibility. GKE versions contain
 # build metadata like "v1.33.5-gke.2392000" which semver treats as pre-release.
@@ -35,7 +35,7 @@ dependencies:
   - child: stacks
     parent: global.exports.stacks
 - name: cloudprem
-  version: 4.X
+  version: 5.X
   repository: "file://../cloudprem"
   tags:
   - EntrepriseEdition
diff --git a/charts/formance/README.md b/charts/formance/README.md
index 6c7bb8dc..b4ff00ef 100644
--- a/charts/formance/README.md
+++ b/charts/formance/README.md
@@ -1,6 +1,6 @@
 # formance
 
-![Version: 1.10.1](https://img.shields.io/badge/Version-1.10.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: latest](https://img.shields.io/badge/AppVersion-latest-informational?style=flat-square)
+![Version: 2.0.0](https://img.shields.io/badge/Version-2.0.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: latest](https://img.shields.io/badge/AppVersion-latest-informational?style=flat-square)
 
 Formance Platform - Unified Helm Chart
 
@@ -22,10 +22,46 @@ Kubernetes: `>=1.14.0-0`
 
 | Repository | Name | Version |
 |------------|------|---------|
-| file://../cloudprem | cloudprem | 4.X |
+| file://../cloudprem | cloudprem | 5.X |
 | file://../regions | regions | 3.X |
 | oci://registry-1.docker.io/bitnamicharts | postgresql | 18.X |
 
+## Migration
+
+### From v1.X.X To v2.0.0
+
+#### Breaking changes
+
+This bump pulls in `cloudprem` v5, which in turn upgrades the `portal` and `console-v3`
+subcharts to v4 (app `v3.0.0`). Both subcharts now default their container `command` /
+`args` to the slim production image entrypoint
+(`react-router-serve ./build/server/index.js`) and the migration runner to
+`node dist/migrate.cjs`. Consumers still running the legacy `pnpm`-based images **must**
+override these values to keep the previous behavior:
+
+```yaml
+cloudprem:
+  portal:
+    command: ["pnpm"]
+    args: ["start"]
+    config:
+      migration:
+        command: ["pnpm"]
+        args: ["migrate", "up"]
+
+  console-v3:
+    command: ["pnpm"]
+    args: ["start"]
+    config:
+      migration:
+        command: ["pnpm"]
+        args: ["migrate", "up"]
+```
+
+If you already pin a recent image tag shipping the slim entrypoint, no action is required.
+See the [`cloudprem` migration notes](../cloudprem/README.md#from-v4xx-to-v500) for the
+underlying change.
+
 ## Values
 
 ### AWS configuration
@@ -187,7 +223,11 @@ Kubernetes: `>=1.14.0-0`
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
+| cloudprem.console-v3.config.migration.args | list | `["dist/migrate.cjs"]` | Migrate-job args. The bundled runner reads SQL files from `./dist/migrations` (set via `MIGRATIONS_FOLDER` env in the image). |
+| cloudprem.console-v3.config.migration.command | list | `["node"]` | Migrate-job command. Defaults to the bundled CJS migration runner shipped at `dist/migrate.cjs` by platform-ui#1195. |
 | cloudprem.console-v3.config.migration.enabled | bool | `true` | Enable migration job with a separated user |
+| cloudprem.portal.config.migration.args | list | `["dist/migrate.cjs"]` | Migrate-job args. The bundled runner reads SQL files from `./dist/migrations` (set via `MIGRATIONS_FOLDER` env in the image). |
+| cloudprem.portal.config.migration.command | list | `["node"]` | Migrate-job command. Defaults to the bundled CJS migration runner shipped at `dist/migrate.cjs` by platform-ui#1195. |
 | cloudprem.portal.config.migration.enabled | bool | `true` | Enable migration job with a separated user |
 
 ### Console configuration
@@ -293,6 +333,7 @@ Kubernetes: `>=1.14.0-0`
 | regions.stacks | object | `{}` |  |
 | cloudprem.console-v3.affinity | object | `{}` | Console affinity |
 | cloudprem.console-v3.annotations | object | `{}` | Console annotations  |
+| cloudprem.console-v3.args | list | `["./build/server/index.js"]` | Entrypoint args for the console-v3 container. |
 | cloudprem.console-v3.autoscaling.enabled | bool | `false` |  |
 | cloudprem.console-v3.autoscaling.maxReplicas | int | `100` |  |
 | cloudprem.console-v3.autoscaling.minReplicas | int | `1` |  |
@@ -302,6 +343,7 @@ Kubernetes: `>=1.14.0-0`
 | cloudprem.console-v3.aws.targetGroups.http.serviceRef.port | string | `"{{ .Values.service.ports.http.port }}"` | Target group service reference port |
 | cloudprem.console-v3.aws.targetGroups.http.targetGroupARN | string | `""` | Target group ARN |
 | cloudprem.console-v3.aws.targetGroups.http.targetType | string | `"ip"` | Target group target type |
+| cloudprem.console-v3.command | list | `["node_modules/.bin/react-router-serve"]` | Entrypoint command for the console-v3 container. Defaults match the slim `prod-remix` image which has no `pnpm` (saved ~30 MB) and invokes the React Router server binary directly. |
 | cloudprem.console-v3.config.additionalEnv | list | `[{"name":"FEATURES_DISABLED","value":"sessions"}]` | Console additional environment variables |
 | cloudprem.console-v3.config.cookie.encryptionKey | string | `"changeMe00"` | is used to encrypt a cookie value |
 | cloudprem.console-v3.config.cookie.existingSecret | string | `""` | is the name of the secret |
@@ -443,10 +485,12 @@ Kubernetes: `>=1.14.0-0`
 | cloudprem.membership.volumes | list | `[]` | Membership volumes |
 | cloudprem.portal.affinity | object | `{}` | Portal affinity |
 | cloudprem.portal.annotations | object | `{}` | Portal annotations  |
+| cloudprem.portal.args | list | `["./build/server/index.js"]` | Entrypoint args for the portal container. |
 | cloudprem.portal.autoscaling.enabled | bool | `false` |  |
 | cloudprem.portal.autoscaling.maxReplicas | int | `100` |  |
 | cloudprem.portal.autoscaling.minReplicas | int | `1` |  |
 | cloudprem.portal.autoscaling.targetCPUUtilizationPercentage | int | `80` |  |
+| cloudprem.portal.command | list | `["node_modules/.bin/react-router-serve"]` | Entrypoint command for the portal container. Defaults match the slim `prod-remix` image which has no `pnpm` (saved ~30 MB) and invokes the React Router server binary directly. |
 | cloudprem.portal.config.additionalEnv | list | `[]` | Additional environment variables |
 | cloudprem.portal.config.cookie.existingSecret | string | `""` | Cookie existing secret |
 | cloudprem.portal.config.cookie.secret | string | `"changeMe2"` | Cookie secret |
diff --git a/charts/formance/README.md.gotmpl b/charts/formance/README.md.gotmpl
new file mode 100644
index 00000000..01e28ecf
--- /dev/null
+++ b/charts/formance/README.md.gotmpl
@@ -0,0 +1,53 @@
+{{ template "chart.header" . }}
+
+{{ template "chart.deprecationWarning" . }}
+
+{{ template "chart.badgesSection" . }}
+
+{{ template "chart.description" . }}
+
+{{ template "chart.homepageLine" . }}
+
+{{ template "chart.maintainersSection" . }}
+
+{{ template "chart.sourcesSection" . }}
+
+{{ template "chart.requirementsSection" . }}
+
+## Migration
+
+### From v1.X.X To v2.0.0
+
+#### Breaking changes
+
+This bump pulls in `cloudprem` v5, which in turn upgrades the `portal` and `console-v3`
+subcharts to v4 (app `v3.0.0`). Both subcharts now default their container `command` /
+`args` to the slim production image entrypoint
+(`react-router-serve ./build/server/index.js`) and the migration runner to
+`node dist/migrate.cjs`. Consumers still running the legacy `pnpm`-based images **must**
+override these values to keep the previous behavior:
+
+```yaml
+cloudprem:
+  portal:
+    command: ["pnpm"]
+    args: ["start"]
+    config:
+      migration:
+        command: ["pnpm"]
+        args: ["migrate", "up"]
+
+  console-v3:
+    command: ["pnpm"]
+    args: ["start"]
+    config:
+      migration:
+        command: ["pnpm"]
+        args: ["migrate", "up"]
+```
+
+If you already pin a recent image tag shipping the slim entrypoint, no action is required.
+See the [`cloudprem` migration notes](../cloudprem/README.md#from-v4xx-to-v500) for the
+underlying change.
+
+{{ template "chart.valuesSection" . }}
diff --git a/charts/portal/Chart.yaml b/charts/portal/Chart.yaml
index f0821c61..9b060bbd 100644
--- a/charts/portal/Chart.yaml
+++ b/charts/portal/Chart.yaml
@@ -32,7 +32,7 @@ version: 4.0.0
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "v2.5.1"
+appVersion: "v3.0.0"
 # The "-0" suffix is required for GKE compatibility. GKE versions contain
 # build metadata like "v1.33.5-gke.2392000" which semver treats as pre-release.
 # Without "-0", Helm rejects these versions as incompatible.
diff --git a/charts/portal/README.md b/charts/portal/README.md
index 87f03068..1bf9e061 100644
--- a/charts/portal/README.md
+++ b/charts/portal/README.md
@@ -1,6 +1,6 @@
 # portal
 
-![Version: 3.5.1](https://img.shields.io/badge/Version-3.5.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v2.5.1](https://img.shields.io/badge/AppVersion-v2.5.1-informational?style=flat-square)
+![Version: 4.0.0](https://img.shields.io/badge/Version-4.0.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v3.0.0](https://img.shields.io/badge/AppVersion-v3.0.0-informational?style=flat-square)
 
 Formance Portal
 
@@ -89,6 +89,8 @@ Kubernetes: `>=1.14.0-0`
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
+| config.migration.args | list | `["dist/migrate.cjs"]` | Migrate-job args. The bundled runner reads SQL files from `./dist/migrations` (set via `MIGRATIONS_FOLDER` env in the image). |
+| config.migration.command | list | `["node"]` | Migrate-job command. Defaults to the bundled CJS migration runner shipped at `dist/migrate.cjs` by platform-ui#1195. |
 | config.migration.enabled | bool | `true` | Enable migration job with a separated user |
 
 ### Portal configuration
@@ -134,10 +136,12 @@ Kubernetes: `>=1.14.0-0`
 | global.platform.portal.oauth.client.scopes[3] | string | `"on_behalf"` |  |
 | affinity | object | `{}` | Portal affinity |
 | annotations | object | `{}` | Portal annotations  |
+| args | list | `["./build/server/index.js"]` | Entrypoint args for the portal container. |
 | autoscaling.enabled | bool | `false` |  |
 | autoscaling.maxReplicas | int | `100` |  |
 | autoscaling.minReplicas | int | `1` |  |
 | autoscaling.targetCPUUtilizationPercentage | int | `80` |  |
+| command | list | `["node_modules/.bin/react-router-serve"]` | Entrypoint command for the portal container. Defaults match the slim `prod-remix` image which has no `pnpm` (saved ~30 MB) and invokes the React Router server binary directly. |
 | config.additionalEnv | list | `[]` | Additional environment variables |
 | config.cookie.existingSecret | string | `""` | Cookie existing secret |
 | config.cookie.secret | string | `"changeMe2"` | Cookie secret |

From 759505a3b98a1c3740c37f0158f309c4f9a8f541 Mon Sep 17 00:00:00 2001
From: David Ragot <35502263+Dav-14@users.noreply.github.com>
Date: Mon, 25 May 2026 15:38:31 +0200
Subject: [PATCH 4/4] chore(nix): bump goVersion to 25 and nixpkgs

golangci-lint shipped via nix was built with go1.24 and failed to load
tools/readme (go 1.25.0). Bumping the flake's pinned nixpkgs + goVersion
to 25 fixes `just lint` / `just pre-commit`.

Also regenerates portal/console-v3 values.schema.json to include the
new top-level `command`/`args` and migration `command`/`args` fields.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 charts/console-v3/values.schema.json | 24 +++++++++++++++++
 charts/portal/values.schema.json     | 24 +++++++++++++++++
 flake.lock                           | 40 +++++++---------------------
 flake.nix                            |  2 +-
 4 files changed, 58 insertions(+), 32 deletions(-)

diff --git a/charts/console-v3/values.schema.json b/charts/console-v3/values.schema.json
index 4b190f7a..211c4c71 100644
--- a/charts/console-v3/values.schema.json
+++ b/charts/console-v3/values.schema.json
@@ -8,6 +8,12 @@
         "annotations": {
             "type": "object"
         },
+        "args": {
+            "type": "array",
+            "items": {
+                "type": "string"
+            }
+        },
         "autoscaling": {
             "type": "object",
             "properties": {
@@ -60,6 +66,12 @@
                 }
             }
         },
+        "command": {
+            "type": "array",
+            "items": {
+                "type": "string"
+            }
+        },
         "config": {
             "type": "object",
             "properties": {
@@ -108,6 +120,18 @@
                         "annotations": {
                             "type": "object"
                         },
+                        "args": {
+                            "type": "array",
+                            "items": {
+                                "type": "string"
+                            }
+                        },
+                        "command": {
+                            "type": "array",
+                            "items": {
+                                "type": "string"
+                            }
+                        },
                         "enabled": {
                             "type": "boolean"
                         },
diff --git a/charts/portal/values.schema.json b/charts/portal/values.schema.json
index 2d234417..d061a26f 100644
--- a/charts/portal/values.schema.json
+++ b/charts/portal/values.schema.json
@@ -8,6 +8,12 @@
         "annotations": {
             "type": "object"
         },
+        "args": {
+            "type": "array",
+            "items": {
+                "type": "string"
+            }
+        },
         "autoscaling": {
             "type": "object",
             "properties": {
@@ -60,6 +66,12 @@
                 }
             }
         },
+        "command": {
+            "type": "array",
+            "items": {
+                "type": "string"
+            }
+        },
         "config": {
             "type": "object",
             "properties": {
@@ -103,6 +115,18 @@
                         "annotations": {
                             "type": "object"
                         },
+                        "args": {
+                            "type": "array",
+                            "items": {
+                                "type": "string"
+                            }
+                        },
+                        "command": {
+                            "type": "array",
+                            "items": {
+                                "type": "string"
+                            }
+                        },
                         "enabled": {
                             "type": "boolean"
                         },
diff --git a/flake.lock b/flake.lock
index 78e09e2f..9f9fa9d0 100644
--- a/flake.lock
+++ b/flake.lock
@@ -23,12 +23,12 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1742422364,
-        "narHash": "sha256-mNqIplmEohk5jRkqYqG19GA8MbQ/D4gQSK0Mu4LvfRQ=",
-        "rev": "a84ebe20c6bc2ecbcfb000a50776219f48d134cc",
-        "revCount": 770807,
+        "lastModified": 1779508470,
+        "narHash": "sha256-Ap9KJX+5xHIn3bPIpfNgT6MEXdAECECwo4/rmlQD74M=",
+        "rev": "29916453413845e54a65b8a1cf996842300cd299",
+        "revCount": 1003640,
         "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.770807%2Brev-a84ebe20c6bc2ecbcfb000a50776219f48d134cc/0195b626-8c1d-7fb9-9282-563af3d37ab9/source.tar.gz"
+        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.1003640%2Brev-29916453413845e54a65b8a1cf996842300cd299/019e5626-8c96-7cc1-83dd-de1831a60fd0/source.tar.gz"
       },
       "original": {
         "type": "tarball",
@@ -40,15 +40,14 @@
         "flake-parts": "flake-parts",
         "nixpkgs": [
           "nixpkgs"
-        ],
-        "treefmt-nix": "treefmt-nix"
+        ]
       },
       "locked": {
-        "lastModified": 1743581611,
-        "narHash": "sha256-HDbRE9O1VstonL5iOA45SofSLvFJInVjk3YrxqXK/Y4=",
+        "lastModified": 1779713358,
+        "narHash": "sha256-1Ai5G8e8dT8fq45USayiYNE+WqApwcmMT9gA7fZZbSA=",
         "owner": "nix-community",
         "repo": "NUR",
-        "rev": "7774821fd8f71266b59c05eb6b82e6867f73e738",
+        "rev": "65e2b0ee404b1f39cd43a949b0459de70d4d987d",
         "type": "github"
       },
       "original": {
@@ -62,27 +61,6 @@
         "nixpkgs": "nixpkgs",
         "nur": "nur"
       }
-    },
-    "treefmt-nix": {
-      "inputs": {
-        "nixpkgs": [
-          "nur",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1733222881,
-        "narHash": "sha256-JIPcz1PrpXUCbaccEnrcUS8jjEb/1vJbZz5KkobyFdM=",
-        "owner": "numtide",
-        "repo": "treefmt-nix",
-        "rev": "49717b5af6f80172275d47a418c9719a31a78b53",
-        "type": "github"
-      },
-      "original": {
-        "owner": "numtide",
-        "repo": "treefmt-nix",
-        "type": "github"
-      }
     }
   },
   "root": "root",
diff --git a/flake.nix b/flake.nix
index 163a6ee0..e780fc40 100644
--- a/flake.nix
+++ b/flake.nix
@@ -12,7 +12,7 @@
 
   outputs = { self, nixpkgs, nur }:
     let
-      goVersion = 23;
+      goVersion = 25;
 
       supportedSystems = [
         "x86_64-linux"