Can you please provide more information why ignoreModules doesn't achieve what you want?
Here's what the bundler does internally FTR:

I've added ['slonik', 'node:crypto'] and still getting error:

2023-01-26T16:23:52.171Z [ERROR] ERROR in node:crypto
2023-01-26T16:23:52.171Z [ERROR] Module build failed: UnhandledSchemeError: Reading from "node:crypto" is not handled by plugins (Unhandled scheme).
2023-01-26T16:23:52.171Z [ERROR] Webpack supports "data:" and "file:" URIs by default.
2023-01-26T16:23:52.171Z [ERROR] You may need an additional plugin to handle "node:" URIs.

so it seems at least one of them is still being included

Actually, now that I look at the Temporal source code, there is no logic there to actually exclude module. It only adds a warning if it is not already excluded.

It seems that it attempts to exclude it using alias, which unfortunately does not work for modules such as node:

webpack/webpack#14166

LMK if removing the node: prefix solves your issue for now.

LMK if removing the node: prefix solves your issue for now.

It does not, as explained in that webpack issue.

I have no control over node: referenced in code, as it is coming from dependencies.

The issue you are facing is not directly about ignoreModules. It is that the workflow bundler is not compiling for the node target, and therefore, webpack does not even know how to process dependencies in the node: namespace.

Would it be possible for you to ignore the module that does import that node: dependency?

That's what I am trying to do with externals.

Anyway, overriding externals does the job.

// @see https://github.com/temporalio/sdk-typescript/issues/1036#issuecomment-1405322953
config.externals = {
  "node:crypto": "{}"
};

A Temporal-compatible patch:

const temporalExternals = config.externals;

config.externals = async (context, callback) => {
  if (context.request === 'node:crypto') {
    return 'var {}';
  }

  return temporalExternals(context, callback);
};

config.resolve.alias = {
  ...config.resolve.alias,
  '@': path.resolve(__dirname, '../..'),
  slonik: false,
};