v1.0.1+node24.13.1 — Node.js 24 Maintenance Patch
Runtime Node v1.0.1+node24.13.1
Secure, Distroless, Multi-Arch Node.js Runtime. Built from Scratch.
This is the first patch release on the Node.js 24 maintenance line. The Node.js runtime version remains at 24.13.1 — the image is identical to v1.0.0+node24.13.1. This release establishes automated Dependabot monitoring for the develop-v1+node24 maintenance branch, constrained to minor and patch updates only.
Pull the Image
# Docker Hub — versioned (recommended for production)
docker pull runtimenode/runtime-node:v1.0.1+node24.13.1
# GitHub Container Registry — versioned (recommended for production)
docker pull ghcr.io/runtimes-node/runtime-node:v1.0.1+node24.13.1What's Included
| Component | Detail |
|---|---|
| Base | FROM scratch — no OS, no shell |
| Node.js Version | 24.13.1 (from node:24.13.1-alpine3.23) |
NODE_ENV |
production (baked in) |
TZ |
UTC (baked in) |
| Timezone Database | IANA tzdata (/usr/share/zoneinfo) |
| CA Certificates | Included (/etc/ssl/certs/) |
| DNS Resolution | nsswitch.conf included |
| Runtime Libraries | ld-musl, libstdc++, libgcc_s |
/tmp |
Writable, sticky-bit 1777 |
| Shell | None |
| Package Manager | None |
| Vulnerabilities | 0 known |
| Architectures | linux/amd64, linux/arm64 |
| Provenance & SBOM | Attached to this release |
What's New
- Added a second
updatesentry to.github/dependabot.ymltargetingdevelop-v1+node24as thetarget-branch, with adailyschedule and anignorerule suppressing allversion-update:semver-majorupdates — ensuring Dependabot only proposes minor and patch-level base image bumps against the Node.js 24 maintenance branch and never promotes it to Node.js 25 or beyond. - Applied the
v1+node24-maintenancelabel to the new Dependabot block, distinguishing its PRs from those targetingdevelop.
Maintenance Line
This tag is published on the maintenance/v1+node24 branch. The v1.x.x+node24.x.x line receives minor and patch updates only — no major Node.js version changes will be made on this branch.
Versioning
Tags follow the pattern v<image_semver>+node<node_version>. The latest tag tracks the most recent stable release on main and is not updated by maintenance releases.
Immutable Tag
This tag is immutable. Once published, v1.0.1+node24.13.1 will never be moved or overwritten on either registry.