Skip to content

v2.0.2+node25.8.1 — Workflow Fix and Docs Correction

Choose a tag to compare

View all tags
@Amnoor Amnoor released this 21 Mar 09:43
· 68 commits to main since this release
Immutable release. Only release title and notes can be modified.
v2.0.2+node25.8.1
6a245dc
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Runtime Node v2.0.2+node25.8.1

Secure, Distroless, Multi-Arch Node.js Runtime. Built from Scratch.

This is the second patch release on the Node.js 25 maintenance line. The Node.js runtime version remains at 25.8.1 — the image is identical to v2.0.1+node25.8.1. This release fixes a bug in the promote-floating workflow job that prevented floating tag promotion from succeeding, and corrects pull and FROM tag examples in README.md to match the actual registry-normalized tag format.

Pull the Image

# Docker Hub — versioned (recommended for production)
docker pull runtimenode/runtime-node:v2.0.2-node25.8.1

# GitHub Container Registry — versioned (recommended for production)
docker pull ghcr.io/runtimes-node/runtime-node:v2.0.2-node25.8.1

Note: Docker registries normalize + to - in tag names. The canonical version tag is v2.0.2+node25.8.1 — the registry tag is v2.0.2-node25.8.1.

What's Included

Component Detail
Base FROM scratch — no OS, no shell
Node.js Version 25.8.1 (from node:25.8.1-alpine3.23)
NODE_ENV production (baked in)
TZ UTC (baked in)
Timezone Database IANA tzdata (/usr/share/zoneinfo)
CA Certificates Included (/etc/ssl/certs/)
DNS Resolution nsswitch.conf included
Runtime Libraries ld-musl, libstdc++, libgcc_s
/tmp Writable, sticky-bit 1777
Shell None
Package Manager None
Vulnerabilities 0 known
Architectures linux/amd64, linux/arm64
Provenance & SBOM Attached to this release

What's New

  • Fixed the promote-floating job in .github/workflows/deployment.yml to normalize the workflow_dispatch inputs tag and promote_name through docker/metadata-action@v5 before any registry operation. The bug caused every floating tag promotion to fail when the tag contained a + character, because Docker registries normalize + to - at publish time but the promote job was referencing the raw un-normalized input. Four normalization and extraction steps are now added before the authentication steps, and all six direct raw-input references in the validation, promotion, and verification steps are replaced with the normalized step outputs.
  • Updated the Docker Hub versioned pull example, the GHCR versioned pull example, and the versioned FROM line in the Dockerfile Usage section of README.md from the + separator format to the - separator format to match the actual tag names that exist in both registries.
  • Updated the Versioning and Tags section example tag in README.md from v2.0.0+node25.8.1 to v2.0.2+node25.8.1.

Maintenance Line

This tag is published on the maintenance/v2+node25 branch. The v2.x.x+node25.x.x line receives minor and patch updates only — no major Node.js version changes will be made on this branch.

Versioning

Tags follow the pattern v<image_semver>+node<node_version>. The latest tag tracks the most recent stable release on main and is not updated by maintenance releases.

Immutable Tag

This tag is immutable. Once published, v2.0.2+node25.8.1 will never be moved or overwritten on either registry.

Full Changelog

v2.0.1+node25.8.1...v2.0.2+node25.8.1

Assets 3
Loading
0 Join discussion