v2.1.1+node25.8.2 — Node.js 25.8.2
Runtime Node v2.1.1+node25.8.2
Secure, Distroless, Multi-Arch Node.js Runtime. Built from Scratch.
This is a patch release on the Node.js 25 maintenance line. The Node.js runtime remains 25.8.2, and the image composition, distroless guarantee, runtime defaults, and binary path are unchanged from v2.1.0+node25.8.2. This release fixes deployment workflow image reference resolution for manual floating-tag promotions by using fully qualified GHCR and Docker Hub references emitted by docker/metadata-action@v5 during validation, promotion, and manifest verification.
Pull the Image
# Docker Hub — versioned (recommended for production)
docker pull runtimenode/runtime-node:v2.1.1-node25.8.2
# GitHub Container Registry — versioned (recommended for production)
docker pull ghcr.io/runtimes-node/runtime-node:v2.1.1-node25.8.2Note: Docker registries normalize
+to-in tag names. The canonical version tag isv2.1.1+node25.8.2— the registry tag isv2.1.1-node25.8.2.
What's Included
| Component | Detail |
|---|---|
| Base | FROM scratch — no OS, no shell |
| Node.js Version | 25.8.2 (from node:25.8.2-alpine3.23) |
NODE_ENV |
production (baked in) |
TZ |
UTC (baked in) |
| Timezone Database | IANA tzdata (/usr/share/zoneinfo) |
| CA Certificates | Included (/etc/ssl/certs/) |
| DNS Resolution | nsswitch.conf included |
| Runtime Libraries | ld-musl, libstdc++, libgcc_s |
/tmp |
Writable, sticky-bit 1777 |
| Shell | None |
| Package Manager | None |
| Architectures | linux/amd64, linux/arm64 |
| Provenance & SBOM | Attached to this release |
What's New
- Fixed image reference resolution in
.github/workflows/deployment.ymlfor manual promotion runs by deriving GHCR and Docker Hub source references directly fromsteps.meta.outputs.tags. - Fixed floating-tag promotion in
.github/workflows/deployment.ymlby deriving destination references fromsteps.meta-promote.outputs.tagsinstead of reconstructing them from tag-only outputs. - Fixed promoted manifest verification in
.github/workflows/deployment.ymlby inspecting the fully qualified promoted image references emitted bydocker/metadata-action@v5. - Kept the runtime image contents unchanged from
v2.1.0+node25.8.2; there are noDockerfile, dependency, or runtime behavior changes in this release.
Maintenance Line
This tag is published on the maintenance/v2+node25 branch. The v2.x.x+node25.x.x line receives minor and patch updates only — no major Node.js version changes will be made on this branch.
Versioning
Tags follow the pattern v<image_semver>+node<node_version>. GitHub marks this release as the latest published release as of March 29, 2026.
Immutable Tag
This tag is immutable. Once published, v2.1.1+node25.8.2 will never be moved or overwritten on either registry.