v2.1.2+node25.8.2 — Node.js 25.8.2 and Docker Hub Validation Fix
Runtime Node v2.1.2+node25.8.2
Secure, Distroless, Multi-Arch Node.js Runtime. Built from Scratch.
This is a patch release on the Node.js 25 maintenance line. The Node.js runtime remains 25.8.2, and the image composition, distroless guarantee, runtime defaults, and binary path are unchanged from v2.1.1+node25.8.2. This release restores Docker Hub image validation and manifest inspection in the manual promotion workflow so those steps resolve the configured DOCKERHUB_IMAGE repository using normalized tag outputs, and it updates branch naming and version examples in CONTRIBUTING.md and README.md to match the current repository conventions.
Pull the Image
# Docker Hub — versioned (recommended for production)
docker pull runtimenode/runtime-node:v2.1.2-node25.8.2
# GitHub Container Registry — versioned (recommended for production)
docker pull ghcr.io/runtimes-node/runtime-node:v2.1.2-node25.8.2Note: Docker registries normalize
+to-in tag names. The canonical version tag isv2.1.2+node25.8.2— the registry tag isv2.1.2-node25.8.2.
What's Included
| Component | Detail |
|---|---|
| Base | FROM scratch — no OS, no shell |
| Node.js Version | 25.8.2 (from node:25.8.2-alpine3.23) |
NODE_ENV |
production (baked in) |
TZ |
UTC (baked in) |
| Timezone Database | IANA tzdata (/usr/share/zoneinfo) |
| CA Certificates | Included (/etc/ssl/certs/) |
| DNS Resolution | nsswitch.conf included |
| Runtime Libraries | ld-musl, libstdc++, libgcc_s |
/tmp |
Writable, sticky-bit 1777 |
| Shell | None |
| Package Manager | None |
| Architectures | linux/amd64, linux/arm64 |
| Provenance & SBOM | Attached to this release |
What's New
- Updated
Check Image Existence (Docker Hub)in.github/workflows/deployment.ymlto setTAG="${{ steps.tag.outputs.tag }}"and constructDOCKER_IMG="docker.io/${{ env.DOCKERHUB_IMAGE }}:$TAG"instead of extracting the firstdocker.io/entry fromsteps.meta.outputs.tags. - Updated
Verify promoted manifest (Docker Hub)in.github/workflows/deployment.ymlto setTAG="${{ steps['promote-tag'].outputs.tag }}"and inspectdocker.io/${{ env.DOCKERHUB_IMAGE }}:$TAGinstead of extracting the destination reference fromsteps.meta-promote.outputs.tags. - Updated the Change Workflow branch example in
CONTRIBUTING.mdfromdevelop/v1+node24todevelop-v1+node24. - Updated the example version tag in the Versioning and Tags section of
README.mdfromv2.0.2+node25.8.1tov2.1.2+node25.8.2. - Kept the runtime image contents unchanged from
v2.1.1+node25.8.2; there are noDockerfile, dependency, or runtime behavior changes in this release.
Maintenance Line
This tag is published on the maintenance/v2+node25 branch. The v2.x.x+node25.x.x line receives minor and patch updates only — no major Node.js version changes will be made on this branch.
Versioning
Tags follow the pattern v<image_semver>+node<node_version>. GitHub marks this release as the latest published release as of March 29, 2026.
Immutable Tag
This tag is immutable. Once published, v2.1.2+node25.8.2 will never be moved or overwritten on either registry.