v3.0.0+node26.0.0 — Node.js 26.0.0 and Dependabot Maintenance Updates
Runtime Node v3.0.0+node26.0.0
Secure, Distroless, Multi-Arch Node.js Runtime. Built from Scratch.
This is the first major release on the Node.js 26 line. The Node.js runtime is upgraded from 25.9.0 to 26.0.0. This release also adds a dedicated Dependabot Docker update configuration for develop-v2+node25 and refreshes the version examples in README.md and CONTRIBUTING.md to match the new release line. The image composition, distroless guarantee, runtime defaults, and binary path remain unchanged apart from the Node.js version bump.
Pull the Image
# Docker Hub — versioned (recommended for production)
docker pull runtimenode/runtime-node:v3.0.0-node26.0.0
# GitHub Container Registry — versioned (recommended for production)
docker pull ghcr.io/runtimes-node/runtime-node:v3.0.0-node26.0.0Note: Docker registries normalize
+to-in tag names. The canonical version tag isv3.0.0+node26.0.0— the registry tag isv3.0.0-node26.0.0.
What's Included
| Component | Detail |
|---|---|
| Base | FROM scratch — no OS, no shell |
| Node.js Version | 26.0.0 (from node:26.0.0-alpine3.23) |
NODE_ENV |
production (baked in) |
TZ |
UTC (baked in) |
| Timezone Database | IANA tzdata (/usr/share/zoneinfo) |
| CA Certificates | Included (/etc/ssl/certs/) |
| DNS Resolution | nsswitch.conf included |
| Runtime Libraries | ld-musl, libstdc++, libgcc_s |
/tmp |
Writable, sticky-bit 1777 |
| Shell | None |
| Package Manager | None |
| Architectures | linux/amd64, linux/arm64 |
| Provenance & SBOM | Attached to this release |
What's New
- Updated
FROM node:25.9.0-alpine3.23 AS buildertoFROM node:26.0.0-alpine3.23 AS builderinDockerfile, upgrading the Node.js runtime bundled into the final scratch image from25.9.0to26.0.0. - Added a third Docker
updatesentry in.github/dependabot.ymlfortarget-branch: "develop-v2+node25"withinterval: "daily",dependency-name: "*",update-types: "version-update:semver-major", and the labelsdependencies,node, andv2+node25-maintenance. - Updated the Node.js Version Bumps example in
CONTRIBUTING.mdfromnode:25.9.0-alpine3.23tonode:26.0.0-alpine3.23. - Updated the Versioning and Tags example in
README.mdfromv2.2.0+node25.9.0tov3.0.0+node26.0.0. - Kept the distroless image composition, runtime defaults, binary path, and multi-arch output unchanged apart from the Node.js version bump.
Release Line
This tag is published from the main branch and establishes the v3.x.x+node26.x.x release line.
Versioning
Tags follow the pattern v<image_semver>+node<node_version>. The latest tag now tracks v3.0.0+node26.0.0, and GitHub marks this release as the latest published release as of May 11, 2026.
Immutable Tag
This tag is immutable. Once published, v3.0.0+node26.0.0 will never be moved or overwritten on either registry.