Skip to content

v3.0.0+node26.0.0 — Node.js 26.0.0 and Dependabot Maintenance Updates

Choose a tag to compare

@Amnoor Amnoor released this 11 May 08:35
· 7 commits to main since this release
Immutable release. Only release title and notes can be modified.
f807491

Runtime Node v3.0.0+node26.0.0

Secure, Distroless, Multi-Arch Node.js Runtime. Built from Scratch.

This is the first major release on the Node.js 26 line. The Node.js runtime is upgraded from 25.9.0 to 26.0.0. This release also adds a dedicated Dependabot Docker update configuration for develop-v2+node25 and refreshes the version examples in README.md and CONTRIBUTING.md to match the new release line. The image composition, distroless guarantee, runtime defaults, and binary path remain unchanged apart from the Node.js version bump.


Pull the Image

# Docker Hub — versioned (recommended for production)
docker pull runtimenode/runtime-node:v3.0.0-node26.0.0

# GitHub Container Registry — versioned (recommended for production)
docker pull ghcr.io/runtimes-node/runtime-node:v3.0.0-node26.0.0

Note: Docker registries normalize + to - in tag names. The canonical version tag is v3.0.0+node26.0.0 — the registry tag is v3.0.0-node26.0.0.


What's Included

Component Detail
Base FROM scratch — no OS, no shell
Node.js Version 26.0.0 (from node:26.0.0-alpine3.23)
NODE_ENV production (baked in)
TZ UTC (baked in)
Timezone Database IANA tzdata (/usr/share/zoneinfo)
CA Certificates Included (/etc/ssl/certs/)
DNS Resolution nsswitch.conf included
Runtime Libraries ld-musl, libstdc++, libgcc_s
/tmp Writable, sticky-bit 1777
Shell None
Package Manager None
Architectures linux/amd64, linux/arm64
Provenance & SBOM Attached to this release

What's New

  • Updated FROM node:25.9.0-alpine3.23 AS builder to FROM node:26.0.0-alpine3.23 AS builder in Dockerfile, upgrading the Node.js runtime bundled into the final scratch image from 25.9.0 to 26.0.0.
  • Added a third Docker updates entry in .github/dependabot.yml for target-branch: "develop-v2+node25" with interval: "daily", dependency-name: "*", update-types: "version-update:semver-major", and the labels dependencies, node, and v2+node25-maintenance.
  • Updated the Node.js Version Bumps example in CONTRIBUTING.md from node:25.9.0-alpine3.23 to node:26.0.0-alpine3.23.
  • Updated the Versioning and Tags example in README.md from v2.2.0+node25.9.0 to v3.0.0+node26.0.0.
  • Kept the distroless image composition, runtime defaults, binary path, and multi-arch output unchanged apart from the Node.js version bump.

Release Line

This tag is published from the main branch and establishes the v3.x.x+node26.x.x release line.


Versioning

Tags follow the pattern v<image_semver>+node<node_version>. The latest tag now tracks v3.0.0+node26.0.0, and GitHub marks this release as the latest published release as of May 11, 2026.


Immutable Tag

This tag is immutable. Once published, v3.0.0+node26.0.0 will never be moved or overwritten on either registry.


Full Changelog

v2.2.0+node25.9.0...v3.0.0+node26.0.0