Node.js 26.13.0 preview 2b5e2fab76dc

Node.js 26.13.0 qualified preview

Native amd64/arm64 qualification passed at source 2b5e2fa.

This prerelease includes exact Docker image archives, payload SBOMs/file maps/locks, verification reports, matching source RPM bundles and project source. The source bundles include the upstream release source and signature evidence. Component licenses remain individual. Registry signatures and provenance were verified by Actions run.

This is a runtime preview, not a declaration that the project-wide Java/Python/Node.js v1 milestone is complete.

Published image

ghcr.io/rambow-cloud/amazon-linux-distroless/nodejs26:nodejs26-2b5e2fab76dc

ghcr.io/rambow-cloud/amazon-linux-distroless/nodejs26@sha256:c8ec656025a3c7bac8484a4f50fa64c621740874579887692a791ba60f9c20d5

Rolling preview: ghcr.io/rambow-cloud/amazon-linux-distroless/nodejs26:26-preview

Architectures: linux/amd64, linux/arm64. Cosign keyless signature and qualified-build provenance verification passed. Registry visibility at publication: public.

Certificate identity: https://github.com/rambow-cloud/amazon-linux-distroless/.github/workflows/runtime-publish.yml@refs/heads/main
OIDC issuer: https://token.actions.githubusercontent.com

ALAS unfixed/language-runtime coverage remains limited; zero scanner findings is not a no-risk guarantee. Production applications require their own dependency and workload qualification.