Node.js 26.13.0 preview b1e33dc620f5

Node.js 26.13.0 qualified preview

Native amd64/arm64 qualification passed at source b1e33dc.

This prerelease includes exact Docker image archives, payload SBOMs/file maps/locks, verification reports, matching source RPM bundles and project source. The source bundles include the upstream release source and signature evidence. Component licenses remain individual. Registry signatures and provenance were verified by Actions run.

This is a runtime preview, not a declaration that the project-wide Java/Python/Node.js v1 milestone is complete.

Published image

ghcr.io/rambow-cloud/amazon-linux-distroless/nodejs26:nodejs26-b1e33dc620f5

ghcr.io/rambow-cloud/amazon-linux-distroless/nodejs26@sha256:c00948070c983b92a392ef03c2fc15799c87949cb3691f20b24dc14fae7dae6d

Rolling preview: ghcr.io/rambow-cloud/amazon-linux-distroless/nodejs26:26-preview

Architectures: linux/amd64, linux/arm64. Cosign keyless signature and qualified-build provenance verification passed. Registry visibility at publication: public.

Certificate identity: https://github.com/rambow-cloud/amazon-linux-distroless/.github/workflows/runtime-publish.yml@refs/heads/main
OIDC issuer: https://token.actions.githubusercontent.com

ALAS unfixed/language-runtime coverage remains limited; zero scanner findings is not a no-risk guarantee. Production applications require their own dependency and workload qualification.