v3.0.0+node26.0.0 — Node.js 26.0.0 and Dependabot Maintenance Updates

[Amnoor]

Runtime Node v3.0.0+node26.0.0

Secure, Distroless, Multi-Arch Node.js Runtime. Built from Scratch.

This is the first major release on the Node.js 26 line. The Node.js runtime is upgraded from 25.9.0 to 26.0.0. This release also adds a dedicated Dependabot Docker update configuration for develop-v2+node25 and refreshes the version examples in README.md and CONTRIBUTING.md to match the new release line. The image composition, distroless guarantee, runtime defaults, and binary path remain unchanged apart from the Node.js version bump.

---

Pull the Image

# Docker Hub — versioned (recommended for production)
docker pull runtimenode/runtime-node:v3.0.0-node26.0.0

# GitHub Container Registry — versioned (recommended for production)
docker pull ghcr.io/runtimes-node/runtime-node:v3.0.0-node26.0.0

Note: Docker registries normalize + to - in tag names. The canonical version tag is v3.0.0+node26.0.0 — the registry tag is v3.0.0-node26.0.0.

---

What's Included

Component	Detail
Base	FROM scratch — no OS, no shell
Node.js Version	26.0.0 (from node:26.0.0-alpine3.23)
NODE_ENV	production (baked in)
TZ	UTC (baked in)
Timezone Database	IANA tzdata (/usr/share/zoneinfo)
CA Certificates	Included (/etc/ssl/certs/)
DNS Resolution	nsswitch.conf included
Runtime Libraries	ld-musl, libstdc++, libgcc_s
/tmp	Writable, sticky-bit 1777
Shell	None
Package Manager	None
Architectures	linux/amd64, linux/arm64
Provenance & SBOM	Attached to this release

---

What's New

• Updated FROM node:25.9.0-alpine3.23 AS builder to FROM node:26.0.0-alpine3.23 AS builder in Dockerfile, upgrading the Node.js runtime bundled into the final scratch image from 25.9.0 to 26.0.0.
• Added a third Docker updates entry in .github/dependabot.yml for target-branch: "develop-v2+node25" with interval: "daily", dependency-name: "*", update-types: "version-update:semver-major", and the labels dependencies, node, and v2+node25-maintenance.
• Updated the Node.js Version Bumps example in CONTRIBUTING.md from node:25.9.0-alpine3.23 to node:26.0.0-alpine3.23.
• Updated the Versioning and Tags example in README.md from v2.2.0+node25.9.0 to v3.0.0+node26.0.0.
• Kept the distroless image composition, runtime defaults, binary path, and multi-arch output unchanged apart from the Node.js version bump.

---

Release Line

This tag is published from the main branch and establishes the v3.x.x+node26.x.x release line.

---

Versioning

Tags follow the pattern v<image_semver>+node<node_version>. The latest tag now tracks v3.0.0+node26.0.0, and GitHub marks this release as the latest published release as of May 11, 2026.

---

Immutable Tag

This tag is immutable. Once published, v3.0.0+node26.0.0 will never be moved or overwritten on either registry.

---

Full Changelog

v2.2.0+node25.9.0...v3.0.0+node26.0.0

---

This discussion was created from the release v3.0.0+node26.0.0 — Node.js 26.0.0 and Dependabot Maintenance Updates.