v2.1.4+node25.8.2 — Node.js 25.8.2 and Explicit Docker Metadata Tags

[Amnoor]

Runtime Node v2.1.4+node25.8.2

Secure, Distroless, Multi-Arch Node.js Runtime. Built from Scratch.

This is a patch release on the Node.js 25 maintenance line. The Node.js runtime remains 25.8.2, and the image composition, distroless guarantee, runtime defaults, and binary path are unchanged from v2.1.3+node25.8.2. This release disables implicit latest and debug tag generation in the deployment workflow so release and promotion metadata only emit the explicitly configured tags.

---

Pull the Image

# Docker Hub — versioned (recommended for production)
docker pull runtimenode/runtime-node:v2.1.4-node25.8.2

# GitHub Container Registry — versioned (recommended for production)
docker pull ghcr.io/runtimes-node/runtime-node:v2.1.4-node25.8.2

Note: Docker registries normalize + to - in tag names. The canonical version tag is v2.1.4+node25.8.2 — the registry tag is v2.1.4-node25.8.2.

---

What's Included

Component	Detail
Base	FROM scratch — no OS, no shell
Node.js Version	25.8.2 (from node:25.8.2-alpine3.23)
NODE_ENV	production (baked in)
TZ	UTC (baked in)
Timezone Database	IANA tzdata (/usr/share/zoneinfo)
CA Certificates	Included (/etc/ssl/certs/)
DNS Resolution	nsswitch.conf included
Runtime Libraries	ld-musl, libstdc++, libgcc_s
/tmp	Writable, sticky-bit 1777
Shell	None
Package Manager	None
Architectures	linux/amd64, linux/arm64
Provenance & SBOM	Attached to this release

---

What's New

• Added flavor: with latest=false and debug=false to the Docker meta (version tags + labels) step in .github/workflows/deployment.yml so tag builds only emit the tags derived from type=ref,event=tag.
• Added flavor: with latest=false and debug=false to the Normalize tag (match tag) step in .github/workflows/deployment.yml so manual promotion tag normalization does not generate implicit extra tags.
• Added flavor: with latest=false and debug=false to the Normalize promote name (floating tag) step in .github/workflows/deployment.yml so promotion target normalization is limited to the explicit workflow_dispatch input.
• Kept the runtime image contents unchanged from v2.1.3+node25.8.2; there are no Dockerfile, dependency, or runtime behavior changes in this release.

---

Maintenance Line

This tag is published on the maintenance/v2+node25 branch. The v2.x.x+node25.x.x line receives minor and patch updates only — no major Node.js version changes will be made on this branch.

---

Versioning

Tags follow the pattern v<image_semver>+node<node_version>. GitHub marks this release as the latest published release as of March 31, 2026.

---

Immutable Tag

This tag is immutable. Once published, v2.1.4+node25.8.2 will never be moved or overwritten on either registry.

---

Full Changelog

v2.1.3+node25.8.2...v2.1.4+node25.8.2

---

This discussion was created from the release v2.1.4+node25.8.2 — Node.js 25.8.2 and Explicit Docker Metadata Tags.