v1.2.6+node24.14.1 — Node.js 24.14.1 and CI Workflow Updates

[Amnoor]

Runtime Node v1.2.6+node24.14.1

Secure, Distroless, Multi-Arch Node.js Runtime. Built from Scratch.

This is a patch release on the Node.js 24 maintenance line. The Node.js runtime remains 24.14.1, and the image composition, distroless guarantee, runtime defaults, and binary path are unchanged from v1.2.5+node24.14.1. This release moves PR image testing from Docker Hub-pushed images to OCI artifact handoff, updates docker/build-push-action to v7 in both workflows, and refreshes the README versioning examples and CI/CD tooling references to match the current v1 maintenance release state.

---

Pull the Image

# Docker Hub — versioned (recommended for production)
docker pull runtimenode/runtime-node:v1.2.6-node24.14.1

# GitHub Container Registry — versioned (recommended for production)
docker pull ghcr.io/runtimes-node/runtime-node:v1.2.6-node24.14.1

Note: Docker registries normalize + to - in tag names. The canonical version tag is v1.2.6+node24.14.1 — the registry tag is v1.2.6-node24.14.1.

---

What's Included

Component	Detail
Base	FROM scratch — no OS, no shell
Node.js Version	24.14.1 (from node:24.14.1-alpine3.23)
NODE_ENV	production (baked in)
TZ	UTC (baked in)
Timezone Database	IANA tzdata (/usr/share/zoneinfo)
CA Certificates	Included (/etc/ssl/certs/)
DNS Resolution	nsswitch.conf included
Runtime Libraries	ld-musl, libstdc++, libgcc_s
/tmp	Writable, sticky-bit 1777
Shell	None
Package Manager	None
Architectures	linux/amd64, linux/arm64
Provenance & SBOM	Attached to this release

---

What's New

• Updated .github/workflows/pr-tests.yml to stop pushing PR images to Docker Hub by changing the Build Image step from push: true to push: false with outputs: type=oci,dest=image.tar, and added Upload Docker Image Artifact, Download Docker Image Artifact, Extract single-arch image with Skopeo, and artifact-clean-up to hand the image between jobs as an OCI artifact.
• Updated .github/workflows/pr-tests.yml from uses: docker/build-push-action@v6 to uses: docker/build-push-action@v7 in the Build Image step, and updated .github/workflows/deployment.yml from uses: docker/build-push-action@v5 to uses: docker/build-push-action@v7 in the Build and push (multi-registry, multi-platform) step.
• Updated the Versioning and Tags example in README.md from v1.2.4+node24.14.1 to v1.2.6+node24.14.1.
• Updated the docker/metadata-action normalization note in README.md from v1.2.4+node24.14.1 → v1.2.4-node24.14.1 to v1.2.6+node24.14.1 → v1.2.6-node24.14.1.
• Added actions/upload-artifact, actions/download-artifact, geekyeggo/delete-artifact, chrnorm/deployment-action, and chrnorm/deployment-status to the CI/CD & Build Tooling section of README.md.
• Kept the runtime image contents unchanged from v1.2.5+node24.14.1; there are no Dockerfile, dependency, or runtime behavior changes in this release.

---

Maintenance Line

This tag is published on the maintenance/v1+node24 branch. The v1.x.x+node24.x.x line receives minor and patch updates only — no major Node.js version changes will be made on this branch.

---

Versioning

Tags follow the pattern v<image_semver>+node<node_version>. The latest tag continues to track the newest overall release line and is not updated by this maintenance release.

---

Immutable Tag

This tag is immutable. Once published, v1.2.6+node24.14.1 will never be moved or overwritten on either registry.

---

Full Changelog

v1.2.5+node24.14.1...v1.2.6+node24.14.1

---

This discussion was created from the release v1.2.6+node24.14.1 — Node.js 24.14.1 and CI Workflow Updates.