Optional Node.js Current bundle

All bundles

bundles/node-current supplies official stable Node.js Current Linux AMD64 and ARM64 prebuilts and their bundled npm/npx. The existing node bundle continues to supply Node.js 24 LTS with its existing catalog, lock, image, volume and consumer configuration.

Published bundle

Version: 26.12.0-b1

Index digest: sha256:c6e4e6361259fc631c3a4bee1a6ddab9d7634c05c606c749e1cf948ac5258496

Source: e21d027576ae2582a98e10da4abd62141389a8a7

Publication: run 38782490023, attempt 1

Pull this published carrier by its immutable index digest:

docker pull quay.io/bundledock/node@sha256:c6e4e6361259fc631c3a4bee1a6ddab9d7634c05c606c749e1cf948ac5258496

The source inventory below describes the current lock; this publication retains its exact source revision.

The official distribution index , checked October 12, 2026, identifies v26.11.1 (October 7, 2026) as Current, with npm 11.20.0. The shared Node provider selects only stable releases whose lts field is explicitly false, within the reviewed 26.x constraint. The existing LTS provider selection remains unchanged. Missing, null, malformed or LTS channel markers, prereleases and nightly releases cannot become Current. A matching newer release missing either native prebuilt or publisher checksum fails closed instead of falling back.

Both official tar.gz archives were downloaded and verified against SHASUMS256.txt , then read without extracting or executing their contents. Each has 5,828 members and two symlinks (npm and npx). The unmodified upstream LICENSE is retained. The existing node-runtime profile preserves the full payload, validates those relative links and supplies npm/npx launchers using this carrier’s Node. Only optional Corepack is omitted. Third-party binaries are never compiled or patched. Native OCI builds, Node/npm execution, smoke and vulnerability scans on both architectures remain pending explicit approval.

Manual consumer use

After explicit approval of the exact revision and intended operation:

make bundle-build BUNDLE=node-current
make bundle-smoke BUNDLE=node-current
make bundle-volume BUNDLE=node-current

Mount the printed image-derived bundledock-node-current-<full image ID> volume read-only at /opt/bdock/node-current in a stock glibc language image. Add /opt/bdock/node-current/bin to PATH. Keep HOME, npm cache, global prefix and projects outside the mount; follow the Node consumer guidance . No user configuration filename or default consumer activation changes.

Updates and publication

bdock tools upgrade --directory bundles/node-current updates this bundle’s lock alone, using canonical tool ID node. The propose-upgrades.yml workflow selects bundle=node-current through the shared lock-only updater daily at 06:50 UTC and supports manual dry runs. It never builds or dispatches publication.

publish-bundles.yml calls the existing shared publication workflow with bundle=node-current, sharing caller workflow identity while retaining distinct artifacts, volume and source tag identity. Both Node channels publish to quay.io/bundledock/node. Current promotion updates only :current; LTS promotion updates :lts, :latest and the backward compatible :stable. An unqualified Node pull therefore follows LTS. An absent published baseline stops automatic updater publication; only separately authorized exact-SHA manual dispatch can bootstrap publication. After an established published baseline, the normal owner-merged updater publication flow applies. Version tags use 26.11.1-bN, with packaging revisions allocated across the complete shared registry tag list and both node/* and node-current/* source tag namespaces, and successful approved publication creates node-current/<immutable-version>. No image digest, tag or successful workflow run is claimed here.