b19/node
Watch
2
0
Fork
You've already forked node
 0
Code Issues Pull requests Projects Releases 8 Packages 1 Wiki Activity Actions
8 releases 16 tags
  • 0.8.0 e22aa505e8

    0.8.0
    All checks were successful
    published / projectfile-is-valid (push) Successful in 8s
    Details
    published / release-tag (push) Successful in 5s
    Details
    published / runner-is-ready (push) Successful in 13s
    Details
    published / source-is-compliant (push) Successful in 16s
    Details
    published / source-is-secure (push) Successful in 20s
    Details
    published / documentation-passes-lint (push) Successful in 1m59s
    Details
    published / projectfile-is-ok (push) Successful in 28s
    Details
    published / signing-is-ready (push) Successful in 34s
    Details
    published / source-passes-lint (push) Successful in 1m34s
    Details
    published / image-is-built-24 (24) (push) Successful in 5m6s
    Details
    published / image-is-built-26 (26) (push) Successful in 3m39s
    Details
    published / image-has-sbom (24) (push) Successful in 30s
    Details
    published / image-has-sbom (26) (push) Successful in 23s
    Details
    published / container-is-verified (24) (push) Successful in 1m31s
    Details
    published / container-is-verified (26) (push) Successful in 1m33s
    Details
    published / image-is-secure (24) (push) Successful in 36s
    Details
    published / image-is-secure (26) (push) Successful in 35s
    Details
    published / image-is-published (24, kiota) (push) Successful in 30s
    Details
    published / image-is-published (26, kiota) (push) Successful in 29s
    Details
    published / release-is-published (push) Successful in 3s
    Details
    published / release-notes-are-published (push) Successful in 6s
    Details
    published / published (push) Successful in 0s
    Details
    Stable

    damian-buho released this 2026-10-21 10:55:20 +00:00 | 19 commits to main since this release

    Signed by damian-buho
    GPG key ID: 87B15EAD49FD22AB

    5 commits, 1 contributor, 1 day since 0.7.5.

    What’s new

    Certificate trust follows the system store

    • Node is built to verify TLS against the system trust store, not the Mozilla copy compiled into the official binary.
    • A root removed from the system store, by Ubuntu or by the b19 distrust list, stops being trusted at once, without waiting for a Node release.
    • Certificates added to the system store are trusted with no NODE_EXTRA_CA_CERTS setup.
    • NODE_OPTIONS=--use-bundled-ca returns to the compiled-in copy.

    Features

    • security: verify TLS against the system CA store (f042c53)

    Bug fixes

    • security: drop NODE_EXTRA_CA_CERTS, the default store is the system one (4b85fe8)

    Installation

    Pull the published container image:

    docker pull kiota.ch/b19/node:0.8.0

    This release also publishes the 0.8 and 0 tags — pull the precision you want to pin.

    Usage

    Build on top of this image:

    FROM kiota.ch/b19/node:0.8.0

    For the recommended multi-stage pattern and the build-hook system (build.d), scaffold a derivative with b19/scripts/scaffold.sh from m6e/b19.

    Image digests

    A tag can move; a digest cannot. Pull this exact build:

    docker pull kiota.ch/b19/node@sha256:fa5b2541643680486cadac316c751c6cd05fd2671d19e22bc785d7dce00b8f8e

    Verify

    Check that what you downloaded is what this project published.

    Container image

    The signature proves this project’s CI built and pushed the image; the attestation carries its software bill of materials.

    COSIGN_KEY=https://kiota.ch/damian-buho/metadata/raw/branch/main/keys/ci-cosign-key.pub
cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true kiota.ch/b19/node@sha256:fa5b2541643680486cadac316c751c6cd05fd2671d19e22bc785d7dce00b8f8e
cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx kiota.ch/b19/node@sha256:fa5b2541643680486cadac316c751c6cd05fd2671d19e22bc785d7dce00b8f8e

    Full changes: https://kiota.ch/b19/node/compare/0.7.5...0.8.0

    Downloads