Experiment: Node 26 in the image (do not merge)

.github/workflows/e2e-image.yml

@@ -101,6 +101,13 @@ jobs:
             sleep 30
           done
 
+      - name: Show the engine's Node requirement
+        run: |
+          docker run --rm -v socket-cache:/c --entrypoint sh "$IMAGE" -c '
+            node --version
+            find /c -maxdepth 6 -name package.json | head -20
+            for f in $(find /c -maxdepth 6 -name package.json); do echo "$f"; node -e "const p=require(process.argv[1]); console.log(p.name, p.version, JSON.stringify(p.engines))" "$f"; done'
+
       - name: Validate results
         run: >-
           docker run --rm -v "$PWD:/repo" -v /tmp/e2e-output.log:/tmp/e2e-output.log:ro -w /repo

Dockerfile

@@ -1,7 +1,7 @@
 # Node.js from the official Alpine image instead of Alpine's nodejs package, which
 # lags Node's security releases. Match the major version to what reachability needs
 # and the Alpine release to the python:3-alpine base below.
-FROM node:24-alpine3.24 AS node
+FROM node:26-alpine3.24 AS node
 
 FROM python:3-alpine
 LABEL org.opencontainers.image.authors="socket.dev"