Summary
The Docker image installs nodejs from Debian 13.4 (trixie) apt repos, which provides Node.js 20.x. Node 20 LTS enters end-of-life in April 2026 — it will stop receiving security patches.
Node.js 22 is the current active LTS (supported through April 2027).
Current state
FROM debian:13.4
# ...
apt-get install ... nodejs npm ...
This pulls Node 20.x from Debian's repos.
Suggestion
Switch to NodeSource or an explicit install step for Node 22 LTS:
curl -fsSL https://deb.nodesource.com/setup_22.x | bash -
apt-get install -y nodejs
Or use a multi-stage build with an official node:22 base.
Impact
Users running Hermes in production (e.g. Kubernetes) inherit the EOL Node runtime from the base image with no way to override it short of forking the Dockerfile.
Summary
The Docker image installs
nodejsfrom Debian 13.4 (trixie) apt repos, which provides Node.js 20.x. Node 20 LTS enters end-of-life in April 2026 — it will stop receiving security patches.Node.js 22 is the current active LTS (supported through April 2027).
Current state
This pulls Node 20.x from Debian's repos.
Suggestion
Switch to NodeSource or an explicit install step for Node 22 LTS:
curl -fsSL https://deb.nodesource.com/setup_22.x | bash - apt-get install -y nodejsOr use a multi-stage build with an official
node:22base.Impact
Users running Hermes in production (e.g. Kubernetes) inherit the EOL Node runtime from the base image with no way to override it short of forking the Dockerfile.