Security release June 2026 Docker blocked

[MikeMcC399]

Situation

https://nodejs.org/download/release/index.json shows new releases June 18, 2026 with the security key set to true.

https://unofficial-builds.nodejs.org/download shows:

Node.js	musl build
v26.3.1	https://unofficial-builds.nodejs.org/download/release/v26.3.1/
v24.17.0	https://unofficial-builds.nodejs.org/download/release/v24.17.0/
v22.23.0	https://unofficial-builds.nodejs.org/download - missing v22.23.0

Issues

1. There is no log of any build for v22.23.0 in https://unofficial-builds.nodejs.org/logs/ and the musl build for v22.23.0 is missing
2. https://github.com/nodejs/docker-node/actions/runs/27739246196 shows:

   Run actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3
   22.22.3
   
   24.16.0
   
   26.3.0
   
   There's no musl build for version 22.23.0 yet.

   so although this is a security release, which is supposed to bypass the need for musl builds, no PR is being created.

Suggestions

1. Investigate and trigger https://unofficial-builds.nodejs.org for v22.23.0 to get a musl build available.
2. If the musl build for v22.23.0 cannot be made available today, June 18, 2026, manually create a PR to release everything except Alpine v22.23.0.
3. Investigate why the automatic-updates.yml workflow did not create a PR for security releases that were complete.

cc: @nodejs/docker @nodejs/platform-alpine

[MikeMcC399]

PR #2540 now been automatically created after

https://unofficial-builds.nodejs.org/download/release/v22.23.0/node-v22.23.0-linux-arm64-musl.tar.xz became available.

I'll close this issue and transfer the remaining part that needs investigating to a new issue.

[MikeMcC399]

Continued in #2541