build1 distinct publisher
Node 26.8.0 replaces its bundled root certificates with NSS 3.126
The certificate refresh ships as an ordinary commit with no semver-minor marker, so it reaches your hosts on image-rebuild cadence rather than through a patch channel. TracingChannel going stable is the other line worth reading twice.
Publishers:nodejs.org
Reality
- Evidence76
- Adoption12