Aligning the Node.js Buildpack to Community Runtimes

Aligning the Node.js buildpack to community runtimes

As announced earlier this year, the IBM Runtimes team has worked hard to get the SDK builds for IBM platforms into the Node.js community process. Now that this effort is complete, the Runtimes team has been able to deprecate the proprietary IBM® SDK for Node.js™ in favor of the community builds (see this post for more information). Starting with our next release, the IBM Node.js buildpack on IBM Cloud and IBM Cloud Private will provide the community edition binaries as a default.

What does this mean for me?

This change reduces the delay between community releases and IBM buildpack releases so that you can enjoy the latest and greatest release right away on IBM Cloud. Additionally, it means that the IBM Runtimes team can focus on increasing contributions to the testing efforts on the community version and also work on new features for all Node developers. To learn more, please refer to this Node.js @ IBM blog post. IBM will continue to provide the same level of support as before for the buildpack and Node.js versions available through IBM Cloud and IBM Cloud Private.

Deprecation of OpenSSL FIPS module

With this shift, the Node.js buildpack will move to include features available via the community runtime binaries. For users of our Node.js OpenSSL FIPS module, this means that in alignment with the community, the current OpenSSL FIPS module in the buildpack will no longer be updated. The current OpenSSL FIPS module and the latest IBM® SDK for Node.js™ Version 8 (equivalent to Node.js 8.9.4) will be available in the buildpack for 30 days and are eligible for removal as of August 24, 2018. However, be aware that the OpenSSL FIPS module in the Node.js FIPS build is derived from a code base that is now nearing end of life and has not received security updates.

Additionally, the FIPS module itself is not supported by the OpenSSL community. More information about OpenSSL and FIPS can be found in the LTS release and Crypto policy Open SSL blog posts. As a result, IBM encourages users who wish to continue their use of FIPS to make alternative arrangements with the OpenSSL community.

Support for Node.js

IBM support for Node.js releases ends in line with LTS in the community, and the Node.js versions included with the IBM Node.js buildpack will be updated accordingly, removing Node 4.x after August 24th, 2018.

Node 4.x – Ended April 2018
Node 6.x – Ends April 2019
Node 8.x – Ends December 2019

Node.js is a trademark of Joyent, Inc. and is used with permission. We are not endorsed by or affiliated with Joyent.

Jeff Hamilton

Offering Manager for WebSphere

Enabling customers to streamline document management with IBM watsonx.ai

2 min read - At Accusoft, our mission is to help organizations solve their most complex content workflow challenges by helping them adopt content processing, conversion and automation solutions. We accomplish this through our flagship product, PrizmDoc, which enables developers to enhance their applications with in-browser document viewing and collaboration functionality. Over the past several years, we’ve been closely monitoring the evolving role of artificial intelligence (AI) in delivering cutting-edge solutions to our customers. Unlike many competitors who hastily incorporate AI to check a…

Success and recognition of IBM offerings in G2 Summer Reports

2 min read - IBM offerings were featured in over 1,365 unique G2 reports, earning over 230 Leader badges across various categories. This recognition is important to showcase our leading products and also to provide the unbiased validation our buyers seek. According to the 2024 G2 Software Buyer Behavior Report, “When researching software, buyers are most likely to trust information from people with similar roles and challenges, and they value transparency above other factors.” With over 90 million visitors each year and hosting more than 2.6…

IBM named a Leader in Gartner Magic Quadrant for SIEM, for the 14th consecutive time

3 min read - Security operations is getting more complex and inefficient with too many tools, too much data and simply too much to do. According to a study done by IBM, SOC team members are only able to handle half of the alerts that they should be reviewing in a typical workday. This potentially leads to missing the important alerts that are critical to an organization's security. Thus, choosing the right SIEM solution can be transformative for security teams, helping them manage alerts…