Upgrade Node.js to v20.19.6 for AL2023 builder-base (#1894)

This upgrades Node.js from v16.18.1 to v20.19.6 for Amazon Linux 2023
builder-base variant, while keeping v16.18.1 for AL2 for backward compatibility.

GLIBC Compatibility:
- Node.js v18/v20 require GLIBC >= 2.28 (per official Node.js docs)
- Amazon Linux 2: GLIBC 2.26 (incompatible - too old)
- Amazon Linux 2023: GLIBC 2.34 (compatible)

Changes:
- Added NODEJS_VERSION_AL23: v20.19.6 in versions.yaml
- Kept NODEJS_VERSION: v16.18.1 for AL2 (no change)
- Updated Dockerfile nodejs stage to pass AL_TAG and both version vars
- Updated install_nodejs.sh to select version based on IS_AL23 flag
- Added nodejs-al23-{amd64,arm64}-checksum for v20.19.6
- AL2 checksums unchanged (still v16.18.1)

Pattern follows existing skopeo approach (SKOPEO_VERSION / SKOPEO_VERSION_AL23).

Impact:
- Only 2 projects use Node.js: Prometheus and generate-attribution
- AL2 projects: No change (continue using Node v16)
- Prometheus v3.8.0: Will use AL2023 variant with Node v20

Motivation:
- Prometheus v3.8.0 requires Node.js 18+ for mantine-ui build
- Node.js v16 reached EOL September 2023

Author: snarkychef

builder-base/Dockerfile

@@ -175,7 +175,9 @@ FROM ${BUILDER_IMAGE} as nodejs
 ARG TARGETARCH
 WORKDIR /workdir
 ARG NODEJS_VERSION
+ARG NODEJS_VERSION_AL23
 ENV NODEJS_VERSION=$NODEJS_VERSION
+ENV NODEJS_VERSION_AL23=$NODEJS_VERSION_AL23
 
 COPY --link --from=upx  /upx /
 COPY ./scripts/install_base_yum_packages.sh ./scripts/remove_yum_packages.sh ./scripts/common_vars.sh \
@@ -184,7 +186,8 @@ COPY ./scripts/install_base_yum_packages.sh ./scripts/remove_yum_packages.sh ./s
     generate-attribution/generate-attribution  \
     generate-attribution/generate-attribution-file.js \
     generate-attribution/LICENSE-2.0.txt \
-    ./checksums/nodejs-${TARGETARCH}-checksum /
+    ./checksums/nodejs-${TARGETARCH}-checksum \
+    ./checksums/nodejs-al23-${TARGETARCH}-checksum /
 RUN --mount=type=cache,target=/var/cache/yum,sharing=locked \
     /install_base_yum_packages.sh && \
     /install_nodejs.sh && \

builder-base/checksums/nodejs-al23-amd64-checksum

@@ -0,0 +1 @@
+24344f9f03e3b388a901f8fb5d98e627e6cf74ce44aaf5a0fd6c4b39e4f2adc8  node-v20.19.6-linux-x64.tar.gz

builder-base/checksums/nodejs-al23-arm64-checksum

@@ -0,0 +1 @@
+a332bb8b108d7aab2f2e2736293e4ab41638cf6f3b3f49a756b8f63469024fa5  node-v20.19.6-linux-arm64.tar.gz

builder-base/scripts/install_nodejs.sh

@@ -22,6 +22,14 @@ NEWROOT=/nodejs
 
 source $SCRIPT_ROOT/common_vars.sh
 
+# Select Node.js version based on AL_TAG (similar to skopeo pattern)
+if [ "$IS_AL23" = "true" ]; then
+    NODEJS_VERSION=$NODEJS_VERSION_AL23
+    CHECKSUM_FILE="nodejs-al23-$TARGETARCH-checksum"
+else
+    CHECKSUM_FILE="nodejs-$TARGETARCH-checksum"
+fi
+
 if [ $TARGETARCH == 'amd64' ]; then 
     NODEJS_FILENAME="node-$NODEJS_VERSION-linux-x64.tar.gz"
     NODEJS_FOLDER="node-$NODEJS_VERSION-linux-x64"
@@ -36,7 +44,7 @@ NODEJS_CHECKSUM_URL="https://nodejs.org/dist/$NODEJS_VERSION/SHASUMS256.txt.asc"
 function install_nodejs() {
     # Installing NodeJS to run attribution generation script
     wget --progress dot:giga $NODEJS_DOWNLOAD_URL
-    sha256sum -c ${BASE_DIR}/nodejs-$TARGETARCH-checksum
+    sha256sum -c ${BASE_DIR}/$CHECKSUM_FILE
     tar -C $USR --strip-components=1 -xzf $NODEJS_FILENAME $NODEJS_FOLDER
     rm -rf $NODEJS_FILENAME
 }

builder-base/versions.yaml

@@ -19,6 +19,7 @@ HELM_VERSION: 3.8.1
 HUGO_VERSION: 0.85.0
 LINUXKIT_VERSION: v0.0.0-20220415093837-b710224cdf9a
 NODEJS_VERSION: v16.18.1
+NODEJS_VERSION_AL23: v20.19.6
 NOTATION_VERSION: 1.0.1
 ORAS_VERSION: 1.1.0
 OVERRIDE_BASH_VERSION: 4.3