instruction: Create a Dockerfile for Node.js with production best practices
output: ```dockerfile
  from VCS hint URL before sending to BuildKit. docker/buildx#16640.10.32023-02-16
  NoteBuildx v0.10 enables support for a minimal SLSA Provenance
  attestation, which requires support for OCI-compliant
  multi-platform images. This may introduce issues with registry and runtime support
  (e.g. Google Cloud Run and AWS Lambda).
  You can optionally disable the default provenance attestation functionality
  using --provenance=false.Bug fixes and enhancementsFix reachable commit and warnings on collecting Git provenance info. docker/buildx#1592, docker/buildx#1634Fix a regression where docker context was not being validated. docker/buildx#1596Fix function resolution with JSON bake definition. docker/buildx#1605Fix case where original HCL bake diagnostic is discarded. docker/buildx#1607Fix labels not correctly set with bake and compose file. docker/buildx#16310.10.22023-01-30
  NoteBuildx v0.10 enables support for a minimal SLSA Provenance
  attestation, which requires support for OCI-compliant
  multi-platform images. This may introduce issues with registry and runtime support
  (e.g. Google Cloud Run and AWS Lambda).
  You can optionally disable the default provenance attestation functionality
  using --provenance=false.Bug fixes and enhancementsFix preferred platforms order not taken into account in multi-node builds. docker/buildx#1561Fix possible panic on handling SOURCE_DATE_EPOCH environment variable. docker/buildx#1564Fix possible push error on multi-node manifest merge since BuildKit v0.11 on
  some registries. docker/buildx#1566Improve warnings on collecting Git provenance info. docker/buildx#15680.10.12023-01-27
  NoteBuildx v0.10 enables support for a minimal SLSA Provenance
  attestation, which requires support for OCI-compliant
  multi-platform images. This may introduce issues with registry and runtime support
  (e.g. Google Cloud Run and AWS Lambda).
  You can optionally disable the default provenance attestation functionality
  using --provenance=false.Bug fixes and enhancementsFix sending the correct origin URL as vsc:source metadata. docker/buildx#1548Fix possible panic
  ```