BackPup/node
1
0 Fork 0
mirror of https://github.com/nodejs/node.git synced 2026-10-09 12:57:16 -04:00
Code Issues Packages Projects Releases Wiki Activity
48,822 Commits 231 Branches 964 Tags
dependabot/github_actions/github/codeql-action/init-4.38.2
Commit Graph
49 Commits
Author SHA1 Message Date
Rafael Gonzaga 9b7fb287e9 doc: add RafaelGSS as last security release stewards 
Signed-off-by: RafaelGSS <[email protected]>
PR-URL: https://github.com/nodejs/node/pull/64843
Refs: https://github.com/nodejs-private/security-release/pull/74
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Filip Skokan <[email protected]>
Reviewed-By: Aviv Keller <[email protected]>
Reviewed-By: Chengzhong Wu <[email protected]>
Reviewed-By: Ruy Adorno <[email protected]>
Reviewed-By: Ulises Gascón <[email protected]>
 2026-08-03 12:49:37 +00:00
Rafael Gonzaga aedf2a4187 doc: mention DEPENDENCY custom field for H1 reports 
Signed-off-by: RafaelGSS <[email protected]>
PR-URL: https://github.com/nodejs/node/pull/64634
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
 2026-07-23 12:27:40 +00:00
Antoine du Hamel 393f5870ca doc: add aduh95 to last security release steward 
Signed-off-by: Antoine du Hamel <[email protected]>
PR-URL: https://github.com/nodejs/node/pull/63981
Refs: https://github.com/nodejs-private/security-release/pull/72
Reviewed-By: Rafael Gonzaga <[email protected]>
Reviewed-By: Filip Skokan <[email protected]>
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Stewart X Addison <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Colin Ihrig <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
 2026-06-20 15:05:20 +00:00
Rafael Gonzaga 329c8e7554 doc: add Rafael to last security release steward 
PR-URL: https://github.com/nodejs/node/pull/62423
Refs: https://github.com/nodejs-private/security-release/pull/71
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Ulises Gascón <[email protected]>
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Filip Skokan <[email protected]>
 2026-03-26 20:59:14 +00:00
Marco Ippolito ae001bb4b7 doc: add marco and rafael in last sec release 
PR-URL: https://github.com/nodejs/node/pull/61383
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Rafael Gonzaga <[email protected]>
Reviewed-By: Chengzhong Wu <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Yagiz Nizipli <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: Colin Ihrig <[email protected]>
 2026-01-16 13:30:19 +00:00
Rafael Gonzaga 088e63842a doc: add PR-URL requirement for security backports 
Security release automation requires that all backport commits
include PR-URL metadata in their commit messages.

Signed-off-by: RafaelGSS <[email protected]>
PR-URL: https://github.com/nodejs/node/pull/61256
Refs: https://github.com/nodejs/node-core-utils/pull/1022
Reviewed-By: Chengzhong Wu <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Colin Ihrig <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Aviv Keller <[email protected]>
 2026-01-04 19:39:14 +00:00
Rafael Gonzaga 229cc3be28 doc: add RafaelGSS as steward July 25 
PR-URL: https://github.com/nodejs/node/pull/59078
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Chengzhong Wu <[email protected]>
Reviewed-By: Ulises Gascón <[email protected]>
 2025-07-16 09:16:52 +00:00
Michael Dawson 560d00ffb7 doc: remove myself from security steward rotation 
Signed-off-by: Michael Dawson <[email protected]>
PR-URL: https://github.com/nodejs/node/pull/58927
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: Filip Skokan <[email protected]>
Reviewed-By: Rafael Gonzaga <[email protected]>
Reviewed-By: Tobias Nießen <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Ruy Adorno <[email protected]>
Reviewed-By: Juan José Arboleda <[email protected]>
Reviewed-By: Joyee Cheung <[email protected]>
 2025-07-04 14:04:13 +00:00
Rafael Gonzaga 306c11fe0a doc: add latest security release steward 
PR-URL: https://github.com/nodejs/node/pull/58339
Reviewed-By: Darshan Sen <[email protected]>
Reviewed-By: Jordan Harband <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
 2025-05-15 10:35:45 +00:00
Rafael Gonzaga 10ea7646d9 doc: add note about sync nodejs-private branches 
PR-URL: https://github.com/nodejs/node/pull/57404
Reviewed-By: Antoine du Hamel <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
 2025-03-12 20:47:26 +00:00
Rafael Gonzaga ded4eca425 doc: ping nodejs/tsc for each security pull request 
Refs: https://github.com/nodejs/TSC/issues/1687
PR-URL: https://github.com/nodejs/node/pull/57309
Reviewed-By: James M Snell <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
 2025-03-06 12:52:04 +00:00
Rafael Gonzaga 5c83957601 doc: update cleanup to trust on vuln db automation 
Since https://github.com/nodejs-private/security-release/pull/56 this
process has been automated.

PR-URL: https://github.com/nodejs/node/pull/57004
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Ulises Gascón <[email protected]>
 2025-02-13 14:20:14 +00:00
Rafael Gonzaga 436723282d doc: update post sec release process 
PR-URL: https://github.com/nodejs/node/pull/56907
Fixes: https://github.com/nodejs-private/security-release/issues/52
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Ulises Gascón <[email protected]>
Reviewed-By: Yagiz Nizipli <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
 2025-02-05 19:48:05 +00:00
Rafael Gonzaga a1c9c1a2dd doc: add RafaelGSS as latest sec release stewards 
PR-URL: https://github.com/nodejs/node/pull/56682
Refs: https://github.com/nodejs-private/security-release/pull/41
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Ulises Gascón <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: Antoine du Hamel <[email protected]>
 2025-01-23 19:05:11 +00:00
Rafael Gonzaga 649da3b837 doc: include CVE to EOL lines as sec release process 
Refs: https://github.com/nodejs/security-wg/issues/1401
PR-URL: https://github.com/nodejs/node/pull/56520
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Trivikram Kamat <[email protected]>
Reviewed-By: Ulises Gascón <[email protected]>
 2025-01-10 17:02:12 +00:00
Rafael Gonzaga 9e83853294 doc: add git node security --cleanup 
PR-URL: https://github.com/nodejs/node/pull/54381
Reviewed-By: Ruy Adorno <[email protected]>
Reviewed-By: Rich Trott <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
 2024-08-17 13:50:27 +00:00
Rafael Gonzaga 269175b2b4 doc: update security-release process to automated one 
PR-URL: https://github.com/nodejs/node/pull/53877
Refs: https://github.com/nodejs/security-wg/issues/860
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Ulises Gascón <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
 2024-07-29 13:34:18 +00:00
Rafael Gonzaga c126a1f0dc doc: add Rafael to the last security release 
PR-URL: https://github.com/nodejs/node/pull/53769
Refs: https://github.com/nodejs-private/security-release/pull/29
Reviewed-By: Tobias Nießen <[email protected]>
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Ulises Gascón <[email protected]>
Reviewed-By: James M Snell <[email protected]>
 2024-07-12 12:33:31 +00:00
Rafael Gonzaga b4186ec2c1 doc: add Rafael to steward list 
PR-URL: https://github.com/nodejs/node/pull/52452
Refs: https://github.com/nodejs-private/security-release/issues/22
Reviewed-By: Benjamin Gruenbaum <[email protected]>
Reviewed-By: Moshe Atlow <[email protected]>
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Vinícius Lourenço Claro Cardoso <[email protected]>
 2024-04-10 21:08:14 +00:00
Rafael Gonzaga 461d9d665d doc: add Rafael to sec release stewards 
PR-URL: https://github.com/nodejs/node/pull/52354
Reviewed-By: Moshe Atlow <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Yagiz Nizipli <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: Ulises Gascón <[email protected]>
Reviewed-By: Ruy Adorno <[email protected]>
 2024-04-05 16:59:12 +00:00
Rafael Gonzaga 0ffb501c5d doc: add entry to stewards 
PR-URL: https://github.com/nodejs/node/pull/51760
Refs: https://github.com/nodejs-private/node-private/issues/514
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Yagiz Nizipli <[email protected]>
Reviewed-By: Tobias Nießen <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
 2024-02-16 18:02:55 +00:00
Aranđel Šarenac 32ce1834c0 doc: update typos 
PR-URL: https://github.com/nodejs/node/pull/51475
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Chengzhong Wu <[email protected]>
 2024-01-18 06:30:42 +00:00
Michael Dawson 718e4e6918 doc: add check for security reverts 
- Add step to check that any PRs with breaking changes
  have command line options to revert
- Add info on how to easily add command line option
  to revert a breaking change related to a CVE

Signed-off-by: Michael Dawson <[email protected]>
PR-URL: https://github.com/nodejs/node/pull/51376
Reviewed-By: Antoine du Hamel <[email protected]>
Reviewed-By: Gireesh Punathil <[email protected]>
Reviewed-By: Rafael Gonzaga <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Tobias Nießen <[email protected]>
 2024-01-08 16:50:44 -05:00
Rafael Gonzaga fe987340fc doc: add procedure when CVEs don't get published 
This was the workaround provided by HackerOne team

PR-URL: https://github.com/nodejs/node/pull/50945
Refs: https://github.com/nodejs/security-wg/issues/1058
Reviewed-By: Benjamin Gruenbaum <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Tobias Nießen <[email protected]>
 2023-11-29 17:03:59 +00:00
Rafael Gonzaga ea595ebbf2 doc: update release-stewards with last sec-release 
PR-URL: https://github.com/nodejs/node/pull/50179
Refs: https://github.com/nodejs-private/node-private/issues/485
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Tobias Nießen <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Benjamin Gruenbaum <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
 2023-10-16 23:01:31 +00:00
Michael Dawson 356b4a268a doc: update security release process 
- update security release process to reflect current way to
  ask for tweet to amplify security release blog posts.

Signed-off-by: Michael Dawson <[email protected]>

PR-URL: https://github.com/nodejs/node/pull/50166
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Rafael Gonzaga <[email protected]>
 2023-10-16 15:13:00 -04:00
Rafael Gonzaga 3af65855c5 doc: add h1 summary to security release process 
PR-URL: https://github.com/nodejs/node/pull/49112
Reviewed-By: Moshe Atlow <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
 2023-08-17 19:40:20 +00:00
Rafael Gonzaga c00dfc8e33 doc: update with latest security release 
PR-URL: https://github.com/nodejs/node/pull/49085
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Tobias Nießen <[email protected]>
Reviewed-By: Benjamin Gruenbaum <[email protected]>
Reviewed-By: Yagiz Nizipli <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Antoine du Hamel <[email protected]>
 2023-08-11 18:46:57 +00:00
Rafael Gonzaga fb47afc335 doc: drop github actions check in sec release process 
PR-URL: https://github.com/nodejs/node/pull/48978
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Yagiz Nizipli <[email protected]>
 2023-08-02 13:14:28 +00:00
Rafael Gonzaga a67cb6c396 doc: nodejs-social over nodejs/tweet 
PR-URL: https://github.com/nodejs/node/pull/48769
Reviewed-By: Ruy Adorno <[email protected]>
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Tobias Nießen <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Rich Trott <[email protected]>
 2023-07-16 13:40:39 +00:00
Rafael Gonzaga 1936160c31 doc: update security release stewards 
PR-URL: https://github.com/nodejs/node/pull/48569
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: Tobias Nießen <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Ruy Adorno <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
 2023-06-30 15:16:25 +00:00
Rafael Gonzaga 1f4b0c056c doc: update security-release-process.md 
PR-URL: https://github.com/nodejs/node/pull/48504
Reviewed-By: Ruy Adorno <[email protected]>
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Gireesh Punathil <[email protected]>
Reviewed-By: Antoine du Hamel <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Tobias Nießen <[email protected]>
 2023-06-22 20:57:27 +00:00
Rafael Gonzaga a90a1459ee doc: swap Matteo with Rafael in the stewards 
PR-URL: https://github.com/nodejs/node/pull/47841
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Tobias Nießen <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
 2023-05-05 21:37:54 +00:00
Vladimir de Turckheim 1168ab6f05 doc: remove Vladimir de Turckheim from Security release stewards 
PR-URL: https://github.com/nodejs/node/pull/47318
Reviewed-By: Colin Ihrig <[email protected]>
Reviewed-By: Michaël Zasso <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: Rafael Gonzaga <[email protected]>
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Darshan Sen <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Tobias Nießen <[email protected]>
Reviewed-By: Yagiz Nizipli <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Rich Trott <[email protected]>
 2023-04-01 12:54:43 +00:00
Michael Dawson 7cb09f40a6 doc: add request to hold off publicising sec releases 
- We've often seen tweets go out early before announcement
  and other parts of the security release complete
- Make an explicit ask that collaborators avoid doing this
  by gating on the tweet from the Node.js account
- Releasers would still be free to tweet earlier as they know
  when the process is complete.

Signed-off-by: Michael Dawson <[email protected]>

PR-URL: https://github.com/nodejs/node/pull/46702
Reviewed-By: Ruben Bridgewater <[email protected]>
Reviewed-By: Tobias Nießen <[email protected]>
Reviewed-By: Robert Nagy <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: Rafael Gonzaga <[email protected]>
Reviewed-By: Akhil Marsonya <[email protected]>
Reviewed-By: Gireesh Punathil <[email protected]>
Reviewed-By: Antoine du Hamel <[email protected]>
Reviewed-By: Chengzhong Wu <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: James M Snell <[email protected]>
Reviewed-By: Trivikram Kamat <[email protected]>
Reviewed-By: Darshan Sen <[email protected]>
 2023-03-01 12:40:08 -05:00
Michael Dawson 7a5b9d0455 doc: add in security steward for recent release 
- add in security steward for recent release
- add in next set of rotation entries

Signed-off-by: Michael Dawson <[email protected]>

PR-URL: https://github.com/nodejs/node/pull/46701
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Joe Sepi <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Rafael Gonzaga <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
 2023-02-22 09:48:01 -05:00
Juan José Arboleda 7031cbc92b doc: include last security release date 
PR-URL: https://github.com/nodejs/node/pull/45368
Reviewed-By: Colin Ihrig <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Rich Trott <[email protected]>
Reviewed-By: Akhil Marsonya <[email protected]>
 2022-11-08 14:04:45 -05:00
Michael Dawson 5be8a30cc3 doc: add info on fixup to security release process 
- add details on what to do if we have an incomplete fix
- add details on how to update a CVE if necessary

Signed-off-by: Michael Dawson <[email protected]>

PR-URL: https://github.com/nodejs/node/pull/44807
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: Vladimir de Turckheim <[email protected]>
Reviewed-By: Chengzhong Wu <[email protected]>
Reviewed-By: Tobias Nießen <[email protected]>
Reviewed-By: James M Snell <[email protected]>
 2022-10-14 14:02:04 -04:00
Rafael Gonzaga deb9f5eff0 doc: add extra step for reporter pre-approval 
As discussed in the #security-triagge (OpenJS channel).
To avoid insufficient CVE fixes across Security Release,
might make sense to request a reporter pre-approval.

PR-URL: https://github.com/nodejs/node/pull/44806
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: James M Snell <[email protected]>
Reviewed-By: Chengzhong Wu <[email protected]>
 2022-10-02 17:41:48 +00:00
Vladimir de Turckheim dc96633638 doc: include last security release date 
PR-URL: https://github.com/nodejs/node/pull/44794
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Tobias Nießen <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Trivikram Kamat <[email protected]>
Reviewed-By: James M Snell <[email protected]>
 2022-10-02 09:46:45 +00:00
Rafael Gonzaga e9d7765b46 doc: include last security release date 
PR-URL: https://github.com/nodejs/node/pull/43774
Refs: https://github.com/nodejs/node/commit/5a62789b81e31383ba77ad309c272a70aa5d1477
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Darshan Sen <[email protected]>
 2022-07-11 16:13:13 -03:00
Rafael Gonzaga 56c15f1c95 doc: include CVSS mention 
PR-URL: https://github.com/nodejs/node/pull/43602
Reviewed-By: Vladimir de Turckheim <[email protected]>
Reviewed-By: Beth Griggs <[email protected]>
Reviewed-By: Darshan Sen <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: Richard Lau <[email protected]>
 2022-06-30 18:05:54 +01:00
Michael Dawson 23b38e7109 doc: add Juan as a security steward 
Ran through onboaring with Juan today. Add him
to the rotation for security stewards.

Signed-off-by: Michael Dawson <[email protected]>

PR-URL: https://github.com/nodejs/node/pull/43512
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Antoine du Hamel <[email protected]>
Reviewed-By: Colin Ihrig <[email protected]>
Reviewed-By: Gireesh Punathil <[email protected]>
Reviewed-By: Beth Griggs <[email protected]>
Reviewed-By: Darshan Sen <[email protected]>
 2022-06-22 15:43:06 -04:00
Matteo Collina c7338c5b32 doc: add Rafael to the security steward for NearForm 
PR-URL: https://github.com/nodejs/node/pull/42966
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Rafael Gonzaga <[email protected]>
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Darshan Sen <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
 2022-05-10 17:28:56 -04:00
Michael Dawson 961967c1ff doc: add additional step to security release process 
Signed-off-by: Michael Dawson <[email protected]>

PR-URL: https://github.com/nodejs/node/pull/42916
Reviewed-By: Richard Lau <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
 2022-05-02 14:59:38 -04:00
Richard Lau 306a8fbb2d doc: record March 2022 security release steward 
Refs: https://github.com/nodejs/nodejs.org/pull/4487
Refs: https://github.com/nodejs/nodejs.org/pull/4497

PR-URL: https://github.com/nodejs/node/pull/42876
Reviewed-By: Darshan Sen <[email protected]>
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: Tobias Nießen <[email protected]>
 2022-04-28 19:58:31 +01:00
Michael Dawson 1e5bafb9c8 doc: add suggestion for OpenSSL only sec releases 
Fixes: https://github.com/nodejs/TSC/issues/1187

Signed-off-by: Michael Dawson <[email protected]>

PR-URL: https://github.com/nodejs/node/pull/42456
Reviewed-By: Darshan Sen <[email protected]>
Reviewed-By: James M Snell <[email protected]>
Reviewed-By: Danielle Adams <[email protected]>
Reviewed-By: Tobias Nießen <[email protected]>
 2022-03-31 17:32:25 -04:00
Michael Dawson 627ef82de9 doc: add security-steward rotation information 
Add information about security stewards and
rotation.

Signed-off-by: Michael Dawson <[email protected]>

PR-URL: https://github.com/nodejs/node/pull/41707
Reviewed-By: Matteo Collina <[email protected]>
Reviewed-By: Vladimir de Turckheim <[email protected]>
Reviewed-By: Bryan English <[email protected]>
Reviewed-By: Mohammed Keyvanzadeh <[email protected]>
Reviewed-By: James M Snell <[email protected]>
Reviewed-By: Rich Trott <[email protected]>
 2022-01-31 14:32:42 -05:00
Michael Dawson a199387f04 doc: make contributing info more discoverable 
There are been several discussions in recent PRs about
the docs related to contributing not being very discoverable.
Move these docs from doc/guides/ to doc/contributing.

Signed-off-by: Michael Dawson <[email protected]>

PR-URL: https://github.com/nodejs/node/pull/41408
Reviewed-By: Franziska Hinkelmann <[email protected]>
Reviewed-By: Michaël Zasso <[email protected]>
Reviewed-By: Derek Lewis <[email protected]>
Reviewed-By: Mary Marchini <[email protected]>
Reviewed-By: James M Snell <[email protected]>
 2022-01-18 14:24:30 -05:00