From 85dd634162a2e15100de17acbdccd16683bab398 Mon Sep 17 00:00:00 2001 From: Daniel Bevenius Date: Mon, 19 Apr 2021 05:50:21 +0200 Subject: [PATCH 1/2] doc: add nodejs-sec email template This commit adds a suggestion for a template to be used as part of the security release process. One step of this process is to create an email to nodejs-sec group and currently would contain a copy and pasted version of what is published on nodejs.org. This suggestion is to instead use a link to the blog post. Refs: https://github.com/nodejs/node/issues/38143 --- doc/guides/security-release-process.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/doc/guides/security-release-process.md b/doc/guides/security-release-process.md index 5609e40739d3fb..2765ba149f0b84 100644 --- a/doc/guides/security-release-process.md +++ b/doc/guides/security-release-process.md @@ -38,6 +38,12 @@ information described. * Described in the pre/post announcements * [ ] Pre-release announcement [email][]: ***LINK TO EMAIL*** + ``` + Security updates for all active release lines, Month Year + + The Node.js project will release new versions of all supported release lines on or shortly after Day of week, Month Day of Month, Year + For more information see: https://nodejs.org/en/blog/vulnerability/month-year-security-releases/ + ``` (Get access from existing manager: Ben Noordhuis, Rod Vagg, Michael Dawson) * [ ] Pre-release announcement to nodejs.org blog: ***LINK TO BLOG*** @@ -64,6 +70,12 @@ information described. * [ ] [Unlock CI](https://github.com/nodejs/build/blob/HEAD/doc/jenkins-guide.md#after-the-release) * [ ] Post-release announcement in reply [email][]: ***LINK TO EMAIL*** + ``` + Security updates for all active release lines, Month Year + + The Node.js project has now released new versions of all supported release lines. + For more information see: https://nodejs.org/en/blog/vulnerability/month-year-security-releases/ + ``` * [ ] Post-release announcement to Nodejs.org blog: ***LINK TO BLOG POST*** * (Re-PR the pre-approved branch from nodejs-private/nodejs.org-private to From aa139a81c1310056f134e8e7b5c71d531f458478 Mon Sep 17 00:00:00 2001 From: Daniel Bevenius Date: Thu, 22 Apr 2021 05:26:11 +0200 Subject: [PATCH 2/2] squash! doc: add nodejs-sec email template Fix lint issues. --- doc/guides/security-release-process.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/doc/guides/security-release-process.md b/doc/guides/security-release-process.md index 2765ba149f0b84..10465c57501328 100644 --- a/doc/guides/security-release-process.md +++ b/doc/guides/security-release-process.md @@ -38,7 +38,7 @@ information described. * Described in the pre/post announcements * [ ] Pre-release announcement [email][]: ***LINK TO EMAIL*** - ``` + ```text Security updates for all active release lines, Month Year The Node.js project will release new versions of all supported release lines on or shortly after Day of week, Month Day of Month, Year @@ -70,7 +70,7 @@ information described. * [ ] [Unlock CI](https://github.com/nodejs/build/blob/HEAD/doc/jenkins-guide.md#after-the-release) * [ ] Post-release announcement in reply [email][]: ***LINK TO EMAIL*** - ``` + ```text Security updates for all active release lines, Month Year The Node.js project has now released new versions of all supported release lines.