-
Notifications
You must be signed in to change notification settings - Fork 6.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Blog: add pre security release announcement #6863
Conversation
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
Running Lighthouse audit... |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We might want to mention that Node.js v22.4.0 includes a security fix for fetch(), already shipped in undici v6.19.2.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
FYI feel free to ignore the failed Vercel check. But can we hold off the merge of this, until we get the monorepo stuff ready? |
How long would it take? This PR must land today. |
it's gonna be longer than that |
So I'm afraid that will need to merge it now. Per policy we need to inform our users 7 days before the security release |
You will need to do a forced merge as a TSC member since the main branch is locked right now. |
Done |
Refs: https://github.com/nodejs-private/security-release/pull/29
cc: @nodejs/tsc