Skip to content

Blog: inform IBB program is paused#8789

Merged
RafaelGSS merged 4 commits intomainfrom
anounnce-pause-security-bug-bounty
Apr 2, 2026
Merged

Blog: inform IBB program is paused#8789
RafaelGSS merged 4 commits intomainfrom
anounnce-pause-security-bug-bounty

Conversation

@RafaelGSS
Copy link
Copy Markdown
Member

@RafaelGSS RafaelGSS commented Apr 1, 2026 •
edited
Loading

@RafaelGSS RafaelGSS requested a review from a team as a code owner April 1, 2026 15:39
Copilot AI review requested due to automatic review settings April 1, 2026 15:39
@vercel
Copy link
Copy Markdown

vercel bot commented Apr 1, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
nodejs-org Ready Ready Preview Apr 2, 2026 1:02pm

Request Review

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 1, 2026

👋 Codeowner Review Request

The following codeowners have been identified for the changed files:

Team reviewers: @nodejs/releasers

Please review the changes when you have a chance. Thank you! 🙏

RafaelGSS
RafaelGSS commented Apr 1, 2026
View reviewed changes
@codecov
Copy link
Copy Markdown

codecov bot commented Apr 1, 2026 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 75.27%. Comparing base (75c78df) to head (0d8c03d).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files 
@@            Coverage Diff             @@
##             main    #8789      +/-   ##
==========================================
- Coverage   75.28%   75.27%   -0.02%     
==========================================
  Files         105      105              
  Lines        9247     9247              
  Branches      328      328              
==========================================
- Hits         6962     6961       -1     
- Misses       2283     2284       +1     
  Partials        2        2

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Copilot AI reviewed Apr 1, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a new English blog announcement post to inform the community that the Node.js security bug bounty program is paused due to the Internet Bug Bounty (IBB) program being paused.

Changes:

  • Introduces a new announcements blog post explaining the background, reason, and impact of the IBB pause.
  • Provides updated guidance for vulnerability reporting (continues via HackerOne) and points readers to the security reporting page.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 1, 2026 •
edited
Loading

📦 Build Size Comparison

Summary

Metric Value
Old Total Size 3.52 MB
New Total Size 3.52 MB
Delta 249.00 B (+0.01%)

Changes

➕ Added Assets (1)
Name Size
.next/static/chunks/2ad388d698f35267.js 210.19 KB
➖ Removed Assets (1)
Name Size
.next/static/chunks/8fde1535fe5dc0ce.js 209.95 KB

avivkeller
avivkeller approved these changes Apr 1, 2026
View reviewed changes
Copy link
Copy Markdown
Member

@avivkeller avivkeller left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Additional ref: https://discord.com/channels/1180618526436888586/1410007575012970617/1487280585935159437 (🔒Private to webpack security team)

mcollina
mcollina approved these changes Apr 1, 2026
View reviewed changes
Copy link
Copy Markdown
Member

@mcollina mcollina left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@RafaelGSS @avivkeller
Update apps/site/pages/en/blog/announcements/discontinuing-security-b…
2054029 
…ug-bounties.md

Co-authored-by: Aviv Keller <me@aviv.sh>
Signed-off-by: Rafael Gonzaga <rafael.nunu@hotmail.com>
mcollina
mcollina approved these changes Apr 1, 2026
View reviewed changes
Copy link
Copy Markdown
Member

@mcollina mcollina left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@RafaelGSS RafaelGSS added the github_actions:pull-request Trigger Pull Request Checks label Apr 2, 2026
@github-actions github-actions bot removed the github_actions:pull-request Trigger Pull Request Checks label Apr 2, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 2, 2026 •
edited
Loading

Lighthouse Results

URL Performance Accessibility Best Practices SEO Report
/en 🟢 98 🟢 93 🟢 100 🟢 100 🔗
/en/about 🟢 100 🟢 94 🟢 100 🟠 88 🔗
/en/about/previous-releases 🟢 97 🟢 97 🟢 100 🟢 100 🔗
/en/download 🟢 97 🟢 96 🟠 81 🟢 100 🔗
/en/download/archive/current 🟢 100 🟢 97 🟢 100 🟢 100 🔗
/en/blog 🟢 99 🟢 97 🟢 96 🟢 100 🔗

@RafaelGSS RafaelGSS enabled auto-merge April 2, 2026 12:42
@RafaelGSS RafaelGSS added this pull request to the merge queue Apr 2, 2026
Merged via the queue into main with commit 621b579 Apr 2, 2026
14 checks passed
@RafaelGSS RafaelGSS deleted the anounnce-pause-security-bug-bounty branch April 2, 2026 13:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

@mcollina mcollina mcollina approved these changes

@ruyadorno ruyadorno ruyadorno approved these changes

@joyeecheung joyeecheung joyeecheung approved these changes

@legendecas legendecas legendecas approved these changes

@juanarbol juanarbol juanarbol approved these changes

@marco-ippolito marco-ippolito marco-ippolito approved these changes

@avivkeller avivkeller avivkeller approved these changes

@AugustinMauroy AugustinMauroy AugustinMauroy approved these changes

@bjohansebas bjohansebas bjohansebas approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.