TSC icon indicating copy to clipboard operation
TSC copied to clipboard

The Node.js Technical Steering Committee

Results 67 TSC issues
Sort by recently updated
recently updated
newest added

As of recently, especially with https://github.com/nodejs/build/issues/3887, dealing with the CI when preparing a release or when trying to land a PR has become very frustrating. I tried to list all...

Hi folks, as part of [Node.js Security initiative](https://github.com/nodejs/security-wg/issues/1333) we have created a table of access per group based on available roles under Node.js org. We'd like to get some feedback/review....

## Time **UTC Wed, Dec 24, 2025, 11:00 AM**: | Timezone | Date/Time | | -------- | --------- | | US / Pacific | Wed, Dec 24, 2025, 03:00 AM...

We have done a survey to select the locations for the Next Node.js collaborator summit. I've processed the results and extracted the following data: ``` === COLLAB SUMMIT 2026 -...

tsc-agenda

Bumps [glob](https://github.com/isaacs/node-glob) from 10.4.5 to 10.5.0. Commits 56774ef 10.5.0 1e4e297 bin: Do not expose filenames to shell expansion See full diff in compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=glob&package-manager=npm_and_yarn&previous-version=10.4.5&new-version=10.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve...

dependencies
javascript

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1. Changelog Sourced from js-yaml's changelog. [4.1.1] - 2025-11-12 Security Fix prototype pollution issue in yaml merge (<<) operator. Commits cc482e7 4.1.1 released 50968b8 dist...

dependencies
javascript

As discussed in today's TSC call, OpenJS is reducing Ryan's time by 50% in November/December and then down to 10 hours a month in 2026. This is a result of...

help wanted
tsc-meeting

Are there any other volunteers in the @nodejs/tsc? Current ones are: @vdeturckheim @RafaelGSS @mcollina / myself

Members of the Build WG & @nodejs/web-infra have access to sensitive resources. Despite this however, there aren't any actual requirements for 2fa to be enabled on a member's accounts afaik....