Merge branch 'nodejs:main' into patch-1

.github/CODEOWNERS

@@ -11,53 +11,53 @@
 # tsc
 
 /.github/CODEOWNERS @nodejs/tsc
-/GOVERNANCE.md @nodejs/tsc
-/onboarding.md @nodejs/tsc
 /CODE_OF_CONDUCT.md @nodejs/tsc
 /CONTRIBUTING.md @nodejs/tsc
-/LICENSE @nodejs/tsc
 /doc/contributing/*.md @nodejs/tsc
+/GOVERNANCE.md @nodejs/tsc
+/LICENSE @nodejs/tsc
+/onboarding.md @nodejs/tsc
 
 # streams
 
 /lib/_stream* @nodejs/streams
+/lib/internal/streams/* @nodejs/streams
 /lib/stream.js @nodejs/streams
 /lib/stream/* @nodejs/streams
-/lib/internal/streams/* @nodejs/streams
 
 # net
 
 /deps/ada @nodejs/url
 /deps/cares @nodejs/net
-/doc/api/dns.md @nodejs/net
 /doc/api/dgram.md @nodejs/net
+/doc/api/dns.md @nodejs/net
 /doc/api/net.md @nodejs/net
 /lib/dgram.js @nodejs/net
 /lib/dns.js @nodejs/net
-/lib/net.js @nodejs/net
-/lib/url.js @nodejs/url
 /lib/internal/dgram.js @nodejs/net
 /lib/internal/dns/* @nodejs/net
+/lib/internal/js_stream_socket.js @nodejs/net
 /lib/internal/net.js @nodejs/net
 /lib/internal/socket_list.js @nodejs/net
-/lib/internal/js_stream_socket.js @nodejs/net
 /lib/internal/url.js @nodejs/url
-/src/node_url.* @nodejs/url
+/lib/net.js @nodejs/net
+/lib/url.js @nodejs/url
 /src/cares_wrap.cc @nodejs/net
 /src/connect_wrap.* @nodejs/net
 /src/connection_wrap.* @nodejs/net
 /src/node_sockaddr* @nodejs/net
+/src/node_url.* @nodejs/url
 /src/tcp_wrap.* @nodejs/net
 /src/udp_wrap.* @nodejs/net
 
 # tls/crypto
 
+/lib/crypto.js @nodejs/crypto
 /lib/internal/crypto/* @nodejs/crypto
 /lib/internal/tls/* @nodejs/crypto @nodejs/net
-/lib/crypto.js @nodejs/crypto
 /lib/tls.js @nodejs/crypto @nodejs/net
-/src/node_crypto* @nodejs/crypto
 /src/crypto/* @nodejs/crypto
+/src/node_crypto* @nodejs/crypto
 
 # http
 
@@ -93,10 +93,10 @@
 
 # Node-API
 
-/src/node_api* @nodejs/node-api
-/src/js_native_api* @nodejs/node-api
-/doc/contributing/adding-new-napi-api.md @nodejs/node-api
 /doc/api/n-api.md @nodejs/node-api
+/doc/contributing/adding-new-napi-api.md @nodejs/node-api
+/src/js_native_api* @nodejs/node-api
+/src/node_api* @nodejs/node-api
 
 # gyp
 
@@ -110,19 +110,19 @@
 /doc/api/wasi.md @nodejs/wasi
 /lib/wasi.js @nodejs/wasi
 /src/node_wasi* @nodejs/wasi
-/test/wasi/ @nodejs/wasi
 /test/fixtures/wasi/ @nodejs/wasi
+/test/wasi/ @nodejs/wasi
 
 # Startup
 
-/test/parallel/test-snapshot-* @nodejs/startup
-/test/parallel/test-bootstrap-* @nodejs/startup
 /benchmark/misc/startup.js @nodejs/startup
-/src/node.cc @nodejs/startup
-/src/node_realm* @nodejs/startup @nodejs/realm
+/lib/internal/bootstrap/* @nodejs/startup
 /src/node_builtins* @nodejs/startup
+/src/node_realm* @nodejs/startup @nodejs/realm
 /src/node_snapshot* @nodejs/startup
-/lib/internal/bootstrap/* @nodejs/startup
+/src/node.cc @nodejs/startup
+/test/parallel/test-bootstrap-* @nodejs/startup
+/test/parallel/test-snapshot-* @nodejs/startup
 /tools/snapshot/* @nodejs/startup
 
 # V8
@@ -137,11 +137,11 @@
 
 # Test runner
 
-/test/parallel/test-runner-* @nodejs/test_runner
 /doc/api/test.md @nodejs/test_runner
-/lib/test.js @nodejs/test_runner
 /lib/internal/main/test_runner.js @nodejs/test_runner
 /lib/internal/test_runner/* @nodejs/test_runner
+/lib/test.js @nodejs/test_runner
+/test/parallel/test-runner-* @nodejs/test_runner
 
 # Single Executable Applications
 /deps/postject @nodejs/single-executable
@@ -154,6 +154,13 @@
 /tools/dep_updaters/update-postject.sh @nodejs/single-executable
 
 # Permission Model
-/src/permission/* @nodejs/security-wg
 /doc/api/permissions.md @nodejs/security-wg
 /lib/internal/process/permission.js @nodejs/security-wg
+/src/permission/* @nodejs/security-wg
+
+# Dependency Update Tools
+
+/.github/workflows/tools.yml @nodejs/security-wg
+/.github/workflows/update-openssl.yml @nodejs/security-wg
+/.github/workflows/update-v8.yml @nodejs/security-wg @nodejs/v8-update
+/tools/dep_updaters/* @nodejs/security-wg

.github/FAILED_DEP_UPDATE_ISSUE_TEMPLATE.md

@@ -0,0 +1,7 @@
+---
+title: 'deps: update {{ env.FAILED_DEP }} job failed'
+labels: dependencies
+---
+This is an automatically generated issue by the {{ tools.context.action }} GitHub Action.
+The update [workflow]({{ env.JOB_URL }}) has failed for {{ tools.context.workflow }}.
+@nodejs/security-wg @nodejs/actions

.github/workflows/close-stale-pull-requests.yml

@@ -0,0 +1,63 @@
+name: Close stale feature requests
+on:
+  workflow_dispatch:
+    inputs:
+      endDate:
+        description: stop processing PRs after this date
+        required: false
+        type: string
+  schedule:
+    # Run every day at 1:00 AM UTC.
+    - cron: 0 1 * * *
+
+# yamllint disable rule:empty-lines
+env:
+  CLOSE_MESSAGE: >
+    This pull request was opened more than a year ago and there has
+    been no activity in the last 6 months. We value your contribution
+    but since it has not progressed in the last 6 months it is being
+    closed. If you feel closing this pull request is not the right thing
+    to do, please leave a comment.
+
+  WARN_MESSAGE: >
+    This pull request was opened more than a year ago and there has
+    been no activity in the last 5 months. We value your contribution
+    but since it has not progressed in the last 5 months it is being
+    marked stale and will be closed if there is no progress in the
+    next month. If you feel that is not the right thing to do please
+    comment on the pull request.
+# yamllint enable
+
+permissions:
+  contents: read
+
+jobs:
+  stale:
+    permissions:
+      pull-requests: write  # for actions/stale to close stale PRs
+    if: github.repository == 'nodejs/node'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Set default end date which is 1 year ago
+        run: echo "END_DATE=$(date --date='525600 minutes ago' --rfc-2822)"  >> "$GITHUB_ENV"
+      - name: if date set in event override the default end date
+        env:
+          END_DATE_INPUT_VALUE: ${{ github.event.inputs.endDate }}
+        if: ${{ github.event.inputs.endDate != '' }}
+        run: echo "END_DATE=$END_DATE_INPUT_VALUE"  >> "$GITHUB_ENV"
+      - uses: mhdawson/stale@453d6581568dc43dbe345757f24408d7b451c651  # PR to add support for endDate
+        with:
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+          end-date: ${{ env.END_DATE }}
+          days-before-issue-stale: -1
+          days-before-issue-close: -1
+          only-labels: test-stale-pr
+          days-before-stale: 150
+          days-before-close: 30
+          stale-issue-label: stale
+          close-issue-message: ${{ env.CLOSE_MESSAGE }}
+          stale-issue-message: ${{ env.WARN_MESSAGE }}
+          exempt-pr-labels: never-stale
+          # max requests it will send per run to the GitHub API before it deliberately exits to avoid hitting API rate limits
+          operations-per-run: 500
+          remove-stale-when-updated: true

.github/workflows/timezone-update.yml

@@ -48,7 +48,7 @@ jobs:
           body: |
             This PR was generated by tools/timezone-update.yml.
 
-            Updates the ICU files as per the instructions present in https://github.com/nodejs/node/blob/main/doc/contributing/maintaining-icu.md#time-zone-data
+            Updates the ICU files as per the instructions present in https://github.com/nodejs/node/blob/main/doc/contributing/maintaining/maintaining-icu.md#time-zone-data
 
             To test, build node off this branch & log the version of tz using
             ```js