2024-04-29 Express TC Meeting

[github-actions]

Date/Time

Timezone	Date/Time
America/Los_Angeles	Mon 29-Apr-2024 14:00 (02:00 PM)
America/Denver	Mon 29-Apr-2024 15:00 (03:00 PM)
America/Chicago	Mon 29-Apr-2024 16:00 (04:00 PM)
America/New_York	Mon 29-Apr-2024 17:00 (05:00 PM)
Europe/London	Mon 29-Apr-2024 22:00 (10:00 PM)
Europe/Amsterdam	Mon 29-Apr-2024 23:00 (11:00 PM)
Europe/Moscow	Tue 30-Apr-2024 00:00 (12:00 AM)
Asia/Kolkata	Tue 30-Apr-2024 02:30 (02:30 AM)
Asia/Shanghai	Tue 30-Apr-2024 05:00 (05:00 AM)
Asia/Tokyo	Tue 30-Apr-2024 06:00 (06:00 AM)
Australia/Sydney	Tue 30-Apr-2024 07:00 (07:00 AM)

Or in your local time:

• https://www.timeanddate.com/worldclock/?iso=2024-04-29T21:00:00

Agenda

Announcements / Updates:

• Revive the Triage Team #227 @UlisesGascon
• OSTIF Audit for Express security-wg#6 @UlisesGascon

Extracted from tc agenda labelled issues and pull requests from expressjs/discussions prior to the meeting.

• Properly list the organization members #230
• Socket.dev reports on all our repos security-wg#17

Ad Hoc Added in comments:

• Automate docs/history for releases @crandmck
• Express 5.0 - last push! #233 @UlisesGascon
• Ideas for blog content expressjs.com#1500 @UlisesGascon
• [v5] Lock down valid status code ranges to 1xx through 5xx express#5623 @jonchurch
• Replace Appveyor windows testing with GHA express#5599 @jonchurch
• Fix: Expect return true immediately if If-None-Match matches the ETag header (#35) jshttp/fresh#38 @wesleytodd
• skip QUERY method test express#5628 @jonchurch

Invited

This meeting is open for anyone who wants to attend. Reminder to follow our Code of Conduct.

@expressjs/express-tc
@expressjs/triagers
@expressjs/security-wg

Links

• Minutes: https://docs.google.com/document/d/1LGZlLXZ3lwsGh3Rd3hEuUNhkhAUhFE8Q9V78MJfQQFc/edit?usp=sharing

Joining the meeting

• link for participants: https://zoom-lfx.platform.linuxfoundation.org/meeting/95266714809?password=f37cff1b-cb3a-4a21-9425-210e4714c72e
• For those who just want to watch: https://www.youtube.com/@expressjs-official

[LinusU]

Unfortunately, I won't be able to attend this meeting

[crandmck]

It would be awesome if we could automate docs for routine minor version releases. I'm imagining a GH action or workflow that would create a PR similar to expressjs/expressjs.com#1492 for any new release. Not sure how much work that would be, or if there is some reason not to do it....?

[UlisesGascon]

I will like to include #233 in the agenda!

[UlisesGascon]

Also I will like to mention #227 in the announcement section :)

[UlisesGascon]

Also, lets make a public update about the audit (expressjs/security-wg#6) (TBC) and discuss about the OSSF Scorecard details and priorities (see cc: @inigomarquinez @carpasse)

[UlisesGascon]

Adding also expressjs/expressjs.com#1500 to the agenda :)

[jonchurch]

expressjs/express#5623 for agenda, mostly a last call for dissent

[jonchurch]

Updated the Agenda w/ ad hoc items from TC in comments here

[wesleytodd]

Lets also see if we have time for this one: jshttp/fresh#38

[wesleytodd]

We cannot get the stream started because of the LFX dashboard doesn't have the meeting in there. But we will upload after.