feat: fetch template directly from nodejs/node (#787)

lib/prepare_security.js

@@ -10,7 +10,8 @@ import {
  PLACEHOLDERS,
  checkoutOnSecurityReleaseBranch,
  commitAndPushVulnerabilitiesJSON,
- getSummary
+ getSummary,
+ validateDate
 } from './security-release/security-release.js';
 
 export default class SecurityReleaseSteward {
@@ -29,7 +30,7 @@ export default class SecurityReleaseSteward {
  const req = new Request(credentials);
  const release = new PrepareSecurityRelease(req);
  const releaseDate = await release.promptReleaseDate(cli);
-
+ validateDate(releaseDate);
  const createVulnerabilitiesJSON = await release.promptVulnerabilitiesJSON(cli);
 
  let securityReleasePRUrl;
@@ -40,7 +41,7 @@ export default class SecurityReleaseSteward {
  const createIssue = await release.promptCreateRelaseIssue(cli);
 
  if (createIssue) {
- const { content } = release.buildIssue(releaseDate, securityReleasePRUrl);
+ const content = await release.buildIssue(releaseDate, securityReleasePRUrl);
  await release.createIssue(content, { cli });
  };
 
@@ -99,18 +100,25 @@ class PrepareSecurityRelease {
  { defaultAnswer: true });
  }
 
- getSecurityIssueTemplate() {
- return fs.readFileSync(
- new URL(
- './github/templates/next-security-release.md',
- import.meta.url
- ),
- 'utf-8'
- );
+ async getSecurityIssueTemplate() {
+ const url = 'https://raw.githubusercontent.com/nodejs/node/main/doc/contributing/security-release-process.md';
+ try {
+ // fetch document from nodejs/node main so we dont need to keep a copy
+ const response = await fetch(url);
+ const body = await response.text();
+ // remove everything before the Planning section
+ const index = body.indexOf('## Planning');
+ if (index !== -1) {
+ return body.substring(index);
+ }
+ return body;
+ } catch (error) {
+ this.cli.error(`Could not retrieve the security issue template from ${url}`);
+ }
  }
 
  async promptReleaseDate(cli) {
- return cli.prompt('Enter target release date in YYYY-MM-DD format:', {
+ return cli.prompt('Enter target release date in YYYY/MM/DD format:', {
  questionType: 'input',
  defaultAnswer: 'TBD'
  });
@@ -134,11 +142,11 @@ class PrepareSecurityRelease {
  { defaultAnswer: true });
  }
 
- buildIssue(releaseDate, securityReleasePRUrl = PLACEHOLDERS.vulnerabilitiesPRURL) {
- const template = this.getSecurityIssueTemplate();
+ async buildIssue(releaseDate, securityReleasePRUrl = PLACEHOLDERS.vulnerabilitiesPRURL) {
+ const template = await this.getSecurityIssueTemplate();
  const content = template.replace(PLACEHOLDERS.releaseDate, releaseDate)
  .replace(PLACEHOLDERS.vulnerabilitiesPRURL, securityReleasePRUrl);
- return { releaseDate, content, securityReleasePRUrl };
+ return content;
  }
 
  async createIssue(content, { cli }) {