Merge branch 'main' into fix-fs-mkdtemp-buffer

Author: hamidrezaghavami

SECURITY.md

@@ -212,6 +212,16 @@ then untrusted input must not lead to arbitrary JavaScript code execution.
 * The developers and infrastructure that run it.
 * The operating system that Node.js is running under and its configuration,
   along with anything under the control of the operating system.
+* The deployment network environment for the privacy of traffic and routing
+  decisions, including internal networks through which Node.js traffic passes
+  and configured HTTP(S) proxy servers. Built-in proxy support is intended to
+  route traffic through proxies authorized for the deployment, often because a
+  firewall requires one to access external networks. It is not intended to hide
+  traffic from network operators or authorities governing the deployment.
+  Untrusted or unauthorized proxies, as well as deployment policy or legal
+  compliance controls around proxy use, are the responsibility of the deployment
+  operator and are outside this threat model. This does not change that data
+  parsed from network protocol peers is untrusted as described above.
 * The code it is asked to run, including JavaScript, WASM and native code, even
   if said code is dynamically loaded, e.g., all dependencies installed from the
   npm registry or libraries loaded via `node:ffi`.

deps/openssl/README.md

@@ -54,6 +54,7 @@ Here is a list of supported architectures for use of ASM in OpenSSL.
   | linux     | ppc64(*1)  | linux-ppc64le        | o   |
   | linux     | s390       | linux32-s390x        | o   |
   | linux     | s390x      | linux64-s390x        | o   |
+  | linux     | riscv64    | linux64-riscv64      | -   |
   | mac       | ia32       | darwin-i386-cc       | -   |
   | mac       | x64        | darwin64-x86-cc      | o   |
   | win       | ia32       | VC-WIN32             | -   |

deps/openssl/config/Makefile

@@ -13,9 +13,10 @@ ASM_ARCHS = aix64-gcc-as BSD-x86 BSD-x86_64 \
 darwin64-x86_64-cc darwin-i386-cc darwin64-arm64-cc linux-aarch64 \
 linux-armv4 linux-elf linux-x86_64 \
 linux-ppc64le linux32-s390x linux64-s390x linux64-mips64\
+linux64-riscv64 \
 solaris-x86-gcc solaris64-x86_64-gcc VC-WIN64A VC-WIN32
 
-NO_ASM_ARCHS = VC-WIN64-ARM linux64-riscv64 linux64-loongarch64
+NO_ASM_ARCHS = VC-WIN64-ARM linux64-loongarch64
 
 CC = gcc
 FAKE_GCC = ../config/fake_gcc.pl