blog: clarify contact method for low signal researchers

[UlisesGascon]

Ref: https://openjs-foundation.slack.com/archives/C03Q9MS3KFB/p1770571419056129

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
nodejs-org	Error		Mar 2, 2026 7:08am

[github-actions]

👋 Codeowner Review Request

The following codeowners have been identified for the changed files:

Team reviewers: @nodejs/releasers

Please review the changes when you have a chance. Thank you! 🙏

[Copilot]

Pull request overview

Updates an existing Node.js blog announcement to clarify how low-signal security researchers should contact the security team, making the guidance more actionable.

Changes:

• Specifies the OpenJS Foundation Slack channel (#nodejs-security-wg) to use for contacting the security team when below the HackerOne Signal threshold.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 75.10%. Comparing base (05fda2e) to head (a32ffb2).
⚠️ Report is 39 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #8613      +/-   ##
==========================================
+ Coverage   74.95%   75.10%   +0.14%     
==========================================
  Files         103      104       +1     
  Lines        9063     9161      +98     
  Branches      312      315       +3     
==========================================
+ Hits         6793     6880      +87     
- Misses       2268     2279      +11     
  Partials        2        2              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[avivkeller]

Bump