From b2e3710d6196117a9fc2defac42be84665238ff0 Mon Sep 17 00:00:00 2001
From: JonLiu1993 <63675417+JonLiu1993@users.noreply.github.com>
Date: Tue, 21 Mar 2023 06:24:03 +0800
Subject: [PATCH] Migrate Microsoft/vcpkg#27386 (#35)

* Migrate Microsoft/vcpkg#27386

* change date
---
 vcpkg/contributing/maintainer-guide.md | 23 ++++++++++++++++++++++-
 1 file changed, 22 insertions(+), 1 deletion(-)

diff --git a/vcpkg/contributing/maintainer-guide.md b/vcpkg/contributing/maintainer-guide.md
index d78f99c6..cd0750d4 100644
--- a/vcpkg/contributing/maintainer-guide.md
+++ b/vcpkg/contributing/maintainer-guide.md
@@ -1,7 +1,7 @@
 ---
 title: vcpkg Maintainer Guide
 description: The Guide for maintainers contributing to vcpkg.
-ms.date: 11/30/2022
+ms.date: 2/10/2023
 ---
 # Maintainer Guide
 
@@ -332,6 +332,27 @@ For more information, see the [Versioning reference](../users/versioning.md) and
 
 ## Patching
 
+vcpkg is a packaging solution, not the ultimate owners of the components that we deploy. We do need to apply patches in some cases to improve compatibility of components with platforms, or compatibility of components with each other.
+
+* We want to avoid patches that:
+  * upstream would disagree with
+  * cause vulnerabilities or crashes
+  * we are incapable of maintaining across upstream version updates
+  * are large enough to cause license entanglement with the vcpkg repository itself
+
+### Notify upstream owners for upstream relevant patches
+
+If a patch could possibly be useful by upstream, upstream must be notified of the patch's content. (Patches that apply vcpkg-specific behavior unrelated to upstream, such as devendoring a dependency, don't require notification.)
+
+To avoid situations where upstream disagrees with the patch, we will wait at least 30 days to apply such patches.
+
+We will skip this waiting period if we have high confidence that the change is correct. Examples of high confidence patches include, but are not limited to:
+
+* Upstream's acceptance as a patch (for example, backporting a specific change from a pull request upstream has merged).
+* Adding missing `#include`s.
+* Small and obvious product code fixes (for example, initializing an uninitialized variable).
+* Disabling irrelevant-in-vcpkg components of the build such as tests or examples.
+
 ### Prefer options over patching
 
 It is preferable to set options in a call to `vcpkg_configure_xyz()` over patching the settings directly.