I have written and submitted a manuscript to a journal owned by Oxford University Press. This manuscript describes the associated source code, which is stored in a public GitHub repository. The journal has sent this manuscript to reviewers, and they have responded with some suggestions on how to improve the code. I would like to implement these suggestions in my code.
To what extent can I refer to these suggestions in my public task management workflow (ie GitHub)? I'm not even sure who owns the IP to the peer reviews themselves, but I assume that, since it's a closed review system, I am not allowed to reproduce the comments. In that case, can I paraphrase these suggestions when I write my GitHub issues? Each GitHub issue is a public thread for tracking information about tasks, their scope and their progress. If yes, can I explicitly tag these issues as being derived from peer review? Or will this leak too much of associated IP? More broadly, how can I balance my desire for open and transparent software development, with a closed review process?