[Snyk] Upgrade @slack/bolt from 3.19.0 to 3.21.1 #39
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade @slack/bolt from 3.19.0 to 3.21.1. See this package in npm: @slack/bolt See this project in Snyk: https://app.snyk.io/org/jrc356/project/3ed142ec-7bf0-4cd3-90b7-55f338f59f7c?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade @slack/bolt from 3.19.0 to 3.21.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 3 versions ahead of your current version.
The recommended version was released on 21 days ago.
Issues fixed by the recommended upgrade:
SNYK-JS-AXIOS-7361793
SNYK-JS-WS-7266574
SNYK-JS-FOLLOWREDIRECTS-6444610
Release notes
Package name: @slack/bolt
-
3.21.1 - 2024-08-16
- docs: document custom step usage - Thanks @ WilliamBergamin! #2198
- chore(deps): set a minimum @ slack/web-api@^6.12.1 to address CVE-2024-39338 - Thanks @ zimeg! #2207
- ci: add bolt-ts-custom-function-template to list of test samples - Thanks @ filmaj! #2205
-
3.21.0 - 2024-08-14
- Add support for remote functions by @ misscoded in #2026
- chore(deps): bump axios to 1.7.4 to address CVE by @ helzahalim in #2201
- chore: purge the "workflow step" terminology by @ WilliamBergamin in #2199
- @ helzahalim made their first contribution in #2201
-
3.20.0 - 2024-08-12
- Add missing Events API payload types by @ seratch in #2155
- docs: replacement steps from apps with custom functions by @ lukegalbraithrussell in #2149
- Add an optional handler for invalid request signature error by @ dophsquare in #2154
- Add missing properties in app_mention event payload by @ seratch in #2160
- fix: add ts to PinnedMessageItem interface by @ maxretries in #2164
- fix: add missing fields in ChannelCreatedEvent by @ maxretries in #2166
- Fix broken link in "external select" section by @ ornato-t in #2169
- Docs: adds Docusaurus site by @ lukegalbraithrussell in #2174
- Docs: remove overzealous redirect by @ lukegalbraithrussell in #2177
- docs - add manual redirects scripts by @ lukegalbraithrussell in #2178
- Docs: Adds landing page and redirects by @ lukegalbraithrussell in #2179
- Docs - fixes README image link by @ lukegalbraithrussell in #2180
- Docs: remove superfluous files by @ lukegalbraithrussell in #2181
- Fix Bold Text Rendering Issue by @ suekou in #2183
- chore(deps-dev): bump @ types/node from 22.1.0 to 20.14.2 by @ dependabot in #2192
- chore(deps): bump axios to 1.7.3 to address CVE by @ filmaj in #2194
- Publish
- @ dophsquare made their first contribution in #2154
- @ maxretries made their first contribution in #2164
- @ ornato-t made their first contribution in #2169
- @ suekou made their first contribution in #2183
-
3.19.0 - 2024-06-19
const { App, AwsLambdaReceiver } = require('@ slack/bolt');
- Add flag to
- Add a type predicate for
- ButtonAction value field not required in #2134 - thanks @ srajiang!
- fix(types): return void promises from the express receiver middleware parser in #2141 - thanks @ zimeg!
- docs: fixed duplicative header links in reference in #2120 - thanks @ lukegalbraithrussell!
- docs: deprecate Steps from Apps docs in #2130 - thanks @ filmaj!
- docs: add JSDoc to and list out all available builtin middleware functions in the docs in #2136 - thanks @ filmaj!
- ci(test): perform unit testing against node version 22 in #2140 - thanks @ zimeg!
- chore(release): tag version @ slack/bolt@3.19.0 in #2142 - thanks @ zimeg!
- Bump @ types/node from 20.12.7 to 20.12.10 in #2111 - thanks @ dependabot!
- Bump @ types/node from 20.12.10 to 20.12.11 in #2114 - thanks @ dependabot!
- Bump @ types/node from 20.12.11 to 20.12.12 in #2117 - thanks @ dependabot!
- Bump @ types/node from 20.12.12 to 20.14.0 in #2125 - thanks @ dependabot!
- Bump @ types/node from 20.14.0 to 20.14.2 in #2132 - thanks @ dependabot!
- @ noah-guillory made their first contribution in #2107
- @ lukegalbraithrussell made their first contribution in #2120
from @slack/bolt GitHub release notesWhat's Changed
This patch release brings improvements to documentation and sureness in our CI, as well as security updates to certain
@ slackpackages - see CVE-2024-39338 andaxios@1.7.4for more details!Changes
📚 Documentation
🔒 Security
🧰 Maintenance
Full Changelog: https://github.com/slackapi/bolt-js/compare/@ slack/bolt@3.21.0...@ slack/bolt@3.21.1
What's Changed
Bolt-JS now supports Custom Steps! That's right, your trusty Bolt app now let's you expose Custom Steps in Bolt, allowing you to provide steps for use in Workflow Builder.
You can now use the new
function()method to register handlers for thefunction_executedevent. Check out our API docs on the topic to get started.Changelog
New Contributors
Full Changelog: https://github.com/slackapi/bolt-js/compare/@ slack/bolt@3.20.0...@ slack/bolt@3.21.0
What's Changed
@ slack/bolt@3.20.0by @ filmaj in #2195New Contributors
Full Changelog: https://github.com/slackapi/bolt-js/compare/@ slack/bolt@3.19.0...@ slack/bolt@3.20.0
What's Changed
More customizations for the
AwsLambdaReceiverhave landed as well as a few touchups to typings and documented details!With this release, the signature verification for
AwsLambdaReceivercan now be turned off if that's something you're interested in! Perhaps you have your own stylish way of verifying these signatures. The following can be added to your receiver to unlock this:const app = new App({
...
receiver: new AwsLambdaReceiver({
signatureVerification: false,
}),
});
Read on and browse around for more details on all of the changes included!
🎁 Enhancements
AwsLambdaReceiverto enable/disable signature verification in #2107 - thanks @ noah-guillory!🐛 Fixes
CodedErrorin #2110 - thanks @ filmaj!📚 Documentation
🧰 Maintenance
📦 Dependencies
New Contributors
Full Changelog: https://github.com/slackapi/bolt-js/compare/@ slack/bolt@3.18.0...@ slack/bolt@3.19.0
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: