-
Notifications
You must be signed in to change notification settings - Fork 661
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
socket-mode(build): use a minimum version of web-api@7.3.4 #1878
socket-mode(build): use a minimum version of web-api@7.3.4 #1878
Conversation
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #1878 +/- ##
=======================================
Coverage 89.85% 89.85%
=======================================
Files 34 34
Lines 7648 7648
Branches 374 374
=======================================
Hits 6872 6872
Misses 764 764
Partials 12 12
Flags with carried forward coverage won't be shown. Click here to find out more. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If we want the security fixes from axios to land, gotta bump up the version to the latest.
Co-authored-by: Fil Maj <maj.fil@gmail.com>
@filmaj Thanks tons for the correction! Would it make sense to apply similar changes to other packages using the unspecified Edit: Release trains are exciting rides if so! 🚂 💨 |
@zimeg yeah, if the goal is to force everyone onto a secure version of axios, we unfortunately must do so. |
@filmaj Urgh for the noise it causes but I do believe it's the right call 🔐 I shall attend to this over these next hours 🫡 |
Summary
This PR uses the latest version of
@slack/web-api@7
to support the most recent releases without worries of bumping the minor and patch numbers or confusion with past numbers.Notes
Noticed this pattern in a casual inspection of the
@slack/oauth
packages and am thinking it's good to use here too!Had to dig a bit to confirm this, but running
npm update
in projects using@slack/socket-mode
should bump@slack/web-api
to the latest7.b.c
or whatever's specified otherwise. Docs on how dependencies update are here 📚Requirements