Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

socket-mode(build): use a minimum version of web-api@7.3.4 #1878

Merged
merged 2 commits into from
Aug 15, 2024

Conversation

zimeg
Copy link
Member

@zimeg zimeg commented Aug 15, 2024

Summary

This PR uses the latest version of @slack/web-api@7 to support the most recent releases without worries of bumping the minor and patch numbers or confusion with past numbers.

Notes

Noticed this pattern in a casual inspection of the @slack/oauth packages and am thinking it's good to use here too!

Had to dig a bit to confirm this, but running npm update in projects using @slack/socket-mode should bump @slack/web-api to the latest 7.b.c or whatever's specified otherwise. Docs on how dependencies update are here 📚

Requirements

@zimeg zimeg added semver:patch enhancement M-T: A feature request for new functionality pkg:socket-mode applies to `@slack/socket-mode` labels Aug 15, 2024
@zimeg zimeg added this to the socket-mode@1.3.6 milestone Aug 15, 2024
@zimeg zimeg requested a review from filmaj August 15, 2024 20:07
@zimeg zimeg self-assigned this Aug 15, 2024
Copy link

codecov bot commented Aug 15, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 89.85%. Comparing base (7c2cfdc) to head (c069d11).
Report is 2 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1878   +/-   ##
=======================================
  Coverage   89.85%   89.85%           
=======================================
  Files          34       34           
  Lines        7648     7648           
  Branches      374      374           
=======================================
  Hits         6872     6872           
  Misses        764      764           
  Partials       12       12           
Flag Coverage Δ
cli-hooks 94.94% <ø> (ø)
cli-test 94.77% <ø> (ø)
oauth 76.53% <ø> (ø)
socket-mode 59.59% <ø> (ø)
web-api 96.57% <ø> (ø)
webhook 95.27% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Copy link
Contributor

@filmaj filmaj left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If we want the security fixes from axios to land, gotta bump up the version to the latest.

packages/socket-mode/package.json Outdated Show resolved Hide resolved
Co-authored-by: Fil Maj <maj.fil@gmail.com>
@zimeg zimeg changed the title socket-mode(build): use the latest version of web-api@7 socket-mode(build): use a minimum version of web-api@7.3.4 Aug 15, 2024
@zimeg
Copy link
Member Author

zimeg commented Aug 15, 2024

@filmaj Thanks tons for the correction! Would it make sense to apply similar changes to other packages using the unspecified @slack/web-api@^7 in follow up PRs? 👀

Edit: Release trains are exciting rides if so! 🚂 💨

@filmaj
Copy link
Contributor

filmaj commented Aug 15, 2024

@zimeg yeah, if the goal is to force everyone onto a secure version of axios, we unfortunately must do so.

@zimeg
Copy link
Member Author

zimeg commented Aug 15, 2024

@filmaj Urgh for the noise it causes but I do believe it's the right call 🔐 I shall attend to this over these next hours 🫡

@zimeg zimeg merged commit 812da6d into slackapi:main Aug 15, 2024
30 checks passed
@zimeg zimeg deleted the socket-mode-build-deps-web-api-7-major branch August 15, 2024 21:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement M-T: A feature request for new functionality pkg:socket-mode applies to `@slack/socket-mode` semver:patch
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants