Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump @slack/web-api from 6.11.1 to 7.0.0 #95

Merged
merged 1 commit into from
Jan 17, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 16, 2024

Bumps @slack/web-api from 6.11.1 to 7.0.0.

Release notes

Sourced from @​slack/web-api's releases.

@​slack/web-api@​7.0.0

What's Changed

There are two big (potentially) breaking changes library users should be aware of:

  1. The minimum supported (and thus tested) version of node.js is now v18. While older versions of node should still work, we no longer guarantee this, especially now that versions of node.js older than 18 are end-of-life'd.
  2. If you use this library in a TypeScript project, many of the HTTP API methods that this library exposes now have stricter, and more correct / accurate, argument types and constraints modeled.

But do not fear! We have written a migration guide for v6 -> v7 users which painstakingly list out the changes per-method, which should provide you with an easy upgrade process.

As usual, if you have trouble with this library, feel free to file an issue! We are here to help 🫂 😄

Much love, The Slack DevRel Engineering team

Changelog

e29f6a1 Add support for overriding token when using fileUploadV2 (#1723 fixes #1644) d53ef02 @slack/web-api argument type safety (#1673) 4a8eeac Remove warning about lack of fallback text from chat.update invocations (#1674) 6e8a31e Bump minimum node version to v18 (#1667)

@​slack/web-api@​7.0.0-rc.0

What's Changed

A lot! While this is only a release candidate as we finalize the next major version of web-api, v7, you can give it a go while we put the final touches on it.

We have also prepared a migration guide for those worried about what has changed and how to migrate from v6.

For the full list of changes, please take a look at the migration guide.

To install and give it a whirl, simply:

npm i @slack/web-api@rc

Your feedback is incredibly valuable to us! If you do give this release candidate a try, first: thank you! Second, if you find any issues or have trouble using it, please let us know by filing an issue.

@​slack/web-api@​6.11.2

Bumps axios to 1.6.5 to address another security vulnerability.

Commits
  • d28638b Publish @slack/[email protected] (#1726)
  • 8693fd9 Drop end year on LICENSE dates, add licenses to each sub-package (#1725)
  • 5fe33e5 web-api: basic module system integration tests, removing unused bits, depende...
  • e29f6a1 web-api: Add support for overriding token when using fileUploadV2 (#1723)
  • d53ef02 @slack/web-api argument type safety (#1673)
  • 27b78e5 Publish patch versions of oauth, socket-mode and rtm-api to address downstrea...
  • 3f45b59 rtm-api, socket-mode, oauth: Bump web-api to latest v6.11.2 to address underl...
  • 725d662 web-api: Update axios to 1.6.5 (#1716)
  • 3faa5b6 webhook: Bumping axios to 1.6.3 to resolve security vulnerability (#1712)
  • 457ce38 Upgrade Axios web-api to 1.6.3 (#1710)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@slack/web-api](https://github.com/slackapi/node-slack-sdk) from 6.11.1 to 7.0.0.
- [Release notes](https://github.com/slackapi/node-slack-sdk/releases)
- [Commits](https://github.com/slackapi/node-slack-sdk/compare/@slack/[email protected]...@slack/[email protected])

---
updated-dependencies:
- dependency-name: "@slack/web-api"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from robandpdx as a code owner January 16, 2024 20:49
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 16, 2024
Copy link


=============================== Coverage summary ===============================
Statements   : 100% ( 150/150 )
Branches     : 100% ( 88/88 )
Functions    : 100% ( 27/27 )
Lines        : 100% ( 149/149 )
================================================================================

@robandpdx robandpdx merged commit 131fca1 into main Jan 17, 2024
2 checks passed
@robandpdx robandpdx deleted the dependabot/npm_and_yarn/slack/web-api-7.0.0 branch January 17, 2024 04:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant