Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(deps): update automerge non-major updates #47

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update automerge non-major updates #47

wants to merge 1 commit into from
+93 −168

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 10, 2024 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@slack/bolt (source) 3.14.0 -> 3.22.0 age adoption passing confidence dependencies minor
@slack/web-api (source) 6.9.0 -> 6.13.0 age adoption passing confidence dependencies minor
actions/setup-node v4.0.0 -> v4.0.4 age adoption passing confidence action patch
dessant/lock-threads v5.0.0 -> v5.0.1 age adoption passing confidence action patch
dotenv 16.3.1 -> 16.4.5 age adoption passing confidence dependencies minor
node (source) 20.9.0 -> 20.18.0 age adoption passing confidence minor
node 20.10.0 -> 20.18.0 age adoption passing confidence final minor
openai 4.16.1 -> 4.67.1 age adoption passing confidence dependencies minor
pnpm (source) 9.1.2 -> 9.12.1 age adoption passing confidence packageManager minor

Release Notes

slackapi/bolt (@​slack/bolt)

v3.22.0

Compare Source

What's new

This release adds support for the assistant.threads.* API methods introduced in @slack/[email protected] 🤖 as well as improvements to documentation at the new https://tools.slack.dev/bolt-js site and patches to dependencies 🔒

Example usage

More details about these endpoints can be discovered in the documentation, and listeners can be added to code to respond to incoming events like so:

app.event('assistant_thread_started', async ({ client, event, logger }) => {
  logger.info('A new thread started');
  logger.debug(event);
  const now = new Date();
  const title = await client.assistant.threads.setTitle({
    title: `Chats from ${now.toISOString()}`,
    channel_id: event.assistant_thread.channel_id,
    thread_ts: event.assistant_thread.thread_ts,
  });
  logger.debug(title);
  const suggestions = await client.assistant.threads.setSuggestedPrompts({
    channel_id: event.assistant_thread.channel_id,
    thread_ts: event.assistant_thread.thread_ts,
    title: 'Ask the computer for answers',
    prompts: [
      {
        title: 'Find the time',
        message: `What happens at ${Math.floor(now.getTime() / 1000)}`,
      },
    ],
  });
  logger.debug(suggestions);
});

app.event('assistant_thread_context_changed', async ({ client, event, logger }) => {
  logger.info('The channel of focus changed');
  logger.debug(event);
  const response = client.chat.postMessage({
    thread_ts: event.assistant_thread.thread_ts,
    channel: event.assistant_thread.channel_id,
    text: `Now visiting <#${event.assistant_thread.context.channel_id}>`,
  });
  logger.debug(response);
});

app.message(async ({ client, message, logger }) => {
  logger.info('A new message was received');
  logger.debug(message);
  if (message.subtype === 'message_changed' || message.subtype === 'message_deleted') {
    return;
  }
  const status = await client.assistant.threads.setStatus({
    channel_id: message.channel,
    thread_ts: message.thread_ts,
    status: 'is thinking...',
  });
  logger.debug(status);
  /**
    * Actual response generation could happen here!
    */
  setTimeout(async () => {
    const response = await client.chat.postMessage({
      channel: message.channel,
      thread_ts: message.thread_ts,
      text: 'How insightful!',
    });
    logger.debug(response);
  }, 3000);
});
Changes
📚 Documentation
📦 Dependencies

🎉 New contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.4...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).22.0

v3.21.4

Compare Source

What's Changed

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.3...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.4

v3.21.3

Compare Source

What's Changed

Woops! We (coughfilmajcough) removed the EnvelopedEvent export in a recent change. We are adding it back in in this patch release. Please accept our sincere apologies for this temporary breaking change in bolt 3.21.2.

Changelog

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.2...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.3

v3.21.2

Compare Source

What's Changed

The main change in this patch release is creating an npm release for the change in #​2223, where exported event payload types were moved from bolt-js to @slack/types. If you see errors compiling your TypeScript-based application that look like:

Module './types' has already exported a member

.. then upgrading to this release should address the issue (see #​2233 and #​2234 for issue details).

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.1...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.2

v3.21.1

Compare Source

What's Changed

This patch release brings improvements to documentation and sureness in our CI, as well as security updates to certain @slack packages - see CVE-2024-39338 and [email protected] for more details!

Changes

📚 Documentation
🔒 Security
🧰 Maintenance

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.0...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.1

v3.21.0

Compare Source

What's Changed

Bolt-JS now supports Custom Steps! That's right, your trusty Bolt app now let's you expose Custom Steps in Bolt, allowing you to provide steps for use in Workflow Builder.

You can now use the new function() method to register handlers for the function_executed event. Check out our API docs on the topic to get started.

Changelog

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).20.0...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.0

v3.20.0

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).19.0...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).20.0

v3.19.0

Compare Source

What's Changed

More customizations for the AwsLambdaReceiver have landed as well as a few touchups to typings and documented details!

With this release, the signature verification for AwsLambdaReceiver can now be turned off if that's something you're interested in! Perhaps you have your own stylish way of verifying these signatures. The following can be added to your receiver to unlock this:

const { App, AwsLambdaReceiver } = require('@&#8203;slack/bolt');

const app = new App({
  ...
  receiver: new AwsLambdaReceiver({
    signatureVerification: false,
  }),
});

Read on and browse around for more details on all of the changes included!

🎁 Enhancments
🐛 Fixes
📚 Documentation
🧰 Maintenance
📦 Dependencies

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).18.0...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).19.0

v3.18.0

Compare Source

What's Changed
New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).17.1...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).18.0

v3.17.1

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).17.0...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).17.1

v3.17.0

Compare Source

What's Changed

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).16.0...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).17.0

v3.16.0

Compare Source

What's Changed
Enhancements 🎁
Maintainers
New Contributors 👋

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).15.0...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).16.0

v3.15.0

Compare Source

What's Changed

This minor release includes support for the new File Input Block Kit Element, which allows for users to submit files using Block Kit. It also removes all traces of vulnerable versions of the axios dependency.

Enhancements
Bug Fixes
Dependencies
Other

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).14.0...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).15.0

slackapi/node-slack-sdk (@​slack/web-api)

v6.13.0

Compare Source

What's Changed

We've released support for AI Assistants & Agents via @slack/web-api:

Changes

Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/[@&#8203;slack/web-api](https://redirect.github.com/slack/web-api)[@&#8203;6](https://redirect.github.com/6).12.1...[@&#8203;slack/web-api](https://redirect.github.com/slack/web-api)[@&#8203;6](https://redirect.github.com/6).13.0

v6.12.1

Compare Source

What's Changed

This patch release bumps the minimum version of axios to 1.7.4 to address a CVE - see Axios 1.7.4 release notes for more information.

Changelog

Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/[@&#8203;slack/web-api](https://redirect.github.com/slack/web-api)[@&#8203;6](https://redirect.github.com/6).12.0...[@&#8203;slack/webhook](https://redirect.github.com/slack/webhook)[@&#8203;6](https://redirect.github.com/6).12.1

v6.12.0

Compare Source

What's Changed

The following methods were added to the web client to support functions.* methods:

Full Changelog

4f39371 Add support for functions.* (complete) methods in #​1702 - Thanks @​misscoded!

v6.11.2

Compare Source

Bumps axios to 1.6.5 to address another security vulnerability.

v6.11.1

Compare Source

Bumps axios to 1.6.3 to address a security vulnerability.

v6.11.0

Compare Source

  • Adds support for style.code properties on rich text elements. See original issue #​1706 and PR to resolve #​1707.

v6.10.0

Compare Source

What's Changed

66eb303 Add support for apps.manifest.* endpoints - thanks @​misscoded! (#​1690)
6e07903 Add new args to admin.users.list and update web API response types - thanks @​seratch! (#​1688)

Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/[@&#8203;slack/web-api](https://redirect.github.com/slack/web-api)[@&#8203;6](https://redirect.github.com/6).9.1...[@&#8203;slack/web-api](https://redirect.github.com/slack/web-api)[@&#8203;6](https://redirect.github.com/6).10.0

v6.9.1

Compare Source

What's Changed

Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/[@&#8203;slack/web-api](https://redirect.github.com/slack/web-api)[@&#8203;6](https://redirect.github.com/6).9.0...[@&#8203;slack/web-api](https://redirect.github.com/slack/web-api)[@&#8203;6](https://redirect.github.com/6).9.1

actions/setup-node (actions/setup-node)

v4.0.4

Compare Source

v4.0.3

Compare Source

v4.0.2

Compare Source

What's Changed
New Contributors

Full Changelog: actions/setup-node@v4.0.1...v4.0.2

v4.0.1

Compare Source

What's Changed
New Contributors

Full Changelog: actions/setup-node@v4...v4.0.1

dessant/lock-threads (dessant/lock-threads)

v5.0.1

Compare Source

Learn more about this release from the changelog.

motdotla/dotenv (dotenv)

v16.4.5

Compare Source

Changed
  • 🐞 fix recent regression when using path option. return to historical behavior: do not attempt to auto find .env if path set. (regression was introduced in 16.4.3) #​814

v16.4.4

Compare Source

Changed
  • 🐞 Replaced chaining operator ?. with old school && (fixing node 12 failures) #​812

v16.4.3

Compare Source

Changed
  • Fixed processing of multiple files in options.path #​805

v16.4.2

Compare Source

Changed

v16.4.1

Compare Source

  • Patch support for array as path option #​797

v16.4.0

Compare Source

  • Add error.code to error messages around .env.vault decryption handling #​795
  • Add ability to find .env.vault file when filename(s) passed as an array #​784

v16.3.2

Compare Source

Added
  • Add debug message when no encoding set #​735
Changed
  • Fix output typing for populate #​792
  • Use subarray instead of slice #​793
nodejs/node (node)

v20.18.0: 2024-10-03, Version 20.18.0 'Iron' (LTS), @​targos

Compare Source

Notable Changes
Experimental Network Inspection Support in Node.js

This update introduces the initial support for network inspection in Node.js.
Currently, this is an experimental feature, so you need to enable it using the --experimental-network-inspection flag.
With this feature enabled, you can inspect network activities occurring within a JavaScript application.

To use network inspection, start your Node.js application with the following command:

$ node --inspect-wait --experimental-network-inspection index.js

Please note that the network inspection capabilities are in active development.
We are actively working on enhancing this feature and will continue to expand its functionality in future updates.

Contributed by Kohei Ueno in #​53593 and #​54246

Exposes X509_V_FLAG_PARTIAL_CHAIN to tls.createSecureContext

This releases introduces a new option to the API tls.createSecureContext. From
now on, tls.createSecureContext({ allowPartialTrustChain: true }) can be used
to treat intermediate (non-self-signed) certificates in the trust CA certificate
list as trusted.

Contributed by Anna Henningsen in #​54790

New option for vm.createContext() to create a context with a freezable globalThis

Node.js implements a flavor of vm.createContext() and friends that creates a context without contextifying its global
object when vm.constants.DONT_CONTEXTIFY is used. This is suitable when users want to freeze the context
(impossible when the global is contextified i.e. has interceptors installed) or speed up the global access if they
don't need the interceptor behavior.

Contributed by Joyee Cheung in #​54394

Deprecations
  • [64aa31f6e5] - repl: doc-deprecate instantiating node:repl classes without new (Aviv Keller) #​54842
  • [4c52ee3d7f] - zlib: deprecate instantiating classes without new (Yagiz Nizipli) #​54708
Other Notable Changes
Commits

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Change in project dependencies. label Apr 10, 2024
@renovate renovate bot force-pushed the renovate/automerge-non-major-updates branch 3 times, most recently from 6229298 to 7350224 Compare April 10, 2024 17:26
@renovate renovate bot assigned rainx Apr 10, 2024
@renovate renovate bot requested a review from rainx April 10, 2024 18:57
@renovate renovate bot force-pushed the renovate/automerge-non-major-updates branch 11 times, most recently from 59ff03e to 7cca0e5 Compare April 17, 2024 21:13
@renovate renovate bot force-pushed the renovate/automerge-non-major-updates branch 12 times, most recently from b83b479 to d8b0c89 Compare April 25, 2024 17:09
@renovate renovate bot force-pushed the renovate/automerge-non-major-updates branch from d8b0c89 to ca29f35 Compare April 29, 2024 04:17
@renovate renovate bot force-pushed the renovate/automerge-non-major-updates branch 8 times, most recently from daa3e78 to c80bb12 Compare September 13, 2024 19:40
@renovate renovate bot force-pushed the renovate/automerge-non-major-updates branch 6 times, most recently from bec6083 to 9488c67 Compare September 20, 2024 16:24
@renovate renovate bot force-pushed the renovate/automerge-non-major-updates branch 11 times, most recently from c15535b to 245acce Compare October 2, 2024 17:18
@renovate renovate bot force-pushed the renovate/automerge-non-major-updates branch 3 times, most recently from 66fc880 to 932c423 Compare October 5, 2024 01:03
@renovate renovate bot force-pushed the renovate/automerge-non-major-updates branch from 932c423 to 794d7fe Compare October 7, 2024 15:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@rainx rainx Awaiting requested review from rainx

Assignees

@rainx rainx

Labels
dependencies Change in project dependencies.
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@rainx