Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(deps): update dependency @slack/bolt to v4 #72

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update dependency @slack/bolt to v4 #72

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 17, 2024 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@slack/bolt (source) 3.14.0 -> 4.2.0 age adoption passing confidence

Release Notes

slackapi/bolt-js (@​slack/bolt)

v4.2.0

Compare Source

What's Changed

Hello! 👋 This release updates dependencies to keep packages secure and makes the logger of your app public for use outside of event listeners when using TypeScript! 🔐 🌲

const app = new App({ ... });

(async () => {
  await app.start(process.env.PORT || 3000);
  app.logger.info('⚡️ Bolt app is running!'); // The app logger can now be used here!
})();
🎁 Enhancements
🔐 Security
📚 Documentation
🧰 Maintenance
🤖 Dependencies

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@​slack/bolt](https://redirect.github.com/slack/bolt)[@​4](https://redirect.github.com/4).1.1...[@​slack/bolt](https://redirect.github.com/slack/bolt)[@​4](https://redirect.github.com/4).2.0

v4.1.1

Compare Source

What's Changed

Changelog

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@​slack/bolt](https://redirect.github.com/slack/bolt)[@​4](https://redirect.github.com/4).1.0...[@​slack/bolt](https://redirect.github.com/slack/bolt)[@​4](https://redirect.github.com/4).1.1

v4.1.0

Compare Source

What's Changed

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@​slack/bolt](https://redirect.github.com/slack/bolt)[@​4](https://redirect.github.com/4).0.1...[@​slack/bolt](https://redirect.github.com/slack/bolt)[@​4](https://redirect.github.com/4).1.0

v4.0.1

Compare Source

What's Changed

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@​slack/bolt](https://redirect.github.com/slack/bolt)[@​4](https://redirect.github.com/4).0.0...[@​slack/bolt](https://redirect.github.com/slack/bolt)[@​4](https://redirect.github.com/4).0.1

v4.0.0

Compare Source

Bolt v4

What's Changed

New Features

Support for Agents & Assistants is now available!

Bolt now offers a simple and intuitive way to create an Agent/Assistant using the new Assistant class. Simply include the required callbacks and add the assistant to your App instance. Get up and running even quicker with a working, out-of-the-box example that utilizes OpenAI here.

Breaking Changes

We have prepared a migration guide to help BoltJS consumers migrate their Bolt v3 apps to v4.

While a few breaking changes were introduced, we don't expect a majority of bolt v3 users to require changing their apps to upgrade to v4. More complex apps may need a few tweaks. TL;DR is: if your bolt v3 app is built with TypeScript, or uses the ExpressReceiver or the AwsLambdaReceiver, or your app used previously-deprecated types or functions, best to read the migration guide.

Middleware Type Changes

In bolt we have a set of Slack*MiddlewareArgs types: for events, shortcuts, commands, and so on. They 'wrap' the underlying event payloads with additional middleware-relevant bits like a next() method, a context object for devs to augment, and so on.

Many of these types, for example the SlackEventMiddlewareArgs type, previously used a conditional to sometimes define particular additional helper utilities on the middleware arguments. For example, the say utility, or tacking on a convenience message property for message-event-related payloads. This was problematic in practice in TypeScript situations, not just internally (this change fixes https://github.com/slackapi/bolt-js/issues/2135) within the bolt codebase but for developers as well: when the payload was not of a type that required the extra utility, these properties would be required to exist on the middleware arguments but have a value of undefined. Those of us trying to build generic middleware utilities would have to deal with TS compilation errors and needing to liberally type-cast to avoid these conditional mismatches with undefined.

Instead, these MiddlewareArgs types now conditionally create a type intersection when appropriate in order to provide this conditional-utility-extension mechanism. In practice that looks something like:

type SomeMiddlewareArgs<EventType extends string = string> = {
  // some type in here
} & (EventType extends 'message'
  // If this is a message event, add a `message` property
  ? { message: EventFromType<EventType> }
  : unknown
)

With the above, now when a message payload is wrapped up into middleware arguments, it will contain an appropriate message property, whereas a non-message payload will be intersected with unknown - effectively a type "noop." No more e.g. say: undefined or message: undefined to deal with!

Other Breaking Changes
  • drops node v14 and v16 (are now EOL'ed)
  • express to v4->v5; ExpressReceiver users will be exposed to express v4 -> v5 breaking changes - fixes #​2242
  • upgrades to @slack/socket-mode v2; SocketModeReceiver users who have attached custom event listeners to the public socketModeClient directly should read the v1 -> v2 migration guide in case the major upgrade could affect them - fixes #​2225
  • upgrades @slack/web-api v7; all users should read the web-api v6->v7 migration guide to see what the scope of breaking changes the client within listeners is affected by
  • removed exported type: KnownKeys
  • @slack/types now exist under a named export types.
  • removed the SocketModeFunctions class that had a single static method on it and instead directly exposed the defaultProcessEventErrorHandler method from it.
  • the built-in middleware functions ignoreSelf and directMention now no longer must be invoked as a method in order to return middleware; instead they are middleware to be used directly. this lines up the API for these built-in middlewares to match the other builtins.
  • AWSReceiver's AwsEvent interface now models event payloads a bit differently; we now properly model AWS API Gateway v1 and v2 payloads separately - fixes #​2272
  • remove deprecated methods/modules/properties:
    • OptionsRequest interface
    • authed_users and authed_teams from event payload envelope
    • render-html-for-install-path module
    • verify and VerifyOptions from the verify-request module
    • src/receivers/http-utils.ts module

Non-breaking Changes

  • expose the bundled @slack/web-api dependency under the webApi named export
  • fixed an issue in AwsLambdaReceiver where apps with no registered handlers that processed an incoming event would still log out an error related to not acknowledging the request in time - fixes #​2284
  • dependency updates:
    • upgrades raw-body to v3
    • upgrades @slack/oauth to v3
    • removes promise.allsettled since that is natively supported in node since v14
    • moves @types/tsscmp to dev dependencies since that is not exposed to developers

Changelog

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).22.0...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;4](https://redirect.github.com/4).0.0

v3.22.0

Compare Source

What's new

This release adds support for the assistant.threads.* API methods introduced in @slack/[email protected] 🤖 as well as improvements to documentation at the new https://tools.slack.dev/bolt-js site and patches to dependencies 🔒

Example usage

More details about these endpoints can be discovered in the documentation, and listeners can be added to code to respond to incoming events like so:

app.event('assistant_thread_started', async ({ client, event, logger }) => {
  logger.info('A new thread started');
  logger.debug(event);
  const now = new Date();
  const title = await client.assistant.threads.setTitle({
    title: `Chats from ${now.toISOString()}`,
    channel_id: event.assistant_thread.channel_id,
    thread_ts: event.assistant_thread.thread_ts,
  });
  logger.debug(title);
  const suggestions = await client.assistant.threads.setSuggestedPrompts({
    channel_id: event.assistant_thread.channel_id,
    thread_ts: event.assistant_thread.thread_ts,
    title: 'Ask the computer for answers',
    prompts: [
      {
        title: 'Find the time',
        message: `What happens at ${Math.floor(now.getTime() / 1000)}`,
      },
    ],
  });
  logger.debug(suggestions);
});

app.event('assistant_thread_context_changed', async ({ client, event, logger }) => {
  logger.info('The channel of focus changed');
  logger.debug(event);
  const response = client.chat.postMessage({
    thread_ts: event.assistant_thread.thread_ts,
    channel: event.assistant_thread.channel_id,
    text: `Now visiting <#${event.assistant_thread.context.channel_id}>`,
  });
  logger.debug(response);
});

app.message(async ({ client, message, logger }) => {
  logger.info('A new message was received');
  logger.debug(message);
  if (message.subtype === 'message_changed' || message.subtype === 'message_deleted') {
    return;
  }
  const status = await client.assistant.threads.setStatus({
    channel_id: message.channel,
    thread_ts: message.thread_ts,
    status: 'is thinking...',
  });
  logger.debug(status);
  /**
    * Actual response generation could happen here!
    */
  setTimeout(async () => {
    const response = await client.chat.postMessage({
      channel: message.channel,
      thread_ts: message.thread_ts,
      text: 'How insightful!',
    });
    logger.debug(response);
  }, 3000);
});
Changes
📚 Documentation
📦 Dependencies

🎉 New contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.4...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).22.0

v3.21.4

Compare Source

What's Changed

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.3...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.4

v3.21.3

Compare Source

What's Changed

Woops! We (coughfilmajcough) removed the EnvelopedEvent export in a recent change. We are adding it back in in this patch release. Please accept our sincere apologies for this temporary breaking change in bolt 3.21.2.

Changelog

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.2...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.3

v3.21.2

Compare Source

What's Changed

The main change in this patch release is creating an npm release for the change in #​2223, where exported event payload types were moved from bolt-js to @slack/types. If you see errors compiling your TypeScript-based application that look like:

Module './types' has already exported a member

.. then upgrading to this release should address the issue (see #​2233 and #​2234 for issue details).

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.1...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.2

v3.21.1

Compare Source

What's Changed

This patch release brings improvements to documentation and sureness in our CI, as well as security updates to certain @slack packages - see CVE-2024-39338 and [email protected] for more details!

Changes

📚 Documentation
🔒 Security
🧰 Maintenance

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.0...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.1

v3.21.0

Compare Source

What's Changed

Bolt-JS now supports Custom Steps! That's right, your trusty Bolt app now let's you expose Custom Steps in Bolt, allowing you to provide steps for use in Workflow Builder.

You can now use the new function() method to register handlers for the function_executed event. Check out our API docs on the topic to get started.

Changelog

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).20.0...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).21.0

v3.20.0

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).19.0...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).20.0

v3.19.0

Compare Source

What's Changed

More customizations for the AwsLambdaReceiver have landed as well as a few touchups to typings and documented details!

With this release, the signature verification for AwsLambdaReceiver can now be turned off if that's something you're interested in! Perhaps you have your own stylish way of verifying these signatures. The following can be added to your receiver to unlock this:

const { App, AwsLambdaReceiver } = require('@&#8203;slack/bolt');

const app = new App({
  ...
  receiver: new AwsLambdaReceiver({
    signatureVerification: false,
  }),
});

Read on and browse around for more details on all of the changes included!

🎁 Enhancements
🐛 Fixes
📚 Documentation
🧰 Maintenance
📦 Dependencies

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).18.0...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).19.0

v3.18.0

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).17.1...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).18.0

v3.17.1

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).17.0...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).17.1

v3.17.0

Compare Source

What's Changed

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).16.0...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).17.0

v3.16.0

Compare Source

What's Changed

Enhancements 🎁
Maintainers

New Contributors 👋

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).15.0...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).16.0

v3.15.0

Compare Source

What's Changed

This minor release includes support for the new File Input Block Kit Element, which allows for users to submit files using Block Kit. It also removes all traces of vulnerable versions of the axios dependency.

Enhancements
Bug Fixes
Dependencies
Other

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).14.0...[@&#8203;slack/bolt](https://redirect.github.com/slack/bolt)[@&#8203;3](https://redirect.github.com/3).15.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Change in project dependencies. label Oct 17, 2024
@renovate renovate bot assigned rainx Oct 17, 2024
@renovate renovate bot requested a review from rainx October 17, 2024 22:02
@renovate Renovate
Copy link
Contributor Author

renovate bot commented Oct 17, 2024

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined
Post-upgrade command 'npx beachball change --no-fetch --no-commit --type patch --message '{{{commitMessage}}}'' has not been added to the allowed list in allowedPostUpgradeCommands

@renovate renovate bot force-pushed the renovate/slack-bolt-4.x branch from 8797a54 to a6f6dca Compare October 22, 2024 19:05
@renovate renovate bot force-pushed the renovate/slack-bolt-4.x branch 2 times, most recently from f82c436 to 812af71 Compare November 1, 2024 19:39
@renovate renovate bot force-pushed the renovate/slack-bolt-4.x branch from 812af71 to 9a4aeba Compare November 26, 2024 17:51
@renovate renovate bot changed the title fix(deps): update dependency @slack/bolt to v4 fix(deps): update dependency @slack/bolt to v4 - autoclosed Dec 8, 2024
@renovate renovate bot closed this Dec 8, 2024
@renovate renovate bot deleted the renovate/slack-bolt-4.x branch December 8, 2024 18:41
@renovate renovate bot changed the title fix(deps): update dependency @slack/bolt to v4 - autoclosed fix(deps): update dependency @slack/bolt to v4 Dec 9, 2024
@renovate renovate bot reopened this Dec 9, 2024
@renovate renovate bot force-pushed the renovate/slack-bolt-4.x branch from 4699ab5 to 9a4aeba Compare December 9, 2024 02:11
@renovate renovate bot force-pushed the renovate/slack-bolt-4.x branch from 9a4aeba to 78e8b48 Compare December 17, 2024 08:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@rainx rainx Awaiting requested review from rainx

Assignees

@rainx rainx

Labels
dependencies Change in project dependencies.
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@rainx