chore(deps): bump axios and @slack/webhook in /ops/functions

[dependabot]

Removes axios. It's no longer used after updating ancestor dependency @slack/webhook. These dependencies need to be updated together.

Removes axios

Updates @slack/webhook from 6.1.0 to 8.0.0

Release notes

Sourced from @​slack/webhook's releases.

@​slack/webhook@​8.0.0

Major Changes

• fc98c8c: Drop Node.js 18 support. The minimum supported Node.js version is now 20.

• fc98c8c: Restructured error classes to use proper Error subclasses extending a new SlackWebhookError base class.

  Breaking changes to IncomingWebhookHTTPError:

  • The original property has been removed. HTTP response details are now direct properties:
    • statusCode: number
    • statusMessage: string
    • body: string
  • Migrate from error.original.response.status to error.statusCode, error.original.response.data to error.body, etc.

  Breaking changes to IncomingWebhookRequestError:

  • The original property is now a standard Error (previously it was an AxiosError). The original error is also available via the standard cause property.

  Removed factory functions (use new with the corresponding class instead):

  • requestErrorWithOriginal() → new IncomingWebhookRequestError(original)
  • httpErrorWithOriginal() → new IncomingWebhookHTTPError(statusCode, statusMessage, body)
  • errorWithCode() — Use the specific error class directly.

  Migration: Replace if (error.code === ErrorCode.HTTPError) with if (error instanceof IncomingWebhookHTTPError). You can also catch all webhook errors with if (error instanceof SlackWebhookError).

  The CodedError interface is deprecated — use instanceof checks with the SlackWebhookError base class or specific error subclasses instead.

• fc98c8c: Replaced axios with the standard Fetch API for HTTP transport.

  Removed options from IncomingWebhookDefaultArguments:

  • agent — Use the new fetch option to provide a custom fetch implementation with proxy or TLS support. For proxies, prefer the built-in http.setGlobalProxyFromEnv() or NODE_USE_ENV_PROXY=1 (Node.js 24+). For advanced use cases:

    import { fetch, Agent } from "undici";
    const webhook = new IncomingWebhook(url, {
      fetch: (url, init) =>
        fetch(url, {
          ...init,
          dispatcher: new Agent({ connect: { ca: myCA } }),
        }),
    });

  The axios dependency has been removed. The default fetch implementation is globalThis.fetch (available in Node.js 20+). The timeout option remains available and is implemented via AbortController.

Minor Changes

• fc98c8c: feat: add WebhookTrigger class for Workflow Builder triggers and opt-in retries for IncomingWebhook and WebhookTrigger

... (truncated)

Commits

• 70e15b8 chore: release (#2653)
• fc98c8c feat: Node Slack SDK major version release candidate (#2603)
• c37b47e docs: updates webhook page to match readme (#2658)
• bb49d99 fix(web-api): redact response body in debug logs (#2652)
• 2b6a0ce chore: release (#2650)
• a2f6e77 feat(webhook): add opt-in retries to IncomingWebhook and WebhookTrigger (#2641)
• a5bd5c8 feat(webhook): add WebhookTrigger class for Workflow Builder triggers (#2615)
• b0e335b chore: release (#2649)
• a795b86 feat: expand app manifest types for agent apps (#2648)
• 12b94a2 chore: release (#2642)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​slack/webhook since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.