⬆️ CI(Actions): Bump slackapi/slack-github-action from 1.27.0 to 3.0.3

[dependabot]

Bumps slackapi/slack-github-action from 1.27.0 to 3.0.3.

Release notes

Sourced from slackapi/slack-github-action's releases.

Slack GitHub Action v3.0.3

Patch Changes

• 66834e4: feat: add instrumentation to address error rates

Slack GitHub Action v3.0.2

Patch Changes

• 79529d7: fix: resolve url.parse deprecation warning for webhook techniques

Slack GitHub Action v3.0.1

What's Changed

Alongside the breaking changes of @v3.0.0 and a new technique to run Slack CLI commands, we tried the wrong name to publish to the GitHub Marketplace 🐙 This action is now noted as The Slack GitHub Action in listings 🎶 ✨

🎨 Maintenance

• chore: use a unique title for marketplace in slackapi/slack-github-action#576 - Thanks @​zimeg!
• chore(release): tag version 3.0.1 in slackapi/slack-github-action#577 - Thanks @​zimeg!

Full Changelog: slackapi/slack-github-action@v3.0.0...v3.0.1

Slack GitHub Action v3.0.0

The @v3.0.0 release had a hiccup on publish and we recommend using @​v3.0.1 or a more recent version when updating! Oops!

🎽 Running Slack CLI commands and the active Node runtime, both included in this release 👟 ✨

⚠️ Breaking change: Node.js 24 the runtime

This major version updates the GitHub Actions required runtime to Node.js 24. Most GitHub-hosted runners already include this, but self-hosted runners may need to be updated ahead of planned deprecations of Node 20 on GitHub Actions runners.

📺 Enhancement: Run Slack CLI commands

This release introduces a new technique for running Slack CLI commands directly in GitHub Actions workflows. Use this to install the latest version (or a specific one) of the CLI and execute commands like deploy for merges to main, manifest validate with tests, and other commands.

Gather a token using the following CLI command to store with repo secrets, then get started with an example below:

$ slack auth token

🧪 Validate an app manifest on pull requests

Check that your app manifest is valid before merging changes:

🔗 https://docs.slack.dev/tools/slack-github-action/sending-techniques/running-slack-cli-commands/validate-a-manifest

- name: Validate the manifest
</tr></table> 

... (truncated)

Changelog

Sourced from slackapi/slack-github-action's changelog.

slack-github-action

3.0.3

Patch Changes

• 66834e4: feat: add instrumentation to address error rates

3.0.2

Patch Changes

• 79529d7: fix: resolve url.parse deprecation warning for webhook techniques

Commits

• 45a88b9 chore: release
• 1c0bcf0 chore: release (#606)
• 66834e4 feat: add instrumentation to address error rates (#600)
• 0fe0f90 build(deps): bump @​actions/github from 9.0.0 to 9.1.1 (#605)
• c5e7059 build(deps): bump @​slack/web-api from 7.15.0 to 7.15.1 (#604)
• 0325526 build(deps-dev): bump @​biomejs/biome from 2.4.10 to 2.4.13 (#601)
• 900cd3e build(deps-dev): bump @​types/node from 24.12.0 to 24.12.2 (#603)
• 53fdcff build(deps): bump @​actions/core from 3.0.0 to 3.0.1 (#602)
• 26856cc build(deps): bump slackapi/slack-github-action from 3.0.1 to 3.0.2 (#596)
• feba1e2 ci: skip publish step if no release is needed (#599)
• Additional commits viewable in compare view

[github-actions]

👋 Maintainer reminder: Smoke tests cannot run automatically on dependabot PRs due to GitHub secret restrictions.

Before merging, add the run-smoke-tests label and wait for the smoke tests to pass.

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 40f50c0. Configure here.}

[cursor]

Missing webhook-type for Slack v3

High Severity

Bumping slackapi/slack-github-action to v3.0.3 without adding webhook-type: incoming-webhook under with: leaves steps configured like v1. v2+ ignores SLACK_WEBHOOK_TYPE and fails with a missing-input error, so release and smoke-test Slack notifications never send.

Additional Locations (3)

• .github/workflows/release.yaml#L147-L186
• .github/workflows/release.yaml#L197-L243
• .github/workflows/smoke-tests.yaml#L88-L147

 

^{Reviewed by Cursor Bugbot for commit 40f50c0. Configure here.}

[github-actions]

👋 Maintainer reminder: Smoke tests cannot run automatically on dependabot PRs due to GitHub secret restrictions.

Before merging, add the run-smoke-tests label and wait for the smoke tests to pass.