Skip to content

deps(deps): update dependencies-non-major - #3

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/dependencies-non-major
Open

deps(deps): update dependencies-non-major#3
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/dependencies-non-major

Conversation

@renovate

@renovate renovate Bot commented Mar 27, 2023 •
edited
Loading

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@netlify/functions (source) 1.3.0 → 1.6.0 age confidence
@slack/bolt (source) 3.12.2 → 3.22.0 age confidence
@types/aws-lambda (source) 8.10.75 → 8.10.162 age confidence
@types/node (source) 18.11.18 → 18.19.130 age confidence
@types/node-fetch (source) 2.6.2 → 2.6.13 age confidence
dotenv 16.0.3 → 16.6.1 age confidence
node-fetch 3.3.0 → 3.3.2 age confidence
typescript (source) 4.2.4 → 4.9.5 age confidence

Release Notes

netlify/primitives (@​netlify/functions)

v1.6.0

Compare Source

Features

v1.5.0

Compare Source

Features

v1.4.0

Compare Source

Features
slackapi/bolt-js (@​slack/bolt)

v3.22.0

Compare Source

What's new

This release adds support for the assistant.threads.* API methods introduced in @slack/web-api@6.13.0 🤖 as well as improvements to documentation at the new https://tools.slack.dev/bolt-js site and patches to dependencies 🔒

Example usage

More details about these endpoints can be discovered in the documentation, and listeners can be added to code to respond to incoming events like so:

app.event('assistant_thread_started', async ({ client, event, logger }) => {
  logger.info('A new thread started');
  logger.debug(event);
  const now = new Date();
  const title = await client.assistant.threads.setTitle({
    title: `Chats from ${now.toISOString()}`,
    channel_id: event.assistant_thread.channel_id,
    thread_ts: event.assistant_thread.thread_ts,
  });
  logger.debug(title);
  const suggestions = await client.assistant.threads.setSuggestedPrompts({
    channel_id: event.assistant_thread.channel_id,
    thread_ts: event.assistant_thread.thread_ts,
    title: 'Ask the computer for answers',
    prompts: [
      {
        title: 'Find the time',
        message: `What happens at ${Math.floor(now.getTime() / 1000)}`,
      },
    ],
  });
  logger.debug(suggestions);
});

app.event('assistant_thread_context_changed', async ({ client, event, logger }) => {
  logger.info('The channel of focus changed');
  logger.debug(event);
  const response = client.chat.postMessage({
    thread_ts: event.assistant_thread.thread_ts,
    channel: event.assistant_thread.channel_id,
    text: `Now visiting <#${event.assistant_thread.context.channel_id}>`,
  });
  logger.debug(response);
});

app.message(async ({ client, message, logger }) => {
  logger.info('A new message was received');
  logger.debug(message);
  if (message.subtype === 'message_changed' || message.subtype === 'message_deleted') {
    return;
  }
  const status = await client.assistant.threads.setStatus({
    channel_id: message.channel,
    thread_ts: message.thread_ts,
    status: 'is thinking...',
  });
  logger.debug(status);
  /**
    * Actual response generation could happen here!
    */
  setTimeout(async () => {
    const response = await client.chat.postMessage({
      channel: message.channel,
      thread_ts: message.thread_ts,
      text: 'How insightful!',
    });
    logger.debug(response);
  }, 3000);
});
Changes
📚 Documentation
📦 Dependencies

🎉 New contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@3.21.4...@slack/bolt@3.22.0

v3.21.4

Compare Source

What's Changed

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@3.21.3...@slack/bolt@3.21.4

v3.21.3

Compare Source

What's Changed

Woops! We (coughfilmajcough) removed the EnvelopedEvent export in a recent change. We are adding it back in in this patch release. Please accept our sincere apologies for this temporary breaking change in bolt 3.21.2.

Changelog

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@3.21.2...@slack/bolt@3.21.3

v3.21.2

Compare Source

What's Changed

The main change in this patch release is creating an npm release for the change in #​2223, where exported event payload types were moved from bolt-js to @slack/types. If you see errors compiling your TypeScript-based application that look like:

Module './types' has already exported a member

.. then upgrading to this release should address the issue (see #​2233 and #​2234 for issue details).

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@3.21.1...@slack/bolt@3.21.2

v3.21.1

Compare Source

What's Changed

This patch release brings improvements to documentation and sureness in our CI, as well as security updates to certain @slack packages - see CVE-2024-39338 and axios@1.7.4 for more details!

Changes

📚 Documentation
🔒 Security
🧰 Maintenance
  • ci: add bolt-ts-custom-function-template to list of test samples - Thanks @​filmaj! #​2205

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@3.21.0...@slack/bolt@3.21.1

v3.21.0

Compare Source

What's Changed

Bolt-JS now supports Custom Steps! That's right, your trusty Bolt app now let's you expose Custom Steps in Bolt, allowing you to provide steps for use in Workflow Builder.

You can now use the new function() method to register handlers for the function_executed event. Check out our API docs on the topic to get started.

Changelog

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@3.20.0...@slack/bolt@3.21.0

v3.20.0

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@3.19.0...@slack/bolt@3.20.0

v3.19.0

Compare Source

What's Changed

More customizations for the AwsLambdaReceiver have landed as well as a few touchups to typings and documented details!

With this release, the signature verification for AwsLambdaReceiver can now be turned off if that's something you're interested in! Perhaps you have your own stylish way of verifying these signatures. The following can be added to your receiver to unlock this:

const { App, AwsLambdaReceiver } = require('@slack/bolt');

const app = new App({
  ...
  receiver: new AwsLambdaReceiver({
    signatureVerification: false,
  }),
});

Read on and browse around for more details on all of the changes included!

🎁 Enhancements
🐛 Fixes
📚 Documentation
🧰 Maintenance
📦 Dependencies

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@3.18.0...@slack/bolt@3.19.0

v3.18.0

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@3.17.1...@slack/bolt@3.18.0

v3.17.1

Compare Source

What's Changed

  • chore(3.17.1): Publish v3.17.1 by @​rafael-fecha, including dependency updates to address an Axios security vulnerability in #​2029

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@3.17.0...@slack/bolt@3.17.1

v3.17.0

Compare Source

What's Changed

  • Support for style.code properties on rich text elements (updates @slack/types to 2.11 and @slack/web-api to 6.11) by @​filmaj in #​2017

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@3.16.0...@slack/bolt@3.17.0

v3.16.0

Compare Source

What's Changed

Enhancements 🎁
Maintainers

New Contributors 👋

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@3.15.0...@slack/bolt@3.16.0

v3.15.0

Compare Source

What's Changed

This minor release includes support for the new File Input Block Kit Element, which allows for users to submit files using Block Kit. It also removes all traces of vulnerable versions of the axios dependency.

Enhancements
Bug Fixes
Dependencies
Other

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@3.14.0...@slack/bolt@3.15.0

v3.14.0

Compare Source

What's Changed

Important Notice

Since this version, we've dropped Node 16 support as the version is EOLed on September 11th, 2023. Please upgrade to a newer Node.js version from now on.

Enhancements
Bug Fixes
Dependencies

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@3.13.3...@slack/bolt@3.14.0

v3.13.3

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@3.13.2...@slack/bolt@3.13.3

v3.13.2

Compare Source

What's Changed

Enhancements
Bug fixes
Documentation
Dependencies

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@3.13.1...@slack/bolt@3.13.2

v3.13.1

Compare Source

Enhancements
Bug fixes
Documentation
Dependencies

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@3.13.0...@slack/bolt@3.13.1

v3.13.0

Compare Source

What's Changed

Enhancements
Bug fixes
Tests
Documentation
Dependencies
Chores

New Contributors

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@3.12.2...@slack/bolt@3.13.0

motdotla/dotenv (dotenv)

v16.6.1

Compare Source

Changed
  • Default quiet to true – hiding the runtime log message (#​874)
  • NOTICE: 17.0.0 will be released with quiet defaulting to false. Use config({ quiet: true }) to suppress.
  • And check out the new dotenvx. As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch require('dotenv').config() for require('@dotenvx/dotenvx').config().

v16.6.0

Compare Source

Added
  • Default log helpful message [dotenv@16.6.0] injecting env (1) from .env (#​870)
  • Use { quiet: true } to suppress
  • Aligns dotenv more closely with dotenvx.

v16.5.0

Compare Source

Added
  • 🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.

[!TIP]
Become a sponsor

The dotenvx README is viewed thousands of times DAILY on GitHub and NPM.
Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time.

Changed
  • Remove _log method. Use _debug #​862

v16.4.7

Compare Source

Changed
  • Ignore .tap folder when publishing. (oops, sorry about that everyone. - @​motdotla) #​848

v16.4.6

Compare Source

Changed
  • Clean up stale dev dependencies #​847
  • Various README updates clarifying usage and alternative solutions using dotenvx

v16.4.5

Compare Source

Changed
  • 🐞 Fix recent regression when using path option. return to historical behavior: do not attempt to auto find .env if path set. (regression was introduced in 16.4.3) #​814

v16.4.4

Compare Source

Changed
  • 🐞 Replaced chaining operator ?. with old school && (fixing node 12 failures) #​812

v16.4.3

Compare Source

Changed
  • 🐞 Fix recent regression when using path option. return to historical behavior: do not attempt to auto find .env if path set. (regression was introduced in 16.4.3) #​814

v16.4.2

Compare Source

Changed

v16.4.1

Compare Source

  • Patch support for array as path option #​797

v16.4.0

Compare Source

  • Add error.code to error messages around .env.vault decryption handling #​795
  • Add ability to find .env.vault file when filename(s) passed as an array #​784

v16.3.2

Compare Source

Added
  • Add debug message when no encoding set #​735
Changed
  • Fix output typing for populate [#​792](h

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • "every 2 weeks on Monday before 7am"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from Lisa-Stubert as a code owner March 27, 2023 01:48
@netlify

netlify Bot commented Mar 27, 2023 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for sensational-cupcake-14667f ready!

Name Link
🔨 Latest commit aca1ffc
🔍 Latest deploy log https://app.netlify.com/projects/sensational-cupcake-14667f/deploys/6a80905eb31093000820e958
😎 Deploy Preview https://deploy-preview-3--sensational-cupcake-14667f.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

@socket-security

socket-security Bot commented Mar 27, 2023 •
edited
Loading

Copy link
Copy Markdown

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

@renovate
renovate Bot force-pushed the renovate/dependencies-non-major branch from 94b8b2e to 4f824a2 Compare March 29, 2023 04:37
@renovate
renovate Bot force-pushed the renovate/dependencies-non-major branch from 4f824a2 to 81e102b Compare April 5, 2023 22:24
@renovate
renovate Bot force-pushed the renovate/dependencies-non-major branch 5 times, most recently from 66b9b9b to b5b3839 Compare April 26, 2023 00:57
@renovate
renovate Bot force-pushed the renovate/dependencies-non-major branch 4 times, most recently from bdbb875 to 9dd6632 Compare May 3, 2023 06:18
@renovate
renovate Bot force-pushed the renovate/dependencies-non-major branch 6 times, most recently from 0b563a6 to b40b167 Compare May 11, 2023 20:49
@renovate
renovate Bot force-pushed the renovate/dependencies-non-major branch 5 times, most recently from f21d7ad to 509c158 Compare May 18, 2023 16:52
@renovate
renovate Bot force-pushed the renovate/dependencies-non-major branch 3 times, most recently from 7ba982d to d61aaea Compare May 27, 2023 00:12
@renovate
renovate Bot force-pushed the renovate/dependencies-non-major branch from d61aaea to ba68640 Compare June 9, 2023 02:57
@socket-security

socket-security Bot commented Jun 9, 2023 •
edited
Loading

Copy link
Copy Markdown

Updated dependencies detected. Learn more about Socket for GitHub ↗︎

Packages Version New capabilities Transitives Size Publisher
@types/node-fetch 2.6.2...2.6.9 None +2/-2 3.91 MB types
@types/aws-lambda 8.10.75...8.10.130 None +0/-0 138 kB types
@types/node 18.11.18...18.19.2 None +1/-0 3.9 MB types
node-fetch 3.3.0...3.3.2 None +0/-0 107 kB node-fetch-bot
@slack/bolt 3.12.2...3.16.0 None +13/-10 8.88 MB slackhq
axios 1.2.2...1.6.2 None +0/-0 1.8 MB jasonsaayman
dotenv 16.0.3...16.3.1 None +0/-0 71.6 kB motdotla
@netlify/functions 1.3.0...1.6.0 None +0/-0 17.7 kB netlify-bot
typescript 4.2.4...4.9.5 None +0/-0 66.8 MB typescript-bot

@renovate
renovate Bot force-pushed the renovate/dependencies-non-major branch 2 times, most recently from d6e359e to 8e166d8 Compare August 19, 2023 05:36
@renovate
renovate Bot force-pushed the renovate/dependencies-non-major branch 3 times, most recently from 62de8c1 to 4f4decf Compare August 28, 2023 11:50
@renovate
renovate Bot force-pushed the renovate/dependencies-non-major branch 2 times, most recently from 5c970b1 to 5efcba1 Compare September 3, 2023 11:48
@renovate
renovate Bot force-pushed the renovate/dependencies-non-major branch 4 times, most recently from f885e22 to bb20f4e Compare September 15, 2023 14:56
@renovate
renovate Bot force-pushed the renovate/dependencies-non-major branch 4 times, most recently from 498ea60 to 9ae6b5c Compare September 23, 2023 02:37
@renovate
renovate Bot force-pushed the renovate/dependencies-non-major branch 4 times, most recently from 867ad2e to c416987 Compare September 29, 2023 23:22
@renovate
renovate Bot force-pushed the renovate/dependencies-non-major branch 3 times, most recently from 1906400 to a91acd2 Compare October 7, 2023 14:20
@renovate
renovate Bot force-pushed the renovate/dependencies-non-major branch 3 times, most recently from cfdbcb2 to 03faaac Compare October 19, 2023 05:50
@renovate
renovate Bot force-pushed the renovate/dependencies-non-major branch 3 times, most recently from e964648 to 750a341 Compare November 1, 2023 02:48
@renovate
renovate Bot force-pushed the renovate/dependencies-non-major branch from 750a341 to c2b47ca Compare November 7, 2023 14:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Lisa-Stubert Lisa-Stubert Awaiting requested review from Lisa-Stubert Lisa-Stubert is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants