Skip to content

chore(deps): bump @slack/bolt from 3.19.0 to 4.2.0#332

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/slack/bolt-4.2.0
Open

chore(deps): bump @slack/bolt from 3.19.0 to 4.2.0#332
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/slack/bolt-4.2.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Dec 23, 2024

Bumps @slack/bolt from 3.19.0 to 4.2.0.

Release notes

Sourced from @​slack/bolt's releases.

@​slack/bolt@​4.2.0

What's Changed

Hello! 👋 This release updates dependencies to keep packages secure and makes the logger of your app public for use outside of event listeners when using TypeScript! 🔐 🌲

const app = new App({ ... });
(async () => {
await app.start(process.env.PORT || 3000);
app.logger.info('⚡️ Bolt app is running!'); // The app logger can now be used here!
})();

🎁 Enhancements

🔐 Security

📚 Documentation

🧰 Maintenance

🤖 Dependencies

Full Changelog: https://github.com/slackapi/bolt-js/compare/@​slack/bolt@​4.1.1...@​slack/bolt@​4.2.0

@​slack/bolt@​4.1.2-rc.1

What's Changed

... (truncated)

Commits
  • d07a70a chore(release): publish @​slack/bolt@​4.2.0 (#2371)
  • b6caa0a feat: make the app logger attached to the app instance public (#2365)
  • c091510 build: update the redirected repo homepage url to postfix js (#2370)
  • 9846ce8 chore(deps): bump slack and axios dependencies to latest secure versions (#2360)
  • e002c13 chore(deps-dev): bump @​types/node from 22.10.1 to 22.10.2 (#2369)
  • 1d0463e chore(deps): bump nanoid from 3.3.7 to 3.3.8 in /docs (#2368)
  • 87b6872 docs: replace redirected or missing links to bolt documentation (#2367)
  • 34b93ab build: ignore autogenerated docusaurus files when running the formatter (#2362)
  • cff0f2d docs: show descriptions of function listener arguments (#2364)
  • 73bd49e build: find the biome config schema from the installed path (#2363)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@slack/bolt](https://github.com/slackapi/bolt-js) from 3.19.0 to 4.2.0.
- [Release notes](https://github.com/slackapi/bolt-js/releases)
- [Commits](https://github.com/slackapi/bolt-js/compare/@slack/bolt@3.19.0...@slack/bolt@4.2.0)

---
updated-dependencies:
- dependency-name: "@slack/bolt"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from inigomarquinez as a code owner December 23, 2024 09:25
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 23, 2024
@socket-security
Copy link
Copy Markdown

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@slack/bolt@4.2.0 Transitive: environment, eval, filesystem, network, unsafe +76 6.02 MB e-zim
npm/prettier@3.3.3 environment, filesystem, unsafe 0 7.7 MB prettier-bot

🚮 Removed packages: npm/@slack/bolt@3.19.0

View full report↗︎

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants