From ea6edc66c1c78c65b70820de4ef7af34e752de39 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 24 Mar 2025 14:22:19 +0000 Subject: [PATCH] fix(deps): update dependency @slack/web-api to v7.9.0 (#9601) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [@slack/web-api](https://tools.slack.dev/node-slack-sdk/web-api) ([source](https://redirect.github.com/slackapi/node-slack-sdk)) | [`7.8.0` -> `7.9.0`](https://renovatebot.com/diffs/npm/@slack%2fweb-api/7.8.0/7.9.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@slack%2fweb-api/7.9.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@slack%2fweb-api/7.9.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@slack%2fweb-api/7.8.0/7.9.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@slack%2fweb-api/7.8.0/7.9.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes
slackapi/node-slack-sdk (@​slack/web-api) ### [`v7.9.0`](https://redirect.github.com/slackapi/node-slack-sdk/releases/tag/%40slack/web-api%407.9.0) [Compare Source](https://redirect.github.com/slackapi/node-slack-sdk/compare/@slack/web-api@7.8.0...@slack/web-api@7.9.0) #### What's Changed This release adds the [`allowAbsoluteUrls`](https://tools.slack.dev/node-slack-sdk/reference/web-api/interfaces/WebClientOptions#allowabsoluteurls) option to the `WebClient` constructor. For code using [dynamic method names](https://tools.slack.dev/node-slack-sdk/web-api#call-a-method) with `.apiCall`, this will toggle if requests should be sent to absolute URLs provided: ```js const { WebClient } = require('@​slack/web-api'); const web = new WebClient(token, { allowAbsoluteUrls: false, // Default: true }); const _response = await web.apiCall('https://example.com', { /* ... */ }); ``` $ node index.js [DEBUG] web-api:WebClient:0 http request url: https://slack.com/api/https://example.com ... [WARN] web-api:WebClient:0 http request failed An HTTP protocol error occurred: statusCode = 404 The default `allowAbsoluteUrls` value is `true` to avoid a breaking change with this update, but we suggest deciding if this option should be applied to scripts and adjacent code. ##### Enhancements 🎉 - feat(web-api): add configs to toggle absolute url usage in dynamic api calls in [https://github.com/slackapi/node-slack-sdk/pull/2176](https://redirect.github.com/slackapi/node-slack-sdk/pull/2176) - Thanks [@​zimeg](https://redirect.github.com/zimeg)! ##### Maintenance 🧰 - fix(web-api): bump axios to 1.8.3 to address CVE-2025-27152 in [https://github.com/slackapi/node-slack-sdk/pull/2172](https://redirect.github.com/slackapi/node-slack-sdk/pull/2172) - Thanks [@​zimeg](https://redirect.github.com/zimeg)! **Full Changelog**: https://github.com/slackapi/node-slack-sdk/compare/[@​slack/web-api](https://redirect.github.com/slack/web-api)[@​7](https://redirect.github.com/7).8.0...[@​slack/web-api](https://redirect.github.com/slack/web-api)[@​7](https://redirect.github.com/7).9.0 **Milestone**: https://github.com/slackapi/node-slack-sdk/milestone/131
--- ### Configuration 📅 **Schedule**: Branch creation - "after 7pm every weekday,before 5am every weekday" in timezone Europe/Madrid, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/Unleash/unleash). Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- yarn.lock | 30 +++++++++++++++--------------- 1 file changed, 15 insertions(+), 15 deletions(-) diff --git a/yarn.lock b/yarn.lock index 2427bd2145..977d149367 100644 --- a/yarn.lock +++ b/yarn.lock @@ -1609,14 +1609,14 @@ __metadata: linkType: hard "@slack/web-api@npm:^7.3.4": - version: 7.8.0 - resolution: "@slack/web-api@npm:7.8.0" + version: 7.9.0 + resolution: "@slack/web-api@npm:7.9.0" dependencies: "@slack/logger": "npm:^4.0.0" "@slack/types": "npm:^2.9.0" "@types/node": "npm:>=18.0.0" "@types/retry": "npm:0.12.0" - axios: "npm:^1.7.8" + axios: "npm:^1.8.3" eventemitter3: "npm:^5.0.1" form-data: "npm:^4.0.0" is-electron: "npm:2.2.2" @@ -1624,7 +1624,7 @@ __metadata: p-queue: "npm:^6" p-retry: "npm:^4" retry: "npm:^0.13.1" - checksum: 10c0/25e3d9f9427993de11d9314fc98bbd6389bf2405981c44e1cf91a07074717daa3184445c7ce650d65fc41d28781a7ea19a8cbbda172be6b14c9b25c0d5c3739f + checksum: 10c0/10960a65bddac7abc980264610face6287da3e3ffb59ce17c69b010102292560e05978a94ef0940f3478ba7e7c65c29609f17a8bc26cf3f59be23d83a61c77ab languageName: node linkType: hard @@ -2608,17 +2608,6 @@ __metadata: languageName: node linkType: hard -"axios@npm:^1.7.8": - version: 1.8.2 - resolution: "axios@npm:1.8.2" - dependencies: - follow-redirects: "npm:^1.15.6" - form-data: "npm:^4.0.0" - proxy-from-env: "npm:^1.1.0" - checksum: 10c0/d8c2969e4642dc6d39555ac58effe06c051ba7aac2bd40cad7a9011c019fb2f16ee011c5a6906cb25b8a4f87258c359314eb981f852e60ad445ecaeb793c7aa2 - languageName: node - linkType: hard - "axios@npm:^1.8.2": version: 1.8.3 resolution: "axios@npm:1.8.3" @@ -2630,6 +2619,17 @@ __metadata: languageName: node linkType: hard +"axios@npm:^1.8.3": + version: 1.8.4 + resolution: "axios@npm:1.8.4" + dependencies: + follow-redirects: "npm:^1.15.6" + form-data: "npm:^4.0.0" + proxy-from-env: "npm:^1.1.0" + checksum: 10c0/450993c2ba975ffccaf0d480b68839a3b2435a5469a71fa2fb0b8a55cdb2c2ae47e609360b9c1e2b2534b73dfd69e2733a1cf9f8215bee0bcd729b72f801b0ce + languageName: node + linkType: hard + "babel-jest@npm:^29.7.0": version: 29.7.0 resolution: "babel-jest@npm:29.7.0"