Skip to content

Bump @slack/bolt from 2.3.0 to 3.12.0#290

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/slack/bolt-3.12.0
Closed

Bump @slack/bolt from 2.3.0 to 3.12.0#290
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/slack/bolt-3.12.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Jul 15, 2022

Bumps @slack/bolt from 2.3.0 to 3.12.0.

Release notes

Sourced from @​slack/bolt's releases.

@​slack/bolt@​3.12.0

Here is the list of all the issues / pull requests included in the release: https://github.com/slackapi/bolt-js/milestone/21?closed=1

@​slack/bolt@​3.11.3

Here is the list of all the issues / pull requests included in the release: https://github.com/slackapi/bolt-js/milestone/26?closed=1

@​slack/bolt@​3.11.2

Here is the list of all the issues / pull requests included in the release: https://github.com/slackapi/bolt-js/milestone/25?closed=1

@​slack/bolt@​3.11.1

  • New features / improvements:
    • Adding support for new user-change events with types (via #1448) - thanks @​filmaj
    • Slack prints failed with the error "operation_timeout" when slack command runs and finishes successfully in AWS Lambda (via #1435 #1452) - thanks @​nicolls1
    • Upgrade socket-mode dependency to the latest minor (via #1441 ) - thanks @​seratch !

Here is the list of all the issues / pull requests included in the release: https://github.com/slackapi/bolt-js/milestone/24?closed=1

@​slack/bolt@​3.11.0

📣 Important Announcement

Since this version, the default behavior of the OAuth flow has been changed for better security. The changes are:

  • InstallProvider (The underlying OAuth module) verifies not only the query string but also its corresponding browser cookie data
  • The default StateStore (ClearStateStore) makes sure that the state parameter is not too old (the default lifetime is 10 minutes)

Refer to #1335 #1391 slackapi/node-slack-sdk#1435 slackapi/node-slack-sdk#1436 for the context. If you encounter behavior changes described at #1412, consider either changing your app code or setting installerOptions.legacyStateVerification: true for now.

🎁 🐛 New features / improvements:

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by filmaj, a new releaser for @​slack/bolt since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@slack/bolt](https://github.com/slackapi/bolt) from 2.3.0 to 3.12.0.
- [Release notes](https://github.com/slackapi/bolt/releases)
- [Changelog](https://github.com/slackapi/bolt-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/slackapi/bolt/compare/@slack/bolt@2.3.0...@slack/bolt@3.12.0)

---
updated-dependencies:
- dependency-name: "@slack/bolt"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jul 15, 2022
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Jul 26, 2022

Superseded by #299.

@dependabot dependabot bot closed this Jul 26, 2022
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/slack/bolt-3.12.0 branch July 26, 2022 10:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants