Skip to content

chore(deps): update @slack/bolt requirement from ^4.7.2 to ^4.7.3 in /examples/deploy-aws-lambda#2953

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/examples/deploy-aws-lambda/slack/bolt-tw-4.7.3
Jun 2, 2026
Merged

chore(deps): update @slack/bolt requirement from ^4.7.2 to ^4.7.3 in /examples/deploy-aws-lambda#2953
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/examples/deploy-aws-lambda/slack/bolt-tw-4.7.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 29, 2026

Updates the requirements on @slack/bolt to permit the latest version.

Changelog

Sourced from @​slack/bolt's changelog.

4.7.3

Patch Changes

  • 341b60e: Reject empty signingSecret at initialization to prevent accidental HMAC signature forgery.

4.7.2

Patch Changes

  • 4545150: Require exact ssl_check=1 value to bypass signature verification, preventing truthy but incorrect values from skipping authentication checks.

4.7.1

Patch Changes

  • a18c359: fix: correct InvalidCustomPropertyError code and MemoryStore promise handling
Commits
  • 97bfd71 chore: release (#2947)
  • 341b60e fix: reject empty signingSecret to prevent involuntary signature bypass (#2946)
  • 6779cf7 chore(deps): bump qs from 6.14.2 to 6.15.2 in /examples/custom-receiver (#2943)
  • 834e3e0 chore(deps): bump ws from 8.20.0 to 8.20.1 in /examples/custom-receiver (#2942)
  • 1ed7854 chore(deps): bump koa and @​types/koa in /examples/custom-receiver (#2941)
  • ba4deb6 chore(deps-dev): update serverless requirement from ^4.35.1 to ^4.36.1 in /ex...
  • 8a2e936 chore(deps-dev): update serverless-offline requirement from ^14.5.0 to ^14.6....
  • 2cb9482 chore(deps-dev): bump @​types/node from 24.12.3 to 24.12.4 in /examples/custom...
  • 752f2e2 chore(deps): bump @​slack/web-api from 7.15.2 to 7.16.0 (#2933)
  • be24571 chore: update biome configurations and applied settings (#2931)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added area:examples issues related to example or sample code dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 29, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 29, 2026 18:58
@dependabot dependabot Bot added area:examples issues related to example or sample code dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 29, 2026
@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented May 29, 2026

⚠️ No Changeset found

Latest commit: 3fdc302

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions github-actions Bot enabled auto-merge (squash) May 29, 2026 18:58
@codecov
Copy link
Copy Markdown

codecov Bot commented May 29, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.47%. Comparing base (8241f6d) to head (3fdc302).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #2953   +/-   ##
=======================================
  Coverage   94.47%   94.47%           
=======================================
  Files          45       45           
  Lines        7885     7885           
  Branches      708      708           
=======================================
  Hits         7449     7449           
  Misses        428      428           
  Partials        8        8           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/examples/deploy-aws-lambda/slack/bolt-tw-4.7.3 branch from 0bd7ba3 to 935a987 Compare May 29, 2026 19:10
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/examples/deploy-aws-lambda/slack/bolt-tw-4.7.3 branch from 935a987 to a71d57a Compare June 1, 2026 23:47
@zimeg
Copy link
Copy Markdown
Member

zimeg commented Jun 2, 2026

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/examples/deploy-aws-lambda/slack/bolt-tw-4.7.3 branch from a71d57a to 2f27e15 Compare June 2, 2026 03:56
@zimeg
Copy link
Copy Markdown
Member

zimeg commented Jun 2, 2026

@dependabot rebase

Updates the requirements on [@slack/bolt](https://github.com/slackapi/bolt-js) to permit the latest version.
- [Release notes](https://github.com/slackapi/bolt-js/releases)
- [Changelog](https://github.com/slackapi/bolt-js/blob/main/CHANGELOG.md)
- [Commits](v4.7.2...v4.7.3)

---
updated-dependencies:
- dependency-name: "@slack/bolt"
  dependency-version: 4.7.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/examples/deploy-aws-lambda/slack/bolt-tw-4.7.3 branch from 2f27e15 to 3fdc302 Compare June 2, 2026 04:04
@github-actions github-actions Bot merged commit 7588131 into main Jun 2, 2026
30 checks passed
@github-actions github-actions Bot deleted the dependabot/npm_and_yarn/examples/deploy-aws-lambda/slack/bolt-tw-4.7.3 branch June 2, 2026 04:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:examples issues related to example or sample code dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant