Skip to content

Bump @slack/socket-mode from 1.3.4 to 2.0.3 #123

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: trunk
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 16, 2024

Bumps @slack/socket-mode from 1.3.4 to 2.0.3.

Release notes

Sourced from @​slack/socket-mode's releases.

@​slack/socket-mode@​2.0.3

What's Changed

Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/@​slack/socket-mode@​2.0.2...@​slack/socket-mode@​2.0.3

@​slack/socket-mode@​2.0.3-rc.1

What's Changed

This pre-release contains the fix put together in #2099 for issue #2094. Recently, Slack's real-time backend server serving socket-mode connections rolled out a configuration change that unfortunately resulted in many apps seeing error responses (HTTP 409) while establishing a WebSocket connection. This scenario uncovered a catastrophic bug in this socket-mode library: most Bolt JS-based apps would have socket mode connection retries turned on, and this in combination with connection handshake error scenarios caused the library to enter a spiral where it would double the number of WS connections on each retry attempt.

This pre-release provides access to a proposed fix for this issue. We welcome all feedback from the community!

@​slack/socket-mode@​2.0.2

What's Changed

We fixed an issue where the SocketModeClient would get confused with message events, as there are two concepts of such an event: a web-socket message, as well as a Slack event message. We've clarified this confusion, which may have led to some unexpected "Unexpected character parsing JSON" style error messages.

Changelog

9d2fa584 socket-mode(fix): do not handle message events twice (#2059)

@​slack/socket-mode@​2.0.1

What's Changed

This patch release bumps the minimum version of axios to 1.7.4 to address a CVE - see Axios 1.7.4 release notes for more information.

Changelog

Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/@​slack/socket-mode@​2.0.0...@​slack/socket-mode@​2.0.1

@​slack/socket-mode@​2.0.0

What's Changed

New major version! We have dropped the ancient, finite-state-machine-based implementation and ported the rock solid python-slack-sdk socket-mode implementation to node.

We also removed a couple of events and properties that are no longer relevant in the new implementation. Check out our socket mode 1.x -> 2.0 migration guide to get all the details and ease your upgrading path.

Full Changelog

476e6a9e socket-mode: Rewrite to Python(ish) Implementation (#1781) 3ebb6cef socket-mode: do not throw exception when calling disconnect() and already disconnected; do not raise slack_event in case of type:disconnect messages (#1762) 6ab1e68b socket-mode: add more debug logging to low level websocket event handlers (#1757) 46b500db socket-mode: fix bug when apps.connections.open returns an error and won't retry (#1735)

... (truncated)

Commits
  • 3e5e4c6 Release: @​slack/socket-mode@​2.0.3, @​slack/oauth@​3.0.2, @​slack/rtm-api@​7.0.2 (...
  • 560b5a1 Update webhook and web-api dependencies in oauth, rtm-api, and socket-mode (#...
  • c389a75 socket-mode: Handling WS errors during handshake (#2099)
  • 1f8e880 Release: @​slack/webhook@​7.0.4, @​slack/web-api@​7.8.0 (#2118)
  • 96d846a ci: check for changes to lints separate from writing changes (#2117)
  • 4cbe2cf chore(deps): bump minimum axios version for web-api and webhook to avoid secu...
  • 6750da0 chore(deps-dev): bump mocha from 10.8.2 to 11.0.1 in /packages/socket-mode in...
  • 83fbba4 chore(deps-dev): bump mocha from 10.8.2 to 11.0.1 in /packages/oauth in the d...
  • 07103cf chore(deps-dev): bump mocha from 10.8.2 to 11.0.1 in /packages/cli-test in th...
  • 15380a0 chore(deps-dev): bump mocha from 10.8.2 to 11.0.1 in /packages/logger in the ...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by slackhq, a new releaser for @​slack/socket-mode since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@slack/socket-mode](https://github.com/slackapi/node-slack-sdk) from 1.3.4 to 2.0.3.
- [Release notes](https://github.com/slackapi/node-slack-sdk/releases)
- [Commits](https://github.com/slackapi/node-slack-sdk/compare/@slack/[email protected]...@slack/[email protected])

---
updated-dependencies:
- dependency-name: "@slack/socket-mode"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants