From 11188d255c22f5406a93ead943ac78b6b131cbfc Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 5 Sep 2024 19:34:30 +0000 Subject: [PATCH] fix(deps): update dependency @slack/web-api to v6.12.1 (#8103) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [@slack/web-api](https://slack.dev/node-slack-sdk/web-api) ([source](https://redirect.github.com/slackapi/node-slack-sdk)) | [`6.12.0` -> `6.12.1`](https://renovatebot.com/diffs/npm/@slack%2fweb-api/6.12.0/6.12.1) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@slack%2fweb-api/6.12.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@slack%2fweb-api/6.12.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@slack%2fweb-api/6.12.0/6.12.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@slack%2fweb-api/6.12.0/6.12.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes
slackapi/node-slack-sdk (@​slack/web-api) ### [`v6.12.1`](https://redirect.github.com/slackapi/node-slack-sdk/releases/tag/%40slack/web-api%406.12.1) [Compare Source](https://redirect.github.com/slackapi/node-slack-sdk/compare/@slack/web-api@6.12.0...@slack/web-api@6.12.1) #### What's Changed This patch release bumps the minimum version of axios to 1.7.4 to address a CVE - see [Axios 1.7.4 release notes](https://redirect.github.com/axios/axios/releases/tag/v1.7.4) for more information. ##### Changelog - web-api@6(chore): bump axios to 1.7.4 to address CVE-2024-39338 - Thanks [@​zimeg](https://redirect.github.com/zimeg)! in [https://github.com/slackapi/node-slack-sdk/pull/1880](https://redirect.github.com/slackapi/node-slack-sdk/pull/1880) **Full Changelog**: https://github.com/slackapi/node-slack-sdk/compare/[@​slack/web-api](https://redirect.github.com/slack/web-api)[@​6](https://redirect.github.com/6).12.0...[@​slack/webhook](https://redirect.github.com/slack/webhook)[@​6](https://redirect.github.com/6).12.1
--- ### Configuration 📅 **Schedule**: Branch creation - "after 7pm every weekday,before 5am every weekday" in timezone Europe/Madrid, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/Unleash/unleash). Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- yarn.lock | 21 ++++++++++++++++----- 1 file changed, 16 insertions(+), 5 deletions(-) diff --git a/yarn.lock b/yarn.lock index 5af6e8983651..b700697142fb 100644 --- a/yarn.lock +++ b/yarn.lock @@ -1679,21 +1679,21 @@ __metadata: linkType: hard "@slack/web-api@npm:^6.10.0": - version: 6.12.0 - resolution: "@slack/web-api@npm:6.12.0" + version: 6.12.1 + resolution: "@slack/web-api@npm:6.12.1" dependencies: "@slack/logger": "npm:^3.0.0" "@slack/types": "npm:^2.11.0" "@types/is-stream": "npm:^1.1.0" "@types/node": "npm:>=12.0.0" - axios: "npm:^1.6.5" + axios: "npm:^1.7.4" eventemitter3: "npm:^3.1.0" form-data: "npm:^2.5.0" is-electron: "npm:2.2.2" is-stream: "npm:^1.1.0" p-queue: "npm:^6.6.1" p-retry: "npm:^4.0.0" - checksum: 10c0/609f57c5f5a75edb9377c47b0887d34cd68ea5164e0bcc4dd1a4e8785d48a788840c71bee6333dd224c3ff044c9f6e334e40a21c3f81aed719ecc3c02003639c + checksum: 10c0/43301aa33cd2cb062b3e725ba1af836521e747d43bb713280e3b00b645b7a9d04bfa997836e1a40170db2b4356e627a22c6dd84c897df8712d87bd515047160a languageName: node linkType: hard @@ -2664,7 +2664,7 @@ __metadata: languageName: node linkType: hard -"axios@npm:^1.6.1, axios@npm:^1.6.5": +"axios@npm:^1.6.1": version: 1.7.5 resolution: "axios@npm:1.7.5" dependencies: @@ -2675,6 +2675,17 @@ __metadata: languageName: node linkType: hard +"axios@npm:^1.7.4": + version: 1.7.7 + resolution: "axios@npm:1.7.7" + dependencies: + follow-redirects: "npm:^1.15.6" + form-data: "npm:^4.0.0" + proxy-from-env: "npm:^1.1.0" + checksum: 10c0/4499efc89e86b0b49ffddc018798de05fab26e3bf57913818266be73279a6418c3ce8f9e934c7d2d707ab8c095e837fc6c90608fb7715b94d357720b5f568af7 + languageName: node + linkType: hard + "babel-jest@npm:^29.7.0": version: 29.7.0 resolution: "babel-jest@npm:29.7.0"