@slack/[email protected]

What's Changed

• chore(deps): upgrade path-to-regexp to partially address a security vulnerability (#2242) by @filmaj in #2251

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/[email protected]...@slack/[email protected]

@slack/[email protected]

What's Changed

Woops! We (coughfilmajcough) removed the EnvelopedEvent export in a recent change. We are adding it back in in this patch release. Please accept our sincere apologies for this temporary breaking change in bolt 3.21.2.

Changelog

• Link to JS release notes by @bpfoster in #2239
• chore(deps-dev): bump @types/node from 22.5.2 to 22.5.4 by @dependabot in #2241
• fix: re-export EnvelopedEvent by @filmaj in #2245

New Contributors

• @bpfoster made their first contribution in #2239

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/[email protected]...@slack/[email protected]

@slack/[email protected]

What's Changed

The main change in this patch release is creating an npm release for the change in #2223, where exported event payload types were moved from bolt-js to @slack/types. If you see errors compiling your TypeScript-based application that look like:

Module './types' has already exported a member

.. then upgrading to this release should address the issue (see #2233 and #2234 for issue details).

• fix: pass a no-op next function to the last listener middleware by @filmaj in #2214 (fixes #1457)
• fix: remove please-upgrade-node by @filmaj in #2221 (fixes #1274)
• Bump @slack/types and consume event payloads from it by @filmaj in #2223
• fix: tsconfig - skip checking dependency d.ts files by @filmaj in #2226

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/[email protected]...@slack/[email protected]

@slack/[email protected]

What's Changed

This patch release brings improvements to documentation and sureness in our CI, as well as security updates to certain @slack packages - see CVE-2024-39338 and [email protected] for more details!

Changes

📚 Documentation

• docs: document custom step usage - Thanks @WilliamBergamin! #2198

🔒 Security

• chore(deps): set a minimum @slack/web-api@^6.12.1 to address CVE-2024-39338 - Thanks @zimeg! #2207

🧰 Maintenance

• ci: add bolt-ts-custom-function-template to list of test samples - Thanks @filmaj! #2205

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/[email protected]...@slack/[email protected]

@slack/[email protected]

What's Changed

Bolt-JS now supports Custom Steps! That's right, your trusty Bolt app now let's you expose Custom Steps in Bolt, allowing you to provide steps for use in Workflow Builder.

You can now use the new function() method to register handlers for the function_executed event. Check out our API docs on the topic to get started.

Changelog

• Add support for remote functions by @misscoded in #2026
• chore(deps): bump axios to 1.7.4 to address CVE by @helzahalim in #2201
• chore: purge the "workflow step" terminology by @WilliamBergamin in #2199

New Contributors

• @helzahalim made their first contribution in #2201

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/[email protected]...@slack/[email protected]

@slack/[email protected]

What's Changed

• Add missing Events API payload types by @seratch in #2155
• docs: replacement steps from apps with custom functions by @lukegalbraithrussell in #2149
• Add an optional handler for invalid request signature error by @dophsquare in #2154
• Add missing properties in app_mention event payload by @seratch in #2160
• fix: add ts to PinnedMessageItem interface by @maxretries in #2164
• fix: add missing fields in ChannelCreatedEvent by @maxretries in #2166
• Fix broken link in "external select" section by @ornato-t in #2169
• Docs: adds Docusaurus site by @lukegalbraithrussell in #2174
• Docs: remove overzealous redirect by @lukegalbraithrussell in #2177
• docs - add manual redirects scripts by @lukegalbraithrussell in #2178
• Docs: Adds landing page and redirects by @lukegalbraithrussell in #2179
• Docs - fixes README image link by @lukegalbraithrussell in #2180
• Docs: remove superfluous files by @lukegalbraithrussell in #2181
• Fix Bold Text Rendering Issue by @suekou in #2183
• chore(deps-dev): bump @types/node from 22.1.0 to 20.14.2 by @dependabot in #2192
• chore(deps): bump axios to 1.7.3 to address CVE by @filmaj in #2194
• Publish @slack/[email protected] by @filmaj in #2195

New Contributors

• @dophsquare made their first contribution in #2154
• @maxretries made their first contribution in #2164
• @ornato-t made their first contribution in #2169
• @suekou made their first contribution in #2183

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/[email protected]...@slack/[email protected]

@slack/[email protected]

What's Changed

More customizations for the AwsLambdaReceiver have landed as well as a few touchups to typings and documented details!

With this release, the signature verification for AwsLambdaReceiver can now be turned off if that's something you're interested in! Perhaps you have your own stylish way of verifying these signatures. The following can be added to your receiver to unlock this:

const { App, AwsLambdaReceiver } = require('@slack/bolt');

const app = new App({
  ...
  receiver: new AwsLambdaReceiver({
    signatureVerification: false,
  }),
});

Read on and browse around for more details on all of the changes included!

🎁 Enhancements

• Add flag to AwsLambdaReceiver to enable/disable signature verification in #2107 - thanks @noah-guillory!

🐛 Fixes

• Add a type predicate for CodedError in #2110 - thanks @filmaj!
• ButtonAction value field not required in #2134 - thanks @srajiang!
• fix(types): return void promises from the express receiver middleware parser in #2141 - thanks @zimeg!

📚 Documentation

• docs: fixed duplicative header links in reference in #2120 - thanks @lukegalbraithrussell!
• docs: deprecate Steps from Apps docs in #2130 - thanks @filmaj!
• docs: add JSDoc to and list out all available builtin middleware functions in the docs in #2136 - thanks @filmaj!

🧰 Maintenance

• ci(test): perform unit testing against node version 22 in #2140 - thanks @zimeg!
• chore(release): tag version @slack/[email protected] in #2142 - thanks @zimeg!

📦 Dependencies

• Bump @types/node from 20.12.7 to 20.12.10 in #2111 - thanks @dependabot!
• Bump @types/node from 20.12.10 to 20.12.11 in #2114 - thanks @dependabot!
• Bump @types/node from 20.12.11 to 20.12.12 in #2117 - thanks @dependabot!
• Bump @types/node from 20.12.12 to 20.14.0 in #2125 - thanks @dependabot!
• Bump @types/node from 20.14.0 to 20.14.2 in #2132 - thanks @dependabot!

New Contributors

• @noah-guillory made their first contribution in #2107
• @lukegalbraithrussell made their first contribution in #2120

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/[email protected]...@slack/[email protected]

@slack/[email protected]

What's Changed

• Fix #2056 by adding files to app_mention event payload by @seratch in #2057
• Update acknowledging_requests.md by @technically-tracy in #2086

New Contributors

• @technically-tracy made their first contribution in #2086

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/[email protected]...@slack/[email protected]

@slack/[email protected]

What's Changed

• chore(3.17.1): Publish v3.17.1 by @rafael-fecha, including dependency updates to address an Axios security vulnerability in #2029

New Contributors

• @rafael-fecha made their first contribution in #2029

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/[email protected]...@slack/[email protected]

@slack/[email protected]

What's Changed

• Support for style.code properties on rich text elements (updates @slack/types to 2.11 and @slack/web-api to 6.11) by @filmaj in #2017

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/[email protected]...@slack/[email protected]