Skip to content

chore(lockfile): update @slack/bolt-lockfile #patch#462

Closed
public-glueops-renovatebot[bot] wants to merge 1 commit into
mainfrom
renovate/slack-bolt-4.7.x-lockfile
Closed

chore(lockfile): update @slack/bolt-lockfile #patch#462
public-glueops-renovatebot[bot] wants to merge 1 commit into
mainfrom
renovate/slack-bolt-4.7.x-lockfile

Conversation

@public-glueops-renovatebot

@public-glueops-renovatebot public-glueops-renovatebot Bot commented May 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@slack/bolt (source) 4.6.0 → 4.7.3 age confidence

Release Notes

slackapi/bolt-js (@​slack/bolt)

v4.7.3

Compare Source

Patch Changes
  • 341b60e: Reject empty signingSecret at initialization to prevent accidental HMAC signature forgery.

v4.7.2

Compare Source

Patch Changes
  • 4545150: Require exact ssl_check=1 value to bypass signature verification, preventing truthy but incorrect values from skipping authentication checks.

v4.7.1

Compare Source

Patch Changes
  • a18c359: fix: correct InvalidCustomPropertyError code and MemoryStore promise handling

v4.7.0

Compare Source

What's Changed

Bring magic to a conversation with sayStream for streaming messages and show loading status with setStatus. Now available for app.event and app.message listeners:

app.event('app_mention', async ({ sayStream, setStatus }) => {
  setStatus({
    status: 'Thinking...',
    loading_messages: ['Waking up...', 'Loading a witty response...'],
  });
  const stream = sayStream({ buffer_size: 100 });
  await stream.append({ markdown_text: 'Thinking... :thinking_face:\n\n' });
  await stream.append({ markdown_text: 'Here is my response!' });
  await stream.stop();
});

The respond function now accepts thread_ts to publish responses in a thread:

app.action('my_action', async ({ ack, respond }) => {
  await ack();
  await respond({ text: 'Replying in thread!', thread_ts: '1234567890.123456' });
});

Configure ping timeouts, reconnect behavior, and other Socket Mode settings directly through App options:

const app = new App({
  socketMode: true,
  appToken: process.env.SLACK_APP_TOKEN,
  token: process.env.SLACK_BOT_TOKEN,
  clientPingTimeout: 15000,
  serverPingTimeout: 60000,
  pingPongLoggingEnabled: true,
});
👾 Enhancements
🐛 Fixes
📚 Documentation
🧰 Maintenance
🎁 Dependencies
Core
CI
Dev
Examples

👋 New Contributors 🎉

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@4.6.0...@​slack/bolt@4.7.0
Milestone: https://github.com/slackapi/bolt-js/milestone/61
Package: https://www.npmjs.com/package/@​slack/bolt/v/4.7.0

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@public-glueops-renovatebot

public-glueops-renovatebot Bot commented May 7, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@public-glueops-renovatebot public-glueops-renovatebot Bot force-pushed the renovate/slack-bolt-4.7.x-lockfile branch from 2c3ce2e to 75a70e4 Compare May 10, 2026 02:44
@public-glueops-renovatebot public-glueops-renovatebot Bot force-pushed the renovate/slack-bolt-4.7.x-lockfile branch from 75a70e4 to 41b8d73 Compare May 22, 2026 18:56
@public-glueops-renovatebot public-glueops-renovatebot Bot force-pushed the renovate/slack-bolt-4.7.x-lockfile branch 4 times, most recently from a4466d5 to 1a6ffa9 Compare June 6, 2026 20:10
@public-glueops-renovatebot public-glueops-renovatebot Bot force-pushed the renovate/slack-bolt-4.7.x-lockfile branch 2 times, most recently from e7d31b4 to 9ce6546 Compare June 13, 2026 22:41
@public-glueops-renovatebot public-glueops-renovatebot Bot force-pushed the renovate/slack-bolt-4.7.x-lockfile branch from 9ce6546 to 70bc28c Compare June 26, 2026 22:17
@public-glueops-renovatebot public-glueops-renovatebot Bot changed the title chore(lockfile): update @slack/bolt-lockfile #patch chore(lockfile): update @slack/bolt-lockfile #patch - autoclosed Jun 29, 2026
@public-glueops-renovatebot public-glueops-renovatebot Bot deleted the renovate/slack-bolt-4.7.x-lockfile branch June 29, 2026 11:25
@public-glueops-renovatebot public-glueops-renovatebot Bot changed the title chore(lockfile): update @slack/bolt-lockfile #patch - autoclosed chore(lockfile): update @slack/bolt-lockfile #patch Jun 29, 2026
@public-glueops-renovatebot public-glueops-renovatebot Bot force-pushed the renovate/slack-bolt-4.7.x-lockfile branch 2 times, most recently from 70bc28c to b0ceea8 Compare June 29, 2026 12:51
@venkatamutyala venkatamutyala mentioned this pull request Jun 29, 2026
Merged
@venkatamutyala

venkatamutyala commented Jun 29, 2026

Copy link
Copy Markdown
Contributor

Superseded by #478 (consolidates the open dependency updates).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

auto-update include-in-release-notes patch

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@venkatamutyala