Feature: Slack Notification Provider

[Wikid82]

No description provided.

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

[github-actions]

✅ Supply Chain Verification Results

✅ PASSED

📦 SBOM Summary

• Components: 1483

🔍 Vulnerability Scan

Severity	Count
🔴 Critical	0
🟠 High	0
🟡 Medium	4
🟢 Low	2
Total	6

📎 Artifacts

• SBOM (CycloneDX JSON) and Grype results available in workflow artifacts

---

_{Generated by Supply Chain Verification workflow • View Details}

[codecov]

Codecov Report

❌ Patch coverage is 91.25000% with 7 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
backend/internal/services/notification_service.go	91.11%	2 Missing and 2 partials ⚠️
frontend/src/pages/Notifications.tsx	82.35%	2 Missing and 1 partial ⚠️

📢 Thoughts on this report? Let us know!

[Copilot]

Pull request overview

Adds a Slack notification provider (Incoming Webhooks) across backend + frontend, along with substantial supporting updates to tests, documentation, CI security workflows, and container/runtime tooling to support the new behavior and ongoing security posture.

Changes:

• Add Slack as a supported notification provider type (UI form fields, payload normalization, backend dispatch gating via feature flag, and handler validations).
• Expand test coverage (Playwright + frontend unit tests + Go handler/service tests) and update docs/CHANGELOG for Slack setup and security expectations.
• Update build/ops tooling (TypeScript/Vite upgrades, Semgrep hook behavior, Dockerfile and integration scripts moving curl→wget, CI workflow tweaks, dependency bumps, and Grype suppression maintenance).

Reviewed changes

Copilot reviewed 64 out of 67 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
tests/settings/telegram-notification-provider.spec.ts	Adjust GET interception to avoid response race in token-exposure test.
tests/settings/notifications.spec.ts	Update provider fixtures and ensure Slack appears in provider type select.
tests/settings/notifications-payload.spec.ts	Add Slack payload scenario + tighten preview/test request payload captures.
scripts/waf_integration.sh	Switch httpbin image and curl→wget readiness checks; increase wait loop.
scripts/rate_limit_integration.sh	Switch httpbin image and curl→wget readiness checks; increase wait loop.
scripts/pre-commit-hooks/semgrep-scan.sh	Expand Semgrep configs to cover multiple languages and Docker/Bash.
scripts/diagnose-test-env.sh	Replace curl-based health probe with wget.
scripts/crowdsec_startup_test.sh	Replace curl-based health probe with wget.
scripts/coraza_integration.sh	Switch httpbin image and curl→wget readiness checks.
scripts/cerberus_integration.sh	Switch httpbin image and curl→wget readiness checks; increase wait loop.
package.json	Move TS/Vite into dev deps and bump tooling versions.
lefthook.yml	Update hook behavior (notably Semgrep now in pre-commit).
go.work.sum	Refresh Go workspace sums (x/term).
frontend/vite.config.ts	Switch build config to Rolldown-specific options and disable code splitting.
frontend/tsconfig.node.json	Adjust TS config (explicit types: []).
frontend/tsconfig.json	Adjust TS libs/types configuration.
frontend/src/test/setup.ts	Use globalThis.ResizeObserver for test environment compatibility.
frontend/src/pages/tests/Notifications.test.tsx	Add Slack UI behavior tests and update supported types assertions.
frontend/src/pages/Notifications.tsx	Add Slack provider UI fields + payload normalization + template support inclusion.
frontend/src/locales/en/translation.json	Add Slack-specific i18n strings for labels/placeholders/help text.
frontend/src/components/tests/SecurityNotificationSettingsModal.test.tsx	Update supported provider type list assertions to include Slack.
frontend/src/components/tests/AccessListForm.test.tsx	Use globalThis.ResizeObserver in tests.
frontend/src/api/notifications.ts	Add Slack to supported provider types and token sanitization rules.
frontend/src/api/notifications.test.ts	Update unsupported provider type test cases (pushover).
frontend/src/api/tests/notifications.test.ts	Update unsupported provider type test cases (pushover).
frontend/package.json	Upgrade ESLint/Vite/TS/Vitest toolchain and add overrides for peer deps.
docs/reports/qa_report_ts6_upgrade_2026-03-11.md	Add QA report documenting TS6 upgrade verification steps/results.
docs/reports/qa_report.md	Replace prior report content with script-focused QA report for curl→wget changes.
docs/plans/archive/cve_remediation_spec.md	Add archived plan for CVE remediation via curl/binutils removal.
docs/issues/vite-8-beta-manual-testing.md	Add manual test plan for Vite 8 beta upgrade risks.
docs/issues/slack-manual-testing.md	Add manual test plan specifically for Slack provider behavior/security.
docs/getting-started.md	Document required secrets for stable sessions and encryption at rest.
docs/features/notifications.md	Document Slack provider setup, templates, and rate limits.
backend/internal/services/notification_service_json_test.go	Update Slack JSON dispatch test to use token as webhook URL.
backend/internal/services/notification_service_discord_only_test.go	Update discord-only constraints now that Slack is supported.
backend/internal/services/notification_service.go	Add Slack support (feature flag, dispatch, payload normalization, URL validator hook).
backend/internal/notifications/feature_flags.go	Add Slack feature flag key constant.
backend/internal/api/handlers/notification_provider_handler.go	Allow Slack create/update and add Slack-specific test error classification.
backend/internal/api/handlers/notification_provider_discord_only_test.go	Update expectations to allow Slack provider creation.
backend/internal/api/handlers/notification_provider_blocker3_test.go	Update expectations to allow Slack provider creation.
backend/internal/api/handlers/notification_coverage_test.go	Add coverage tests for Slack error classification + token rejection on test request.
backend/go.mod	Bump golang.org/x deps and goccy/go-json.
backend/go.sum	Sync sums for updated dependencies.
Dockerfile	Remove curl/binutils, use wget for GeoIP download/healthcheck, bump Caddy security plugin, improve CI build arg handling.
CHANGELOG.md	Add Slack notification provider entry and related details.
ARCHITECTURE.md	Update documented toolchain versions (TS/Vite/Vitest) and config filename.
.grype.yaml	Remove resolved zlib suppression and extend nebula suppression expiry.
.github/workflows/waf-integration.yml	Pass CI build arg through to Docker build.
.github/workflows/supply-chain-pr.yml	Make PR commenting resilient to permission errors; avoid failing job.
.github/workflows/security-pr.yml	Bump pinned action SHAs.
.github/workflows/rate-limit-integration.yml	Pass CI build arg through to Docker build.
.github/workflows/crowdsec-integration.yml	Pass CI build arg through to Docker build.
.github/workflows/cerberus-integration.yml	Pass CI build arg through to Docker build.
.github/workflows/auto-versioning.yml	Bump pinned action SHA.
.github/workflows/auto-changelog.yml	Bump release-drafter action SHA (major version).
.docker/docker-entrypoint.sh	Replace curl readiness probe with wget.
.docker/compose/docker-compose.yml	Replace curl healthcheck with wget.
.docker/compose/docker-compose.playwright-local.yml	Replace curl healthcheck with wget.
.docker/compose/docker-compose.playwright-ci.yml	Replace curl healthcheck with wget.
.docker/compose/docker-compose.local.yml	Replace curl healthcheck with wget.

---

You can also share your feedback on Copilot code review. Take the survey.

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[Copilot]

Pull request overview

Copilot reviewed 64 out of 67 changed files in this pull request and generated 2 comments.

---

You can also share your feedback on Copilot code review. Take the survey.

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[Copilot]

Pull request overview

Copilot reviewed 70 out of 73 changed files in this pull request and generated 2 comments.

---

You can also share your feedback on Copilot code review. Take the survey.