Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update slack web api version #37484

Merged
merged 1 commit into from
Jan 9, 2024
Merged

Update slack web api version #37484

merged 1 commit into from
Jan 9, 2024

Conversation

iethree
Copy link
Contributor

@iethree iethree commented Jan 9, 2024

Description

Updates slack web api version which pulls in update versions of axios and follow-redirects (the package with the vulnerability)

There wasn't actually a vulnerability to us in this because we don't use Axios or the slack pacakage in the application, just in our release tooling, but this will make all the code scanning tools happy 馃榿.

Many thanks to Slack for being so quick responding to my PR: slackapi/node-slack-sdk#1716

@iethree iethree self-assigned this Jan 9, 2024
@iethree iethree requested a review from a team January 9, 2024 23:20
@metabase-bot metabase-bot bot added the .Team/AdminWebapp Admin and Webapp team label Jan 9, 2024
@iethree iethree added no-backport Do not backport this PR to any branch backport Automatically create PR on current release branch on merge and removed no-backport Do not backport this PR to any branch labels Jan 9, 2024
@iethree iethree merged commit 30fff3b into master Jan 9, 2024
113 of 117 checks passed
@iethree iethree deleted the update-slack-package-version branch January 9, 2024 23:38
Copy link

github-actions bot commented Jan 9, 2024

@iethree Did you forget to add a milestone to the issue for this PR? When and where should I add a milestone?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport Automatically create PR on current release branch on merge .Team/AdminWebapp Admin and Webapp team
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants