Skip to content

chore(deps): update dependency @slack/bolt to v4.7.3#44

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/slack-bolt-4.x-lockfile
Open

chore(deps): update dependency @slack/bolt to v4.7.3#44
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/slack-bolt-4.x-lockfile

Conversation

@renovate

@renovate renovate Bot commented Nov 20, 2025 •
edited by RecapTimeSquad
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@slack/bolt (source) 4.4.0 → 4.7.3 age confidence

Release Notes

slackapi/bolt-js (@​slack/bolt)

v4.7.3

Compare Source

Patch Changes
  • 341b60e: Reject empty signingSecret at initialization to prevent accidental HMAC signature forgery.

v4.7.2

Compare Source

Patch Changes
  • 4545150: Require exact ssl_check=1 value to bypass signature verification, preventing truthy but incorrect values from skipping authentication checks.

v4.7.1

Compare Source

Patch Changes
  • a18c359: fix: correct InvalidCustomPropertyError code and MemoryStore promise handling

v4.7.0

Compare Source

What's Changed

Bring magic to a conversation with sayStream for streaming messages and show loading status with setStatus. Now available for app.event and app.message listeners:

app.event('app_mention', async ({ sayStream, setStatus }) => {
  setStatus({
    status: 'Thinking...',
    loading_messages: ['Waking up...', 'Loading a witty response...'],
  });
  const stream = sayStream({ buffer_size: 100 });
  await stream.append({ markdown_text: 'Thinking... :thinking_face:\n\n' });
  await stream.append({ markdown_text: 'Here is my response!' });
  await stream.stop();
});

The respond function now accepts thread_ts to publish responses in a thread:

app.action('my_action', async ({ ack, respond }) => {
  await ack();
  await respond({ text: 'Replying in thread!', thread_ts: '1234567890.123456' });
});

Configure ping timeouts, reconnect behavior, and other Socket Mode settings directly through App options:

const app = new App({
  socketMode: true,
  appToken: process.env.SLACK_APP_TOKEN,
  token: process.env.SLACK_BOT_TOKEN,
  clientPingTimeout: 15000,
  serverPingTimeout: 60000,
  pingPongLoggingEnabled: true,
});
👾 Enhancements
🐛 Fixes
📚 Documentation
🧰 Maintenance
🎁 Dependencies
Core
CI
Dev
Examples

👋 New Contributors 🎉

Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@4.6.0...@​slack/bolt@4.7.0
Milestone: https://github.com/slackapi/bolt-js/milestone/61
Package: https://www.npmjs.com/package/@​slack/bolt/v/4.7.0

v4.6.0

Compare Source

📚 Changelog

What's Changed

👾 Enhancements
🐛 Bug fixes
📚 Documentation
🤖 Dependencies
🧰 Maintenance

Milestone: https://github.com/slackapi/bolt-js/milestone/60?closed=1
Full Changelog: https://github.com/slackapi/bolt-js/compare/@slack/bolt@4.5.0...@​slack/bolt@4.6.0
Package: https://www.npmjs.com/package/@​slack/bolt/v/4.6.0

v4.5.0

Compare Source

AI-Enabled Features: Loading States, Text Streaming, and Feedback Buttons

🍿 Preview
2025-10-06-loading-state-text-streaming-feedback.mov
📚 Changelog
⚡ Getting Started

Try the AI Agent Sample app to explore the AI-enabled features and existing Assistant helper:

# Create a new AI Agent app
$ slack create slack-ai-agent-app --template slack-samples/bolt-js-assistant-template
$ cd slack-ai-agent-app/

# Add your OPENAI_API_KEY
$ export OPENAI_API_KEY=sk-proj-ahM...

# Run the local dev server
$ slack run

After the app starts, send a message to the "slack-ai-agent-app" bot for a unique response.

⌛ Loading States

Loading states allows you to not only set the status (e.g. "My app is typing...") but also sprinkle some personality by cycling through a collection of loading messages:

Web Client SDK:
app.event('message', async ({ client, context, event, logger }) => {
    // ...
    await client.assistant.threads.setStatus({
        channel_id: channelId,
        thread_ts: threadTs,
        status: 'thinking...',
        loading_messages: [
            'Teaching the hamsters to type faster…',
            'Untangling the internet cables…',
            'Consulting the office goldfish…',
            'Polishing up the response just for you…',
            'Convincing the AI to stop overthinking…',
        ],
    });

    // Start a new message stream
});
Assistant Class:
const assistant = new Assistant({
    threadStarted: assistantThreadStarted,
    threadContextChanged: assistantThreadContextChanged,
    userMessage: async ({ client, context, logger, message, getThreadContext, say, setTitle, setStatus }) => {
        await setStatus({
            status: 'thinking...',
            loading_messages: [
                'Teaching the hamsters to type faster…',
                'Untangling the internet cables…',
                'Consulting the office goldfish…',
                'Polishing up the response just for you…',
                'Convincing the AI to stop overthinking…',
            ],
        });
    },
});
🔮 Text Streaming Helper

The client.chatStream() helper utility can be used to streamline calling the 3 text streaming methods:

app.event('message', async ({ client, context, event, logger }) => {
    // ...

    // Start a new message stream
    const streamer = client.chatStream({
        channel: channelId,
        recipient_team_id: teamId,
        recipient_user_id: userId,
        thread_ts: threadTs,
    });

    // Loop over OpenAI response stream
    // https://platform.openai.com/docs/api-reference/responses/create
    for await (const chunk of llmResponse) {
        if (chunk.type === 'response.output_text.delta') {
            await streamer.append({
                markdown_text: chunk.delta,
            });
        }
    }

    // Stop the stream and attach feedback buttons
    await streamer.stop({ blocks: [feedbackBlock] });
});
🔠 Text Streaming Methods

Alternative to the Text Streaming Helper is to call the individual methods.

1) client.chat.startStream

First, start a chat text stream to stream a response to any message:

app.event('message', async ({ client, context, event, logger }) => {
    // ...
    const streamResponse = await client.chat.startStream({
        channel: channelId,
        recipient_team_id: teamId,
        recipient_user_id: userId,
        thread_ts: threadTs,
    });

    const streamTs = streamResponse.ts
2) client.chat.appendStream

After starting a chat text stream, you can then append text to it in chunks (often from your favourite LLM SDK) to convey a streaming effect:

for await (const chunk of llmResponse) {
    if (chunk.type === 'response.output_text.delta') {
        await client.chat.appendSteam({
            channel: channelId,
            markdown_text: chunk.delta,
            ts: streamTs,
        });
    }
}
3) client.chat.stopStream

Lastly, you can stop the chat text stream to finalize your message:

await client.chat.stopStream({
    blocks: [feedbackBlock],
    channel: channelId,
    ts: streamTs,
});
👍🏻 Feedback Buttons

Add feedback buttons to the bottom of a message, after stopping a text stream, to gather user feedback:

const feedbackBlock = {
    type: 'context_actions',
    elements: [{
        type: 'feedback_buttons',
        action_id: 'feedback',
        positive_button: {
            text: { type: 'plain_text', text: 'Good Response' },
            accessibility_label: 'Submit positive feedback on this response',
            value: 'good-feedback',
        },
        negative_button: {
            text: { type: 'plain_text', text: 'Bad Response' },
            accessibility_label: 'Submit negative feedback on this response',
            value: 'bad-feedback',
        },
    }],
};

// Using the Text Streaming Helper
await streamer.stop({ blocks: [feedbackBlock] });
// Or, using the Text Streaming Method
await client.chat.stopStream({
    blocks: [feedbackBlock],
    channel: channelId,
    ts: streamTs,
});

What's Changed

👾 Enhancements
  • feat: add ai-enabled features text streaming methods, feedback blocks, and loading state in #​2674 - Thanks @​zimeg!
🐛 Bug fixes
  • Fix: allows Assistant say function to properly pass metadata in #​2569 - Thanks @​jamessimone!
  • refactor: check payload type before extracting assistant thread info in #​2603 - Thanks @​zimeg!
  • fix: better ES module support for App class in #​2632 - Thanks @​malewis5!
  • fix(typescript): accept empty list of suggested prompts for the assistant class in #​2650 - Thanks @​zimeg!
📚 Documentation
🤖 Dependencies

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

This change is Reviewable

@coderabbitai

coderabbitai Bot commented Nov 20, 2025 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

  • 🔍 Trigger a full review

Comment @coderabbitai help to get the list of available commands and usage tips.

@socket-security

socket-security Bot commented Nov 20, 2025 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​slack/​bolt@​4.4.0 ⏵ 4.7.399 +210010096100

View full report

@renovate
renovate Bot force-pushed the renovate/slack-bolt-4.x-lockfile branch from fd2b181 to 3bd76f8 Compare December 3, 2025 18:44
@renovate
renovate Bot force-pushed the renovate/slack-bolt-4.x-lockfile branch 2 times, most recently from 5d1c4e8 to a430fb1 Compare January 23, 2026 16:33
@renovate
renovate Bot force-pushed the renovate/slack-bolt-4.x-lockfile branch from a430fb1 to 952e8c3 Compare February 2, 2026 21:02
@renovate
renovate Bot force-pushed the renovate/slack-bolt-4.x-lockfile branch 2 times, most recently from d7de90a to 5d2a668 Compare February 17, 2026 19:03
@renovate
renovate Bot force-pushed the renovate/slack-bolt-4.x-lockfile branch from 5d2a668 to 72d5f5f Compare March 5, 2026 20:54
@renovate
renovate Bot force-pushed the renovate/slack-bolt-4.x-lockfile branch from 72d5f5f to ce6b692 Compare March 13, 2026 10:32
@renovate
renovate Bot force-pushed the renovate/slack-bolt-4.x-lockfile branch 2 times, most recently from 5a825db to 708a3f3 Compare April 7, 2026 01:28
@renovate renovate Bot changed the title chore(deps): update dependency @slack/bolt to v4.6.0 chore(deps): update dependency @slack/bolt to v4.7.0 Apr 7, 2026
@renovate
renovate Bot force-pushed the renovate/slack-bolt-4.x-lockfile branch from 708a3f3 to 88d0b11 Compare April 8, 2026 18:07
@renovate
renovate Bot force-pushed the renovate/slack-bolt-4.x-lockfile branch from 88d0b11 to c4f89e1 Compare April 22, 2026 22:56
@renovate renovate Bot changed the title chore(deps): update dependency @slack/bolt to v4.7.0 chore(deps): update dependency @slack/bolt to v4.7.1 Apr 22, 2026
@renovate
renovate Bot force-pushed the renovate/slack-bolt-4.x-lockfile branch from c4f89e1 to 2dae88a Compare April 30, 2026 22:34
@renovate renovate Bot changed the title chore(deps): update dependency @slack/bolt to v4.7.1 chore(deps): update dependency @slack/bolt to v4.7.2 Apr 30, 2026
@renovate
renovate Bot force-pushed the renovate/slack-bolt-4.x-lockfile branch 2 times, most recently from 87d73b4 to 22cd980 Compare May 18, 2026 10:28
@renovate
renovate Bot force-pushed the renovate/slack-bolt-4.x-lockfile branch from 22cd980 to ab3d533 Compare May 28, 2026 01:09
@renovate renovate Bot changed the title chore(deps): update dependency @slack/bolt to v4.7.2 chore(deps): update dependency @slack/bolt to v4.7.3 May 28, 2026
@renovate
renovate Bot force-pushed the renovate/slack-bolt-4.x-lockfile branch from ab3d533 to 0b90fa9 Compare June 11, 2026 13:12
@renovate
renovate Bot force-pushed the renovate/slack-bolt-4.x-lockfile branch from 0b90fa9 to ff4f03d Compare July 12, 2026 18:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants