[Snyk] Upgrade @slack/bolt from 3.19.0 to 3.21.0

[Jrc356]

Snyk has created this PR to upgrade @slack/bolt from 3.19.0 to 3.21.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.

• The recommended version was released on 22 days ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Server-side Request Forgery (SSRF) SNYK-JS-AXIOS-7361793	634	Proof of Concept
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	634	Proof of Concept

Release notes

Package name: @slack/bolt

• 3.21.0 - 2024-08-14
  

  What's Changed

  Bolt-JS now supports Custom Steps! That's right, your trusty Bolt app now let's you expose Custom Steps in Bolt, allowing you to provide steps for use in Workflow Builder.

  You can now use the new function() method to register handlers for the function_executed event. Check out our API docs on the topic to get started.

  Changelog

  • Add support for remote functions by @ misscoded in #2026
  • chore(deps): bump axios to 1.7.4 to address CVE by @ helzahalim in #2201
  • chore: purge the "workflow step" terminology by @ WilliamBergamin in #2199

  New Contributors

  • @ helzahalim made their first contribution in #2201

  Full Changelog: https://github.com/slackapi/bolt-js/compare/@ slack/[email protected]...@ slack/[email protected]

• 3.20.0 - 2024-08-12
  

  What's Changed

  • Add missing Events API payload types by @ seratch in #2155
  • docs: replacement steps from apps with custom functions by @ lukegalbraithrussell in #2149
  • Add an optional handler for invalid request signature error by @ dophsquare in #2154
  • Add missing properties in app_mention event payload by @ seratch in #2160
  • fix: add ts to PinnedMessageItem interface by @ maxretries in #2164
  • fix: add missing fields in ChannelCreatedEvent by @ maxretries in #2166
  • Fix broken link in "external select" section by @ ornato-t in #2169
  • Docs: adds Docusaurus site by @ lukegalbraithrussell in #2174
  • Docs: remove overzealous redirect by @ lukegalbraithrussell in #2177
  • docs - add manual redirects scripts by @ lukegalbraithrussell in #2178
  • Docs: Adds landing page and redirects by @ lukegalbraithrussell in #2179
  • Docs - fixes README image link by @ lukegalbraithrussell in #2180
  • Docs: remove superfluous files by @ lukegalbraithrussell in #2181
  • Fix Bold Text Rendering Issue by @ suekou in #2183
  • chore(deps-dev): bump @ types/node from 22.1.0 to 20.14.2 by @ dependabot in #2192
  • chore(deps): bump axios to 1.7.3 to address CVE by @ filmaj in #2194
  • Publish @ slack/[email protected] by @ filmaj in #2195

  New Contributors

  • @ dophsquare made their first contribution in #2154
  • @ maxretries made their first contribution in #2164
  • @ ornato-t made their first contribution in #2169
  • @ suekou made their first contribution in #2183

  Full Changelog: https://github.com/slackapi/bolt-js/compare/@ slack/[email protected]...@ slack/[email protected]

• 3.19.0 - 2024-06-19
  

  What's Changed

  More customizations for the AwsLambdaReceiver have landed as well as a few touchups to typings and documented details!

  With this release, the signature verification for AwsLambdaReceiver can now be turned off if that's something you're interested in! Perhaps you have your own stylish way of verifying these signatures. The following can be added to your receiver to unlock this:

  const { App, AwsLambdaReceiver } = require('@ slack/bolt');

  const app = new App({
  ...
  receiver: new AwsLambdaReceiver({
  signatureVerification: false,
  }),
  });

  Read on and browse around for more details on all of the changes included!

  🎁 Enhancements

  • Add flag to AwsLambdaReceiver to enable/disable signature verification in #2107 - thanks @ noah-guillory!

  🐛 Fixes

  • Add a type predicate for CodedError in #2110 - thanks @ filmaj!
  • ButtonAction value field not required in #2134 - thanks @ srajiang!
  • fix(types): return void promises from the express receiver middleware parser in #2141 - thanks @ zimeg!

  📚 Documentation

  • docs: fixed duplicative header links in reference in #2120 - thanks @ lukegalbraithrussell!
  • docs: deprecate Steps from Apps docs in #2130 - thanks @ filmaj!
  • docs: add JSDoc to and list out all available builtin middleware functions in the docs in #2136 - thanks @ filmaj!

  🧰 Maintenance

  • ci(test): perform unit testing against node version 22 in #2140 - thanks @ zimeg!
  • chore(release): tag version @ slack/[email protected] in #2142 - thanks @ zimeg!

  📦 Dependencies

  • Bump @ types/node from 20.12.7 to 20.12.10 in #2111 - thanks @ dependabot!
  • Bump @ types/node from 20.12.10 to 20.12.11 in #2114 - thanks @ dependabot!
  • Bump @ types/node from 20.12.11 to 20.12.12 in #2117 - thanks @ dependabot!
  • Bump @ types/node from 20.12.12 to 20.14.0 in #2125 - thanks @ dependabot!
  • Bump @ types/node from 20.14.0 to 20.14.2 in #2132 - thanks @ dependabot!

  New Contributors

  • @ noah-guillory made their first contribution in #2107
  • @ lukegalbraithrussell made their first contribution in #2120

  Full Changelog: https://github.com/slackapi/bolt-js/compare/@ slack/[email protected]...@ slack/[email protected]

from @slack/bolt GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs