Skip to content

chore(deps): bump slackapi/slack-github-action from 1.24.0 to 2.1.1 in the notifications group#118

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/github_actions/develop/notifications-89b4e85e48
Open

chore(deps): bump slackapi/slack-github-action from 1.24.0 to 2.1.1 in the notifications group#118
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/github_actions/develop/notifications-89b4e85e48

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 6, 2026

Bumps the notifications group with 1 update: slackapi/slack-github-action.

Updates slackapi/slack-github-action from 1.24.0 to 2.1.1

Release notes

Sourced from slackapi/slack-github-action's releases.

Slack Send v2.1.1

What's Changed

This release fixes an issue where substituted variables might've broken valid JSON or YAML parsings when using the payload-file-path input option.

🐛 Bug fixes

📚 Documentation

🤖 Dependencies

🧰 Maintenance

Full Changelog: slackapi/slack-github-action@v2.1.0...v2.1.1

Slack Send v2.1.0

What's changed

This release improves error messages from odd payload parsings. An api option is now also available in inputs to change the destination of data with the method technique.

Read more on the new site for documentation: https://tools.slack.dev/slack-github-action/

👾 Enhancements

... (truncated)

Commits
  • 91efab1 Release
  • b6f4640 chore(release): tag version 2.1.1 (#474)
  • d3dc61e build(deps-dev): bump @​biomejs/biome from 1.9.4 to 2.0.6 (#470)
  • f647c89 build(deps-dev): bump @​types/node from 24.0.3 to 24.0.8 (#472)
  • e6fa633 build(deps-dev): bump sinon from 20.0.0 to 21.0.0 (#471)
  • 75b7822 build(deps-dev): bump mocha-suppress-logs from 0.5.1 to 0.6.0 (#469)
  • d7b6150 build(deps-dev): bump mocha from 11.5.0 to 11.7.1 (#468)
  • a7f5b68 build: clone repository "docs" and configuration when syncing project docs (#...
  • c69deab build(deps-dev): bump @​types/node from 22.15.29 to 24.0.3 (#466)
  • 1d0943c build(deps): bump axios from 1.9.0 to 1.10.0 (#465)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 6, 2026

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot requested a review from a team as a code owner March 6, 2026 12:49
@dependabot dependabot bot force-pushed the dependabot/github_actions/develop/notifications-89b4e85e48 branch 2 times, most recently from 1bb3410 to 7c6569f Compare March 10, 2026 13:32
@bedatty bedatty self-assigned this Mar 10, 2026
@dependabot dependabot bot force-pushed the dependabot/github_actions/develop/notifications-89b4e85e48 branch from 7c6569f to bc160ef Compare March 11, 2026 18:15
@bedatty
Copy link
Contributor

bedatty commented Mar 11, 2026

⚠️ Breaking Change Detected — slackapi/slack-github-action v1 → v2

This PR bumps slackapi/slack-github-action from 1.24.0 to 2.1.1, which is a major rewrite with breaking API changes.

What will break

In gptchangelog.yml, the Slack notification step currently uses:

  • SLACK_WEBHOOK_URL as an env var
  • SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK as an env var
  • payload as an input with a JSON block

In v2, the webhook approach changed completely:

  • SLACK_WEBHOOK_URL env var is no longer supported — must use the webhook-url input instead
  • SLACK_WEBHOOK_TYPE env var is no longer supported — must use the webhook input (with value incoming-webhook)
  • The payload input format may need adjustments

Required changes before merge

The step in gptchangelog.yml (~line 725) needs to be adapted from:

- name: Send Slack notification for sync PR
  uses: slackapi/slack-github-action@v2.1.1
  with:
    payload: |
      { ... }
  env:
    SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
    SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK

To something like:

- name: Send Slack notification for sync PR
  uses: slackapi/slack-github-action@v2.1.1
  with:
    webhook: incoming-webhook
    webhook-url: ${{ secrets.SLACK_WEBHOOK_URL }}
    payload: |
      { ... }

Recommendation

Do not merge this PR as-is. Either:

  1. Close this PR and manually update the workflow to be compatible with v2, or
  2. Update this PR's branch with the necessary workflow adaptations before merging

@bedatty bedatty removed their assignment Mar 11, 2026
@dependabot dependabot bot force-pushed the dependabot/github_actions/develop/notifications-89b4e85e48 branch from bc160ef to 7c828d5 Compare March 13, 2026 13:49
Bumps the notifications group with 1 update: [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action).


Updates `slackapi/slack-github-action` from 1.24.0 to 2.1.1
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](slackapi/slack-github-action@v1.24.0...v2.1.1)

---
updated-dependencies:
- dependency-name: slackapi/slack-github-action
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: notifications
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/develop/notifications-89b4e85e48 branch from 7c828d5 to 60ee3f7 Compare March 16, 2026 11:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant