deps: update @slack/bolt to 4.6.0

2026-02-04 08:23:54 -08:00
4 changed files with 132 additions and 89 deletions
@@ -0,0 +1,25 @@
+# Package Manager Configuration
+# Force pnpm usage - breaks npm/yarn intentionally
+node-linker=pnpm
+
+# Security: Disable all lifecycle scripts
+ignore-scripts=true
+enable-pre-post-scripts=false
+
+# Security: Require packages to be 10+ days old before installation
+minimum-release-age=14400
+
+# Security: Verify package integrity hashes
+verify-store-integrity=true
+
+# Security: Enforce strict trust policies
+trust-policy=strict
+
+# Security: Strict peer dependency resolution
+strict-peer-dependencies=true
+
+# Performance: Use symlinks for node_modules
+symlink=true
+
+# Lockfile: Ensure lockfile is not modified during install
+frozen-lockfile=false
@@ -23,9 +23,9 @@
    "typescript": "5.8.2"
  },
  "dependencies": {
-    "@atproto/api": "0.18.21",
+    "@atproto/api": "0.14.8",
    "@nhcarrigan/logger": "1.0.0",
-    "@slack/bolt": "4.2.1",
+    "@slack/bolt": "4.6.0",
    "@slack/oauth": "3.0.2",
    "discord.js": "14.18.0",
    "fastify": "5.2.1",
@@ -9,14 +9,14 @@ importers:
  .:
    dependencies:
      '@atproto/api':
-        specifier: 0.18.21
-        version: 0.18.21
+        specifier: 0.14.8
+        version: 0.14.8
      '@nhcarrigan/logger':
        specifier: 1.0.0
        version: 1.0.0
      '@slack/bolt':
-        specifier: 4.2.1
-        version: 4.2.1(@types/express@5.0.0)
+        specifier: 4.6.0
+        version: 4.6.0(@types/express@5.0.0)
      '@slack/oauth':
        specifier: 3.0.2
        version: 3.0.2
@@ -54,26 +54,20 @@ importers:

 packages:

-  '@atproto/api@0.18.21':
-    resolution: {integrity: sha512-s35MIJerGT/pKe2xJtKKswqlIr/ola2r2iURBKBL0Mk1OKe6jP4YvTMh1N2d2PEANFzNNTbKoDaLfJPo2Uvc/w==}
+  '@atproto/api@0.14.8':
+    resolution: {integrity: sha512-i3jriHPLOqR0hRWKTte+3pRN1LEH+pa23CoNXEycYSa69K4nBVp6/qxUZ+UfOE5H/mkGXabI59P1xL8tSFCSXA==}

-  '@atproto/common-web@0.4.16':
-    resolution: {integrity: sha512-Ufvaff5JgxUyUyTAG0/3o7ltpy3lnZ1DvLjyAnvAf+hHfiK7OMQg+8byr+orN+KP9MtIQaRTsCgYPX+PxMKUoA==}
+  '@atproto/common-web@0.4.0':
+    resolution: {integrity: sha512-ZYL0P9myHybNgwh/hBY0HaBzqiLR1B5/ie5bJpLQAg0whRzNA28t8/nU2vh99tbsWcAF0LOD29M8++LyENJLNQ==}

-  '@atproto/lex-data@0.0.11':
-    resolution: {integrity: sha512-4+KTtHdqwlhiTKA7D4SACea4jprsNpCQsNALW09wsZ6IHhCDGO5tr1cmV+QnLYe3G3mu1E1yXHXbPUHrUUDT/A==}
+  '@atproto/lexicon@0.4.8':
+    resolution: {integrity: sha512-NPhu4MNHqft4muvHvcU0BrkWoEpTI+OmbQzvZzzRpw54MW3PfrQ4TPEpAfPOrWugPB9y4mD+l8OMN1c9eOGWMQ==}

-  '@atproto/lex-json@0.0.11':
-    resolution: {integrity: sha512-2IExAoQ4KsR5fyPa1JjIvtR316PvdgRH/l3BVGLBd3cSxM3m5MftIv1B6qZ9HjNiK60SgkWp0mi9574bTNDhBQ==}
+  '@atproto/syntax@0.3.4':
+    resolution: {integrity: sha512-8CNmi5DipOLaVeSMPggMe7FCksVag0aO6XZy9WflbduTKM4dFZVCs4686UeMLfGRXX+X966XgwECHoLYrovMMg==}

-  '@atproto/lexicon@0.6.1':
-    resolution: {integrity: sha512-/vI1kVlY50Si+5MXpvOucelnYwb0UJ6Qto5mCp+7Q5C+Jtp+SoSykAPVvjVtTnQUH2vrKOFOwpb3C375vSKzXw==}
-
-  '@atproto/syntax@0.4.3':
-    resolution: {integrity: sha512-YoZUz40YAJr5nPwvCDWgodEOlt5IftZqPJvA0JDWjuZKD8yXddTwSzXSaKQAzGOpuM+/A3uXRtPzJJqlScc+iA==}
-
-  '@atproto/xrpc@0.7.7':
-    resolution: {integrity: sha512-K1ZyO/BU8JNtXX5dmPp7b5UrkLMMqpsIa/Lrj5D3Su+j1Xwq1m6QJ2XJ1AgjEjkI1v4Muzm7klianLE6XGxtmA==}
+  '@atproto/xrpc@0.6.10':
+    resolution: {integrity: sha512-ClMiO+oAl3KrFe7sdo8Wzw81yV7EpEradZLJnYilPq4s7uF0by1jHGI/LarHBKHnE5RpaFpBC/5XD/ZzgmvAeg==}

  '@babel/code-frame@7.26.2':
    resolution: {integrity: sha512-RJlIHRueQgwWitWgF8OdFYGZX328Ax5BCemNGlqHfplnRT9ESi8JkFlvaVYbS+UubVY6dpv87Fs2u5M29iNFVQ==}
@@ -518,8 +512,8 @@ packages:
    resolution: {integrity: sha512-jjmJywLAFoWeBi1W7994zZyiNWPIiqRRNAmSERxyg93xRGzNYvGjlZ0gR6x0F4gPRi2+0O6S71kOZYyr3cxaIQ==}
    engines: {node: '>=v14.0.0', npm: '>=7.0.0'}

-  '@slack/bolt@4.2.1':
-    resolution: {integrity: sha512-O+c7i5iZKlxt6ltJAu2BclEoyWuAVkcpir1F3HWCHTez8Pjz0GxwdBzNHR5HDXvOdBT7En1BU0T2L6Ldv++GSg==}
+  '@slack/bolt@4.6.0':
+    resolution: {integrity: sha512-xPgfUs2+OXSugz54Ky07pA890+Qydk22SYToi8uGpXeHSt1JWwFJkRyd/9Vlg5I1AdfdpGXExDpwnbuN9Q/2dQ==}
    engines: {node: '>=18', npm: '>=8.6.0'}
    peerDependencies:
      '@types/express': ^5.0.0
@@ -532,14 +526,26 @@ packages:
    resolution: {integrity: sha512-MdPS8AP9n3u/hBeqRFu+waArJLD/q+wOSZ48ktMTwxQLc6HJyaWPf8soqAyS/b0D6IlvI5TxAdyRyyv3wQ5IVw==}
    engines: {node: '>=18', npm: '>=8.6.0'}

-  '@slack/socket-mode@2.0.3':
-    resolution: {integrity: sha512-aY1AhQd3HAgxLYC2Mz47dXtW6asjyYp8bJ24MWalg+qFWPaXj8VBYi+5w3rfGqBW5IxlIhs3vJTEQtIBrqQf5A==}
+  '@slack/oauth@3.0.4':
+    resolution: {integrity: sha512-+8H0g7mbrHndEUbYCP7uYyBCbwqmm3E6Mo3nfsDvZZW74zKk1ochfH/fWSvGInYNCVvaBUbg3RZBbTp0j8yJCg==}
+    engines: {node: '>=18', npm: '>=8.6.0'}
+
+  '@slack/socket-mode@2.0.5':
+    resolution: {integrity: sha512-VaapvmrAifeFLAFaDPfGhEwwunTKsI6bQhYzxRXw7BSujZUae5sANO76WqlVsLXuhVtCVrBWPiS2snAQR2RHJQ==}
    engines: {node: '>= 18', npm: '>= 8.6.0'}

  '@slack/types@2.14.0':
    resolution: {integrity: sha512-n0EGm7ENQRxlXbgKSrQZL69grzg1gHLAVd+GlRVQJ1NSORo0FrApR7wql/gaKdu2n4TO83Sq/AmeUOqD60aXUA==}
    engines: {node: '>= 12.13.0', npm: '>= 6.12.0'}

+  '@slack/types@2.19.0':
+    resolution: {integrity: sha512-7+QZ38HGcNh/b/7MpvPG6jnw7mliV6UmrquJLqgdxkzJgQEYUcEztvFWRU49z0x4vthF0ixL5lTK601AXrS8IA==}
+    engines: {node: '>= 12.13.0', npm: '>= 6.12.0'}
+
+  '@slack/web-api@7.13.0':
+    resolution: {integrity: sha512-ERcExbWrnkDN8ovoWWe6Wgt/usanj1dWUd18dJLpctUI4mlPS0nKt81Joh8VI+OPbNnY1lIilVt9gdMBD9U2ig==}
+    engines: {node: '>= 18', npm: '>= 8.6.0'}
+
  '@slack/web-api@7.8.0':
    resolution: {integrity: sha512-d4SdG+6UmGdzWw38a4sN3lF/nTEzsDxhzU13wm10ejOpPehtmRoqBKnPztQUfFiWbNvSb4czkWYJD4kt+5+Fuw==}
    engines: {node: '>= 18', npm: '>= 8.6.0'}
@@ -863,6 +869,9 @@ packages:
  await-lock@2.2.2:
    resolution: {integrity: sha512-aDczADvlvTGajTDjcjpJMqRkOF6Qdz3YbPZm/PyW6tKPkx2hlYBzxMhEywM/tU72HrVZjgl5VCdRuMlA7pZ8Gw==}

+  axios@1.13.3:
+    resolution: {integrity: sha512-ERT8kdX7DZjtUm7IitEyV7InTHAF42iJuMArIiDIV5YtPanJkgw4hw5Dyg9fh0mihdWNn1GKaeIWErfe56UQ1g==}
+
  axios@1.8.2:
    resolution: {integrity: sha512-ls4GYBm5aig9vWx8AWDSGLpnpDQRtWAfrjU+EuytuODrFBkqesN2RkOQCBzrA1RQNHw1SmRMSDDDSwzNAYQ6Rg==}

@@ -1372,6 +1381,10 @@ packages:
    resolution: {integrity: sha512-hGfm/slu0ZabnNt4oaRZ6uREyfCj6P4fT/n6A1rGV+Z0VdGXjfOhVUpkn6qVQONHGIFwmveGXyDs75+nr6FM8w==}
    engines: {node: '>= 6'}

+  form-data@4.0.5:
+    resolution: {integrity: sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==}
+    engines: {node: '>= 6'}
+
  forwarded@0.2.0:
    resolution: {integrity: sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==}
    engines: {node: '>= 0.6'}
@@ -2464,9 +2477,6 @@ packages:
    resolution: {integrity: sha512-q/1rj5D0/zayJB2FraXdaWxbhWiNKDvu8naDT2dl1yTlvJp4BLtOcp2a5BvgGNQpYYJzau7tf1WgKv3b+7mqpQ==}
    engines: {node: '>=18.17'}

-  unicode-segmenter@0.14.5:
-    resolution: {integrity: sha512-jHGmj2LUuqDcX3hqY12Ql+uhUTn8huuxNZGq7GvtF6bSybzH3aFgedYu/KTzQStEgt1Ra2F3HxadNXsNjb3m3g==}
-
  unpipe@1.0.0:
    resolution: {integrity: sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==}
    engines: {node: '>= 0.8'}
@@ -2618,51 +2628,37 @@ packages:

 snapshots:

-  '@atproto/api@0.18.21':
+  '@atproto/api@0.14.8':
    dependencies:
-      '@atproto/common-web': 0.4.16
-      '@atproto/lexicon': 0.6.1
-      '@atproto/syntax': 0.4.3
-      '@atproto/xrpc': 0.7.7
+      '@atproto/common-web': 0.4.0
+      '@atproto/lexicon': 0.4.8
+      '@atproto/syntax': 0.3.4
+      '@atproto/xrpc': 0.6.10
      await-lock: 2.2.2
      multiformats: 9.9.0
      tlds: 1.256.0
      zod: 3.24.2

-  '@atproto/common-web@0.4.16':
+  '@atproto/common-web@0.4.0':
    dependencies:
-      '@atproto/lex-data': 0.0.11
-      '@atproto/lex-json': 0.0.11
-      '@atproto/syntax': 0.4.3
+      graphemer: 1.4.0
+      multiformats: 9.9.0
+      uint8arrays: 3.0.0
      zod: 3.24.2

-  '@atproto/lex-data@0.0.11':
+  '@atproto/lexicon@0.4.8':
    dependencies:
-      multiformats: 9.9.0
-      tslib: 2.8.1
-      uint8arrays: 3.0.0
-      unicode-segmenter: 0.14.5
-
-  '@atproto/lex-json@0.0.11':
-    dependencies:
-      '@atproto/lex-data': 0.0.11
-      tslib: 2.8.1
-
-  '@atproto/lexicon@0.6.1':
-    dependencies:
-      '@atproto/common-web': 0.4.16
-      '@atproto/syntax': 0.4.3
+      '@atproto/common-web': 0.4.0
+      '@atproto/syntax': 0.3.4
      iso-datestring-validator: 2.2.2
      multiformats: 9.9.0
      zod: 3.24.2

-  '@atproto/syntax@0.4.3':
-    dependencies:
-      tslib: 2.8.1
+  '@atproto/syntax@0.3.4': {}

-  '@atproto/xrpc@0.7.7':
+  '@atproto/xrpc@0.6.10':
    dependencies:
-      '@atproto/lexicon': 0.6.1
+      '@atproto/lexicon': 0.4.8
      zod: 3.24.2

  '@babel/code-frame@7.26.2':
@@ -3024,15 +3020,15 @@ snapshots:

  '@sapphire/snowflake@3.5.3': {}

-  '@slack/bolt@4.2.1(@types/express@5.0.0)':
+  '@slack/bolt@4.6.0(@types/express@5.0.0)':
    dependencies:
      '@slack/logger': 4.0.0
-      '@slack/oauth': 3.0.2
-      '@slack/socket-mode': 2.0.3
-      '@slack/types': 2.14.0
-      '@slack/web-api': 7.8.0
+      '@slack/oauth': 3.0.4
+      '@slack/socket-mode': 2.0.5
+      '@slack/types': 2.19.0
+      '@slack/web-api': 7.13.0
      '@types/express': 5.0.0
-      axios: 1.8.2
+      axios: 1.13.3
      express: 5.0.1
      path-to-regexp: 8.2.0
      raw-body: 3.0.0
@@ -3058,10 +3054,20 @@ snapshots:
    transitivePeerDependencies:
      - debug

-  '@slack/socket-mode@2.0.3':
+  '@slack/oauth@3.0.4':
    dependencies:
      '@slack/logger': 4.0.0
-      '@slack/web-api': 7.8.0
+      '@slack/web-api': 7.13.0
+      '@types/jsonwebtoken': 9.0.9
+      '@types/node': 22.13.9
+      jsonwebtoken: 9.0.2
+    transitivePeerDependencies:
+      - debug
+
+  '@slack/socket-mode@2.0.5':
+    dependencies:
+      '@slack/logger': 4.0.0
+      '@slack/web-api': 7.13.0
      '@types/node': 22.13.9
      '@types/ws': 8.18.0
      eventemitter3: 5.0.1
@@ -3073,6 +3079,25 @@ snapshots:

  '@slack/types@2.14.0': {}

+  '@slack/types@2.19.0': {}
+
+  '@slack/web-api@7.13.0':
+    dependencies:
+      '@slack/logger': 4.0.0
+      '@slack/types': 2.19.0
+      '@types/node': 22.13.9
+      '@types/retry': 0.12.0
+      axios: 1.13.3
+      eventemitter3: 5.0.1
+      form-data: 4.0.5
+      is-electron: 2.2.2
+      is-stream: 2.0.1
+      p-queue: 6.6.2
+      p-retry: 4.6.2
+      retry: 0.13.1
+    transitivePeerDependencies:
+      - debug
+
  '@slack/web-api@7.8.0':
    dependencies:
      '@slack/logger': 4.0.0
@@ -3505,6 +3530,14 @@ snapshots:

  await-lock@2.2.2: {}

+  axios@1.13.3:
+    dependencies:
+      follow-redirects: 1.15.9
+      form-data: 4.0.5
+      proxy-from-env: 1.1.0
+    transitivePeerDependencies:
+      - debug
+
  axios@1.8.2:
    dependencies:
      follow-redirects: 1.15.9
@@ -4238,6 +4271,14 @@ snapshots:
      es-set-tostringtag: 2.1.0
      mime-types: 2.1.35

+  form-data@4.0.5:
+    dependencies:
+      asynckit: 0.4.0
+      combined-stream: 1.0.8
+      es-set-tostringtag: 2.1.0
+      hasown: 2.0.2
+      mime-types: 2.1.35
+
  forwarded@0.2.0: {}

  fresh@0.5.2: {}
@@ -5366,8 +5407,6 @@ snapshots:

  undici@6.21.1: {}

-  unicode-segmenter@0.14.5: {}
-
  unpipe@1.0.0: {}

  update-browserslist-db@1.1.3(browserslist@4.24.4):
@@ -1,21 +0,0 @@
-# Security
-
-# Do not execute any scripts of installed packages (project scripts still run)
-ignoreDepScripts: true
-# Do not automatically run pre/post scripts (e.g. preinstall, postbuild)
-enablePrePostScripts: false
-# Only allow packages published at least 10 days ago (reduces risk of compromised packages)
-minimumReleaseAge: 14400
-# Fail if a package's trust level has decreased compared to previous releases
-trustPolicy: no-downgrade
-# Ignore trust policy for packages published more than 1 year ago (predates provenance signing)
-trustPolicyIgnoreAfter: 525960
-# Fail if there are missing or invalid peer dependencies
-strictPeerDependencies: true
-# Prevent transitive dependencies from using exotic sources (git repos, direct tarball URLs)
-blockExoticSubdeps: true
-
-# Lockfile
-
-# Allow the lockfile to be updated during install (set to true in CI for stricter reproducibility)
-preferFrozenLockfile: false