What's Changed

This release includes an update of @slack/web-api to bump internal dependencies to supported versions.

Maintenance 🧰

• chore(socket-mode): bump @slack/web-api from 7.8.0 to 7.9.1 by @zimeg in #2195

Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/@slack/socket-mode@2.0.3...@slack/socket-mode@2.0.4
Milestone: https://github.com/slackapi/node-slack-sdk/milestone/133

What's Changed

This release includes an update of @slack/web-api to bump internal dependencies to supported versions.

Maintenance 🧰

• chore(rtm-api): bump @slack/web-api from 7.8.0 to 7.9.1 by @zimeg in #2194

Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/@slack/rtm-api@7.0.2...@slack/rtm-api@7.0.3
Milestone: https://github.com/slackapi/node-slack-sdk/milestone/135

What's Changed

This release fixes a bug where setting allowAbsoluteUrls to false caused the filesUploadV2 method to error when uploading files. Files can now be uploaded with allowAbsoluteUrls set to false.

Bug fixes 🐛

• fix(web-api): complete file upload v2 calls if absolute urls are not allowed in #2196 - Thanks @zimeg!

Maintenance 🧰

• test(web-api): use channel_id instead of channels with files upload v2 in #2197 - Thanks @zimeg!

Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/@slack/web-api@7.9.0...@slack/web-api@7.9.1
Milestone: https://github.com/slackapi/node-slack-sdk/milestone/142

What's Changed

This release includes an update of @slack/web-api to bump internal dependencies to supported versions.

Maintenance 🧰

• chore(oauth): bump @slack/web-api from 7.8.0 to 7.9.1 by @zimeg in #2193

Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/@slack/oauth@3.0.2...@slack/oauth@3.0.3
Milestone: https://github.com/slackapi/node-slack-sdk/milestone/134

What's Changed

This release adds the allowAbsoluteUrls option to the WebClient constructor.

For code using dynamic method names with .apiCall, this will toggle if requests should be sent to absolute URLs provided:

const { WebClient } = require('@slack/web-api');

const web = new WebClient(token, {
  allowAbsoluteUrls: false, // Default: true
});

const _response = await web.apiCall('https://example.com', { /* ... */ });

$ node index.js
[DEBUG]  web-api:WebClient:0 http request url: https://slack.com/api/https://example.com
...
[WARN]  web-api:WebClient:0 http request failed An HTTP protocol error occurred: statusCode = 404

The default allowAbsoluteUrls value is true to avoid a breaking change with this update, but we suggest deciding if this option should be applied to scripts and adjacent code.

Enhancements 🎉

• feat(web-api): add configs to toggle absolute url usage in dynamic api calls in #2176 - Thanks @zimeg!

Maintenance 🧰

• fix(web-api): bump axios to 1.8.3 to address CVE-2025-27152 in #2172 - Thanks @zimeg!

Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/@slack/web-api@7.8.0...@slack/web-api@7.9.0
Milestone: https://github.com/slackapi/node-slack-sdk/milestone/131

What's Changed

This patch release updates the axios dependency used to send webhooks with internal bug fixes.

• fix(webhook): bump axios to 1.8.3 to address CVE-2025-27152 by @zimeg in #2173

Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/@slack/webhook@7.0.4..@slack/webhook@7.0.5
Milestone: https://github.com/slackapi/node-slack-sdk/milestone/130

What's Changed

The slack run command now exits with the error code returned from the start hook and Node warnings were returned to verbose outputs:

$ slack run --verbose
...
[DEBUG]  web-api:WebClient:0 initialized
...
AppInitializationError: You must provide an appToken when socketMode is set to true. To generate an appToken see: https://api.slack.com/apis/connections/socket#token
...

🚫 The 'start' hook exited with an error (sdk_hook_invocation_failed)
   exit status 1 (local_app_run_error)

$ echo $?
1

🎉 Enhancements

• feat(cli-hooks): output node warnings to stderr for debugging outputs in #2152 - Thanks @zimeg!
• feat(cli-hooks): exit the start process with the subprocess exit code in #2153 - Thanks @zimeg!

🧰 Maintenance

• chore(cli-hooks): release @slack/cli-hooks@1.2.0 in #2154 - Thanks @zimeg!

Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/@slack/cli-hooks@1.1.2...@slack/cli-hooks@1.2.0
Milestone: https://github.com/slackapi/node-slack-sdk/milestone/101?closed=1

What's Changed

👋 This release adds SLACK_TRACE constants for the env subcommands and introduces a global verbose option that can be passed to all commands for logging and parsing debug outputs:

    const output = await SlackCLI.env.add({
      appPath,
      team,
      secretKey: 'EXAMPLE_VARIABLE_NAME',
      secretValue: 'super-secret-value',
+     verbose: true
    });

+   expect(output).toContain(SlackTracerId.SLACK_TRACE_ENV_ADD_SUCCESS);

🎁 Enhancements

• feat(cli-test): include expected test trace outputs for the "env" subcommands in #2097 - thanks @zimeg!
• feat(cli-test): update traces for env to SLACK_TRACE_ENV_ in #2136 - thanks @mwbrooks!
• feat(cli-test): include a verbose global option for cli commands in #2147 - thanks @zimeg!

🐛 Fixes

• fix(cli-test): remove the trailing newline from parsed cli outputs in #2148 - thanks @zimeg!

⚙️ Maintenance

• chore(cli-test): release @slack/cli-test@2.1.0+cli2.32.2 in #2149 - thanks @zimeg!

🧰 Dependencies

• chore(deps-dev): bump typescript from 5.7.2 to 5.7.3 in /packages/cli-test in #2134 - thanks @dependabot!

Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/@slack/oauth@3.0.2...@slack/cli-test@2.1.0+cli.2.32.2

What's Changed

• chore(deps-dev): bump typescript from 5.5.4 to 5.7.2 in /packages/socket-mode by @dependabot in #2102
• chore(deps-dev): bump mocha from 10.8.2 to 11.0.1 in /packages/socket-mode in the dev-mocha group by @dependabot in #2114
• socket-mode: Handling WS errors during handshake by @filmaj in #2099
• Update webhook and web-api dependencies in oauth, rtm-api, and socket-mode by @hello-ashleyintech in #2119
• Release: @slack/socket-mode@2.0.3, @slack/oauth@3.0.2, @slack/rtm-api@7.0.2 by @hello-ashleyintech in #2120

Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/@slack/socket-mode@2.0.2...@slack/socket-mode@2.0.3

What's Changed

• socket-mode: Handling WS errors during handshake by @filmaj in #2099
• Update webhook and web-api dependencies in oauth, rtm-api, and socket-mode by @hello-ashleyintech in #2119
• Release: @slack/socket-mode@2.0.3, @slack/oauth@3.0.2, @slack/rtm-api@7.0.2 by @hello-ashleyintech in #2120

Full Changelog: https://github.com/slackapi/node-slack-sdk/compare/@slack/web-api@7.8.0...@slack/rtm-api@7.0.2