Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps slackapi/slack-github-action from 1.25.0 to 2.1.1.

Release notes

Sourced from slackapi/slack-github-action's releases.

Slack Send v2.1.1

What's Changed

This release fixes an issue where substituted variables might've broken valid JSON or YAML parsings when using the payload-file-path input option.

🐛 Bug fixes

📚 Documentation

🤖 Dependencies

🧰 Maintenance

Full Changelog: slackapi/slack-github-action@v2.1.0...v2.1.1

Slack Send v2.1.0

What's changed

This release improves error messages from odd payload parsings. An api option is now also available in inputs to change the destination of data with the method technique.

Read more on the new site for documentation: https://tools.slack.dev/slack-github-action/

👾 Enhancements

... (truncated)

Commits
  • 91efab1 Release
  • b6f4640 chore(release): tag version 2.1.1 (#474)
  • d3dc61e build(deps-dev): bump @​biomejs/biome from 1.9.4 to 2.0.6 (#470)
  • f647c89 build(deps-dev): bump @​types/node from 24.0.3 to 24.0.8 (#472)
  • e6fa633 build(deps-dev): bump sinon from 20.0.0 to 21.0.0 (#471)
  • 75b7822 build(deps-dev): bump mocha-suppress-logs from 0.5.1 to 0.6.0 (#469)
  • d7b6150 build(deps-dev): bump mocha from 11.5.0 to 11.7.1 (#468)
  • a7f5b68 build: clone repository "docs" and configuration when syncing project docs (#...
  • c69deab build(deps-dev): bump @​types/node from 22.15.29 to 24.0.3 (#466)
  • 1d0943c build(deps): bump axios from 1.9.0 to 1.10.0 (#465)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the 🤖 Dependencies Pull requests that update a dependency file label Dec 1, 2025
@greptile-apps
Copy link
Contributor

greptile-apps bot commented Dec 1, 2025

Greptile Overview

Greptile Summary

This PR bumps slackapi/slack-github-action from v1.25.0 to v2.1.1, which is a major version upgrade with breaking API changes.

  • Breaking change identified: The v2.x release of slack-github-action changed how webhooks are configured. The SLACK_WEBHOOK_URL environment variable is no longer supported - instead, the webhook input parameter must be used along with webhook-type: incoming-webhook.
  • Current configuration will fail: The workflow still uses the v1.x-style env: SLACK_WEBHOOK_URL configuration which will not work with v2.x.

Confidence Score: 1/5

  • This PR will break the Slack notification workflow due to incompatible v2.x API configuration
  • The major version bump from v1.x to v2.x includes breaking API changes that require configuration updates. The current workflow uses SLACK_WEBHOOK_URL environment variable which is not supported in v2.x.
  • pr-slack.yml requires webhook configuration to be updated for v2.x compatibility

Important Files Changed

File Analysis

Filename Score Overview
.github/workflows/pr-slack.yml 1/5 Major version bump from v1.25.0 to v2.1.1 without required configuration changes - webhook configuration is incompatible with v2.x API

Sequence Diagram

sequenceDiagram
    participant Scheduler as GitHub Scheduler
    participant Workflow as pr-slack.yml
    participant GitHubAPI as GitHub API
    participant Slack as Slack Webhook

    Scheduler->>Workflow: Trigger (daily at 11AM)
    Workflow->>GitHubAPI: Search for PRs older than 7 days
    GitHubAPI-->>Workflow: Return stale PRs list
    Workflow->>Workflow: Build Slack message payload
    Workflow->>Slack: Send notification (via slack-github-action v2.1.1)
    Note over Workflow,Slack: ⚠️ Will FAIL: v2.x requires webhook input,<br/>not SLACK_WEBHOOK_URL env var
    Slack--xWorkflow: Error: webhook not configured
Loading

Copy link
Contributor

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Additional Comments (1)

  1. .github/workflows/pr-slack.yml, line 59-64 (link)

    logic: Breaking change: slack-github-action v2.x has significant API changes from v1.x. The SLACK_WEBHOOK_URL environment variable is no longer supported. Instead, you need to use the webhook input and specify webhook-type.

1 file reviewed, 1 comment

Edit Code Review Agent Settings | Greptile

Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.25.0 to 2.1.1.
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](slackapi/slack-github-action@v1.25.0...v2.1.1)

---
updated-dependencies:
- dependency-name: slackapi/slack-github-action
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/github_actions/slackapi/slack-github-action-2.1.1 branch from e6fd745 to 33a97cc Compare December 3, 2025 04:33
@hengfeiyang hengfeiyang merged commit 86add24 into main Dec 4, 2025
16 checks passed
@hengfeiyang hengfeiyang deleted the dependabot/github_actions/slackapi/slack-github-action-2.1.1 branch December 4, 2025 03:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

🤖 Dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant