Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ci(test): collect environment secrets from a prepared staging environment #294

Merged
merged 2 commits into from Mar 14, 2024

Conversation

zimeg
Copy link
Member

@zimeg zimeg commented Mar 14, 2024

Summary

This PR updates the integration tests to use a staging environment 🔐 for workflow jobs. This staging environment has an access check that requires approval from @slackapi/developer-tools and then grants access to environment secrets when running the jobs.

The previous pull_request_target access_check checks were reverted here but a note remains in the maintainer's guide.

Notes

Using environment might act as a "deployment" which will appear on the repo home page. I suggest we hide this since the staging environment is only used in testing.

Reference

Requirements

@zimeg zimeg added security tests github_actions Pull requests that update GitHub Actions code labels Mar 14, 2024
@zimeg zimeg added this to the 1.26 milestone Mar 14, 2024
@zimeg zimeg self-assigned this Mar 14, 2024
@zimeg
Copy link
Member Author

zimeg commented Mar 14, 2024

This is epic!

deployments

@zimeg
Copy link
Member Author

zimeg commented Mar 14, 2024

The pull_request_target jobs should disappear once main is updated!

Copy link
Member

@seratch seratch left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh nice! At a glance, this looks great to me

@zimeg
Copy link
Member Author

zimeg commented Mar 14, 2024

@seratch thanks! I'll forgo pressing the "start all waiting jobs" button - leaving this to you or any other reviewer! - but think we'll need one more secret for this to work 🔑 🤐

approval

@zimeg
Copy link
Member Author

zimeg commented Mar 14, 2024

But it might be interesting to run these tests before the secret appears to see if we can break things 😏

Copy link

@WilliamBergamin WilliamBergamin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is awesome 💯

Copy link
Contributor

@filmaj filmaj left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks super cool! Well done

@zimeg
Copy link
Member Author

zimeg commented Mar 14, 2024

Just tested without the SLACK_WEBHOOK_URL repository secret and the job failed! This is kinda what I wanted. Going to add this back as an environment secret and try again.

@zimeg
Copy link
Member Author

zimeg commented Mar 14, 2024

Awesome that works 👍 Will merge now and hope for the same with @dependabot. Appreciate all of the reviews 🙌

@zimeg zimeg merged commit bfb463e into main Mar 14, 2024
12 checks passed
@zimeg zimeg deleted the ci-environment-secrets branch March 14, 2024 22:20
nicolewhite pushed a commit to autoblocksai/autoblocks-examples that referenced this pull request Apr 22, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence | Type |
Update |
|---|---|---|---|---|---|---|---|
| [ai](https://sdk.vercel.ai/docs)
([source](https://togithub.com/vercel/ai)) | [`3.0.23` ->
`3.0.24`](https://renovatebot.com/diffs/npm/ai/3.0.23/3.0.24) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/ai/3.0.24?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/ai/3.0.24?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/ai/3.0.23/3.0.24?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/ai/3.0.23/3.0.24?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| dependencies | patch |
|
[eslint-config-next](https://nextjs.org/docs/app/building-your-application/configuring/eslint#eslint-config)
([source](https://togithub.com/vercel/next.js/tree/HEAD/packages/eslint-config-next))
| [`14.2.1` ->
`14.2.2`](https://renovatebot.com/diffs/npm/eslint-config-next/14.2.1/14.2.2)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/eslint-config-next/14.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/eslint-config-next/14.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/eslint-config-next/14.2.1/14.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/eslint-config-next/14.2.1/14.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| dependencies | patch |
| [next](https://nextjs.org)
([source](https://togithub.com/vercel/next.js)) | [`14.2.1` ->
`14.2.2`](https://renovatebot.com/diffs/npm/next/14.2.1/14.2.2) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/next/14.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/next/14.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/next/14.2.1/14.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/next/14.2.1/14.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| dependencies | patch |
| [openai](https://togithub.com/openai/openai-python) | `1.20.0` ->
`1.23.2` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/openai/1.23.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/openai/1.23.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/openai/1.20.0/1.23.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/openai/1.20.0/1.23.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| dependencies | minor |
| [openai](https://togithub.com/openai/openai-node) | [`4.36.0` ->
`4.38.2`](https://renovatebot.com/diffs/npm/openai/4.36.0/4.38.2) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/openai/4.38.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/openai/4.38.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/openai/4.36.0/4.38.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/openai/4.36.0/4.38.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| dependencies | minor |
|
[slackapi/slack-github-action](https://togithub.com/slackapi/slack-github-action)
| `v1.25.0` -> `v1.26.0` |
[![age](https://developer.mend.io/api/mc/badges/age/github-tags/slackapi%2fslack-github-action/v1.26.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/github-tags/slackapi%2fslack-github-action/v1.26.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/github-tags/slackapi%2fslack-github-action/v1.25.0/v1.26.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/slackapi%2fslack-github-action/v1.25.0/v1.26.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| action | minor |
| [zod](https://zod.dev) ([source](https://togithub.com/colinhacks/zod))
| [`3.22.4` ->
`3.23.0`](https://renovatebot.com/diffs/npm/zod/3.22.4/3.23.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/zod/3.23.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/zod/3.23.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/zod/3.22.4/3.23.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/zod/3.22.4/3.23.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| dependencies | minor |

---

### Release Notes

<details>
<summary>vercel/ai (ai)</summary>

### [`v3.0.24`](https://togithub.com/vercel/ai/releases/tag/ai%403.0.24)

[Compare
Source](https://togithub.com/vercel/ai/compare/ai@3.0.23...ai@3.0.24)

##### Patch Changes

- [`e94fb32`](https://togithub.com/vercel/ai/commit/e94fb32):
feat(ai/rsc): Make `onSetAIState` and `onGetUIState` stable

</details>

<details>
<summary>vercel/next.js (eslint-config-next)</summary>

###
[`v14.2.2`](https://togithub.com/vercel/next.js/compare/v14.2.1...c850e4a69a8ff62502753e2ff15bbabcea94b556)

[Compare
Source](https://togithub.com/vercel/next.js/compare/v14.2.1...v14.2.2)

</details>

<details>
<summary>vercel/next.js (next)</summary>

###
[`v14.2.2`](https://togithub.com/vercel/next.js/compare/v14.2.1...c850e4a69a8ff62502753e2ff15bbabcea94b556)

[Compare
Source](https://togithub.com/vercel/next.js/compare/v14.2.1...v14.2.2)

</details>

<details>
<summary>openai/openai-python (openai)</summary>

###
[`v1.23.2`](https://togithub.com/openai/openai-python/blob/HEAD/CHANGELOG.md#1232-2024-04-19)

[Compare
Source](https://togithub.com/openai/openai-python/compare/v1.23.1...v1.23.2)

Full Changelog:
[v1.23.1...v1.23.2](https://togithub.com/openai/openai-python/compare/v1.23.1...v1.23.2)

##### Bug Fixes

- **api:** correct types for message attachment tools
([#&#8203;1348](https://togithub.com/openai/openai-python/issues/1348))
([78a6261](https://togithub.com/openai/openai-python/commit/78a6261eaad7839284903287d4f647d9cb4ced0b))

###
[`v1.23.1`](https://togithub.com/openai/openai-python/blob/HEAD/CHANGELOG.md#1231-2024-04-18)

[Compare
Source](https://togithub.com/openai/openai-python/compare/v1.23.0...v1.23.1)

Full Changelog:
[v1.23.0...v1.23.1](https://togithub.com/openai/openai-python/compare/v1.23.0...v1.23.1)

##### Bug Fixes

- **api:** correct types for attachments
([#&#8203;1342](https://togithub.com/openai/openai-python/issues/1342))
([542d30c](https://togithub.com/openai/openai-python/commit/542d30c6dad4e139bf3eb443936d42b7b42dad54))

###
[`v1.23.0`](https://togithub.com/openai/openai-python/blob/HEAD/CHANGELOG.md#1230-2024-04-18)

[Compare
Source](https://togithub.com/openai/openai-python/compare/v1.22.0...v1.23.0)

Full Changelog:
[v1.22.0...v1.23.0](https://togithub.com/openai/openai-python/compare/v1.22.0...v1.23.0)

##### Features

- **api:** add request id property to response classes
([#&#8203;1341](https://togithub.com/openai/openai-python/issues/1341))
([444d680](https://togithub.com/openai/openai-python/commit/444d680cbb3745adbc27788213ae3312567136a8))

##### Documentation

- **helpers:** fix example snippets
([#&#8203;1339](https://togithub.com/openai/openai-python/issues/1339))
([8929088](https://togithub.com/openai/openai-python/commit/8929088b206a04b4c5b85fb69b0b983fb56f9b03))

###
[`v1.22.0`](https://togithub.com/openai/openai-python/blob/HEAD/CHANGELOG.md#1220-2024-04-18)

[Compare
Source](https://togithub.com/openai/openai-python/compare/v1.21.2...v1.22.0)

Full Changelog:
[v1.21.2...v1.22.0](https://togithub.com/openai/openai-python/compare/v1.21.2...v1.22.0)

##### Features

- **api:** batch list endpoint
([#&#8203;1338](https://togithub.com/openai/openai-python/issues/1338))
([a776f38](https://togithub.com/openai/openai-python/commit/a776f387e3159f9a8f4dcaa7d0d3b78c2a884f91))

##### Chores

- **internal:** ban usage of lru_cache
([#&#8203;1331](https://togithub.com/openai/openai-python/issues/1331))
([8f9223b](https://togithub.com/openai/openai-python/commit/8f9223bfe13200c685fc97c25ada3015a69c6df7))
- **internal:** bump pyright to 1.1.359
([#&#8203;1337](https://togithub.com/openai/openai-python/issues/1337))
([feec0dd](https://togithub.com/openai/openai-python/commit/feec0dd1dd243941a279c3224c5ca1d727d76676))

###
[`v1.21.2`](https://togithub.com/openai/openai-python/blob/HEAD/CHANGELOG.md#1212-2024-04-17)

[Compare
Source](https://togithub.com/openai/openai-python/compare/v1.21.1...v1.21.2)

Full Changelog:
[v1.21.1...v1.21.2](https://togithub.com/openai/openai-python/compare/v1.21.1...v1.21.2)

##### Chores

- **internal:** add lru_cache helper function
([#&#8203;1329](https://togithub.com/openai/openai-python/issues/1329))
([cbeebfc](https://togithub.com/openai/openai-python/commit/cbeebfcca8bf1a3feb4462a79e10099bda5bed84))

###
[`v1.21.1`](https://togithub.com/openai/openai-python/blob/HEAD/CHANGELOG.md#1211-2024-04-17)

[Compare
Source](https://togithub.com/openai/openai-python/compare/v1.21.0...v1.21.1)

Full Changelog:
[v1.21.0...v1.21.1](https://togithub.com/openai/openai-python/compare/v1.21.0...v1.21.1)

##### Chores

- **api:** docs and response_format response property
([#&#8203;1327](https://togithub.com/openai/openai-python/issues/1327))
([7a6d142](https://togithub.com/openai/openai-python/commit/7a6d142f013994c4eb9a4f55888464c885f8baf0))

###
[`v1.21.0`](https://togithub.com/openai/openai-python/blob/HEAD/CHANGELOG.md#1210-2024-04-17)

[Compare
Source](https://togithub.com/openai/openai-python/compare/v1.20.0...v1.21.0)

Full Changelog:
[v1.20.0...v1.21.0](https://togithub.com/openai/openai-python/compare/v1.20.0...v1.21.0)

##### Features

- **api:** add vector stores
([#&#8203;1325](https://togithub.com/openai/openai-python/issues/1325))
([038a3c5](https://togithub.com/openai/openai-python/commit/038a3c50db7b6a88f54ff1cd1ff6cbaef2caf87f))

</details>

<details>
<summary>openai/openai-node (openai)</summary>

###
[`v4.38.2`](https://togithub.com/openai/openai-node/blob/HEAD/CHANGELOG.md#4382-2024-04-19)

[Compare
Source](https://togithub.com/openai/openai-node/compare/v4.38.1...v4.38.2)

Full Changelog:
[v4.38.1...v4.38.2](https://togithub.com/openai/openai-node/compare/v4.38.1...v4.38.2)

##### Bug Fixes

- **api:** correct types for message attachment tools
([#&#8203;787](https://togithub.com/openai/openai-node/issues/787))
([8626884](https://togithub.com/openai/openai-node/commit/8626884abd2494aa081db9e50a2f268b6cebc5df))

###
[`v4.38.1`](https://togithub.com/openai/openai-node/blob/HEAD/CHANGELOG.md#4381-2024-04-18)

[Compare
Source](https://togithub.com/openai/openai-node/compare/v4.38.0...v4.38.1)

Full Changelog:
[v4.38.0...v4.38.1](https://togithub.com/openai/openai-node/compare/v4.38.0...v4.38.1)

##### Bug Fixes

- **api:** correct types for attachments
([#&#8203;783](https://togithub.com/openai/openai-node/issues/783))
([6893631](https://togithub.com/openai/openai-node/commit/6893631334f75e232ba130f5dd67f1230b1e5fa0))

###
[`v4.38.0`](https://togithub.com/openai/openai-node/blob/HEAD/CHANGELOG.md#4380-2024-04-18)

[Compare
Source](https://togithub.com/openai/openai-node/compare/v4.37.1...v4.38.0)

Full Changelog:
[v4.37.1...v4.38.0](https://togithub.com/openai/openai-node/compare/v4.37.1...v4.38.0)

##### Features

- **api:** batch list endpoint
([#&#8203;781](https://togithub.com/openai/openai-node/issues/781))
([d226759](https://togithub.com/openai/openai-node/commit/d226759164fbed33198d8bdc315c98e1052dade8))

###
[`v4.37.1`](https://togithub.com/openai/openai-node/blob/HEAD/CHANGELOG.md#4371-2024-04-17)

[Compare
Source](https://togithub.com/openai/openai-node/compare/v4.37.0...v4.37.1)

Full Changelog:
[v4.37.0...v4.37.1](https://togithub.com/openai/openai-node/compare/v4.37.0...v4.37.1)

##### Chores

- **api:** docs and response_format response property
([#&#8203;778](https://togithub.com/openai/openai-node/issues/778))
([78f5c35](https://togithub.com/openai/openai-node/commit/78f5c3568d95d8e854c04049dc7d5643aa49e93f))

###
[`v4.37.0`](https://togithub.com/openai/openai-node/blob/HEAD/CHANGELOG.md#4370-2024-04-17)

[Compare
Source](https://togithub.com/openai/openai-node/compare/v4.36.0...v4.37.0)

Full Changelog:
[v4.36.0...v4.37.0](https://togithub.com/openai/openai-node/compare/v4.36.0...v4.37.0)

##### Features

- **api:** add vector stores
([#&#8203;776](https://togithub.com/openai/openai-node/issues/776))
([8bb929b](https://togithub.com/openai/openai-node/commit/8bb929b2ee91c1bec0a00347bf4f7628652d1be3))

</details>

<details>
<summary>slackapi/slack-github-action
(slackapi/slack-github-action)</summary>

###
[`v1.26.0`](https://togithub.com/slackapi/slack-github-action/releases/tag/v1.26.0):
Slack Send V1.26.0

[Compare
Source](https://togithub.com/slackapi/slack-github-action/compare/v1.25.0...v1.26.0)

#### What's Changed

This release provides an escape hatch for sending the JSON content of a
payload file exactly as is, without replacing any templated variables!

Previously a payload file was parsed and templated variables were
replaced with values from `github.context` and `github.env`. Any
undefined variables were replaced with `???` in this process, which
might have caused questions.

That remains the default behavior, but now the JSON contents of a
payload file can be sent exactly as written by setting the
`payload-file-path-parsed` input to `false`:

```yaml
- name: Send custom JSON data to Slack workflow
  id: slack
  uses: slackapi/slack-github-action@v1.26.0
  with:
    payload-file-path: "./payload-slack-content.json"
    payload-file-path-parsed: false
  env:
    SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
```

With this change, the contents of the example
`payload-slack-content.json` will be sent to a webhook URL exactly as
is!

#### Recent commits

##### Enhancements

- allow to use json file as is without replacing/parsing anything by
[@&#8203;talgendler](https://togithub.com/talgendler) in
[slackapi/slack-github-action#299

##### Documentation

- docs(readme): adjust whitespace in env assignment by
[@&#8203;paulo9mv](https://togithub.com/paulo9mv) in
[slackapi/slack-github-action#296

##### Maintenance

- ci(test): collect environment secrets from a prepared staging
environment by [@&#8203;zimeg](https://togithub.com/zimeg) in
[slackapi/slack-github-action#294
- ci(test): share environment secrets with pull requests from forked prs
by [@&#8203;zimeg](https://togithub.com/zimeg) in
[slackapi/slack-github-action#297

##### Dependencies

- Bump eslint-plugin-jsdoc from 46.10.1 to 48.2.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#295
- Bump eslint from 8.56.0 to 8.57.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#289
- Bump mocha from 10.2.0 to 10.3.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#288
- Bump https-proxy-agent from 7.0.2 to 7.0.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#290
- Bump [@&#8203;slack/web-api](https://togithub.com/slack/web-api) from
6.12.0 to 7.0.2 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[slackapi/slack-github-action#287
- Bump mocha from 10.3.0 to 10.4.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#300
- Bump axios from 1.6.7 to 1.6.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#301
- Bump eslint-plugin-jsdoc from 48.2.1 to 48.2.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#302

#### New Contributors

- [@&#8203;paulo9mv](https://togithub.com/paulo9mv) made their first
contribution in
[slackapi/slack-github-action#296
- [@&#8203;talgendler](https://togithub.com/talgendler) made their first
contribution in
[slackapi/slack-github-action#299

**Full Changelog**:
slackapi/slack-github-action@v1.25.0...v1.26.0

</details>

<details>
<summary>colinhacks/zod (zod)</summary>

###
[`v3.23.0`](https://togithub.com/colinhacks/zod/releases/tag/v3.23.0)

[Compare
Source](https://togithub.com/colinhacks/zod/compare/e7a9b9b3033991be6b4225f1be21da39c250bbb0...v3.23.0)

Zod 3.23 is now available. This is the final `3.x` release before Zod
4.0. To try it out:

```sh
npm install zod
```

#### Features

##### `z.string().date()`

Zod can now validate ISO 8601 date strings. Thanks
[@&#8203;igalklebanov](https://togithub.com/igalklebanov)!
[colinhacks/zod#1766

```ts
const schema = z.string().date();
schema.parse("2022-01-01"); // OK
```

##### `z.string().time()`

Zod can now validate ISO 8601 time strings. Thanks
[@&#8203;igalklebanov](https://togithub.com/igalklebanov)!
[colinhacks/zod#1766

```ts
const schema = z.string().time();
schema.parse("12:00:00"); // OK
```

You can specify sub-second precision using the `precision` option:

```ts
const schema = z.string().time({ precision: 3 });
schema.parse("12:00:00.123"); // OK
schema.parse("12:00:00.123456"); // Error
schema.parse("12:00:00"); // Error
```

##### `z.string().duration()`

Zod can now validate ISO 8601 duration strings. Thanks
[@&#8203;mastermatt](https://togithub.com/mastermatt)!
[colinhacks/zod#3265

```ts
const schema = z.string().duration();
schema.parse("P3Y6M4DT12H30M5S"); // OK
```

##### Improvements to `z.string().datetime()`

Thanks [@&#8203;bchrobot](https://togithub.com/bchrobot)
[colinhacks/zod#2522

You can now allow *unqualified* (timezone-less) datetimes using the
`local: true` flag.

```ts
const schema = z.string().datetime({ local: true });
schema.parse("2022-01-01T12:00:00"); // OK
```

Plus, Zod now validates the day-of-month correctly to ensure no invalid
dates (e.g. February 30th) pass validation. Thanks
[@&#8203;szamanr](https://togithub.com/szamanr)!
[colinhacks/zod#3391

##### `z.string().base64()`

Zod can now validate base64 strings. Thanks
[@&#8203;StefanTerdell](https://togithub.com/StefanTerdell)!
[colinhacks/zod#3047

```ts
const schema = z.string().base64();
schema.parse("SGVsbG8gV29ybGQ="); // OK
```

##### Improved discriminated unions

The following can now be used as discriminator keys in
`z.discriminatedUnion()`:

-   `ZodOptional`
-   `ZodNullable`
-   `ZodReadonly`
-   `ZodBranded`
-   `ZodCatch`

```ts
const schema = z.discriminatedUnion("type", [
  z.object({ type: z.literal("A").optional(), value: z.number() }),
  z.object({ type: z.literal("B").nullable(), value: z.string() }),
  z.object({ type: z.literal("C").readonly(), value: z.boolean() }),
  z.object({ type: z.literal("D").brand<"D">(), value: z.boolean() }),
  z.object({ type: z.literal("E").catch("E"), value: z.unknown() }),
]);
```

##### Misc

- feature: allow falsy error message by
[@&#8203;fernandollisboa](https://togithub.com/fernandollisboa) in
[colinhacks/zod#3178
- feature: add attribute message to enum validatiion by
[@&#8203;fernandollisboa](https://togithub.com/fernandollisboa) in
[colinhacks/zod#3169

#### Breaking changes

There are no breaking changes to the public API of Zod. However some
changes can impact ecosystem tools that rely on Zod internals.

##### `ZodFirstPartySchemaTypes`

Three new types have been added to the `ZodFirstPartySchemaTypes` union.
This may impact some codegen libraries.
[colinhacks/zod#3247

```diff
+  | ZodPipeline<any, any>
+  | ZodReadonly<any>
+  | ZodSymbol;
```

##### Default generics in `ZodType`

The third argument of the `ZodType` base class now defaults to
`unknown`. This makes it easier to define recursive schemas and write
generic functions that accept Zod schemas.

```diff
- class ZodType<Output = any, Def extends ZodTypeDef = ZodTypeDef, Input = Output> {}
+ class ZodType<Output = unknown, Def extends ZodTypeDef = ZodTypeDef, Input = unknown> {}
```

##### Unrecognized keys in `.pick()` and `.omit()`

This version fixes a bug where unknown keys were accidentally accepted
in `.pick()` and `omit()`. This has been fixed, which could cause
compiler errors in some user code.
[colinhacks/zod#3255

```ts
z.object({ 
  name: z.string() 
}).pick({
  notAKey: true // no longer allowed
})
```

#### Bugfixes and performance

- Bugfix: Enum.extract/exclude should not remove error mapping by
[@&#8203;shaharke](https://togithub.com/shaharke) in
[colinhacks/zod#3240
- Added latest stable Node and TypeScript versions to test matrix for
up-to-date testing. by [@&#8203;m10rten](https://togithub.com/m10rten)
in
[colinhacks/zod#3278
- Add types to `ZodFirstPartySchemaTypes` by
[@&#8203;MatthijsMud](https://togithub.com/MatthijsMud) in
[colinhacks/zod#3247
- fix: make `input` of `.required()` readonly by
[@&#8203;KATT](https://togithub.com/KATT) in
[colinhacks/zod#3301
- add never props to safe parse return types by
[@&#8203;schicks](https://togithub.com/schicks) in
[colinhacks/zod#3295
- Reporting errors of the preprocess that is the second property of
object by [@&#8203;yukukotani](https://togithub.com/yukukotani) in
[colinhacks/zod#2912
- Improve `addQuestionMarks`, fix
[#&#8203;2184](https://togithub.com/colinhacks/zod/issues/2184) by
[@&#8203;colinhacks](https://togithub.com/colinhacks) in
[colinhacks/zod#3352
- fix for njs by [@&#8203;dvv](https://togithub.com/dvv) in
[colinhacks/zod#3063
- only look in `src` for `bun test` by
[@&#8203;rotu](https://togithub.com/rotu) in
[colinhacks/zod#3038
- Restrict .pick()/.omit() mask type to only known properties by
[@&#8203;petrovmiroslav](https://togithub.com/petrovmiroslav) in
[colinhacks/zod#3255
- Make EnumValues generic by
[@&#8203;IlyaSemenov](https://togithub.com/IlyaSemenov) in
[colinhacks/zod#2338
- perf: avoid unnecessary error maps by
[@&#8203;xuxucode](https://togithub.com/xuxucode) in
[colinhacks/zod#2532
- Bugfix: z.record().parse should not filter out undefined values by
[@&#8203;raik-casimiro](https://togithub.com/raik-casimiro) in
[colinhacks/zod#3251
- Use Set.has instead of Array.indexOf for enum comparison (perf
improvement) by [@&#8203;jmike](https://togithub.com/jmike) in
[colinhacks/zod#2659
- \[2888] fix emails with single quotes failing validation by
[@&#8203;Mansehej](https://togithub.com/Mansehej) in
[colinhacks/zod#2889
- Bugfix: Commas are incorrectly allowed in email regex. by
[@&#8203;mokemoko](https://togithub.com/mokemoko) in
[colinhacks/zod#3286
- Fix regex in cuid2 validation to be what cuid2 library expects by
[@&#8203;etareduction](https://togithub.com/etareduction) in
[colinhacks/zod#2961
- Make depcruise pass by [@&#8203;rotu](https://togithub.com/rotu) in
[colinhacks/zod#3037
- Faster ipv4 parsing by
[@&#8203;colinhacks](https://togithub.com/colinhacks) in
[colinhacks/zod#3413

#### Docs and ecosystem

- chore: add pastel package to ecosystem by
[@&#8203;jlarmstrongiv](https://togithub.com/jlarmstrongiv) in
[colinhacks/zod#2949
- added required styles. by
[@&#8203;Ansh101112](https://togithub.com/Ansh101112) in
[colinhacks/zod#2955
- Feature/better chinese translate by
[@&#8203;NWYLZW](https://togithub.com/NWYLZW) in
[colinhacks/zod#2988
- Fix z.instanceof example by
[@&#8203;alexnault](https://togithub.com/alexnault) in
[colinhacks/zod#3003
- Add documentation to Zod enum exclude/extract functions by
[@&#8203;shaharke](https://togithub.com/shaharke) in
[colinhacks/zod#3044
- Add docs for coercing nullish values by
[@&#8203;rbuetzer](https://togithub.com/rbuetzer) in
[colinhacks/zod#3067
- Adds `zod-dev` utility to eco-system section by
[@&#8203;schalkventer](https://togithub.com/schalkventer) in
[colinhacks/zod#3113
- Add zhttp library to docs by
[@&#8203;evertdespiegeleer](https://togithub.com/evertdespiegeleer) in
[colinhacks/zod#3134
- fixed Readme typo in NaNs example by
[@&#8203;RashJrEdmund](https://togithub.com/RashJrEdmund) in
[colinhacks/zod#3181
- adds zod-config library to the ecosystem by
[@&#8203;alexmarqs](https://togithub.com/alexmarqs) in
[colinhacks/zod#3200
- docs: update link and description of conform integration by
[@&#8203;g1eny0ung](https://togithub.com/g1eny0ung) in
[colinhacks/zod#3238
- Update README.md by
[@&#8203;yugmade13](https://togithub.com/yugmade13) in
[colinhacks/zod#3317
- feat: overhaul generics section of readme to include more details on
z.ZodTypeAny usage by [@&#8203;braden-w](https://togithub.com/braden-w)
in
[colinhacks/zod#3321
- Fix small typos by [@&#8203;mmorearty](https://togithub.com/mmorearty)
in
[colinhacks/zod#3336
- docs: update Chinese docs and correct some of the typos by
[@&#8203;jiechen257](https://togithub.com/jiechen257) in
[colinhacks/zod#3338
- docs: improve chinese readme by
[@&#8203;luckrnx09](https://togithub.com/luckrnx09) in
[colinhacks/zod#3371
- Add java-to-zod in X to Zod section by
[@&#8203;ivangreene](https://togithub.com/ivangreene) in
[colinhacks/zod#3385
- docs: add `orval` to "X to Zod" ecosystems by
[@&#8203;soartec-lab](https://togithub.com/soartec-lab) in
[colinhacks/zod#3397

#### New Contributors

- [@&#8203;jlarmstrongiv](https://togithub.com/jlarmstrongiv) made their
first contribution in
[colinhacks/zod#2949
- [@&#8203;Ansh101112](https://togithub.com/Ansh101112) made their first
contribution in
[colinhacks/zod#2955
- [@&#8203;NWYLZW](https://togithub.com/NWYLZW) made their first
contribution in
[colinhacks/zod#2988
- [@&#8203;alexnault](https://togithub.com/alexnault) made their first
contribution in
[colinhacks/zod#3003
- [@&#8203;shaharke](https://togithub.com/shaharke) made their first
contribution in
[colinhacks/zod#3044
- [@&#8203;rbuetzer](https://togithub.com/rbuetzer) made their first
contribution in
[colinhacks/zod#3067
- [@&#8203;schalkventer](https://togithub.com/schalkventer) made their
first contribution in
[colinhacks/zod#3113
- [@&#8203;evertdespiegeleer](https://togithub.com/evertdespiegeleer)
made their first contribution in
[colinhacks/zod#3134
- [@&#8203;RashJrEdmund](https://togithub.com/RashJrEdmund) made their
first contribution in
[colinhacks/zod#3181
- [@&#8203;alexmarqs](https://togithub.com/alexmarqs) made their first
contribution in
[colinhacks/zod#3200
- [@&#8203;JonnyBurger](https://togithub.com/JonnyBurger) made their
first contribution in
[colinhacks/zod#3214
- [@&#8203;fernandollisboa](https://togithub.com/fernandollisboa) made
their first contribution in
[colinhacks/zod#3178
- [@&#8203;g1eny0ung](https://togithub.com/g1eny0ung) made their first
contribution in
[colinhacks/zod#3238
- [@&#8203;m10rten](https://togithub.com/m10rten) made their first
contribution in
[colinhacks/zod#3278
- [@&#8203;MatthijsMud](https://togithub.com/MatthijsMud) made their
first contribution in
[colinhacks/zod#3247
- [@&#8203;yugmade13](https://togithub.com/yugmade13) made their first
contribution in
[colinhacks/zod#3317
- [@&#8203;braden-w](https://togithub.com/braden-w) made their first
contribution in
[colinhacks/zod#3321
- [@&#8203;mmorearty](https://togithub.com/mmorearty) made their first
contribution in
[colinhacks/zod#3336
- [@&#8203;schicks](https://togithub.com/schicks) made their first
contribution in
[colinhacks/zod#3295
- [@&#8203;yukukotani](https://togithub.com/yukukotani) made their first
contribution in
[colinhacks/zod#2912
- [@&#8203;jiechen257](https://togithub.com/jiechen257) made their first
contribution in
[colinhacks/zod#3338
- [@&#8203;luckrnx09](https://togithub.com/luckrnx09) made their first
contribution in
[colinhacks/zod#3371
- [@&#8203;dvv](https://togithub.com/dvv) made their first contribution
in
[colinhacks/zod#3063
- [@&#8203;rotu](https://togithub.com/rotu) made their first
contribution in
[colinhacks/zod#3038
- [@&#8203;petrovmiroslav](https://togithub.com/petrovmiroslav) made
their first contribution in
[colinhacks/zod#3255
- [@&#8203;ivoilic](https://togithub.com/ivoilic) made their first
contribution in
[colinhacks/zod#2364
- [@&#8203;telemakhos](https://togithub.com/telemakhos) made their first
contribution in
[colinhacks/zod#3388
- [@&#8203;bchrobot](https://togithub.com/bchrobot) made their first
contribution in
[colinhacks/zod#2522
- [@&#8203;szamanr](https://togithub.com/szamanr) made their first
contribution in
[colinhacks/zod#3391
- [@&#8203;ivangreene](https://togithub.com/ivangreene) made their first
contribution in
[colinhacks/zod#3385
- [@&#8203;xuxucode](https://togithub.com/xuxucode) made their first
contribution in
[colinhacks/zod#2532
- [@&#8203;raik-casimiro](https://togithub.com/raik-casimiro) made their
first contribution in
[colinhacks/zod#3251
- [@&#8203;jmike](https://togithub.com/jmike) made their first
contribution in
[colinhacks/zod#2659
- [@&#8203;Mansehej](https://togithub.com/Mansehej) made their first
contribution in
[colinhacks/zod#2889
- [@&#8203;mokemoko](https://togithub.com/mokemoko) made their first
contribution in
[colinhacks/zod#3286
- [@&#8203;etareduction](https://togithub.com/etareduction) made their
first contribution in
[colinhacks/zod#2961
- [@&#8203;mastermatt](https://togithub.com/mastermatt) made their first
contribution in
[colinhacks/zod#3265
- [@&#8203;soartec-lab](https://togithub.com/soartec-lab) made their
first contribution in
[colinhacks/zod#3397

**Full Changelog**:
colinhacks/zod@v3.22.4...v3.23.0

###
[`v3.22.5`](https://togithub.com/colinhacks/zod/compare/v3.22.4...e7a9b9b3033991be6b4225f1be21da39c250bbb0)

[Compare
Source](https://togithub.com/colinhacks/zod/compare/v3.22.4...e7a9b9b3033991be6b4225f1be21da39c250bbb0)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on Monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/autoblocksai/autoblocks-examples).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMTMuMSIsInVwZGF0ZWRJblZlciI6IjM3LjMxMy4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
github-merge-queue bot pushed a commit to camunda/camunda that referenced this pull request Apr 24, 2024
…17768)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[slackapi/slack-github-action](https://togithub.com/slackapi/slack-github-action)
| action | minor | `v1.25.0` -> `v1.26.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>slackapi/slack-github-action
(slackapi/slack-github-action)</summary>

###
[`v1.26.0`](https://togithub.com/slackapi/slack-github-action/releases/tag/v1.26.0):
Slack Send V1.26.0

[Compare
Source](https://togithub.com/slackapi/slack-github-action/compare/v1.25.0...v1.26.0)

#### What's Changed

This release provides an escape hatch for sending the JSON content of a
payload file exactly as is, without replacing any templated variables!

Previously a payload file was parsed and templated variables were
replaced with values from `github.context` and `github.env`. Any
undefined variables were replaced with `???` in this process, which
might have caused questions.

That remains the default behavior, but now the JSON contents of a
payload file can be sent exactly as written by setting the
`payload-file-path-parsed` input to `false`:

```yaml
- name: Send custom JSON data to Slack workflow
  id: slack
  uses: slackapi/slack-github-action@v1.26.0
  with:
    payload-file-path: "./payload-slack-content.json"
    payload-file-path-parsed: false
  env:
    SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
```

With this change, the contents of the example
`payload-slack-content.json` will be sent to a webhook URL exactly as
is!

#### Recent commits

##### Enhancements

- allow to use json file as is without replacing/parsing anything by
[@&#8203;talgendler](https://togithub.com/talgendler) in
[slackapi/slack-github-action#299

##### Documentation

- docs(readme): adjust whitespace in env assignment by
[@&#8203;paulo9mv](https://togithub.com/paulo9mv) in
[slackapi/slack-github-action#296

##### Maintenance

- ci(test): collect environment secrets from a prepared staging
environment by [@&#8203;zimeg](https://togithub.com/zimeg) in
[slackapi/slack-github-action#294
- ci(test): share environment secrets with pull requests from forked prs
by [@&#8203;zimeg](https://togithub.com/zimeg) in
[slackapi/slack-github-action#297

##### Dependencies

- Bump eslint-plugin-jsdoc from 46.10.1 to 48.2.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#295
- Bump eslint from 8.56.0 to 8.57.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#289
- Bump mocha from 10.2.0 to 10.3.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#288
- Bump https-proxy-agent from 7.0.2 to 7.0.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#290
- Bump [@&#8203;slack/web-api](https://togithub.com/slack/web-api) from
6.12.0 to 7.0.2 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[slackapi/slack-github-action#287
- Bump mocha from 10.3.0 to 10.4.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#300
- Bump axios from 1.6.7 to 1.6.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#301
- Bump eslint-plugin-jsdoc from 48.2.1 to 48.2.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#302

#### New Contributors

- [@&#8203;paulo9mv](https://togithub.com/paulo9mv) made their first
contribution in
[slackapi/slack-github-action#296
- [@&#8203;talgendler](https://togithub.com/talgendler) made their first
contribution in
[slackapi/slack-github-action#299

**Full Changelog**:
slackapi/slack-github-action@v1.25.0...v1.26.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/camunda/zeebe).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMTMuMSIsInVwZGF0ZWRJblZlciI6IjM3LjMxMy4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhdXRvbWVyZ2UiXX0=-->
github-merge-queue bot pushed a commit to camunda/camunda that referenced this pull request Apr 24, 2024
…17768)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[slackapi/slack-github-action](https://togithub.com/slackapi/slack-github-action)
| action | minor | `v1.25.0` -> `v1.26.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>slackapi/slack-github-action
(slackapi/slack-github-action)</summary>

###
[`v1.26.0`](https://togithub.com/slackapi/slack-github-action/releases/tag/v1.26.0):
Slack Send V1.26.0

[Compare
Source](https://togithub.com/slackapi/slack-github-action/compare/v1.25.0...v1.26.0)

#### What's Changed

This release provides an escape hatch for sending the JSON content of a
payload file exactly as is, without replacing any templated variables!

Previously a payload file was parsed and templated variables were
replaced with values from `github.context` and `github.env`. Any
undefined variables were replaced with `???` in this process, which
might have caused questions.

That remains the default behavior, but now the JSON contents of a
payload file can be sent exactly as written by setting the
`payload-file-path-parsed` input to `false`:

```yaml
- name: Send custom JSON data to Slack workflow
  id: slack
  uses: slackapi/slack-github-action@v1.26.0
  with:
    payload-file-path: "./payload-slack-content.json"
    payload-file-path-parsed: false
  env:
    SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
```

With this change, the contents of the example
`payload-slack-content.json` will be sent to a webhook URL exactly as
is!

#### Recent commits

##### Enhancements

- allow to use json file as is without replacing/parsing anything by
[@&#8203;talgendler](https://togithub.com/talgendler) in
[slackapi/slack-github-action#299

##### Documentation

- docs(readme): adjust whitespace in env assignment by
[@&#8203;paulo9mv](https://togithub.com/paulo9mv) in
[slackapi/slack-github-action#296

##### Maintenance

- ci(test): collect environment secrets from a prepared staging
environment by [@&#8203;zimeg](https://togithub.com/zimeg) in
[slackapi/slack-github-action#294
- ci(test): share environment secrets with pull requests from forked prs
by [@&#8203;zimeg](https://togithub.com/zimeg) in
[slackapi/slack-github-action#297

##### Dependencies

- Bump eslint-plugin-jsdoc from 46.10.1 to 48.2.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#295
- Bump eslint from 8.56.0 to 8.57.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#289
- Bump mocha from 10.2.0 to 10.3.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#288
- Bump https-proxy-agent from 7.0.2 to 7.0.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#290
- Bump [@&#8203;slack/web-api](https://togithub.com/slack/web-api) from
6.12.0 to 7.0.2 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[slackapi/slack-github-action#287
- Bump mocha from 10.3.0 to 10.4.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#300
- Bump axios from 1.6.7 to 1.6.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#301
- Bump eslint-plugin-jsdoc from 48.2.1 to 48.2.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#302

#### New Contributors

- [@&#8203;paulo9mv](https://togithub.com/paulo9mv) made their first
contribution in
[slackapi/slack-github-action#296
- [@&#8203;talgendler](https://togithub.com/talgendler) made their first
contribution in
[slackapi/slack-github-action#299

**Full Changelog**:
slackapi/slack-github-action@v1.25.0...v1.26.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/camunda/zeebe).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMTMuMSIsInVwZGF0ZWRJblZlciI6IjM3LjMxMy4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhdXRvbWVyZ2UiXX0=-->
nicolewhite pushed a commit to autoblocksai/javascript-sdk that referenced this pull request Apr 29, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[slackapi/slack-github-action](https://togithub.com/slackapi/slack-github-action)
| action | minor | `v1.25.0` -> `v1.26.0` |

---

### Release Notes

<details>
<summary>slackapi/slack-github-action
(slackapi/slack-github-action)</summary>

###
[`v1.26.0`](https://togithub.com/slackapi/slack-github-action/releases/tag/v1.26.0):
Slack Send V1.26.0

[Compare
Source](https://togithub.com/slackapi/slack-github-action/compare/v1.25.0...v1.26.0)

#### What's Changed

This release provides an escape hatch for sending the JSON content of a
payload file exactly as is, without replacing any templated variables!

Previously a payload file was parsed and templated variables were
replaced with values from `github.context` and `github.env`. Any
undefined variables were replaced with `???` in this process, which
might have caused questions.

That remains the default behavior, but now the JSON contents of a
payload file can be sent exactly as written by setting the
`payload-file-path-parsed` input to `false`:

```yaml
- name: Send custom JSON data to Slack workflow
  id: slack
  uses: slackapi/slack-github-action@v1.26.0
  with:
    payload-file-path: "./payload-slack-content.json"
    payload-file-path-parsed: false
  env:
    SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
```

With this change, the contents of the example
`payload-slack-content.json` will be sent to a webhook URL exactly as
is!

#### Recent commits

##### Enhancements

- allow to use json file as is without replacing/parsing anything by
[@&#8203;talgendler](https://togithub.com/talgendler) in
[slackapi/slack-github-action#299

##### Documentation

- docs(readme): adjust whitespace in env assignment by
[@&#8203;paulo9mv](https://togithub.com/paulo9mv) in
[slackapi/slack-github-action#296

##### Maintenance

- ci(test): collect environment secrets from a prepared staging
environment by [@&#8203;zimeg](https://togithub.com/zimeg) in
[slackapi/slack-github-action#294
- ci(test): share environment secrets with pull requests from forked prs
by [@&#8203;zimeg](https://togithub.com/zimeg) in
[slackapi/slack-github-action#297

##### Dependencies

- Bump eslint-plugin-jsdoc from 46.10.1 to 48.2.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#295
- Bump eslint from 8.56.0 to 8.57.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#289
- Bump mocha from 10.2.0 to 10.3.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#288
- Bump https-proxy-agent from 7.0.2 to 7.0.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#290
- Bump [@&#8203;slack/web-api](https://togithub.com/slack/web-api) from
6.12.0 to 7.0.2 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[slackapi/slack-github-action#287
- Bump mocha from 10.3.0 to 10.4.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#300
- Bump axios from 1.6.7 to 1.6.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#301
- Bump eslint-plugin-jsdoc from 48.2.1 to 48.2.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#302

#### New Contributors

- [@&#8203;paulo9mv](https://togithub.com/paulo9mv) made their first
contribution in
[slackapi/slack-github-action#296
- [@&#8203;talgendler](https://togithub.com/talgendler) made their first
contribution in
[slackapi/slack-github-action#299

**Full Changelog**:
slackapi/slack-github-action@v1.25.0...v1.26.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on Monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/autoblocksai/javascript-sdk).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMjEuMiIsInVwZGF0ZWRJblZlciI6IjM3LjMyMS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
nicolewhite pushed a commit to autoblocksai/cli that referenced this pull request Apr 29, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[slackapi/slack-github-action](https://togithub.com/slackapi/slack-github-action)
| action | minor | `v1.25.0` -> `v1.26.0` |

---

### Release Notes

<details>
<summary>slackapi/slack-github-action
(slackapi/slack-github-action)</summary>

###
[`v1.26.0`](https://togithub.com/slackapi/slack-github-action/releases/tag/v1.26.0):
Slack Send V1.26.0

[Compare
Source](https://togithub.com/slackapi/slack-github-action/compare/v1.25.0...v1.26.0)

#### What's Changed

This release provides an escape hatch for sending the JSON content of a
payload file exactly as is, without replacing any templated variables!

Previously a payload file was parsed and templated variables were
replaced with values from `github.context` and `github.env`. Any
undefined variables were replaced with `???` in this process, which
might have caused questions.

That remains the default behavior, but now the JSON contents of a
payload file can be sent exactly as written by setting the
`payload-file-path-parsed` input to `false`:

```yaml
- name: Send custom JSON data to Slack workflow
  id: slack
  uses: slackapi/slack-github-action@v1.26.0
  with:
    payload-file-path: "./payload-slack-content.json"
    payload-file-path-parsed: false
  env:
    SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
```

With this change, the contents of the example
`payload-slack-content.json` will be sent to a webhook URL exactly as
is!

#### Recent commits

##### Enhancements

- allow to use json file as is without replacing/parsing anything by
[@&#8203;talgendler](https://togithub.com/talgendler) in
[slackapi/slack-github-action#299

##### Documentation

- docs(readme): adjust whitespace in env assignment by
[@&#8203;paulo9mv](https://togithub.com/paulo9mv) in
[slackapi/slack-github-action#296

##### Maintenance

- ci(test): collect environment secrets from a prepared staging
environment by [@&#8203;zimeg](https://togithub.com/zimeg) in
[slackapi/slack-github-action#294
- ci(test): share environment secrets with pull requests from forked prs
by [@&#8203;zimeg](https://togithub.com/zimeg) in
[slackapi/slack-github-action#297

##### Dependencies

- Bump eslint-plugin-jsdoc from 46.10.1 to 48.2.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#295
- Bump eslint from 8.56.0 to 8.57.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#289
- Bump mocha from 10.2.0 to 10.3.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#288
- Bump https-proxy-agent from 7.0.2 to 7.0.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#290
- Bump [@&#8203;slack/web-api](https://togithub.com/slack/web-api) from
6.12.0 to 7.0.2 by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[slackapi/slack-github-action#287
- Bump mocha from 10.3.0 to 10.4.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#300
- Bump axios from 1.6.7 to 1.6.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#301
- Bump eslint-plugin-jsdoc from 48.2.1 to 48.2.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[slackapi/slack-github-action#302

#### New Contributors

- [@&#8203;paulo9mv](https://togithub.com/paulo9mv) made their first
contribution in
[slackapi/slack-github-action#296
- [@&#8203;talgendler](https://togithub.com/talgendler) made their first
contribution in
[slackapi/slack-github-action#299

**Full Changelog**:
slackapi/slack-github-action@v1.25.0...v1.26.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on Monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/autoblocksai/cli).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMjEuMiIsInVwZGF0ZWRJblZlciI6IjM3LjMyMS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
github_actions Pull requests that update GitHub Actions code security tests
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants