chore(actions)(deps): bump slackapi/slack-github-action from 1.27.0 to 4.0.0

[dependabot]

Bumps slackapi/slack-github-action from 1.27.0 to 4.0.0.

Release notes

Sourced from slackapi/slack-github-action's releases.

Slack GitHub Action v4.0.0

Major Changes

• b1974f0: build: parse yaml with more strict multiline indentation rules

  Internal dependencies of js-yaml@v5 make YAML parsing more strict and compliant with the YAML specification. Indentation is now required for values that span multiple lines against the base value.

  See the YAML line prefixes spec for the expected indentation rule:

    channel: "C0123"
    text: "first line
  
  second line"
  
  
  second line"

Patch Changes

• 654bb72: chore: provide global fetch proxied configurations with updates to web api and webhook packages

Slack GitHub Action v3.0.5

Patch Changes

• 96fddbe: fix: revert multiline yaml parsing indentation change

Slack GitHub Action v3.0.4

Patch Changes

• fa03fe4: refactor: send webhooks with the @slack/webhook package

Slack GitHub Action v3.0.3

Patch Changes

• 66834e4: feat: add instrumentation to address error rates

Slack GitHub Action v3.0.2

Patch Changes

• 79529d7: fix: resolve url.parse deprecation warning for webhook techniques

Slack GitHub Action v3.0.1

What's Changed

Alongside the breaking changes of @v3.0.0 and a new technique to run Slack CLI commands, we tried the wrong name to publish to the GitHub Marketplace 🐙 This action is now noted as The Slack GitHub Action in listings 🎶 ✨

... (truncated)

Changelog

Sourced from slackapi/slack-github-action's changelog.

slack-github-action

4.0.0

Major Changes

• b1974f0: build: parse yaml with more strict multiline indentation rules

  Internal dependencies of js-yaml@v5 make YAML parsing more strict and compliant with the YAML specification. Indentation is now required for values that span multiple lines against the base value.

  See the YAML line prefixes spec for the expected indentation rule:

    channel: "C0123"
    text: "first line
  
  second line"
  
  
  second line"

Patch Changes

• 654bb72: chore: provide global fetch proxied configurations with updates to web api and webhook packages

3.0.5

Patch Changes

• 96fddbe: fix: revert multiline yaml parsing indentation change

3.0.4

Patch Changes

• fa03fe4: refactor: send webhooks with the @slack/webhook package

3.0.3

Patch Changes

• 66834e4: feat: add instrumentation to address error rates

3.0.2

Patch Changes

• 79529d7: fix: resolve url.parse deprecation warning for webhook techniques

Commits

• dcb1066 chore: release
• 53861e0 chore: release (#645)
• b1974f0 build!: parse yaml with more strict multiline indentation rules (#640)
• 947ed06 build(deps): bump undici from 7.28.0 to 8.7.0 (#653)
• 03922a9 chore: track undici-types to the resolved undici version (#652)
• 31d473e build(deps-dev): bump typescript from 6.0.3 to 7.0.2 (#651)
• 3ca6997 build(deps-dev): bump sinon and @​types/sinon (#649)
• 26a5ad3 build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#647)
• 5092efb build(deps-dev): bump @​biomejs/biome from 2.5.3 to 2.5.4 (#650)
• 3548c3e build(deps): bump slackapi/slack-github-action from 3.0.3 to 3.0.5 (#646)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: automated, dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/slackapi/slack-github-action	dcb1066f776dd043e64d0e8ba94ca15cc7e1875d	🟢 7	Details Check Score Reason Code-Review 🟢 6 Found 4/6 approved changesets -- score normalized to 6 Maintained 🟢 10 30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10 Binary-Artifacts 🟢 10 no binaries found in the repo Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions 🟢 7 detected GitHub workflow tokens with excessive permissions Fuzzing ⚠️ 0 project is not fuzzed Security-Policy ⚠️ 0 security policy file not detected License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches SAST 🟢 10 SAST tool is run on all commits

Scanned Files

• .github/workflows/slack-notify.yml

[github-actions]

📊 Test Coverage Report

Metric	Coverage	CI Gate	Target
Lines	✅ 86.4% (11426/13228)	75%	80%
Statements	✅ 86.4% (11426/13228)	75%	80%
Branches	✅ 80.4% (1382/1719)	70%	80%
Functions	🟡 78.3% (257/328)	—	80%

🟡 CI gate passed — coverage below 80% target

Files below 80% coverage

File	Lines	Functions	Branches
src/middlewares/guardrail/GuardrailInterceptorHook.ts	76.6%	100.0%	73.0%
src/middlewares/guardrail/GuardrailMiddleware.ts	75.6%	66.7%	68.2%
src/middlewares/guardrail/GuardrailScanner.ts	93.4%	100.0%	64.3%
src/middlewares/guardrail/GuardrailWriteScannerHook.ts	71.0%	100.0%	78.2%
src/middlewares/guardrail/ModerationGuardHook.ts	74.8%	100.0%	58.8%
src/middlewares/guardrail/guards/canary-tracker.ts	98.0%	80.0%	66.7%
src/middlewares/guardrail/guards/content-moderation.ts	78.4%	100.0%	90.6%
src/middlewares/guardrail/guards/sensitive-paths.ts	94.1%	100.0%	77.3%
src/middlewares/guardrail/scanners/HeuristicScanner.ts	100.0%	100.0%	75.0%
src/middlewares/guardrail/scanners/RegexScanner.ts	90.3%	100.0%	78.6%
src/middlewares/guardrail/storage/ConfigStore.ts	88.0%	71.4%	80.0%
src/middlewares/guardrail/storage/DecisionLog.ts	70.3%	40.0%	100.0%
src/middlewares/hitl/Interceptor.ts	89.8%	83.3%	75.7%
src/middlewares/hitl/index.ts	85.8%	54.5%	66.7%
src/middlewares/hitl/script-content-loader.ts	47.8%	0.0%	100.0%
src/middlewares/hitl/tool-interceptor.ts	89.5%	100.0%	70.9%
src/middlewares/hitl/approval/ApprovalQueue.ts	79.7%	81.3%	78.6%
src/middlewares/hitl/approval/Arbitrator.ts	36.1%	25.0%	91.7%
src/middlewares/hitl/approval/TotpManager.ts	93.9%	87.5%	71.4%
src/middlewares/hitl/approval/approval-commands.ts	84.8%	100.0%	72.7%
src/middlewares/hitl/scoring/IrreversibilityScorer.ts	95.6%	100.0%	75.0%
src/middlewares/hitl/storage/BrowserSessionStore.ts	94.7%	100.0%	72.5%
src/middlewares/hitl/storage/DecisionLog.ts	70.6%	25.0%	100.0%
src/middlewares/hitl/storage/PolicyStore.ts	89.4%	85.7%	64.3%
src/middlewares/hitl/storage/StatsTracker.ts	91.2%	71.4%	80.0%
src/middlewares/pii-sanitizer/PiiSanitizerMiddleware.ts	75.7%	58.3%	74.2%
src/middlewares/pii-sanitizer/PolicyEngine.ts	96.6%	100.0%	70.6%
src/middlewares/pii-sanitizer/ScannerEngine.ts	70.0%	85.7%	87.5%
src/middlewares/pii-sanitizer/storage/DlpStore.ts	70.6%	18.2%	100.0%
src/middlewares/tool-call-limit/ToolCallLimitMiddleware.ts	86.8%	72.2%	86.4%
src/middlewares/tool-call-limit/storage/LimitPolicyStore.ts	74.6%	50.0%	75.0%

---

Generated by CI on commit 74a729c