chore(deps): update github actions

[alma-renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
codex-/return-dispatch	action	major	v1 -> v2
peter-evans/create-pull-request	action	major	v6 -> v7
slackapi/slack-github-action	action	minor	v1.26.0 -> v1.27.0
ubuntu	github-runner	major	22.04 -> 24.04

---

Release Notes

codex-/return-dispatch (codex-/return-dispatch)

v2

Compare Source

peter-evans/create-pull-request (peter-evans/create-pull-request)

v7

Compare Source

slackapi/slack-github-action (slackapi/slack-github-action)

v1.27.0: Slack Send V1.27.0

Compare Source

What's changed

This release introduces an optional payload-delimiter parameter for flattening nested objects with a customized delimiter before the payload is sent to Slack Workflow Builder when using workflow webhook triggers.

  - name: Send a custom flattened payload
    uses: slackapi/[email protected]
+   with:
+     payload-delimiter: "_"
    env:
      SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}

Setting this value to an underscore (_) is recommended when using nested inputs within Workflow Builder to match expected input formats of Workflow Builder, but the actual value can be changed to something else! This "flattening" behavior did exist prior to this version, but used a period (.) which is not valid for webook inputs in Workflow Builder.

Flattening example

The resulting output of flattened objects is not always clear, but the following can hopefully serve as a quick reference as well as these specs when using _ as the delimiter:

Input:

{
    "apples": "tree",
    "bananas": {
        "truthiness": true
    }
}

Output:

{
    "apples": "tree",
    "bananas_truthiness": "true"
}

Notice that bananas_truthiness is also stringified in this process, as part of updating values to match the expected inputs of Workflow Builder!

Changes

In addition to the changes above, the following lists all of the changes since the prior version with the complete changelog changes found here: slackapi/slack-github-action@v1.26.0...v1.27.0

🎁 Enhancements

• Make payload delimiter configurable in https://github.com/slackapi/slack-github-action/pull/281 - thanks @​rzumer!

📚 Documentation

• doc: how to reply to a message in https://github.com/slackapi/slack-github-action/pull/309 - thanks @​WilliamBergamin!

🔒 Security

• chore(deps): bump axios to 1.7.5 to address CVE-2024-39338 in https://github.com/slackapi/slack-github-action/pull/332 - thanks @​zimeg!

🧪 Maintenance

• Add codecov coverage uploading in https://github.com/slackapi/slack-github-action/pull/308 - thanks @​filmaj!
• ci(test): run integration tests in a single sequential environment in https://github.com/slackapi/slack-github-action/pull/310 - thanks @​zimeg!

📦 Dependencies

• Bump eslint-plugin-jsdoc from 48.2.2 to 48.2.3 in https://github.com/slackapi/slack-github-action/pull/305 - thanks @​dependabot!
• Bump @​slack/web-api from 7.0.2 to 7.0.4 in https://github.com/slackapi/slack-github-action/pull/307 - thanks @​dependabot!
• build(deps-dev): bump sinon from 17.0.1 to 18.0.0 in https://github.com/slackapi/slack-github-action/pull/313 - thanks @​dependabot!
• build(deps-dev): bump eslint-plugin-jsdoc from 48.2.3 to 48.2.7 in https://github.com/slackapi/slack-github-action/pull/314 - thanks @​dependabot!
• build(deps): bump axios from 1.6.8 to 1.7.2 in https://github.com/slackapi/slack-github-action/pull/315 - thanks @​dependabot!
• build(deps): bump codecov/codecov-action from 4.0.1 to 4.4.1 in https://github.com/slackapi/slack-github-action/pull/316 - thanks @​dependabot!
• build(deps-dev): bump nyc from 15.1.0 to 17.0.0 in https://github.com/slackapi/slack-github-action/pull/319 - thanks @​dependabot!
• build(deps-dev): bump eslint-plugin-jsdoc from 48.2.7 to 48.5.0 in https://github.com/slackapi/slack-github-action/pull/321 - thanks @​dependabot!
• build(deps-dev): bump mocha from 10.4.0 to 10.5.2 in https://github.com/slackapi/slack-github-action/pull/322 - thanks @​dependabot!
• build(deps): bump codecov/codecov-action from 4.4.1 to 4.5.0 in https://github.com/slackapi/slack-github-action/pull/324 - thanks @​dependabot!
• build(deps): bump @​slack/web-api from 7.0.4 to 7.2.0 in https://github.com/slackapi/slack-github-action/pull/323 - thanks @​dependabot!
• build(deps): bump https-proxy-agent from 7.0.4 to 7.0.5 in https://github.com/slackapi/slack-github-action/pull/320 - thanks @​dependabot!
• build(deps-dev): bump eslint-plugin-jsdoc from 48.5.0 to 48.10.2 in https://github.com/slackapi/slack-github-action/pull/325 - thanks @​dependabot!
• build(deps-dev): bump chai from 4.4.1 to 4.5.0 in https://github.com/slackapi/slack-github-action/pull/326 - thanks @​dependabot!
• build(deps): bump @​slack/web-api from 7.2.0 to 7.3.2 in https://github.com/slackapi/slack-github-action/pull/327 - thanks @​dependabot!
• build(deps-dev): bump mocha from 10.5.2 to 10.7.0 in https://github.com/slackapi/slack-github-action/pull/328 - thanks @​dependabot!

🎉 New contributors

• @​rzumer made their first contribution in https://github.com/slackapi/slack-github-action/pull/281!

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-PIPELINE-0008
Check Name: Unrestricted dependency version
Severity: MEDIUM
Message: Dependency peter-evans/create-pull-request v7 version should be pinned to the commit sha
[This comment was created by Aqua Pipeline]

[github-actions]

⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-PIPELINE-0008
Check Name: Unrestricted dependency version
Severity: MEDIUM
Message: Dependency peter-evans/create-pull-request v7 version should be pinned to the commit sha
[This comment was created by Aqua Pipeline]

[github-actions]

⏳E2E tests are currently running.
➡️ You can follow their progression here.

[sonarcloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[github-actions]

❌ E2E tests have failed.
➡️ You can find the results here.