build(deps): batch Dependabot updates (#93, #94, #97) #98

Merged

amoussa1229 merged 4 commits from chore/dependabot-batch into main

2026-07-21 19:50:07 +00:00

amoussa1229 commented

2026-07-21 19:44:46 +00:00

(Migrated from github.com)

Batches the open minor/patch Dependabot PRs onto one branch (cherry-picked, original commits preserved):

#93 @aws-sdk client-lambda + client-secrets-manager 3.1086.0 -> 3.1091.0 in /services/socket-mode
#94 minor-and-patch group: @notionhq/client, constructs, @aws-sdk dynamodb clients, aws-cdk
#97 axios 1.16.1 -> 1.18.1 in /services/socket-mode (lockfile-only, in-range)

The auto-merged lockfiles were verified consistent (npm install --package-lock-only produces no diff in either package). One extra commit: a .security-review/suppressions.json entry for npmaudit-brace-expansion (GHSA-3jxr-9vmj-r5cp) — bundled inside aws-cdk-lib, latest release still ships it, synth-time-only exposure; remove on the next aws-cdk-lib bump that clears npm audit.

Merging this supersedes #93, #94, #97.

Not included: #95 (@slack/web-api 7 -> 8) and #96 (@slack/socket-mode 2 -> 3) — majors held for separate confirmation; they are a lockstep pair (socket-mode 3 requires web-api ^8).

Batches the open minor/patch Dependabot PRs onto one branch (cherry-picked, original commits preserved): - #93 @aws-sdk client-lambda + client-secrets-manager 3.1086.0 -> 3.1091.0 in /services/socket-mode - #94 minor-and-patch group: @notionhq/client, constructs, @aws-sdk dynamodb clients, aws-cdk - #97 axios 1.16.1 -> 1.18.1 in /services/socket-mode (lockfile-only, in-range) The auto-merged lockfiles were verified consistent (`npm install --package-lock-only` produces no diff in either package). One extra commit: a `.security-review/suppressions.json` entry for `npmaudit-brace-expansion` (GHSA-3jxr-9vmj-r5cp) — bundled inside aws-cdk-lib, latest release still ships it, synth-time-only exposure; remove on the next aws-cdk-lib bump that clears npm audit. Merging this supersedes #93, #94, #97. Not included: #95 (@slack/web-api 7 -> 8) and #96 (@slack/socket-mode 2 -> 3) — majors held for separate confirmation; they are a lockstep pair (socket-mode 3 requires web-api ^8).

amoussa1229 commented

2026-07-21 19:44:48 +00:00

(Migrated from github.com)

@openswe please review this PR

👀 1

seahaven-openswe[bot] commented

2026-07-21 19:46:18 +00:00

(Migrated from github.com)

Review started — the reviewer agent is analyzing this PR now and will post its findings shortly.

seahaven-openswe[bot] (Migrated from github.com) reviewed 2026-07-21 19:48:55 +00:00

seahaven-openswe[bot] (Migrated from github.com) left a comment

✅ Open SWE Review: No issues found

Open SWE reviewed this PR and found no potential bugs to report.

Open in Web

## ✅ Open SWE Review: No issues found Open SWE reviewed this PR and found no potential bugs to report. [Open in Web](https://openswe.seahaven.com/agents/reviews/Sea-Haven-Industries/seahaven-slack-bot/98)

This repo is archived. You cannot comment on pull requests.

No reviewers