chore(deps): bump @slack/socket-mode from 2.0.7 to 3.0.0

[dependabot]

Bumps @slack/socket-mode from 2.0.7 to 3.0.0.

Release notes

Sourced from @​slack/socket-mode's releases.

@​slack/socket-mode@​3.0.0

Major Changes

• fc98c8c: Drop Node.js 18 support. The minimum supported Node.js version is now 20.

• fc98c8c: Redesigned error handling to use proper Error subclasses instead of plain objects with a code property.

  Migration: Replace if (error.code === ErrorCode.WebsocketError) with if (error instanceof SMWebsocketError).

  New error classes (all extend a common SlackSocketModeError abstract base class, which extends Error):

  • SMPlatformError — Slack platform returned an error event
  • SMWebsocketError — WebSocket connection failure (original error in cause)
  • SMNoReplyReceivedError — Timed out waiting for a reply to an acknowledgement
  • SMSendWhileDisconnectedError — Attempted to send while not connected
  • SMSendWhileNotReadyError — Attempted to send before the connection was ready

  Catch any socket-mode error with if (error instanceof SlackSocketModeError).

  Removed factory functions (use new with the corresponding class instead):

  • websocketErrorWithOriginal() → new SMWebsocketError(original)
  • platformErrorFromEvent() → new SMPlatformError(event)
  • noReplyReceivedError() → new SMNoReplyReceivedError()
  • sendWhileDisconnectedError() → new SMSendWhileDisconnectedError()
  • sendWhileNotReadyError() → new SMSendWhileNotReadyError()

  The CodedError interface is deprecated — use instanceof checks with specific error classes instead. The error.code property still exists for backward-compatible checks, but error.name values changed from generic 'Error' to descriptive class names (e.g., 'SMWebsocketError').

• fc98c8c: Replaced the ws WebSocket library with a spec-compliant WebSocket implementation backed by undici. undici@^7 is now a peer dependency that must be installed alongside @slack/socket-mode:

  npm install @slack/socket-mode undici@^7

  Removed options:

  • clientOptions.agent (the httpAgent passed to the underlying web-api client). Use the new top-level dispatcher option instead. The dispatcher handles both the WebSocket connection and HTTP API calls (unless clientOptions.fetch is also provided, in which case dispatcher only applies to WebSocket).

  New dispatcher option:

  import { SocketModeClient } from "@slack/socket-mode";
  import { ProxyAgent } from "undici";
  const client = new SocketModeClient({
  appToken: process.env.SLACK_APP_TOKEN,
  dispatcher: new ProxyAgent("http://proxy:3128"),
  });

... (truncated)

Commits

• 70e15b8 chore: release (#2653)
• fc98c8c feat: Node Slack SDK major version release candidate (#2603)
• c37b47e docs: updates webhook page to match readme (#2658)
• bb49d99 fix(web-api): redact response body in debug logs (#2652)
• 2b6a0ce chore: release (#2650)
• a2f6e77 feat(webhook): add opt-in retries to IncomingWebhook and WebhookTrigger (#2641)
• a5bd5c8 feat(webhook): add WebhookTrigger class for Workflow Builder triggers (#2615)
• b0e335b chore: release (#2649)
• a795b86 feat: expand app manifest types for agent apps (#2648)
• 12b94a2 chore: release (#2642)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)