chore(deps): update module github.com/slack-go/slack to v0.26.0

[renovate-vince-riv]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/slack-go/slack	v0.17.3 → v0.26.0

---

Release Notes

slack-go/slack (github.com/slack-go/slack)

v0.26.0

Compare Source

What's Changed

• Unmarshal is_ext_shared_channel field in EventsAPIEvent by @​jjiang-stripe in #​1565
• Add level field support to HeaderBlock by @​nlopes in 0af06c5
• Add slack_icon and subtext support to CardBlock by @​nlopes in 56c434c

New Contributors

• @​jjiang-stripe made their first contribution in #​1565

Full Changelog: slack-go/slack@v0.25.0...v0.26.0

v0.25.0

Compare Source

[!IMPORTANT]
See CHANGELOG.md for details. Breaking change: TableBlock.Rows is now [][]TableCell (#​1558).

What's Changed

• chore(deps): bump actions/stale from 10.2.0 to 10.3.0 by @​dependabot[bot] in #​1556
• chore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @​dependabot[bot] in #​1557
• fix!: preserve all cell types in TableBlock by @​nlopes in #​1560
• refactor: replace interface{} with any (Go 1.18+) by @​MD-Mushfiqur123 in #​1559
• chore: fix a bunch of issues detected by golangci-lint by @​nlopes in #​1561

New Contributors

• @​MD-Mushfiqur123 made their first contribution in #​1559

Full Changelog: slack-go/slack@v0.24.0...v0.25.0

v0.24.0

Compare Source

What's Changed

• docs: format go get command in code block by @​akhil-ge0rge in #​1554
• feat: add new block kit block Data Table by @​nlopes in #​1555

[!IMPORTANT]
NewTaskCardBlock and NewPlanBlock now guard against nil variadic options so if you were doing that (which you shouldn't) this is a breaking change.

New Contributors

• @​akhil-ge0rge made their first contribution in #​1554

Full Changelog: slack-go/slack@v0.23.1...v0.24.0

v0.23.1

Compare Source

[!IMPORTANT]
Even though this is a [security] patch release, if you were using an empty secret, this is a breaking change due to a change in behaviour. That's on purpose, to ensure you fix your approach so that there are no footguns.

Fixed

• NewSecretsVerifier now rejects empty signing secrets to avoid accepting forged request
  signatures when applications are misconfigured.

Full Changelog: slack-go/slack@v0.23.0...v0.23.1

v0.23.0

Compare Source

Added

• feat(socketmode): expose socketmode handler dispatcher method by @​nlopes in #​1550
• feat(block): add card and carousel blocks by @​nlopes in #​1551
• feat(assistant): add username and icon to status update by @​charleenwang in #​1553
• feat(block): add alert block by @​nlopes in #​1552

New Contributors

• @​charleenwang made their first contribution in #​1553

Full Changelog: slack-go/slack@v0.22.0...v0.23.0

v0.22.0

Compare Source

What's Changed

Added

• OAuth PKCE support - OAuthOptionCodeVerifier option for GetOAuthV2Response, plus GenerateCodeVerifier() and GenerateCodeChallenge() helpers (RFC 7636). client_secret is now conditionally omitted when empty in both GetOAuthV2ResponseContext and RefreshOAuthV2TokenContext.
• Manifest scope fields - BotOptional and UserOptional on OAuthScopes.
• Rich text styles - Underline, Highlight, ClientHighlight, and Unlink on RichTextSectionTextStyle. Style field on RichTextSectionUserGroupElement.
• Assistant search context - Sort, SortDir, Before, After, Highlight, IncludeContextMessages, IncludeDeletedUsers, IncludeMessageBlocks, IncludeArchivedChannels, DisableSemanticSearch, Modifiers, TermClauses parameters and new response types (AssistantSearchContextFile, AssistantSearchContextChannel, AssistantSearchContextMessageContext).

Fixed

• socketmode: malformed JSON no longer forces reconnect - json.SyntaxError and json.UnmarshalTypeError now emit an EventTypeIncomingError event and continue reading instead of killing the WebSocket connection.
• socketmode: debug_reconnects query param applied correctly - the parameter was silently discarded due to a missing url.RawQuery assignment.
• ChannelTypes and ContentTypes now send comma-separated values instead of repeated form keys, matching the convention used by every other method in the library.

Docs

• assistant:write scope marked as deprecated in favour of chat:write.

Full Changelog: v0.21.1...v0.22.0

v0.21.1

Compare Source

v0.21.1

Added

• MessageEvent channel type helpers — New ChannelTypeChannel, ChannelTypeGroup,
  ChannelTypeIM, and ChannelTypeMPIM constants plus IsChannel(), IsGroup(), IsIM(), and
  IsMpIM() convenience methods on MessageEvent. No more comparing raw strings to figure out where a
  message came from:

if ev.IsIM() {
    // handle direct message
}

Fixed

• MessageEvent doc typo — ChannelType documentation listed "mim" instead of the correct "mpim".
• Duplicate attachment/block serialization — MsgOptionAttachments and MsgOptionBlocks were serializing
  payloads twice (once for the response-URL JSON path, once for the form POST path). Serialization now
  happens once inside formSender.BuildRequestContext. (#​1547)

[!NOTE]
UnsafeApplyMsgOptions no longer includes attachments/blocks keys in the returned values, since marshalling is deferred to send time. This function is documented as unsupported.

v0.21.0

Compare Source

[!WARNING]
This release contains multiple breaking changes. Please review the sections below before upgrading.

Breaking changes

Removed APIs

• IM struct removed — Use Conversation instead. IsUserDeleted has been moved there.
• Info.GetBotByID, GetUserByID, GetChannelByID, GetGroupByID, GetIMByID removed — These were deprecated and returned nil unconditionally. Remove any calls to them.

Signature changes

• ListReactions now uses cursor-based pagination — Returns ([]ReactedItem, string, error) instead of ([]ReactedItem, *Paging, error). ListReactionsParameters replaces Count/Page with Cursor/Limit.

  // Before
  items, paging, err := api.ListReactions(params)
  // After
  items, nextCursor, err := api.ListReactions(params)

• ListStars/GetStarred now use cursor-based pagination — Same pattern: returns string (next cursor) instead of *Paging. StarsParameters replaces Count/Page with Cursor/Limit.

• GetAccessLogs now uses cursor-based pagination — Same pattern: returns string (next cursor) instead of *Paging. AccessLogParameters replaces Count/Page with Cursor/Limit.

• Ack() and Send() now return error (Socket Mode) — Large payloads (≥20KB) that Slack silently dropped are now rejected with an error. Existing call sites that ignore the return value still compile.

Type changes

• WebhookMessage.UnfurlLinks / UnfurlMedia → *bool — Required to distinguish "omit" from "false".

  // Before
  msg := slack.WebhookMessage{UnfurlLinks: true}
  // After
  t := true
  msg := slack.WebhookMessage{UnfurlLinks: &t}

• User.Has2FA → *bool — nil means absent/unknown (bot tokens), false means explicitly disabled.

Behavior changes

• MsgOptionBlocks() with no arguments now sends blocks=[] — Previously a silent no-op. If you relied on that, remove the option entirely.
• admin error strings now start with lowercase — If you match error content in your code, update your comparisons.

Added

• admin.teams.settings.* API support — Full suite: AdminTeamsSettingsInfo, SetDefaultChannels, SetDescription, SetDiscoverability, SetIcon, SetName ([#​960])
• BlockFromJSON / MustBlockFromJSON — Create blocks from raw JSON strings, enabling direct use of output from Slack's Block Kit Builder ([#​1497])
• GetOpenIDConnectUserInfo — Returns identity info via openid.connect.userInfo ([#​967])
• OAuthOptionAPIURL for package-level OAuth functions — Override the Slack API URL for testing ([#​744])
• HTTP response headers — Access Slack response headers (X-OAuth-Scopes, X-Ratelimit-*, etc.) via OptionOnResponseHeaders callback ([#​1076])
• API warning callbacks — Register OptionWarnings(func(warnings []string)) to receive Slack deprecation notices ([#​1540])
• DNDOptionTeamID — Pass team_id to GetDNDInfo/GetDNDTeamInfo, required after workspace migration ([#​1157])
• UpdateUserGroupMembersList — Accepts []string instead of comma-separated string ([#​1172])
• SetUserProfile — Set multiple profile fields in a single API call ([#​1158])
• RTM events — user_status_changed, user_huddle_changed, user_profile_changed, sh_room_join, sh_room_leave, sh_room_update, channel_updated ([#​1541], [#​858])
• Socket Mode handlers — HandleShortcut, HandleViewSubmission, HandleViewClosed for Level 3 dispatch by CallbackID ([#​1161])
• New fields — Username on User ([#​1218]), Blocks/Attachments/Files/Upload on AppMentionEvent ([#​961]), Blocks on MessageEvent ([#​1257]), IsConnectorBot/IsWorkflowBot on User, GuestInvitedBy on UserProfile, CacheTS/EventTS on UserChangeEvent

Fixed

• UnknownBlock round-trip data loss — Unrecognized block types now preserve their full JSON through unmarshal/marshal cycles
• WorkflowButtonBlockElement missing from UnmarshalJSON — Plus missing multi_*_select and file_input cases ([#​1539])
• NewBlockHeader nil pointer dereference — Passing a nil text object no longer panics ([#​1236])
• ValidateUniqueBlockID false positives — Empty block_id strings no longer flagged as duplicates ([#​1184])
• Socket Mode: large Ack payloads silently failing — Now uses 32KB write buffer and rejects payloads ≥20KB with an error ([#​1196])

Deprecated

• slackevents.ParseActionEvent — Cannot parse block_actions. Use slack.InteractionCallback with json.Unmarshal instead ([#​596])
• slackevents.MessageAction, MessageActionEntity, MessageActionResponse — Legacy interactive_message types only

Full Changelog: slack-go/slack@v0.20.0...v0.21.0

v0.20.0

Compare Source

[!WARNING]
trigger_id and workflow_id are NOT in any documentation or in any of the official
libraries, so exercise caution if you use these.

Added

• workflow_id and trigger_id in Message — It seems that some types of messages,
  e.g: bot_message, can carry trigger_id and workflow_id. WorkflowID was added by @​clayallsopp in #​1537
• RichTextQuote.Border field — optional border toggle (matches the docs now)
• RichTextPreformatted.Language field — enables syntax highlighting for preformatted
  blocks

Fixed

• Remove embedding of RichTextSection — RichTextQuote and RichTextPreformatted
  are now flattened as they should have always been. This is a breaking change for anyone
  using these structs directly.

New Contributors

• @​clayallsopp made their first contribution in #​1537

Full Changelog: slack-go/slack@v0.19.0...v0.20.0

v0.19.0

Compare Source

Added

• Add support for task_card and plan agent blocks by @​nlopes in #​1536
• Add optional HTTP retry for Web API (429, 5xx, connection errors) by @​olegbespalov in #​1532

Full Changelog: slack-go/slack@v0.18.0...v0.19.0

v0.18.0

Compare Source

This is the first stable release in the 0.18.x series — it includes everything from rc1 and rc2 plus a handful of new features and fixes that landed since.

There are a few breaking changes in this one. I tried to keep them to the minimum necessary but some were long overdue. Here's what you need to know.

Breaking changes

File upload API cleanup (#​1481)

Slack discontinued the old files.upload API back in November 2025, so we finally removed the deprecated UploadFile, UploadFileContext, and FileUploadParameters. The V2 variants have been renamed to drop the suffix:

• UploadFileV2 → UploadFile
• UploadFileV2Context → UploadFileContext
• UploadFileV2Parameters → UploadFileParameters

Should be a quick search-and-replace for most codebases.

GetReactions return type (#​1480)

GetReactions now returns ReactedItem instead of []ItemReaction. This aligns with what the Slack API actually returns — the item itself (message, file, or file_comment) alongside its reactions. To migrate, use resp.Reactions to get at the slice.

Settings pointer fields (#​1461)

Settings.Interactivity and Settings.EventSubscriptions are now pointers so they can be properly omitted when empty. You'll need nil checks if you're accessing these directly.

Minimum Go version is now 1.25

Up from 1.22 in v0.17.x. The go.mod directive is go 1.25.

Added

• Admin Conversations API — Full admin.conversations.* support: core operations, bulk operations, preferences, retention, restrict access, and EKM channel info. (#​1329)
• admin.roles.* API methods — listAssignments, addAssignments, and removeAssignments. (#​1520)
• Chat Streaming API — Real-time chat streaming with example usage. (#​1506)
• Data Access API — Full support with example implementation. (#​1439)
• Work Objects — Chat unfurl with Work Object metadata, entity details (flexpane), entity_details_requested event, and associated types. (#​1529)
• Huddle support — HuddleRoom, HuddleParticipantEvent, and HuddleRecording types for huddle events.
• Table blocks — Parse and create table blocks. (#​1490, #​1511)
• Context actions block — context_actions block type. (#​1495)
• Workflow button — workflow_button block element. (#​1499)
• Call block data — CallBlock now includes full call data. (#​897)
• Cursor-based GetUsers pagination (#​1465)
• GetAllConversations with pagination — Automatic pagination with rate limit handling. (#​1463)
• focus_on_load for remaining block elements — selects, multi-selects, datepicker, timepicker, plain_text_input, checkboxes, radio_buttons, number_input. (#​1519)
• Missing User/UserProfile/EnterpriseUser fields — who_can_share_contact_card, always_active, pronouns, image_1024, and more. (#​1526)
• PlainText/PreviewPlainText on File — Email file objects now include plain text body fields. (#​1522)
• Attachment image fields — ImageBytes, ImageHeight, ImageWidth. (#​1516)
• RecordChannel conversation property (#​1513)
• Title for CreateChannelCanvas (#​1483)
• loading_messages for SetAssistantThreadsStatus (#​1489)
• PostEphemeral handler for slacktest (#​1517)
• PreviewImageName for remote files
• Audit Logs example (#​1144)

Fixed

• File upload error wrapping — UploadFile now tells you which of the three upload steps failed. (#​1491)
• Audit Logs API endpoint — GetAuditLogs was hitting the wrong endpoint; now uses api.slack.com. Added OptionAuditAPIURL for testing. (#​1144)
• Socket mode dial debugging — Debug logging for custom dialer failures. Helps with proxy/TLS issues. (#​1360)
• MsgOptionPostMessageParameters metadata — Was silently dropping MetaData. (#​1343)
• UserProfile.Skype JSON tag — Fixed typo "skyp" → "skype". (#​1524)
• assistant.threads.setSuggestedPrompts title — Now actually sent when non-empty. (#​1528)
• PublishView empty hash — No longer sends empty hash in payload. (#​1515)
• ImageBlockElement validation — Properly validates imageURL or SlackFile. (#​1488)
• Rich text section channel return (#​1472)
• KickUserFromConversation error handling — Errors now parsed as a map. (#​1471)

Changed

• CI test matrix: dropped Go 1.24, added Go 1.26; bumped golangci-lint to v2.10.1. (#​1530)

Full Changelog: slack-go/slack@v0.17.3...v0.18.0

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.50%. Comparing base (a8ccb8d) to head (c13a158).

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #61   +/-   ##
=======================================
  Coverage   88.50%   88.50%           
=======================================
  Files          10       10           
  Lines         400      400           
=======================================
  Hits          354      354           
  Misses         36       36           
  Partials       10       10           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.