Medium vulnerability : Update Axios to 1.7.8

[s-dupuis]

Axios fixed this vulnerability in axios/axios#6714.

Packages:

Select all that apply:

• @slack/web-api
• @slack/rtm-api
• @slack/webhooks
• @slack/oauth
• @slack/socket-mode
• @slack/types
• I don't know

Requirements

Please read the Contributing guidelines and Code of Conduct before creating this issue or pull request. By submitting, you are agreeing to those rules.

[hello-ashleyintech]

Hi, @s-dupuis! 👋 Thanks for submitting this.

I will come out with a PR to bump the minimum version of Axios in the webhook package to 1.7.8 shortly. If the package is ready to release, I will also release it!

[hello-ashleyintech]

Also looks like this needs to be updated for web-api interactive-messages - this is deprecated, so just web-api in addition to webhook!

[zimeg]

Bumping to 1.7.8 seems good - I'm not sure if the changes in 1.7.9 are needed - but I'm wondering where this was noted as a major vulnerability? 🤔

@s-dupuis The issues linked in that PR hint at this being a possible warning, but I'm not finding a CVE for it. Do you know if this might've been posted somewhere?

[hello-ashleyintech]

@zimeg I'm seeing Snyk listing it as a medium vuln (versions <1.7.8) here!