Update dependencies to fix vulnerabilities (2026-10-12)

doc/changes/unreleased.md

@@ -10,3 +10,4 @@
 ## Refactoring
 
 * #924: Removed the deprecated `lint:dependencies` Nox session and its unused implementation and tests.
+* #972: Switched from ravsamhq/notify-slack-action to maintained slackapi/slack-github-action & removed workflow versioned header

exasol/toolbox/config.py

@@ -20,19 +20,15 @@
 )
 from pydantic_core.core_schema import ValidationInfo
 
-from exasol.toolbox import __version__
 from exasol.toolbox.nox.plugin import (
     METHODS_SPECIFIED_FOR_HOOKS,
     PLUGIN_ATTR_NAME,
 )
 from exasol.toolbox.util.version import Version
 from exasol.toolbox.util.workflows.render_yaml import GithubTemplateContext
 
-WORKFLOW_HEADER_PREFIX = (
-    "# Generated and maintained by the exasol-toolbox.\n"
-    "# Last generated with exasol-toolbox version "
-)
-WORKFLOW_HEADER_PATTERN = rf"\A{re.escape(WORKFLOW_HEADER_PREFIX)}[^\n]+\.\n"
+WORKFLOW_HEADER_PREFIX = "# Generated and maintained by the exasol-toolbox."
+WORKFLOW_HEADER_PATTERN = rf"\A{re.escape(WORKFLOW_HEADER_PREFIX)}\n"
 
 
 def get_methods_with_hook_implementation(
@@ -348,7 +344,7 @@ def github_template_dict(self) -> GithubTemplateContext:
             os_version=self.os_version,
             python_versions=self.python_versions,
             sonar_token_name=self.sonar_token_name,
-            workflow_header=f"{WORKFLOW_HEADER_PREFIX}{__version__}.",
+            workflow_header=WORKFLOW_HEADER_PREFIX,
         )
 
     @computed_field  # type: ignore[misc]

exasol/toolbox/templates/github/workflows/dependency-update.yml

@@ -23,15 +23,6 @@ jobs:
           persist-credentials: true
           fetch-depth: 0
 
-      - name: Fail if not running on the default branch
-        id: check-branch
-        if: github.ref != format('refs/heads/{0}', github.event.repository.default_branch)
-        env:
-          CURRENT_BRANCH: ${{ github.ref }}
-        run: |
-          echo "Not running on the default branch. Current ref is: $CURRENT_BRANCH"
-          exit 1
-
       - name: Set up Python & Poetry Environment
         id: set-up-python-and-poetry-environment
         uses: exasol/python-toolbox/.github/actions/python-environment@v11
@@ -111,11 +102,14 @@ jobs:
       - name: Report New Pull Request to Slack Channel
         id: report-pr-slack
         if: ${{ steps.create-pr.outputs.pr_url }}
-        uses: ravsamhq/notify-slack-action@be814b201e233b2dc673608aa46e5447c8ab13f2 # 2.5.0
+        uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0
         with:
-          status: '${{ job.status }}'
-          token: '${{ secrets.GITHUB_TOKEN }}'
-          notification_title: 'Dependency update for {repo} created a Pull Request'
-          message_format: '{workflow} created Pull Request ${{ steps.create-pr.outputs.pr_url }}'
-        env:
-          SLACK_WEBHOOK_URL: '${{ secrets.INTEGRATION_TEAM_SECURITY_UPDATES_WEBHOOK }}'
+          webhook: ${{ secrets.INTEGRATION_TEAM_SECURITY_UPDATES_WEBHOOK }}
+          webhook-type: incoming-webhook
+          payload: |-
+            text: "Dependency update for ${{ github.repository }} created a Pull Request: ${{ steps.create-pr.outputs.pr_url }}"
+            blocks:
+              - type: section
+                text:
+                  type: mrkdwn
+                  text: "*Dependency update for `${{ github.repository }}` created a Pull Request*\n<${{ steps.create-pr.outputs.pr_url }}|View Pull Request>"