chore(deps): bump slackapi/slack-github-action from 3.0.4 to 3.0.5 in the github-actions group

[dependabot]

Bumps the github-actions group with 1 update: slackapi/slack-github-action.

Updates slackapi/slack-github-action from 3.0.4 to 3.0.5

Release notes

Sourced from slackapi/slack-github-action's releases.

Slack GitHub Action v3.0.5

Patch Changes

• 96fddbe: fix: revert multiline yaml parsing indentation change

Changelog

Sourced from slackapi/slack-github-action's changelog.

slack-github-action

4.0.0

Major Changes

• b1974f0: build: parse yaml with more strict multiline indentation rules

  Internal dependencies of js-yaml@v5 make YAML parsing more strict and compliant with the YAML specification. Indentation is now required for values that span multiple lines against the base value.

  See the YAML line prefixes spec for the expected indentation rule:

    channel: "C0123"
    text: "first line
  
  second line"
  
  
  second line"

Patch Changes

• 654bb72: chore: provide global fetch proxied configurations with updates to web api and webhook packages

3.0.5

Patch Changes

• 96fddbe: fix: revert multiline yaml parsing indentation change

3.0.4

Patch Changes

• fa03fe4: refactor: send webhooks with the @slack/webhook package

3.0.3

Patch Changes

• 66834e4: feat: add instrumentation to address error rates

3.0.2

Patch Changes

• 79529d7: fix: resolve url.parse deprecation warning for webhook techniques

Commits

• 0d95c9a chore: release
• be88bdd chore: release (#639)
• 96fddbe fix: revert multiline yaml parsing indentation change (#638)
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[claude]

LGTM — a mechanical dependency bump.

What was reviewed: the only change is the pinned SHA/version comment for slackapi/slack-github-action (3.0.4 → 3.0.5) on the two Slack notification steps in release.yml; verified the new SHA matches the tagged v3.0.5 release and that the with: inputs (webhook, payload) are unchanged.

Extended reasoning...

Overview

Single-file change to .github/workflows/release.yml, updating the pinned commit SHA (with version comment) for slackapi/slack-github-action from 3.0.4 to 3.0.5 in both the success and failure Slack notification steps. No other workflow logic, permissions, secrets usage, or payload structure is touched.

Security risks

None introduced. The action is already pinned to a full commit SHA (not a mutable tag), which is the recommended supply-chain practice, and this PR simply advances that pin to a new upstream release. The upstream release itself is a revert of a YAML-parsing behavior change (3.0.5 reverts a stricter multiline indentation rule introduced then rolled back), so it reduces risk rather than adding any.

Level of scrutiny

Low. This is a standard Dependabot-authored version bump limited to CI tooling (Slack notifications on release success/failure), not application or SDK code. It does not affect the published package, runtime behavior, or any security-sensitive path (auth, crypto, permissions).

Other factors

The diff is minimal and mechanical (two identical one-line SHA/comment updates), matches the standard Dependabot PR pattern, and there are no outstanding comments in the PR timeline to address.