Upgrade dependencies

[hello-ashleyintech]

Summary

This PR updates the following dep minimums to most recent version to avoid security vulns:

• @slack/oauth to 3.0.2
• @slack/socket-mode to 2.0.3
• @slack/web-api to 7.8.0
• axios to 1.7.8

Requirements (place an x in each [ ])

• I've read and understood the Contributing Guidelines and have done my best effort to follow them.
• I've read and agree to the Code of Conduct.

[hello-ashleyintech]

tests pass locally with new deps installed

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 92.59%. Comparing base (e002c13) to head (65ada31).
Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #2360   +/-   ##
=======================================
  Coverage   92.59%   92.59%           
=======================================
  Files          36       36           
  Lines        7472     7472           
  Branches      653      653           
=======================================
  Hits         6919     6919           
  Misses        545      545           
  Partials        8        8           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[WilliamBergamin]

This looks good to me 💯 but may I suggest waiting until the number of downloads for @slack/socket-mode v2.0.3 rises slightly before merging/releasing these changes

socket-mode is a critical part of this project, if there is an issue with it it would be nice to catch it before releasing it here 🤔

[hello-ashleyintech]

holding off on merging for now based on the above ^

[zimeg]

Bumping the @slack dependencies of bolt always brings a question or two...

Otherwise, feel free to merge when the time is right! 🙏

And I tested these changes with a few typescript and javascript projects and found the builds are alright as well, though I'm always hoping to find more ways to test future changes 👀

[zimeg]

Would this bump make this change a semver:minor because new features are introduced? 🤔

I'm thinking we should've had this set to the latest semver:minor anyways since features of @slack/web-api are exposed from @slack/bolt - such as the assistant APIs released in @slack/[email protected] being required since @slack/[email protected] - but let me know what you think! 🔍

[WilliamBergamin]

@hello-ashleyintech got a few thousand download of socket mode 2.0.3 with no reported issues, I think we can safely merge this

[zimeg]

@hello-ashleyintech @WilliamBergamin Jumping in on this winterish week to merge this and will tag it as semver:minor out of caution for the included dependencies 🙏

@hello-ashleyintech Thanks a ton for making these changes upstream and here! Huge lifts! 💪 ✨