slack-ruby-client 2.5.2 → 2.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a618c19aef053b39b70616b4c2965e367b7c7a9607091501626ca0e8c1112d49
-  data.tar.gz: 0f19c3999ef2b3129c654baa30517c0863fe8b719e14f922d8106a529395e2e5
+  metadata.gz: c51153c945fdc89a1aa46ba02eb49256f7f2978277901f4d95e68c4d92197856
+  data.tar.gz: 9c450898f129249fcd6e2ab448830ba6e0f118e74c8af2f3e3e26e9419cc16ea
 SHA512:
-  metadata.gz: dfb4b2f108f3c66a7f8738cccb2a3831f6b8443fec90f14163caa9875febb581eac5771d4dfdde784f3cfc4ae7d8857de873b6b9603136074bf1eb1a5837dbc8
-  data.tar.gz: 3bf0ad65a3fbe56ac30fc304671b17ef982e1b874457ce4721f81c1767c8698e53373a9e38d3a9cdb11a9b600287109dc15f420607bdd38e194b507f416b9845
+  metadata.gz: e1df2c875eb165a043823bd911fc2ac585693dc625bd32070081d01a4cbd4667c32252d287f14960a72266e28f2cd9787b59ef34101fb076e551448094bc1385
+  data.tar.gz: c5bce1883b654790df7992f8dec417cf3976ef210f0d35dd219de54666ec556c957fec9762a094149269c3d195f1c0333fab129ba10320d3f959448924bb42d0

data/.github/workflows/test.yml

@@ -30,6 +30,7 @@ jobs:
         with:
           ruby-version: ${{ matrix.entry.ruby }}
           bundler-cache: true # 'bundle install' and cache gems
+        continue-on-error: ${{ matrix.entry.ignore || false }}
       - name: Run Tests
         continue-on-error: ${{ matrix.entry.ignore || false }}
         env:
@@ -41,6 +42,7 @@ jobs:
           parallel: true
           github-token: ${{ secrets.GITHUB_TOKEN }}
           flag-name: run-${{ matrix.entry.ruby }}${{ matrix.entry.concurrency && '-'}}${{ matrix.entry.concurrency }}
+          allow-empty: ${{ matrix.entry.ignore || false }}
 
   finish:
     name: coveralls

data/.github/workflows/update_api.yml

@@ -2,7 +2,7 @@ name: Update API
 on:
   workflow_dispatch:
   schedule:
-    - cron: "15 23 * * *"
+    - cron: "15 23 * * 1"
 jobs:
   update-api:
     if: ${{ github.repository == 'slack-ruby/slack-ruby-client' }}

data/.rubocop_todo.yml

@@ -1,6 +1,6 @@
 # This configuration was generated by
 # `rubocop --auto-gen-config`
-# on 2025-02-11 15:48:56 UTC using RuboCop version 1.26.1.
+# on 2025-07-19 11:04:04 UTC using RuboCop version 1.26.1.
 # The point is for the user to remove these configuration records
 # one by one as the offenses are removed from the code base.
 # Note that changes in the inspected code, or installation of new
@@ -47,17 +47,17 @@ Lint/RedundantCopDisableDirective:
 # Offense count: 13
 # Configuration parameters: IgnoredMethods, CountRepeatedAttributes.
 Metrics/AbcSize:
-  Max: 58
+  Max: 67
 
 # Offense count: 6
 # Configuration parameters: IgnoredMethods.
 Metrics/CyclomaticComplexity:
-  Max: 11
+  Max: 15
 
-# Offense count: 15
+# Offense count: 17
 # Configuration parameters: CountComments, CountAsOne, ExcludedMethods, IgnoredMethods.
 Metrics/MethodLength:
-  Max: 35
+  Max: 45
 
 # Offense count: 1
 # Configuration parameters: CountKeywordArgs, MaxOptionalParameters.
@@ -67,12 +67,13 @@ Metrics/ParameterLists:
 # Offense count: 3
 # Configuration parameters: IgnoredMethods.
 Metrics/PerceivedComplexity:
-  Max: 12
+  Max: 17
 
-# Offense count: 1
+# Offense count: 2
 # Configuration parameters: MinSize.
 Performance/CollectionLiteralInLoop:
   Exclude:
+    - 'lib/slack/web/api/helpers/files.rb'
     - 'spec/slack/web/api/endpoints/custom/files_spec.rb'
 
 # Offense count: 1
@@ -93,20 +94,20 @@ Performance/StringInclude:
   Exclude:
     - 'lib/tasks/web.rake'
 
-# Offense count: 9
+# Offense count: 10
 # This cop supports safe auto-correction (--auto-correct).
 RSpec/ContextMethod:
   Exclude:
     - 'spec/slack/messages/formatting_spec.rb'
     - 'spec/slack/web/api/mixins/users_spec.rb'
 
-# Offense count: 84
+# Offense count: 86
 # Configuration parameters: Prefixes.
 # Prefixes: when, with, without
 RSpec/ContextWording:
   Enabled: false
 
-# Offense count: 72
+# Offense count: 75
 # Configuration parameters: CountAsOne.
 RSpec/ExampleLength:
   Max: 18
@@ -117,13 +118,13 @@ RSpec/ExampleLength:
 RSpec/FilePath:
   Enabled: false
 
-# Offense count: 74
+# Offense count: 86
 # Configuration parameters: .
 # SupportedStyles: have_received, receive
 RSpec/MessageSpies:
   EnforcedStyle: receive
 
-# Offense count: 97
+# Offense count: 103
 RSpec/MultipleExpectations:
   Max: 5
 
@@ -151,7 +152,7 @@ RSpec/StubbedMock:
     - 'spec/slack/web/api/pagination/cursor_spec.rb'
     - 'spec/slack/web/client_spec.rb'
 
-# Offense count: 2
+# Offense count: 14
 RSpec/SubjectStub:
   Exclude:
     - 'spec/slack/web/api/mixins/conversations_spec.rb'
@@ -232,6 +233,14 @@ Style/OptionalBooleanParameter:
   Exclude:
     - 'spec/support/queue_with_timeout.rb'
 
+# Offense count: 1
+# This cop supports safe auto-correction (--auto-correct).
+# Configuration parameters: ConvertCodeThatCanStartToReturnNil, AllowedMethods.
+# AllowedMethods: present?, blank?, presence, try, try!
+Style/SafeNavigation:
+  Exclude:
+    - 'lib/slack/web/api/helpers/files.rb'
+
 # Offense count: 1
 # This cop supports unsafe auto-correction (--auto-correct-all).
 Style/SlicingWithRange:

data/CHANGELOG.md

@@ -1,3 +1,18 @@
+### 2.7.0 (2025/07/20)
+
+* [#554](https://github.com/slack-ruby/slack-ruby-client/pull/557): Require Faraday >= 2.0.1 - [@anrichvs](https://github.com/AnrichVS).
+* [#559](https://github.com/slack-ruby/slack-ruby-client/pull/559): Enable name-to-id translation of non-public channels - [@eizengan](https://github.com/eizengan).
+* [#560](https://github.com/slack-ruby/slack-ruby-client/pull/560): Name-to-id translation can supply all sensible list options - [@eizengan](https://github.com/eizengan).
+* [#561](https://github.com/slack-ruby/slack-ruby-client/issues/563): Raise InvalidSignature when verifying a request without a signature - [@wesleyjellis](https://github.com/wesleyjellis).
+* [#567](https://github.com/slack-ruby/slack-ruby-client/pull/567): Add support for multiple files in `files_upload_v2` - [@dblock](https://github.com/dblock).
+
+### 2.6.0 (2025/05/24)
+
+* [#549](https://github.com/slack-ruby/slack-ruby-client/pull/549): Add group ID formatting support for message mentions - [@n0h0](https://github.com/n0h0).
+* [#553](https://github.com/slack-ruby/slack-ruby-client/pull/553): Use `secure_compare` during signature verification - [@hieuk09](https://github.com/hieuk09).
+* [#555](https://github.com/slack-ruby/slack-ruby-client/pull/555): Make page size in resolving IDs configurable - [@eizengan](https://github.com/eizengan).
+* [#547](https://github.com/slack-ruby/slack-ruby-client/pull/547): Update API from [slack-api-ref@1ee282e](https://github.com/slack-ruby/slack-api-ref/commit/1ee282e) - [@slack-ruby-ci-bot](https://github.com/apps/slack-ruby-ci-bot).
+
 ### 2.5.2 (2025/02/19)
 
 * [#548](https://github.com/slack-ruby/slack-ruby-client/pull/548): Fix: `files_upload_v2` with `#channel` - [@dblock](https://github.com/dblock).

data/CONTRIBUTING.md

@@ -27,7 +27,7 @@ bundle exec rake
 
 ### Run Examples in Development
 
-Sign up for Slack, create a private Slack team for yourself, then [generate an API token](https://api.slack.com/tutorials/tracks/getting-a-token) for your app and use it for some interactions.
+Sign up for Slack, create a private Slack team for yourself, then [generate an API token](https://api.slack.com/tutorials/tracks/getting-a-token) for your app and use it for some interactions. To get a token you will need to install the app in a workspace, and use the "User OAuth Token" from installed app settings.
 
 Try running the examples in the [examples](examples) directory.
 

data/Gemfile

@@ -14,9 +14,12 @@ end
 
 group :test do
   gem 'activesupport'
+  gem 'base64'
+  gem 'bigdecimal'
   gem 'erubis'
   gem 'faraday-typhoeus'
   gem 'json-schema'
+  gem 'mutex_m'
   gem 'racc'
   gem 'rake', '~> 13'
   gem 'rspec'

data/README.md

@@ -4,7 +4,6 @@ Slack Ruby Client
 [![Gem Version](https://badge.fury.io/rb/slack-ruby-client.svg)](http://badge.fury.io/rb/slack-ruby-client)
 [![Integration Tests](https://github.com/slack-ruby/slack-ruby-client/actions/workflows/integration_test.yml/badge.svg?branch=master)](https://github.com/slack-ruby/slack-ruby-client/actions/workflows/integration_test.yml)
 [![Tests](https://github.com/slack-ruby/slack-ruby-client/actions/workflows/test.yml/badge.svg?branch=master)](https://github.com/slack-ruby/slack-ruby-client/actions/workflows/test.yml)
-[![Code Climate](https://codeclimate.com/github/slack-ruby/slack-ruby-client/badges/gpa.svg)](https://codeclimate.com/github/slack-ruby/slack-ruby-client)
 [![Coverage Status](https://coveralls.io/repos/github/slack-ruby/slack-ruby-client/badge.svg?branch=master)](https://coveralls.io/github/slack-ruby/slack-ruby-client?branch=master)
 
 A Ruby client for the Slack [Web](https://api.slack.com/web), [RealTime Messaging](https://api.slack.com/rtm) and [Events](https://api.slack.com/events-api) APIs. Comes with a handy command-line client, too. If you are not familiar with these concepts, you might want to watch [this video](http://code.dblock.org/2016/03/11/your-first-slack-bot-service-video.html).
@@ -57,6 +56,7 @@ A Ruby client for the Slack [Web](https://api.slack.com/web), [RealTime Messagin
       - [Date and Time Formatting](#date-and-time-formatting)
       - [Channel ID Formatting](#channel-id-formatting)
       - [User ID Formatting](#user-id-formatting)
+      - [Group ID Formatting](#group-id-formatting)
       - [URL Formatting](#url-formatting)
       - [Markdown Formatting](#markdown-formatting)
     - [Parsing Messages](#parsing-messages)
@@ -81,7 +81,7 @@ A Ruby client for the Slack [Web](https://api.slack.com/web), [RealTime Messagin
 
 ## Stable Release
 
-You're reading the documentation for the **stable** release of slack-ruby-client, v2.5.2. See [UPGRADING](UPGRADING.md) when upgrading from an older version.
+You're reading the documentation for the **stable** release of slack-ruby-client 2.7.0. See [UPGRADING](UPGRADING.md) when upgrading from an older version.
 
 ## Installation
 
@@ -173,12 +173,14 @@ Upload files with [sequenced API calls](https://api.slack.com/messaging/files#up
 
 This library provides a helper method `files_upload_v2` that wraps the three separate API calls.
 
+Upload a single file.
+
 ```ruby
 client.files_upload_v2(
   # required options
   filename: 'results.pdf', # this is used for the file title, unless a :title option is provided
   content: File.read('/users/me/results.pdf'), # the string contents of the file
-  
+
   # optional options
   channels: ['C000000', 'C000001'], # channel IDs to share the file in (:channel_id, :channel, or :channels are all supported)
   initial_comment: 'Sharing the Q1 results :tada:', # the message that is included with the file share thread
@@ -188,6 +190,19 @@ client.files_upload_v2(
 )
 ```
 
+Upload multiple files.
+
+```ruby
+client.files_upload_v2(
+  files: [
+    { filename: 'report.pdf', content: File.read('/users/me/report.pdf'), title: 'Monthly Report' },
+    { filename: 'data.csv', content: File.read('/users/me/data.csv'), title: 'Raw Data' }
+  ],
+  channels: ['#general'],
+  initial_comment: 'Here are the monthly results!'
+)
+```
+
 You can use a channel ID passed as `channel_id`, a single channel as `channel`, an array of channel IDs as `channels`, or a channel name or names (prefixed with `#`) in `files_upload_v2`. Lookup by name is not supported by the Slack API and this method called invokes `conversations_list` in order to locate the channel ID. This invocation can have a cost if you have many Slack channels and is only recommended when you intend to list channels anyway.
 
 Note: This library includes a `files_upload` method that uses a deprecated endpoint `files.upload` that will [no longer be supported on 3/11/2025](https://api.slack.com/methods/files.upload#markdown).
@@ -280,20 +295,22 @@ client = Slack::Web::Client.new(user_agent: 'Slack Ruby Client/1.0')
 
 The following settings are supported.
 
-setting             | description
---------------------|-------------------------------------------------------------------------------------------------
-token               | Slack API token.
-user_agent          | User-agent, defaults to _Slack Ruby Client/version_.
-proxy               | Optional HTTP proxy.
-ca_path             | Optional SSL certificates path.
-ca_file             | Optional SSL certificates file.
-endpoint            | Slack endpoint, default is _https://slack.com/api_.
-logger              | Optional `Logger` instance that logs HTTP requests.
-timeout             | Optional open/read timeout in seconds.
-open_timeout        | Optional connection open timeout in seconds.
-default_page_size   | Optional page size for paginated requests, default is _100_.
-default_max_retries | Optional number of retries for paginated requests, default is _100_.
-adapter             | Optional HTTP adapter to use, defaults to `Faraday.default_adapter`.
+setting                      | description
+-----------------------------|-------------------------------------------------------------------------------------------------
+token                        | Slack API token.
+user_agent                   | User-agent, defaults to _Slack Ruby Client/version_.
+proxy                        | Optional HTTP proxy.
+ca_path                      | Optional SSL certificates path.
+ca_file                      | Optional SSL certificates file.
+endpoint                     | Slack endpoint, default is _https://slack.com/api_.
+logger                       | Optional `Logger` instance that logs HTTP requests.
+timeout                      | Optional open/read timeout in seconds.
+open_timeout                 | Optional connection open timeout in seconds.
+default_page_size            | Optional page size for paginated requests, default is _100_.
+conversations_id_page_size   | Optional page size for conversations_list requests made when calculating conversation id from a conversation name, default is _nil_, which will use the default_page_size.
+users_id_page_size           | Optional page size for users_list requests made when calculating user id from a user name, default is _nil_, which will use the default_page_size.
+default_max_retries          | Optional number of retries for paginated requests, default is _100_.
+adapter                      | Optional HTTP adapter to use, defaults to `Faraday.default_adapter`.
 
 You can also pass request options, including `timeout` and `open_timeout` into individual calls.
 
@@ -665,6 +682,16 @@ Slack::Messages::Formatting.user_link(user_id)
   # => "<@U0000000001>"
 ```
 
+##### Group ID Formatting
+
+If you already know the group name you can just embed it in the message as `@some_group`, but if you only have the ID you can embed it using special syntax which Slack will display as the group name.
+
+```ruby
+group_id = 'S0000000001'
+Slack::Messages::Formatting.group_link(group_id)
+  # => "<!subteam^S0000000001>"
+```
+
 ##### URL Formatting
 
 Slack will automatically parse fully qualified URLs in messages, but you need special formatting to embed a link with different text.

data/bin/commands/admin_conversations.rb

@@ -75,6 +75,17 @@ module Slack
           end
         end
 
+        g.desc 'Create a Salesforce channel for the corresponding object provided.'
+        g.long_desc %( Create a Salesforce channel for the corresponding object provided. )
+        g.command 'createForObjects' do |c|
+          c.flag 'object_id', desc: 'Object / Record ID (15 or 18 digit accepted). See here for how to look up an ID.'
+          c.flag 'salesforce_org_id', desc: 'Salesforce org ID (15 or 18 digit accepted). See here for how to look up Salesforce org ID.'
+          c.flag 'invite_object_team', desc: 'Optional flag to add all team members related to the object to the newly created Salesforce channel. When true, adds a maximum of 100 team members to the channel.'
+          c.action do |_global_options, options, _args|
+            puts JSON.dump(@client.admin_conversations_createForObjects(options))
+          end
+        end
+
         g.desc 'Delete a public or private channel.'
         g.long_desc %( Delete a public or private channel. )
         g.command 'delete' do |c|
@@ -219,7 +230,7 @@ module Slack
           c.flag 'channel_id', desc: 'The encoded channel_id to add or remove to workspaces.'
           c.flag 'org_channel', desc: 'True if channel has to be converted to an org channel.'
           c.flag 'target_team_ids', desc: 'A comma-separated list of workspaces to which the channel should be shared. Not required if the channel is being shared org-wide.'
-          c.flag 'team_id', desc: 'The workspace to which the channel belongs. Omit this argument if the channel is a cross-workspace shared channel.'
+          c.flag 'team_id', desc: 'The workspace to which the channel belongs if the channel is a local workspace channel. Omit this argument if the channel is a cross-workspace or org-wide shared channel.'
           c.action do |_global_options, options, _args|
             puts JSON.dump(@client.admin_conversations_setTeams(options))
           end

data/bin/commands/admin_users.rb

@@ -44,7 +44,7 @@ module Slack
           c.flag 'include_deactivated_user_workspaces', desc: 'Only applies with org token and no team_id. If true, return workspaces for a user even if they may be deactivated on them. If false, return workspaces for a user only when user is active on them. Default is false.'
           c.flag 'is_active', desc: 'If true, only active users will be returned. If false, only deactivated users will be returned. Default is true.'
           c.flag 'limit', desc: 'Limit for how many users to be retrieved per page.'
-          c.flag 'team_id', desc: 'The ID (T1234) of the workspace. The team_id is required if you use an org-level token.'
+          c.flag 'team_id', desc: 'The ID (T1234) of a workspace. Filters results to just the specified workspace.'
           c.action do |_global_options, options, _args|
             puts JSON.dump(@client.admin_users_list(options))
           end

data/bin/commands/assistant_search.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+# This file was auto-generated by lib/tasks/web.rake
+
+module Slack
+  module Cli
+    class App
+      desc 'AssistantSearch methods.'
+      command 'assistant_search' do |g|
+        g.desc 'Searches messages across your Slack organization—perfect for broad, specific, and real-time data retrieval.'
+        g.long_desc %( Searches messages across your Slack organization—perfect for broad, specific, and real-time data retrieval. )
+        g.command 'context' do |c|
+          c.flag 'query', desc: 'User prompt or search query.'
+          c.flag 'action_token', desc: 'Send action_token as received in a message event.'
+          c.flag 'channel_types', desc: 'Mix and match channel types by providing a comma-separated list of any combination of public_channel, private_channel, mpim, im.'
+          c.flag 'content_types', desc: 'Content types to include, a comma-separated list of any combination of messages, files.'
+          c.flag 'context_channel_id', desc: 'Context channel ID to support scoping the search when applicable.'
+          c.flag 'cursor', desc: 'The cursor returned by the API. Leave this blank for the first request, and use this to get the next page of results.'
+          c.flag 'include_bots', desc: 'If you want the results to include bots.'
+          c.flag 'limit', desc: 'Number of results to return, up to a max of 20. Defaults to 20.'
+          c.action do |_global_options, options, _args|
+            puts JSON.dump(@client.assistant_search_context(options))
+          end
+        end
+      end
+    end
+  end
+end

data/bin/commands/canvases.rb

@@ -9,6 +9,7 @@ module Slack
         g.desc 'Create canvas for a user'
         g.long_desc %( Create canvas for a user )
         g.command 'create' do |c|
+          c.flag 'channel_id', desc: 'Channel ID of the channel the canvas will be tabbed in. This is a required field for free teams.'
           c.flag 'document_content', desc: 'Structure describing the type and value of the content to create.'
           c.flag 'title', desc: 'Title of the newly created canvas.'
           c.action do |_global_options, options, _args|

data/bin/commands/chat.rb

@@ -87,6 +87,7 @@ module Slack
           c.flag 'attachments', desc: 'A JSON-based array of structured attachments, presented as a URL-encoded string.'
           c.flag 'blocks', desc: 'A JSON-based array of structured blocks, presented as a URL-encoded string.'
           c.flag 'text', desc: 'How this field works and whether it is required depends on other fields you use in your API call. See below for more detail.'
+          c.flag 'agent_message_source_type', desc: 'Identify how the message was posted for agentforce BE logging.'
           c.flag 'as_user', desc: '(Legacy) Pass true to post the message as the authed user instead of as a bot. Defaults to false. Can only be used by classic apps. See legacy as_user parameter below.'
           c.flag 'icon_emoji', desc: 'Emoji to use as the icon for this message. Overrides icon_url.'
           c.flag 'icon_url', desc: 'URL to an image to use as the icon for this message.'

data/bin/commands/conversations_canvases.rb

@@ -11,6 +11,7 @@ module Slack
         g.command 'create' do |c|
           c.flag 'channel_id', desc: 'Channel ID of the channel we create the channel canvas for.'
           c.flag 'document_content', desc: 'Structure describing the type and value of the content to create.'
+          c.flag 'title', desc: 'Title of the newly created canvas.'
           c.action do |_global_options, options, _args|
             puts JSON.dump(@client.conversations_canvases_create(options))
           end

data/bin/commands/files.rb

@@ -10,6 +10,7 @@ module Slack
         g.long_desc %( Finishes an upload started with files.getUploadURLExternal )
         g.command 'completeUploadExternal' do |c|
           c.flag 'files', desc: 'Array of file ids and their corresponding (optional) titles.'
+          c.flag 'blocks', desc: 'A JSON-based array of structured rich text blocks, presented as a URL-encoded string. If the initial_comment field is provided, the blocks field is ignored.'
           c.flag 'channel_id', desc: 'Channel ID where the file will be shared. If not specified the file will be private.'
           c.flag 'channels', desc: 'Comma-separated string of channel IDs where the file will be shared.'
           c.flag 'initial_comment', desc: 'The message text introducing the file in specified channels.'

data/bin/commands/functions_distributions_permissions.rb

@@ -18,8 +18,8 @@ module Slack
           end
         end
 
-        g.desc 'List the access type of a custom slack function and include the users with access if its permission_type is set to named_entities'
-        g.long_desc %( List the access type of a custom slack function and include the users with access if its permission_type is set to named_entities )
+        g.desc 'List the access type of a custom slack function and include the users or team or org ids with access if its permission_type is set to named_entities'
+        g.long_desc %( List the access type of a custom slack function and include the users or team or org ids with access if its permission_type is set to named_entities )
         g.command 'list' do |c|
           c.flag 'function_app_id', desc: 'The encoded ID of the app.'
           c.flag 'function_callback_id', desc: "The callback ID defined in the function's definition file."
@@ -41,13 +41,15 @@ module Slack
           end
         end
 
-        g.desc 'Set the access type of a custom slack function and define the users to be granted access if permission_type is set to named_entities'
-        g.long_desc %( Set the access type of a custom slack function and define the users to be granted access if permission_type is set to named_entities )
+        g.desc 'Set the access type of a custom slack function and define the users or team or org ids to be granted access if permission_type is set to named_entities'
+        g.long_desc %( Set the access type of a custom slack function and define the users or team or org ids to be granted access if permission_type is set to named_entities )
         g.command 'set' do |c|
           c.flag 'permission_type', desc: 'The type of permission that defines how the function can be distributed.'
           c.flag 'function_app_id', desc: 'The encoded ID of the app.'
           c.flag 'function_callback_id', desc: "The callback ID defined in the function's definition file."
           c.flag 'function_id', desc: 'The encoded ID of the function.'
+          c.flag 'org_ids', desc: 'List of org IDs to allow for named_entities permission.'
+          c.flag 'team_ids', desc: 'List of team IDs to allow for named_entities permission.'
           c.flag 'user_ids', desc: 'List of encoded user IDs.'
           c.action do |_global_options, options, _args|
             puts JSON.dump(@client.functions_distributions_permissions_set(options))

data/bin/commands/usergroups.rb

@@ -51,7 +51,6 @@ module Slack
           c.flag 'include_disabled', desc: 'Include disabled User Groups.'
           c.flag 'include_users', desc: 'Include the list of users for each User Group.'
           c.flag 'team_id', desc: 'encoded team id to list user groups in, required if org token is used.'
-          c.flag 'usergroup_id', desc: 'The id of the usergroup you would like to filter the results down to.'
           c.action do |_global_options, options, _args|
             puts JSON.dump(@client.usergroups_list(options))
           end

data/examples/files_upload_v2/files_upload_v2.rb

@@ -35,3 +35,11 @@ puts client.files_upload_v2(
   content: SecureRandom.hex,
   channel_id: channel_id
 ).files.first.permalink_public
+
+client.files_upload_v2(
+  files: [
+    { filename: 'files_upload_v2_to_general_first_file.txt', content: SecureRandom.hex },
+    { filename: 'files_upload_v2_to_general_second_file.txt', content: SecureRandom.hex }
+  ],
+  channels: ['#general']
+).files.each { |file| puts file.permalink_public }

data/lib/slack/events/request.rb

@@ -1,4 +1,5 @@
 # frozen_string_literal: true
+
 module Slack
   module Events
     class Request
@@ -54,12 +55,13 @@ module Slack
       # Returns true if the signature coming from Slack is valid.
       def valid?
         raise MissingSigningSecret unless signing_secret
+        raise InvalidSignature unless signature
 
         digest = OpenSSL::Digest.new('SHA256')
         signature_basestring = [version, timestamp, body].join(':')
         hex_hash = OpenSSL::HMAC.hexdigest(digest, signing_secret, signature_basestring)
         computed_signature = [version, hex_hash].join('=')
-        computed_signature == signature
+        Utils::Security.secure_compare(computed_signature, signature)
       end
 
       # Validates the request signature and its expiration.

data/lib/slack/messages/formatting.rb

@@ -61,6 +61,14 @@ module Slack
           "<@#{user_id}>"
         end
 
+        #
+        # Embed a link to a group in a message by group ID
+        # @see https://api.slack.com/reference/surfaces/formatting#mentioning-groups
+        #
+        def group_link(group_id)
+          "<!subteam^#{group_id}>"
+        end
+
         #
         # Embed a URL with custom link text in a message
         # @see https://api.slack.com/reference/surfaces/formatting#linking-urls

data/lib/slack/utils/security.rb

@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+
+# This module is copied from activesupport
+# https://github.com/rails/rails/blob/3235827585d87661942c91bc81f64f56d710f0b2/activesupport/lib/active_support/security_utils.rb
+module Slack
+  module Utils
+    # rubocop:disable Naming/MethodParameterName
+    module Security
+      # Constant time string comparison, for fixed length strings.
+      #
+      # The values compared should be of fixed length, such as strings
+      # that have already been processed by HMAC. Raises in case of length mismatch.
+
+      if defined?(OpenSSL.fixed_length_secure_compare)
+        def fixed_length_secure_compare(a, b)
+          OpenSSL.fixed_length_secure_compare(a, b)
+        end
+      else
+        def fixed_length_secure_compare(a, b)
+          raise ArgumentError, 'inputs must be of equal length' unless a.bytesize == b.bytesize
+
+          l = a.unpack "C#{a.bytesize}"
+
+          res = 0
+          b.each_byte { |byte| res |= byte ^ l.shift }
+          res.zero?
+        end
+      end
+      module_function :fixed_length_secure_compare
+
+      # Secure string comparison for strings of variable length.
+      #
+      # While a timing attack would not be able to discern the content of
+      # a secret compared via secure_compare, it is possible to determine
+      # the secret length. This should be considered when using secure_compare
+      # to compare weak, short secrets to user input.
+      def secure_compare(a, b)
+        a.bytesize == b.bytesize && fixed_length_secure_compare(a, b)
+      end
+      module_function :secure_compare
+    end
+    # rubocop:enable Naming/MethodParameterName
+  end
+end

data/lib/slack/version.rb

@@ -1,4 +1,4 @@
 # frozen_string_literal: true
 module Slack
-  VERSION = '2.5.2'
+  VERSION = '2.7.0'
 end

data/lib/slack/web/api/endpoints/admin_conversations.rb

@@ -104,6 +104,23 @@ module Slack
             post('admin.conversations.create', options)
           end
 
+          #
+          # Create a Salesforce channel for the corresponding object provided.
+          #
+          # @option options [string] :object_id
+          #   Object / Record ID (15 or 18 digit accepted). See here for how to look up an ID.
+          # @option options [string] :salesforce_org_id
+          #   Salesforce org ID (15 or 18 digit accepted). See here for how to look up Salesforce org ID.
+          # @option options [boolean] :invite_object_team
+          #   Optional flag to add all team members related to the object to the newly created Salesforce channel. When true, adds a maximum of 100 team members to the channel.
+          # @see https://api.slack.com/methods/admin.conversations.createForObjects
+          # @see https://github.com/slack-ruby/slack-api-ref/blob/master/methods/admin.conversations/admin.conversations.createForObjects.json
+          def admin_conversations_createForObjects(options = {})
+            raise ArgumentError, 'Required arguments :object_id missing' if options[:object_id].nil?
+            raise ArgumentError, 'Required arguments :salesforce_org_id missing' if options[:salesforce_org_id].nil?
+            post('admin.conversations.createForObjects', options)
+          end
+
           #
           # Delete a public or private channel.
           #
@@ -338,7 +355,7 @@ module Slack
           # @option options [array] :target_team_ids
           #   A comma-separated list of workspaces to which the channel should be shared. Not required if the channel is being shared org-wide.
           # @option options [Object] :team_id
-          #   The workspace to which the channel belongs. Omit this argument if the channel is a cross-workspace shared channel.
+          #   The workspace to which the channel belongs if the channel is a local workspace channel. Omit this argument if the channel is a cross-workspace or org-wide shared channel.
           # @see https://api.slack.com/methods/admin.conversations.setTeams
           # @see https://github.com/slack-ruby/slack-api-ref/blob/master/methods/admin.conversations/admin.conversations.setTeams.json
           def admin_conversations_setTeams(options = {})

data/lib/slack/web/api/endpoints/admin_users.rb

@@ -71,7 +71,7 @@ module Slack
           # @option options [integer] :limit
           #   Limit for how many users to be retrieved per page.
           # @option options [Object] :team_id
-          #   The ID (T1234) of the workspace. The team_id is required if you use an org-level token.
+          #   The ID (T1234) of a workspace. Filters results to just the specified workspace.
           # @see https://api.slack.com/methods/admin.users.list
           # @see https://github.com/slack-ruby/slack-api-ref/blob/master/methods/admin.users/admin.users.list.json
           def admin_users_list(options = {})