<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Slack-Go on Project Wintermute</title><link>https://wintermutecore.com/tags/slack-go/</link><description>Recent content in Slack-Go on Project Wintermute</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sun, 04 Oct 2026 18:43:22 +0000</lastBuildDate><atom:link href="https://wintermutecore.com/tags/slack-go/index.xml" rel="self" type="application/rss+xml"/><item><title>slack-go/slack v0.30.1 - GetFile No Longer Sends Your Token to Arbitrary Hosts</title><link>https://wintermutecore.com/posts/slack-go-slack-v0-30-1-release-getfile-token-leak/</link><pubDate>Sun, 04 Oct 2026 18:43:22 +0000</pubDate><guid>https://wintermutecore.com/posts/slack-go-slack-v0-30-1-release-getfile-token-leak/</guid><description>&lt;p&gt;&lt;code&gt;slack-go/slack&lt;/code&gt; v0.30.1 was published on October 4, 2026. It is a security release: &lt;code&gt;GetFile&lt;/code&gt;, &lt;code&gt;GetFileContext&lt;/code&gt; and &lt;code&gt;UploadToURL&lt;/code&gt; now refuse to send the Slack token to hosts that are not Slack. If your pipeline downloads files referenced in messages or events, this is the release to plan for.&lt;/p&gt;</description></item><item><title>slack-go/slack v0.30.0 - Go 1.26 Floor and Breaking Signature Changes</title><link>https://wintermutecore.com/posts/slack-go-slack-v0-30-0-release-breaking-changes/</link><pubDate>Sun, 04 Oct 2026 13:19:09 +0000</pubDate><guid>https://wintermutecore.com/posts/slack-go-slack-v0-30-0-release-breaking-changes/</guid><description>&lt;p&gt;&lt;code&gt;slack-go/slack&lt;/code&gt; v0.30.0, published on 4 October 2026, is a Go client library for the Slack API. If your pipelines post alerts or read workspace data through it, this release will fail your build before it does anything useful. Read on before bumping the module.&lt;/p&gt;</description></item></channel></rss>