Release: Slack CLI v4.11.0
By Steven Van ·
Sign-in links replace sandbox passwords by default, and Deno 2.9.8 is now required locally after the eMudhra certificate authority compromise.
Slack CLI 4.11.0 makes password-free sign-in the default for slack sandbox create. If the --password flag is not passed, the new sandbox sends a sign-in link to your email. The release is also a security update, because it moves the CLI and the Run on Slack infrastructure runtime off certificate authorities that are now compromised. Slack described the release in its developer documentation.
Compromised eMudhra certificate authorities
Three changes address the same issue, the compromised eMudhra certificate authorities:
- The CLI is now built on Go 1.27.3, which no longer trusts those authorities.
- The supported Deno version for local development is now 2.9.8, the first release that no longer trusts them. slack doctor reports older Deno versions as unsupported, so local Deno should be upgraded to 2.9.8 or later.
- All new deploys and re-deploys to Run on Slack infrastructure now use Deno 2.9.8.
Other changes
- The CLI supports the features.user_connections app manifest property (is_enabled and auth_hosts), so slack run, slack deploy and slack manifest sync keep it.
- The restricted_scopes error shown when installing an app now explains its cause. It says which kinds of scopes need an admin or owner to install, and how to resolve it.
Slack
The AI work platform — channels, messaging, huddles, and workflow automation that connect your team and tools in one place.
View Slack →