This release keeps dependencies and maintenance posture current for teams operating this tool.
✓ No known CVEs patched in this version
Topics
+4 more
Summary
AI summaryMinor fixes and improvements.
Full changelog
Patch release — no new tools or features, pure code quality improvements and test coverage expansion.
Changes
Code quality
telegram-client.tsre-exports pattern refactored (directexport {} from) — eliminates 2 BiomenoUnusedImportsfalse-positives- Unsafe casts — replaced
(e as Error).messagewithe instanceof Error ? e.message : String(e)in getBroadcastStats / getMegagroupStats telegram-helpers.ts— renamed variableany→graphin compactGraph()
Architecture
ipc-protocol.ts— addedMcpRegisteredTool+McpServerInternaltypes as single source of truth (previously duplicated in both master.ts and client.ts)telegram-client.ts— added 24 region markers (// ─── Session & Auth ───etc.) for navigation in the 3900-line file
Test coverage
- +25 tests (261 → 286 total):
wire-ipc-proxies.test.ts(6) — coverswireIpcProxiesin client.ts, including critical safety test that original TelegramService handler is never called after wiringrate-limiter-branches.test.ts(10) — covers previously uncovered branches (throwOnFloodWait=true, network errors exhausting maxRetries, temporary 5xx errors, GramJS errorMessage field)ipc-protocol-branches.test.ts(8) — edge cases (malformed JSON, blank lines, partial line buffering, multiple messages in one chunk)
Coverage after release
rate-limiter.ts: 89% → 100% stmts, 81% → 97% branchesipc-protocol.ts: 100% / 87.5% branchwireIpcProxies(client.ts): covered
Nothing user-facing
No new MCP tools. No API changes. Drop-in replacement for v1.27.0.
🤖 Generated with Claude Code
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About overpod/mcp-telegram
Telegram MCP server via MTProto/GramJS — 20 tools for reading chats, searching messages, downloading media, managing contacts. QR code login, npx zero-install. Hosted version at mcp-telegram.com.
Related context
Beta — feedback welcome: [email protected]