🔖 ** release(2.5.3): Packaging, security fixes & dependency upgrades 🔐 **
Released: 2026-06-11
✨ Changes
-
🧰 CI / Packaging: Exclude
.vscodedirectory from GitHub Actions release packages to avoid bundling editor settings. -
🔒 Security / Restore: Added path traversal and unauthorized file checks in restore functionality to prevent arbitrary file access.
Special thanks to @HEXER365 for responsible disclosure 🙏 -
♻️ Refactor: Omit
insecurequery parameter from generated URIs when its value isTrue.
🔧 Dependencies
Upgraded a set of dependencies via dependabot and maintenance PRs, including notable bumps:
- aiohttp → 3.14.0
- pytelegrambotapi → 4.34.0
- requests → 2.34.2
- pymongo → 4.17.0
- pillow → 12.2.0
- psutil → 7.2.2
- certbot → 5.6.0
🐛 Fixes & Chores
- Various dependency bumps and housekeeping merges from dependabot.