- Add step-by-step bot setup: BotFather token, chat ID lookup for
private chats, groups and channels, and repository secrets
- Document comma-separated multiple recipients and glob support for
media file inputs
- Note that file-based inputs require actions/checkout
- Add message formatting section warning about legacy Markdown
escaping failures and recommending html for unpredictable content
- Explain template variable usage with a rendered example and show the
default message format
- Add release and license badges, collapse the getUpdates JSON sample,
cross-link all three language versions
Reproduce the exact scenario from issue #68: write a value to
$GITHUB_OUTPUT in a step with an id, assert the runner interpolates
it, then send it through the message input with format: markdown.
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
- Replace mutable @master references with the v1.1.0 tag
- Add required to/token rows to all input tables
- Add missing message_thread_id row to both Chinese translations
- Reword the default-message note to reference message instead of the
removed args mechanism
- Build and smoke-test the local Dockerfile/entrypoint since the action
now runs the published ghcr image instead of the working tree
- Exercise the empty INPUT_MESSAGE_THREAD_ID guard in the smoke test
- Remove the args step which silently sent the default message
- Replace the mutable latest tag with the immutable 1.1.0 image tag so
released action versions stay reproducible and a bad master push
cannot break existing users
- The runner exports every declared input as an env var even when unset,
and drone-telegram 1.5.0 fails to parse an empty string for the
integer message.thread.id flag
- Build and push multi-arch (amd64/arm64) image on master pushes and version tags
- Generate latest and semver tags via docker metadata action
- Build without pushing on pull requests for validation
The 1.4.0 image binary was built with Go 1.22.6, affected by stdlib
CVE-2025-68121 (crypto/tls certificate validation bypass, CVSS 10.0).
1.4.2 is built with Go 1.25.13 and patched golang.org/x/crypto v0.55.0.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- Scan the repository filesystem for CRITICAL and HIGH vulnerabilities and upload SARIF results to the GitHub Security tab
- Build the Docker image and scan it, gating the build on CRITICAL findings only
- Run quarterly on a schedule, on manual dispatch, and on pushes and pull requests to the default branch
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- Fix a typo in the README.zh-tw.md file
- Translate English text to Traditional Chinese in the README.zh-tw.md file
Signed-off-by: appleboy <appleboy.tw@gmail.com>
- Translate input variables section to Chinese
- Translate example section to Chinese
- Translate specific message sending instructions to Chinese
- Translate Telegram Bot API getting started instructions to Chinese
- Translate template variable section to Chinese
Signed-off-by: appleboy <appleboy.tw@gmail.com>
- Add a Chinese (Simplified) README for GitHub Actions Telegram notifications
- Add a Chinese (Traditional) README for GitHub Actions Telegram notifications
Signed-off-by: appleboy <appleboy.tw@gmail.com>
- Fix minor grammatical errors and improve clarity in the README.md
- Capitalize the first letter of list items in the options table for consistency
Signed-off-by: appleboy <appleboy.tw@gmail.com>
- Convert the list of optional parameters to a table format for better readability
- Fix the table formatting in the "See the result" section
Signed-off-by: appleboy <appleboy.tw@gmail.com>
- Add a GitHub Actions workflow for GoReleaser
- Configure GoReleaser to skip builds by default
- Set up changelog groups with specific regex patterns for categorizing changes
Signed-off-by: appleboy <appleboy.tw@gmail.com>
- Update quotes from single to double in the CI configuration file
- Remove an empty line in the jobs section
- Adjust formatting for the photo and document paths
Signed-off-by: appleboy <appleboy.tw@gmail.com>
Bo-Yi Wu