🤖: EDM115 released Version 7.3.0 [stable]
🚧 #released
Body:
> [!IMPORTANT]
> This release is just made to get the last year of changes out of the door and work on the refactor.
> While it is technically better and more stable than7.0.0a(even given that other tag releases have been made), still consider it beta territory.
> Development will start again, starting today ! I will probably change my mind *again* regarding to the versioning but overall you should expect changes ofv7-rework-part-1to land in a v7.4 soon and future work will happen directly onv7.
> Once the refactor is feature-complete, all of this will be merged intomasterfor a v8 release.
> GitHub releases will be used more extensively to document changes of the code. Older releases might be "back-created" if possible.
> The changelog file will be updated later.
## BREAKING CHANGES
- :warning: Security fix : The bot is no longer vulnerable to user attacks, see GHSA-34cg-7f8c-fm5h / CVE-2024-53992 for more info *(this fix have been present sincev7.0.3a)*
- Usesasyncio.create_subprocess_shell()instead of the hackish way that was present before
- Usesshlexto sanitize user input for shell commands (file paths and archive passwords)
- The start of the bot is finallyasync, although it hasn't been fully tested. This might cause issues. So far I had none but the implementation might be flaky. To be continued...
- Use apyproject.tomlfile
- All function calls now use named arguments, as far as Pylance reported them
- Strings processing is entirely redone
- ALL strings are in JSON files, which will help with future translation
- Only English supported for now
- Deleted unused strings, moved plain text to the JSON, fixed grammar mistakes
- Split buttons and messages processing
- Added a default language that gets used for non-user tied strings and logs
- Untranslated strings fall back to English (or default language)
- String keys aren't definitives, hence why I haven't already started a French translation
- Implemented a memory limit on ran commands to avoidR14andR15errors on Heroku (first usingresourcethenulimit) *(this might potentially cause poorer performance. furthermore,psutilseems a bit broken on Heroku)*
- Set a manual limit of RAM in Heroku (80% of 512 MB, can be manually changed) to avoid getting the limit being pulled from system info (wrong data as it gets it from the entire host)
- Limit CPU usage too usingcpulimit
- Gets maxed at 80% of the current amount of cores for shell tasks
- Ensures enough room is left to the bot process
- Migrate frompyrogramtopyroblack, nokurigram, nopyrofork(v8 will be good enough to probably settle onpyroblack, we'll see)
- Creates a lock file on start
- Deletes it in case of errors/shutting down
- Restricts users from processing archives when the bot hasn't started yet
- Reduces the number of FloodWaits by reducing the number of messages sent/edited and not displaying an upload progressbar for files under 50 Mb, also handles FloodPremiumWait
- Let pyrogram handle floodwaits up to 2h
## Features
- Split RAR archives are finally supported 🥳
- AddedMONGODB_DBNAMEas an option for Heroku deployment
- More commands that were restricted to the Bot Owner can now be run outside of DM, ex in the logs group (if they're not anonymous)
- Users can finally cancel a task (see #28), however it doesn't work perfectly for split archives ...
🚧 #released
🤖: EDM115 pushed 13 commits to unzip-bot
🚧 #pushed
aee2059: fix(dependencies): update dependency setuptools to v78.1.1 (#414)
| datasource | package | from | to |
| ---------- | ---------- | ------ | ------ |
| pypi | setuptools | 78.1.0 | 78.1.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
272b6cb: fix(dependencies): update dependency aiohttp to v3.11.17 (#415)
| datasource | package | from | to |
| ---------- | ------- | ------- | ------- |
| pypi | aiohttp | 3.11.16 | 3.11.17 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
cd35230: fix(dependencies): update dependency setuptools to v79 (#416)
| datasource | package | from | to |
| ---------- | ---------- | ------ | ------ |
| pypi | setuptools | 78.1.1 | 79.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
1e0ae3d: fix(dependencies): update dependency aiohttp to v3.11.18 (#417)
| datasource | package | from | to |
| ---------- | ------- | ------- | ------- |
| pypi | aiohttp | 3.11.17 | 3.11.18 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
50df41d: fix(dependencies): update dependency setuptools to v79.0.1 (#418)
| datasource | package | from | to |
| ---------- | ---------- | ------ | ------ |
| pypi | setuptools | 79.0.0 | 79.0.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
8bb9548: fix(dependencies): update dependency setuptools to v80 (#419)
| datasource | package | from | to |
| ---------- | ---------- | ------ | ------ |
| pypi | setuptools | 79.0.1 | 80.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
a52e4e4: fix(dependencies): update dependency setuptools to v80.1.0 (#420)
| datasource | package | from | to |
| ---------- | ---------- | ------ | ------ |
| pypi | setuptools | 80.0.0 | 80.1.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2f1cac2: chore: limit renovate and dependabot
...
🚧 #pushed
🤖: dependabot[bot] pushed 1 commit to unzip-bot
🚧 #pushed
8fec44f: [dependabot/pip] (deps): Bump unzip-http from 0.6 to 0.7
Bumps unzip-http from 0.6 to 0.7.
- Release notes
- Changelog
- Commits
---
updated-dependencies:
- dependency-name: unzip-http
dependency-version: '0.7'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]>
🚧 #pushed
🤖: dependabot[bot] wants to merge 1 commit into unzip-bot#465
🚧 #pull_request
Title: [dependabot/pip] (deps): Bump unzip-http from 0.6 to 0.7
FileChanged: 1 with +1 -1
🚧 #pull_request
🤖: dependabot[bot] pushed 1 commit to unzip-bot
🚧 #pushed
49fbb2c: [dependabot/pip] (deps): Bump dnspython from 2.7.0 to 2.8.0
Bumps dnspython from 2.7.0 to 2.8.0.
- Release notes
- Changelog
- Commits
---
updated-dependencies:
- dependency-name: dnspython
dependency-version: 2.8.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]>
🚧 #pushed
🤖: dependabot[bot] wants to merge 1 commit into unzip-bot#466
🚧 #pull_request
Title: [dependabot/pip] (deps): Bump dnspython from 2.7.0 to 2.8.0
FileChanged: 1 with +1 -1
🚧 #pull_request
❤1
⚡ unzip-bot updates tracker ⚡
🤖: NodeGPTjs starred unzip-bot Forks: 168 🍴 Stars: 136 ⭐ 🚧 #starred
sorry buddy, this is a Python project
👍1