@pipedream/telegram_bot_api 0.5.0 → 0.5.2

package/actions/create-chat-invite-link/create-chat-invite-link.mjs

@@ -4,7 +4,7 @@ export default {
   key: "telegram_bot_api-create-chat-invite-link",
   name: "Create Chat Invite Link",
   description: "Create an additional invite link for a chat, [See the docs](https://core.telegram.org/bots/api#createchatinvitelink) for more information",
-  version: "0.0.7",
+  version: "0.0.8",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/delete-message/delete-message.mjs

@@ -4,7 +4,7 @@ export default {
   key: "telegram_bot_api-delete-message",
   name: "Delete a Message",
   description: "Deletes a message. [See the docs](https://core.telegram.org/bots/api#deletemessage) for more information",
-  version: "0.0.7",
+  version: "0.0.8",
   annotations: {
     destructiveHint: true,
     openWorldHint: true,

package/actions/download-voice-message/download-voice-message.mjs

@@ -7,7 +7,7 @@ export default {
   key: "telegram_bot_api-download-voice-message",
   name: "Download Voice Message",
   description: "Downloads a Telegram voice message to the `/tmp` directory using its `file_id`. Use this after receiving a voice message update to persist the audio locally. [See the documentation](https://core.telegram.org/bots/api#getfile)",
-  version: "0.0.1",
+  version: "0.0.2",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/edit-media-message/edit-media-message.mjs

@@ -8,7 +8,7 @@ export default {
   key: "telegram_bot_api-edit-media-message",
   name: "Edit a Media Message",
   description: "Edits photo or video messages. [See the docs](https://core.telegram.org/bots/api#editmessagemedia) for more information",
-  version: "0.0.8",
+  version: "0.0.9",
   annotations: {
     destructiveHint: true,
     openWorldHint: true,

package/actions/edit-text-message/edit-text-message.mjs

@@ -4,7 +4,7 @@ export default {
   key: "telegram_bot_api-edit-text-message",
   name: "Edit a Text Message",
   description: "Edits text or game messages. [See the docs](https://core.telegram.org/bots/api#editmessagetext) for more information",
-  version: "0.0.7",
+  version: "0.0.8",
   annotations: {
     destructiveHint: true,
     openWorldHint: true,

package/actions/export-chat-invite-link/export-chat-invite-link.mjs

@@ -4,7 +4,7 @@ export default {
   key: "telegram_bot_api-export-chat-invite-link",
   name: "Export Chat Invite Link",
   description: "Generate a new primary invite link for a chat, [See the docs](https://core.telegram.org/bots/api#createchatinvitelink) for more information",
-  version: "0.0.7",
+  version: "0.0.8",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/forward-message/forward-message.mjs

@@ -4,7 +4,7 @@ export default {
   key: "telegram_bot_api-forward-message",
   name: "Forward a Message",
   description: "Forwards messages of any kind. [See the docs](https://core.telegram.org/bots/api#forwardmessage) for more information",
-  version: "0.0.7",
+  version: "0.0.8",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/get-num-members-in-chat/get-num-members-in-chat.mjs

@@ -4,7 +4,7 @@ export default {
   key: "telegram_bot_api-get-num-members-in-chat",
   name: "Get the Number of Members in a Chat",
   description: "Use this module to get the number of members in a chat. [See the docs](https://core.telegram.org/bots/api#getchatmembercount) for more information",
-  version: "0.0.7",
+  version: "0.0.8",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/kick-chat-member/kick-chat-member.mjs

@@ -4,7 +4,7 @@ export default {
   key: "telegram_bot_api-kick-chat-member",
   name: "Kick a Chat Member",
   description: "Use this method to kick a user from a group, a supergroup or channel. [See the docs](https://core.telegram.org/bots/api#banchatmember) for more information",
-  version: "0.0.7",
+  version: "0.0.8",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/list-administrators-in-chat/list-administrators-in-chat.mjs

@@ -4,7 +4,7 @@ export default {
   key: "telegram_bot_api-list-administrators-in-chat",
   name: "List Administrators In Chat",
   description: "Use this module to get a list of administrators in a chat. [See the docs](https://core.telegram.org/bots/api#getchatadministrators) for more information",
-  version: "0.0.7",
+  version: "0.0.8",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/list-chats/list-chats.mjs

@@ -4,7 +4,7 @@ export default {
   key: "telegram_bot_api-list-chats",
   name: "List Chats",
   description: "List available Telegram chats. [See the docs](https://core.telegram.org/bots/api#getupdates) for more information",
-  version: "0.0.7",
+  version: "0.0.8",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/list-commands-options/list-commands-options.mjs

@@ -4,7 +4,7 @@ export default {
   key: "telegram_bot_api-list-commands-options",
   name: "List Commands Options",
   description: "Retrieves available options for the Commands field.",
-  version: "0.0.2",
+  version: "0.0.3",
   type: "action",
   annotations: {
     destructiveHint: false,

package/actions/list-updates/list-updates.mjs

@@ -4,7 +4,7 @@ export default {
   key: "telegram_bot_api-list-updates",
   name: "List Updates",
   description: "Retrieves a list of updates from the Telegram server. [See the docs](https://core.telegram.org/bots/api#getupdates) for more information",
-  version: "0.0.7",
+  version: "0.0.8",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/pin-message/pin-message.mjs

@@ -4,7 +4,7 @@ export default {
   key: "telegram_bot_api-pin-message",
   name: "Pin a Message",
   description: "Pins a message. [See the docs](https://core.telegram.org/bots/api#pinchatmessage) for more information",
-  version: "0.0.7",
+  version: "0.0.8",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/promote-chat-member/promote-chat-member.mjs

@@ -4,7 +4,7 @@ export default {
   key: "telegram_bot_api-promote-chat-member",
   name: "Promote a Chat Member",
   description: "Use this method to promote or demote a user in a supergroup or a channel. [See the docs](https://core.telegram.org/bots/api#promotechatmember) for more information",
-  version: "0.0.7",
+  version: "0.0.8",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/restrict-chat-member/restrict-chat-member.mjs

@@ -4,7 +4,7 @@ export default {
   key: "telegram_bot_api-restrict-chat-member",
   name: "Restrict a Chat Member",
   description: "Use this method to restrict a user in a supergroup. [See the docs](https://core.telegram.org/bots/api#restrictchatmember) for more information",
-  version: "0.0.7",
+  version: "0.0.8",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/send-album/send-album.mjs

@@ -5,7 +5,7 @@ export default {
   key: "telegram_bot_api-send-album",
   name: "Send an Album (Media Group)",
   description: "Sends a group of photos or videos as an album. [See the docs](https://core.telegram.org/bots/api#sendmediagroup) for more information",
-  version: "0.0.8",
+  version: "0.0.9",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/send-audio-file/send-audio-file.mjs

@@ -5,7 +5,7 @@ export default {
   key: "telegram_bot_api-send-audio-file",
   name: "Send an Audio File",
   description: "Sends an audio file to your Telegram Desktop application. [See the docs](https://core.telegram.org/bots/api#sendaudio) for more information",
-  version: "0.0.8",
+  version: "0.0.9",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/send-document-or-image/send-document-or-image.mjs

@@ -5,7 +5,7 @@ export default {
   key: "telegram_bot_api-send-document-or-image",
   name: "Send a Document/Image",
   description: "Sends a document or an image to your Telegram Desktop application. [See the docs](https://core.telegram.org/bots/api#senddocument) for more information",
-  version: "0.0.8",
+  version: "0.0.9",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/send-media-by-url-or-id/send-media-by-url-or-id.mjs

@@ -5,7 +5,7 @@ export default {
   key: "telegram_bot_api-send-media-by-url-or-id",
   name: "Send Media by URL or ID",
   description: "Sends a file (document, photo, video, audio, ...) by HTTP URL or by ID that exists on the Telegram servers. [See the docs](https://core.telegram.org/bots/api#inputmedia) for more information",
-  version: "0.0.8",
+  version: "0.0.9",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/send-photo/send-photo.mjs

@@ -5,7 +5,7 @@ export default {
   key: "telegram_bot_api-send-photo",
   name: "Send a Photo",
   description: "Sends a photo to your Telegram Desktop application. [See the docs](https://core.telegram.org/bots/api#sendphoto) for more information",
-  version: "0.0.8",
+  version: "0.0.9",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/send-sticker/send-sticker.mjs

@@ -4,7 +4,7 @@ export default {
   key: "telegram_bot_api-send-sticker",
   name: "Send a Sticker",
   description: "Sends a .webp sticker to you Telegram Desktop application. [See the docs](https://core.telegram.org/bots/api#sendsticker) for more information",
-  version: "0.0.7",
+  version: "0.0.8",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/send-text-message-or-reply/send-text-message-or-reply.mjs

@@ -4,7 +4,7 @@ export default {
   key: "telegram_bot_api-send-text-message-or-reply",
   name: "Send a Text Message or Reply",
   description: "Sends a text message or a reply to your Telegram Desktop application. [See the docs](https://core.telegram.org/bots/api#sendmessage) for more information",
-  version: "0.0.7",
+  version: "0.0.8",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/send-video/send-video.mjs

@@ -5,7 +5,7 @@ export default {
   key: "telegram_bot_api-send-video",
   name: "Send a Video",
   description: "Sends a video file to your Telegram Desktop application. [See the docs](https://core.telegram.org/bots/api#sendvideo) for more information",
-  version: "0.0.8",
+  version: "0.0.9",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/send-video-note/send-video-note.mjs

@@ -5,7 +5,7 @@ export default {
   key: "telegram_bot_api-send-video-note",
   name: "Send a Video Note",
   description: "As of v.4.0, Telegram clients support rounded square mp4 videos of up to 1 minute long. Use this method to send video messages. [See the docs](https://core.telegram.org/bots/api#sendvideonote) for more information",
-  version: "0.0.8",
+  version: "0.0.9",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/send-voice-message/send-voice-message.mjs

@@ -5,7 +5,7 @@ export default {
   key: "telegram_bot_api-send-voice-message",
   name: "Send a Voice Message",
   description: "Sends a voice message. [See the docs](https://core.telegram.org/bots/api#sendvoice) for more information",
-  version: "0.0.8",
+  version: "0.0.9",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/actions/set-chat-permissions/set-chat-permissions.mjs

@@ -4,7 +4,7 @@ export default {
   key: "telegram_bot_api-set-chat-permissions",
   name: "Set Chat Permissions",
   description: "Set default chat permissions for all members. [See the docs](https://core.telegram.org/bots/api#setchatpermissions) for more information",
-  version: "0.0.7",
+  version: "0.0.8",
   annotations: {
     destructiveHint: true,
     openWorldHint: true,

package/actions/unpin-message/unpin-message.mjs

@@ -4,7 +4,7 @@ export default {
   key: "telegram_bot_api-unpin-message",
   name: "Unpin a Message",
   description: "Unpins a message. [See the docs](https://core.telegram.org/bots/api#unpinchatmessage) for more information",
-  version: "0.0.7",
+  version: "0.0.8",
   annotations: {
     destructiveHint: false,
     openWorldHint: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pipedream/telegram_bot_api",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "description": "Pipedream Telegram_bot_api Components",
   "main": "telegram_bot_api.app.mjs",
   "keywords": [
@@ -11,7 +11,7 @@
   "author": "Pipedream <support@pipedream.com> (https://pipedream.com/)",
   "dependencies": {
     "@pipedream/platform": "^3.1.1",
-    "node-telegram-bot-api": "^0.54.0",
+    "node-telegram-bot-api": "1.2.0",
     "uuid": "^8.3.2"
   },
   "gitHead": "e12480b94cc03bed4808ebc6b13e7fdb3a1ba535",

package/sources/channel-updates/channel-updates.mjs

@@ -6,7 +6,7 @@ export default {
   key: "telegram_bot_api-channel-updates",
   name: "New Channel Updates (Instant)",
   description: "Emit new event each time a channel post is created or updated.",
-  version: "0.1.6",
+  version: "0.1.8",
 
   type: "source",
   dedupe: "unique",

package/sources/common/webhooks.mjs

@@ -3,6 +3,37 @@ import constants from "./constants.mjs";
 import { v4 as uuid } from "uuid";
 import { ConfigurationError } from "@pipedream/platform";
 
+/**
+ * Origin + path of `url`, with any trailing slash removed, or `null` when the
+ * value is not a parseable absolute URL. Comparing the parsed form rather than
+ * the raw string avoids both false negatives from a trailing slash and
+ * substring-based spoofing such as `https://evil.com/?u=<our endpoint>`.
+ */
+function normalizeUrl(url) {
+  try {
+    const {
+      origin, pathname,
+    } = new URL(url);
+    return `${origin}${pathname.replace(/\/+$/, "")}`;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Returns true only when the webhook currently registered on the bot is this
+ * source's own endpoint. Ownership is decided by exact endpoint identity, so a
+ * webhook belonging to an external service — or to a different Pipedream source
+ * sharing the same bot token — is never treated as ours and is left untouched.
+ */
+function isOwnWebhook(currentUrl, ownEndpoint) {
+  const current = normalizeUrl(currentUrl);
+  const own = ownEndpoint
+    ? normalizeUrl(ownEndpoint)
+    : null;
+  return !!current && !!own && current === own;
+}
+
 export default {
   props: {
     telegramBotApi,
@@ -16,13 +47,27 @@ export default {
   },
   hooks: {
     async deploy() {
-      /*
-       *  Telegram only supports a single webhook at a time for a given Bot. If a webhook
-       *  for this Bot already exists, display configuration error.
+      /**
+       * Telegram supports only one webhook per bot. If a stale registration for
+       * *this* source survives from a prior deploy (e.g. the source was removed
+       * with ignoreHookErrors so deactivate() never ran), clear it before
+       * registering again — otherwise activate() stores a fresh secret while
+       * Telegram keeps signing with the old one, and run() silently rejects
+       * every incoming event.
+       *
+       * Any webhook that is not this source's own endpoint — external services
+       * and other Pipedream sources alike — is left intact, and the original
+       * ConfigurationError is thrown so the user is warned before an existing
+       * integration is disrupted.
        */
       const { result } = await this.telegramBotApi.getWebhookInfo();
       if (result.url?.length > 0) {
-        throw new ConfigurationError("[Telegram only supports](https://core.telegram.org/bots/api#setwebhook) a single webhook at a time, for a given Bot. To get around this, you can reuse an existing Telegram Bot source or disable the active source and try again. [View all your sources here](https://pipedream.com/sources).");
+        if (isOwnWebhook(result.url, this.http?.endpoint)) {
+          console.log(`Removing stale webhook for this source (${result.url}) before deploying...`);
+          await this.telegramBotApi.deleteHook();
+        } else {
+          throw new ConfigurationError("[Telegram only supports](https://core.telegram.org/bots/api#setwebhook) a single webhook at a time, for a given Bot. To get around this, you can reuse an existing Telegram Bot source or disable the active source and try again. [View all your sources here](https://pipedream.com/sources).");
+        }
       }
       /**
        * From the docs: https://core.telegram.org/bots/api#getting-updates
@@ -45,6 +90,20 @@ export default {
     async activate() {
       const secret = uuid();
       this.setSecret(secret);
+      /**
+       * Clear this source's own stale registration before registering again.
+       * Anything else is owned by another integration, so throw
+       * ConfigurationError before createHook() runs — Telegram's setWebhook
+       * would otherwise overwrite it and silently break that integration.
+       */
+      const { result } = await this.telegramBotApi.getWebhookInfo();
+      if (result.url?.length > 0) {
+        if (isOwnWebhook(result.url, this.http?.endpoint)) {
+          await this.telegramBotApi.deleteHook();
+        } else {
+          throw new ConfigurationError("[Telegram only supports](https://core.telegram.org/bots/api#setwebhook) a single webhook at a time, for a given Bot. To get around this, you can reuse an existing Telegram Bot source or disable the active source and try again. [View all your sources here](https://pipedream.com/sources).");
+        }
+      }
       await this.telegramBotApi.createHook(this.http.endpoint, this.getEventTypes(), secret);
     },
     async deactivate() {

package/sources/message-updates/message-updates.mjs

@@ -6,7 +6,7 @@ export default {
   key: "telegram_bot_api-message-updates",
   name: "New Message Updates (Instant)",
   description: "Emit new event each time a Telegram message is created or updated.",
-  version: "0.1.7",
+  version: "0.1.9",
   type: "source",
   dedupe: "unique",
   props: {

package/sources/new-bot-command-received/new-bot-command-received.mjs

@@ -6,7 +6,7 @@ export default {
   key: "telegram_bot_api-new-bot-command-received",
   name: "New Bot Command Received (Instant)",
   description: "Emit new event each time a Telegram Bot command is received.",
-  version: "0.0.6",
+  version: "0.0.8",
   type: "source",
   dedupe: "unique",
   props: {

package/sources/new-updates/new-updates.mjs

@@ -6,7 +6,7 @@ export default {
   key: "telegram_bot_api-new-updates",
   name: "New Updates (Instant)",
   description: "Emit new event for each new Telegram event.",
-  version: "0.1.6",
+  version: "0.1.8",
   type: "source",
   dedupe: "unique",
   props: {

package/telegram_bot_api.app.mjs

@@ -1,5 +1,10 @@
 import "./common/env.mjs";
-import TelegramBot from "node-telegram-bot-api";
+// Pinned to 1.2.0. The component builder resolves npm dependencies from the
+// import specifier alone (never from package.json), so an unpinned specifier
+// installs the `latest` dist-tag. node-telegram-bot-api 2.0.0 removed the
+// default export and replaced the `TelegramBot` class with a new `Bot`/`Api`
+// design, so every build since 2026-08-16 failed to load this module.
+import TelegramBot from "node-telegram-bot-api@1.2.0";
 import { axios } from "@pipedream/platform";
 import {
   TELEGRAM_BOT_API_UI_MEDIA_AUDIO,