[Snyk] Upgrade telegraf from 4.15.0 to 4.15.2

[jlenon7]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade telegraf from 4.15.0 to 4.15.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2023-11-30.

Release notes

Package name: telegraf

• 4.15.2 - 2023-11-30
  

  EXPERIMENTAL_SESSION_CHECKS introduced in the last minor release had been reporting false positives. This has been fixed; it will now work as intended.

• 4.15.1 - 2023-11-29
  

  • 🔧 Fixed sendPhoto and friends irrecoverably erroring if passed an invalid path, such as a directory.

  • ⚠️ Set the env var EXPERIMENTAL_SESSION_CHECKS=1 to catch session bugs in your code.

    When this is enabled, Telegraf will throw errors if you access/assign to session after Telegraf thinks the middleware chain has exhausted. This can happen if you're missing awaits in async code, and session changes might not get persisted! Previously, these bugs were silently ignored until someone noticed their session was not saved. It's always safe to enable this feature. This behaviour may be default in v5.

• 4.15.0 - 2023-10-23
  

  This is a rather minor release.

  anyOf and allOf filter combinators

  v4.11.0 introduced support for type-guard filters in Composer::on, which allowed you to filter updates based on their content.

  This release adds two new combinators to the filter API: anyOf and allOf. This will play very nicely with custom filters. For example:

  import { anyOf, allOf } from "telegraf/filters";

  // must match all filters
  bot.on(allOf(message(), isGroup), ctx => {
  // ...
  });

  Deprecating hookPath

  The confusingly named hookPath in bot.launch webhook options is now deprecated. It will be removed in the next major release. You can start using path instead, today.

  ---

  Meanwhile, we're working on new modules to add to the Telegraf ecosystem. Look forward to them, and join discussions in the official Telegraf chat!

from telegraf GitHub release notes

Commit messages

Package name: telegraf

• 8659158 version: 4.15.2
• cacc4f7 fix: don't access ctx.session after release
• fef2de1 fix: use Node16 in release action
• e026766 feat: EXPERIMENTAL_SESSION_CHECKS
• 17dcd78 fix: handle createReadStream errors

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs