Changelog
What is new in Telegram OS
A running log of features shipped, security work landed, fixes deployed, and performance improvements rolled out. Newest first.
Wallet-first checkout and Add-account modal
v0.7.0Latest- FeatureAccount creation now happens through an in-page modal (Normal or Special account). No more redirect to the marketplace.
- FeatureWallet-first bundle purchase: buy one or more account-plus-proxy bundles ($4 each) directly from the Accounts page.
- FeatureTeam Manage dialog: invite, change roles, and remove members inline from Settings.
- SecurityRole-rank guards on member updates: admins can no longer promote themselves to owner.
Phase 4 hardening, analytics isolation, Vitest and pytest
v0.6.0- SecuritySealed a cross-tenant leak in the analytics pipeline.
- FeatureWired Vitest and pytest into CI. Coverage threshold enforced on every PR.
- FixResolved a flaky scheduler test that masked a tenant-isolation regression.
Scheduler tenant isolation and DNS-rebinding TOCTOU
v0.5.0- SecurityScheduler now enforces tenant isolation at the queue level.
- SecurityClosed a DNS-rebinding TOCTOU window in webhook delivery.
- SecurityRedis is now authenticated end-to-end across all services.
Second-pass audit fixes
v0.4.0- SecurityFixed privilege-escalation vector in member updates.
- SecurityPatched SSRF in the proxy probe.
- FixAligned WebSocket auth with REST auth. The broken WS auth path is resolved.
- FixSchema-drift checker now runs on every migration.
Audit and regression hardening
v0.3.0- SecurityFirst security audit landed. Fixes for tenant query gaps and missing rate limits.
- FeatureNew regression test suite covering the highest-blast-radius endpoints.
Inbox and Automation public preview
v0.2.0- FeatureUnified inbox shipped with assign, snooze, and internal notes.
- FeatureAutomation runner with human-delay shaping and per-account cooldowns.
- FeatureMarketplace alpha: automation templates and bots.
Initial production-ready release
v0.1.0- FeatureMulti-account workspace, dedicated residential proxies, wallet billing, teams, and analytics. First production cut.