Skip to content

Commit 560ae47

Browse files
committed
chore: bump version to 0.3.0
This release introduces breaking changes by removing server-side validation logic from the SDK. Server-side validation should now be handled using the init-data-rs crate. Breaking changes: - Removed validate_init_data module - Removed ValidationKey enum - Removed TelegramWebApp::validate_init_data() method - Removed verify_init_data_hash() function - Removed crypto dependencies (hmac-sha256, hex, base64, ed25519-dalek)
1 parent 827feef commit 560ae47

File tree

4 files changed

+40
-32
lines changed

4 files changed

+40
-32
lines changed

.scripts/release.sh

Lines changed: 0 additions & 30 deletions
This file was deleted.

CHANGELOG.md

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,44 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
77

88
## [Unreleased]
99

10+
## [0.3.0] - 2025-11-04
11+
### Removed
12+
- **BREAKING:** Removed server-side validation logic from SDK
13+
- Removed `validate_init_data` module
14+
- Removed `ValidationKey` enum
15+
- Removed `TelegramWebApp::validate_init_data()` method
16+
- Removed `verify_init_data_hash()` function
17+
- **BREAKING:** Removed crypto dependencies: `hmac-sha256`, `hex`, `base64`, `ed25519-dalek`
18+
19+
### Changed
20+
- Updated README to recommend `init-data-rs` crate for server-side validation
21+
- Bot tokens should never be exposed to client-side code
22+
- Validation now requires server-side implementation only
23+
24+
### Migration Guide
25+
For server-side validation, use the `init-data-rs` crate:
26+
```rust
27+
use init_data_rs::{validate, InitData};
28+
29+
async fn authenticate(init_data_str: &str, bot_token: &str)
30+
-> Result<InitData, Box<dyn std::error::Error>> {
31+
let init_data: InitData = validate(init_data_str, bot_token, Some(3600))?;
32+
Ok(init_data)
33+
}
34+
```
35+
36+
## [0.2.18] - 2025-11-03
37+
### Added
38+
- Comprehensive demo documentation (demo/README.md)
39+
- Rust bot example with teloxide and masterror
40+
- Local development guide with cloudflared/ngrok
41+
- Complete WebApp architecture explanation
42+
43+
## [0.2.17] - 2025-11-02
44+
### Fixed
45+
- Improved initialization API with environment detection
46+
- Added typed errors for better error handling
47+
1048
## [0.2.16] - 2025-10-25
1149
### Fixed
1250
- Made `use_telegram_context` Yew hook reactive to properly handle cases when

Cargo.lock

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

Cargo.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
[package]
22
name = "telegram-webapp-sdk"
3-
version = "0.2.18"
3+
version = "0.3.0"
44
rust-version = "1.90"
55
edition = "2024"
66
description = "Telegram WebApp SDK for Rust"

0 commit comments

Comments
 (0)