Update dependencies and enhance Telegram integration

- Added `rustls` as a dependency for improved TLS support.
- Updated `Cargo.lock` to reflect the new `rustls` version.
- Modified the API to include a new optional `telegram_token` in `PlatformCredentials`.
- Enhanced the `create_binding` function to handle Telegram token and messaging configuration.
- Installed the default crypto provider for `rustls` in the main function.

Author: jamiepine

.github/workflows/release.yml

@@ -16,15 +16,7 @@ env:
 
 jobs:
   build-and-push:
-    runs-on: ${{ matrix.runner }}
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - arch: amd64
-            runner: ubuntu-latest
-          - arch: arm64
-            runner: ubuntu-24.04-arm
+    runs-on: ubuntu-latest
     permissions:
       contents: write
       packages: write
@@ -60,68 +52,24 @@ jobs:
           context: .
           target: slim
           push: true
-          platforms: linux/${{ matrix.arch }}
           tags: |
-
-            ${{ env.IMAGE }}:${{ steps.version.outputs.version }}-slim-${{ matrix.arch }}
-            ${{ env.IMAGE }}:slim-${{ matrix.arch }}
-          cache-from: type=gha,scope=release-slim
-          cache-to: type=gha,mode=max,scope=release-slim
+            ${{ env.IMAGE }}:${{ steps.version.outputs.version }}-slim
+            ${{ env.IMAGE }}:slim
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
 
       - name: Build and push full
         uses: docker/build-push-action@v6
         with:
           context: .
           target: full
           push: true
-          platforms: linux/${{ matrix.arch }}
           tags: |
-            ${{ env.IMAGE }}:${{ steps.version.outputs.version }}-full-${{ matrix.arch }}
-            ${{ env.IMAGE }}:full-${{ matrix.arch }}
-          cache-from: type=gha,scope=release-full
-          cache-to: type=gha,mode=max,scope=release-full
-
-
-  publish-manifests:
-    runs-on: ubuntu-latest
-    needs: build-and-push
-    permissions:
-      contents: write
-      packages: write
-    steps:
-      - name: Determine version tag
-        id: version
-        run: |
-          if [ -n "${{ github.event.inputs.tag }}" ]; then
-            VERSION="${{ github.event.inputs.tag }}"
-          elif [[ "$GITHUB_REF" == refs/tags/v* ]]; then
-            VERSION="${GITHUB_REF#refs/tags/}"
-          else
-            VERSION="dev-$(echo $GITHUB_SHA | head -c 7)"
-          fi
-          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
-
-      - name: Log in to GHCR
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Create multi-arch manifests
-        run: |
-          VERSION="${{ steps.version.outputs.version }}"
-          docker buildx imagetools create \
-            --tag ${{ env.IMAGE }}:${VERSION}-slim \
-            --tag ${{ env.IMAGE }}:slim \
-            ${{ env.IMAGE }}:${VERSION}-slim-amd64 \
-            ${{ env.IMAGE }}:${VERSION}-slim-arm64
-          docker buildx imagetools create \
-            --tag ${{ env.IMAGE }}:${VERSION}-full \
-            --tag ${{ env.IMAGE }}:full \
-            --tag ${{ env.IMAGE }}:latest \
-            ${{ env.IMAGE }}:${VERSION}-full-amd64 \
-            ${{ env.IMAGE }}:${VERSION}-full-arm64
+            ${{ env.IMAGE }}:${{ steps.version.outputs.version }}-full
+            ${{ env.IMAGE }}:full
+            ${{ env.IMAGE }}:latest
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
 
       - name: Log in to Fly registry
         uses: docker/login-action@v3
@@ -132,9 +80,8 @@ jobs:
 
       - name: Push to Fly registry
         run: |
-          VERSION="${{ steps.version.outputs.version }}"
           docker buildx imagetools create \
-            --tag registry.fly.io/spacebot-image:${VERSION} \
+            --tag registry.fly.io/spacebot-image:${{ steps.version.outputs.version }} \
             --tag registry.fly.io/spacebot-image:latest \
             ${{ env.IMAGE }}:latest
 
@@ -152,3 +99,4 @@ jobs:
         with:
           tag_name: ${{ steps.version.outputs.version }}
           generate_release_notes: true
+

Cargo.lock

@@ -82,6 +82,9 @@ async-trait = "0.1"
 # Slack
 slack-morphism = { version = "2.17", features = ["hyper"] }
 
+# TLS (shared crypto backend for slack-morphism, reqwest, teloxide)
+rustls = { version = "0.23", default-features = false, features = ["ring"] }
+
 # Telegram
 teloxide = { version = "0.17", default-features = false, features = ["rustls"] }
 

Cargo.toml

@@ -3357,6 +3357,9 @@ struct PlatformCredentials {
     /// Slack app token.
     #[serde(default)]
     slack_app_token: Option<String>,
+    /// Telegram bot token.
+    #[serde(default)]
+    telegram_token: Option<String>,
 }
 
 #[derive(Serialize)]
@@ -3394,6 +3397,7 @@ async fn create_binding(
     // Track adapters that need to be started at runtime
     let mut new_discord_token: Option<String> = None;
     let mut new_slack_tokens: Option<(String, String)> = None;
+    let mut new_telegram_token: Option<String> = None;
 
     // Write platform credentials if provided
     if let Some(credentials) = &request.platform_credentials {
@@ -3429,6 +3433,21 @@ async fn create_binding(
                 new_slack_tokens = Some((bot_token.clone(), app_token.to_string()));
             }
         }
+        if let Some(token) = &credentials.telegram_token {
+            if !token.is_empty() {
+                if doc.get("messaging").is_none() {
+                    doc["messaging"] = toml_edit::Item::Table(toml_edit::Table::new());
+                }
+                let messaging = doc["messaging"].as_table_mut().ok_or(StatusCode::INTERNAL_SERVER_ERROR)?;
+                if !messaging.contains_key("telegram") {
+                    messaging["telegram"] = toml_edit::Item::Table(toml_edit::Table::new());
+                }
+                let telegram = messaging["telegram"].as_table_mut().ok_or(StatusCode::INTERNAL_SERVER_ERROR)?;
+                telegram["enabled"] = toml_edit::value(true);
+                telegram["token"] = toml_edit::value(token.as_str());
+                new_telegram_token = Some(token.clone());
+            }
+        }
     }
 
     // Add the binding to the [[bindings]] array
@@ -3558,6 +3577,20 @@ async fn create_binding(
                     tracing::error!(%error, "failed to hot-start slack adapter");
                 }
             }
+
+            if let Some(token) = new_telegram_token {
+                let telegram_perms = {
+                    let perms = crate::config::TelegramPermissions::from_config(
+                        new_config.messaging.telegram.as_ref().expect("telegram config exists when token is provided"),
+                        &new_config.bindings,
+                    );
+                    std::sync::Arc::new(arc_swap::ArcSwap::from_pointee(perms))
+                };
+                let adapter = crate::messaging::telegram::TelegramAdapter::new(&token, telegram_perms);
+                if let Err(error) = manager.register_and_start(adapter).await {
+                    tracing::error!(%error, "failed to hot-start telegram adapter");
+                }
+            }
         }
     }
 

src/api/server.rs

@@ -53,6 +53,10 @@ struct ActiveChannel {
 }
 
 fn main() -> anyhow::Result<()> {
+    rustls::crypto::ring::default_provider()
+        .install_default()
+        .expect("failed to install rustls crypto provider");
+
     let cli = Cli::parse();
     let command = cli.command.unwrap_or(Command::Start { foreground: false });