v0.6.9

TeleGO v0.6.9

High-performance Telegram MTProxy with TLS fronting.

v0.6.9 — Dependency updates and faster WEB credential rejection

Released 2026-10-08.

WEB credential checks

Unknown WEB credential prefixes no longer require a scan of every configured profile.
Telego builds an immutable index of 8-byte capability prefixes when the WEB manager starts.
Possible matches still require full constant-time comparisons against every profile.
A matching prefix alone cannot authorize a request.

This change applies to bridge authentication, recovery, and credential detection for sanitized fallback.
Existing credentials and proxy links keep their format.

Dependencies and builds

• Go 1.27.2 replaces Go 1.27.1 in source requirements and Docker builders.
  This version includes security fixes for TLS, HTTP, templates, and other standard library components.
  The Go release notes list the changes.
• Prometheus client 1.25.0 and common 0.72.0 replace 1.24.1 and 0.71.0.
• OpenTelemetry 1.47.0 and its Prometheus exporter 0.69.0 replace 1.46.0 and 0.68.0.
• Networking, compression, and other indirect Go dependencies use their latest compatible versions.
• The WEB transfer harness updates aiohttp, cryptography, and pycparser.
• CI updates the checkout, Go setup, and lint actions to their current major versions.

The local gnet module remains based on v2.10.0, the current upstream release.
All Telego patches to gnet remain intact.

Upgrade

Restart Telego after the binary or container update.
Existing v0.6.8 configuration and proxy links remain compatible.
This release requires no additional Nginx changes for a corrected v0.6.8 installation.

If you upgrade from v0.6.7 or earlier, apply the Nginx fallback correction in the v0.6.8 release notes.

Full changelog: v0.6.8…v0.6.9

Full Changelog: v0.6.8...v0.6.9