Shabbat 3.1.0

Shabbat 3.1.0

MadelineProto 8.11.10 / Telegram layer 232, with PHP security updates current on 22 October 2026. Docker uses verified PHP 8.4.27; supported manual runtimes start at 8.3.36 / 8.4.27 / 8.5.12 within those branches.

• Central keyboard compatibility preserves existing templates, callback actions, button colors and custom icons while supporting the current native Telegram constructors.
• Remove the upstreamed UpdateLoop/cancellation, GeoPoint and formatted-date patches. Keep the reviewed Fresh Peer and BroadcastManager patches with exact source/hash checks.
• Improve legacy group import with comparable dry-run/apply reports, duplicate reporting, source/target binding and post-import verification.
• Preserve existing group/calendar features, six languages, SQLite data and all 16 immutable migrations. Existing permission masks and the default lock policy are retained.
• Simplify the bilingual READMEs, consolidate obsolete development documents, and provide staged deployment, backup, import and rollback guides.

Install or upgrade

Read the English upgrade guide or מדריך פריסה וייבוא בעברית.

Verify whether the actual production directory is /root/shabbat or /root/shabat. Build in a separate staging directory. Stop and back up the old bot, its data, session, configuration, BroadcastManager state and image before cutover. Review the legacy import report before applying it. Existing 3.0 SQLite installations follow the separate copy/migration path. Run only one active bot instance.

Downloads

• shabbat-3.1.0.zip: deployment source with exact build identity and locked dependencies; Docker installs vendor packages.
• shabbat-3.1.0-corresponding-source.zip: application and documented runtime dependency sources, licenses, active patches and preferred-source supplements.
• RELEASE_MANIFEST.json: exact commit, source scope and artifact hashes.
• SHA256SUMS: verify both archives and the manifest before deployment.

The corresponding-source archive covers the documented application/runtime scope; it is not a complete operating-system image or development-tool source collection. Preserve build-info.json in an unchanged release ZIP. The default source link is this release; modified deployments need matching source.

Validation and limits

Mandatory CI on the final source includes exact security-patched PHP versions, Composer validation/platform checks/security audit, syntax/style/static analysis, unit/integration/regression tests, translations/documentation checks, patch checks, packaging regressions and a fresh Docker build from the deployment ZIP without Git metadata. The verified PHP 8.3.36 / 8.4.27 / 8.5.12 matrix passed 1,363 tests and 55,038 assertions per runtime, with no skips. 39 packaging regressions passed. A separate fresh Windows install and full PHP 8.5.12 run passed; its two POSIX-specific skips execute successfully in Linux CI. The release manifest identifies the tested source. Upstream PHP advisory details and dated scope are documented in installation requirements.

No production deployment, real Telegram delivery, group permission changes or bot restart was performed during this release. In-memory SDK shutdown fixtures do not establish real session serialization, IPC-daemon or Linux-signal acceptance. Live client rendering, holy-day transitions, paid operations and a prolonged production load/soak remain deployment acceptance checks. Earlier 3.0 live testing does not count as 3.1 acceptance.