chore(release): 8.16.0

[GeiserX]

Version bump and changelog for 8.16.0. Voice messages can now be read and searched: the archive sends audio to akou or any OpenAI-compatible server and keeps the text beside the audio (#484, #485, #486). Migration 032 runs on upgrade; nothing changes until TRANSCRIPTION_URL is set. The commented akou service in docker-compose.yml now pins the published drumsergio/akou:0.2.1 and says the image runs as uid 1000.

Summary by CodeRabbit

• New Features

  • Added optional voice and audio transcription, triggered after media backups or immediately as new media arrives. Transcripts can be searched and viewed in archive interfaces, with optional speaker labels and on-demand transcription.
  • Transcription supports priority chats and reuses results for duplicate audio. Video uploads include only the audio track and are subject to a configurable size limit.
  • Accounts without download permission cannot view transcript text. Transcription remains inactive until configured.

• Documentation

  • Updated setup and release documentation for version 8.16.0, including transcription options and the akou example.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Warning

Review limit reached

Next included review available in 8 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used all 2 included reviews currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Repository: GeiserX/Telegram-Archive/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: 155b77fc-0c10-4964-a710-5cb210a1b166

📥 Commits

Reviewing files that changed from the base of the PR and between cb0e22c and 92b2798.

⛔ Files ignored due to path filters (1)

• uv.lock is excluded by !**/*.lock

📒 Files selected for processing (6)

• README.md
• docker-compose.yml
• docs/CHANGELOG.md
• pyproject.toml
• scripts/migrate-sqlite-to-postgres.py
• src/__init__.py

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: GeiserX/Telegram-Archive/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: 380f5752-4f6e-4b4d-b1cd-20e223cedc53

📥 Commits

Reviewing files that changed from the base of the PR and between db8dc20 and cb0e22c.

⛔ Files ignored due to path filters (1)

• uv.lock is excluded by !**/*.lock

📒 Files selected for processing (6)

• README.md
• docker-compose.yml
• docs/CHANGELOG.md
• pyproject.toml
• scripts/migrate-sqlite-to-postgres.py
• src/__init__.py

Included review availability: This review used your included allowance. Your plan provides up to 2 included reviews per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

This release updates the project version and deployment image references to 8.16.0, revises the commented akou setup example, and adds changelog notes about transcription and transcript handling.

Changes

8.16.0 release updates

Layer / File(s)	Summary
Set the project version pyproject.toml, src/__init__.py	The project and package version values change from 8.15.1 to 8.16.0.
Update deployment and migration examples README.md, docker-compose.yml, scripts/migrate-sqlite-to-postgres.py	The examples use updated image tags. The commented akou example changes its image and setup instructions.
Document 8.16.0 docs/CHANGELOG.md	The changelog describes transcription features, transcript access and retention, migration, and configuration notes.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~8 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to cb0e2

The release updates are ready to merge after normal checks. The reported transcription transport concern is not introduced by this change.

Security Architecture Review

Security architecture risk: 🔵 Low · up to cb0e2

The optional speech-service example remains disabled by default and does not publish a host port. If enabled, its existing unencrypted connection can carry audio and a configured API key; the updated instructions may make that deployment more practical.

Retained concerns

• Low · security · inferred: The revised, more actionable opt-in akou instructions retain an HTTP path for archived audio and a configured bearer key. This is a conditional rollout concern, not a newly introduced transport defect; the prior example used the same HTTP address.

Security review details

Security Blast Radius

• inferred — The cleartext hop is conditional on enabling and configuring transcription. Its demonstrated scope is the configured service connection on the Docker network, not an independently exposed public akou port; interception would require access to that traffic path.

Security Findings and Attack Paths

• observed — A retained security finding identifies possible exposure of audio and a configured bearer key on the HTTP transcription hop. The HTTP address predates this PR; the changed instructions affect how readily the optional example can be deployed, not the client’s transport control.

Trust Boundaries and Controls

• observed — The client does not follow redirects and only sends the bearer key when configured. These limits do not encrypt the configured HTTP hop. Transcript-facing routes separately apply authentication, chat visibility, and no-download checks.

Hardening Proposals

• proposed — Before enabling transcription, use an authenticated, encrypted service connection or an appropriately isolated transport for audio and any API key; verify the selected image and listening configuration as part of that rollout.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description summarizes the release, transcription feature, migration, and Docker image update. It omits the required Type of Change, Database Changes, Testing, Security Checklist, and Deployment N…	Add all template sections. Mark the applicable change, database, testing, and security checklist items. Include deployment notes for migration 032 and the updated Docker image.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies the release version and matches the primary changes: the 8.16.0 version bump and release documentation.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 2…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Description check

Explanation

The description summarizes the release, transcription feature, migration, and Docker image update. It omits the required Type of Change, Database Changes, Testing, Security Checklist, and Deployment Notes sections. The database section is especially important because the description mentions migration 032.

✨ Finishing Touches

📝 Generate docstrings

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

🐳 Dev images published!

• drumsergio/telegram-archive:dev
• drumsergio/telegram-archive-viewer:dev

The dev/test instance will pick up these changes automatically (Portainer GitOps).

To test locally:

docker pull drumsergio/telegram-archive:dev
docker pull drumsergio/telegram-archive-viewer:dev

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.71%. Comparing base (4850d1d) to head (92b2798).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #487   +/-   ##
=======================================
  Coverage   94.71%   94.71%           
=======================================
  Files          31       31           
  Lines       13891    13891           
=======================================
  Hits        13157    13157           
  Misses        734      734           

Files with missing lines	Coverage Δ
src/__init__.py	100.00% <100.00%> (ø)

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

🐳 Dev images published!

• drumsergio/telegram-archive:dev
• drumsergio/telegram-archive-viewer:dev

The dev/test instance will pick up these changes automatically (Portainer GitOps).

To test locally:

docker pull drumsergio/telegram-archive:dev
docker pull drumsergio/telegram-archive-viewer:dev