v3.19.0

mvanhorn/last30days-skillv3.19.0Aug 14, 2026by github-actions[bot]

AI Summary

A major release focusing on security fixes, CI improvements, and new integrations for Amazon and Reddit, while also adding international documentation.

Key Highlights

  • Security fixes blocking SessionStart RCE and aligning project trust
  • New Amazon buyer-signal source via Bright Data CLI
  • X search without X credential using the Grok CLI
  • Multiple fixes for Reddit, HackerNews, and GitHub data retrieval

New Features

  • Amazon buyer-signal source
  • X search via Grok CLI
  • Security patches for RCE and dependencies
  • International documentation (Chinese)

Full Release Notes

## What's Changed
* fix(ci): package MCPB without printing-press by @tmchow in https://github.com/mvanhorn/last30days-skill/pull/903
* fix(security): block SessionStart .env key RCE and align project trust by @tmchow in https://github.com/mvanhorn/last30days-skill/pull/914
* fix(setup-wizard): resolve npx via shutil.which on Windows (#904) by @SomSamantray in https://github.com/mvanhorn/last30days-skill/pull/911
* fix(polymarket): match spelled-out topics against acronym titles by @terry-li-hm in https://github.com/mvanhorn/last30days-skill/pull/891
* fix(hackernews): stop dropping every HN comment on an unmeetable score floor by @terry-li-hm in https://github.com/mvanhorn/last30days-skill/pull/890
* docs: add Simplified Chinese README by @CAN1177 in https://github.com/mvanhorn/last30days-skill/pull/881
* fix: four independently-verified bugs (#905, #908, #886, #909) by @SomSamantray in https://github.com/mvanhorn/last30days-skill/pull/912
* fix(github): repos lane when person-mode PR search is empty by @bekonyn in https://github.com/mvanhorn/last30days-skill/pull/883
* fix(reddit): report keyless 429/403 as transport failures, not no-results by @eugenewong22 in https://github.com/mvanhorn/last30days-skill/pull/900
* docs: add five localized READMEs by @tmchow in https://github.com/mvanhorn/last30days-skill/pull/915
* docs: correct meaning-changing errors in the localized READMEs by @tmchow in https://github.com/mvanhorn/last30days-skill/pull/920
* chore(deps): bump github.com/mark3labs/mcp-go from 0.56.0 to 0.57.0 in /mcp by @dependabot[bot] in https://github.com/mvanhorn/last30days-skill/pull/932
* chore(deps): bump github/codeql-action/upload-sarif from 4.37.1 to 4.37.3 by @dependabot[bot] in https://github.com/mvanhorn/last30days-skill/pull/933
* chore(deps): bump astral-sh/setup-uv from 8.2.0 to 9.0.0 by @dependabot[bot] in https://github.com/mvanhorn/last30days-skill/pull/934
* chore(deps): bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 by @dependabot[bot] in https://github.com/mvanhorn/last30days-skill/pull/935
* chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @dependabot[bot] in https://github.com/mvanhorn/last30days-skill/pull/936
* chore(deps): bump trufflesecurity/trufflehog from 3.95.8 to 3.96.0 by @dependabot[bot] in https://github.com/mvanhorn/last30days-skill/pull/937
* fix: upgrade golang.org/x/text to 0.39.0 (CVE-2026-56852) by @anupamme in https://github.com/mvanhorn/last30days-skill/pull/941
* fix(github): strip planner-injected search qualifiers from topic queries by @SomSamantray in https://github.com/mvanhorn/last30days-skill/pull/955
* fix: save the full artifact on --emit=compact --save-dir runs by @terry-li-hm in https://github.com/mvanhorn/last30days-skill/pull/924
* feat(amazon): buyer-signal source via Bright Data CLI by @mvanhorn in https://github.com/mvanhorn/last30days-skill/pull/988
* fix(github): query is:issue and is:pull-request when authenticated + partition-honesty fix by @mvanhorn in https://github.com/mvanhorn/last30days-skill/pull/994
* feat(reddit): arctic-shift fallback for shreddit listing lanes + fix hidden-failure bug by @mvanhorn in https://github.com/mvanhorn/last30days-skill/pull/992
* fix(rank): keep out-of-window evidence out of the top ranks (from #885) + Greptile fixes by @mvanhorn in https://github.com/mvanhorn/last30days-skill/pull/993
* feat(x): X search with no X credential via the Grok CLI, plus the first-party evidence fixes it needs by @mvanhorn in https://github.com/mvanhorn/last30days-skill/pull/991
* chore(release): bump version to 3.19.0 by @github-actions[bot] in https://github.com/mvanhorn/last30days-skill/pull/996

## New Contributors
* @SomSamantray made their first contribution in https://github.com/mvanhorn/last30days-skill/pull/911
* @CAN1177 made their first contribution in https://github.com/mvanhorn/last30days-skill/pull/881
* @bekonyn made their first contribution in https://github.com/mvanhorn/last30days-skill/pull/883
* @eugenewong22 made their first contribution in https://github.com/mvanhorn/last30days-skill/pull/900
* @anupamme made their first contribution in https://github.com/mvanhorn/last30days-skill/pull/941

**Full Changelog**: https://github.com/mvanhorn/last30days-skill/compare/v3.18.4...v3.19.0