v3.19.0
mvanhorn/last30days-skillv3.19.0Aug 14, 2026by github-actions[bot]
AI Summary
A major release focusing on security fixes, CI improvements, and new integrations for Amazon and Reddit, while also adding international documentation.
Key Highlights
- Security fixes blocking SessionStart RCE and aligning project trust
- New Amazon buyer-signal source via Bright Data CLI
- X search without X credential using the Grok CLI
- Multiple fixes for Reddit, HackerNews, and GitHub data retrieval
New Features
- Amazon buyer-signal source
- X search via Grok CLI
- Security patches for RCE and dependencies
- International documentation (Chinese)
Full Release Notes
## What's Changed * fix(ci): package MCPB without printing-press by @tmchow in https://github.com/mvanhorn/last30days-skill/pull/903 * fix(security): block SessionStart .env key RCE and align project trust by @tmchow in https://github.com/mvanhorn/last30days-skill/pull/914 * fix(setup-wizard): resolve npx via shutil.which on Windows (#904) by @SomSamantray in https://github.com/mvanhorn/last30days-skill/pull/911 * fix(polymarket): match spelled-out topics against acronym titles by @terry-li-hm in https://github.com/mvanhorn/last30days-skill/pull/891 * fix(hackernews): stop dropping every HN comment on an unmeetable score floor by @terry-li-hm in https://github.com/mvanhorn/last30days-skill/pull/890 * docs: add Simplified Chinese README by @CAN1177 in https://github.com/mvanhorn/last30days-skill/pull/881 * fix: four independently-verified bugs (#905, #908, #886, #909) by @SomSamantray in https://github.com/mvanhorn/last30days-skill/pull/912 * fix(github): repos lane when person-mode PR search is empty by @bekonyn in https://github.com/mvanhorn/last30days-skill/pull/883 * fix(reddit): report keyless 429/403 as transport failures, not no-results by @eugenewong22 in https://github.com/mvanhorn/last30days-skill/pull/900 * docs: add five localized READMEs by @tmchow in https://github.com/mvanhorn/last30days-skill/pull/915 * docs: correct meaning-changing errors in the localized READMEs by @tmchow in https://github.com/mvanhorn/last30days-skill/pull/920 * chore(deps): bump github.com/mark3labs/mcp-go from 0.56.0 to 0.57.0 in /mcp by @dependabot[bot] in https://github.com/mvanhorn/last30days-skill/pull/932 * chore(deps): bump github/codeql-action/upload-sarif from 4.37.1 to 4.37.3 by @dependabot[bot] in https://github.com/mvanhorn/last30days-skill/pull/933 * chore(deps): bump astral-sh/setup-uv from 8.2.0 to 9.0.0 by @dependabot[bot] in https://github.com/mvanhorn/last30days-skill/pull/934 * chore(deps): bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 by @dependabot[bot] in https://github.com/mvanhorn/last30days-skill/pull/935 * chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @dependabot[bot] in https://github.com/mvanhorn/last30days-skill/pull/936 * chore(deps): bump trufflesecurity/trufflehog from 3.95.8 to 3.96.0 by @dependabot[bot] in https://github.com/mvanhorn/last30days-skill/pull/937 * fix: upgrade golang.org/x/text to 0.39.0 (CVE-2026-56852) by @anupamme in https://github.com/mvanhorn/last30days-skill/pull/941 * fix(github): strip planner-injected search qualifiers from topic queries by @SomSamantray in https://github.com/mvanhorn/last30days-skill/pull/955 * fix: save the full artifact on --emit=compact --save-dir runs by @terry-li-hm in https://github.com/mvanhorn/last30days-skill/pull/924 * feat(amazon): buyer-signal source via Bright Data CLI by @mvanhorn in https://github.com/mvanhorn/last30days-skill/pull/988 * fix(github): query is:issue and is:pull-request when authenticated + partition-honesty fix by @mvanhorn in https://github.com/mvanhorn/last30days-skill/pull/994 * feat(reddit): arctic-shift fallback for shreddit listing lanes + fix hidden-failure bug by @mvanhorn in https://github.com/mvanhorn/last30days-skill/pull/992 * fix(rank): keep out-of-window evidence out of the top ranks (from #885) + Greptile fixes by @mvanhorn in https://github.com/mvanhorn/last30days-skill/pull/993 * feat(x): X search with no X credential via the Grok CLI, plus the first-party evidence fixes it needs by @mvanhorn in https://github.com/mvanhorn/last30days-skill/pull/991 * chore(release): bump version to 3.19.0 by @github-actions[bot] in https://github.com/mvanhorn/last30days-skill/pull/996 ## New Contributors * @SomSamantray made their first contribution in https://github.com/mvanhorn/last30days-skill/pull/911 * @CAN1177 made their first contribution in https://github.com/mvanhorn/last30days-skill/pull/881 * @bekonyn made their first contribution in https://github.com/mvanhorn/last30days-skill/pull/883 * @eugenewong22 made their first contribution in https://github.com/mvanhorn/last30days-skill/pull/900 * @anupamme made their first contribution in https://github.com/mvanhorn/last30days-skill/pull/941 **Full Changelog**: https://github.com/mvanhorn/last30days-skill/compare/v3.18.4...v3.19.0