Update to release 3.2.0

[github-actions]

Update to release 3.2.0

---

Summary by cubic

Release 3.2.0 with security fixes for XSS in post title rendering and other vectors. Bumps user script and package versions and adds the 3.2.0 entry to Update.json.

• Bug Fixes
  • Fix XSS in post title rendering.
  • Fix additional XSS vulnerabilities.

^{Written for commit e155083. Summary will update on new commits.}

[cubic-dev-ai]

2 issues found across 3 files

Prompt for AI agents (all issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="XMOJ.user.js">

<violation number="1" location="XMOJ.user.js:3">
P2: Do not manually update the userscript @version header. Version numbers are automatically managed by the UpdateVersion workflow, and manual edits will desync automation.</violation>
</file>

<file name="package.json">

<violation number="1" location="package.json:3">
P2: Manual version bump conflicts with the automated version management workflow; this change should be performed by UpdateVersion.js, not in the PR.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.}

[cubic-dev-ai]

P2: Do not manually update the userscript @Version header. Version numbers are automatically managed by the UpdateVersion workflow, and manual edits will desync automation.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At XMOJ.user.js, line 3:

<comment>Do not manually update the userscript @version header. Version numbers are automatically managed by the UpdateVersion workflow, and manual edits will desync automation.</comment>

<file context>
@@ -1,6 +1,6 @@
 // ==UserScript==
 // @name         XMOJ
-// @version      3.1.2
+// @version      3.2.0
 // @description  XMOJ增强脚本
 // @author       @XMOJ-Script-dev, @langningchen and the community
</file context>

[cubic-dev-ai]

P2: Manual version bump conflicts with the automated version management workflow; this change should be performed by UpdateVersion.js, not in the PR.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At package.json, line 3:

<comment>Manual version bump conflicts with the automated version management workflow; this change should be performed by UpdateVersion.js, not in the PR.</comment>

<file context>
@@ -1,6 +1,6 @@
 {
   "name": "xmoj-script",
-  "version": "3.1.2",
+  "version": "3.2.0",
   "description": "an improvement script for xmoj.tech",
   "main": "AddonScript.js",
</file context>