v0.26.0

🔖 Release: v0.26.0 — SDK Maturity, Security & MCP Integration

SDK maturity release with a critical gRPC security fix, builder improvements, 82% test coverage, and MCP server integration for AI-powered TRON development.

✨ Features

• Builder improvements — fluent WithPermissionID, WithFeeLimit, WithCallValue, WithTokenValue on contract builder; WithMemo, WithPermissionID on transaction builder (#279, #280)
• .Sign() terminal — sign transactions directly from the builder chain (#284)
• WithdrawExpireUnfreeze — new transaction builder method + decode support (#279, #284)
• TRC20 metadata cache — LRU cache for token name, symbol, and decimals to reduce RPC calls (#282)
• Configurable mnemonic entropy — Generate(WithEntropy(128)) for 12-word mnemonics (#277)
• TRC20 integration tests — contract deploy, transfer, balance check, approve via CLI (#288)
• MCP server — README now links to gotron-mcp and hosted endpoint at mcp.gotron.sh for AI-assisted TRON development (#290)

🔒 Security

• gRPC CVE-2026-33186 — updated google.golang.org/grpc to v1.79.3 (authorization bypass via malformed :path header) (#276)

🐛 Bug Fixes

• TRC10 constant calls — forward token value in Call() for correct simulation (#281)
• --details flag — properly wired in account balance command (#275)
• Homedir handling — removed go-homedir dependency, use os.UserHomeDir() (#287)
• Misspellings and gofmt — corrected typos, applied gofmt -s simplifications (#270)

🔨 Refactoring

• Major SDK cleanup — correctness, architecture, security, and testing improvements (#285)
• Pre-release polish — dependency updates, result decoding fixes (#289)

🧪 Testing

• Code coverage: 54% → 82.6% with Codecov integration (#278)
• Updated demo GIF with contract reads, address conversion, SR detail (#290)

Full Changelog: v0.25.2...v0.26.0