v3.19.0

What's Changed

• fix(ci): package MCPB without printing-press by @tmchow in #903
• fix(security): block SessionStart .env key RCE and align project trust by @tmchow in #914
• fix(setup-wizard): resolve npx via shutil.which on Windows (#904) by @SomSamantray in #911
• fix(polymarket): match spelled-out topics against acronym titles by @terry-li-hm in #891
• fix(hackernews): stop dropping every HN comment on an unmeetable score floor by @terry-li-hm in #890
• docs: add Simplified Chinese README by @CAN1177 in #881
• fix: four independently-verified bugs (#905, #908, #886, #909) by @SomSamantray in #912
• fix(github): repos lane when person-mode PR search is empty by @bekonyn in #883
• fix(reddit): report keyless 429/403 as transport failures, not no-results by @eugenewong22 in #900
• docs: add five localized READMEs by @tmchow in #915
• docs: correct meaning-changing errors in the localized READMEs by @tmchow in #920
• chore(deps): bump github.com/mark3labs/mcp-go from 0.56.0 to 0.57.0 in /mcp by @dependabot[bot] in #932
• chore(deps): bump github/codeql-action/upload-sarif from 4.37.1 to 4.37.3 by @dependabot[bot] in #933
• chore(deps): bump astral-sh/setup-uv from 8.2.0 to 9.0.0 by @dependabot[bot] in #934
• chore(deps): bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 by @dependabot[bot] in #935
• chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @dependabot[bot] in #936
• chore(deps): bump trufflesecurity/trufflehog from 3.95.8 to 3.96.0 by @dependabot[bot] in #937
• fix: upgrade golang.org/x/text to 0.39.0 (CVE-2026-56852) by @anupamme in #941
• fix(github): strip planner-injected search qualifiers from topic queries by @SomSamantray in #955
• fix: save the full artifact on --emit=compact --save-dir runs by @terry-li-hm in #924
• feat(amazon): buyer-signal source via Bright Data CLI by @mvanhorn in #988
• fix(github): query is:issue and is:pull-request when authenticated + partition-honesty fix by @mvanhorn in #994
• feat(reddit): arctic-shift fallback for shreddit listing lanes + fix hidden-failure bug by @mvanhorn in #992
• fix(rank): keep out-of-window evidence out of the top ranks (from #885) + Greptile fixes by @mvanhorn in #993
• feat(x): X search with no X credential via the Grok CLI, plus the first-party evidence fixes it needs by @mvanhorn in #991
• chore(release): bump version to 3.19.0 by @github-actions[bot] in #996

New Contributors

• @SomSamantray made their first contribution in #911
• @CAN1177 made their first contribution in #881
• @bekonyn made their first contribution in #883
• @eugenewong22 made their first contribution in #900
• @anupamme made their first contribution in #941

Full Changelog: v3.18.4...v3.19.0