Skip to content

This release adds 2 notable features for engineering teams evaluating rollout.

Published 1mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-reliability ai-agents ai-cost-optimization ai-safety amp claude-code
+14 more
codex cursor developer-tools feedback-loop gemini guardrails mcp mcp-server opencode pre-action-checks reduce-llm-cost save-llm-tokens thompson-sampling thumbgate

Affected surfaces

auth deps

Summary

AI summary

Analytics scripts now default to Zernio with legacy pollers opt‑in via env var.

Full changelog

[email protected]

Release Links

  • npm: https://www.npmjs.com/package/thumbgate/v/1.13.0
  • GitHub Release: https://github.com/IgorGanapolsky/ThumbGate/releases/tag/v1.13.0
  • Compare: https://github.com/IgorGanapolsky/ThumbGate/compare/v1.12.2...v1.13.0
  • Publish workflow: https://github.com/IgorGanapolsky/ThumbGate/actions/runs/24693134002
  • npm published at: 2026-04-20T22:15:30.984Z
  • npm shasum: 0f88c042f4b9e9a3f5127b542a1c3ac439929f3f
  • npm tarball: https://registry.npmjs.org/thumbgate/-/thumbgate-1.13.0.tgz
  • Release ref: dcc59f564a04c9edf4b19f1178ec99f578243f13

npm Email Companion

npm controls the native "Successfully published" email template, so the email itself stays short. Treat this generated artifact as the full release-note companion for that email: it carries the Changeset summaries, CHANGELOG entry, publish workflow, npm tarball, and shasum when available.

Full Changeset Release Notes

Patch Changes

.changeset/dependabot-huggingface-transformers-4-1-0.md

Add the release note required for the @huggingface/transformers 4.1.0 dependency bump so manifest-only Dependabot updates pass ThumbGate's release hygiene checks.

CHANGELOG.md Entry

1.13.0

Minor Changes

  • #1059 095cb8c Thanks @IgorGanapolsky! - feat(analytics): Zernio as canonical social stack; trim direct-API pollers to opt-in fallback

    scripts/social-analytics/poll-all.js now runs only github + plausible + zernio
    by default. The seven direct-API pollers (reddit, linkedin, x, threads,
    instagram, youtube, tiktok) move to a LEGACY_POLLERS list that activates
    only when THUMBGATE_USE_DIRECT_POLLERS=1.

    Adds scripts/social-analytics/zernio-status.js (npm run social:zernio:status)
    which reads the local engagement_metrics SQLite table, reports per-platform
    row counts for the last 24h, and exits non-zero when zero rows ingested —
    making silent Zernio 402 / auth / rate-limit failures CEO-visible.

    Zernio holds the OAuth connections for every focus channel, so maintaining
    eight separate token rotations + direct pollers was duplicate infrastructure
    that silently skipped on missing env for months. The emergency fallback flag
    preserves the old behavior without making it the default contract.

Patch Changes

  • Ship the Zernio social analytics runtime scripts in a new npm package version so main does not silently skip publish verification after analytics changes.

Verification Standard

  • Publish only runs from main after version sync, tests, and runtime proof pass.
  • The npm package is smoke-tested after publish by installing thumbgate@VERSION in a clean runtime.
  • GitHub Release notes are generated from Changesets, not only GitHub auto-generated PR titles.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track IgorGanapolsky/mcp-memory-gateway

Get notified when new releases ship.

Sign up free

About IgorGanapolsky/mcp-memory-gateway

Pre-action gates that prevent AI coding agents from repeating known mistakes. Captures explicit feedback, auto-promotes failures into prevention rules, and enforces them via hooks.

All releases →

Beta — feedback welcome: [email protected]