Skip to content

This release includes breaking changes for platform teams planning a safe upgrade.

Published 2mo MCP Security & Auth
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai automation browser-automation claude google llm
+5 more
mcp model-context-protocol notebooklm research typescript

Summary

AI summary

UI selector fallbacks added for video tiles, studio panels, file upload dialogs, close dialog buttons and chat input.

Full changelog

What's New

Fix: UI Selector Hardening

NotebookLM's DOM can change without notice. This release makes the browser automation more resilient to class renames and UI updates.

Video tile detection (video-manager.ts)

  • Added mat-icon text scan as a fallback in clickVideoTile — finds the video tile by icon exclusion (!= "table_view") rather than relying solely on the .green CSS class
  • Now uses the same locale-independent pattern already used by data-table

Studio panel detection (video-manager.ts + data-table-manager.ts)

  • Added [class*='create-artifact'] to ensureStudioPanelOpen — panel detection no longer breaks if Google renames .create-artifact-button-container

File upload dialog (selectors.ts)

  • Added 3 new fallbacks for chooseFileButton: [class*="file-dialog-button"], button[class*="upload"][class*="trigger"], span[class*="file-dialog"]
  • Resilient against Dropzone.js class renames

Close dialog button (selectors.ts)

  • Added US spelling button[aria-label="Close dialog"] alongside British "Close dialogue" — survives if Google normalises to US English

Chat input (selectors.ts)

  • Removed hardcoded German aria-label="Feld für Anfragen" fallback
  • Replaced with locale-agnostic chain: textarea[aria-label], textarea[class*="query"], .chat-input textarea

Docs: Compliance Language Clarification

Updated README and package.json to accurately reflect compliance-ready architecture rather than implying formal certification. All GDPR/SOC2/CSSF controls are implemented — formal certification requires a third-party audit engagement. Added a footnote to the comparison table making this distinction clear.


Full changelog: CHANGELOG.md

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Pantheon-Security/notebooklm-mcp-secure

Get notified when new releases ship.

Sign up free

About Pantheon-Security/notebooklm-mcp-secure

Security-hardened NotebookLM MCP with post-quantum encryption (ML-KEM-768), GDPR/SOC2/CSSF compliance, and 14 security layers. Query Google's Gemini-grounded research from Claude and AI agents.

All releases →

Beta — feedback welcome: [email protected]