This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+5 more
Summary
AI summaryFixed generation commands after a broken tile selector and slow shimmer delay.
Full changelog
What's fixed
generate_data_table and generate_video_overview are fully working again, confirmed on macOS M4 with French locale.
Root causes
1. Dead tile selector
clickDataTableTile used .mat-icon, [class*='icon'] which matched SPAN.icon-container before <mat-icon>, so the === "table_view" equality check always failed silently. Fixed to target the mat-icon element tag directly.
2. False failure on slow shimmer
After clicking the tile, if shimmer-blue didn't appear within 15s the tools returned success: false. The click was triggering generation server-side but the headless browser DOM update lagged. Now returns { success: true, status: "generating" } so callers can poll with get_data_table / get_video_status.
3. data-create-button-type removed by Google
Google removed this attribute from all Studio panel tiles (Feb 2026). Replaced with mat-icon text (table_view) and jslog ID (282298) as locale-independent selectors.
Also in this release
- Studio panel
waitForSelectortimeout increased from 10s → 30s - Full i18n pass: locale-independent selectors throughout (CSS classes, Material icon names,
jslogIDs) — English text as last-resort fallback only - GitHub Actions CI on all PRs +
mainbranch protection (force push / deletion blocked, build check required)
Upgrading
git pull && npm run build
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Pantheon-Security/notebooklm-mcp-secure
Security-hardened NotebookLM MCP with post-quantum encryption (ML-KEM-768), GDPR/SOC2/CSSF compliance, and 14 security layers. Query Google's Gemini-grounded research from Claude and AI agents.
Related context
Beta — feedback welcome: [email protected]