Release v3.31.0 · ZhuLinsen/daily_stock_analysis

v3.31.0

feat: Agent 工具调用新增按类别和单工具配置的超时契约，并补齐防重试、协作取消、并发预算、线程安全与热重载一致性。
feat: 股票名称解析、StockDaily.canonical_id 双写和 A 股指数多数据源 fallback 路由共同完善股票身份与行情降级链路。
improve: 新闻检索为空时在报告中如实披露证据边界；Anspire 默认覆盖全球区域，公共 SearXNG 实例改为显式启用。
fix: 修复服务重启后的定时任务恢复、分析无报告时的失败反馈、钉钉通知识别，以及大盘复盘历史摘要和实际生成后端诊断。
security: 桌面端升级 builder-util-runtime 至 9.7.0，修复 CVE-2026-54673 涉及的 HTTP 重定向凭据头信息泄露风险。
docs: 增加 xAI Grok 的 LiteLLM 配置示例、Grok Bot 集成说明与可复用异步分析 Skill，并更新 AIHubMix 中国大陆直连入口。

Added category-level and per-tool Agent timeout policies with first-wins resolution, non-retriable timeout results, cooperative cancellation, bounded parallel execution, cache synchronization, and runtime reload support, by @lmx-2077.
Expanded stock identity handling with cross-market name candidates, deterministic canonical_id persistence, and dedicated multi-source fallback routes for registered A-share indices, by @Gach-Coder and @elvisw.
Made missing news evidence explicit across reports and localized surfaces, switched Anspire to global-region search, and changed unreliable public SearXNG discovery to opt-in, by @Mach-Chan and @yddcy.
Restored persisted schedules after service restarts, made no-report analysis failures explicit, recognized DingTalk Webhooks as notification channels, and corrected market-review summaries and generator diagnostics, by @ZhuLinsen and @mameikagou.
Upgraded the desktop updater dependency path to builder-util-runtime 9.7.0 to address CVE-2026-54673, by @anupamme.
Added xAI Grok LiteLLM examples, Grok Bot integration guidance, and an async-safe Skill contract, and updated AIHubMix referral links for mainland China connectivity, by @tseliangmin-star and @ZhuLinsen.
Stabilized yfinance dividend TTM and single-stock report filename fixtures so backend CI no longer depends on the wall clock, by @xxiaoxiong and @ZhuLinsen.