docs: 添加v0.1.3发布说明并修改CI/CD从文件读取 / Add v0.1.3 release notes and make CI/CD read from file

- 为 v0.1.3 补充完整的发布说明（功能、修复、安全更新）
- 修改 GitHub Actions release job，改为从 RELEASE_NOTES.md 动态提取版本内容
- 避免重复维护固定文案，两者复用统一源

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>

Author: 2 people

.github/workflows/ci-cd.yml

@@ -713,6 +713,50 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/v') && (needs.changes.outputs.rust == 'true' || true)  # 在版本tag推送时总是触发（允许tag绕过paths-filter）
 
     steps:
+    - name: "[CHECKOUT] Checkout Repository for Release Notes"
+      uses: actions/checkout@v4
+
+    - name: "[EXTRACT] Extract Release Notes from RELEASE_NOTES.md"
+      id: extract-notes
+      shell: bash
+      run: |
+        # 从 tag 名称提取版本号（例如 v0.1.3）
+        version="${{ github.ref_name }}"
+
+        # 使用 awk 提取对应版本的 release notes
+        release_body=$(awk "
+          /^## $version / {
+            found=1
+            next
+          }
+          found && /^## v[0-9]/ {
+            exit
+          }
+          found {
+            print
+          }
+        " RELEASE_NOTES.md | sed '$d')  # 移除最后的空行
+
+        # 将多行内容保存到输出
+        {
+          echo 'body<<EOF'
+          echo "$release_body"
+          echo ""
+          echo "---"
+          echo "### 📦 Available Downloads / 可用下载"
+          echo "- **Windows x64**: \`MacinMeter-DR-Tool-*-windows-x64.exe\`"
+          echo "- **macOS Intel**: \`MacinMeter-DR-Tool-*-macos-intel\`"
+          echo "- **macOS Apple Silicon**: \`MacinMeter-DR-Tool-*-macos-arm64\`"
+          echo "- **Linux x64**: \`MacinMeter-DR-Tool-*-linux-x64\`"
+          echo ""
+          echo "### 🖥️ GUI (Experimental / 实验版)"
+          echo "- **macOS**: \`MacinMeter-DR-GUI-*.dmg\`"
+          echo "- **Windows**: \`MacinMeter-DR-GUI-*.exe\`"
+          echo ""
+          echo "**Full Changelog**: https://github.com/${{ github.repository }}/blob/main/RELEASE_NOTES.md"
+          echo "EOF"
+        } >> $GITHUB_OUTPUT
+
     - name: "[DOWNLOAD] Download All Artifacts"
       uses: actions/download-artifact@v4
 
@@ -721,32 +765,9 @@ jobs:
       with:
         draft: false
         prerelease: contains(github.ref, 'alpha') || contains(github.ref, 'beta') || contains(github.ref, 'rc')
-        generate_release_notes: true
+        generate_release_notes: false
         files: |
           MacinMeter-DR-Tool-*/MacinMeter-DR-Tool-*
-        body: |
-          ## MacinMeter DR Tool Release
-
-          ### Features
-          - [OK] 基于foobar2000 DR Meter的衍生实现
-          - [OK] 基于IDA Pro逆向工程的算法研究与独立实现
-          - [OK] SIMD加速和多线程支持
-          - [OK] 批量处理模式（双击启动）
-          - [OK] 支持多种音频格式 (WAV, FLAC, MP3, AAC, OGG)
-          - [OK] 兼容foobar2000格式的详细分析报告
-
-          ### Available Platforms
-          - **Windows x64**: `MacinMeter-DR-Tool-*-windows-x64.exe`
-          - **macOS Intel**: `MacinMeter-DR-Tool-*-macos-intel`
-          - **macOS Apple Silicon**: `MacinMeter-DR-Tool-*-macos-arm64`
-          - **Linux x64**: `MacinMeter-DR-Tool-*-linux-x64`
-
-          ### Quick Start
-          1. Download the binary for your platform
-          2. Place in a folder with audio files
-          3. Double-click to run (or use command line)
-          4. Results saved to `DR_Analysis_Results_*.txt`
-
-          **Full Changelog**: https://github.com/${{ github.repository }}/compare/${{ github.event.before }}...${{ github.sha }}
+        body: ${{ steps.extract-notes.outputs.body }}
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

RELEASE_NOTES.md

@@ -1,5 +1,44 @@
 # Release Notes / 发布说明
 
+## v0.1.3 (2026-02-07) – Boundary Risk Control & Security Fixes / 边界风险控制与安全修复
+
+### Features / 新功能
+- GUI / 图形界面
+  - Added "Hide Boundary Risk" toggle button: control visibility of DR boundary warnings in UI and exports.
+    新增"隐藏边界风险"按钮：控制边界风险警告在UI及导出中的显示。
+  - Boundary risk setting persists across single/multi-file exports (MD, JSON, PNG).
+    边界风险设置跨越单文件/多文件导出保持一致（MD、JSON、PNG）。
+
+- CLI / 命令行
+  - Added `--hide-boundary-risk` flag: suppress boundary risk warnings in text/JSON output.
+    新增 `--hide-boundary-risk` 参数：隐藏文本/JSON 输出中的边界风险警告。
+  - Behavior: warning is excluded from both compact and JSON reports when flag is set.
+    行为：设置后警告从紧凑格式和 JSON 报告中排除。
+
+### Fixed / 修复
+- **Security**: Fixed RUSTSEC-2026-0007 (bytes integer overflow) by enforcing `bytes >= 1.11.1`.
+  **安全**：通过强制 `bytes >= 1.11.1` 修复 RUSTSEC-2026-0007（bytes 整数溢出）。
+- **Security**: Fixed RUSTSEC-2026-0009 (time DoS vulnerability) by enforcing `time >= 0.3.47`.
+  **安全**：通过强制 `time >= 0.3.47` 修复 RUSTSEC-2026-0009（time 拒绝服务漏洞）。
+- **Security**: Updated pprof from 0.13.0 to 0.14 (fixes unsound memory usage).
+  **安全**：将 pprof 从 0.13.0 升级至 0.14（修复不安全的内存使用）。
+- **Build**: Fixed Tauri GUI compilation errors when building with updated dependencies.
+  **构建**：修复更新依赖后 Tauri GUI 编译错误。
+- **CI/CD**: Fixed GitHub Actions `paths-filter` issue where tag push to same commit as main was ignored.
+  **CI/CD**：修复 GitHub Actions paths-filter 在 tag 推送到与 main 同一 commit 时被忽略的问题。
+
+### Changed / 变更
+- All boundary risk diagnostics are now opt-in via GUI toggle or CLI flag (default: show warnings).
+  所有边界风险诊断现通过 GUI 按钮或 CLI 参数可选（默认：显示警告）。
+
+### Testing / 测试验证
+- All 205 unit tests passed, zero compiler warnings.
+  所有 205 个单元测试通过，零编译警告。
+- Verified feature parity between GUI and CLI boundary risk hiding.
+  验证了 GUI 和 CLI 边界风险隐藏功能的一致性。
+
+---
+
 ## v0.1.2 (2026-01-29) – JSON Export & GUI i18n / JSON导出与GUI国际化
 
 - CLI / 命令行