chore: auto bump version and changelog [skip ci]

cfc-web/.last_build_commit

@@ -1 +1 @@
-26fdc9758babfe75710882412eeca684df6c3c65
+7043146084c9472fee3f6bc9086b84dec31cd654

cfc-web/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "cfc-web",
-  "version": "1.0.430",
+  "version": "1.0.431",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "cfc-web",
-      "version": "1.0.430",
+      "version": "1.0.431",
       "dependencies": {
         "@wangeditor/editor": "^5.1.23",
         "@wangeditor/editor-for-vue": "^1.0.2",

cfc-web/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cfc-web",
-  "version": "1.0.431",
+  "version": "1.0.432",
   "private": true,
   "scripts": {
     "dev": "vue-cli-service serve",

cfc-web/public/CHANGELOG-v1.0.md

@@ -4,6 +4,16 @@
 
 ---
 
+## v1.0.432 (2026-07-20)
+
+### Bug 修复
+- FamilyFortuneMapper.selectByFamilyAndDate 添加 @Select SQL 注解
+
+### 其他
+- 缺少 SQL 绑定，既无 XML 映射文件也无 @Select 注解。
+- 
+
+
 ## v1.0.430 (2026-07-20)
 
 ### 其他

cfc-web/public/CHANGELOG.md

@@ -1,6 +1,6 @@
 # 更新日志
 
-> 当前版本: v1.0.430
+> 当前版本: v1.0.432
 
 ## 历史版本
 
@@ -8,6 +8,16 @@
 
 ---
 
+## v1.0.432 (2026-07-20)
+
+### Bug 修复
+- FamilyFortuneMapper.selectByFamilyAndDate 添加 @Select SQL 注解
+
+### 其他
+- 缺少 SQL 绑定，既无 XML 映射文件也无 @Select 注解。
+- 
+
+
 ## v1.0.430 (2026-07-20)
 
 ### 其他

docs/nginx-block-sensitive-paths.conf

@@ -0,0 +1,36 @@
+# === 拒绝敏感路径扫描（减少日志噪音）===
+# 放在 server {} 块内，其他 location 之前
+
+# 环境配置文件扫描
+location ~* ^/\.env {
+    default_type application/json;
+    return 403 '{"code":403,"message":"Forbidden"}';
+}
+
+location ~* ^/api/\.env {
+    default_type application/json;
+    return 403 '{"code":403,"message":"Forbidden"}';
+}
+
+# Spring Boot Actuator
+location ~* ^/actuator {
+    default_type application/json;
+    return 404 '{"code":404,"message":"Not Found"}';
+}
+
+# Git 文件泄露
+location ~* ^/\.git {
+    default_type application/json;
+    return 403 '{"code":403,"message":"Forbidden"}';
+}
+
+# 常用扫描路径（返回 404 伪装不存在）
+location ~* ^/(admin|wp-admin|wp-content|wp-includes|xmlrpc|phpmyadmin|pma|manager|console|debug|swagger|api-docs|docs)(/|$) {
+    return 404;
+}
+
+# 通用：以点开头的隐藏文件
+location ~* /\.(?!well-known) {
+    default_type application/json;
+    return 403 '{"code":403,"message":"Forbidden"}';
+}