bump excel_analysis plugin to version 0.3.1

[Logan19940824]

Plugin Submission

Plugin information

• Author: modsdom
• Plugin name: excel_analysis
• Version: 0.3.1
• Source repository: https://github.com/Logan19940824/excel-analysis-dify-plugin
• Contact: 759592528@qq.com

Submission type

• New plugin
• Version update

What changed

This version adds persistent workbook caching and supports multiple read-only DuckDB SELECT or CTE statements per query request. It also improves runtime logging and keeps the plugin compatible with Dify Python 3.12.

Risk level

• Low risk
• Medium risk
• High risk

The plugin processes user-provided Excel/CSV files and URLs, performs read-only SQL queries, and uses filesystem-backed temporary storage during runtime.

Required checks

• I have read and followed the Marketplace submission requirements.
• I have read and comply with the Plugin Developer Agreement.
• I tested this plugin on Dify Community Edition and Dify Cloud, or documented any limitation below.
• The package contains only files needed at runtime.
• The package does not contain secrets, local credentials, .env files, .git directories, virtual environments, caches, logs, or IDE files.
• The package does not contain executables or bundled binaries, or I explained why they are required below.
• The plugin README includes setup steps, usage instructions, required APIs or credentials, connection requirements, and the source repository link.
• The plugin includes PRIVACY.md or a hosted privacy policy, and manifest.yaml references it.
• All user-facing text is primarily in English, with localized README files following the i18n guidance.

Security and privacy notes

The plugin accepts user-provided HTTP(S) workbook URLs, downloads Excel/CSV content with bounded redirects, size limits, and timeouts, stores parsed workbook data in Dify plugin storage, and executes read-only DuckDB SQL supplied by the user. It does not execute shell commands, write to third-party services, or collect credentials. SQL write statements and dangerous DuckDB commands are rejected.

Local validation

• dify version -> v0.6.10
• dify plugin package <plugin-directory> -o <output> -> package generated successfully
• Package archive inspection -> contains runtime files only; no .env, .git, caches, or executables
• SHA-256: D8ABB808DCAB2432349A990C82D50B1EC459B39D49F36CB7E6A216C4399F6BA8

Reviewer notes

This is a version update from 0.3.0 to 0.3.1. The PR intentionally contains only the single excel_analysis-0.3.1.difypkg file.