chore(main): release 3.1.0

[fugo-release-bot]

🤖 I have created a release beep boop

3.1.0 (2026-08-19)

Features

• config_httpd: add CONFIG_ML_CONFIG_HTTPD toggle, fix peer-update queue depth (#51) (5475faa)
• wg: tailnet-range fallback routing via a designated peer (#65) (f3c2128)

Bug Fixes

• config_httpd: gate temp-sensor code behind CONFIG_SOC_TEMP_SENSOR_SUPPORTED (#50) (8e49f6b)
• coord,wg: authoritative peer sweep + NVS cache removal on peer removal (#63) (2694ec0)
• coord: back off minutes behind a captive portal instead of every 16s (#48) (c77ab55)
• coord: stream-liveness watchdog for silently-dead mapSessions (#58) (00f168d)
• derp,coord: absorb bugfix/hardening subset of upstream PR #22 (#44) (2aedd0a)
• derp: backpressure retry budget, TCP_NODELAY, coalesced writes, hot-spin loop fix (#62) (1757ef4)
• derp: DERP TLS session resumption, longer connect timeout, upgrade backoff (#52) (e48d8c1)
• microlink: worker task liveness bitmask, orphan-parked teardown (#47) (6a7d8c5)
• wg_mgr: retry the initial direct-path handshake instead of one-shot (#54) (7e52ba3)
• wg_mgr: stop DISCO PING starvation from collapsing throughput to DERP (#55) (e46aa5e)
• wg_mgr: wg_udp_output_cb thread safety, standard MTU, handshake gating bug (#53) (47b1ed0)
• wg_mgr: yield 1 tick per peer in disco_periodic_probes (#49) (dde0925)
• wg: rate-limit DISCO PONG replies once a direct path is trusted (#64) (ac9e156)

Documentation

• fork-prs: #34/#42 landed in wireguard_lwip submodule PR, #31 not needed (#59) (05385d8)
• fork-prs: close #35 — reader/writer split decided not to port (#66) (78e70d6)
• fork-prs: mark #31, #36, #41 as decided (no port needed) (#61) (48df8f5)
• fork-prs: record investigation findings for issues #35, #38/#39, #41 (#56) (b3260c7)
• fork-prs: resolve issue #30 by verification, no code change needed (#57) (465698f)

---

This PR was generated with Release Please. See documentation.

[fugo-release-bot]

🤖 Created releases:

• v3.1.0

🌻