v0.5.3

修复新版本 Codex 的皮肤试穿，在首页直接提醒 Codex App Manager 更新，并收紧自定义更新源的安全边界。
Restores skin try-on on newer Codex builds, surfaces Manager updates on the home screen, and tightens security boundaries for custom update sources.

✨ 亮点 · Highlights

• 首页直接提醒管理器更新：启用“启动时自动检查更新”时，macOS 与 Windows 首页发现 Codex App Manager 新版本会显示横幅和“更新”按钮；确认后沿用现有的签名校验、安装与重启流程，无更新或检查失败时保持安静。
  Manager updates on the home screen: when “Check for updates on startup” is enabled, macOS and Windows now show a banner and Update button for a newer Codex App Manager release. Confirmation continues through the existing signature verification, install, and relaunch flow, while no-update and failed checks stay quiet.

• 更安全的自定义更新源：macOS 自定义源会拒绝本机、内网、元数据服务或其他不可公网路由的目标，也不会跟随未验证的重定向；仅代理网络仍可通过经过验证的公共 DoH 解析继续更新。
  Safer custom update sources: macOS now rejects loopback, private, metadata-service, and other non-public destinations, and will not follow unvalidated redirects. Proxy-only networks can still update through validated public DoH resolution.

🐛 修复 · Fixes

• 新版本 Codex 可再次试穿皮肤：Codex 26.831.21537 起设置模块的压缩标识符发生变化，之前会报 settings module not found；现在从该版本起使用新版适配器，并继续兼容此前的 Codex 版本。
  Skin try-on works on newer Codex builds again: Codex 26.831.21537 changed a minified identifier in its settings module, previously causing settings module not found. A version-aware adapter now handles that build and later releases while retaining compatibility with older Codex versions.

📦 安装与升级 · Install & Upgrade

已经安装? 打开应用即可收到本次更新——macOS 只下载版本间的增量,校验失败自动回滚。
Already installed? The app offers this update in-app — macOS pulls only the delta, with automatic rollback.

平台 · Platform	下载 · Download(国内直连 · China-reachable)
macOS · Apple Silicon	CodexAppManager_aarch64.dmg
macOS · Intel	CodexAppManager_x86_64.dmg
Windows · x64	CodexAppManager_x64-setup.exe
Windows · ARM64	CodexAppManager_arm64-setup.exe

Windows 签名状态: 本版 CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe 没有 Authenticode 代码签名,首次运行可能出现 SmartScreen 提示;.sig / latest.json 的 Tauri updater 签名只校验更新字节,不代表 Windows 发行者身份。SignPath Foundation 申请仍在审核。参见 代码签名政策与 Windows signing and verification。
Windows signing status: This release's CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe are not Authenticode-signed, so SmartScreen may warn on first run. The Tauri updater signature in .sig / latest.json verifies update bytes only and is not Windows publisher identity. The SignPath Foundation application is pending. See the code signing policy and Windows signing and verification.

隐私 · Privacy: 隐私政策 · Privacy policy

核验下载: 本页 Assets 带有 SHA256SUMS;Windows 用 Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 或替换为 ARM64 文件名,macOS 用 shasum -a 256 CodexAppManager_aarch64.dmg,再与 SHA256SUMS 比对。
Verify downloads: This release includes SHA256SUMS in Assets; on Windows run Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 or swap in the ARM64 filename, and on macOS run shasum -a 256 CodexAppManager_aarch64.dmg, then compare with SHA256SUMS.

# macOS · Homebrew
brew install --cask wangnov/tap/codex-app-manager

镜像直链恒指向最新版本;如需本页对应的历史版本,请使用下方 Assets。.app.tar.gz / .sig / latest.json 是自动更新器的工件,手动安装请选 .dmg / .exe。
Mirror permalinks always resolve to the latest release — for this exact version use the assets below. .app.tar.gz / .sig / latest.json belong to the auto-updater; pick the .dmg / .exe for manual installs.

What's Changed

• chore(deps-dev): bump js-yaml to 4.3.1 and postcss to 8.5.26 by @Wangnov in #259
• chore(deps): bump uuid from 1.24.0 to 1.24.1 in /src-tauri by @dependabot[bot] in #272
• chore(deps-dev): bump vite from 8.2.0 to 8.2.1 by @dependabot[bot] in #270
• chore(deps-dev): bump globals from 17.8.0 to 17.9.0 by @dependabot[bot] in #269
• chore(deps): bump base64 from 0.23.0 to 0.23.1 in /src-tauri by @dependabot[bot] in #268
• chore(deps): bump actions/attest from 4.2.1 to 4.2.2 by @dependabot[bot] in #266
• chore(deps): bump thiserror from 2.0.19 to 2.0.20 in /src-tauri by @dependabot[bot] in #265
• chore(deps): bump Swatinem/rust-cache from 2.9.1 to 2.9.2 by @dependabot[bot] in #264
• chore(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 by @dependabot[bot] in #261
• chore(deps-dev): bump typescript-eslint from 8.65.0 to 8.67.0 by @dependabot[bot] in #267
• chore(deps-dev): bump @testing-library/user-event from 14.6.1 to 14.6.3 by @dependabot[bot] in #263
• fix(security): harden update and supply-chain controls by @Wangnov in #274
• chore(deps): bump uuid from 1.24.0 to 1.24.1 in /crates/codex-win-engine by @dependabot[bot] in #275
• chore(deps): bump futures-util from 0.3.33 to 0.3.34 in /crates/codex-theme-engine by @dependabot[bot] in #276
• chore(deps): bump thiserror from 2.0.19 to 2.0.20 in /crates/codex-win-engine by @dependabot[bot] in #277
• chore(deps): bump base64 from 0.22.1 to 0.23.1 in /crates/codex-theme-engine by @dependabot[bot] in #279
• chore(deps): bump uuid from 1.24.0 to 1.24.1 in /crates/codex-mac-engine by @dependabot[bot] in #280
• chore(deps): bump thiserror from 2.0.19 to 2.0.20 in /crates/codex-mac-engine by @dependabot[bot] in #281
• chore(deps): bump libc from 0.2.188 to 0.2.189 in /crates/codex-mac-engine by @dependabot[bot] in #283
• chore(deps): bump base64 from 0.22.1 to 0.23.1 in /crates/codex-mac-engine by @dependabot[bot] in #285
• chore(deps-dev): bump globals from 17.9.0 to 17.11.0 by @dependabot[bot] in #286
• chore(deps-dev): bump vitest from 4.1.10 to 4.1.11 in /cloudflare/manager-download-router by @dependabot[bot] in #287
• chore(deps-dev): bump vitest from 4.1.10 to 4.1.11 by @dependabot[bot] in #288
• chore(deps-dev): bump vite from 8.1.5 to 8.2.1 in /website by @dependabot[bot] in #282
• chore(deps-dev): bump @testing-library/jest-dom from 7.0.0 to 7.0.1 by @dependabot[bot] in #284
• chore(deps): bump thiserror from 2.0.19 to 2.0.20 in /crates/codex-theme-engine by @dependabot[bot] in #278
• chore(deps-dev): bump @testing-library/user-event from 14.6.3 to 14.6.5 by @dependabot[bot] in #289
• fix(deps): sync workspace engine lock entries by @Wangnov in #290
• chore(deps): bump log from 0.4.33 to 0.4.34 in /crates/codex-theme-engine by @dependabot[bot] in #291
• chore(deps): bump log from 0.4.33 to 0.4.34 in /crates/codex-win-engine by @dependabot[bot] in #294
• chore(deps): bump log from 0.4.33 to 0.4.34 in /crates/codex-mac-engine by @dependabot[bot] in #297
• chore(deps): bump log from 0.4.33 to 0.4.34 in /src-tauri by @dependabot[bot] in #295
• chore(deps): bump uuid from 1.24.1 to 1.25.0 in /crates/codex-win-engine by @dependabot[bot] in #293
• chore(deps): bump uuid from 1.24.1 to 1.25.0 in /crates/codex-mac-engine by @dependabot[bot] in #298
• chore(deps): bump uuid from 1.24.1 to 1.25.0 in /src-tauri by @dependabot[bot] in #292
• chore(deps-dev): bump vite from 8.2.1 to 8.2.2 in /website by @dependabot[bot] in #300
• chore(deps-dev): bump vite from 8.2.1 to 8.2.2 by @dependabot[bot] in #296
• chore(deps-dev): bump @vitejs/plugin-react from 6.0.5 to 6.1.0 by @dependabot[bot] in #302
• chore(deps-dev): bump @testing-library/user-event from 14.6.5 to 14.6.6 by @dependabot[bot] in #301
• fix: restore latest Codex theme try-on and surface updates by @Wangnov in #316
• chore(deps-dev): bump @types/react-dom from 19.2.4 to 19.2.5 by @dependabot[bot] in #305
• chore(deps): bump uuid from 1.25.0 to 1.26.0 in /src-tauri by @dependabot[bot] in #306
• chore(deps-dev): bump @testing-library/react from 16.3.2 to 16.3.3 by @dependabot[bot] in #307
• chore(deps): bump softprops/action-gh-release from 3.0.2 to 3.0.3 by @dependabot[bot] in #309
• chore(deps-dev): bump typescript-eslint from 8.67.0 to 8.68.0 by @dependabot[bot] in #310
• chore(deps-dev): bump sharp from 0.35.3 to 0.35.4 in /website by @dependabot[bot] in #312
• chore(deps): bump uuid from 1.25.0 to 1.26.0 in /crates/codex-win-engine by @dependabot[bot] in #313
• chore(deps): bump uuid from 1.25.0 to 1.26.0 in /crates/codex-mac-engine by @dependabot[bot] in #315
• chore(deps-dev): bump @vitejs/plugin-react from 6.1.0 to 6.1.1 by @dependabot[bot] in #311
• chore(deps-dev): bump subset-font from 2.5.0 to 2.7.0 in /website by @dependabot[bot] in #314
• chore(release): bump version to 0.5.3 by @Wangnov in #317

Full Changelog: v0.5.2...v0.5.3