BLEUnlock v1.15.1

• Validate the complete two-version release, Homebrew installation, update detection, verified replacement, and relaunch path.
• Keep the generated Homebrew Cask compatible with current Homebrew and validate its Ruby syntax before publishing.

中文发布说明

• 验证连续两个版本的发布、Homebrew 安装、版本检测、校验替换与重启全流程。
• 保持生成的 Homebrew Cask 兼容当前 Homebrew，并在发布前校验 Ruby 语法。

BLEUnlock v1.15.0

• Add a verified in-app updater that downloads the release DMG and checksum, validates SHA-256, code signatures, bundle ID, and target version, then replaces and relaunches the installed app.
• Compare semantic versions before offering an update, preventing an older GitHub release from being presented as an upgrade.
• Make CI build, ad-hoc sign, package, mount, and verify the Release configuration before tags can reach the release workflow.
• Explicitly fall back to ad-hoc signing without Developer ID and let the checksum-verified Homebrew Cask remove quarantine after installation.
• Sign nested executables before the outer app in CI, Test Build, and Release; automatically fall back to ad-hoc signing without Developer ID and re-verify the mounted app from the packaged DMG.
• Verify the app code signature before and after script installation, and reject release artifacts with an unexpected bundle ID.
• Keep device-list discovery advertisement-only: never connect to unbound peripherals or probe their GATT services, preventing unrelated system connection prompts from nearby glasses, headphones, and other devices.
• Optimize steady-state background monitoring by separating device-list discovery from bound-device tracking, pausing full scans while active connections are healthy, and disabling high-frequency name diagnostics by default.
• Add a repeatable background performance gate requiring average CPU below 10% and maximum resident memory below 80 MB.
• Sort monitored and unmonitored device groups by ascending absolute RSSI, placing the strongest signals first and devices without a signal last.
• Change the device-list minimum RSSI default to -60 dBm to reduce noise from weak nearby devices.
• Enter accessory-app mode before initialization and immediately on wake to prevent a transient Dock icon.
• Add a background-running option that hides the menu bar icon while keeping proximity monitoring active; reopening BLEUnlock restores the icon and disables the option.
• Move GitHub Releases, update checks, Homebrew publishing, and installation documentation to bifrost-proxy.
• Change the app and Launcher bundle identifiers to com.bifrost-proxy.BLEUnlock, with migration support for preferences, Keychain data, login items, and event scripts from previous identifiers.
• Add a checksum-verifying installation script and publish the Homebrew Cask as bifrost-proxy/tap/unlock.

中文发布说明

• 新增可验证的应用内更新器：下载发布 DMG 与校验文件，验证 SHA-256、代码签名、Bundle ID 和目标版本后，自动替换并重启已安装应用。
• 检测更新时按语义版本比较，避免把 GitHub 上的旧版本误判为可升级版本。
• CI 在进入发版流水线前，使用 Release 配置完成构建、ad-hoc 签名、DMG 打包、挂载与完整校验。
• 未配置 Developer ID 时明确降级为 ad-hoc 签名，并由完成校验的 Homebrew Cask 在安装后移除隔离标记。
• CI、Test Build 和 Release 统一执行内部可执行文件优先、外层 App 最后的签名流程；无 Developer ID 时自动使用 ad-hoc 签名，并在 DMG 挂载后再次校验签名完整性。
• 安装脚本在复制 App 前后校验代码签名，并拒绝 Bundle ID 不匹配的发布产物。
• 设备列表只读取 BLE 广播信息，不再连接未绑定设备或探测其 GATT 服务，避免附近眼镜、耳机等设备弹出无关的系统连接请求。
• 优化后台稳态监控：拆分设备列表发现与绑定设备追踪，主动连接稳定时暂停全量扫描，并默认关闭高频名称诊断。
• 新增可重复执行的后台性能门禁，要求平均 CPU 低于 10%、最大常驻内存低于 80 MB。
• 已监控和未监控设备组内均按 RSSI 绝对值升序排列，信号最强的设备优先，无有效信号的设备置于组末。
• 将设备列表默认最小 RSSI 调整为 -60 dBm，减少弱信号设备造成的列表噪声。
• 提前切换为辅助应用模式，避免启动或系统唤醒时短暂显示 Dock 图标。
• 新增后台运行选项：隐藏菜单栏图标时仍保持距离监测；再次打开 BLEUnlock 会恢复图标并关闭该选项。
• 将 GitHub Release、更新检查、Homebrew 发布和安装文档统一迁移到 bifrost-proxy。
• 将主 App 和 Launcher 的 Bundle ID 改为 com.bifrost-proxy.BLEUnlock，并兼容迁移旧 ID 下的偏好设置、钥匙串、登录项和 event 脚本。
• 新增带 SHA-256 校验的安装脚本，并以 bifrost-proxy/tap/unlock 发布 Homebrew Cask。