Release Notes for routatic-proxy v0.6.2

Summary
This release introduces Windows code signing support, fixes catalog subsystem issues, improves GUI stability on macOS, adds Kimi K3 model integration, and enhances environment variable handling in launchd configurations. Security hardening through token scoping and dependency pinning is also included.

Breaking Changes

• 🚨 Environment variable handling in launchd now preserves ROUTATIC_PROXY_* vars, requiring updated plist templates
• 🚨 SignPath token exposure reduced by scoping to signing steps only

New Features

• Add Windows code signing using SignPath GitHub Action with architecture-specific .syso generation
• Implement Kimi K3 model integration via opencode-go provider with updated specs (1M context, 131K output)
• Add system tray GUI on macOS replacing webview to fix main-thread crashes
• Introduce model_overrides and model_family_overrides in GUI dropdowns
• Add Windows resource file generation (winres.json/xml) for executable metadata

Bug Fixes

• Fix catalog sync failures by migrating JSON to SQLite format
• Resolve main-thread crash in macOS GUI when opening NSWindow
• Correct SignPath action usage with upload-artifact workflow
• Prevent fatal errors when unknown catalog providers exist
• Fix environment variable preservation in launchd autostart
• Remove stray cancel argument from openGUI call
• Prevent XML injection via unescaped env vars in launchd plist

Improvements

• Use job-level env context for SignPath secret checks in CI
• Pin go-winres to v0.3.3 for supply-chain security
• Add 1MiB size limit to /api/test/send endpoint
• Implement structured logging for catalog failures
• Add test coverage for GUI send request handling
• Improve GUI send request handling with CORS avoidance
• Update Kimi K3 pricing and modalities in documentation

Documentation

• Add Kimi K3 model documentation across all language variants
• Update model registry test expectations for Kimi K3
• Add SYNC comments in config template functions
• Document Windows signing workflow changes
• Update changelog generation fallback command quoting

Chores

• Refactor model list command to use pre-built index
• Add XML escaping function for launchd templates
• Remove CGO_ENABLED=0 build artifacts from macOS GUI
• Update credential detection to SIGNPATH_API_TOKEN
• Add post-signing binary replacement step
• Fix map iteration safety in catalog subsystem
• Add test coverage for config template synchronization