fix: Release v1.2.3 with auto-update fixes

GitHub update checks bypass Conduit system proxy; scheduler retries on failure; install prompt after auto-download; throttle tray refresh during download.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: foursecondfivefour

CHANGELOG.md

@@ -4,6 +4,15 @@ All notable changes to this project are documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [Unreleased]
+
+## [1.2.3] - 2026-06-09
+
+### Fixed
+
+- Auto-update: GitHub requests bypass system proxy; retry failed checks at 1 and 5 minutes; prompt to install when download completes; tray tooltip reflects update state.
+- Auto-update: throttle tray menu refresh during download progress (every 10%).
+
 ## [1.2.2] - 2026-06-09
 
 ### Added

internal/app/tray.go

@@ -48,9 +48,10 @@ type trayUI struct {
 	installItem  *application.MenuItem
 	healthOK     bool
 	healthKnown  bool
-	strategyItems map[dpi.Strategy]*application.MenuItem
-	dnsItems      map[dns.Provider]*application.MenuItem
-	domainItems   map[proxy.AllowlistPreset]*application.MenuItem
+	strategyItems     map[dpi.Strategy]*application.MenuItem
+	dnsItems          map[dns.Provider]*application.MenuItem
+	domainItems       map[proxy.AllowlistPreset]*application.MenuItem
+	promptedUpdateVer string
 }
 
 func setupTray(deps trayDeps) *trayUI {
@@ -379,9 +380,9 @@ func (ui *trayUI) runHealthCheck() {
 	}
 }
 
-func (ui *trayUI) checkUpdates(manual bool) {
+func (ui *trayUI) checkUpdates(manual bool) bool {
 	if !ui.checkMu.TryLock() {
-		return
+		return false
 	}
 	defer ui.checkMu.Unlock()
 
@@ -391,15 +392,17 @@ func (ui *trayUI) checkUpdates(manual bool) {
 	available, err := ui.deps.updater.Check(ctx, skipped)
 	if err != nil {
 		ui.refreshMenu()
-		return
+		ui.syncUpdateTooltip()
+		return false
 	}
 	ui.deps.prefs.Update(func(p *Preferences) { p.LastUpdateCheck = time.Now() })
 	if available && ui.deps.prefs.Get().AutoUpdate {
 		_ = ui.deps.updater.Download(ctx)
 	}
-	if manual {
-		ui.refreshMenu()
-	}
+	ui.refreshMenu()
+	ui.syncUpdateTooltip()
+	ui.maybePromptInstall(manual)
+	return true
 }
 
 func (ui *trayUI) installUpdate() {
@@ -421,6 +424,28 @@ func (ui *trayUI) installUpdate() {
 
 func (ui *trayUI) onUpdateChange() {
 	ui.refreshMenu()
+	ui.syncUpdateTooltip()
+}
+
+func (ui *trayUI) syncUpdateTooltip() {
+	if ui.tray == nil {
+		return
+	}
+	ui.tray.SetTooltip(ui.updateStatusLabel())
+}
+
+func (ui *trayUI) maybePromptInstall(manual bool) {
+	if manual || ui.deps.updater.State() != update.StateReady {
+		return
+	}
+	ver := ui.deps.updater.Latest().TagName
+	if ver == "" || ver == ui.promptedUpdateVer {
+		return
+	}
+	ui.promptedUpdateVer = ver
+	if showUpdateReadyPrompt(ui.lang(), ver) {
+		ui.installUpdate()
+	}
 }
 
 func (ui *trayUI) updateStatusLabel() string {
@@ -475,10 +500,26 @@ func menuFromItems(items []*application.MenuItem) *application.Menu {
 
 func startUpdateScheduler(prefs *preferenceStore, svc *update.Service, ui *trayUI) {
 	go func() {
-		select {
-		case <-time.After(config.UpdateCheckDelay):
-			ui.checkUpdates(false)
-		case <-ui.stopCh:
+		retryWaits := []time.Duration{
+			config.UpdateCheckDelay,
+			time.Minute,
+			5 * time.Minute,
+		}
+		var elapsed time.Duration
+		for _, wait := range retryWaits {
+			wait -= elapsed
+			if wait < 0 {
+				wait = 0
+			}
+			elapsed += wait
+			select {
+			case <-time.After(wait):
+				if ui.checkUpdates(false) {
+					return
+				}
+			case <-ui.stopCh:
+				return
+			}
 		}
 	}()
 	go func() {

internal/app/update_prompt_stub.go

@@ -0,0 +1,9 @@
+//go:build !windows
+
+package app
+
+import "github.com/foursecondfivefour/conduit/internal/i18n"
+
+func showUpdateReadyPrompt(_ i18n.Lang, _ string) bool {
+	return false
+}

internal/app/update_prompt_windows.go

@@ -0,0 +1,30 @@
+//go:build windows
+
+package app
+
+import (
+	"syscall"
+	"unsafe"
+
+	"github.com/foursecondfivefour/conduit/internal/i18n"
+)
+
+const (
+	mbYesNo           = 0x00000004
+	mbIconInformation = 0x00000040
+	idYes             = 6
+)
+
+func showUpdateReadyPrompt(lang i18n.Lang, version string) bool {
+	text := i18n.Tf(lang, "tray.updates.ready.prompt", version)
+	title := i18n.T(lang, "tray.updates.ready.title")
+	textPtr, _ := syscall.UTF16PtrFromString(text)
+	titlePtr, _ := syscall.UTF16PtrFromString(title)
+	ret, _, _ := procMessageBoxW.Call(
+		0,
+		uintptr(unsafe.Pointer(textPtr)),
+		uintptr(unsafe.Pointer(titlePtr)),
+		uintptr(mbYesNo|mbIconInformation|mbTopmost),
+	)
+	return ret == idYes
+}

internal/config/version.go

@@ -1,4 +1,4 @@
 package config
 
 // Version is set at build time via -ldflags "-X ...Version=...".
-var Version = "1.2.2"
+var Version = "1.2.3"

internal/i18n/messages.go

@@ -58,6 +58,8 @@ var messages = map[Lang]map[string]string{
 		"tray.updates.error":    "Ошибка обновления",
 		"tray.updates.check":    "Проверить сейчас",
 		"tray.updates.install":  "Установить обновление",
+		"tray.updates.ready.title": "Обновление готово",
+		"tray.updates.ready.prompt": "Доступна версия %s. Установить сейчас?",
 		"tray.updates.later":    "Напомнить позже",
 		"tray.updates.auto":     "Автообновление",
 		"tray.updates.browser":  "Открыть в браузере",
@@ -113,6 +115,8 @@ var messages = map[Lang]map[string]string{
 		"tray.updates.error":    "Update error",
 		"tray.updates.check":    "Check now",
 		"tray.updates.install":  "Install update",
+		"tray.updates.ready.title": "Update ready",
+		"tray.updates.ready.prompt": "Version %s is ready. Install now?",
 		"tray.updates.later":    "Remind later",
 		"tray.updates.auto":     "Auto-update",
 		"tray.updates.browser":  "Open in browser",

internal/update/github.go

@@ -33,7 +33,7 @@ type Client struct {
 
 func NewClient() *Client {
 	return &Client{
-		HTTP:    &http.Client{Timeout: 30 * time.Second},
+		HTTP:    directHTTPClient(30 * time.Second),
 		RepoURL: repoLatest,
 	}
 }

internal/update/httpclient.go

@@ -0,0 +1,29 @@
+package update
+
+import (
+	"net"
+	"net/http"
+	"net/url"
+	"time"
+)
+
+// directHTTPClient returns a client that bypasses the OS/system proxy.
+// Update checks must reach api.github.com even when Conduit routes other apps
+// through its local CONNECT proxy with a YouTube-only allowlist.
+func directHTTPClient(timeout time.Duration) *http.Client {
+	return &http.Client{
+		Timeout: timeout,
+		Transport: &http.Transport{
+			Proxy: func(*http.Request) (*url.URL, error) { return nil, nil },
+			DialContext: (&net.Dialer{
+				Timeout:   timeout,
+				KeepAlive: 30 * time.Second,
+			}).DialContext,
+			ForceAttemptHTTP2:     true,
+			MaxIdleConns:          4,
+			IdleConnTimeout:       90 * time.Second,
+			TLSHandshakeTimeout:   10 * time.Second,
+			ExpectContinueTimeout: 1 * time.Second,
+		},
+	}
+}

internal/update/httpclient_test.go

@@ -0,0 +1,21 @@
+package update
+
+import (
+	"net/http"
+	"testing"
+)
+
+func TestDirectHTTPClientBypassesProxy(t *testing.T) {
+	c := directHTTPClient(0)
+	tr, ok := c.Transport.(*http.Transport)
+	if !ok {
+		t.Fatalf("transport type %T", c.Transport)
+	}
+	url, err := tr.Proxy(&http.Request{})
+	if err != nil {
+		t.Fatal(err)
+	}
+	if url != nil {
+		t.Fatalf("proxy = %v, want nil", url)
+	}
+}

internal/update/service.go

@@ -211,13 +211,21 @@ func (s *Service) Download(ctx context.Context) error {
 
 func (s *Service) set(state State, percent int, err error) {
 	s.mu.Lock()
+	prevState := s.state
+	prevPercent := s.percent
 	s.state = state
 	if percent >= 0 {
 		s.percent = percent
 	}
 	s.err = err
+	notify := prevState != state
+	if !notify && state == StateDownloading && percent >= 0 {
+		notify = percent/10 != prevPercent/10
+	}
 	s.mu.Unlock()
-	s.notify()
+	if notify {
+		s.notify()
+	}
 }
 
 func downloadFile(ctx context.Context, client *http.Client, url, dest string, progress func(int)) error {