diff --git a/Cargo.lock b/Cargo.lock
index 3ee48f5..8516ae8 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -537,7 +537,7 @@ dependencies = [
 
 [[package]]
 name = "codex-app-manager"
-version = "0.5.16"
+version = "0.5.17"
 dependencies = [
  "base64 0.23.1",
  "codex-archive",
diff --git a/docs/releases/v0.5.17.md b/docs/releases/v0.5.17.md
new file mode 100644
index 0000000..9cb8255
--- /dev/null
+++ b/docs/releases/v0.5.17.md
@@ -0,0 +1,51 @@
+<p align="center">
+  <a href="https://codexapp.agentsmirror.com">
+    <img src="https://raw.githubusercontent.com/Wangnov/Codex-App-Manager/main/assets/banner.svg" alt="Codex App Manager" width="100%">
+  </a>
+</p>
+
+> 恢复新版 Codex 皮肤热应用，并改进 Windows 更新与旧 macOS 的兼容性提示。
+> Restore live skin application in newer Codex builds and improve update guidance on Windows and older macOS versions.
+
+## 🐛 修复 · Fixes
+
+- **新版皮肤试穿**：兼容移除旧设置接口的新 Codex 版本，恢复皮肤试穿与外观设置热应用，保留旧版本兼容。
+  Restore skin previews and live appearance changes in newer Codex builds after their settings API changed, while retaining support for older versions.
+- **Windows 更新下载**：修复部分企业代理及证书环境中检查更新成功、下载却立即失败的问题；下载文件缺失或为空时给出明确失败结果。
+  Fix updates that pass the version check but fail immediately during download in some enterprise proxy and certificate environments. Missing or empty downloads now fail explicitly.
+- **安装目录恢复提示**：目录替换失败后提示完全退出 Codex、检查写入权限，并在详情中显示源路径和目标路径，便于处理权限或文件占用问题。
+  When an install directory cannot be replaced, explain how to quit Codex and check write permissions, with source and destination paths available in the details.
+- **旧快捷方式图标**：修复旧 `ChatGPT.lnk` 仍引用无效图标资源的问题，保留快捷方式的其他属性。
+  Repair invalid icon references in legacy `ChatGPT.lnk` shortcuts while preserving their other properties.
+- **旧 macOS 兼容提示**：最新版 Codex 需要更高系统版本时，明确显示不兼容状态并引导选择兼容版本，避免误报检查失败或推荐已知不受支持的历史版本。
+  Show a clear compatibility state and guide users to a compatible release when the latest Codex requires a newer macOS version, instead of reporting a check failure or recommending known unsupported builds.
+- **GitHub 限流提示**：识别 Windows 更新检查中的 GitHub API 限流，显示可重试时间并暂停该路线的重复请求，镜像清单仍可访问。
+  Recognize GitHub API rate limits during Windows update checks, show when to retry, and pause repeated requests on that route while keeping mirror manifests accessible.
+
+## 📦 安装与升级 · Install & Upgrade
+
+**已经安装?** 打开应用即可收到本次更新——macOS 只下载版本间的增量,校验失败自动回滚。
+**Already installed?** The app offers this update in-app — macOS pulls only the delta, with automatic rollback.
+
+| 平台 · Platform | 下载 · Download(国内直连 · China-reachable) |
+| --- | --- |
+| macOS · Apple Silicon | [CodexAppManager_aarch64.dmg](https://codexapp.agentsmirror.com/manager/latest/CodexAppManager_aarch64.dmg) |
+| macOS · Intel | [CodexAppManager_x86_64.dmg](https://codexapp.agentsmirror.com/manager/latest/CodexAppManager_x86_64.dmg) |
+| Windows · x64 | [CodexAppManager_x64-setup.exe](https://codexapp.agentsmirror.com/manager/latest/CodexAppManager_x64-setup.exe) |
+| Windows · ARM64 | [CodexAppManager_arm64-setup.exe](https://codexapp.agentsmirror.com/manager/latest/CodexAppManager_arm64-setup.exe) |
+
+**Windows 签名状态:** 本版安装器没有 Authenticode 代码签名,首次运行可能出现 SmartScreen 提示。`.sig` / `latest.json` 的 Tauri updater 字节签名用于验证更新文件,不代表 Windows 发行者身份。SignPath Foundation 申请已不再推进,项目改为采用付费云 HSM 证书;证书配置完成前发布保持未签名。参见 [代码签名政策](https://github.com/Wangnov/Codex-App-Manager/blob/main/docs/code-signing-policy.md)与 [Windows signing and verification](https://github.com/Wangnov/Codex-App-Manager/blob/main/docs/windows-signing.md)。
+**Windows signing status:** This release's installers are not Authenticode-signed, so SmartScreen may warn on first run. Tauri updater signatures in `.sig` / `latest.json` verify update files and do not establish Windows publisher identity. The SignPath Foundation application is no longer being pursued; the project is moving to a paid cloud-HSM certificate, and releases stay unsigned until one is configured. See the [code signing policy](https://github.com/Wangnov/Codex-App-Manager/blob/main/docs/code-signing-policy.md) and [Windows signing and verification](https://github.com/Wangnov/Codex-App-Manager/blob/main/docs/windows-signing.md).
+
+**隐私 · Privacy:** [隐私政策 · Privacy policy](https://github.com/Wangnov/Codex-App-Manager/blob/main/docs/privacy.md)
+
+**核验下载:** 本页 Assets 带有 `SHA256SUMS`;Windows 用 `Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256` 或替换为 ARM64 文件名,macOS 用 `shasum -a 256 CodexAppManager_aarch64.dmg`,再与 `SHA256SUMS` 比对。
+**Verify downloads:** This release includes `SHA256SUMS` in Assets; on Windows run `Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256` or swap in the ARM64 filename, and on macOS run `shasum -a 256 CodexAppManager_aarch64.dmg`, then compare with `SHA256SUMS`.
+
+```bash
+# macOS · Homebrew
+brew install --cask wangnov/tap/codex-app-manager
+```
+
+> 镜像直链恒指向**最新**版本;如需本页对应的历史版本,请使用下方 Assets。`.app.tar.gz` / `.sig` / `latest.json` 是自动更新器的工件,手动安装请选 `.dmg` / `.exe`。
+> Mirror permalinks always resolve to the **latest** release — for this exact version use the assets below. `.app.tar.gz` / `.sig` / `latest.json` belong to the auto-updater; pick the `.dmg` / `.exe` for manual installs.
diff --git a/package-lock.json b/package-lock.json
index bcea288..3837c97 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "codex-app-manager",
-  "version": "0.5.16",
+  "version": "0.5.17",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "codex-app-manager",
-      "version": "0.5.16",
+      "version": "0.5.17",
       "dependencies": {
         "@gsap/react": "^2.1.2",
         "@tauri-apps/api": "2.12.4",
diff --git a/package.json b/package.json
index e5228bd..938a5e4 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "codex-app-manager",
-  "version": "0.5.16",
+  "version": "0.5.17",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml
index 142ff4f..5a44356 100644
--- a/src-tauri/Cargo.toml
+++ b/src-tauri/Cargo.toml
@@ -6,7 +6,7 @@ name = "codex-app-manager"
 # would otherwise ride along in the production app. default-run is kept
 # defensively to pin `cargo run` to the app should another src/bin/* be added.
 default-run = "codex-app-manager"
-version = "0.5.16"
+version = "0.5.17"
 description = "A cross-platform manager for installing and updating mirrored official Codex desktop app packages."
 authors = ["Wangnov"]
 edition.workspace = true
diff --git a/src-tauri/tauri.conf.json b/src-tauri/tauri.conf.json
index 8fc011a..8f6b154 100644
--- a/src-tauri/tauri.conf.json
+++ b/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "Codex App Manager",
   "mainBinaryName": "codex-app-manager",
-  "version": "0.5.16",
+  "version": "0.5.17",
   "identifier": "io.github.wangnov.codexappmanager",
   "build": {
     "beforeDevCommand": "npm run dev",