InterceptSuite/ProxyBridge v4.1.0

🚀 ProxyBridge macOS 4.1.0

This release fixes memory and CPU problems in the system extension, fixes several proxy-handling bugs, and adds a command line mode.

Run a profile without the window, like the Windows and Linux CLIs.

proxybridge --list-profiles
proxybridge --profile Default --verbose 2
cat work.pbprofile | proxybridge --profile - --verbose 3

--profile <name | ->, --list-profiles, --verbose 0-3, --update, --version, --help.
It is the same app executable, with no second binary. The installer adds a short proxybridge command to /usr/local/bin.
Press Ctrl+C (or close the terminal) to stop. The rules are cleared and the tunnel is stopped.
The system extension still needs approving once. The first run waits for you to approve it.
⚠️ Quit the ProxyBridge app first: only one of the app and the CLI can control the extension at a time.
The app is sandboxed, so it can't open file paths. Use a saved profile name, or pipe the file in with --profile -.

Memory and CPU (#239 #226): fixed leaks and high CPU use in the system extension, including UDP flows and DNS handling. In our stress test, 300 parallel TCP connections and 900 UDP flows left memory flat.
Closing the window (#233): closing the main window now quits the app unless "close to menu bar" is on.
Proxy replies: fixed SOCKS5 and HTTP CONNECT reply parsing. A proxy that sends data right after its reply, or an HTTP 407 whose headers contain "200", is now handled correctly.
Stuck proxies: a proxy that never finishes its handshake is cut after about 20 seconds instead of leaving the connection hanging.
Hostnames: the real hostname is sent to the proxy when it is known. Connections to an address with no DNS record are sent as an IP.
Rule updates: a rule change is applied in one step, so traffic never sees a half-updated rule set.
Installer: Apple silicon users are no longer asked to install Rosetta.
Version (#231): Fixed hardcode version show wrong version number.