V3.17.3

<div align="center">
<img src="https://gw.alipayobjects.com/zos/k/fa/logo-modified.png" alt="Pake Logo" width="120" height="120" style="border-radius:50%" />
<h1 style="margin: 12px 0 6px;">Pake V3.17.3</h1>
<p><em>Turn any webpage into a desktop app with one command.</em></p>
</div>

### Changelog

1. Native capabilities such as notifications, downloads, zoom, window controls, and opening links in the system browser are now granted only to local pages and the exact origin of the packaged URL, so a page that navigates to another site can no longer call them. Package the final URL a site lands on, for example `https://mail.google.com` rather than `https://gmail.com`.
2. Clicking a notification on macOS brings back the window that sent it and removes it from Notification Center, and with `--multi-window` a message raised by several windows is shown once and counted once on the Dock badge.
3. Downloads send the page's User-Agent, Referer, and session cookies, including after redirects, so files behind a login save correctly. A failed download no longer leaves a truncated file, and simultaneous downloads with the same name are saved separately.
4. Linux apps default to a User-Agent that matches their WebKit engine instead of claiming to be Chrome, which lets YouTube captions load. `--user-agent` still overrides it.
5. Linux apps follow the desktop's light or dark preference and switch live when it changes, while `--dark-mode` still takes priority.
6. On macOS, `window.print()` opens the print dialog, two-finger trackpad swipes go back and forward, and the tab bar shows a + button when `--multi-window` is on.
7. Windows adds the opt-in `--password-autosave`, which offers to save passwords in the app's own WebView2 profile and stays off in private windows. `--windows-toolchain gnu --keep-binary` now places `WebView2Loader.dll` beside the executable so it starts on its own.

### 更新日志

1. 通知、下载、缩放、窗口控制和用系统浏览器打开链接这些原生能力，现在只开放给本地页面和打包网址的精确来源，页面跳到其他站点后就无法再调用，打包时要用网站最终打开的网址，比如 `https://mail.google.com` 而不是 `https://gmail.com`。
2. macOS 上点击通知会唤回发出它的窗口并从通知中心移除，开启 `--multi-window` 时多个窗口收到的同一条消息只弹一次，程序坞角标也只加一次。
3. 下载会带上页面的 User-Agent、Referer 和登录 Cookie，跳转之后也不会丢，需要登录的文件可以正常保存，下载失败不再留下不完整的文件，同名文件同时下载时也会分别保存。
4. Linux 应用默认使用与 WebKit 引擎一致的 User-Agent，不再自称 Chrome，YouTube 字幕因此可以正常加载，`--user-agent` 依然可以覆盖。
5. Linux 应用会跟随桌面的浅色或深色偏好，运行中切换也会实时生效，`--dark-mode` 仍然优先。
6. macOS 上 `window.print()` 可以弹出打印面板，触控板双指左右滑动可以前进和后退，开启 `--multi-window` 时标签栏会显示 + 按钮。
7. Windows 新增可选的 `--password-autosave`，开启后应用会在自己的 WebView2 配置里提示保存密码，隐私窗口中始终关闭，`--windows-toolchain gnu --keep-binary` 也会把 `WebView2Loader.dll` 放在可执行文件旁边，程序可以直接启动。

Special thanks to @Yaman-Harfoush, @nhanntgit, @karl007, and @BenzidaneMo for the detailed reports, and to @yhcharles, @davidscottpope-gif, @WavesMan, @BenzidaneMo, and @jakero for the pull requests behind this release. If Pake helps you, please consider giving it a star and recommending it to your friends.

> https://github.com/tw93/Pake