Skyfay/SkySend v2.12.1 on GitHub

Link Preview and Branding Improvements, Security Updates and Bug Fixes

server: Added CUSTOM_OG_IMAGE and CUSTOM_OG_IMAGE_STYLE to set the image and layout of link previews, and a PNG or JPEG CUSTOM_LOGO is now used there by default. (#72)

web: The light theme no longer flashes dark while the page loads, and the mobile browser bar now follows the selected theme. (#70)
server: Link preview images now use an absolute URL as the Open Graph standard requires, so more apps show them.
server: The site name in link previews now follows CUSTOM_TITLE instead of always showing SkySend.
server: A CUSTOM_TITLE containing quotes or angle brackets no longer breaks the page markup.

server: Updated hono to 4.13.8 to patch a ReDoS in the CORS middleware, query parameters read after the URL fragment, and further advisories in parseBody() and helpers SkySend does not use (GHSA-8j4g-w8fx-2239, GHSA-g6gw-c38x-mqfc, GHSA-crvj-82cr-hjcx, GHSA-54fx-42gc-7vw4, GHSA-f23p-vx2j-j53r, GHSA-gqvv-2mrq-wpjv, GHSA-79qm-7rj5-m7r9).
web: Updated dompurify to 3.4.15 to fix an XSS via detached subtrees when hooks are removed during in-place sanitizing (GHSA-55q2-fjhq-7xh7).
website: Updated next and eslint-config-next to 16.3.5 to patch two unauthenticated remote code execution vulnerabilities in the image optimization API and on Windows hosts (GHSA-p293-qw3h-jr36, GHSA-2xp9-vwfh-vxw4).

web: The selected language is now kept in the browser's local storage instead of a cookie, so a language picked before this version has to be selected once more.
website: The community goal on the roadmap page now targets 500 GitHub stars, and reaching 300 stars is listed under "Already live".

web: Removed the build-time VITE_OG_IMAGE variable, which is replaced by CUSTOM_OG_IMAGE.

docs: Removed the roadmap page from the docs site. The Roadmap link in the navigation and the README now point to the roadmap on skysend.app.
docs: Documented how the link preview image is chosen and how to set a separate preview image or banner.

server: Added tests for the link preview image selection and for escaping branding values in the served page.

infra: Added pnpm setup:worktree, which copies the local .env from the primary checkout into a new git worktree and installs dependencies.