SingleFile CLI 2.6.0

New features

Add --disable-compression, storing the files of an archive without compressing them.
--include-BOM now works on plain HTML captures, which never had an implementation of it.
--embedded-image and --embedded-pdf now work with --crawl-save-archive. The PNG or the PDF you provide becomes the one the whole archive can be read as, instead of being ignored.

--http-header no longer makes the page send a CORS preflight for every cross-origin resource. A header that is not CORS-safelisted is injected below the CORS decision instead of on the network layer, so the servers that answer no preflight keep serving the resource.
--blocked-URL-pattern blocks a request before it is sent. It used to be applied once the response had come back, so a blocked URL was still contacted, and whether it was depended on which other options were in use.
The network options are applied to service workers. A page whose subresources are served by its own worker was captured without the extra headers, the blocked URL patterns and the proxy authentication.
--create-browser-profile drops the browser caches from the profile it creates. They are never copied to the capture profile, and they were the bulk of the directory.
Every option is named in lowercase in the sources. The parser has always compared option names case-insensitively, so the names accepted on the command line are unchanged.

A video poster is stored in a lossy format instead of PNG, which costs an order of magnitude less for the same frame.
A media element left without any source no longer carries autoplay.
A font named by a shorthand the parser cannot read is kept instead of dropped.
Self-extracting archives gained a CDATA rung in the wrapper ladder, which widens the set of pages they can hide their payload in.

Co-authored by Claude (Claude Code)