chore(deps): bump astro from 5.13.2 to 5.14.8 in /website by dependabot[bot] · Pull Request #1138 · yorukot/superfile

dependabot · Oct 22, 2025

Bumps astro from 5.13.2 to 5.14.8.

Release notes

astro@5.14.8

Patch Changes

#14590 577d051 Thanks @matthewp! - Fixes image path resolution in content layer collections to support bare filenames. The image() helper now normalizes bare filenames like "cover.jpg" to relative paths "./cover.jpg" for consistent resolution behavior between markdown frontmatter and JSON content collections.

astro@5.14.7

Patch Changes

#14582 7958c6b Thanks @florian-lefebvre! - Fixes a regression that caused Actions to throw errors while loading

#14567 94500bb Thanks @matthewp! - Fixes the actions endpoint to return 404 for non-existent actions instead of throwing an unhandled error

#14566 946fe68 Thanks @matthewp! - Fixes handling malformed cookies gracefully by returning the unparsed value instead of throwing

When a cookie with an invalid value is present (e.g., containing invalid URI sequences), Astro.cookies.get() now returns the raw cookie value instead of throwing a URIError. This aligns with the behavior of the underlying cookie package and prevents crashes when manually-set or corrupted cookies are encountered.

#14142 73c5de9 Thanks @P4tt4te! - Updates handling of CSS for hydrated client components to prevent duplicates

#14576 2af62c6 Thanks @aprici7y! - Fixes a regression that caused Astro.site to always be undefined in getStaticPaths()

astro@5.14.6

Patch Changes
#14562 722bba0 Thanks @erbierc! - Fixes a bug where the behavior of the "muted" HTML attribute was inconsistent with that of other attributes.

#14538 51ebe6a Thanks @florian-lefebvre! - Improves how Actions are implemented
#14548 6cdade4 Thanks @ascorbic! - Removes support for the maxAge property in cacheHint objects returned by live loaders.

⚠️ Breaking change for experimental live content collections only

Feedback showed that this did not make sense to set at the loader level, since the loader does not know how long each individual entry should be cached for.

If your live loader returns cache hints with maxAge, you need to remove this property:
return {
  entries: [...],
  cacheHint: {
    tags: ['my-tag'],
-   maxAge: 60,
    lastModified: new Date(),
  },
};
The cacheHint object now only supports tags and lastModified properties. If you want to set the max age for a page, you can set the headers manually:
---

... (truncated)

Changelog

Sourced from astro's changelog.

5.14.8

Patch Changes

#14590 577d051 Thanks @matthewp! - Fixes image path resolution in content layer collections to support bare filenames. The image() helper now normalizes bare filenames like "cover.jpg" to relative paths "./cover.jpg" for consistent resolution behavior between markdown frontmatter and JSON content collections.

5.14.7

Patch Changes

#14582 7958c6b Thanks @florian-lefebvre! - Fixes a regression that caused Actions to throw errors while loading

#14567 94500bb Thanks @matthewp! - Fixes the actions endpoint to return 404 for non-existent actions instead of throwing an unhandled error

#14566 946fe68 Thanks @matthewp! - Fixes handling malformed cookies gracefully by returning the unparsed value instead of throwing

When a cookie with an invalid value is present (e.g., containing invalid URI sequences), Astro.cookies.get() now returns the raw cookie value instead of throwing a URIError. This aligns with the behavior of the underlying cookie package and prevents crashes when manually-set or corrupted cookies are encountered.

#14142 73c5de9 Thanks @P4tt4te! - Updates handling of CSS for hydrated client components to prevent duplicates

#14576 2af62c6 Thanks @aprici7y! - Fixes a regression that caused Astro.site to always be undefined in getStaticPaths()

5.14.6

Patch Changes
#14562 722bba0 Thanks @erbierc! - Fixes a bug where the behavior of the "muted" HTML attribute was inconsistent with that of other attributes.

#14538 51ebe6a Thanks @florian-lefebvre! - Improves how Actions are implemented
#14548 6cdade4 Thanks @ascorbic! - Removes support for the maxAge property in cacheHint objects returned by live loaders.

⚠️ Breaking change for experimental live content collections only

Feedback showed that this did not make sense to set at the loader level, since the loader does not know how long each individual entry should be cached for.

If your live loader returns cache hints with maxAge, you need to remove this property:
return {
  entries: [...],
  cacheHint: {
    tags: ['my-tag'],
-   maxAge: 60,
    lastModified: new Date(),
  },
};
The cacheHint object now only supports tags and lastModified properties. If you want to set the max age for a page, you can set the headers manually:

... (truncated)

Commits

aff78e3 [ci] release (#14597)
63b2568 refactor(cli): help (#14595)
577d051 Fix bare images used in JSON content collections (#14590)
d5bdbc0 refactor(cli): create-key help display (#14502)
ca1d331 [ci] release (#14568)
93e8bd2 [ci] format
7958c6b fix(actions): virtual module (#14582)
2af62c6 fix(astro): restore Astro.site in getStaticPaths() (#14576)
94500bb Return 404 for non-existent actions instead of 500 (#14567)
946fe68 Fix: handle malformed cookies gracefully (#14566)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for astro since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

coderabbitai · Oct 22, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

github-actions · Oct 22, 2025

🎉 Thank you for your first contribution to superfile!

We’re really excited to have you here 🙌

A maintainer might ask you to make a few changes before we can merge this PR.
That’s totally normal and part of the process. Don’t worry, we’ll help guide you through it.

👉 Please also take a moment to review our Contribution Guide

If you have any questions, feel free to open a Discussion or just ask in the comments!

Bumps [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) from 5.13.2 to 5.14.8. - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@5.14.8/packages/astro) --- updated-dependencies: - dependency-name: astro dependency-version: 5.14.8 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

This MR contains the following updates: | Package | Update | Change | |---|---|---| | [yorukot/superfile](https://github.com/yorukot/superfile) | minor | `v1.4.0` → `v1.5.0` | MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot). **Proposed changes to behavior should be submitted there as MRs.** --- ### Release Notes <details> <summary>yorukot/superfile (yorukot/superfile)</summary> ### [`v1.5.0`](https://github.com/yorukot/superfile/releases/tag/v1.5.0) [Compare Source](yorukot/superfile@v1.4.0...v1.5.0) This release brings major new features, including video and PDF preview support, multi-column file panels, and configurable navigation, alongside significant code refactoring and comprehensive bug fixes. #### Install: [**Click me to know how to install**](https://github.com/yorukot/superfile?tab=readme-ov-file#installation) #### Highlights - Added video and PDF preview support via loading the first frame/page as an image. Thanks [@Yassen-Higazi](https://github.com/Yassen-Higazi) for the implementation <details><summary>Screenshots</summary> <img width="951" height="596" alt="image" src="https://github.com/user-attachments/assets/6edfa9c2-ebcd-4622-a115-f71fa533b3e1" /> <img width="949" height="594" alt="image" src="https://github.com/user-attachments/assets/8d15fa46-5178-422d-8eea-455cac31fdd0" /> </details> - Multi-column file panel view with date/size/permission columns. Thanks [@xelavopelk](https://github.com/xelavopelk) for the implementation <details><summary>Screenshots</summary> <img width="420" height="264" alt="image" src="https://github.com/user-attachments/assets/e172f1e8-c2a5-42d2-8eeb-62e721f61a4f" /> </details> - Configurable fast navigation in the Filepanel. See this MR for more details: [#1220](yorukot/superfile#1220) - You can now configure `spf` to open files with specific extensions with your choice of editor application. Thanks [@litvinov-git](https://github.com/litvinov-git) for the implementation See this MR for more details: [#1197](yorukot/superfile#1197) - Terminal stdout support for shell commands - Allow launching with the filename. `spf /a/b/c.txt` will launch in `/a/b` with `c.txt` as the selected file. - Various bug fixes, including modal confirmations, layout issues, and race conditions. See 'Detailed Change Summary' ##### Internal Updates - Separated FilePanel and FileModel into a dedicated package for better code organization - Comprehensive end-to-end testing with layout fixes - Enhanced dimension validation and sidebar fixes - Updated multiple dependencies including Astro, Go toolchain, and linters - Added gosec linter and MND linter with magic number cleanup #### Detailed Change Summary <details><summary>Details</summary> ##### Update - allow hover to file [`#1177`](yorukot/superfile#1177) by @lazysegtree - show count selected items in select mode [`#1187`](yorukot/superfile#1187) by @xelavopelk - Add icon alias for kts to kt [`#1153`](yorukot/superfile#1153) by @nicolaic - link icon and metadata [`#1171`](yorukot/superfile#1171) by @xelavopelk - user configuration of editors by file extension [`#1197`](yorukot/superfile#1197) by @litvinov-git - add video preview support [`#1178`](yorukot/superfile#1178) by @Yassen-Higazi - Add pdf preview support [`#1198`](yorukot/superfile#1198) by @Yassen-Higazi - Add icons in pinned directories [`#1215`](yorukot/superfile#1215) by @lazysegtree - Enable fast configurable navigation [`#1220`](yorukot/superfile#1220) by @lazysegtree - add Trash bin to default directories for Linux [`#1236`](yorukot/superfile#1236) by @lazysegtree - add terminal stdout support for shell commands [`#1250`](yorukot/superfile#1250) by @majiayu000 - More columns in file panel (MVP) [`#1268`](yorukot/superfile#1268) by @xelavopelk ##### Bug Fix - only calculate checksum on files [`#1119`](yorukot/superfile#1119) by @nikero41 - Linter issue with PrintfAndExit [`#1133`](yorukot/superfile#1133) by @xelavopelk - Remove repeated os.ReadDir calls [`#1155`](yorukot/superfile#1155) by @lazysegtree - Disable COPYFILE in macOS [`#1194`](yorukot/superfile#1194) by @lazysegtree - add missing hotkeys to help menu [`#1192`](yorukot/superfile#1192) by @lazysegtree - Fetch latest version automatically [`#1127`](yorukot/superfile#1127) by @lazysegtree - Use async methods to prevent test race conditions [`#1201`](yorukot/superfile#1201) by @lazysegtree - update metadata and process bar sizes when toggling footer [`#1218`](yorukot/superfile#1218) by @lazysegtree - File panel dimension management [`#1222`](yorukot/superfile#1222) by @lazysegtree - Layout fixes with full end-to-end tests [`#1227`](yorukot/superfile#1227) by @lazysegtree - Fix flaky tests [`#1233`](yorukot/superfile#1233) by @lazysegtree - modal confirmation bug with arrow keys [`#1243`](yorukot/superfile#1243) by @lazysegtree - small file panel optimization [`#1241`](yorukot/superfile#1241) by @xelavopelk - use ExtractOperationMsg for extraction [`#1248`](yorukot/superfile#1248) by @lazysegtree - skip open_with from missing field validation [`#1251`](yorukot/superfile#1251) by @lazysegtree - border height validation fixes [`#1267`](yorukot/superfile#1267) by @lazysegtree - fix case with two active panes [`#1271`](yorukot/superfile#1271) by @xelavopelk - help model formatting [`#1277`](yorukot/superfile#1277) by @booth-w ##### Optimization - simplify renameIfDuplicate logic [`#1100`](yorukot/superfile#1100) by @sarff - separate FilePanel into dedicated package [`#1195`](yorukot/superfile#1195) by @lazysegtree - File model separation [`#1223`](yorukot/superfile#1223) by @lazysegtree - Dimension validations [`#1224`](yorukot/superfile#1224) by @lazysegtree - layout validation and sidebar dimension fixes [`#1228`](yorukot/superfile#1228) by @lazysegtree - user rendering package and removal of unused preview code [`#1245`](yorukot/superfile#1245) by @lazysegtree - user rendering package for file preview [`#1249`](yorukot/superfile#1249) by @lazysegtree ##### Documentation - update Fish shell setup docs [`#1142`](yorukot/superfile#1142) by @wleoncio - fix macOS typo [`#1212`](yorukot/superfile#1212) by @wcbing - stylistic and linguistic cleanup of config documentation [`#1184`](yorukot/superfile#1184) by @ninetailedtori ##### Dependencies - update astro monorepo [`#1010`](yorukot/superfile#1010) by @renovate[bot] - update starlight-giscus [`#1020`](yorukot/superfile#1020) by @renovate[bot] - bump astro versions [`#1138`](yorukot/superfile#1138), [`#1157`](yorukot/superfile#1157), [`#1158`](yorukot/superfile#1158) by @dependabot[bot], @renovate[bot] - bump vite [`#1134`](yorukot/superfile#1134) by @dependabot[bot] - update setup-go action [`#1038`](yorukot/superfile#1038) by @renovate[bot] - update expressive-code plugins [`#1189`](yorukot/superfile#1189), [`#1246`](yorukot/superfile#1246) by @renovate[bot] - update sharp [`#1256`](yorukot/superfile#1256) by @renovate[bot] - update fontsource monorepo [`#1257`](yorukot/superfile#1257) by @renovate[bot] - update urfave/cli [`#1136`](yorukot/superfile#1136), [`#1190`](yorukot/superfile#1190) by @renovate[bot] - update astro / starlight / ansi / toolchain deps [`#1275`](yorukot/superfile#1275), [`#1278`](yorukot/superfile#1278), [`#1280`](yorukot/superfile#1280) by @renovate[bot] - update python and go versions [`#1276`](yorukot/superfile#1276), [`#1191`](yorukot/superfile#1191) by @renovate[bot] - update golangci-lint action [`#1286`](yorukot/superfile#1286) by @renovate[bot] ##### Misc - update CI input names [`#1120`](yorukot/superfile#1120) by @nikero41 - Everforest Dark Hard theme [`#1114`](yorukot/superfile#1114) by @fzahner - migrate tutorial demo assets to local [`#1140`](yorukot/superfile#1140) by @yorukot - new logo asset [`#1145`](yorukot/superfile#1145) by @nonepork - mirror repository to codeberg [`#1141`](yorukot/superfile#1141) by @yorukot - sync package lock [`#1143`](yorukot/superfile#1143) by @yorukot - bump golangci-lint version [`#1135`](yorukot/superfile#1135) by @lazysegtree - add gosec linter [`#1185`](yorukot/superfile#1185) by @lazysegtree - enable MND linter and clean magic numbers [`#1180`](yorukot/superfile#1180) by @lazysegtree - skip permission tests when running as root [`#1186`](yorukot/superfile#1186) by @lazysegtree - release v1.4.1-rc [`#1203`](yorukot/superfile#1203) by @lazysegtree - 1.5.0-rc1 housekeeping changes [`#1264`](yorukot/superfile#1264) by @lazysegtree </details> #### New Contributors * @fzahner made their first contribution in yorukot/superfile#1114 * @sarff made their first contribution in yorukot/superfile#1100 * @nicolaic made their first contribution in yorukot/superfile#1153 * @Yassen-Higazi made their first contribution in yorukot/superfile#1178 * @ninetailedtori made their first contribution in yorukot/superfile#1184 * @litvinov-git made their first contribution in yorukot/superfile#1197 * @wcbing made their first contribution in yorukot/superfile#1212 * @majiayu000 made their first contribution in yorukot/superfile#1250 **Full Changelog**: <yorukot/superfile@v1.4.0...v1.5.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this MR, check this box --- This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 22, 2025

dependabot Bot mentioned this pull request Oct 22, 2025

chore(deps): bump astro from 5.13.2 to 5.14.4 in /website #1121

Closed

codescene-delta-analysis Bot approved these changes Oct 22, 2025

View reviewed changes

dependabot Bot force-pushed the dependabot/npm_and_yarn/website/astro-5.14.8 branch from cb95f05 to 18beec6 Compare October 22, 2025 04:32

codescene-delta-analysis Bot approved these changes Oct 22, 2025

View reviewed changes

dependabot Bot force-pushed the dependabot/npm_and_yarn/website/astro-5.14.8 branch from 18beec6 to 1604b30 Compare October 22, 2025 04:48

codescene-delta-analysis Bot approved these changes Oct 22, 2025

View reviewed changes

yorukot approved these changes Oct 22, 2025

View reviewed changes

yorukot merged commit ce0666b into main Oct 22, 2025
10 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/website/astro-5.14.8 branch October 22, 2025 04:55

BrewTestBot mentioned this pull request Jan 13, 2026

superfile 1.5.0 Homebrew/homebrew-core#262601

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump astro from 5.13.2 to 5.14.8 in /website#1138

chore(deps): bump astro from 5.13.2 to 5.14.8 in /website#1138
yorukot merged 1 commit into
mainyorukot/superfile:mainfrom
dependabot/npm_and_yarn/website/astro-5.14.8yorukot/superfile:dependabot/npm_and_yarn/website/astro-5.14.8Copy head branch name to clipboard

dependabot Bot commented on behalf of github Oct 22, 2025 •

edited

Loading

⚠️ Breaking change for experimental live content collections only

⚠️ Breaking change for experimental live content collections only

Uh oh!

coderabbitai Bot commented Oct 22, 2025

Review skipped

Uh oh!

github-actions Bot commented Oct 22, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Search code, repositories, users, issues, pull requests...

Uh oh!

Conversation

dependabot Bot commented on behalf of github Oct 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

astro@5.14.8

Patch Changes

astro@5.14.7

Patch Changes

astro@5.14.6

Patch Changes

⚠️ Breaking change for experimental live content collections only

5.14.8

Patch Changes

5.14.7

Patch Changes

5.14.6

Patch Changes

⚠️ Breaking change for experimental live content collections only

Uh oh!

coderabbitai Bot commented Oct 22, 2025

Review skipped

Uh oh!

github-actions Bot commented Oct 22, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Oct 22, 2025 •

edited

Loading