hugo-extended-docker icon indicating copy to clipboard operation
hugo-extended-docker copied to clipboard

Published 20 hours ago • verified publisher icon peaceiris

fix(deps): update module github.com/gohugoio/hugo to v0.152.2

Open renovate[bot] opened this issue 7 months ago • 1 comments

This PR contains the following updates:

Package Change Age Confidence
github.com/gohugoio/hugo v0.146.4 -> v0.152.2 age confidence

Release Notes

gohugoio/hugo (github.com/gohugoio/hugo)

v0.152.2

Compare Source

In v0.152.0 we tightened the source validation for file mounts. We always said that project mounts can mount with absolute file/directorynames, modules/themes are restricted to relative. In v0.152.0 we narrowed module/themes mounts to be local, which made the setup in the bug report listed below fail:

[[module.mounts]]
source = '../../node_modules/bootstrap'
target = 'assets/vendor/bootstrap'

One part of this is security. But the construct above is usually very odd (the project uses files in a theme/module, not the other way around) and not very portable. But the example above demonstrates a valid exception, that we now have added support for in a portable way. The above example now works as it did before v0.152.0, but going forward you can also write:

[[module.mounts]]
source = 'node_modules/bootstrap'
target = 'assets/vendor/bootstrap'

We now have the node_modules as a special case: For themes/modules we first check if the mounted source exists locally, if not we try relative to the project root.

What's Changed

v0.152.1

Compare Source

These fixes are are all related to the YAML library upgrade in v0.152.0.

v0.152.0

Compare Source

The big new thing and the motivation behind this release is the upgrade to a more modern YAML library in @​goccy 's github.com/goccy/go-yaml. It's been a surprisingly long and winding road to get here. Note that this upgrade comes with some minor breaking changes, most notably that the old YAML 1.1 spec listed a set of strings that, when unquoted, were treated as boolean true or false. So if you're using any of the values in the table below as booleans, you need to adjust your YAML, but I suspect that fixing this very surprising behavior will fix more issues than it introduces. A big new thing with this new YAML library is the support for YAML anchors and aliases which helps to reduce duplication in e.g. your configuration. There are some examples in Hugo's release build configuration and in the Hugo's CI release setup.

Values Old meaning New meaning
yes, Yes, YES, y, Y, on, On, ON true (bool) yes, Yes, YES, y, Y, on, On, ON (string)
no, No, NO, n, N, off, Off, OFF false (bool) no, No, NO, n, N, off, Off, OFF (string)

Note

Improvements

Dependency Updates

Build Setup

v0.151.2

Compare Source

What's Changed

v0.151.1

Compare Source

This release is mostly motivated by some upstream security fixes:

I, @​bep, have inspected the above issues, and none of them seem to be relevant for Hugo, but we understand that many want to have a clean security report.

Bug fixes
Improvements
Dependency Updates

v0.151.0

Compare Source

Some notable new features in Hugo v0.151.0 are:

Note

Improvements and bug fixes

Dependency Updates

v0.150.1

Compare Source

What's Changed

v0.150.0

Compare Source

The big new feature in this relase is the new version config option on Module imports, which allows you to set the requested module version query directly in your Hugo configuration (e.g. hugo.toml). This is a feature that have been requested by many, and I (@​bep) was reminded about it by this recent thread, which also outlines a common use case for this: Mounting multiple old versions/branches of API documentation into the project.

What's Changed

v0.149.1

Compare Source

The main motivation behind this release is the Go 1.25.1 upgrade, which comes with a security fix. Hugo does not use the feature in question, but we understand that many Hugo users like to have a clean security report.

Note

Note that CSS minification now targets CSS3, removing certain optimizations that were specific to CSS2.

What's Changed

v0.149.0

Compare Source

[!NOTE]
If running on Netlify, make sure you have configured your build with their latest build image, see this issue.

Hugo v0.149.0 comes with bug fixes and a set of new features/improvements, notably:

Note

Bug fixes

Improvements

Dependency Updates

Documentation

v0.148.2

Compare Source

What's Changed

v0.148.1

Compare Source

What's Changed

v0.148.0

Compare Source

[!NOTE]
There's some minor breaking changes in this release. Please read this thread for more information.

Note

Bug fixes

Improvements

Dependency Updates

v0.147.9

Compare Source

Improvements and fixes

Dependency Updates

v0.147.8

Compare Source

The primary motivation behind this release is to get the Docker package security patched and up to date.

Improvements

Dependency Updates

v0.147.7

Compare Source

Bug fixes

Improvements

Dependency Updates

v0.147.6

Compare Source

What's Changed

v0.147.5

Compare Source

We have gotten some requests about updating the minifier library we use, so here you go @​myitcv and others. I'm probably going to regret doing that particular upgrade on a Thursday, but so be it.

What's Changed

v0.147.4

Compare Source

What's Changed

v0.147.3

Compare Source

Mostly bug fixes here, but also a new template func to get a really big number. You can read about why that is useful in the documentation.

v0.147.2

Compare Source

What's Changed

v0.147.1

Compare Source

Bug fixes

Improvements

Dependency Updates

v0.147.0

Compare Source

This release comes with a new aligny option (shoutout to @​pranshugaba for the implementation) for images.Text that, in combination with alignx makes it simple to e.g. center the text on top of image in both axis. But the main reason this release comes now and not later, is the improvements/fixes to the order Hugo applies the default configuration to some keys. This is inherited from how we did this before we rewrote the configuration handling, and it made the merging of configuration from modules/themes into the config root harder and less flexible than it had to be. Me, @​bep, looking into this, was triggered by this forum topic. Having many sites share a common configuration is very useful. With this release, you can simply get what the thread starter asks for by doing something à la:

baseURL = "http://example.org"
title = "My Hugo Site"

### ... import any themes/modules.
### This will merge in all config imported from imported modules. 
_merge = "deep"

See the documentation for details.

Bug fixes

Improvements

  • create/skeletons: Adjust template names in theme skeleton 75b219d @​jmooring
  • tpl: Remove some unreached code branches ad4f63c @​bep
  • images: Add some test cases for aligny on images.Text [5320231](https://red

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • [ ] If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate[bot] avatar Apr 15 '25 22:04 renovate[bot]

ℹ Artifact update notice

File name: deps/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 9 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.23.0 -> 1.24.0
github.com/gohugoio/hashstructure v0.5.0 -> v0.6.0
github.com/niklasfasching/go-org v1.7.0 -> v1.9.1
github.com/spf13/afero v1.14.0 -> v1.15.0
github.com/spf13/cast v1.7.1 -> v1.10.0
github.com/tdewolff/parse/v2 v2.7.18 -> v2.8.5-0.20251020133559-0efcf90bef1a
golang.org/x/net v0.39.0 -> v0.46.0
golang.org/x/sys v0.32.0 -> v0.37.0
golang.org/x/text v0.24.0 -> v0.30.0
google.golang.org/protobuf v1.36.5 -> v1.36.9

renovate[bot] avatar May 22 '25 12:05 renovate[bot]