Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Apr 15, 2025

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
github.com/gohugoio/hugo v0.146.4 -> v0.152.2 age confidence

Release Notes

gohugoio/hugo (github.com/gohugoio/hugo)

v0.152.2

Compare Source

In v0.152.0 we tightened the source validation for file mounts. We always said that project mounts can mount with absolute file/directorynames, modules/themes are restricted to relative. In v0.152.0 we narrowed module/themes mounts to be local, which made the setup in the bug report listed below fail:

[[module.mounts]]
source = '../../node_modules/bootstrap'
target = 'assets/vendor/bootstrap'

One part of this is security. But the construct above is usually very odd (the project uses files in a theme/module, not the other way around) and not very portable. But the example above demonstrates a valid exception, that we now have added support for in a portable way. The above example now works as it did before v0.152.0, but going forward you can also write:

[[module.mounts]]
source = 'node_modules/bootstrap'
target = 'assets/vendor/bootstrap'

We now have the node_modules as a special case: For themes/modules we first check if the mounted source exists locally, if not we try relative to the project root.

What's Changed

v0.152.1

Compare Source

These fixes are are all related to the YAML library upgrade in v0.152.0.

v0.152.0

Compare Source

The big new thing and the motivation behind this release is the upgrade to a more modern YAML library in @​goccy 's github.com/goccy/go-yaml. It's been a surprisingly long and winding road to get here. Note that this upgrade comes with some minor breaking changes, most notably that the old YAML 1.1 spec listed a set of strings that, when unquoted, were treated as boolean true or false. So if you're using any of the values in the table below as booleans, you need to adjust your YAML, but I suspect that fixing this very surprising behavior will fix more issues than it introduces. A big new thing with this new YAML library is the support for YAML anchors and aliases which helps to reduce duplication in e.g. your configuration. There are some examples in Hugo's release build configuration and in the Hugo's CI release setup.

Values Old meaning New meaning
yes, Yes, YES, y, Y, on, On, ON true (bool) yes, Yes, YES, y, Y, on, On, ON (string)
no, No, NO, n, N, off, Off, OFF false (bool) no, No, NO, n, N, off, Off, OFF (string)

Note

Improvements

Dependency Updates

Build Setup

v0.151.2

Compare Source

What's Changed

v0.151.1

Compare Source

This release is mostly motivated by some upstream security fixes:

I, @​bep, have inspected the above issues, and none of them seem to be relevant for Hugo, but we understand that many want to have a clean security report.

Bug fixes

Improvements

Dependency Updates

v0.151.0

Compare Source

Some notable new features in Hugo v0.151.0 are:

Note

Improvements and bug fixes

Dependency Updates

v0.150.1

Compare Source

What's Changed

v0.150.0

Compare Source

The big new feature in this relase is the new version config option on Module imports, which allows you to set the requested module version query directly in your Hugo configuration (e.g. hugo.toml). This is a feature that have been requested by many, and I (@​bep) was reminded about it by this recent thread, which also outlines a common use case for this: Mounting multiple old versions/branches of API documentation into the project.

What's Changed

v0.149.1

Compare Source

The main motivation behind this release is the Go 1.25.1 upgrade, which comes with a security fix. Hugo does not use the feature in question, but we understand that many Hugo users like to have a clean security report.

Note

Note that CSS minification now targets CSS3, removing certain optimizations that were specific to CSS2.

What's Changed

v0.149.0

Compare Source

[!NOTE]
If running on Netlify, make sure you have configured your build with their latest build image, see this issue.

Hugo v0.149.0 comes with bug fixes and a set of new features/improvements, notably:

Note

Bug fixes

Improvements

Dependency Updates

Documentation

v0.148.2

Compare Source

What's Changed

v0.148.1

Compare Source

What's Changed

v0.148.0

Compare Source

[!NOTE]
There's some minor breaking changes in this release. Please read this thread for more information.

Note

Bug fixes

Improvements

Dependency Updates

v0.147.9

Compare Source

Improvements and fixes

Dependency Updates

v0.147.8

Compare Source

The primary motivation behind this release is to get the Docker package security patched and up to date.

Improvements

Dependency Updates

v0.147.7

Compare Source

Bug fixes

Improvements

Dependency Updates

v0.147.6

Compare Source

What's Changed

v0.147.5

Compare Source

We have gotten some requests about updating the minifier library we use, so here you go @​myitcv and others. I'm probably going to regret doing that particular upgrade on a Thursday, but so be it.

What's Changed

v0.147.4

Compare Source

What's Changed

v0.147.3

Compare Source

Mostly bug fixes here, but also a new template func to get a really big number. You can read about why that is useful in the documentation.

v0.147.2

Compare Source

What's Changed

v0.147.1

Compare Source

Bug fixes

Improvements

Dependency Updates

v0.147.0

Compare Source

This release comes with a new aligny option (shoutout to @​pranshugaba for the implementation) for images.Text that, in combination with alignx makes it simple to e.g. center the text on top of image in both axis. But the main reason this release comes now and not later, is the improvements/fixes to the order Hugo applies the default configuration to some keys. This is inherited from how we did this before we rewrote the configuration handling, and it made the merging of configuration from modules/themes into the config root harder and less flexible than it had to be. Me, @​bep, looking into this, was triggered by this forum topic. Having many sites share a common configuration is very useful. With this release, you can simply get what the thread starter asks for by doing something à la:

baseURL = "http://example.org"
title = "My Hugo Site"

### ... import any themes/modules.
### This will merge in all config imported from imported modules. 
_merge = "deep"

See the documentation for details.

Bug fixes

Improvements


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot enabled auto-merge (squash) April 15, 2025 22:58
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.146.5 fix(deps): update module github.com/gohugoio/hugo to v0.146.6 Apr 20, 2025
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch 2 times, most recently from 0b9a7ca to 8086773 Compare April 22, 2025 19:48
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.146.6 fix(deps): update module github.com/gohugoio/hugo to v0.146.7 Apr 22, 2025
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from 8086773 to d416638 Compare April 25, 2025 19:48
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.146.7 fix(deps): update module github.com/gohugoio/hugo to v0.147.0 Apr 25, 2025
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from d416638 to a9dc9f7 Compare May 1, 2025 15:08
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.147.0 fix(deps): update module github.com/gohugoio/hugo to v0.147.1 May 1, 2025
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from a9dc9f7 to 39013f2 Compare May 6, 2025 17:35
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.147.1 fix(deps): update module github.com/gohugoio/hugo to v0.147.2 May 6, 2025
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from 39013f2 to 892a285 Compare May 12, 2025 13:18
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.147.2 fix(deps): update module github.com/gohugoio/hugo to v0.147.3 May 12, 2025
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from 892a285 to a046dd2 Compare May 20, 2025 11:43
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.147.3 fix(deps): update module github.com/gohugoio/hugo to v0.147.4 May 20, 2025
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from a046dd2 to e6fbac6 Compare May 22, 2025 12:27
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.147.4 fix(deps): update module github.com/gohugoio/hugo to v0.147.5 May 22, 2025
@renovate
Copy link
Contributor Author

renovate bot commented May 22, 2025

ℹ Artifact update notice

File name: deps/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 9 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.23.0 -> 1.24.0
github.com/gohugoio/hashstructure v0.5.0 -> v0.6.0
github.com/niklasfasching/go-org v1.7.0 -> v1.9.1
github.com/spf13/afero v1.14.0 -> v1.15.0
github.com/spf13/cast v1.7.1 -> v1.10.0
github.com/tdewolff/parse/v2 v2.7.18 -> v2.8.5-0.20251020133559-0efcf90bef1a
golang.org/x/net v0.39.0 -> v0.46.0
golang.org/x/sys v0.32.0 -> v0.37.0
golang.org/x/text v0.24.0 -> v0.30.0
google.golang.org/protobuf v1.36.5 -> v1.36.9

@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from e6fbac6 to 645c19a Compare May 27, 2025 13:15
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.147.5 fix(deps): update module github.com/gohugoio/hugo to v0.147.6 May 27, 2025
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.147.6 fix(deps): update module github.com/gohugoio/hugo to v0.147.7 May 31, 2025
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from 645c19a to 360b6dc Compare May 31, 2025 13:58
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from 360b6dc to 48c65b9 Compare June 7, 2025 18:32
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.147.7 fix(deps): update module github.com/gohugoio/hugo to v0.147.8 Jun 7, 2025
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from 48c65b9 to 4cc4230 Compare June 23, 2025 11:48
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.147.8 fix(deps): update module github.com/gohugoio/hugo to v0.147.9 Jun 23, 2025
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.147.9 fix(deps): update module github.com/gohugoio/hugo to v0.147.9 - autoclosed Jun 29, 2025
@renovate renovate bot closed this Jun 29, 2025
auto-merge was automatically disabled June 29, 2025 09:31

Pull request was closed

@renovate renovate bot deleted the renovate/github.com-gohugoio-hugo-0.x branch June 29, 2025 09:31
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.148.1 fix(deps): update module github.com/gohugoio/hugo to v0.148.2 Jul 27, 2025
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.148.2 fix(deps): update module github.com/gohugoio/hugo to v0.148.2 - autoclosed Jul 29, 2025
@renovate renovate bot closed this Jul 29, 2025
auto-merge was automatically disabled July 29, 2025 18:11

Pull request was closed

@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.148.2 - autoclosed fix(deps): update module github.com/gohugoio/hugo to v0.148.2 Jul 30, 2025
@renovate renovate bot reopened this Jul 30, 2025
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from 78e5b48 to 58d4153 Compare July 30, 2025 00:58
@renovate renovate bot enabled auto-merge (squash) July 30, 2025 07:12
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from 58d4153 to 9fa8e01 Compare August 27, 2025 21:54
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.148.2 fix(deps): update module github.com/gohugoio/hugo to v0.149.0 Aug 27, 2025
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from 9fa8e01 to 285189e Compare September 4, 2025 17:58
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.149.0 fix(deps): update module github.com/gohugoio/hugo to v0.149.1 Sep 4, 2025
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from 285189e to 88b5d0f Compare September 8, 2025 17:45
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.149.1 fix(deps): update module github.com/gohugoio/hugo to v0.150.0 Sep 8, 2025
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from 88b5d0f to 34b19f1 Compare September 25, 2025 13:15
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.150.0 fix(deps): update module github.com/gohugoio/hugo to v0.150.1 Sep 25, 2025
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from 34b19f1 to 635fc7e Compare October 2, 2025 17:28
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.150.1 fix(deps): update module github.com/gohugoio/hugo to v0.151.0 Oct 2, 2025
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from 635fc7e to 8ab478c Compare October 15, 2025 15:48
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.151.0 fix(deps): update module github.com/gohugoio/hugo to v0.151.1 Oct 15, 2025
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from 8ab478c to 31ca32b Compare October 16, 2025 22:14
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.151.1 fix(deps): update module github.com/gohugoio/hugo to v0.151.2 Oct 16, 2025
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from 31ca32b to 923a25d Compare October 22, 2025 02:45
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.151.2 fix(deps): update module github.com/gohugoio/hugo to v0.152.0 Oct 22, 2025
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from 923a25d to 01784a3 Compare October 22, 2025 21:36
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.152.0 fix(deps): update module github.com/gohugoio/hugo to v0.152.1 Oct 22, 2025
@renovate renovate bot force-pushed the renovate/github.com-gohugoio-hugo-0.x branch from 01784a3 to 702bf32 Compare October 24, 2025 19:42
@renovate renovate bot changed the title fix(deps): update module github.com/gohugoio/hugo to v0.152.1 fix(deps): update module github.com/gohugoio/hugo to v0.152.2 Oct 24, 2025
@renovate
Copy link
Contributor Author

renovate bot commented Dec 15, 2025

ℹ️ Artifact update notice

File name: deps/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 9 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.23.0 -> 1.24.0
github.com/gohugoio/hashstructure v0.5.0 -> v0.6.0
github.com/niklasfasching/go-org v1.7.0 -> v1.9.1
github.com/spf13/afero v1.14.0 -> v1.15.0
github.com/spf13/cast v1.7.1 -> v1.10.0
github.com/tdewolff/parse/v2 v2.7.18 -> v2.8.5-0.20251020133559-0efcf90bef1a
golang.org/x/net v0.39.0 -> v0.46.0
golang.org/x/sys v0.32.0 -> v0.37.0
golang.org/x/text v0.24.0 -> v0.30.0
google.golang.org/protobuf v1.36.5 -> v1.36.9

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant