Skip to content

ci(deps): update gohugoio/hugo action to v0.129.0 #52

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

ci(deps): update gohugoio/hugo action to v0.129.0 #52

wants to merge 1 commit into from

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 18, 2024 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
gohugoio/hugo action minor v0.118.2 -> v0.129.0

Release Notes

gohugoio/hugo (gohugoio/hugo)

v0.129.0

Compare Source

This release brings a rewrite of the logic around browser refreshes when running hugo server. We have seen some situations where asset changes (e.g. image/CSS/JS) has not been refreshed reliably in all browsers, even with the developer console open and the cache disabled. We suspect this comes from a recent browser bug (typically: Works fine in Safari, does not refresh in Chrome). The strategy we've been using when a change triggers multiple changes (e.g. both HTML and CSS) is to do one "browser force refresh", which in LiveReload ends up as a window.location.reload(). With this release we:

  1. Are more specific about what we refresh, but fall back to "force refresh" for bigger change sets.
  2. INFO log exactly what we do in these situations with the prefix livereload.

Start the server with:

hugo server --logLevel info

And you should see how Hugo handles browser updates when you change content/templates etc.

A related tip; start the server with

hugo server --logLevel info -N

Hugo will navigate to the content file you're changing and log it in the console.

Also new in this release a new xxHash hashing function that is much faster than any of the other hashing functions in Hugo, especially for larger inputs.

Note

We have upgraded the integration with Git used to load GitInfo to be part of Hugo's Security Policy. We have added git to the default whitelist, but if you have a custom security policy, you may have to update that.

Bug fixes

Improvements

Dependency Updates

v0.128.2

Compare Source

What's Changed

v0.128.1

Compare Source

What's Changed

v0.128.0

Compare Source

This release brings TailwindCSS v4 (alpha) support. For more info about the TailwindCSS 4 integration, see this repo. Also notable is the new templates.Defer template func and the dramatically improved performance of $page.GetTerms for bigger sites.

Bug fixes

Improvements

Dependency Updates

Build Setup

Documentation

v0.127.0

Compare Source

This release brings proper HTTP caching and live reloading of remote resources fetched with resources.GetRemote, especially useful when used with content adapters.

Note that this isn't enabled out of the box, so if you need this, you need to add some configuration. The demo below is configured as:

[httpcache]
[httpcache.cache]
[httpcache.cache.for]
includes = ['https://sheets.googleapis.com/**']
[[httpcache.polls]]
low  = '1s'
high = '30s'
[httpcache.polls.for]
includes = ['https://sheets.googleapis.com/**']
hugodemo__v0127.mp4

What's Changed

v0.126.3

Compare Source

v0.126.2

Compare Source

Bug fixes

Improvements

v0.126.1

Compare Source

What's Changed

v0.126.0

Compare Source

This release brings, drum roll, a long-awaited Hugo feature that has had many names. At one point we named it pages from data. You can read all about it in the documentation where it's titled Content Adapters.

Also worth mentioning are the new Extras Goldmark Extensions, which allows you to enable Markdown syntax for inserted text, mark text, subscript and superscript. A big thanks to @​bowman2001 for the implementation.

Improvements

Dependency Updates

Documentation

Build Setup

v0.125.7

Compare Source

Note that this release is only relevant if you use Hugo's openapi3.Unmarshal template function.

What's Changed

  • deps: Downgrade github.com/getkin/kin-openapi v0.124.0 => v0.123.0 3c6260f @​bep

v0.125.6

Compare Source

What's Changed

v0.125.5

Compare Source

What's Changed

v0.125.4

Compare Source

What Changed

v0.125.3

Compare Source

This release fixes a security issue reported by @​ejona86 (see #​12411) that could allow XSS injection from Markdown content files if one of the internal link or image render hook templates added in Hugo 0.123.0 are enabled. You typically control and trust the content files, but according to Hugo's security model, we state that "template and configuration authors (you) are trusted, but the data you send in is not."

v0.125.2

Compare Source

What's Changed

v0.125.1

Compare Source

What's Changed

v0.125.0

Compare Source

Some of the notable new features in this release:

  • strings.Diff template func.
  • .PageInner in render hooks to get the inner page when using .RenderShortcode in a shortcode, typically used to resolve links and page resources relative to an included Page.
  • Add Luminance to $image.Color, allowing for sorting by relative luminance. e197c7b @​bep #​10450

This release is built with Go 1.22.2 (#​12351) which comes with a fix for security issue CVE-2023-45288. We don't see how that could be exploited in Hugo, but we do appreciate that people want a clean security report.

Bug fixes

Improvements

Dependency Updates

Documentation

v0.124.1

Compare Source

What's Changed

v0.124.0

Compare Source

The new feature in this release is a new segments configuration section and a new --renderSegments flag/config key. This release also updates to Go 1.22.1 that fixes a security issue in the template package that Hugo uses (CVE-2023-45289, see golang/go#65697). We don't see how this could be exploited in Hugo, but we appreciate that Hugo users want to have a clean security report.

Bug fixes

Improvements

Dependency Updates

Documentation

Build Setup

v0.123.8

Compare Source

v0.123.7

Compare Source

What's Changed

v0.123.6

Compare Source

What's Changed

v0.123.5

Compare Source

What's Changed

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants