Hugo: baixar versions anteriors

Notable new features
- New imaging.firstFrameOnly option (and a matching processing flag) to only decode/encode the first frame of animated images. Hugo now also only decodes the first frame when the target format doesn't support animation, and fails early with an informative error if processing all frames would exceed the WASM memory limit.
- New FrameCount method on images, e.g. to check if an image is animated.
- site.Language now has Translate and Format* methods, so you can e.g. range over site.Languages and translate into each language.
- New charset option for js.Build and css.Build.
- Basic support for the OSC 7501 program status (working/done/idle/error) in terminals that support it, alongside the existing OSC 9;4 progress.
Security fixes
This release is built with Go 1.27.2, which includes 15 security fixes. The most relevant for Hugo are:
- Two html/template escaping fixes, which also apply to Hugo's fork of the package: CVE-2026-94448 (context tracking not reset on consecutive expressions in JS template literals) and CVE-2026-97030 (yield not recognized as a regexp preceder keyword). Both could lead to incorrect escaping of inline JavaScript.
- Several net/http fixes (HTTP/2 server crash and memory exhaustion, connection desynchronization, unbounded Range header parsing), relevant for hugo server and remote resources. The corresponding HTTP/2 fixes are also included via the upgrade of golang.org/x/net to v0.61.0.
- CVE-2026-56857: os.Root.Mkdir(All) could follow junctions out of the root on Windows.
Also:
- github.com/tdewolff/minify is upgraded to v2.24.19, which fixes GHSA-3ppm-p7r9-c5w3: </script> (and <!--) inside inline scripts was not properly escaped (case-insensitively) when minifying JS in HTML.
- Hugo now ignores module.replacements defined in themes; only the project can define replacements.
Changes
- Fix PAGE.IsNode warning in jsonify 0732eadd @bep #15420
- hugolib: Fix rebuild when content is also mounted as assets ac62c804 @taekop #12838
- Fix deprecation issues in tests be8ffd62 @bep
- circleci: Update config.yml to version 2.1 285d0efc @bep
- warpc: Upgrade libavif, AOM, dav1d versions c94bdf92 @bep
- warpc: Upgrade to javy 9.1.0 63fb71ca @bep
- warpc: Upgrade to wasi-sdk-34 2f2f33b2 @bep
- ci: Drop extended build tag on Windows tests 53aae446 @bep
- Add imaging.firstFrameOnly and some animation performance improvements 13ee7e97 @bep #15433
- js, css: Add charset option to js.Build and css.Build 0688a8cd @bep #15435
- Add ImageResource.FrameCount c9f6e4d4 @bep #15430
- Add Translate and Format* methods to Language df8badea @bep #7844
- Add basic support for OSC 7501 program status d1024ae6 @bep #15425
- modules: Ignore module.replacements defined in themes 6883b55a @bep
- Upgrade to Go 1.27.2 f44c355e @bep #15427
- ci: Add temporary workaround for staticcheck vs Go 1.27.2 46123a60 @bep
- transform/metainject: Inject Hugo generator tag last in
- Make tests run on GOARCH 386 6b3ba3a7 @bep #15403
- Update vulnerability reporting instructions ec69d0e6 @bep
Dependency Updates
- build(deps): bump golang.org/x/image from 0.46.0 to 0.47.0 2bbad501 @dependabot[bot]
- build(deps): bump golang.org/x/mod from 0.41.0 to 0.42.0 030619b4 @dependabot[bot]
- build(deps): bump golang.org/x/net from 0.59.0 to 0.61.0 13ef7079 @dependabot[bot]
- build(deps): bump github.com/bits-and-blooms/bitset 846b1d74 @dependabot[bot]
- build(deps): bump github.com/tdewolff/minify/v2 from 2.24.17 to 2.24.19 16441d2f @dependabot[bot]
Build Setup
- snap: Update base to core26 8c88da37 @jmooring

This release brings relative partial references, slug support for branch pages, and a handful of security hardening fixes.
Relative partial references. A partial name starting with ./ or ../ is now resolved relative to the directory of the calling partial. This makes it much easier to write self-contained, movable partial trees, e.g. {{ partial "./item.html" . }} from within layouts/_partials/card/list.html. Relative paths are only allowed from within partials, and paths resolving outside the partials directory is an error. See #15373 and the documentation.
Slugs for section, taxonomy and term pages. The slug front matter now works for branch pages, not just regular pages, and it cascades to descendants. This is particularly useful in multilingual sites, where e.g. content/help/_index.es.md with slug: ayuda gives /es/ayuda/, /es/ayuda/avanzado/ etc. See #14352.
Other notable improvements include the new build.cleanDestinationDir config with keepFiles/keepDirs Glob patterns (#14937, docs), hugo now builds without a config file (#15393), exact numeric comparisons in eq, where, in and the set functions (#15322, #15358), and automatic summaries that no longer end inside an open list or blockquote (#14044).
Security
This release contains several hardening fixes. None of them are known to be exploited, but if you build sites with untrusted themes or modules, you should upgrade.
- Sass imports not found in Hugo's file systems were resolved by the Sass compiler itself, which follows symlinks and knows nothing about the project root. A theme could import a file outside the project and get its content into the published CSS. These imports are now resolved by Hugo and checked against the same security.allowRead roots as the Node.js tools and js.Build. 41040cc7 (thanks to @Hama1cco)
- Likewise, imports not found in /assets were resolved and read by ESBuild itself. The resolved path is now checked against the allowed read paths before ESBuild loads it. 2aa51f34 (thanks to @Hama1cco)
- A symlinked directory in a theme at the parent of a nested mount could expose files outside the module. 2fe9bab7
- Explicit heading IDs (e.g. ## Foo {id="..."}) were written unescaped into the table of contents href, allowing attribute breakout. 671fbf2c
Note
- The default baseURL is now https://example.org/ (it was empty). Hugo has always required a valid URL to work properly, so this mostly affects new and test sites, but if you relied on the empty default for relative URLs, set baseURL explicitly. bc686541 @bep #14625 #15384
- The root cleanDestinationDir config key is deprecated in favour of build.cleanDestinationDir.enable. The --cleanDestinationDir flag maps to the new key. Note that .git files in the publish dir are now kept by default. 90861931 @bep #14937
- eq now compares numeric values the same way as lt, le etc., so e.g. eq 1 1.0 is now true. Also, in, intersect, union, uniq, symdiff, complement and where's in/not in now compare numbers exactly rather than via float64, and no longer require the Go types to match. 4d628bbd 366377b6 @bep #15322 #15358
- A user table render hook is now preferred over the embedded one. 140d9362 @jmooring #15389
- Automatic summaries are expanded past summaryLength when needed so they don't end inside an open container element. This may change the summary for some pages. d692a243 @bep #14044
Bug fixes
- hugolib: Fix failing integration test fdbba5a6 @jmooring
- Fix build with Go 1.26 on Fedora 44 Beta 2782bfd3 @flyn-org
- Fix smartcrop with rotation (#15371) 5edd05bb @bep #11266 #15369
- ci: Fix broken magefile 1d87ee5b @bep
- tpl/collections: Fix union of slices with different numeric element types ffbcdba9 @hktitof #15323
- Fix stale page content when several files in the same dir change in one batch a374b865 @bep #15330
Improvements
- Update .gitignore f6606f1f @bep
- tocss: Confine Sass import fallbacks to the allowed read paths 41040cc7 @bep
- js: Confine ESBuild's fallback resolver to the allowed read paths 2aa51

Note
- tpl/transform: Bump fileCacheEntryVersion in transform.ToMath (note) 8d88b8b4 @bep #15267
- resources/images: Bump formatVersionNumbers.PNG and fix version cache busting for images.Filter (note) d19e0a4b @bep #12536 #12543 #15266
- warpc/js: Upgrade katex to 0.18.4 (note) ec52e638 @bep #15254
- hexec: Fail on symlinks that escape the Node.js permission paths c05c012a @bep
- config/security: Deny text/org content by default e6abb9c3 @bep
- config/security: Add http.proxyFromEnvironment and document the resolved address check 6a2a955d @bep #15301 #15302
When upgrading to Hugo v0.166.0, sites using transform.ToMath with the output option set to html or htmlAndMathml must update the KaTeX stylesheet referenced in their template(s) to version 0.18.4 or higher. Using older CSS versions like 0.16.21 will cause certain mathematical or chemical expressions to render incorrectly.
Example update:
- <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/katex@0.16.21/dist/katex.min.css">
+ <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/katex@0.18.4/dist/katex.min.css">
See these examples:
- https://gohugo.io/functions/transform/tomath/#step-3
- https://gohugo.io/render-hooks/passthrough/#example
Bug fixes
- tpl/strings: Fix replaceRE with zero-width assertions ae07063f @youdie006
- common/hreflect: Fix the off-by-one in the float to int overflow guards 5130d000 @youdie006
- resources/images: Fix filters on transparent colors and paletted images 77856683 @bep #12536 #12543
- github: Fix workflow for stale issues efe5cbc7 @jmooring #15261
- all: Run modernize -fix ./... 7b5199fd @bep
- commands: Fix lang flag description in config command 87260e4a @jmooring #15223
- hugolib: Fix slice bounds panic when deleting multiple nodes at same path 49dceb19 @bep #15207
- hugolib: Fix ReadingTime and FuzzyWordCount calculations 5e709925 @jmooring #15206
Improvements
- js: Add es2025 as supported build target 857120b7 @bep #15307
- hugofs: Drop symlinked mount roots 938c8206 @bep
- markup/highlight: Escape lineAnchors before passing it to Chroma 3b2d3b82 @bep
- tpl/partials: Slight performance improvement of the common partialCached case 9c2527f8 @bep
- Add internalExternal.IgnoreTailwindCSSSecurityError config option a36bd274 @bep
- config/security: Harden the default http.urls and resolved address checks (#15285) 24d5e42f @bep
- resources/images: Preserve the source palette for geometric filter chains 9e7c978e @bep #12543
- resources/images: Add golden test cases for geometric filter chains on paletted images 6b5b7d82 @bep #12543
- resources/images: Add some golden test cases 62e24b7e @bep #12536 #12543
- related: Speed up index creation f61346ed @bep
- related: Add tokenize option for index values 850f11c0 @jmooring #7515 #15199
- resources/page: Don't let a title's "/" split an auto-derived slug 39507d51 @ipince #4092 #3577 #5571 #4090
- config/allconfig: Improve resilience of hugo mod init 90fe5068 @jmooring #15253
- tpl: Separate deferred templates by escaping mode 49835f8f @Soundcreates #15234
- resources: Validate the resolved address on remote fetches d6e6f9e5 @bep #15247
- markup: Escape code-fence attribute values in the default renderer e4dc48cf @bep #15247
- hugolib: Make .Render take an optional context argument bcde8063 @bep #15077
- modules/npm: Make the generated workspace package private with a stable name df4ac348 @bep #15245
- common/hstore: Keep read lock while sorting map values 166d3ee1 @Soundcreates #15237
- metrics: Improve template metrics duration formatting a25af7fa @Shiwang0-0 #15027
- Remove comments from rebuild test functions 723579ff @bep
- hugolib: Add some fast render mode integration tests 85ad5e48 @bep
- Upgrade to Go 1.27 e31ff547 @bep #15228
- tpl: Improve the return keyword in templates 8405b802 @bep #15212
- page: Add IndexOf method to Pages bf05832d @Shiwang0-0 #13589
- tpl/resources: Add resources.Publish a05736cb @bep #15208
- markup/pandoc: Support pandoc 3.11 and later 423e9cea @jmoorin

Note
- Remove tailwindcss from the default security.exec.allow list (note) 8a55df7a @bep #15178 #15171
Bug fixes
- Fix resource transformation chaining after content access f772998f @bep #15189
- Fix server static file detection for deleted files/directories in the static syncer 2ffaf1fc @bep
- Fix server errors when deleting static files or directories a808f6e4 @bep #15174
- Fix panic on server atomic save edits on MacOS 6bf15241 @bep #15130
- markup/asciidocext: Fix TOC parsing for asciidoctor-html5s f961093e @jmooring #15121
- snap: Fix snap home environment 984358f0 @jmooring #15114
Improvements
- resources: Resume chained resource transformations 995a2159 @bep #15189 #15189
- resources/jsconfig: Drop source root mapping for the current source root f88f0a9f @bep #15169
- circleci: Upgrade to Go 1.26.5 52c9bd79 @bep
- Add Data.Artifacts to css.Build and js.Build 44da0860 @bep #15173
- css: Add classDark and classLight options to css.ChromaStyles and gen chromastyles 33d1f2c8 @bep #15167
- markup/highlight: Re-emit token colors dropped by Chroma's minifier 64da6d7c @bep #15161
- Add importContext option to css.Build, js.Build, css.Sass and css.TailwindCSS 70db201e @bep #15103
- Remove some old deprecations 8a468df0 @bep
- Add css.ChromaStyles 615e45d6 @bep #15112
- check.sh: Handle staticcheck not installed/in PATH a243a615 @Soundcreates
- warpc: Improve AVIF error message on memory allocation failure 7d90277a @bep
- cache/filecache: Don't prune used cache entries with mixed-case dir names 861ede6d @bep #15101
- Drop symlinks in parent directories f228c87d @bep
- Delete .gemini 7df45f61 @bep
- common/hugo: Include non-go dependencies in go env output 89b8c322 @jmooring #15116
Dependency Updates
- build(deps): bump github.com/bep/imagemeta from 0.17.3 to 1.0.0 0bb337b2 @dependabot[bot]
- build(deps): bump github.com/evanw/esbuild from 0.28.1 to 0.28.2 03dc9170 @dependabot[bot]
- build(deps): bump github.com/tdewolff/minify/v2 from 2.24.14 to 2.24.16 c829b736 @dependabot[bot]
- build(deps): bump github.com/getkin/kin-openapi from 0.145.0 to 0.146.0 94f3908e @dependabot[bot]
- build(deps): bump github.com/rogpeppe/go-internal from 1.15.0 to 1.16.0 75fcc752 @dependabot[bot]
- build(deps): bump github.com/mattn/go-isatty from 0.0.22 to 0.0.24 b5fa03d3 @dependabot[bot]
- build(deps): bump github.com/yuin/goldmark from 1.8.4 to 1.8.5 9da472dd @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.47.0 to 0.48.0 635532a2 @dependabot[bot]
- build(deps): bump github.com/kyokomi/emoji/v2 from 2.2.13 to 2.2.14 9c71f600 @dependabot[bot]
- build(deps): bump github.com/getkin/kin-openapi from 0.144.0 to 0.145.0 420527fc @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.43.0 to 0.44.0 7fe786e3 @dependabot[bot]
- build(deps): bump github.com/bep/imagemeta from 0.17.2 to 0.17.3 03b244fc @dependabot[bot]
- build(deps): bump github.com/tdewolff/minify/v2 from 2.24.13 to 2.24.14 96118133 @dependabot[bot]
- build(deps): bump github.com/yuin/goldmark from 1.8.2 to 1.8.4 e35b7f04 @dependabot[bot]
- build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 0796fa7a @dependabot[bot]
- build(deps): bump golang.org/x/text from 0.38.0 to 0.40.0 1b701b72 @dependabot[bot]
- build(deps): bump github.com/getkin/kin-openapi from 0.140.0 to 0.144.0 a32d70b7 @dependabot[bot]
- build(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 948cfb98 @dependabot[bot]
- build(deps): bump golang.org/x/mod from 0.37.0 to 0.38.0 8930802e @dependabot[bot]
Documentation
- Remove Star History from README dd3f2731 @bep #15190
- Update README.md d1f191c5 @jmooring

Notable new features in this release are:
- The Chroma highlighter styles now introduces dark/light pairs. See also the new flags on the hugo gen chromastyles command.
- New template funcs encoding.HexEncode, encoding.HexDecode, and crypto.Hash.
- New markup.rst.syntaxHighlight option.
- We added Pandoc citation support.
- We now spport sub paths in layouts passed to Page.Render.
- This release also fixes a performance regression introduced in Hugo v0.128.0. This should mostly be prominent in bigger sites. See this discussion for some background.
Notes
- tpl/resources: Deprecate resources.PostProcess in favour of templates.Defer 29ed9325 @bep #15086
Changes
- all: Rewrite deprecated constructs in tests 5a5f4a54 @bep
- tpl/tplimpl: Support sub paths in layouts passed to .Render d83ce27a @bep #15056
- Add markup.rst.syntaxHighlight option c6acc246 @bep #5349
- tpl/resources: Deprecate resources.PostProcess in favour of templates.Defer 29ed9325 @bep #15086
- tpl/collections: Include key in IsSet unsupported-type warning 671897ae @bejaratommy #11794
- create: Keep new content placeholders buildable 499794d1 @sjh9714 #15078
- hugio: Speedup hasBytesWriter 65c82178 @bep
- tpl/crypto: Add crypto.Hash dfb35dcd @bep #15072
- Add encoding.HexDecode/Encode a5ec5423 @bep #15068 #15060
- tpl/tplimpl: Make template name lookup case-insensitive e46d37a9 @jmooring #15057
- hugolib: Return error from .Render when template not found fe067352 @jmooring #15052
- markup/pandoc: Add citation support 128fb17c @jmooring #15062
Dependency Updates
- build(deps): bump github.com/JohannesKaufmann/html-to-markdown/v2 921db7b5 @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.45.0 to 0.47.0 786ce71e @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.42.0 to 0.43.0 5ad28461 @dependabot[bot]
- build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 36ad9f58 @dependabot[bot]
- build(deps): bump github.com/pelletier/go-toml/v2 from 2.4.2 to 2.4.3 7c0a0bc9 @dependabot[bot]
- build(deps): bump github.com/getkin/kin-openapi from 0.139.0 to 0.140.0 a879ebfa @dependabot[bot]
- build(deps): bump golang.org/x/mod from 0.36.0 to 0.37.0 332d5ec8 @dependabot[bot]
- build(deps): bump github.com/pelletier/go-toml/v2 from 2.3.1 to 2.4.2 212cc11a @dependabot[bot]
- deps: Upgrade github.com/evanw/esbuild v0.28.0 ⇒ v0.28.1 884439b9 @bep #15033
- deps: Add Chroma dark/light mode support 790a8aa4 @bep #15017

What's Changed
- markup/highlight: Escape lang in default code block rendering ce1a7e0b @bep
- parser/pageparser: Preserve non-ASCII whitespace after e.g. summary divider 70a9068a @bep
- resources: Support babel/postcss config variants 9d66d513 @jmooring #15039 #15040 #15043
- hugolib: Fix page/section name collision regression f0133466 @jmooring #15046

What's Changed
- Continue resolving on ERR_ACCESS_DENIED in Node's resolver 134674f0 @bep #15041
- markup: Standardize behavior when external converters are missing 147f605f @jmooring #14222

What's Changed
- build(deps): bump golang.org/x/image from 0.41.0 to 0.42.0 93c8c7d3 @dependabot[bot]
- Fix multi --renderSegments merge behavior 95e5e9f4 @bep #15024
- security: Normalize integer IPv4 host encodings in http.urls check a00b5c72 @bep
- Drop symlinks in os.ReadDir, os.ReadFile, os.Stat and os.FileExists cf9c8f93 @bep #15019
- commands: Fix convert command 2602796c @jmooring #15012

Improvements
- resources/jsconfig: Remove deprecated baseUrl setting ff2903a9 @bep #14991 #14996
- all: Adjust tests for deprecated link and image render hook settings ca68936d @jmooring
- all: Run go fix ./... 781fabf4 @bep
- pagesfromdata: Use relative path for content adapter template metrics 1d018ef8 @anupamojha-eng #14999
- ci: Re-add macos-latest to the test matrix 121bc6ce @bep
- images: Deprecate Imaging.Compression and move it down to webp and avif configs cf18b827 @bep #14998
- Only support the latest Go version 98ad9b3c @bep #14997
- page: Add IsBranch and deprecate IsNode b89e7fe6 @bep #11574
- images: Force cache invalidation for AVIF target e8fefc83 @bep #14990
- images: Add a per-format AVIF hint setting a043d3ec @bep #14992
- images: Make AVIF chroma subsampling content-aware via the hint 341f575d @bep #14987
- Cap AVIF lossy quality at 99 248241b6 @bep #14981
- config: Deprecate the glogal imaging quality setting 4e47d95d @bep #14979
- images: Make 60 the default quality for AVIF 03b4b542 @bep #14979
- livereload: Disconnect from websocket server on pageswap 79be0532 @bep #14983
- tpl/tplimpl/embedded: Prevent leading newline in sitemap template 0f440460 @bep #14977
- images: Recover from memory alloc errors in WASM image processors 4e17421e @bep #14985
- images: Add quality setting per image format b01ecd4c @bep #14957
- misc: Remove duplicate words in comments 45c00b7c @jmooring #14936 #14950 #14965
- Add some PNG to AVIF golden test cases 28d882ab @bep
Dependency Updates
- build(deps): bump github.com/bits-and-blooms/bitset 0d29fc81 @dependabot[bot]
- build(deps): bump github.com/tetratelabs/wazero bb57404f @dependabot[bot]
- build(deps): bump github.com/rogpeppe/go-internal from 1.14.1 to 1.15.0 7d1b1fb3 @dependabot[bot]
- build(deps): bump github.com/getkin/kin-openapi from 0.138.0 to 0.139.0 77a11470 @dependabot[bot]

What's Changed
- modules/npm: Fix false stale warning after npm pack 59f35cd9 @jmooring #14959
- Revert "tpl/collections: Make dict return nil when no values are provided" c2709750 @bep #14958
- tpl/time: Fix locale-specific month abbreviations ea8b48af @jmooring #14948

Bug fixes
- hugolib: Fix Page.GitInfo for modules with go.mod in a repo subdirectory df542191 @bep #14942
- Fix typo in CONTRIBUTING.md 4bc7caea @bep
- resources: Fix the :counter placeholder 5d51b82a @jmooring #14921
- commands: Fix import from Jekyll 81d77620 @jmooring #14795 #14906
- Fix prevention of direct symlink reads in resources.Get f8b5fa09 @bep
- commands: Fix github-dark chromastyles 88d838a9 @xndvaz #14831
Improvements
- Disallow HTML content by default e41a0644 @bep
- Add image processing support for AVIF 90d9f812 @bep #7837
- config: Preserve intentionally empty maps 80e60847 @jmooring #14944
- hugolib: Merge existing hugo_stats.json when renderSegments is set aeb9a5cc @bep #14939
- all: Replace RWMutex struct caches with ConcurrentMap c4bbc280 @bep
- tpl/tplimpl: Consolidate and improve embedded template integration tests d8c70218 @jmooring #14932
- parser: Drop empty sub maps from hugo config output ee4f1acd @bep #14855
- markup/highlight: Allow overriding type and code via options b6133657 @bep #11872
- Update AI assistance disclosure requirements d2c821b5 @bep
- hugolib: Use AllTranslated in IsTranslated 4ed7600f @bep
- tpl: Simplify sitemap template cbe4339a @bep #14912
- tpl: Use AllTranslations in sitemap template 6475d308 @bep #14912 #14917
- tpl/collections: Make dict return nil when no values are provided 67aede43 @bep
- Sync Go template package to 1.26.3 87f194b2 @bep #14897
- Upgrade to Go 1.26.3 d81e3c29 @bep #14897
- ci: Check embedded template formatting with gotmplfmt 7c65a4db @bep
- tpl: Run gotmplfmt -w . d31a9275 @bep
- markup/goldmark/codeblocks: Always split Chroma options into .Options c36608c5 @jmooring #14909
- hugolib: Allow empty params front matter 2f361a8e @xndvaz #14886
- common/hmaps: Merge slice-valued module config into site config 55592633 @jmooring #13869
- tpl: Use GetMatch for both local and global image resources 656fc040 @bep #14062
- Revert "markup/tableofcontents: Skip empty TOC levels" a20cb5b1 @bep #14898
- tpl/templates: Reject Defer inside partialCached 4d775cbe @bep #13492
- common/hexec: Make NODE_PATH a fallback for ESM bare imports ae7bf74b @bep #13987
- config: Allow repeating the root key in /config files ba5d8126 @bep #12899 #14882
- Revise test naming guidelines in AGENTS.md be4a0df3 @bep
- Update AGENTS.md e4cf565c @bep
- js: Return error for missing batch imports 9e649533 @xndvaz #13737
- resources/images: Keep smart crop target size f0cfc28c @xndvaz #13688
- testing: Use synctest where relevant 16e854a4 @bep
- security: Validate redirects against security.http.urls 86fbb0f7 @bep #14871
- markup/tableofcontents: Skip empty TOC levels 7d4af7a1 @xndvaz #7128
- Fall back to hugo.buildDate in hugo.BuildDate() in non-vcs builds 28147cb0 @bep #14862
- css: Make css.Build's file-loader URLs absolute to web context root e51e761d @bep #14849
- hugolib: Don't warn about lang/kind/path coming from cascade.params 70112392 @bep #14848
- markup/goldmark: Unwrap inner HTML for plain code blocks 694906f6 @cyphercodes #14820
- tpl/tplimpl: Extend page image lookup to include global resources d27b9c06 @ogulcanaydogan #14062
- security: Allow hostnames starting with digits in default http.urls 62cef367 @bep #14837
- commands: Improve description of command flags ff22c62a @jmooring #14817
Dependency Updates
- build(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 4f444c81 @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.40.0 to 0.41.0 fe6c7265 @dependabot[bot]
- build(deps): bump github.com/getkin/kin-openapi from 0.137.0 to 0.138.0 6a2a0380 @dependabot[bot]
- build(deps): bump github.com/JohannesKaufmann/html-to-markdown/v2 cf1de598 @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.39.0 to 0.40.0 97f990cc @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.44.0 to 0.45.0 b99634e2 @dependabot[bot]
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 fdd977e9 @dependabot[bot]
- build(deps): bump github.com/pelletier/go-toml/v2 from 2

What's Changed
- resources: Honor Retry-After header in resources.GetRemote retries c4eba928 @bep #14828
- warpc: Move to parson.c in https://github.com/kgabis/parson 8b40a96b @bep #14823
- config/security: Add AllowChildProcess to security.node.permissions d65af84d @bep #14824
- config/security: Restrict default http.urls "@" deny to userinfo 454450a6 @bep #14825

This release contains two security hardening fixes:
- We now run the Node tools PostCSS, Babel and TailwindCSS with the --permission with permissions defined in security.node.permissions. This means that you need Node >= 22 installed and that css.TailwindCSS now requires that the Tailwind CSS CLI must be installed as a Node.js package. The standalone executable is no longer supported
- We have made the defaults in security.http.urls more restrictive.
Bug fixes
- langs/i18n: Fix translation lookup when using language variants 72b85d5f @jmooring #7982
- create: Fix non-deterministic conflict detection in hugo new content 6436deb3 @jmooring #12602 #12786 #14112 #14769
- commands: Fix environment isolation for configuration settings 1eea9fba @jmooring #14763
- Fix filename dimension identifiers (role_X, version_X) to replace mount config 8d6145f3 @bep #14756
- Fix it so we never auto-fallback to page resources in other roles/versions 97477242 @bep #14749 #14752
Improvements
- css: Support nested hugo:vars/ imports 7622dd86 @bep #14705
- github: Update GitHub actions versions 0814059b @bep #14810
- hugolib: Do not render aliases if the page is not rendered 8920d56e @jmooring #14807
- langs/i18n: Improve default content language fallback 633cc772 @jmooring #14243
- helpers: Remove unused code 4c40c6d5 @bep
- common/constants: Remove unused consts d2594db6 @bep
- common/paths: Remove unused code ab2de51e @bep
- tests: Update Ruby setup action to v1.305.0 75f61832 @jmooring
- langs: Use Language.Locale as primary localization key 1b7495bc @jmooring #9109
- config/security: Add "! " negation to Whitelist, harden default http.urls 79f030be @bep #14792
- Harden Node tool execution with --permission flag a54c398b @bep #7287
- tpl/collections: Honor the Eqer interface in where comparisons f5fce935 @bep #14777
- modules: Ignore non-require blocks in go.mod rewrite 4169c1f7 @bep #14783
- Replace the concurrent map with an identical upstream version 7574e35b @bep
- Add slice-based permalinks config with PageMatcher target 017a7cd6 @bep #14744
- commands: Add missing import e3413d92 @bep
- Revert "common/hugo: Deprecate extended and extended_withdeploy editions" b01cc147 @bep #14771
- Adjust the SECURITY.md slightly 8ee19ff9 @bep
- resources/page: Add passing test for Issue #14325 0d58e428 @jmooring
- Add a more flexible filename identifier scheme that also allows setting roles and versions (#14754) ce2a156a @bep #14750
- common/hugo: Deprecate extended and extended_withdeploy editions a17bdbc5 @jmooring #14696
- parser/pageparser: Add a parser fuzz test 8f94d65c @bep
- Replace deprecated .Site.Sites/.Page.Sites with hugo.Sites intests 90d8bf34 @bep
- agents: Add a note about having the issue ID in test names bbb42b5a @bep
Dependency Updates
- build(deps): bump github.com/getkin/kin-openapi from 0.135.0 to 0.137.0 d4ae662d @dependabot[bot]
- build(deps): bump github.com/mattn/go-isatty from 0.0.21 to 0.0.22 9ede5fb9 @dependabot[bot]
- build(deps): bump github.com/tdewolff/minify/v2 from 2.24.12 to 2.24.13 833a878e @dependabot[bot]
- build(deps): bump github.com/magefile/mage from 1.17.1 to 1.17.2 4c03129f @dependabot[bot]
- deps: Upgrade github.com/bep/imagemeta v0.17.1 ⇒ v0.17.2 080970bc @bep
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudfront (#14789) 896bc89a @dependabot[bot]
- build(deps): bump github.com/mattn/go-isatty from 0.0.20 to 0.0.21 (#14788) 100dde53 @dependabot[bot]
- build(deps): bump github.com/bep/mclib (#14787) bdebb797 @dependabot[bot]
- build(deps): bump google.golang.org/api from 0.267.0 to 0.276.0 52123ae2 @dependabot[bot]
- build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.41.5 to 1.41.6 38b8afdc @dependabot[bot]
- build(deps): bump github.com/getkin/kin-openapi from 0.134.0 to 0.135.0 (#14781) 92766600 @dependabot[bot]
- build(deps): bump github.com/bep/goportabletext from 0.1.0 to 0.2.0 (#14779) 790f4084 @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.38.0 to 0.39.0 (#14780) de6955ba

What's Changed
- Fix panic when passthrough elements are used in headings 8b00030b @bep #14677
- Fix panic on edit of legacy mapped template names that's also a valid path in the new setup c4855167 @bep #14740
- Fix RenderShortcodes leaking context markers when indented 161d0d47 @bep #12457
- Strip nested page context markers from standalone RenderShortcodes 45e45966 @bep #14732
- Rename deprecated cascade._target to cascade.target in tests 58927aa1 @bep
- Fix auto-creation of root sections in multilingual sites ce009e3a @bep #14681
- readme: Fix links 07558724 @chicks-net

Bug fixes
- Fix some recently introduced Position issues 4e91e14c @bep #14710
- markup/goldmark: Fix double-escaping of ampersands in link URLs dc9b51d2 @bep #14715
- tpl: Fix stray quotes from partial decorator in script context 43aad711 @bep #14711
Improvements
- all: Replace NewIntegrationTestBuilder with Test/TestE/TestRunning 481baa08 @bep
- tpl/css: Support @import "hugo:vars" for CSS custom properties in css.Build 5d09b5e3 @bep #14699
- Improve and extend .Position handling in Goldmark render hooks 303e443e @bep #14663
- markup/goldmark: Clean up test 638262ce @bep
Dependency Updates
- build(deps): bump github.com/magefile/mage from 1.16.1 to 1.17.1 bf6e35a7 @dependabot[bot]
- build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 0eda24e6 @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.37.0 to 0.38.0 beb57a68 @dependabot[bot]
Documentation
- readme: Revise edition descriptions and installation instructions 9f1f1be0 @jmooring

Note that the security fix below is not a potential threat if you either:
- Trust your Markdown content files.
- Have custom render hook template for links and images.
What's Changed
- Fix potential content XSS by escaping dangerous URLs in Markdown links and images 479fe6c6 @bep
- resources/page: Fix shared reader in Source.ValueAsOpenReadSeekCloser df520e31 @jmooring #14684

What's Changed
- minifiers: Keep x-bind and blank namespace in SVG minification 42289d76 @bep #14669

This release greatly improves and simplifies management of Node.js/npm dependencies in a multi-module setup. See this page for more information.
Note
- Replace deprecated site.Data with hugo.Data in tests a8fca598 @bep
- Replace deprecated excludeFiles and includeFiles with files in tests 182b1045 @bep
- Replace deprecated :filename with :contentbasename in the permalinks test eb11c3d0 @bep
Bug fixes
- tpl/tplimpl: Fix Vimeo shortcode test eaf4c751 @jmooring #14649
Improvements
- create: Return error instead of panic when page not found 807cae1d @mango766 #14112
- commands: Preserve non-content files in convert output c4fb61d9 @xndvaz #4621
- npm: Use workspaces to simplify hugo mod npm pack d88a29e0 @bep
- commands: Close cpu profile file when StartCPUProfile fails 9dd9c760 @buley
- Remove the AI Watchdog workflow for now 3315a86d @bep
- Remove 'bep' from PR user logins skip list 38244842 @bep
- tpl/tplimpl: Comment out the Vimeo simple shortcode tests 7813c5c8 @bep #14649
Dependency Updates
- build(deps): bump github.com/olekukonko/tablewriter from 1.1.3 to 1.1.4 (#14641) 3ff9b7f8 @dependabot[bot]
- build(deps): bump github.com/yuin/goldmark from 1.7.16 to 1.7.17 be93ccd3 @dependabot[bot]
- build(deps): bump github.com/magefile/mage from 1.15.0 to 1.16.1 2669bca6 @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.36.0 to 0.37.0 753d447f @dependabot[bot]
- build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3 4f39d724 @dependabot[bot]
Documentation
- docs: Update docs.yaml d2043cfa @bep
- commands: Update docs linke to Node.js docs 4f3c3989 @bep

This release adds css.Build, native and very fast bundling/transformation/minifying of CSS resources. Also see the new strings.ReplacePair, a very fast option if you need to do many string replacements.
Note
- Upgrade to to Go 1.26.1 (#14597) (note) 1f578f16 @bep #14595
Bug fixes
- tpl/css: Fix external source maps e431f90b @bep #14620
- hugolib: Fix server no watch 59e0446f @jmooring #14615
- resources: Fix context canceled on GetRemote with per-request timeout 842d8f10 @bep #14611
- tpl/tplimpl: Prefer early suffixes when media type matches 4eafd9eb @bep #13877 #14601
- all: Run go fix ./... e3108225 @bep
- internal/warpc: Fix SIGSEGV in Close() when dispatcher fails to start c9b88e4d @bep #14536
- Fix index out of range panic in fileEventsContentPaths f797f849 @bep #14573
Improvements
- resources: Re-publish on transformation cache hit 3c980c07 @bep #14629
- create/skeletons: Use css.Build in theme skeleton 404ac000 @jmooring #14626
- tpl/css: Add a test case for rebuilds on CSS options changes 06fcb724 @bep
- hugolib: Allow regular pages to cascade to self 9b5f1d49 @jmooring #14627
- tpl/css: Allow the user to override single loader entries 623722bb @bep #14623
- tpl/css: Make default loader resolution for CSS @import and url() always behave the same a7cbcf15 @bep #14619
- internal/js: Add default mainFields for CSS builds 36cdb2c7 @jmooring #14614
- Add css.Build 3e3b849c @bep #14609 #14613
- resources: Use full path for Exif etc. decoding error/warning messages c47ec233 @bep #12693
- Move to new locales library and upgrade CLDR from v36.1 to v48.1 4652ae4a @bep
- tpl/strings: Add strings.ReplacePairs function 13a95b9c @jmooring #14594
- github: Remove pull_request_template.md 54c80487 @bep
- testing: Make commands tests pass in Go 1.26.1 157bfddd @bep
- refactor: Deprecate language configuration and template methods d4f2122d @jmooring #14269
- Replace Exif with Meta in tests 991d2f9a @bep
- resources: Improve getImageOps error message e8577771 @jmooring #14571
- resources/images: Add IsImageResourceWithMeta etc. tests for bmp and gif 44dc3847 @bep #14568
Dependency Updates
- deps: Upgrade github.com/evanw/esbuild v0.27.3 ⇒ v0.27.4 0e46a97e @bep
- build(deps): bump github.com/getkin/kin-openapi from 0.133.0 to 0.134.0 c27d9e8f @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.42.0 to 0.43.0 098eac59 @dependabot[bot]
- build(deps): bump gocloud.dev from 0.44.0 to 0.45.0 87f8de8c @dependabot[bot]
- build(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0 67ef6c68 @dependabot[bot]
- build(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 (#14569) b29c2f7a @dependabot[bot]
- build(deps): bump github.com/tdewolff/minify/v2 from 2.24.9 to 2.24.10 (#14585) e91d1911 @dependabot[bot]
- build(deps): bump github.com/bep/imagemeta from 0.15.0 to 0.17.0 (#14584) a8a54bd0 @dependabot[bot]

The notable new feature is GitInfo support for Hugo Modules. See this repo for a runnable demo where multiple versions of the same content is mounted into different versions.
Bug fixes
- Fix menu pageRef resolution in multidimensional setups 3dff7c8c @bep #14566
- docs: Regen and fix the imaging docshelper output 8e28668b @bep #14562
- hugolib: Fix automatic section pages not replaced by sites.complements a18bec11 @bep #14540
Improvements
- Handle GitInfo for modules where Origin is not set when running go list d98cd4ae @bep #14564
- commands: Update link to highlighting style examples 68059972 @jmooring #14556
- Add AVIF, HEIF and HEIC partial support (only metadata for now) 49bfb107 @bep #14549
- resources/images: Adjust WebP processing defaults b7203bbb @jmooring
- Add Page.GitInfo support for content from Git modules dfece5b6 @bep #14431 #5533
- Add per-request timeout option to resources.GetRemote 2d691c7e @vanbroup
- Update AI Watchdog action version in workflow b96d58a1 @bep
- config: Skip taxonomy entries with empty keys or values 65b4287c @bep #14550
- Add guideline for brevity in code and comments cc338a9d @bep
- modules: Include JSON error info from go mod download in error messages 3850881f @bep #14543
Dependency Updates
- build(deps): bump github.com/tdewolff/minify/v2 from 2.24.8 to 2.24.9 9869e71a @dependabot[bot]
- build(deps): bump github.com/bep/imagemeta from 0.14.0 to 0.15.0 8f47fe8c @dependabot[bot]

This release brings significant speedups of collections.Where and collections.Sort – but this is mostly a "spring cleaning" release, to make the API cleaner and simpler to understand/document.
Deprecated
- Site.AllPages is Deprecated
- Site.BuildDrafts is Deprecated
- Site.Languages is Deprecated
- Site.Data is deprecated, use hugo.Data
- Page.Sites and Site.Sites is Deprecated, use hugo.Sites
See this topic for more info.
Removed
These have all been deprecated at least since v0.136.0 and any usage have been logged as an error for a long time:
Template functions
- data.GetCSV / getCSV (use resources.GetRemote)
- data.GetJSON / getJSON (use resources.GetRemote)
- crypto.FNV32a (use hash.FNV32a)
- resources.Babel (use js.Babel)
- resources.PostCSS (use css.PostCSS)
- resources.ToCSS (use css.Sass)
Page methods:
- .Page.NextPage (use .Page.Next)
- .Page.PrevPage (use .Page.Prev)
Paginator:
- .Paginator.PageSize (use .Paginator.PagerSize)
Site methods:
- .Site.LastChange (use .Site.Lastmod)
- .Site.Author (use .Site.Params.Author)
- .Site.Authors (use .Site.Params.Authors)
- .Site.Social (use .Site.Params.Social)
- .Site.IsMultiLingual (use hugo.IsMultilingual)
- .Sites.First (use .Sites.Default)
Site config:
- paginate (use pagination.pagerSize)
- paginatePath (use pagination.path)
File caches:
- getjson cache
- getcsv cache
Notes
- Remove items deprecated ⇐ v0.136.0 (note) af5051e7 @bep
- hugolib: Move site.Data to hugo.Data, deprecate Site.AllPages/BuildDrafts/Languages 86aa6252 @bep #14521
- hugolib: Add Page.Sites to Site.Sites deprecation notice 4148eded @jmooring #14532
- resources/page: Deprecate cascade._target in favor of cascade.target 828ee720 @jmooring #14341
- tpl/tplimpl: Throw error when calling gist shortcode 4384f9b8 @jmooring #14491
- tpl/tplimpl: Throw error when calling twitter/twitter_simple shortcodes 55d136dd @jmooring #14488
Bug fixes
- tpl/internal: Replace deprecated parser.ParseDir and doc.New 4a641d15 @bep #14513
- commands: Fix --panicOnWarning flag having no effect with module version warnings 3f9d0ad2 @bep #14524
- paths: Fix handling of _ as a path name 32027e50 @khayyamsaleem #14344
- docs: Fix lineNos default value in docs.yaml 498431d6 @jmooring
- hugolib: Fix term title when taxonomy name contains spaces 773664b8 @bep #13422
Improvements
- hugolib: Simplify sites collection bba2aed3 @bep
- hugolib: Adjust hugo.Sites.Default 29b8e17d @bep #14531
- Move common/hugo/HugoInfo to resources/page 3c823408 @bep
- hugolib: Add hugo.Sites and .Site.IsDefault(), modify .Site.Sites ab62320d @jmooring #14479 #14481
- output: Remove unused method 8d19f5a7 @bep #14522
- Update AI assistance guidelines in CONTRIBUTING.md 77294735 @bep
- tpl/collections: Speed up where and sort performance 47e39af2 @bep
- commands: Skip chmod for files without owner-write permission 7850e7ce @jmooring #14507
- tpl/collections: Add some more benchmarks for where and sort 2e5132d8 @bep
- all: Change site to project where appropriate 19ab3f58 @jmooring #14504
- markup/highlight: Allow lineNos to be true, false, "inline", or "table" 3158a512 @jmooring #13481
- Upgrade to Go 1.26 b358a65c @bep
- tpl: Move from md5 to xxhash for some in memory keys 8ae5e1a8 @bep
- testscripts/commands: Update 'future' date to far future e2776593 @toddy15 #14486
Dependency Updates
- build(deps): bump google.golang.org/api from 0.255.0 to 0.267.0 d8ec0eee @dependabot[bot]
- build(deps): bump github.com/bep/textandbinarywriter 21be4afd @dependabot[bot]
- build(deps): bump github.com/bep/simplecobra from 0.6.1 to 0.7.0 e549016b @dependabot[bot]
- build(deps): bump github.com/bep/tmc from 0.5.1 to 0.6.0 a392906b @dependabot[bot]
- build(deps): bump github.com/gohugoio/hugo-goldmark-extensions/extras 86786c91 @dependabot[bot]
- build(deps): bump github.com/gohugoio/hugo-goldmark-extensions/passthrough 7a7308ae @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.41.0 to 0.42.0 2d1d7312 @dependabot[bot]
- build(deps): bump github.com/bep/helpers f

What's Changed
- hugolib: Don't render default site redirect for non-primary isHTML output formats 6ac7d081 @bep #14482
- server: Fix stuck server global error logging 24eb84f8 @bep #14469
- build(deps): bump github.com/evanw/esbuild from 0.27.2 to 0.27.3 95a36782 @dependabot[bot]
- server: Fix panic when the server browser error handler tried to use a config in a state of flux 9045797d @bep #14470

Note that the bug fix below is for the two new dimensions introduced in v0.153.0 (version and role), multiple languages worked fine. Also, changes to the first version and role also worked, which had me head-scratching for a while. Oh, well, enjoy.
- Fix template change detection for multi-version sites 0f1c7d12 @bep #14461
- resources/image: Add some image decode/encode debug logging 6bd2bde9 @bep #14337 #14460

What's Changed
- Fix image DecodeConfig regression of WebP images from file cache b5d43cdc @bep #14453
- resources/images: Fix WebP useSharpYuv being ignored b1e1eede @jmooring #14449
- tpl/tplimpl: Remove failing Twitter tests f522a728 @jmooring

Some notable new things in this release are:
- Improvements to how versions are handled: We now support version (and also for the other dimension) range queries (e.g. >= v1.0.0), and we now cache Go module version queries, which makes mounting multiple versions of the same GitHub repo with different version much more practical and enjoyable, se this site and config for an annotaed example.
- We finally have XMP and IPTC image metadata support, in addition to EXIF, see #13146
- Page aliases now works in multidimensional sites (e.g. multiple languages), and it is now much easier to create e.g. Netlify _redirects files that works in such setups.
- There are several performance related WebP improvements in this release.
- Also, image processing in general (e.g. resize operations) should be considerably more effective.
Note
- Make Page.Aliases more useful in multidimensional setups (note) ee91c707 @bep #14402
Bug fixes
- Fix data race when clearing cache in cachebusters 8a979d54 @wjiec
- resources/images: Fix comment for Quality field in ImageConfig fd49df8f @bep
- Fix panic reported in discourse c7b35c87 @bep #14441
- Fix recently introduced partial rendering bug 8dfcece8 @bep #14433
- tpl: Fix partial decorator panic when partial returns falsy f472dd48 @simonheimlicher #14419
- resources: Fix race condition in test helper 48566b6f @simonheimlicher
- Fix cascade draft panic 11f7f399 @bep #14409 #14412
- hugolib: Fix multilingual alias generation 5ba03bf6 @jmooring #14388
- Fix file mount specifity issue within the same module c1b2e58b @bep #14405
- warpc: Fix typed nil return in Start 2c611091 @Sam-404-404 #14372
- hugolib: Fix relative alias generation 32334d09 @jmooring #14381
Improvements
- Remove disableDate and disableLatLong from MetaConfig 5916b61b @bep #14437
- internal/warpc: Make webp C defaults match the Go defaults 7eafef22 @bep
- testscripts: Move server tests to own folder 00c4228f @bep #14439
- testing: Skip some slow tests when not running in CI 5f5b2f37 @bep #14438
- magefile: Skip commands test when running mage check locally ef7a22a2 @bep
- Remove -p 2 parallelism limit for local test runs 9a6bfe26 @bep
- Add AGENTS.md and CLAUDE.md 0fc63fbf @bep
- Add == and != operators to range predicates 50973e72 @bep
- Add modulequeries file cache for module version queries b441472b @bep #14417
- Allow v1,v2 etc. style version names while still supporting full semver in queries ac2c3fb2 @bep #14414
- Add range matchers for site matrix vector store filtering 192e3c45 @bep #14359
- Misc webp performance work e569dd59 @bep #14370
- Move from github.com/disintegration/gift to github.com/gohugoio/gift 1a947316 @bep #14397
- resources/images: Stabilize order of valid sources in error message 8e9e04e3 @jmooring #14390
- Add XMP and IPTC image metadata support 8e2e60dd @bep #13146
- output: Add TestCanonical integration test 2bc54df6 @bep
- Rename common/maps to common/hmaps (#14384) 608ed09a @bep
- Decode webp.ImageConfig natively d36a8f56 @bep #14371
Dependency Updates
- build(deps): bump golang.org/x/tools from 0.40.0 to 0.41.0 7d45614c @dependabot[bot]
- build(deps): bump github.com/olekukonko/tablewriter from 1.1.2 to 1.1.3 7f12c090 @dependabot[bot]
- build(deps): bump github.com/alecthomas/chroma/v2 from 2.23.0 to 2.23.1 dab2c332 @dependabot[bot]
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudfront 576d55d0 @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.34.0 to 0.35.0 b9400b8a @dependabot[bot]
- build(deps): bump golang.org/x/mod from 0.31.0 to 0.32.0 ce0c7f42 @dependabot[bot]
- deps: Upgrade github.com/gohugoio/gift v0.1.0 ⇒ v0.2.0 77214117 @bep
- build(deps): bump github.com/alecthomas/chroma/v2 from 2.22.0 to 2.23.0 18784711 @dependabot[bot]
- build(deps): bump golang.org/x/net from 0.48.0 to 0.49.0 94f1ede3 @dependabot[bot]
- build(deps): bump github.com/bep/lazycache from 0.8.0 to 0.8.1 ab374e3d @dependabot[bot]
- deps: Upgrade github.com/alecthomas/chroma v2.21.1 ⇒ v2.22.0 1a913307 @jmoori

What's Changed
- Fix some default site redirect woes a7754883 @bep #14357 #14361
- hugolib: Fix newly created shortcodes not found during server rebuild 66ba63cd @Hasaber8 #14207
- tpl/tplimpl: Remove trailing slash from void elements eb06a3cd @jmooring

What's Changed
- tpl: Fix language resolution for markdown shortcodes ec178ea4 @BarkinBalci #14098
- For multiple dimensions setups, fix alias handling and multihost publish path 2d80b8a7 @bep #14354 #14356
- build(deps): bump github.com/goccy/go-yaml from 1.19.1 to 1.19.2 a2b2a5a9 @dependabot[bot]
Also see the new Page.OutputFormats.Canonical method.

What's Changed
- build(deps): bump github.com/yuin/goldmark from 1.7.13 to 1.7.16 866b8e5a @dependabot[bot]

What's Changed
- Fix alpha/fuzzy border issue with new webp decoder for images with with transparent background e9b9b36f @bep #14339

What's Changed
- Add WASM licensing information to README 8f3527f6 @bep
- Fix partial decorator detection in partial with blocks with outer range break or continue 09048aad @bep #14333

Hugo v0.154.0 is the 14th release this year (not counting patch releases) and introduces partial decorators, or “partials with a twist.” This is a very powerful construct that I, @bep, have always wanted to have in Hugo, but I could never wrap my head around an implementation. Until now.
A small and not very useful example:
{{ with partial "b.html" "World" }}Hello {{ . }}{{ end }}
{{ define "_partials/b.html" }}<b>{{ inner . }}</b>{{ end }}
The above renders to:
<b>Hello World</b>
- The new inner keyword can be used zero or more times in a partial template, typically with different data (e.g. pages in a range), and its presence signals a reversal of the execution -- the callee becomes the caller.
- Decorators can be deeply nested, see this PR for an example.
This release also brings some new utility funcs in the reflect package to identify the core types in Hugo. For example, to identify an processable image hasn't been trivial, now it is:
{{ $obj := . }}
{{ if reflect.IsResource $obj }}
{{ if reflect.IsImageResource $obj }}
// It has width/height and we can process it.
{{ else }}
// Just link to it.
{{ end }}
{{ end }}
Bug fixes
- tpl/collections: Fix apply to work with built-in funcs like len 5c7fad23 @bep #13418
- Revert "resources/page: Fix slugorcontentbasename for section pages" bf1d20d7 @bep #14104 #14325
Improvements
- helpers: Limit verbose watch output for better readability d3b5d47a @majiayu000 #14277
- tpl/reflect: Make the IsImageResource implementation less technical 86cd1838 @bep
- internal/warpc: Increase WebP memory limit to 384 MiB 871da337 @jmooring #14309
- Update tpl/reflect/reflect.go 1deec99b @bep
- Add reflect.Is{Page,Site,Resource,ImageResource} b7bb557c @bep #14307
- Allow partials to work as decorators 7c19c196 @bep #13193
Dependency Updates
- build(deps): bump github.com/tetratelabs/wazero from 1.10.1 to 1.11.0 2637aa15 @dependabot[bot]

What's Changed
- images: Add compression option to image config and clean up some of the options handling c6ae33c6 @bep
- config: Fix cascade per language in hugo.toml regression edeebf0d @bep #14321
- images: Fix WebP quality and hint parameters being ignored ea9675f6 @simonheimlicher #14316

What's Changed
- Set cascade target to the content matrix if not set in the cascade itself 96777d9b @bep #14310

What's Changed
- build(deps): bump github.com/bep/imagemeta from 0.12.0 to 0.12.1 96ac146e @dependabot[bot]
- Fix error with _content.gotmpl file with index.md siblings d4c0e445 @bep #14299

What's Changed
- Fix "image: unknown format" error a8c5d0d0 @bep #14295
- modules: Remove extended edition check a94a941f @bep #14284
- misc: Update edition comparison and guidance in README.md 385d1a13 @jmooring

[!note]
This is a bug fix release. See the main release for a list of new features.
- Handle PNG named *.webp 4085ee93 @bep #14288
- Revert deprecation logging for contentDir per language 168bf17e @bep #14287
- Fix panic when 404 is backed by a content file f740d7cf @bep #14283
- internal/warpc: Increase WebP memory limit to 256 MiB 5f46da6e @jmooring #14282

This is a good one! Hugo v0.153.0 is a significant release that introduces a powerful new multidimensional content model and completely overhauls WebP image support. Will be back soon with more info and reference to an updated documentation.
Note
- tpl/css: Deprecate libsass in favor of dartsass (note) 9937a5dc @bep #14261
- config: Add struct tags to deprecated and unused fields e1236e3d @jmooring
Bug fixes
- Fix some outdated front matter b82e496c @bep #14271
- Fix server rebuilds on editing content with Chinese terms e2e64aee @bep #14240
- Fix slow server startup of very big content trees 7a43b928 @bep #14211
- github: Fix "no space left on device" issue in CI b037b930 @bep
- docs: Fix link to CGO wiki page 5af31128 @jordelver
- Fix grammatical error in styleguide.md 62c47407 @bep
- hugolib: Fix recently introduced data race 94a6233a @bep #14140
- docshelper: Fix some YAML serialization issues with sites matrix configuration 22d0c17e @bep #14132
- resources/page: Fix slugorcontentbasename for section pages 25c7c18f @dvdksn #14104
- all: Fix some benchmarks broken by modernize 91eac9e5 @bep #14107
- all: Run modernize -fix ./... 04650ce7 @bep #14107
Improvements
- resources/images: Don't trust the file extension when decoding JPEG and PNG images 65d43e1d @bep
- Add full filename to image processing error messages if possible 65a76664 @bep #14278
- tailwindcss: Add referece to skipInlineImportsNotFound when import not found in assets da5b1fcf @bep #14273
- Improve error messages for template failures 0637adb2 @bep
- Improve error handling/messages in Hugo Pipes 0bf61353 @bep #14257 #14270
- images: Add a webp test with bg color 573ecb53 @bep
- Encode and Decode using the libwebp library via WASM with animation support 1b4514e0 @bep #10030 #8500 #12843 #8879 #12842
- config/allconfig: Correct error message 429e5720 @jmooring #14259
- tpl: Add missing functions to init files fa7d37f0 @jmooring #14249
- github: Add some known humans to the AI whitelist fae49a22 @bep
- langs/i18n: Prefer languageCode when picking translation file 6be463b5 @bep #14204 #14217
- Add entitlements for WebAssembly for macOS Tahoe 9e24b564 @bep #14220
- testscripts: Move layouts file to new structure 45b67f6c @bep
- resources: Skip integration test if Dart Sass is not installed 5e649eb4 @jmooring
- testing: Replace legacy config.toml with hugo.toml in most tests 3073fd5c @bep
- testing: Port integration tests to new templates structure b9b304a1 @bep
- github: Correct dependabot ⇒ dependabot[bot] 8be30ef2 @bep
- config/privacy: Change GoogleAnalytics.RespectDoNotTrack default to true 565a10cb @jmooring #13307
- Add signed and notarized MacOS pkg builds 438f113f @bep #14135
- Upgrade to Go 1.25.4 dab54058 @bep
- tpl/urls: Add PathEscape and PathUnescape functions 1a1b062a @jmooring #14209
- Speedup and simplify page assembly for deeper content trees 555dfa20 @bep
- gemini: Remove styleguide.md (for now) 34b0c15a @bep
- github: Reenable Gemini, but no auto code review 9dc38e91 @bep
- github: Partition tests by their root b592d34e @bep
- github: Make the clean commands work 18a2afa5 @bep
- github: Also test the root package (left out in previous commit) 0b0c827d @bep
- github: More disk space saving optimizations 30dc75e6 @bep
- github: Add PR Template 6bc8e6f4 @jmooring
- Adjust benchmark cda4d751 @bep
- tpl/openapi: Add support for OpenAPI external file references 84950ed2 @bep #8067
- github: Skip dependabot for AI Watchdog workflow a8ed6137 @bep
- github: Remove the 386 test step in GitHub test workflow b971b7f9 @bep #14201
- github: Remove test binaries after CI test runs 24210dca @bep
- github: Adjust watchdog run logic (now with correct spelling) 0f94274a @bep
- github: Adjust watchdog run logic (again) 5f9c3a3e @bep
- github: Adjust watchdog run logic 51d77a6c @bep
- github: Only run AI Watchdog when the PR is ready for review d25b619c @bep
- Update aiwatchdog.yml 4a76d8c6 @bep
- Update aiwatchdog.yml d837eff0 @bep
- Update aiwatchdog.yml 323e306b @

In v0.152.0 we tightened the source validation for file mounts. We always said that project mounts can mount with absolute file/directorynames, modules/themes are restricted to relative. In v0.152.0 we narrowed module/themes mounts to be local, which made the setup in the bug report listed below fail:
[[module.mounts]]
source = '../../node_modules/bootstrap'
target = 'assets/vendor/bootstrap'
One part of this is security. But the construct above is usually very odd (the project uses files in a theme/module, not the other way around) and not very portable. But the example above demonstrates a valid exception, that we now have added support for in a portable way. The above example now works as it did before v0.152.0, but going forward you can also write:
[[module.mounts]]
source = 'node_modules/bootstrap'
target = 'assets/vendor/bootstrap'
We now have the node_modules as a special case: For themes/modules we first check if the mounted source exists locally, if not we try relative to the project root.
What's Changed
- deps: Update github.com/tdewolff/minify v2.24.4 ⇒ v2.24.5 1c8c21e45 @jmooring #14086
- hugofs: Make node_modules a "special case" mount 809ebe01f @bep #14089
- github: Fix typo in stale PR message 08a0679a8 @jordelver

These fixes are are all related to the YAML library upgrade in v0.152.0.
- Expand the numeric conversions to template funcs/methods e08278d16 @bep #14079
- Fix where with uint64 df4f80d54 @bep #14081
- Fix it so YAML integer types can be used where Go int types are expected d4c78885a @bep #14079
- tpl/compare: Fix compare/sort of uint64s 29e2c2fa9 @bep #14078
- Fix "assignment to entry in nil map" on empty YAML config files 0579afc3c @bep #14074

Note
- Replace to gopkg.in/yaml with github.com/goccy/go-yaml (note) a3d954846 @bep #8822 #13043 #14053
Improvements
- config: Clone language map entries before modifying them a1307700d @bep #14072
- Skip flaky test for now 9425b939c @bep #14072
- Misc YAML adjustments bd50c9c7e @bep #14067
- hugofs: Make sure that non-project module mounts are local paths a8e0ca925 @bep #14069
- langs/i18n: Improve reserved key error message 559a029de @jmooring #14061
- langs: Add test case using a "reserved" i18n code 5bad0d523 @bep #14061
Dependency Updates
- deps: Upgrade github.com/gohugoio/go-i18n/v2 184b10ed4 @bep
- build(deps): bump github.com/tdewolff/minify/v2 from 2.24.3 to 2.24.4 9e344bbe4 @dependabot[bot]
Build Setup
- Merge branch 'release-0.151.2' d51adca26 @bep

What's Changed
- parser/pageparser: Add a testcase for nested shortcodes of the same name 989454a52 @bep #14054
- parser/pageparser: Fix shortcode nesting regression 1e91e4652 @bep #14054

This release is mostly motivated by some upstream security fixes:
- Upgrade from Go 1.25.1 to Go 1.25.3 which comes with 10 security fixes.
- Go's net/html package also has one security patch
I, @bep, have inspected the above issues, and none of them seem to be relevant for Hugo, but we understand that many want to have a clean security report.
Bug fixes
- tpl: Fix strings/truncate CJK handling 88aea5668 @oishikazuo #14039
- parser/pagerparser: Fix closing shortcode error handling when repeated a133393ed @bep
Improvements
- Upgrade Go to 1.25.3 e2fb0b0e8 @bep
- create/skeletons: Wrap section and home lists with section tags 29cf87444 @imomaliev
- markup/goldmark: Align blockquote default output with Goldmark 1b4dd436d @jmooring #14046
- parser/pageparser: Store shortcode names as unique.Handle[string] to save memory allocations 4414ef73f @bep
- testscripts: Make test assertion less specific 9197debbf @bep
Dependency Updates
- build(deps): bump github.com/gohugoio/hashstructure from 0.5.0 to 0.6.0 f4c11571b @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.30.0 to 0.32.0 54075acc2 @dependabot[bot]
- build(deps): bump github.com/evanw/esbuild from 0.25.10 to 0.25.11 8b52303e3 @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.37.0 to 0.38.0 3d45d30a4 @dependabot[bot]
- build(deps): bump golang.org/x/mod from 0.28.0 to 0.29.0 095157cd6 @dependabot[bot]

Some notable new features in Hugo v0.151.0 are:
- New transform.HTMLToMarkdown template function. One possible use case would be to provide LLM friendly content.
- Hugo now reports OSC 9;4 progress when building; progress bars/indicators are supported by terminals such as Ghostty on Macos and Linux, Windows terminal.
- Several new config options for Markdown foot notes.
Note
- transform/livereloadinject: Skip livereload.js injection if no tags found (note) 7fd6762c1 @AndrewChubatiuk
Improvements and bug fixes
- Fix file caching for 404 responses in resources.GetRemote 03b33ecb5 @bep #14019
- markup/goldmark: Enhance footnote extension with backlinkHTML option b462980ac @jmooring #11434
- markup/goldmark: Enhance footnote extension with auto-prefixing option 47678d8cb @jmooring #8045
- Adjust the terminal progress reporter a little 510d98b77 @bep
- Add transform.HTMLToMarkdown c5dca3bde @bep #13946
- Report OSC 9;4 progress when building ec463c097 @bep
- tpl: Workaround s390x precision of Atan and Tan 105d3bc32 @toddy15
- cache/httpcache: Add respectCacheControlNoStoreInResponse and respectCacheControlNoStoreInRequest options 3e46ba5ce @bep #13990
- common/hreflect: Speed up IsTrutfulValue 4d1303512 @bep
Dependency Updates
- build(deps): bump google.golang.org/api from 0.248.0 to 0.251.0 584f052f3 @dependabot[bot]
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudfront b76d71761 @dependabot[bot]
- build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.38.1 to 1.39.2 4d2743e4c @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.36.0 to 0.37.0 c20f70d9a @dependabot[bot]
- build(deps): bump github.com/spf13/afero from 1.14.0 to 1.15.0 1b556216a @dependabot[bot]
- build(deps): bump github.com/tdewolff/minify/v2 from 2.24.2 to 2.24.3 106c8e6de @dependabot[bot]
- build(deps): bump github.com/evanw/esbuild from 0.25.9 to 0.25.10 9928122eb @dependabot[bot]
- build(deps): bump golang.org/x/text from 0.28.0 to 0.29.0 9943c1bef @dependabot[bot]
- build(deps): bump github.com/olekukonko/tablewriter from 1.0.9 to 1.1.0 766757310 @dependabot[bot]
- build(deps): bump github.com/spf13/cast from 1.9.2 to 1.10.0 d71c07cf3 @dependabot[bot]

What's Changed
- hugolib: Change duplicate content path warning to an info log 64f40731f @jmooring
- hugolib: Restore integration test 1140314be @jmooring #13991
- commands: Map --minify CLI flag to the correct configuration key 404fd9e51 @jmooring #13988
- snap: Add desktop plug b1b0cdee3 @maxkapur
- test(deps): Update setup-ruby action to v1.257.0 3eea08290 @maxkapur

The big new feature in this relase is the new version config option on Module imports, which allows you to set the requested module version query directly in your Hugo configuration (e.g. hugo.toml). This is a feature that have been requested by many, and I (@bep) was reminded about it by this recent thread, which also outlines a common use case for this: Mounting multiple old versions/branches of API documentation into the project.
What's Changed
- build(deps): bump golang.org/x/mod from 0.27.0 to 0.28.0 d1f6a1dc5 @dependabot[bot]
- modules: Add support for direct version module imports in hugo.toml 747cf4ad6 @bep #13964
- resources/page: Fix truncated summary logic d8774d7fc @jmooring #13967 #13968
- config/security: Add PROGRAMDATA to the osenv allowlist 3b8947d82 @jmooring

The main motivation behind this release is the Go 1.25.1 upgrade, which comes with a security fix. Hugo does not use the feature in question, but we understand that many Hugo users like to have a clean security report.
What's Changed
- Remove noindex meta tag from alias.html 25c0f2408 @lzap
- Fix nilpointer on ToC heading 4f2d2b2cc @bep #11843
- tpl/collections: Require collections.D args to be ints b8eb45c9d @bep #13952
- Upgrade to Go 1.25.1 1d90afff1 @bep #13960
- Fix config env handling for some slice options e751afa9b @PikachuTW #13950
- minifiers: Update deprecation handling a09b8a60e @jmooring #11893 #13947 #13948

Note
- Remove test with deprecated path usage 80e973ea5 @bep
Bug fixes
- create: Fix new content command with future dates bb4e66cd7 @justuswilhelm #12599
- Fix server rebuild when adding a new leaf bundle with resources in one go 13b43e611 @bep #13925
- Fix rebuild when deleting a content adapter file 87e100e61 @bep
Improvements
- tpl/collections: Add an integration test for collections.D 84b512391 @bep
- tpl/collections: Add collections.D using Vitter's Method D for sequential random sampling 1ba80874e @bep
- commands: Deprecate --omitEmpty on chromastyles command 61ec7a20a @bep
- commands: Add --omitClassComments to the chromastyles command c289fcaaa @bep
- all: Use slices.Equal ecdef2be7 @minxinyi
- resources/page: Add 😒ectionslug and 😒ectionslugs permalink tokens 12ace3ad5 @DustinFischer #13788
- Upgrade to Go 1.25 c14fdddad @bep #13924 #13931
- common/hcontext: Replace with external package 186934feb @bep
- resources/page: Use reflect.TypeFor bff4dddb1 @cuiweixie
- tpl/strings: Remove unnecessary error check 348aae91e @Nigel2392
- markup/goldmark: Apply Hugo Goldmark Extras when rendering TOC 61482cfab @jmooring #12605
- markup/goldmark: Sanitize TOC heading titles 5fdcc0906 @jmooring #13401
- Add a key to the partialCached deadlock prevention 221602862 @n1xx1 #13889
- transform: Add support for "format" option in transform.Unmarshal ecc3dd1f5 @n1xx1 #13887
- Skip flakey test on CI de4a7f1e0 @bep
Dependency Updates
- build(deps): bump github.com/getkin/kin-openapi from 0.132.0 to 0.133.0 45ec2f88b @dependabot[bot]
- build(deps): bump google.golang.org/api from 0.247.0 to 0.248.0 84dd495f2 @dependabot[bot]
- build(deps): bump github.com/evanw/esbuild from 0.25.6 to 0.25.9 327bbc613 @dependabot[bot]
- build(deps): bump gocloud.dev from 0.40.0 to 0.43.0 2447138f1 @dependabot[bot]
- deps: Upgrade github.com/alecthomas/chroma/v2 v2.19.0 ⇒ v2.20.0 cfc38ecfe @bep #13917
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudfront 22e579e05 @dependabot[bot]
- build(deps): bump github.com/tdewolff/minify/v2 from 2.23.11 to 2.24.0 b886615d1 @dependabot[bot]
- build(deps): bump github.com/tdewolff/minify/v2 from 2.23.8 to 2.23.11 885cd299b @dependabot[bot]
- build(deps): bump github.com/olekukonko/tablewriter from 1.0.8 to 1.0.9 debf3c559 @dependabot[bot]
- build(deps): bump google.golang.org/api from 0.237.0 to 0.247.0 1649f3126 @dependabot[bot]
- build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.36.4 to 1.38.0 ccd6a4b71 @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.35.0 to 0.36.0 6dc1a1752 @dependabot[bot]
- build(deps): bump github.com/bep/simplecobra from 0.6.0 to 0.6.1 806d4848c @dependabot[bot]
- build(deps): bump golang.org/x/mod from 0.25.0 to 0.27.0 04ee1b978 @dependabot[bot]
- build(deps): bump github.com/yuin/goldmark from 1.7.12 to 1.7.13 7a86fe990 @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.28.0 to 0.30.0 f5245a7d5 @dependabot[bot]
- deps: Upgrade github.com/niklasfasching/go-org v1.8.0 ⇒ v1.9.1 5029676ac @jmooring #13846
Documentation
- misc: Update Go version to 1.24.0 in README 291241595 @jmooring
- Update README.md 01b0eda96 @bep

What's Changed
- tpl: Add test for recent template selection regression 7ff5ec734 @bep #13868
- Revert "hugolib: Honor implicit "page" type during template selection" 3937ab24d @bep #13868
- Fix regression with hyphenated codeblock templates, e.g. render-codeblock-go-html-template.html 9c57af135 @bep #13864
- commands: Avoid full browser refresh on simple CSS changes d240a705d @bep

What's Changed
- Fix assignment to entry in nil map 6f42cfbc9 @bep #13853
- deps: Downgrade github.com/niklasfasching/go-org v1.9.0 ⇒ v1.8.0 a84beee42 @bep #13846

Note
- Fix some uglyURLs issues for home, section and taxonomy kind (note) b8ba33ca9 @bep #4428 #7497
- Fix branch paths when OutputFormat.Path is configured (note) f967212b7 @bep #13829
Bug fixes
- resources/page: Allow full datetime prefix in filenames 1b4c42366 @jmooring #13830
Improvements
- Add Ancestors (plural) method to GitInfo, rename Ancestor field to Parent 3e2f1cdfd @bep #13839
- Allow creating home pages from content adapters bba6996e1 @bep
- Remove the internal GitInfo type and make Page.GitInf() return a pointer 90d397b14 @bep #5693
- source: Expose Ancestor in GitInfo 61e6c730d @jenbroek #5693
- config: Increase test coverage 266d46dcc @pixel365
- markup/goldmark: Change link and image render hook enablement to enums 84b31721b @jmooring #13535
- hugolib: Honor implicit "page" type during template selection cfc8d315b @jmooring #13826
- deploy: walkLocal worker pool for performance dd6e2c872 @davidejones
Dependency Updates
- build(deps): bump github.com/evanw/esbuild from 0.25.5 to 0.25.6 0a5b87028 @dependabot[bot]
- build(deps): bump github.com/olekukonko/tablewriter from 1.0.7 to 1.0.8 94e2c276a @dependabot[bot]
- build(deps): bump github.com/niklasfasching/go-org from 1.8.0 to 1.9.0 e77b2ad8f @dependabot[bot]
- build(deps): bump github.com/alecthomas/chroma/v2 from 2.18.0 to 2.19.0 9487acf6a @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.32.0 to 0.34.0 1e9a0b93e @dependabot[bot]

Improvements and fixes
- Remove WARN with false negatives 6a4a3ab8f @bep #13806
- resources/page: Make sure a map is always initialized 36f6f987a @bep #13810
- tpl/tplimpl: Copy embedded HTML table render hook to each output format 18a9ca7d7 @jmooring #13351
- tpl/tplimpl: Change resources.GetRemote errors to suppressible warnings b6c8dfa9d @jmooring #13803
- common/terminal: Enable color output on windows 4217fee4b @jmooring #8209
- hugolib: Remove test for deprecated future 4ef572014 @bep
Dependency Updates
- build(deps): bump google.golang.org/api from 0.221.0 to 0.237.0 621ea42f3 @dependabot[bot]
- build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.36.1 to 1.36.4 34e83789f @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.27.0 to 0.28.0 4d3ebe4d2 @dependabot[bot]
- deps: Upgrade github.com/spf13/cast v1.8.0 ⇒ v1.9.2 b5c0383bd @jmooring

The primary motivation behind this release is to get the Docker package security patched and up to date.
Improvements
- dockerfile: Update Alpine 8e61f1fe1 @bep #13783
- dockerfile: Update Go version f37412a57 @bep #13780
- hugolib: Emit ignorable warning when home page is a leaf bundle 01241d5dc @jmooring #13538
- all: Replace _build with build in tests 32eb1a8ad @bep
Dependency Updates
- build(deps): bump github.com/evanw/esbuild from 0.25.3 to 0.25.5 21a4a9acd @dependabot[bot]
- build(deps): bump github.com/niklasfasching/go-org from 1.7.0 to 1.8.0 7a4a4790e @dependabot[bot]
- build(deps): bump golang.org/x/net from 0.39.0 to 0.40.0 54065b7ef @dependabot[bot]
- build(deps): bump github.com/yuin/goldmark from 1.7.11 to 1.7.12 e333836f4 @dependabot[bot]
- build(deps): bump github.com/tdewolff/minify/v2 from 2.23.5 to 2.23.8 cc7bfeea3 @dependabot[bot]

Bug fixes
- Fix language handling in shortcode templates 5273a884d @bep #13767
- Make sure that unreferenced but changed bundle resources gets republished 766a2e786 @bep #13748
- resources/page: Respect disablePathToLower for permalink tokens 843ffeb48 @jmooring #13755
Improvements
- Handle KaTeX warnings (#13760) 633494851 @bep #13735
- common/collections: Increase test coverage bff5d1912 @pixel365
- parser/pageparser: Add coverage for all IsX methods of Item da370d30d @pixel365
- resources: Remove unused interface 6bd328c58 @bep
Dependency Updates
- build(deps): bump golang.org/x/image from 0.26.0 to 0.27.0 75259636c @dependabot[bot]
- build(deps): bump golang.org/x/text from 0.24.0 to 0.25.0 0df9f3510 @dependabot[bot]
- build(deps): bump github.com/spf13/cast from 1.7.1 to 1.8.0 302e6a726 @dependabot[bot]
- build(deps): bump github.com/alecthomas/chroma/v2 from 2.17.2 to 2.18.0 202fe0d45 @dependabot[bot]
- deps: Upgrade github.com/olekukonko/tablewriter v0.0.5 ⇒ v1.0.7 13e161755 @bep

What's Changed
- Improve warning message on superfluous prefix when using function 'partials.Include' e57dcd379 @deining
- Fix recent regression with cascading of params to content adapters eaf5ace30 @bep #13743
- Fix it so e.g. de in layouts/_shortcodes/de.html is not interpreted as a language code 9ad26b69a @bep #13740
- commands: Make sure the browser gets refreshed on changes when --disableFastRender is set f47193669 @bep #13727
- tpl/transform: Expose the KaTeX strict option 013c8cfb2 @jmooring #13729

We have gotten some requests about updating the minifier library we use, so here you go @myitcv and others. I'm probably going to regret doing that particular upgrade on a Thursday, but so be it.
What's Changed
- Fix live reload when editing inline partials 0c7b1a3f2 @bep #13723
- build(deps): bump github.com/tdewolff/minify/v2 from 2.20.37 to 2.23.5 970b887ba @dependabot[bot]

What's Changed
- Fix it so css.TailwindCSS inlineImports options isn't always enabled a03a245f0 @bep #13719
- tpl: Add a test case 5a81a3a4c @bep #13699
- tpl: Narrow down the usage of plain text shortcodes when rendering HTML 61317821e @bep #13698
- tpl: Fix theme overrides when theme has old layout setup (e.g. _default) 6142bc701 @bep #13715

Mostly bug fixes here, but also a new template func to get a really big number. You can read about why that is useful in the documentation.
- tpl/tplimpl: Change calls to simple versions of embedded shortcodes 81426998b @jmooring #13700
- config: Fix env override of slices bc98e7a80 @bep #13707
- Fix/implement cascade for content adapters c745a3e10 @bep #13692
- commands: Fix description of new theme commands 9d1d8c889 @jmooring #13701
- tpl/tplimpl: Fix vimeo shortcode test to accommodate API changes 84d7a108e @jmooring #13687
- tpl/math: Add MaxInt64 function 325a0dba6 @jmooring #13693

What's Changed
- Fix handling of "outputs" from content adapter pages 363ab48a2 @bep #13689
- tpl: Fix case issue in templates.Exists 80f059531 @bep #13684
- config: Add some more merge tests b39b24962 @bep #13681

Bug fixes
- tpl: Fix overlapping layout sections be93d5218 @bep #13672
- Fix it so the owning taxonomy gets rerendered in server when new tags are added a1cb15e1c @bep #13648
Improvements
- tpl: Add some more test cases 5fec7829b @bep #13672 #13668
- commands/server: Display correct multihost language in console 673a4d00e @jmooring #12564
- hugolib: Use new build key in content placeholder 31db7edf6 @jmooring #13655
Dependency Updates
- build(deps): bump github.com/alecthomas/chroma/v2 from 2.17.0 to 2.17.2 620fc87b5 @dependabot[bot]
- build(deps): bump github.com/getkin/kin-openapi from 0.131.0 to 0.132.0 8b2124e7c @dependabot[bot]
- build(deps): bump github.com/yuin/goldmark from 1.7.10 to 1.7.11 927d1ec6c @dependabot[bot]

This release comes with a new aligny option (shoutout to @pranshugaba for the implementation) for images.Text that, in combination with alignx makes it simple to e.g. center the text on top of image in both axis. But the main reason this release comes now and not later, is the improvements/fixes to the order Hugo applies the default configuration to some keys. This is inherited from how we did this before we rewrote the configuration handling, and it made the merging of configuration from modules/themes into the config root harder and less flexible than it had to be. Me, @bep, looking into this, was triggered by this forum topic. Having many sites share a common configuration is very useful. With this release, you can simply get what the thread starter asks for by doing something à la:
baseURL = "http://example.org"
title = "My Hugo Site"

# ... import any themes/modules.

# This will merge in all config imported from imported modules.
_merge = "deep"
See the documentation for details.
Bug fixes
- tpl: Fix it so we always prefer internal codeblock rendering over render-codeblock-foo.html and similar 07983e04e @bep #13651
- tpl/tplimpl: Fix allowFullScreen option in Vimeo and YouTube shortcodes 5c491409d @jmooring #13650
- config: Fix _merge issue when key doesn't exist on the left side 179aea11a @bep #13643 #13646
- all: Fix typos 6a0e04241 @coliff
Improvements
- create/skeletons: Adjust template names in theme skeleton 75b219db8 @jmooring
- tpl: Remove some unreached code branches ad4f63c92 @bep
- images: Add some test cases for aligny on images.Text 53202314a @bep #13414
- images: Add option for vertical alignment to images.Text 2fce0bac0 @pranshugaba
Dependency Updates
- build(deps): bump github.com/evanw/esbuild from 0.25.2 to 0.25.3 1bd7ac7ed @dependabot[bot]
- build(deps): bump github.com/alecthomas/chroma/v2 from 2.16.0 to 2.17.0 41cb880f9 @dependabot[bot]

Bug fixes
- Revert the breaking change from 0.146.0 with dots in content filenames 496730840 @bep #13632
- tpl: Fix indeterminate template lookup with templates with and without lang 6d69dc88a @bep #13636
- tpl/collections: Fix where ... not in with empty slice 4eb0e4286 @bep #13621
- tpl: Fix layout fall back logic when layout is set in front matter but not found 5e62cc6fc @bep #13630
Improvements
- parser/metadecoders: Add CSV targetType (map or slice) option to transform.Unmarshal db72a1f07 @jmooring #8859
- tpl: Detect and fail on infinite template recursion 1408c156d @bep #13627
Dependency Updates
- build(deps): bump github.com/yuin/goldmark-emoji from 1.0.5 to 1.0.6 ad787614e @dependabot[bot]
- build(deps): bump github.com/bep/imagemeta from 0.11.0 to 0.12.0 9c65b9e88 @dependabot[bot]
- build(deps): bump github.com/yuin/goldmark from 1.7.9 to 1.7.10 be3b14786 @dependabot[bot]

What's Changed
- tpl: Fix when layout specified in front matter and no match is found 088cd2f99 @bep #13628

What's Changed
- build(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.9 64cf00888 @dependabot[bot]
- tpl: Fix language handling in partials d61b9fc60 @bep #13612

What's Changed
- tpl: Fix issue with partials without suffix 65c94c7b2 @bep #13601
- tpl: Avoid panic on nonsensical return construct e8e8ce10d @bep #13600
- tpl: Fix the case for a shortcode in a nested folder only cf9e6904c @bep #13605
- tpl: Add proper file context to template parse errors 8a2830f2d @bep #13604
- tpl: Make {{ template "partials/foo.html" . }} work in older setups 1e0287f47 @bep #13599

What's Changed
- tpl: Make any layout set in front matter higher priority 30b9c19c7 @bep #13588
- tpl: Fix it so embedded render-codeblock-goat is used even if custom render-codeblock exists c8710625b @bep #13595

What's Changed
- tpl: Fix codeblock hook resolve issue d1c394442 @bep #13593
- tpl: Fix legacy section mappings 1074e0115 @bep #13584
- tpl: Resolve layouts/all.html for all html output formats c19f1f236 @bep #13587
- tpl: Fix some baseof lookup issues 9221cbca4 @bep #13583

This fixes a regression introduced in v0.146.0 released earlier today.
- tpl: Skip dot and temp files inside /layouts 3b9f2a7de @bep #13579

The big new thing in this release is a fully refreshed template system – simpler and much better. We're working on the updated documentation for this, but see this issue for some more information. We have gone to great lengths to make this as backwards compatible as possible, but make sure you test your site before going live with this new version. This version also comes with a full dependency refresh and some useful new template funcs:
- templates.Current: Info about the current executing template and its call stack. Very useful for debugging.
- time.In: Returns the given date/time as represented in the specified IANA time zone.
Bug fixes
- tpl/tplimpl: Fix full screen option in vimeo and youtube shortcodes 6f14dbe24 @jmooring #13531
Improvements
- tpl: Warn and skip non-hook templates inside /layouts/_markup 383dd82f9 @bep #13577
- tpl: Add a partial lookup cache 208a0de6c @bep #13571
- tpl: Add templates.Current d4c6dd16b @bep #13571
- commands/new: Improve theme creation 24ac6a9de @jmooring #13489 #13544
- tpl/tplimpl: Update embedded pagination template 1e0084248 @jmooring
- Reimplement and simplify Hugo's template system 83cfdd78c @bep #13541 #13545 #13515 #7964 #13365 #12988 #4891
- config: Use the non-global logger for deprecations when possible 812ea0b32 @bep
- tpl/time: Add time.In function 07cbe5701 @jmooring #13548
- resources: Add option to silence dependency deprecation warnings c15ebce2f @jmooring #13530
- common/hreflect: Replace the map/RWMutex method cache with sync.Map 8d2379bcb @bep
- common/hexec: Remove github.com/cli/safeexec a6bd67793 @jmooring #13516
- parser/metadecoder: Improve errors for non-map XML root values f34cdc382 @thevilledev
- identity: Use clear to clear the finder seen map 52561d561 @bep
- cache: Apply httpcache defaults for polling config d28c84a87 @khayyamsaleem #13471
- tpl/tplimpl: Add loading attribute to Vimeo shortcode b9add1c70 @jmooring #13445
- commands: Add --omitEmpty flag to gen chromastyles 93df17661 @jmooring #13475
- tpl: Add trailing newline to robots.txt template eebea9ec4 @willfaught
- commands: Skip flaky test on Windows 3f2e1c08e @bep #13465
- resources/image: Mark loong64 as FMA-using architecture 3a11d22da @hannesbraun
Dependency Updates
- build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 18d2d2f98 @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.31.0 to 0.32.0 cd3e3499b @dependabot[bot]
- build(deps): bump github.com/evanw/esbuild from 0.25.1 to 0.25.2 8cd799aac @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.25.0 to 0.26.0 af0602c34 @dependabot[bot]
- build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.3 to 2.2.4 650fe6cd0 @dependabot[bot]
- build(deps): bump github.com/alecthomas/chroma/v2 from 2.15.0 to 2.16.0 d63491beb @dependabot[bot]
- build(deps): bump golang.org/x/net from 0.37.0 to 0.39.0 e6e18e912 @dependabot[bot]
- build(deps): bump github.com/bep/imagemeta from 0.10.0 to 0.11.0 43af3bc07 @dependabot[bot]
- deps: Upgrade github.com/gohugoio/hugo-goldmark-extensions/passthrough v0.3.0 ⇒ v0.3.1 10b55439a @jmooring
- build(deps): bump golang.org/x/tools from 0.30.0 to 0.31.0 26d986fc0 @dependabot[bot]
- build(deps): bump github.com/getkin/kin-openapi from 0.129.0 to 0.131.0 ebc069365 @dependabot[bot]
- build(deps): bump github.com/spf13/afero from 1.11.0 to 1.14.0 7ca6bb06b @dependabot[bot]
- build(deps): bump github.com/bep/imagemeta from 0.9.0 to 0.10.0 bddd2f900 @dependabot[bot]
- build(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 1c691358f @dependabot[bot]
- build(deps): bump github.com/evanw/esbuild from 0.24.2 to 0.25.1 17db4edb0 @dependabot[bot]
- build(deps): bump github.com/bep/godartsass/v2 from 2.4.0 to 2.4.1 3968f9158 @dependabot[bot]
- build(deps): bump golang.org/x/net from 0.35.0 to 0.37.0 e9bd2373a @dependabot[bot]
- build(deps): bump github.com/bep/godartsass/v2 from 2.3.2 to 2.4.0 f4f21f5ea @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.24.0 to 0.25.0 61c

Bug fixes
- all: Typo fixes 4094a1e12 @coliff
- all: Run modernize -fix ./... 521911a57 @bep
- readme: Fix relative links in Editions section ab9e54576 @martey
- Fix some related content issues with content adapters 381c0da85 @bep #13443
- Fix potential nilpointer in httpcache config 227e42926 @bep
- Fix --printPathWarnings when site calls templates.Defer c3d435acf @bep #13420
Improvements
- Use the page path and not the backing filename as the last resort in the default sort c498d0fe1 @bep
- tpl: HTTPS the instagram Shortcode JS 2f4e666d7 @coliff
- Add transform.PortableText 04f21b4d8 @bep
- hugolib: Deprecate _build front matter key in favor of build d0ce94219 @jmooring
Dependency Updates
- deps: Upgrade github.com/rogpeppe/go-internal v1.13.1 ⇒ v1.14.1 6927e6f04 @bep #13449
- build(deps): bump github.com/yuin/goldmark-emoji from 1.0.4 to 1.0.5 b7ae24b9c @dependabot[bot]
- build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 1a4851f13 @dependabot[bot]
- build(deps): bump github.com/tetratelabs/wazero from 1.8.2 to 1.9.0 d1f23309b @dependabot[bot]
Documentation
- github: Build docker image with both extended and withdeploy tags e5eecbd9b @margau
Build Setup
- snap: Update Node.js to 22.x 4fd7f3233 @jmooring

What's Changed
- Fix --printPathWarnings when site calls templates.Defer c3d435acf @bep #13420

What's Changed
- markup/goldmark: Fix panic on empty Markdown header 494e88abf @bep #13416

Note
- Fix auto generated header ids so they don't contain e.g. hyperlink destinations (note) 24cc25552 @bep #13405 #13410
Bug fixes
- markup/goldmark: Fix panic on stray attribute nodes 85c172774 @bep
- Fix Position for passthrough hooks 641403f7d @bep #13406
- config: Fix server.redirects.fromRe being ignored unless server.redirects.from is also set c1f4228d6 @p-weston
- Fix shortcode name in error message on self-closing shortcodes with no .Inner e865d5984 @bep #13344
Improvements
- config/allconfig: Deprecate :filename and 😒lugorfilename tokens 5de3913ed @jmooring
- resources/page: Revise the new contentbasename permalinks tokens 7b7a0f362 @bep #11722
- resources/page: Add :contentbasename and :contentbasenameorslug permalink tokens cb7a4339b @hacdias #11722
- Add autoID for definition terms 157d3703c @bep #13403 #11566
- internal/warpc: Enable KaTeX mhchem extension 503dcf625 @jmooring
- modules: Add GOAUTH to module config 2c77719cd @bep #13385
- Support menus as maps in content adapters fd38aee69 @bep #13384
- js/esbuild: Add drop option d25f7ec17 @bep #13362
- config: Remove unused code 34dcac53b @jmooring
- commands: Use punctuation consistently in short description ee438606d @jmooring
- Upgrade to Go 1.24 fd8b0fbf8 @bep #13381
- Deprecate kind, lang, and path from front matter 9b5f786df @bep #12484
- commands: Move the CHMOD event filter up e6feb9e0b @bep #13373
- parser: Handle org-mode filetags as slice f02da7fbc @theSuess
- Add ContentTypes to config c2fb22120 @bep #12274
- commands: Validate style argument passed to gen chromastyles a352e69b0 @jmooring #13357
- Update CONTRIBUTING.md 1dd27be81 @bep
- Move "print unused templates" after renderDeferred eb7a5aaba @bep #13355
- Add some more server options/improvements 029d1e0ce @bep
Dependency Updates
- build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 a2ca95629 @dependabot[bot]
- build(deps): bump github.com/sanity-io/litter from 1.5.7 to 1.5.8 367fe526e @dependabot[bot]
- build(deps): bump github.com/sanity-io/litter from 1.5.5 to 1.5.7 9c2f8ec61 @dependabot[bot]
- build(deps): bump github.com/gohugoio/hugo-goldmark-extensions/extras bd77944ba @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.29.0 to 0.30.0 2e835d084 @dependabot[bot]
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudfront d89b9d891 @dependabot[bot]
- build(deps): bump google.golang.org/api from 0.206.0 to 0.221.0 8721a3520 @dependabot[bot]
- build(deps): bump github.com/bep/imagemeta from 0.8.3 to 0.8.4 c054e1882 @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.22.0 to 0.24.0 5e4ffa0e8 @dependabot[bot]
- build(deps): bump golang.org/x/mod from 0.22.0 to 0.23.0 0cdcc2b58 @dependabot[bot]
- build(deps): bump github.com/gohugoio/hashstructure from 0.3.0 to 0.5.0 a591c4406 @dependabot[bot]
- build(deps): bump github.com/bep/simplecobra from 0.4.0 to 0.5.0 2d86a0512 @dependabot[bot]
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudfront 22ee0918f @dependabot[bot]
- build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.32.4 to 1.36.1 b50ab0403 @dependabot[bot]
- build(deps): bump github.com/getkin/kin-openapi from 0.123.0 to 0.129.0 b772f0e3d @dependabot[bot]
- build(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6 d58c0198d @dependabot[bot]
Documentation
- Update README.md 5dd0ba00f @jmooring
- helpers: Add Chroma styles to docs.yaml f0c185297 @jmooring #13360

What's Changed
- Fix RSS with baseURL with sub dir when render hooks is enabled 760c13a7a @bep #13332
- mage: Simplify magefile 3bd73d262 @alexandear
- common/hugo: Adjust deprecation timing and message 7104de83c @jmooring #13333
- Re-introduce the LRU-evicted identities in change set calculation 835579b33 @bep

This is mostly a bug fix release, ironing out some quirks with the partial server rebuilds etc., but notable is also the new responseHeaders option on resources.GetRemote that allows you to extract headers from the server’s response.
Bug fixes
- Fix some server/watch rebuild issues db28695ff @bep #13316
- Fix "concurrent map iteration and map write" in pages from data 329b2342f @bep #13254
- Fix TailwindCSS related server rebuild issue 6c68142cc @bep #13316
- Fix some server rebuild issues for non-HTML custom output formats cd7dc7a37 @bep #13014
- Fix cascade with overlapping sections bb7b3d3cd @bep #12465
- markup/goldmark: Fix typo in func comment f704d7569 @chalin
Improvements
- Don't re-render aliases on server rebuilds 778f0d900 @bep
- tpl/tplimpl: Remove leading whitespaces produced by Youtube shortcode 13b208e2f @alex-shpak
- resources: Remove debug statement 33b46d8a4 @jmooring #13320
- markup/goldmark: Trim space from blockquote render hook text e08d9af21 @jmooring #13302
- parser/pageparser: Don't allow parameters after closing tag in shortcodes c939c33fd @guilhas07
- tpl/tplimpl: Improve shortcode test coverage 873a5cda1 @jmooring
- tpl/tplimpl: Deprecate gist shortcode f42a4b6af @jmooring #13211
- resources: Remove conditional used for debugging a5637831c @bep
- resources: Add responseHeaders option to resources.GetRemote 68586c891 @bep #12521
- tpl/tplimpl: Skip TestTemplateFuncsExamples on s390x 51bb2feda @bep #13204
- Make cascade front matter order deterministic 7f0f50b13 @bep #12594
- tpl/tplimpl: Deprecate comment shortcode 77a8e347b @jmooring

This is is mostly a bug fix release. It's a minor and not a patch release because of the image file cache issue fixes (see #13273 #13272). Fixing this required us to break the hashes for many of the generated images so we used this opportunity to simplify how we generate these hashes/image filenames.
Bug fixes
- Fix render hook's PlainText with typographer extension enabled 6aa72acaf @bep #13286 #13292
- Fix build with Go 1.24 4b0c194fb @flyn-org
- tpl/tplimpl: Fix context in shortcode error messages 8de4ffb29 @jmooring #13279
- resources: Fix 2 image file cache key issues 1f5a15aba @bep #13273 #13272
Improvements
- Also handle inline HTML comments 637995ba8 @bep
- Do not warn on potentially unsafe HTML comments when unsafe=false f1de5d2a0 @bep #13278
- tpl: Add loading attribute to qr shortcode 889711366 @nfriedli

This release adds try, a new general mechanism for handling errors within templates, a new images.Mask image filter, a new images.QR function, a new alignx option to control horizontal alignment in images.Text, and more.
Note
- Adjust error handling in ToMath vs try (note) dde9d9d54 @bep #13239
- resources: Replace error handling in GetRemote with try (note) 0918e087e @bep #13216
- For render hooks, only fallback to HTML (or the defaultOutputFormat) template 76993369a @bep #13242
Bug fixes
- common/paths: Fix docstring 8b5262691 @jdbaldry
- commands: Fix spelling in comment 60c24fc5e @bep
- Fix branch resource overlapping bundle path c5a63a3b4 @bep #13228
- templates: Fix handling of multiple defers in the same template 61d3d2012 @bep #13236
- Fix NPX issue with TailwindCSS v4 cfa080181 @bep #13221
- Fix server refresh on 404 template changes d913f46a8 @bep #13209
Improvements
- tpl/tplimpl: Simplify some test assertions 1fad3832a @bep
- tpl/tplimpl: Deprecate twitter shortcode in favor of x shortcode 1191467c0 @jmooring #13214
- commands: Set up the glboal logger early 41137077b @bep #13265
- commands: Add --printZero to the config command 5bb156457 @bep
- tpl/collections: Use MapRange/SetIterKey/SetIterValue for Where, Sort and Merge de7137cc3 @bep
- tpl/collections: Add BenchmarkWhereMap 956f915f7 @bep
- tpl/collections: Add BenchmarkSortMap a2a4166f6 @bep
- tpl/collections: Add Merge benchmark 39f582f9f @bep
- resources/images: Refactor golden image tests to locate them closer to the implementation 2501de7aa @bep
- resources/images: Add some mask tests 06cc8673f @bep #13244
- resources/images: Add images.Mask 71fae9918 @trickkiste #13244
- tpl/tplimpl: Use plain text for image render hook alt attribute 8af04745f @jmooring
- resources/images: Add some golden tests for images.QR 892b49110 @bep
- tpl/images: Change signature of images.QR to images.QR TEXT OPTIONS b13d0a68e @jmooring #13230
- resources/images: Add some golden tests for images.Text d9594a96f @bep
- images.Text: Add "alignx" option for horizontal alignment 4a5cc2dd2 @jlskuz #10849
- images: Rework the golden tests 9cad8d38c @bep
- create: Respect --noBuildLock in hugo new 2a7bb1c7c @bep
- tpl/images: Format the QR hashes as hex 5f2adad2c @bep
- tpl/images: Add images.QR function 4ea94c451 @jmooring #13205
- Add try 5d2cbee98 @bep #9737
- resources: Add FromOpts for more effective resource creation 723e3f434 @bep
- markup/highlight: Remove noHl option 2db43f841 @jmooring #9885
Dependency Updates
- deps: Upgrade github.com/gohugoio/hashstructure from 0.1.0 to 0.3.0 a2edf04c2 @bep
- build(deps): bump golang.org/x/tools from 0.28.0 to 0.29.0 f024a5050 @dependabot[bot]
- build(deps): bump golang.org/x/net from 0.33.0 to 0.34.0 80704bc9a @dependabot[bot]
- build(deps): bump github.com/evanw/esbuild from 0.24.0 to 0.24.2 b7b49fb0f @dependabot[bot]
- build(deps): bump github.com/alecthomas/chroma/v2 from 2.14.0 to 2.15.0 a83797673 @dependabot[bot]
Documentation
- docs: Regen CLI docs 88ecc3b75 @bep
- docs: Regen CLI docs 44628616a @bep
Build Setup
- snap: Always package latest stable version of Go 3682027a5 @jmooring

The timing of this release comes from the security fix in golang.org/x/net's html.Parse function. This is used in two places in Hugo:
1. Extracting table of contents from Asciidoctor rendered output.
2. Collecting HTML classes etc. when build stats is enabled
It's a little bit of a stretch to see how this could be exploited in Hugo, but we understand that many want a clean security report. See this issue for details.
What's Changed
- Print cli usage of hugo gen chromastyles alongside css 83cec785c @diwasrimal
- build(deps): bump golang.org/x/net from 0.32.0 to 0.33.0 4e52be8b9 @dependabot[bot]
- config/allconfig: Fix slice of language configs 7888ac585 @jmooring #13201
- config/allconfig: Throw error when output format is not defined eb1dbe070 @jmooring #13199
- Fix same resource file published more than once 77824d704 @bep #13164
- markup/highlight: Add wrapperClass option ec0caaec7 @bep
- Update README.md 845b8885d @bep

What's Changed
- Update gocloud and docs for S3-Compatible Endpoints e229f4b38 @tebriel
- js/esbuild: Don't try to resolve packages in /assets marked as external 020253904 @bep #13183
- Fix union, complement, symdiff, and intersect for transient resources 4a5e94087 @bep #13181
- release: Add withdeploy deb extended archives 48a7aee96 @bep #13166
- common/loggers: Write PrintTimerIfDelayed output to stdErr 6c583e322 @jmooring #13171
- build(deps): bump github.com/spf13/cast from 1.7.0 to 1.7.1 5d64b492f @dependabot[bot]
- hugolib: Fix fallbacks for menu entry Name and Title b3f32949c @jmooring #13161

Bug fixes
- Fix panic on server rebuilds when using both base templates and template.Defer a5e5be234 @bep #12963
- js: Fix js.Batch for multihost setups 565c30eac @bep #13151
- parser/pageparser: Fix Org Mode summary delimiter assignment 48dd6a918 @jmooring #13152
- Fix a rebuild on resource rename case 744b8566e @bep
- tpl/tplimpl: Fix title attribute in details shortcode a32c889a7 @jmooring
- Fix Sass imports on the form index.{scss,sass} 5ab38de36 @bep #13123
- markup/goldmark: Fix blockquote render hook text parsing 34373407b @jmooring #12913 #13119
Improvements
- js/esbuild: Add missing es2024 target 5c80cb0d2 @bep
- js/esbuild: Add runners after scripts 7de5317ae @bep
- js/esbuild: Batch: Avoid nil Instances slice 4cbd4ef99 @bep
- tpl/tplimpl: Update youtube shortcode 852d86854 @jmooring
- tpl/tplimpl: Update details shortcode 1e34e5b26 @jmooring
- tpl/collections: Allow querify to accept a map argument 641d2616c @jmooring #13131
- js/esbuild: Build groups in order of their ID a834bb9f7 @bep
- tpl/tplimpl: Add details shortcode 4f130f6e4 @racehd
- Write all logging (INFO, WARN, ERROR) to stderr 9dfa11261 @bep #13074
- js/esbuild: Add platform option ec1933f79 @bep #13136
- Add config option disableDefaultLanguageRedirect 75ad9cdaa @bep #13133
- Add js.Batch e293e7ca6 @bep #12626 #7499 #9978 #12879 #13113 #13116
- Upgrade to Go 1.23.4 6be253000 @bep #13130
- Remove some old and unused shell scripts 989b299b5 @bep
Dependency Updates
- build(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 157d86414 @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.27.0 to 0.28.0 947e4e66b @dependabot[bot]
- build(deps): bump github.com/hairyhenderson/go-codeowners 5f897868c @dependabot[bot]
- build(deps): bump golang.org/x/net from 0.31.0 to 0.32.0 7b6921848 @dependabot[bot]

What's Changed
- tpl/tplimpl: Escape Markdown attributes in render hooks and shortcodes 54398f8d5 @jmooring
- deps: Upgrade github.com/bep/godartsass/v2 v2.3.1 => v2.3.2 b8c15f245 @bep
- common/maps: Simplify TestScratchSetInMap/DeleteInMap d0dc51884 @alexandear
- markup/tableofcontents: Cast Fragments.ToHTML args to int b52985900 @jmooring #13107

What's Changed
- Fix server edits of resources included in shortcode/hooks c1dc35dd7 @bep #13093
- commands: Fix flaw in the livereload logic dea158c88 @bep
- build(deps): bump github.com/bep/godartsass/v2 from 2.3.0 to 2.3.1 7e130e34f @dependabot[bot]
- build(deps): bump github.com/tetratelabs/wazero from 1.8.1 to 1.8.2 88b7868fb @dependabot[bot]
- Fix some typos fc3d1cbad @thirdkeyword

Note that this is the second patch release today. See v0.139.1. We had to do this release to get the Hugo Docs build running.
What's Changed
- modules: Skip empty lines in modules.txt 0ab81896d @bep #13084

What's Changed
- Revert "build(deps): bump github.com/tdewolff/minify/v2 from 2.20.37 to 2.21.1" aa3dd197f @bep #13082
- minifiers: Add failing test for upstream bug 5a50eee9d @bep #13082
- dartsass: Fix nilpointer on Close when Dart Sass isn't installed 8d017a60f @bep #13076

This release is mostly about removing code that has been deprecated for a long time. This has been shown as an ERROR in the build log and failed the build for at least the last 6 minor Hugo versions, in most cases much longer.
But this is also a full dependency refresh, and there are also some new stuff. For one, we added a -O flag to hugo server to open up the site in your browser after start. This is now my (@bep) shortcut to start the server:
function h() {
hugo server -F -O -N -D
}
Note
- dartsass: Remove support for v1 of the protocol/binary (note) 1fd845eee @bep
- Remove deprecations <= v0.122.0 (note) ad43d137d @bep
Bug fixes
- dartsass: Fix error message 8d92042ab @bep #13065
- Fix extra newline/paragraphs issue with .RenderShortcodes d4de780ed @bep #13051
- markup/goldmark: Fix typo in error message e79ee0d51 @deining
Improvements
- Make sure term is always set e917401c7 @bep #13063
- dartsass: Add silenceDeprecations option 3b6eaf9b1 @bep #13045
- Run go mod tidy 5e3133a7d @bep
- commands: Add -O flag to server to open browser ac6962d28 @bep #13040
- Preserve input type. 23d21b0d1 @KN4CK3R
- server: Strip ANSI escape codes from browser error log ce9cf882a @bep #13037
- parser/metadecoders: Add benchmark 8aba6dc66 @bep
- Add site.Store and hugo.Store and Shortcode.Store a7df536a5 @bep #13021
- markup/goldmark: Improve the raw HTML omitted warning 2b97a2a8b @jmooring #13023
Dependency Updates
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudfront eb298144b @dependabot[bot]
- build(deps): bump google.golang.org/api from 0.191.0 to 0.206.0 61e2ce2a4 @dependabot[bot]
- build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.30.3 to 1.32.4 2d503f82a @dependabot[bot]
- build(deps): bump github.com/fsnotify/fsnotify from 1.7.0 to 1.8.0 3a6b2e6b1 @dependabot[bot]
- deps: Upgrade github.com/bep/imagemeta v0.8.1 => v0.8.3 6bde8abaa @bep
- build(deps): bump golang.org/x/tools from 0.26.0 to 0.27.0 2c54c3298 @dependabot[bot]
- build(deps): bump github.com/tdewolff/minify/v2 from 2.20.37 to 2.21.1 7a2f04ee8 @dependabot[bot]
- build(deps): bump github.com/fatih/color from 1.17.0 to 1.18.0 7921777da @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.21.0 to 0.22.0 33e964d40 @dependabot[bot]
- deps: Upgrade github.com/yuin/goldmark v1.7.4 => v1.7.8 588c9019c @bep #12958
- build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0 46e17053c @dependabot[bot]
- build(deps): bump github.com/hairyhenderson/go-codeowners cb6580d00 @dependabot[bot]
Documentation
- docs: Regen CLI docs 66dd6ecab @bep
- docs: Regenerate CLI docs 58a3c91a7 @bep
Build Setup
- release: Add missing withdeploy archive for arm64 Linux f7fc6ccd5 @bep #13029

This release soft deprecates Page.Scratch and aliases it to Page.Store. The only difference between the two has been that the Page.Scratch was reset on rebuilds, which becomes problematic when state is written by cached content (typically .Content). The original motivation behind adding a new and not changing the existing method was to avoid breakage, but in hind-sight, it would have fixed more than it broke.
This release also includes a fix for a data race that I, @bep, introduced in v0.137.0.
What's Changed
- Fix concurrent map read and map write in short page lookups 95e2d5beb @bep #13019
- Alias Page.Scratch to Page.Store (note) 2c3efc810 @bep #13016

What's Changed
- common/hugo: Add withdeploy to the version string printed in hugo version ca4fc587c @bep
- markup: Goldmark log "Raw HTML omitted" warning also for inline HTML 4faaaf9c2 @bep #13013
- build: Add missing withdeploy archive for Windows 94b46c36b @bep #13009
- commands: Print the "deploy not available" error message even if flags provided 2b0b3b858 @bep #13012
- tpl/tplimpl: Create an embedded comment shortcode 801035bb7 @jmooring #13010

Note that we have no longer build the deploy feature in the standard and extended archives. If you need that, download archives with withdeploy in the filename. See instalation for details. You can read #12994 for more on the motivation behind this, but for one, it shaves off about 40% of the binary size.
Bug fixes
- Fix stale pages on rebuilds in GetPage with short refs 30d9aea86 @bep #13004
- Fix some RenderShortcodes error cases 1f23b4949 @bep #12854 #12998
- dynacache: Fix potential deadlocks on panics in GetOrCreate e10915f80 @bep
Improvements
- Do not watch directories with no mounted files in it fcdc454cc @bep #12912 #13007
- markup/goldmark: Only log Raw HTML omitted WARN on block entering 6cf23bf88 @bep #12997
- markup/goldmark: Add warning (using Warnidf) on Goldmark 62a96cef7 @bep #12997
- resources: Address Dart Sass deprecation of global built-in functions 889308dd8 @jmooring #12961
- github: Adjust test workflow to install Dart Sass v1.80.3 72352f205 @jmooring
- Build without the deploy feature by default 89bd025eb @bep #12994 #12994
Dependency Updates
- deps: Upgrade github.com/bep/godartsass/v2 v2.1.0 => v2.2.0 e3304db61 @bep
- deps: Upgrade github.com/bep/lazycache v0.6.0 => v0.7.0 62567d382 @bep
Documentation
- Update README.md 5fc163903 @jmooring
- Update README.md 1ec6fa36c @bep

Fix stuck server error issues cb6e27b32 @bep #11378

What's Changed
- tpl/transform: Revert unmarshal whitespace removal 5bbe95f9c @jmooring #12977

What's Changed
- docker: Fix permission issues in Dockerfile 88d598a04 @dvdksn #12971 #12970
- Make sure that HugoSites is always closed when done 352be5ba8 @bep
- tpl/strings: Add TrimSpace function d37606d2c @jmooring #12962
- common/herrors: Fix the deferred error message cleaner regexp f5e54d9c7 @bep
- tpl/transform: Don't fail on "no data to transform" 42f37b4e9 @bep #12964

What's Changed
- docker: Fix Dart Sass ARM64 arch mismatch, /cache permissions b5852d0e6 @dvdksn #12956 #12957 #12960

What's Changed
- Never sanitize when url set in front matter e4ad0c527 @bep #12954
- Remove erroneously permalink validation a2f666b58 @bep #12948
- create/skeletons: Add delimiters to archetype front matter b1b3bbcdb @jmooring #12945

Note that we have much improved the Dockerfile and image this release. But this also means a slightly different way of setting it up. Improved documentation will come soon, but see 41f69a725 #12920 #12885.
Bug fixes
- config: Fix uglyurls map parse ea633dd80 @akkuman #12926
Improvements
- resources/page: Adjust the permalinks colon implementation a little 6e1c5b61b @bep #12918
- resources/page: Allow colons in permalinks to be escaped e7d0757f9 @n1xx1 #12918
- commands: Use consistent style when describing subcommands 6b5e117a1 @Hasaber8 #12897
- config: Imrove uglyurls section test 21366e041 @bep #12926
- create/skeletons: Honor --format flag when creating default archetype 57151a5e9 @jmooring #12666
- hugolib: Make .Site.Author deprecation warning clearer 5bb22b6b4 @jvns #12269
- ci: Build multi-platform image with cross-compilation 4a7995627 @dvdksn
- tpl/tplimpl: Trim descriptions rather than just chomp 039845804 @chalin
- tailwind: Pin Tailwind 4 test to alpha 26 or later 5b0b663ec @jmooring
- resources/page: Treat null dates as zero dates 3f6830914 @jmooring #12906
- resources/page: Improve front matter date validation ab03588db @jmooring #12898
- commands: Add "hugo build" as an alias for "hugo" 0450d69fc @bep #11391
- markup/goldmark: Change default cell alignment in table render hook 1158e6307 @jmooring #12886
- tests: Address deprecation warnings and errors d1ba52f3c @jmooring
Dependency Updates
- build(deps): bump github.com/tetratelabs/wazero from 1.8.0 to 1.8.1 4985be1a4 @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.20.0 to 0.21.0 db653a848 @dependabot[bot]
- build(deps): bump github.com/yuin/goldmark-emoji from 1.0.3 to 1.0.4 05bbd2c51 @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.23.0 to 0.26.0 9b635522e @dependabot[bot]
- build(deps): bump github.com/rogpeppe/go-internal from 1.12.0 to 1.13.1 3223a65c9 @dependabot[bot]
- build(deps): bump github.com/evanw/esbuild from 0.23.1 to 0.24.0 bc6fc4772 @dependabot[bot]
- build(deps): bump github.com/hairyhenderson/go-codeowners ffb41d111 @dependabot[bot]
Documentation
- circleci: Use default docker image 5db27b19c @bep
- docs: Regen CLI docs b7d62d76c @bep

This is a small release, the main motivation was to finally ... drum roll ... get a tagged Hugo Docker image published. Big thanks to @bmanth60 for the tip that solved this issue.
Improvements
- resources/page: Validate predefined front matter dates 4c02a52f7 @jmooring #10717
- tailwind: Pin Tailwind 4 test to alpha 24 da72ac2db @bep #12880
- tpl/compare: Use any data type for compare.Conditional condition 0ea796dad @jmooring
Dependency Updates
- build(deps): bump golang.org/x/mod from 0.19.0 to 0.21.0 12c9ce34b @dependabot[bot]
- build(deps): bump github.com/bep/helpers from 0.4.0 to 0.5.0 47b055589 @dependabot[bot]
- build(deps): bump golang.org/x/net from 0.28.0 to 0.29.0 e56ea4066 @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.19.0 to 0.20.0 578442f89 @dependabot[bot]
- deps: Upgrade github.com/gobuffalo/flect v1.0.2 => v1.0.3 1e690c0f2 @khayyamsaleem #12827
Build Setup
- github: Trigger image workflow on release.published 0d390d7eb @bep #12753

- tpl: Remove RSS deprecation site.Author check e07028cb9 @bep
- modules: Improve console output on hugo mod init 22a9f3fc9 @bep #11458
- commands: Ignore "module does not exist" errors in hugo mod init e363964f2 @bep #11458
- Add exclusion for helix .bck files c260cb28a @David-Else #12677
- hugolib: Move hugolib/site_new.go into hugolib/site.go e07914537 @bep
- libsass: Resolve directory paths to directory index files 5b442b3cc @jmooring #12851
- dartsass: Resolve directory paths to directory index files 2bc27657d @jmooring #12849
- internal/warpc: Improve the JS plugin API 28f621d4a @bep

What's Changed
- Don't count HTML markup in auto summaries 3d6baedae @bep #12837

What's Changed
- Fix stray end p tag in Obsidian callout titles 66a3a1100 @bep #12828
- Make ContentWithoutSummary return Content when summary is fetched from front matter 8f2eac019 @bep #12822

Hugo v0.134.0 brings render hooks for tables, ContentWithoutSummary, scoped content render and Obsidian style callout alerts.
ContentWithoutSummary and scoped content render
This release finally brings a Page.ContentWithoutSummary method. This has been a long sought after method where the use case is obvious: Render the summary with a more button that renders the ... content without summary. To enable this we have reimplemented the content summary handling in Hugo. This consolidates the 3 summary types (auto, manual and frontmatter) – they are now all HTML. This is a slightly breaking change (manual was plain text before), but the new behaviour should be much less confusing and easier to handle in the templates. If you want plain text, pipe it into plainify: {{ .Summary | plainify }}.
Before this release there was one instance of .Content for a given page, it was e.g. not possible to render a page's content slightly different (e.g. different heading levels) on the list pages or the home page. This release anables that with a new Page.Markup with an optional scope argument.
In the list template you would do something like this:
{{ range .Pages | first 5 }}
{{ with .Markup "list" }}
{{ with .Render }}
<div>
<li>{{ .Summary }}</li>
<li>{{ .ContentWithoutSummary }}</li>
<li>{{ .WordCount }}</li>
<li>etc ...</li>
</div>
{{ end }}
{{ end }}
{{ end }}
You can think of the custom scope list as a cache key: Multiple invocations on the same page with the same scope will give the same return value. You can now pass down some data or configuration to in .Page.Store to the templates that render this markup (shortcodes, render hooks), or you can use the new global hugo.Context.MarkupScope function made for this purpose:
{{ if eq hugo.Context.MarkupScope "list" }}
{{/* Render some list markup. */}}
{{ else }}
{{/* default */}}
{{ end }}
Render hooks for tables
This has been a long sought after feature. Now you can have full control over how you render your Markdown tables with table render hooks.
Obsidian style callout alerts
Hugo v0.133.0 added blockquote render hooks with GitHub styled alerts. We have since then gotten some feedback about extended alert syntax in Obsidian, and in Hugo v0.134.0 we now support both.
Bug fixes
- github: Try to fix "no space left on device" on MacOS 96afea4ac @bep
- Fix deprecation warning for resources.ToCSS 8fb933550 @deining
- output: Fix docshelper template lookup order for AMP pages 1ecd0596a @jmooring #12797
Improvements
- markup/goldmark/blockquotes: Improve some tests 504a23184 @bep
- Add support for Obsidian type blockquote alerts e651d2980 @bep #12805 #12801
- Rename hstring.RenderedHTML => hstring.HTML 469124823 @bep
- Make all renderhook Text methods return template.HTML 6d97ee711 @bep
- Add Markdown render hooks for tables f738669a4 @bep #9316 #12811
- create/skeletons: Clean up lang attribute in base template b63f24adc @jmooring
- tpl/resources: Improve resources.Concat error message a3684c836 @jmooring #7428
- tpl: Trim whitespace from google_analytics.html 53a8de21b @chalin
- Add Page.Contents with scope support 37609262d @bep #8680 #12761 #12778 #716
- hugolib: Add a test for overriding _internal templates 371246de2 @bep
Dependency Updates
- deps: Upgrade github.com/bep/golibsass v1.1.1 => v1.2.0 2b5c335e9 @bep #12649
- build(deps): bump github.com/evanw/esbuild from 0.23.0 to 0.23.1 12a28ef77 @dependabot[bot]
- build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.2 to 2.2.3 4ded32d07 @dependabot[bot]
Documentation
- Update Dockerfile ae3815898 @offgrid88

Bug fixes
- Fix missing method NameNormalized panic 5f667f879 @bep #12795
- config: Fix pagination deprecation messages 7792392a6 @jmooring
- deps: Upgraded github.com/bep/imagemeta v0.8.0 => v0.8.1 e1becf1df @bep #12793

What's Changed
- Add config options page.nextPrevSortOrder/nextPrevInSectionSortOrder 01008ba51 @bep #12776
- build(deps): bump gocloud.dev from 0.38.0 to 0.39.0 53c0ddfcb @dependabot[bot]
- deps: Upgrade github.com/tetratelabs/wazero v1.7.4-0.20240805170331-2b12e189eeec => v1.8.0 133eeafeb @bep
- Upgrade to Go 1.23 2168c5b12 @bep #12763

What's Changed
- markup/goldmark/blockquotes: Fix handling of lower/mixed case GitHub alerts d72607adb @bep #12767
- tpl/transform: Don't run ToMath tests in parallel 83235262d @bep #12765
- resources: Add URI GetRemote error 5220d371e @0xB10C
- loggers: Omit map nil check b2d4f67a8 @bep
- github: Add workflow_dispatch to the Docker workflow a99716bf0 @bep #12753
- github: Simplify Docker workflow / only trigger on new tags 98aa53648 @bep #12753
- github: Simplify Docker workflow 9231a7f11 @bep #12753

What's Changed
- github: Adjust image workflow 77304a3cd @bep #12753
- Fix nilpointer regression with empty blockquotes bef9214e1 @bep #12756

Server-side math rendering using KaTeX with render hooks support, blockquote render hooks with GitHub style alerts syntax support, and more.
Bug fixes
- Improve Katex error handling and fix handling of large expressions e1e1baa1b @bep #12748
- Fix compare of uints and ints in eq, gt etc. fbfccb394 @bep #12733
- Fix deprecation errors 69455fa42 @bep
Improvements
- internal/warpc: Add license headers 2192cf7ec @bep
- Add katex option ThrowOnError e42263529 @bep
- Add some more KaTeX options 891aa00fe @bep #12745 #12746
- tpl/transform: Make Plainify and ToMath return template.HTML 946e6af0b @bep #8732
- Add build time math rendering 33c0938cd @bep #11927
- github: Turn off the image workflow for pull request 0c3a1c728 @bep
- github: Update image actions versions and some adjustments ceed81245 @bep
- github: Update GitHub actions versions dbff48e6c @bep
- markup: Add blockquote render hooks 665ac949b @bep #12590
- markup/goldmark/codeblocks: Simplify codeblcok hook code 4c162deb0 @bep
- Add render hooks for inline and block passthrough snippets c6227f1d8 @bep #11927
- tpl/cast: Improve float 10891f305 @bep #12718
- Skip TestEchoParam c07e94fa6 @bep
Dependency Updates
- deps: Upgrade github.com/bep/imagemeta v0.7.6 => v0.8.0 5d84f6475 @bep #12741
- build(deps): bump golang.org/x/net from 0.27.0 to 0.28.0 1781b1842 @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.18.0 to 0.19.0 d6d9dddff @dependabot[bot]
- build(deps): bump github.com/bep/imagemeta from 0.7.5 to 0.7.6 (#12720) 8f8d12ab2 @dependabot[bot] #12718
Documentation
- docs: Regen docshelper ef2e30eca @bep
Build Setup
- github: Build and publish Docker image on release b08de70cc @morremeyer #10760

Note that if you use Hugo's image processing, your processed images will get new (shorter!) file names when you build your site with this release. We have upgraded a third party hashing library to fix some rare but potential hash collisions, and since this would change some of the image hashes, we thought we might as well do some other related changes: We now use xxHash to create the image file hashes (very fast!) and we have removed the verbose processing information, making the filenames much shorter.
This release is also a full dependency refresh and it comes with one notable and very useful new feature. It is now possible to use permalink tokens in the front matter url. See the documentation for more info. Thanks to @n1xx1 for the implementation.
Note
- identity: Use xxHash in hashstructure (note) 2babd6404 @bep
Bug fixes
- Fix images.AutoOrient regression 944fcc216 @bep #12712
Improvements
- revamp pagegroup tests with quicktest 914fa13ef @n1xx1
- allow nested params when using Pages.GroupByParam and Pages.GroupByParamDate 51f09b17f @n1xx1
- Run go mod tidy a5db76fe6 @bep
- resources/page: Expand parmalinks tokens in url 566fe7ba1 @n1xx1 #9714
- Bump to go 1.21 in go.mod 92573012e @bep
- tpl: Sync Go template packages with the Go 1.22.5 source 071f8b446 @bep
- Upgrade to Go 1.22.5 ae9d5e7d8 @bep
- Shorten processed image filenames 216a69a1e @bep #12688 #12656
- Consolidate all hashing to the common/hashing package e67886c03 @bep
- Replace the MD5 hashing of images with xxHash d5eda13cb @bep
- resources: Add BenchmarkHashImage 8b5d79698 @bep
- identity: Upgrade to github.com/mitchellh/hashstructure/v2 v2.0.2 78db8aebc @bep #11644
- identity: Add BenchmarkHashString 3140e0b99 @bep
Dependency Updates
- build(deps): bump github.com/bep/godartsass/v2 from 2.0.0 to 2.1.0 be643580d @dependabot[bot]
- build(deps): bump google.golang.org/api from 0.152.0 to 0.189.0 20e4dd2ee @dependabot[bot]
- build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 f41149979 @dependabot[bot]
- build(deps): bump gocloud.dev from 0.36.0 to 0.38.0 47fee839f @dependabot[bot]
- build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.3 99665ef22 @dependabot[bot]
- build(deps): bump github.com/kyokomi/emoji/v2 from 2.2.12 to 2.2.13 eb2eeee68 @dependabot[bot]
- deps: Upgrade github.com/hairyhenderson/go-codeowners v0.4.0 => v0.5.0 bea5a46de @bep
- build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 f1a7f3d01 @dependabot[bot]
- build(deps): bump github.com/evanw/esbuild from 0.21.4 to 0.23.0 08243be1d @dependabot[bot]
- build(deps): bump github.com/tdewolff/minify/v2 from 2.20.36 to 2.20.37 0490a8a16 @dependabot[bot]
- Revert "deps: Set toolchain go1.21.0 in go.mod" d795cacd7 @bep
- deps: Set toolchain go1.21.0 in go.mod 78c9a18b0 @bep
- deps: Upgrade golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d => v0.23.0 79aa2ab61 @bep
- deps: Replace github.com/mitchellh/hashstructure/v2 with github.com/gohugoio/hashstructure c9d7577cb @bep #11644
- deps: Upgrade github.com/bep/imagemeta v0.7.4 => v0.7.5 9989404d9 @bep
- deps: Upgrade github.com/aws/aws-sdk-go-v2 v1.26.1 => v1.30.3 b81ba2a0f @bep
- deps: Upgrade to github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.7.0 afdd87db5 @bep

What's Changed
- math: Add trigonometric functions and some angle helper functions 9d2b5f98d @raoulb
- Switch EXIF library 72ff937e1 @bep #10855 #8586 #8996
- deps: Upgrade github.com/bep/imagemeta v0.7.3 => v0.7.4 0e0056162 @bep
- deps: Upgrade github.com/bep/imagemeta v0.7.1 => v0.7.3 71842140d @bep
- readme: Pull the star history down a little cb95a033c @bep
- deps: Upgraded github.com/bep/imagemeta v0.7.0 => v0.7.1 324051115 @bep #12669

Note
- deps: Upgrade github.com/bep/gitmap v1.4.0 => v1.6.0 (note) 7be037750 @bep #8627
Bug fixes
- commands: Fix --navigateToChanged server behavior when editing headless content cc2d19e19 @bep #12648
- commands: Fix hugo mod get -u ./... 251a23ef7 @bep #12625
Improvements
- tpl: Use xxHash instead of MD5 to hash the deferred templates 4d8bfa7f1 @bep
- Throw error if resources.PostProcess is used in a deferred template f0ed91cab @bep #12655
- commands: Simplify the browser live reload logic 094f74675 @bep #12643
- Use xxHash for the change detector fb8909d5b @bep #12643
- source: Expose GitInfo Body 0ee2610d7 @PeskyPotato #10905
- Add hash.XxHash 644d55475 @bep #12635
Dependency Updates
- deps: Go mod tidy 439f07eac @bep
- deps: Upgraded github.com/tdewolff/minify/v2 v2.20.20 => v2.20.36 ce5a2ce00 @bep
- deps: Upgrade to golang.org/x/image v0.18.0 0f42d975e @bep

What's Changed
- Fix site.GetPage, never do short lookups for paths with leadig slash 8cf96f244 @bep #12638

What's Changed
- Fix it so publishDate rolls up to section, taxonomy, or term pages 7b6dafc53 @bep #12438
- create/skeletons: Fix languageCode region subtag a95fe5061 @CyrusYip
- Update README.md 932ab4c05 @jmooring

Bug fixes
- tpl/debug: Fix reset of debug timers when running the server c880faa99 @bep #12621
- Fix Erroridf/Warnidf mixed case issue 8731d8822 @bep #12617
- Fix live reload when both CSS and HTML changes ad6d91cab @bep #12600
- config: Fix typo 7ee36b371 @razonyang
Improvements
- Add css.TailwindCSS e1317dd32 @bep #12618 #12620
- Clean up the css related template funcs package structure eddcd2bac @bep #12618
- modules: Remove newly introduced "mount source" does not exist warning 16e4662b7 @bep
- Implement defer 6cd0784e4 @bep #8086 #12589
- common/hexec: Fall back to the binary in PATH if npx fails 1c85830bc @bep #12486
- deploy: Add stripIndexHtml target option d5542ed28 @depp #12607
- Speed up GetTerms 478a9107a @bep #12610
- markup/goldmark: Add the Hugo Goldmark Extras "delete" extension 8efc75b73 @jmooring #12597
- resources: Update Dart Sass error message 57165d44e @jmooring
- resources/page: Deprecate PageSize in favor of PagerSize 9c3143c45 @bep #12572
- Rename DefaultPageSize => PagerSize 9f22bc441 @bep
- resources/page: Let GroupByParam return nil instead of error cba2de6ec @jmooring #12578
- Add option to not generate aliases for first page of pagination pages 9c4e14eb4 @bep #12572
- js: Support more recent targets with js.Build / esbuild 1cdd3d0a9 @bep #12575
Dependency Updates
- deps: Upgrade github.com/yuin/goldmark v1.7.2 => v1.7.4 79da24a0e @jmooring
- deps: Upgrade github.com/yuin/goldmark-emoji v1.0.2 => v1.0.3 b187c0658 @jmooring
- deps: Upgrade github.com/alecthomas/chroma v2.13.0 => v2.14.0 8cf94aea7 @jmooring #12580
- deps: Upgrade github.com/evanw/esbuild v0.20.2 => v0.21.4 b57306d61 @bep #12575
Build Setup
- Delete unused release hook script 1687a9a58 @bep #12378
Documentation
- Update README.md 3b724462c @bep
- Update README.md b46d101d5 @bep

This release brings proper HTTP caching and live reloading of remote resources fetched with resources.GetRemote, especially useful when used with content adapters.
Note that this isn't enabled out of the box, so if you need this, you need to add some configuration. The demo below is configured as:
[httpcache]
[httpcache.cache]
[httpcache.cache.for]
includes = ['https://sheets.googleapis.com/**']
[[httpcache.polls]]
high = '30s'
low = '1s'
[httpcache.polls.for]
includes = ['https://sheets.googleapis.com/**']
https://github.com/gohugoio/hugo/assets/394382/85ecc217-3342-4ed2-ae8a-ed357a658b64
What's Changed
- Add a HTTP cache for and polling configuration for remote resources. 447108fed @bep #12502 #11891
- Misc remote HTTP/content adapter enhancements 2b05a50f8 @bep #12502 #12570

- content adapter: Fix site.GetPage using the base part of the path 917199a94 @bep #12561
- resources/page: Deprecate .Sites.First in favor of .Sites.Default c8dac67de @jmooring #12513
- metrics: Increase maximum length of cumulative duration to 15 0068f0329 @razonyang
- content adapter: Handle more separator in content.value 0221ddb39 @bep #12556

Bug fixes
- content adapter: Fix server crash on partial edit 1464091ad @bep #12538
- content adapter: Fix issue with content starting out with a shortcode 519f41dbd @bep #12544
- tpl/tplimpl: Resolve render hook destinations with leading ./ b893a09aa @jmooring #12514
Improvements
- Delete .github/workflows/test-dart-sass-v1.yml 2c88e454d @bep
- commands: Add shorthand flags -M (--renderToMemory) and -N (--navigateToChanged) eaa42a875 @bep #12530
- content adapter: Add support for menus in AddPage 245928a1f @bep #12507
- hugolib: Allow override of sitemap file name 7f3061723 @jmooring #12525
- commands: Improve list command 931e096f2 @jmooring #12520
- config: Remove extraneous BuildConfig setting 548dc2137 @jmooring #12519
- Also warn about duplicate content paths with --printPathWarnings 6b006616e @bep #12511

What's Changed
- Fix mixed case Page params handling in content adapters 39cf906bc @bep #12497
- Fix paths with dots issue with content adapters 1aacfced3 @bep #12493

This release brings, drum roll, a long-awaited Hugo feature that has had many names. At one point we named it pages from data. You can read all about it in the documentation where it's titled Content Adapters.
Also worth mentioning are the new Extras Goldmark Extensions, which allows you to enable Markdown syntax for inserted text, mark text, subscript and superscript. A big thanks to @bowman2001 for the implementation.
Improvements
- tpl/tplimpl: Plainify title and description in twitter_cards.html 74ab839cc @jmooring #12433
- tpl/tplimpl: Plainify title and description in schema.html 92290aa89 @jmooring #12432
- resources/images: Handle NaN EXIF latitude and longitude 6dbbe6dd3 @jmooring #12490
- Create pages from _content.gotmpl e2d66e321 @bep #12427 #12485 #6310 #5074
- create/skeletons: Remove superfluous language code fallback 55dea41c1 @jmooring #12479
- tpl/tplimpl: Improve locale value in opengraph.html 87ab7f7ff @jmooring #12480
- tpl/tplimpl: Retain query string and fragment in render-image.html 6dfeb9f03 @jmooring #12468
- markup/goldmark: Support extras extension ca9a77ef9 @jmooring
Dependency Updates
- build(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 ee26e69ce @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.15.0 to 0.16.0 6e83d00a8 @dependabot[bot]
Documentation
- docs: Regen docshelper 266140251 @bep
Build Setup
- livereload: Improve the livereload script build and update to v4.0.2 d02f0622b @bep #12451 #6290

Note that this release is only relevant if you use Hugo's openapi3.Unmarshal template function.
What's Changed
- deps: Downgrade github.com/getkin/kin-openapi v0.124.0 => v0.123.0 3c6260f04 @bep

What's Changed
- Fix one more resource change eviction logic issue bb59a7ed9 @bep #1239 #12456
- Make the cache eviction logic for stale entities more robust 503d20954 @bep #12458
- build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2 68e95327f @dependabot[bot]
- Run mage generate 9cd7db61d @bep
- resources/page: Pull internal Page methods into its own interface c892e75fb @bep

What's Changed
- Fix rebuilds on cascade deletes/renames 7be7f89bf @bep #12449
- commands: Print "Webserver is ..." right before "Total ..." c8e400b62 @bep #12384
- Make sure replaced pages gets marked as stale 9dd687027 @bep #12436

What Changed
- Fix rebuilds when running hugo -w 7203a95a6 @bep #12296
- tpl/tplimpl: Fix double-escaping in opengraph template fb51b698b @jmooring #12418
- commands: Clarify that create or install a theme are two options fe84cc218 @Habbie
- config: Setups with only one active language can never be multihost babcb339a @bep #12288
- Use Apache License without modification 6b867972e @bep #12415
- build(deps): bump github.com/tdewolff/minify/v2 from 2.20.19 to 2.20.20 fb084390c @dependabot[bot]

This release fixes a security issue reported by @ejona86 (see #12411) that could allow XSS injection from Markdown content files if one of the internal link or image render hook templates added in Hugo 0.123.0 are enabled. You typically control and trust the content files, but according to Hugo's security model, we state that "template and configuration authors (you) are trusted, but the data you send in is not."
- markup/goldmark: Fix data race in the hugocontext wrapper 509ab08c1 @bep
- tpl: Escape .Title in built-in image and link render hooks 15a4b9b33 @bep
- tpl/tplimpl: Improve embedded templates 10a8448ee @jmooring #12396
- SECURITY.md: Update link to security model 722c486a3 @ejona86
- modules: Fix potential infinite loop in module collection f40f50ead @bep #12407

What's Changed
- Only add root sections to the section pages menu 06d248910 @bep #12399
- Fix partial rebuilds for SCSS fetched with GetMatch and similar Fixes #12395 004b69439 @bep
- commands: Add gen chromastyles --lineNumbersTableStyle flag da6112fc6 @jmooring #12393
- resources/images: Fix TestColorLuminance on s390x faf9fedc3 @bep
- commands: Provide examples for chromastyles flags 11aa89319 @jmooring #12387

What's Changed
- tpl: Use erroridf for remote YouTube errors 0c188fda2 @bep #12383
- build: Fix `GLIBC_2.29' not found issue bbc6888d0 @bep #12381

Some of the notable new features in this release:
- strings.Diff template func.
- .PageInner in render hooks to get the inner page when using .RenderShortcode in a shortcode, typically used to resolve links and page resources relative to an included Page.
- Add Luminance to $image.Colors, allowing for sorting by luminance. e197c7b29 @bep #10450
This release is built with Go 1.22.2 (#12351) which comes with a fix for security issue CVE-2023-45288. We don't see how that could be exploited in Hugo, but we do appreciate that people want a clean security report.
Bug fixes
- Fix server rebuilds when adding a content file on Linux fa60a2fbc @bep #12362
- helpers: Fix TrimShortHTML when used with AsciiDoc content 6049ba99f @jmooring #12369
- github: Fix CI build 9323376df @bep
- all: Fix duplicate words in comments bf0b14036 @grimreaper
- all: Typo fixes 17765a745 @coliff
- hugolib: Fix regression for blank summaries 26640525a @curegit
- Fix sectionPagesMenu for pages in root level 488b21d15 @bep #12306
- Fix resource bundling for overlapping page.md vs page.txt 983b8d537 @bep #12320
- Fix panic with debug.Dump with Page when running the server 38e05bd3c @bep #12309
- resources/page: Fix GoDoc comment 27414d43a @availhang
Improvements
- Add Luminance to Color e197c7b29 @bep #10450
- Pass .RenderShortcodes' Page to render hooks as .PageInner df11327ba @bep #12356
- github: Add a "free space" step on Ubuntu 8e50ccfae @bep
- helpers: Add BenchmarkTrimShortHTML bfc3122f8 @bep
- github: Update actions 00ae8e8c7 @bep
- github: Format GitHub actions files e423e5627 @bep
- hugolib: Display server address after each rebuild 09eb82282 @jmooring #12359
- resources/page: Add taxonomies Page method a6e843917 @jmooring #12316
- commands: Adjust completions 38f68cd16 @bep
- completion: Improve existing argument completions, add many more a67650b6f @scop
- Upgrade to Go 1.22.2 2a060b37a @bep #12351
- babel: Run go fmt 92de8625c @bep
- babel: Close file before removing 7907935a4 @testwill
- bump golang.org/x/mod from 0.16.0 to 0.17.0 02d5ec14f @dependabot[bot]
- resources/page: Escape hash sign in permalinks 4500b0e42 @sorenisanerd #4926 #8232 #12342
- tpl/strings: Improve type checking 7bf1abfc5 @jmooring
- tpl/tplimpl: Improve youtube shortcode 8a0ea12d8 @jmooring #3694 #9213 #10520 #10575 #10576
- errors: Return error from cast.ToStringE() consistently 6f07e5976 @seiyab
- tpl/tplimpl: Improve embedded opengraph template 2da4ec573 @jmooring #8296 #8698 #8991 #9818 #9866 #10647
- tpl/strings: Create strings.Diff template function 6624979e1 @jmooring #12330
- tpl/tplimpl: Optionally exclude content from sitemap 6738a3e79 @jmooring #653 #12282
- tpl/tplimpl: Remove trailing slash from void elements 2f7df4b92 @jmooring #11867
- tpl/tplimpl: Update RSS template f0a26cf58 @jmooring #3918 #11692
- tpl/tplimpl: Update schema template 74ce5dc84 @jmooring #7570
- resources: Use different cache key when copying resources 54a8f0ce2 @jmooring #10412 #12310
- tpl/tplimpl: Update Google Analytics template and config ebfca61ac @jmooring #11802 #10093
- hugolib: Conditionally suppress .Site.Author deprecation notice e1917740a @jmooring #12297
Dependency Updates
- build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.0 to 2.2.1 fe63de3a8 @dependabot[bot]
- build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0 a18e2bcb9 @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.19.0 to 0.20.0 97df6be59 @dependabot[bot]
- build(deps): bump golang.org/x/net from 0.23.0 to 0.24.0 e9b8bec43 @dependabot[bot]
- build(deps): bump github.com/getkin/kin-openapi from 0.123.0 to 0.124.0 888cc1e61 @dependabot[bot]
- build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.1 to 2.2.0 060cce0a9 @dependabot[bot]
- build(deps): bump github.com/yuin/goldmark from 1.7.0 to 1.7.1 5608ba1f7 @dependabot[bot]
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudfront 2fedca6c8 @dependabot[bot]
- build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 07873

What's Changed
- Fix potential deadlock in Translations 758a876f9 @bep #12129
- Fix rebuild when changing mixed case named templates 19937a20a @bep #12165
- testing: Set usesFMA as true for riscv64 too c1ea22a23 @anthonyfok
- Fix regression for outputs defined in front matter for term pages 0750a9ec9 @bep #12275

Bug fixes
- Fix .Parent when there are overlapping regular pages inbetween f1d755965 @bep #12263
- hugolib: Fix sitemap index with monolingual site 3935faa41 @jmooring #12266
- all: Typo fixes 78178d0c2 @coliff
- Fix translationKey handling for term pages 68d92ef9d @bep #12261
- Fix intersect and similar for term entry page collections b40f3c7df @bep #12254
- Fix server rebuilds when adding sub sections especially on Windows 07b2e535b @bep #12230
- Fix panic when changing archetype files when servere is running 9ca1de09d @bep #12195
- Fix front matter date location when value gets inherited from other dates 9668759ad @bep #12236
- Fix Name for nested resourced fetched in resources.ByName and similar 9e9b1f110 @bep #12214
Improvements
- Add segments config + --renderSegments flag 1f1c62e6c @bep #10106
- hugolib: Remove Site.HomeAbsURL 558f74f00 @bep
- hugolib: Deprecate site methods Author, Authors, and Social d4d49e0f0 @jmooring #12228
- Upgrade to Go 1.22.1 57206e727 @bep #12250
- tpl/tplimpl: Modify figure shortcode to look for page resource 48a0fea87 @jmooring #12244 #12245
- common/hugo: Rename IsMultiHost and IsMultiLingual dc6a29213 @jmooring #12232
- hugolib: Deprecate .Site.MultiLingual in favor of hugo.IsMultiLingual 4f92f949e @jmooring #12224
- tpl/tplimpl: Remove deprecated method from sitemapindex.xml f038a51b3 @jmooring
Dependency Updates
- deps: Upgrade github.com/gohugoio/hugo-goldmark-extensions/passthrough v0.1.0 => v0.2.0 ba03114aa @bep
- build(deps): bump github.com/evanw/esbuild from 0.20.1 to 0.20.2 b1f867634 @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.18.0 to 0.19.0 b4bff6190 @dependabot[bot]
- build(deps): bump github.com/tdewolff/minify/v2 from 2.20.17 to 2.20.19 d2cebee27 @dependabot[bot]
- deps: Upgrade github.com/alecthomas/chroma/v2 to v2.13.0 be914ff34 @myitcv #11862
- build(deps): bump golang.org/x/mod from 0.15.0 to 0.16.0 e62675002 @dependabot[bot]
Documentation
- docs: Regen CLI docs 76ef3f42f @bep
- docs: Regen docshelper 0ccb6cdc0 @bep
Build Setup
- snap: Transition to from core20 to core22 d24ffdde5 @jmooring #12219

- docs: Fix hyphens and grammar in synopsis of command 'hugo server' ada3fceea @deining
- Fix resource name in resources.ByType a4b17470a @bep #12190
- Fix global resource isn't published when using an uncommon code construct 4d5e173cf @bep #12190
- Fix section page resource not published if resource filename partially matches content file name 4271b6be0 @bep #12198
- Fix taxonomy kind template lookup issue 0567a3e6f @bep #12193
- markup/goldmark: TOC: render strikethrough, emojis 134e7d1d3 @lyind #7169 #11783 #12022
- Add hugo.IsMultiHost 1f48b717c @razonyang
- resources/images: Retain newlines with text overlays 05e23bd55 @jmooring #12206
- Don't auto-create empty sections for nested taxonomies 7afac3f1a @bep #12188
- tpl/tplimpl: Honor markdown attributes in embedded image render hook 632ad74fc @jmooring #12203

What's Changed
- hugofs: Fix vertical mount merge issue 2b2f2b75e @bep #12175
- Fix and add integration test for the Bootstrap SCSS module for both Dart Sass and Libsass 0d6e593ff @bep #12178
- Fix resources.GetMatch, resources.Match, and resources.ByType to they don't normalize permalinks 7023cf0f0 @bep #12182
- Make sure that sitemaps gets generated even if there is a content bundle with the same path 9dfa9e70e @bep #12183
- resources/page: Make Taxonomy.Get and Taxonomy.Count case-insensitive 3f217fd66 @jmooring #12177

What's Changed
- Fix panic when cascading headless from site config to section that does not have an _index.md file fce8d82b7 @bep #12172
- Fix assets vs data issue 4a502f7eb @bep #12133
- Fix draft for non-default content when content in default language does not exist be1dbba0f @bep #12132

What's Changed
- Fix .Page.Pages with similary named sections 6a8b25e29 @bep #12169
- Fix single mount rename panic a322282e7 @bep #12141
- Fix multihost processed image not copied to non-default content languages 6bc0d745a @bep #12163
- build(deps): bump github.com/bep/overlayfs from 0.9.1 to 0.9.2 218690328 @dependabot[bot]

- Fix cascade-pattern-with-extension for cascade in site config 1736ef745 @bep #12151
- Fix term template lookup when its backed by a content file f27e57871 @bep #12146
- Fix panic for disableKinds page for content resources 049dd1d7e @bep #12144
- tocss: Fix the import resolving from absolute to relative assets paths 189b72331 @bep #12137
- config/allconfig: Fix typo 80e69344d @jmooring #12134
- resource: Revert the normalization of Resource.Name d310595a2 @bep #12142
- build(deps): bump github.com/spf13/fsync from 0.10.0 to 0.10.1 d4be1643a @dependabot[bot]

Bug fixes
- hugolib: Fix a .Page.GetPage from bundle case f521336c8 @bep #12120
- cache/dynacache: Reset ticker in case one cache eviction takes some time 03b88c6dd @bep #12129
- Speed up GetPage bf14d0cb2 @bep
- resources: Skip the image golden tests when running locally c4fe45ff4 @bep #12119
- js: Support JSX and JSXImportSourceOptions 554aa58db @baltpeter #12118
- hugolib: Add capitalizeListTitles config option 36bf3cb98 @jmooring #9793 #12115

What's Changed
- Fix it so not all bundled resources are removed when one translation is drafted db3bb623d @bep #12105
- commands/mod: Ignore invalid module path f5fd7ec8c @razonyang
- Fix regression on handling of overlapping file mounts 16406d9d7 @bep #12103
- Sitemap should not use list.xml e75784930 @bep #12101
- Fix rebuild when adding a bundle with space in name b8ab5c9be @bep #12092
- Fix relative import issue in libsass/dart sass cf7023cb9 @bep #12094
- Fix relref regression with trailing slash fd0185a84 @bep #12096

- Fix server rebuilding of pages without default content language eceeb1975 @bep #12082
- Fix dart sass import regression 621194a31 @bep #12072
- Fix robots.txt using the built-in template regression a118cb413 @bep #12071
- tpl/tplimpl: Resolve fragments in link render hook c9f7ebf00 @jmooring #12084
- Fall back to original name in Resources.GetMatch/Match 48eec2a4e @bep #12076

The work title for the v0.123.0 release has been "the million pages release", introducing a new memory limit that allows for a streaming build, shifting large objects out of memory when not in use. This release is also a rewrite of the Hugo core, fixing lots of long-lived bugs and adding some other exciting improvements (see below). There are some breaking changes that have been announced for a long time. Most sites will not be affected by this, but we recommend that you test your site with the new Hugo version before you set it up to build to production. Many people have contributed to this release, but a special shoutout goes to @bep and @jmooring, but also to @TiGR and @McShelby for their help testing and reporting bugs.
A list of notable new features:
- You can now set a upper memory limit (default 25% of system memory) via the OS environment variable HUGO_MEMORYLIMIT (in gigabytes) allowing for much larger data/page sets and/or running on lower specced PCs. This is backed by a partitioned LRU cache used throughout Hugo. A cache that gets dynamically resized in low memory situations, allowing Go's Garbage Collector to free the memory. Note that for regular sized Hugo sites, the performance should be about the same as before.
- New dependency tracker for partial server rebuilds. This quickly calculates the delta given a changed resource (e.g. a content file, template, JS file etc.) and supports transitive relations.
- A new document store. Previously, a little simplified, we split the document store (where we store pages and resources) in a tree per language. This worked pretty well, but the structure made some operations harder than they needed to be. We have now restructured it into one Radix tree for all languages. Internally the language is considered to be a dimension of that tree, and the tree can be viewed in all dimensions concurrently. This makes some operations re. language simpler (e.g. finding translations is just a slice range), but the idea is that it should also be relatively inexpensive to add more dimensions if needed (e.g. role). With this we also introduce a new logical page Path which we will used going forward to support other content data sources.
- Add warnidf template function, see docs
- Add the [params] concept to front matter, see docs
- Add images.Dither filter, see docs
Bug fixes
- Fix handling of build options for term pages 5ada27bf6 @bep #12058
- Fix sample logic when adding content files in server afe5b6d7d @bep #12054
- all: Fix typos and some URLs 168d37578 @coliff
- Fix handling of draft term pages fc6aabe93 @bep #12055
- commands: Fix --clock with the list command 4835f9e89 @bep #11888
- Fix server panic on i18n file change 9679443c1 @bep #12048
- Fix rebuild regression on non-default content language edits 68f67c9ae @bep #12043
- Fix i18n rebuild regression f1491c900 @bep #12039
- Fix rebuild with resources.Concat 639073e4f @bep #12017
- all: Fix typos 0672b5c76 @coliff
- resources/page: Fix typo e309f82ef @rosano
- Fix taxonomy term with backing file regression caba6ba6e @bep #12020
- Fix rebuild of changed bundled content files a65622a13 @bep #12000
- Fix site.Taxonomies for taxonomies with space in name 146aedd7a @bep #12001
- Misc resource fixes/improvements 287332489 @bep #11974
- Fix disabled languages regression 4174a7866 @bep #11959
- tpl/data: Fix GetCSV deprecation message 5dd06b413 @jmooring
- Fix failing test on Windows d8f0e3071 @bep
- deploy: Fix CloudFront invalidation with AWS SDK2 d8c273417 @bep
- Fix build error 34d63c8d1 @bep
- Fix recent regression .Resources.Get for resources with spaces in filename 80595bbe3 @bep #11944
- hugofs/glob: Fix dropped test error ec22bb31a @alrs
Improvements
- Handle rebuilds when resources passed to transform.Unmarshal etc. changes 5dbc29dc6 @bep #12065
- Don't use the same value in .Data.Term.Title as in .Title 5bdda0bdb @bep #12041
- Let standard library handle charset parameter to MIME types 43ea2cd66 @datosh #10734
- Add images.Dith

Bug fixes
- tpl/tplimpl: Fix incorrect lastBuildDate 87bf2b968 @tastapod #11600
- tpl: fix incorrect lastBuildDate f281ef8a4 @tastapod #11600
Improvements
- markup/goldmark: Support passthrough extension d0d2c6795 @j2kun #10894
- parser/metadecoders: Accumulate org keywords into arrays 46f618756 @augustfengd #11743
- Upgrade to Go 1.21.6 a541e3b4d @bep #11892
- parser/metadecoders: Add CSV lazyQuotes option to transform.
Unmarshal 912c6576b @jmooring #11884
Dependency Updates
- build(deps): bump golang.org/x/tools from 0.16.0 to 0.17.0 e0021f496 @dependabot[bot]
- build(deps): bump github.com/rogpeppe/go-internal from 1.11.0 to 1.12.0 d25902c0d @dependabot[bot]
- build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.0 to 2.1.1 2dd608378 @dependabot[bot]
- build(deps): bump github.com/evanw/esbuild from 0.19.8 to 0.19.12 45f52be7f @dependabot[bot]
- deps: Update github.com/tdewolff/minify/v2 v2.20.9 => v2.20.13 891534307 @jtatum
Documentation
- docs: Regen docshelper 50042ee1f @bep
- README: Update minimum Go version to 1.20 911bc60a7 @jmooring

The main motivation behind this release is a security fix in the upstream golang.org/x/crypto library. We don't see how that CVE could be exploited via Hugo, but we do appreciate that many want to have a clean security report.
There's also some new features in this release:
- AutoOrient image filter
- math.Rand

What's Changed
- build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 1ccd314 @dependabot[bot]
- tpl/math: Add math.Rand template function e40b9fb @jmooring #11833
- resources/images: Create AutoOrient image filter 648d00c @jmooring #11717
- all: Remove unused code 8adba64 @bep

The only change in this release is that the release binaries is compiled with Go 1.21.5 which contains some security fixes that's relevant for Hugo. See here for more information.

- Upgrade to Go 1.21.5 eb9f1eb @bep #11786

There are some minor new features in this release, but it's mostly a release with bug fixes and dependency updates. One notable dependency update is libweb v1.3.2 which comes with a security fix for the Webp decoder (chromium: #1479274, CVE-2023-4863). Hugo only uses the encoder (we use Go's native Webp decoder) so we're not affected by this, but we have been contacted by some corporate Hugo users who's eager to have a clean security report.

Notes
- kin-openapi v0.122.0 has some minor breaking API changes which, from Hugo's side of it, can be adapted by using the new .Map accessors if you get an error.

Bug fixes and enhancements
- github: Fix CI build on Windows 6d4b012 @bep
- Fix handling of dropped error in test 26a8ec2 @alrs
- resources/resource: Fix GroupByParamDate with raw TOML dates dd6cd62 @jmooring #11563
- helpers: Fix TrimShortHTML used by markdownify and RenderString 0bde693 @jmooring #11698
- Pull in the latest code from Go's template packages (#11771) 9f978d3 @bep #10707 #11507
- tpl: Allow using page resources on the images page parameter for opengraph, schema and twitter_cards templates 14d85ec @razonyang
- hugolib: Apply titleCaseStyle to automatic section pages 171836c @jmooring #11547
- tpl/urls: Retain query and fragment with absURL and absLangURL 9ea7103 @jmooring #11772
- markup: Add Level to Heading struct 3fc42da @jmooring #10776
- tpl/fmt: Print suppression help with erroridf d24da17 @jmooring #11506
- tpl/transform: Display Chroma highlighting errors 4583b41 @jmooring #9642
- common/para: Skip flaky test on CI e2a624d @bep
- watcher: Skip flaky test for now 30a18e8 @bep
- tpl/transform: Add transform.XMLEscape template function b4c5df4 @jmooring #3268
- tpl/tplimpl: Remove superfluous type attr on script elements 8d32ca2 @jmooring #6379
- common/para: Skip flaky tests on Windows 27620da @bep
- navigation: Unexport menu entry methods 80d2fdb @jmooring #11670
- markup/goldmark: Sync image render hook code with Goldmark 805cc17 @jmooring #11681

Dependency Updates
- build(deps): bump github.com/alecthomas/chroma/v2 from 2.11.1 to 2.12.0 558f325 @dependabot[bot]
- build(deps): bump github.com/tdewolff/minify/v2 from 2.20.8 to 2.20.9 507f4e3 @dependabot[bot]
- build(deps): bump github.com/spf13/cast from 1.5.1 to 1.6.0 a7e721e @dependabot[bot]
- build(deps): bump github.com/getkin/kin-openapi from 0.121.0 to 0.122.0 2627b91 @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.13.0 to 0.14.0 e536d46 @dependabot[bot]
- deps: Update github.com/tdewolff/minify/v2 v2.20.7 => v2.20.8 bfc325f @jmooring #5748
- build(deps): bump github.com/spf13/afero from 1.10.0 to 1.11.0 36a60f6 @dependabot[bot]
- build(deps): bump github.com/evanw/esbuild from 0.19.7 to 0.19.8 de2fcc5 @dependabot[bot]
- build(deps): bump google.golang.org/api from 0.151.0 to 0.152.0 9ca889b @dependabot[bot]
- deps: Upgrade to libwebp 1.3.2 4fb40ee @bep #11746
- build(deps): bump github.com/aws/aws-sdk-go from 1.48.4 to 1.48.6 bc93a36 @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.15.0 to 0.16.0 3e5bc6f @dependabot[bot]
- build(deps): bump github.com/getkin/kin-openapi from 0.120.0 to 0.121.0 7c47036 @dependabot[bot]
- build(deps): bump github.com/bep/logg from 0.3.0 to 0.4.0 4d07e1f @dependabot[bot]
- deps: Upgrade to github.com/bep/simplecobra v0.4.0 1c41232 @bep
- build(deps): bump github.com/aws/aws-sdk-go from 1.48.2 to 1.48.4 f11ca0f @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.14.0 to 0.15.0 d7a2f3f @dependabot[bot]
- build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1 ef12d16 @dependabot[bot]
- build(deps): bump github.com/fatih/color from 1.15.0 to 1.16.0 a62bbfa @dependabot[bot]
- build(deps): bump golang.org/x/net from 0.17.0 to 0.18.0 5887230 @dependabot[bot]
- build(deps): bump github.com/evanw/esbuild from 0.19.5 to 0.19.7 a4a66b8 @dependabot[bot]
- build(deps): bump github.com/alecthomas/chroma/v2 from 2.10.0 to 2.11.1 813390b @dependabot[bot]
- build(deps): bump github.

The only change in this release is that the release binaries are compiled with Go 1.21.4 which comes with a security fix for Windows that may be relevant for Hugo. See:
- https://github.com/golang/go/issues?q=milestone%3AGo1.21.4+label%3ACherryPickApproved
- Especially golang/go#63715

What's Changed
- Upgrade to go 1.21.4 9315a2d @bep #11685

What's Changed
- tpl/tplimpl: Fix deprecation logic in embedded templates cb98e90 @jmooring #11658
- Remove some old and unused deprecation code 5fa97ee @bep
- Add a field prefix to the deprecated log statements 4d38f47 @bep
- Avoid double printing INFO deprecation messages 80f793c @bep #11645
- build(deps): bump github.com/tdewolff/parse/v2 from 2.7.1 to 2.7.3 a9079d7 @dependabot[bot]
- build(deps): bump github.com/tdewolff/minify/v2 from 2.20.1 to 2.20.5 4914b7f @dependabot[bot]

What's Changed
- Fix deprecation printing on info level ab21433 @bep #11638
- tpl/tplimpl: Fix deprecation logic in RSS template 23fcfb7 @jmooring #11639

What's Changed
- deps: Update github.com/tdewolff/minify/v2 v2.20.0 => v2.20.1 2bedcf3 @jmooring #11633

This is a full dependency refresh and a couple of new cool features:
A new Padding image filter, and a new debug.Timer template func. The new debug.Timer is useful for finding performance bottle necks in templates:

{{ $timer := debug.Timer "slowTemplate" }}
// ...
{{ $timer.Stop }}

If you then run hugo --logLevel info you should see timer info logged at the end of the build. You can have as many timers as you want and if you don't stop them, they will be stopped at the end of build.
Hugo now also builds release binaries for Solaris now that a long-living issue in the upstream ƒsnotify library has been fixed, thanks to @nshalman.

Notes
- The enableEmoji flag now only works for Markdown content. This is unfortunate, but the old solution has some known issues and it was too hard to make it work properly as a general thing across all formats. See #11598
- site.DisqusShortname is deprecated 2eca1b3
- site.GoogleAnalytics is deprecated a692278
- site.Author is deprecated d4016dd
- site.Social is deprecated 4910312
Also, we have changed the string type for some of the fields and methods:
- .Fragments.ToHTML not returns template.HTML
- $resource.Data.Integrity now returns a string and not a template.HTMLAttr
- delimit now returns a string and not a template.HTML See #10876 #11502.
- the URL functions now returns a string, see #11536
- The paginator Pager now returns a string.
- site.BaseURL now returns a string.
The above should both solve some issues and make the above types more useful and easer to reason about. But if you use the delimit function to process HTML and see some unexpected escaping after this release, e.g.:

{{ $s := slice "<i>foo</i>" }}
{{ delimit $s "," }}

Then you need to mark the type with safeHTML:

{{ $s := slice "<i>foo</i>" }}
{{ delimit $s "," | safeHTML }}

Bug fixes
- create/skeletons: Fix menu template acf01bf @jmooring #11519
- Fix so hugo get -u updates transitively de4e466 @razonyang
- tpl/tplimpl: Fix dropped error 6251626 @alrs
- tpl/collections: Fix and deprecate echoParams 75f56b4 @jmooring #11498

Improvements
- Add Solaris build 7f8ab74 @bep #3500
- Make site.BaseURL and $pager.URL a string b6a7568 @bep
- commands/new: Remove format flag from new content cmd 27b22cd @jmooring #11462
- hugolib: Display correct markup identifier in error message a2488b1 @jmooring #11538
- livereloadinject: Save some allocations 8f60c0c @bep
- livereloadinject: Use more robust injection method 9dc6080 @DominoPivot
- tpl/urls: Return strings from URL functions a349aaf @jmooring #11511
- transform/livereloadinject: Add benchmark b8fbd4a @bep
- Revert "modules: Throttle the "downloading modules …" log entries" 28d8446 @bep
- Revert "modules: Adjust the log throttle logic a little" eb5fd31 @bep
- resources/images: Create padding image filter 3ed28e4 @jmooring #11599
- markup/goldmark: Update the CJK extension to allow specifying line break styles db14238 @henry0312
- modules: Adjust the log throttle logic a little 3f64b5a @bep
- modules: Throttle the "downloading modules …" log entries 6690409 @bep
- tpl/collections: Make delimit return a string e54139c @bep #10876 #11502
- Revise the deprecation logging 71fd79a @bep
- Remove rest of the now unused emoji code c4a530f @bep #11598
- markdown: Pass emoji codes to yuin/goldmark-emoji 272484f @jmooring #7332 #11587 #11598
- watcher/filenotify: Remove redundant duplicated comments c23a0c4 @alexandear
- tpl/debug: Add average and median to timer output 46bdc03 @bep
- tpl/debug: Add debug.Timer 5160c7e @bep #11580
- Add some convenient integration test helpers fd38171 @bep
- hugolib: Deprecate .Site.DisqusShortname 2eca1b3 @jmooring
- hugolib: Deprecate .Site.GoogleAnalytics a692278 @jmooring
- tpl/tplimpl: Deprecate .Site.Author usage in RSS template d4016dd @jmooring
- tpl/tplimpl: Deprecate .Site.Social usage with internal templates 4910312 @jmooring
- markup/tableofcontents: Return template.HTML from .Fragments.ToHTML 1b5f78b @jmooring #11545
- commands: Update message d

This version is built with Go 1.21.1 which contains some relevant security fixes for the html/template package, see Issue 62196 and Issue 62197. This is the main reason Hugo 0.119.0 is released sooner rather than later. But this release also comes with a dependency refresh and some useful image processing improvements:
- A new general-purpose Process method and filter.
- A new Opacity filter.

Process support all of the existing scaling operations, but it can also be used do simple format conversions (e.g. from JPG to PNG). A before/after example:

{{ $watermark := resources.Get "logo.jpg" | images.Filter
(images.GaussianBlur 6)
(images.Opacity 0.5)
}}
{{ $watermark = $watermark.Resize (printf "%dx%d png" $watermark.Width $watermark.Height )

There are some issues with the above:
1. The source image does not support transparency, so the transparency pixels will be filled with the configured background colour.
2. The image will be decoded and encoded twice with a potential loss in quality.
3. It's clumsy.

With Hugo 0.119.0 the above can be written as:

{{ $watermark := resources.Get "logo.jpg" | images.Filter
(images.GaussianBlur 6)
(images.Opacity 0.5)
(images.Process "png")
}}

- release: Revert to building with Go 1.20 df5d76f @bep #11414

This release only fixes a GLIBC_xxx not found issue with the Linux AMD64 binary when running on older Linux versions, which is the situation when building on Netlify/Vercel etc. 7e9092e @bep #11414
There's no functional changes in this release. See v0.118.0.

Note: Hugo 0.118.1 fixes an issue with the Linux binaries when building on Netlify/Vercel/....

[markup.goldmark]
[markup.goldmark.extensions]
[markup.goldmark.extensions.cjk]
eastAsianLineBreaks = false
enable = false
escapedSpace = false

Bug fixes
- Fix RegularPagesRecursive for the home page 15d3e48 @bep #11396
- Fix .RawContent for empty content pages (#11407) 3a8aad6 @bep #11406
- common/loggers: Fix typo in option name 65871d5 @alexandear
- Fix it so disable a module does not disable transitive dependency required by others dcf425c @bep #11376

Improvements
- Delay the creation of cache directories until they're used 94fbab2 @bep #11390
- deploy: Create AWS session for CloudFront invalidation via Go CDK c3f273b @mattbnz
- markup/goldmark: Add CJK extension d7dcc76 @henry0312 #10472
- testscripts: Move hugo new tests to where they belong d2ae9e1 @bep
- hugolib: Handle dropped error a7b93e6 @alrs
- Make sure resources directory isn't created in hugo new theme ebaa733 @bep #11382
- Go 1.21 Upgrade 24b1be4 @bep #11351
- testscripts: Make mod vendor test stable 111f02d @bep
- create/skeletons: Move theme's site config to top level 9a8c84d @jmooring #11380
- modules: Make new cache directories read/write cdf0b3b @jmooring #11369
- deploy: Update InvalidateCloudFront to use Go CDK helper d979831 @alexandear
- Avoid escaping HTML chars inside hugo_stats.json bcf7421 @bep #11371
- commands/new: Embed site and theme skeletons b653853 @jmooring #11358
- cache: Hide IsResourceDir from the exported config a2f6400 @bep
- commands: Handle floats without decimals in hugo config 7d74cd0 @bep #11345
- config: Add a type value for the tags related config entry b1b6912 @bep
- Try to make test more stable 641390f @bep
- Return original error on resources.GetRemote retry timeouts 22861cb @bep #11327
- testing: Write test caches to /tmp 16da1ad @bep #11327
- Add retry in resources.GetRemote for temporary HTTP errors a3d42a2 @bep #11312
- Add Page.RenderShortcodes ade7ec8 @bep #7297
- Update GitHub issue template 8fa8ce3 @jmooring

Dependency Updates
- build(deps): bump google.golang.org/api from 0.134.0 to 0.138.0 9bf76fd @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.11.1 to 0.12.0 b2a02c3 @dependabot[bot]
- build(deps): bump gocloud.dev from 0.33.0 to 0.34.0 6821d6f @dependabot[bot]
- build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.9 to 2.1.0 93c7ad1 @dependabot[bot]
- build(deps): bump github.com/yuin/goldmark from 1.5.5 to 1.5.6 a19d03b @dependabot[bot]
- build(deps): bump github.com/evanw/esbuild from 0.18.17 to 0.19.2 db7bc49 @dependabot[bot]
- build(deps): bump golang.org/x/net from 0.13.0 to 0.14.0 0de81c6 @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.10.0 to 0.11.0 d4a6c16 @dependabot[bot]
- deps: Sync go-i18n with upstream 2e6191b @bep #11336
- build(deps): bump gocloud.dev from 0.24.0 to 0.33.0 2c20fd5 @dependabot[bot]
- build(deps): bump golang.org/x/net from 0.11.0 to 0.13.0 243736e @dependabot[bot]
- build(deps): bump github.com/marekm4/color-extractor from 1.2.0 to 1.2.1 bf891c2 @dependabot[bot]
- build(deps): bump github.com/frankban/quicktest from 1.14.5 to 1.14.6 da0df0a @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.9.0 to 0.10.0 0885f8e @dependabot[bot]
- build(deps): bump github.com/clbanning/mxj/v2 from 2.5.7 to 2.7.0 61be050 @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.9.3 to 0.11.1 65af75f @dependabot[bot]
- build(deps): bump go.uber.org/automaxprocs from 1.5.2 to 1.5.3 2d75f74 @dependabot[bot]
- build(deps): bump github.com/hairyhenderson/go-codeowners 2ac3d61 @dependabot[bot]
- build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.8 to 2.0.9 9dce45c @dependabot[bot]

Documentation
- docs: Regen docs helper e847a98 @bep
- Don't use the OS environment when creating config for docs 45c9bbc @bep
- dockerfile: Update Docker images 8a08f91 @michalbiesek
- docshelper: Improve template lookup order descriptions 90944aa @jmooring
- docs: Replac

This is a release on the small side, but. especially the new Page.RenderShortcodes method is so useful, especially for bigger sites, that we decided to get it out sooner rather than later. This method renders all the shortcodes in the content, preserving the surrounding markup (e.g. Markdown) as is. See the Hugo Documentation for more information.

Improvements
- Add Page.RenderShortcodes ade7ec8 @bep #7297
- testing: Write test caches to /tmp 16da1ad @bep #11327
- Add retry in resources.GetRemote for temporary HTTP errors a3d42a2 @bep #11312

Dependency Updates
- build(deps): bump golang.org/x/net from 0.13.0 to 0.14.0 0de81c6 @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.10.0 to 0.11.0 d4a6c16 @dependabot[bot]
- deps: Sync go-i18n with upstream 2e6191b @bep #11336
- build(deps): bump gocloud.dev from 0.24.0 to 0.33.0 2c20fd5 @dependabot[bot]
- build(deps): bump golang.org/x/net from 0.11.0 to 0.13.0 243736e @dependabot[bot]
- build(deps): bump github.com/marekm4/color-extractor from 1.2.0 to 1.2.1 bf891c2 @dependabot[bot]
- build(deps): bump github.com/frankban/quicktest from 1.14.5 to 1.14.6 da0df0a @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.9.0 to 0.10.0 0885f8e @dependabot[bot]
- build(deps): bump github.com/clbanning/mxj/v2 from 2.5.7 to 2.7.0 61be050 @dependabot[bot]
- build(deps): bump golang.org/x/tools from 0.9.3 to 0.11.1 65af75f @dependabot[bot]
- build(deps): bump go.uber.org/automaxprocs from 1.5.2 to 1.5.3 2d75f74 @dependabot[bot]
- build(deps): bump github.com/hairyhenderson/go-codeowners 2ac3d61 @dependabot[bot]
- build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.8 to 2.0.9 9dce45c @dependabot[bot]

Documentation
- Update GitHub issue template 8fa8ce3 @jmooring
- Add all config to docshelper.json 851bf35 @bep #11328

What's Changed
- Fix module config watch regression 30885a6 @bep #11313
- deps: Fix Chroma dependency version 58da855 @jmooring #11311

Note
- Deprecate taxonomyTerm bec9b80 @bep #11256
- Warn about unknown kinds in disableKinds 1c97095 @bep #11256

Bug fixes
- resources: Fix spelling in method name be8e2de @bep
- Fix so temporary images do not get published fbb8eb3 @bep #10255
- readme: Fix link 87d9bff @tfsojon
- tpl/collections: Fix description of apply function dc2a544 @jmooring
- Fix multiple languages in HUGO_DISABLELANGUAGES 7f058b8 @bep #11278

Improvements
- config: Do not fail on unknown config keys c1df5b1 @bep
- commands: Update cacheDir description d9fdcbe @jmooring
- Update where.md 295d733 @bep
- Deprecate taxonomyTerm bec9b80 @bep #11256
- Warn about unknown kinds in disableKinds 1c97095 @bep #11256
- Move all Kind constants to its own package b3cb678 @bep #11256
- Remove unused autogenerated method 36b5126 @bep
- tpl/collections: Add BenchmarkWhereOps ef6e813 @bep
- tpl/collections: Add like operator to where function f4598a0 @jmooring #11279
- Use os.UserCacheDir as first fallback if cacheDir is not set b3f1055 @bep #11286 #11291
- Add a common regexp cache 4d7af75 @bep
- commands: Replace deprecated ioutil with os 2589b12 @alexandear

Dependency Updates
- build(deps): bump github.com/evanw/esbuild from 0.18.11 to 0.18.17 d7db096 @dependabot[bot]
- build(deps): bump github.com/rogpeppe/go-internal 5542f02 @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.8.0 to 0.9.0 0bc7ed9 @dependabot[bot]
- deps: Upgrade github.com/yuin/goldmark v1.5.4 => v1.5.5 739d10e @jmooring

Documentation
- docs: Regenerate CLI docs d297c8e @bep
- docs: Update where d524778 @bep
- docs: Update where function operators 036e260 @jmooring
- docs: Rework the cacheDir documentation a50356b @bep

Build Setup
- snap: Set cache location to $HOME/.cache/hugo_cache 9163973 @jmooring
- snap: Allow access to SSH keys and $HOME/.config/hugo 575d7f8 @jmooring #11288

Bug fixes
- Fix broken handling of legacy taxonomyTerm in disableKinds d70b6c7 @bep #11257
- Fix cache busting setup 6bbec90 @bep #11268
- common/htime: Fix localization of abbreviated month names 2f11e67 @jmooring #11267
- Fix setting config from env with complex (e.g. YAML) strings c406fd3 @bep #11249
- Fix for data mounts in sub folders 286821e @dvdksn

Improvements
- commands: Move testscript into its correct place d947db3 @bep
- publisher: Improve class collector for dynamic classes d8c94c3 @bep
- commands: Delay server builds after the watcher is set up 5bd22ba @bep #11264
- Create hugo_stats.json if it's mounted but does not exists 7ae62f4 @bep #11264
- Re-instate disableLiveReload as a config option (and not just a flag) f1a061e @bep #11259
- Improve error messages for PostCSS etc. 387c5f6 @bep #9730

What's Changed
- Improve behavior of defaultContentLanguageInSubdir when only the default language is enabled cc44583 @bep #11229
- Return error when .Render is invoked without arg 4da672a @bep #11243
- js: Pass tsconfig.json to esBuild f1886f8 @jmooring #11232
- tpl/collections: Fix WordCount (etc.) regression in Where, Sort, Delimit 5bec508 @bep #11234
- config/allconfig: Update timeout description f650e4d @jmooring
- docs: Refresh docs.json c934a45 @jmooring

Bug fixes
- Fix hugo mod vendor for modules with hugo.toml 0f921ac @bep #11221
- Fix static content files multilingual root regression 6019953 @bep #11223
- Fix defaultContentLanguageInSubdir with only 1 language 92e8670 @bep #10064
- Make imageConfig work with modules a78b17d @bep #11205
- Restore language.disabled config a481942 @bep #11219

Improvements
- config: Expand default security.exec.osEnv policy 6c9ea02 @dvdksn #9333
- Add titleCaseStyle none and firstupper 12d3469 @bep #11204
- Bump github.com/bep/clock v0.3.0 to renamed github.com/bep/clocks v0.5.0 bf7ee8a @anthonyfok

Build Setup
- snap: Allow access to AWS, Azure, and GCS config/credentials 7251096 @jmooring #11122
- snap: Update metadata and security.exec.osEnv 70c5e48 @jmooring #11217

Bug fixes
- Fix buildStats when tags and classes are disabled ceb486f @bep #11202
- commands: Fix index out of range in hugo mod get 0ff8e13 @bep #11190

Improvements
- Rework the build.writeStats struct 5afc89f @bep #11191
- github: Build for Dragonfly in CI build 19d76ae @bep
- Make build.writeStats a struct 11ecea6 @bep #11191
- Only print the path warnings once ffd37d4 @bep #11187

Dependency Updates
- build(deps): bump github.com/evanw/esbuild from 0.18.10 to 0.18.11 da98724 @dependabot[bot]
- build(deps): bump github.com/alecthomas/chroma/v2 from 2.7.0 to 2.8.0 4d470bb @dependabot[bot]

Documentation
- docs: Regen docs helper c27639b @bep
- Update README.md b4b6524 @bep

Build Setup
- snap: Explicitly set security.exec.osenv during build c1eac61 @jmooring #11199
- snap: Restore security.exec.osenv whitelist 3c8256a @jmooring #11195

The notable new feature in this release is that you can now have permalink configuration also for section and taxonomy pages. Thanks to @Mai-Lapyst for the implementation. See the documentation for more information.

Bug fixes
- commands: Fix panic when running hugo new theme without theme name 635cc34 @deining #11162
- Fix output formats and media type per language config regression 79639c9 @bep #11159
- common/collections: Fix append regression to allow appending nil b74b8d6 @khayyamsaleem #11180
- commands: Fix help message for hugo new theme 793e38f @deining #11161
- Fix false path warnings with resources.PostProcess fa0e16f @bep #7735
- tpl/tplimpl: Fix typo in global variable name e3308a0 @alexandear
- Fix broken nodeploy setup 5b4bfc2 @bep #11149

Improvements
- Misc permalinks adjustments 7917961 @bep #9448 #11184 #8523
- commands: Handle hugo mod get --help 80ecb95 @bep #11141
- Print help message when triggered with no flags 1264675 @roshanavand
- Don't panic on invalid security whitelist regexp 7f698c8 @bep #11176
- Merge branch 'master' of github.com:gohugoio/hugo bac03f4 @bep
- resources/page: Allow section and taxonomy pages to have a permalink configuration cc14c6a @Mai-Lapyst #8523
- commands: Enable format flag with hugo new site 019299b @jmooring #11155

Dependency Updates
- build(deps): bump github.com/evanw/esbuild from 0.18.5 to 0.18.10 9b313ce @dependabot[bot]
- build(deps): bump github.com/niklasfasching/go-org from 1.6.6 to 1.7.0 92f55f1 @dependabot[bot]

Documentation
- Update README.md 58e09cc @jmooring
- docs: Update permalinks documentation 12e4c4d @jmooring #8523 #10847
- Update README.md 23ed087 @bep

Build Setup
- Merge branch 'release-0.114.1' a018259 @bep

Bug fixes
- Fix broken nodeploy setup 078226d @bep #11149
- commands: Make hugo env respect --logLevel b1016d2 @bep #11145

Improvements
- commands: Update Jekyll post-import output 49336bf @brianknight10 #10715

Dependency Updates
- Revert "build(deps): bump gocloud.dev from 0.24.0 to 0.30.0" ae31dbd @bep
- build(deps): bump gocloud.dev from 0.24.0 to 0.30.0 9418182 @dependabot[bot]
- build(deps): bump github.com/evanw/esbuild from 0.18.4 to 0.18.5 5491e55 @dependabot[bot]
- deps: Update github.com/tdewolff/minify/v2 v2.12.5 => v2.12.7 bf7af90 @jmooring #11132

Build Setup
- snap: Switch from Embedded Dart Sass to Dart Sass (#11146) 06d228a @jmooring

The main new thing in this release is that we now support both major versions of the Dart Sass Embedded protocol, which means that you now can use the regular Dart Sass binary. We measured the new protocol to be faster with high concurrency:

name old time/op new time/op delta
Transpiler/SCSS-10 114µs ± 0% 145µs ± 1% +26.40% (p=0.029 n=4+4)
Transpiler/Start_and_Execute-10 25.6ms ± 2% 26.0ms ± 3% ~ (p=0.486 n=4+4)
Transpiler/SCSS_Parallel-10 89.0µs ± 2% 44.4µs ± 3% -50.12% (p=0.029 n=4+4)

name old alloc/op new alloc/op delta
Transpiler/SCSS-10 1.33kB ± 1% 1.33kB ± 0% ~ (p=1.000 n=4+4)
Transpiler/Start_and_Execute-10 22.4kB ± 1% 22.4kB ± 1% ~ (p=0.886 n=4+4)
Transpiler/SCSS_Parallel-10 1.34kB ± 3% 1.33kB ± 1% ~ (p=1.000 n=4+4)

name old allocs/op new allocs/op delta
Transpiler/SCSS-10 18.0 ± 0% 18.0 ± 0% ~ (all equal)
Transpiler/Start_and_Execute-10 144 ± 1% 150 ± 0% +4.16% (p=0.029 n=4+4)
Transpiler/SCSS_Parallel-10 18.0 ± 0% 18.0 ± 0% ~ (all equal)

We have also moved to a new log library and added some new math functions and also revised the existing set to work better with a mix of scalars and slices.

Notes
- We have removed the flags --log, --verboseLog, added the new flag --logLevel and deprecated --verbose and ----debug` See #11088
- This release contains a security fix in the upstream Go HTML template library disallowing JavaScript inside backticks by default. See golang/go#59234 If you really need this and are sure this isn't a security risk in your case, you can revert to the old behaviour:

[security]
[security.gotemplates]
allowActionJSTmpl = true

Bug fixes
- common/loggers: Drop the bold INFO etc. prefixes 6dfbd24 @bep
- all: Fix some typos 68d9d3e @deining
- all: Fix typos in function names and comments 9009c8c @alexandear
- deploy: Fix deploy defaults for non-zero flag values (e.g. maxDeletes, invalidateCDN) 12dc9a6 @bep #11127
- Fix upstream Go templates bug with reversed key/value assignment ee359df @bep #11112
- tpl/collections: Fix append when appending a slice to a slice of slices d178fe9 @bep #11093
- Fix .Width and .Height for animated gifs 21d1756 @bep #11079
- Fix config merge regression with root slices (e.g. disableKinds) 60a2cdf @bep #11089
- Fix handling of aliases (e.g. hugo serve) 0541a1b @bep #11090
- commands,config: Fix typo in log and error messages b8526f3 @alexandear
- Fix indented SASS imports for Dart Sass c782ebd @bep #11074

Improvements
- Add empty Environ when loading test config 3ab8465 @bep
- loggers: Avoid using Logf for the LevelLoggerToWriter f59c3c0 @bep
- tocss/dartsas: Avoid using Logf for the internal Dart Sass logging 3ca29b1 @bep
- helpers: Remove superflous formatting flag in deprecation warnings fdb0b7f @bep
- common/loggers: Re-add trailing newline in logger.Printf 1b85303 @bep #11130
- Replace the old log setup, with structured logging etc. 7c9fada @bep #11124
- common/collections: Always make a copy of the input slice in Append f73c567 @bep #10458
- Re-add site.RSSLink (and deprecate it) 90b2674 @bep #11110
- tpl/math: Allow variadic math functions to take slice args, add math.Product, math.Sum 2ba2271 @bep #11030
- commands: Remove flags log, verboseLog, add flag logLevel, deprecate flags verbose and debug ef147f4 @bep #9648 #11071
- cache: Set default cache path based on $USER 258884f @Sircular #7391
- resources: Remove failing and superflous test assertion 69f0e88 @bep
- helpers: Avoid url.Parse in RelURL and AbsURL if we can ed7e250 @bep
- Adjust benchmarks 6a09e7f @bep
- Adjust benchmark 29e5cbb @bep
- Add BenchmarkAbsURL ded6866 @bep
- helpers: Improve schema detection when creating relative URLs e1d4302 @jmooring #11080
- helpers: Add a basic benchmark for RelURL 5db215d @bep
- config: Remove unexpected _merge keys introduced in author and social maps b7dc93c @bep #11083
- Upgrade to v2 of the Dart Sass Embedded Protocol f210188 @bep #11059

Dependency Updates
- Revert "build(deps): bump gocloud.dev from 0.24.0 to 0.29.0" 59300fa @bep
- Revert "deps: Update gith

This release adds TLS/HTTPS support to hugo server (see cf38c73 and #11064 for details) entirely backed by mkcert. We still default to http which is recommended and good enough for 99% of the Hugo use, but there are some situations where you really need it.
We have added a new sub command and some new flags to hugo server to enable this:

```
# Installs a local CA in the system root store. You only need to do this once.
hugo server trust

# Generates locally-trusted certificates (if not already created) and starts the server with TLS/HTTPS enabled.
hugo server --tlsAuto
```

Note that we just delegate to mkcert using its default settings, so all of their documentation is relevant.
Also note that this is currently only supported for Linux, MacOS and Windows. And if you install on Linux using Snap, you will currently get an access denied error when running hugo server trust. A workaround for that, or if you need to use some of mkcert's advanced options, is to use mkcert directly to install the local CA:

```
go install filippo.io/mkcert@latest
mkcert -install
```

You can then start the server with hugo server --tlsAuto.
If you have obtained the TLS certificate and key file by other means, you can use the --tlsCertFile and --tlsKeyFile flags. When --tlsAuto or --tlsCertFile and --tlsKeyFile is set and no --baseURL is provided as a flag, the server is started with TLS and https as the protocol.

What's Changed
- Fix menuItem.URL when pageRef is not set 5e5ce00 @bep #11062
- Don't inject livereload script on hugo -w a191b38 @bep #11061
- markup: Fix typo in function and struct names 382c726 @alexandear
- all: Replace deprecated ioutil with io and os 4c46f94 @alexandear

- github: Fix Windows build 06faee5 @bep #11052
- Fix potential deadlock in ByParam 3258569 @bep #11039
- commands: Add --lang to hugo config 0ef2952 @bep #11057
- Make sure any default mounts show up in "hugo config" e3ae8f0 @bep #11040
- tpl/tplimpl: Use .Language.LanguageCode in built-in templates ff77a92 @jmooring
- Fail on invalid defaultContentLanguage 9cdca1f @bep #11044
- Avoid panic in invalid language config 6462eec @bep #11046
- Don't panic on empty yaml config params a7d6b14 @bep #11047
- Prevent double escaping of image alt-text in Goldmar typographer 3f497d4 @bep #11045
- deps: Update github.com/tdewolff/minify/v2 v2.12.5 => v2.12.6 409c6c3 @jmooring

What's Changed
- Fix it so languageCode on top level config still works e3dfc76 @bep #11037

- Fix Processed images count regression for multiple languages fd09933 @bep #11002
- Fix --renderStaticToDisk regression 8f293a1 @bep #11026
- commands: Add the common build flags to the config commands 51d0a0a @bep #11018
- commands: Reinstate some of the removed build flags (e.g. --theme) to new and mod 43f1282 @bep #11018
- Don't create the public folder unless needed e96cdfe @bep #11031
- commands: Fail the build when no config file or config dir 273d9f6 @bep #11019
- langs: Remove the Language.Params deprecation message for now a6257d8 @bep #11025
- Add language.LanguageCode 6c2db0d @bep #11027
- commands: Re-introduce the -f shorthand for hugo new site 901cd97 @bep #11015
- commands: Move the --format flag to only the commands that support it f86b5f7 @bep #11022

Documentation
- docs: Regenerate CLI docs 20ea2e0 @bep
- docs: Regen CLI docs ffdbce5 @bep

What's Changed
- Fix regression when loading config -e is empty or HUGO_ENV or HUGO_ENVIRONMENT is set 231374a @bep #11013

What's Changed
- minifiers: Make sure JS.Version always has a value dd67922 @bep #11012
- Fix regression with site.IsServer when not running a server 9a235d0 @bep #11006

What's Changed
- Fix regression when config for OutputFormat.BaseName is an empty string ed906a8 @bep #11000

Also see the main release: https://github.com/gohugoio/hugo/releases/tag/v0.112.0

Proper TailwindCSS v3.x support, much improved language config merge, consolidation of all Hugo config (check out hugo config), rewritten commands package (CLI) using SimpleCobra, Goldmark's typographer extension (quotation marks per language), and more.

Notes
- openapi2: .ExtensionProps is now .Extensions and just a map.
- We have deprecated site.Language.Params and configuration of custom params outside of the language [params], see https://gohugo.io/content-management/multilingual/#changes-in-hugo-01120 for more information.

Bug fixes
- Fix "unknown command" message when no suggestion 288be19 @bep #10953
- commands: Fix build logic when listing expired/future draft content e6dc805 @bep #10972
- commands: Fix data race 0a51dfa @bep #10953
- tpl/urls: Fix build broken by a merge e4e0313 @bep
- Fix warn message about custom params on the language top level ad4bc96 @deining
- Fix some spelling mistakes 4003c79 @cuishuang
- all: Fix comments for exported functions and packages 610ceda @alexandear
- modules: Fix format flag in error 95818e2 @alexandear
- Fix some recently introduced error handling issues 834b3d7 @bep #10953
- Re-add site.LanguagePrefix 86b2a27 @bep #10947
- Deprecate site.Language.Params and some other fixes 5d85716 @bep #10947
- readme: Fix build command d01731d @kirisakow
- resources: Fix typos in error message and variables 891b291 @alexandear
- commands: Fix data race in test 0fbab7c @bep

Improvements
- circleci: Add github.com to known hosts 70b2aaf @bep
- Add --format to hugo config 85b13c1 @bep
- postcss: Improve validation of option 'config' 9a0370e @deining
- Avoid writing to hugo_stats.json when there are no changes 4cac5f5 @bep #10985
- Add cache busting config to support Tailwind 3 2c3d4df @bep #10974
- commands: Make all list commands list what 'all' did before 6ca8a40 @bep #10953
- tpl/tplimpl: Add img loading attribute to figure shortcode (#10927) 2db7ec6 @InLaw
- Allow whitelisting mediaTypes used in resources.GetRemote 2637b4e @bep #10286
- Add hugo.WorkingDir 7c7baa6 @bep #10969
- Make language merging of markup etc. config without values in the root 4f085e8 @bep #10953
- tpl/urls: Return empty string when JoinPath has zero args 150d190 @jmooring
- Re-add --printUnusedTemplates and --printPathWarnings d6197a4 @bep #10953
- tpl/urls: Add JoinPath template function 5b3e165 @jmooring #9694
- Allow legacy taxonomyTerm in disableKinds 03cb38e @bep #10953
- Make GOMAXPROCS to be CPU limit aware 008170c @BenTheElder #10950
- Allow empty params.mainSections 7c647bc @bep #10953
- commands: Load config before creating the filesystem 3f00f47 @bep
- github: Trim the test flow a little 35955f5 @bep
- commands: Improve the common build flag handling 8a69ccb @bep #10947
- Support, but warn, about top level language custom params 7ce033a @bep #10947
- Handle transient errors in config loading etc. 0554213 @bep #10947
- Re-establish all the server flags 5251f01 @bep #10947
- Revert "Make GOMAXPROCS CPU limit aware" 0106cf1 @bep
- Make GOMAXPROCS CPU limit aware 59050f9 @BenTheElder #10950
- Add Sections to Site interface faa6998 @bep #10947
- helpers: simplify path tests with T.TempDir 3d90871 @alexandear
- tpl: Add math.Abs bda082c @alexandear #10941
- Create a struct with all of Hugo's config options 241b21b @bep #10896 #10620
- Improve date parsing performance for the common case 6aededf @bep #10942
- Add a counter helper 0988b76 @bep
- Expand the baseline benchmark a little e0e19a9 @bep
- Revert "Update syntax-highlighting.md (#10929)" (#10930) bcd7ac7 @jmooring
- Update syntax-highlighting.md (#10929) a4fb8dc @kirillbobyrev
- tpl/strings: Clarify findRESubmatch description 5c7b79c @jmooring
- langs/i18n: Fallback to defaultContentLanguage instead of English 0cb6ca5 @jmooring #9216
- tpl/debug: Add VisualizeSpaces f106251 @bep
- Prevent the global error collector to panic when sending on closed channel 9906c1a @bep
- markup/goldmark: Add config options for the typographer extension 5596dc2 @bep #9772
- Ad

Bug fixes
- Fix "unknown shortcode token" when calling shortcode within fenced code block e7148f3 @bep #10819
- Don't fail when calling Paginate with an empty pages.PagesGroup 34a86e1 @bep #10802
- Improve error message for unclosed shortcode with inner content 9818724 @deining

Improvements
- tpl: Add hasSuffix alias d171d15 @jfish2
- Run gofmt -s on source files d55af2a @deining
- tpl/math: Allow multi numbers in add, sub, mul, div, min and max 84201e8 @septs
- server: Replace golang.org/x/net/context with context 0f01bd4 @alexandear
- watcher: use time.NewTicker to prevent leaks 02ab77d @alexandear
- ensure we default to 10 correctly 873be9f @davidejones
- switch transfers to workers bebb2b8 @davidejones
- customize parallel transfer count e6f029b @davidejones
- metadecoders: Add support for native org dates in frontmatter PR #7433 added support for Org timestamps for the DATE header. This PR widens the support with additional front matter headers LASTMOD, PUBLISHDATE and EXPIRYDATE. bdbfacb @johannesengl #8536

Dependency Updates
- deps: Update go-org to v1.6.6 1c841ec @niklasfasching

Documentation
- docs: Improve examples of variadic math functions b6f44aa @jmooring
- readme: Update dependency list 04b9811 @deining

Bug fixes
- Fix .Fragments when called cross sites on uninitialized output format b83050c @bep #10794
- Fix "context canceled" with partial 3bbeb56 @bep #10789
- cache: Fix --gc failure on Windows 184a67a @alexandear
- snap: Fix dart-sass-embedded installation a950950 @jmooring #10783
- Allow page.TableOfContents on self in shortcode df5608f @bep #10791
- Page context handling in i18n 6c798eb @bep #10782
- Work around --gc failure on Windows <= 10 ec1c97e @bep #10781
- Correct typos in Go comments 36ce3a4 @alexandear

Documentation
- tpl/partial: Consolidate GoDoc f56ce01 @bep

Build Setup
- Update to Go 1.20.1 f10009e @bep #10785

This fixes the "page" not defined issue in Hugo 0.111.0. eef23a7 @bep #10774

These release notes are a little bit of a work in progress at the moment. I have had all sorts of build problems with this release, so once I finally figured out what was wrong (and the culprit was a breaking change in Go's rand.Shuffle), I just had to push the publish button. I (@bep) will wrap this up tomorrow. But it's a great release!

Notable news in this release are
- Indexing of page fragments (headings) in Related Content. This also gives a new .Fragments data structure on Page that can be used to build table of contents, check if a fragment exists on a given page or if it's duplicated (#10711, #9339, #10725) .
- A new page template func (#9339)
- To be continued.

Bug fixes
- strings: fix Truncate behavior for formatted html c0d15a2 @khayyamsaleem #10399
- Fix shortcode error when closing without .Inner ae48507 @bep #10672
- create: Fix typo in error message 2dad13c @aaronhooper
- resource_transformers/tocss: Fixed hugo:vars casting a1a9c08 @acclassic #10632
- markup: Fix linenos codeblock hl option case regression 73ece30 @khayyamsaleem #10682
- Fix slow HTML elements collector for the pre case f9fc0e0 @bep #10698
- commands: Fix server url rewrites (http status 200) 1477d0b @bep #10668
- Fix description of collections.Uniq 4ccc8cf @jmooring
- Fix shortcode detection in RenderString 1688583 @bep #10654

Improvements
- Replace deprecated ioutil with io and os d453c12 @alexandear
- build: Bump build images 60e6fa7 @bep
- build: Update Linux ARM build image 7e51ba0 @bep
- tpl/tplimpl: Remove the Google News internal template 66f94b4 @jmooring
- tpl/strings: Adjust benchmark 2a61910 @bep
- tpl/strings: Add BenchmarkTruncate 079d1b6 @bep
- Misc ioutil deprecation adjustments a669467 @bep #10732
- Remove unused temp directory e314410 @alexandear
- exif: Return the proper exposure time value in some special cases 39cc3a2 @WaltCuller #10738
- Add a page template func ce524d0 @bep #9339
- dartsass: Import CSS without extension at compile time 2662faf @jmooring #10592
- Split parse and render for Goldmark 271318a @bep #10750
- related: Add config option cardinalityThreshold e442a63 @bep #10744
- Throw an error when shortcode is expected to be closed 7d78a49 @bep #10675
- Add some shortcode testcases 0dbeac8 @bep #10671
- sass: Remove some unused leftover code b99d073 @bep
- resources/sass: Remove debug statements e965cb6 @jmooring #10470
- page: Move the cache double check right after the lock 586fea0 @bep
- page: Add some concurrency to the building of the related page index fa2d7ad @bep #10711
- related: Adjust benchmark 4346987 @bep
- tocss: Simplify the hugo:vars type handling ecf3cd5 @bep #10632
- Adjust tests for GO 1.20 6abd15e @bep #10691
- tpl/internal: Sync Go template src to Go 1.20 094135f @bep #10691
- Add page fragments support to Related 90da766 @bep #10711 #9339 #10725
- related: Adjust benchmark 0afec0a @bep
- related: Add benchmark 28540ed @bep
- tpl/collections: Improve error message in Index 9af78d1 @bep
- Make the HTML collector parsing more robust d33a7eb @bep #10698
- tpl/strings: Add strings.ContainsNonSpace fce0890 @bep
- publisher: Add benchmark 4f4a1c0 @bep
- Update CONTRIBUTING.md e2cfc3d @bep
- Only invoke a given cached partial once 4ef9baf @bep #4086 #9588

Dependency Updates
- Revert "build(deps): bump gocloud.dev from 0.24.0 to 0.28.0 (#10610)" db9f74d @bep #10770
- build(deps): bump github.com/tdewolff/parse/v2 from 2.6.4 to 2.6.5 4d36b99 @dependabot[bot]
- build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17 807237b @dependabot[bot]
- build(deps): bump golang.org/x/image 79b03b3 @dependabot[bot]
- build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 4bf91b9 @dependabot[bot]
- Revert "build(deps): bump github.com/getkin/kin-openapi from 0.110.0 to 0.114.0" 2a364cc @bep
- deps: Upgrade github.com/yuin/goldmark v1.5.3 => v1.5.4 3fb2417 @jmooring #10661
- build(deps): bump github.com/getkin/kin-openapi from 0.110.0 to 0.114.0 87c78bd @dependabot[bot]
- deps: Upgrade github.com/ale

Note
- Make readFile return nil when file not found (note) 3c51625 @bep #9620
- Make hugo.toml the new config.toml f38a2fb @bep #8979

Bug fixes
- Fix permalinks issue with repeated sections 671f64b @bep #10377
- Fix HEAD method in resources.GetRemote f13531e @bep #10604
- Fix order when reading custom headers in resources.GetRemote b5d4850 @bep #10616
- resource: Fix Go Doc vs .Data.Integrity fbc3e08 @bep

Improvements
- related: Handly []any d595419 @bep #10624
- tpl/strings: Add findRESubmatch 2fb40ec @bep #10594
- config/security: Add GO\w+ (e.g. GOROOT) to the default allowed list c6b3887 @bep #10429
- Preserve front matter slice value types (e.g. int) 21af5b3 @bep #10624
- Make hugo.toml the new config.toml f38a2fb @bep #8979
- Add fill HTTP Response info into .Data in resources.GetRemote 6a579eb @bep #10604
- tpl/compare: Sort special float values as string f95fd57 @acclassic #10389
- tpl/diagrams: Move Goat to its own file e754d5c @bep
- Update CONTRIBUTING.md 002cd52 @bep
- Update CONTRIBUTING.md a76c405 @bep

Dependency Updates
- deps: Upgrade github.com/evanw/esbuild v0.15.18 => v0.17.0 6e9fa9e @bep #10536

Documentation
- dos: Regen CLI docs 19e9605 @bep
- docs: Regen docshelper 80e8bd3 @bep
- Update README.md c4f3a46 @bep
- Misc doc, code refactoring to improve documentation e402d91 @bep
- Update README.md c0a03a2 @bep

Build Setup
- Remove reference to Goreleaser in code comment dd6d0a6 @omarkohl

Bug fixes
- Avoid nilpointer when shortcode page content output nil e5d2a8f @davidejones #10391
- Revise the fix for shortcode vs output format nilpointer 631d768 @bep #10391

Improvements
- livereload: Use text/javascript here, too 00ff161 @bep
- media: Rename application/javascript, application/typescript to text/javascript etc. 588710a @bep
- Skip flakey server tests on GitHub Action on Windows 20ef6dc @bep
- github: Avoid duplicate test runs d1cd1db @bep
- tpl/encoding: Add noHTMLEscape option to jsonify 09e1011 @bep
- Don't use self-closing generator tag 01ebb6e @djibe
- github: Use SHA versions 1fd3320 @bep
- Resolve dependency-path not found error in workflow 0fb2b3d @jongwooo
- Use setup-go action to cache dependencies db05232 @jongwooo

Dependency Updates
- build(deps): bump golang.org/x/tools from 0.1.12 to 0.2.0 f505854 @dependabot[bot]
- build(deps): bump github.com/getkin/kin-openapi from 0.106.0 to 0.107.0 2aedccc @dependabot[bot]
- build(deps): bump golang.org/x/text from 0.3.7 to 0.4.0 c109314 @dependabot[bot]
- build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.1 4732c47 @dependabot[bot]
- build(deps): bump github.com/getkin/kin-openapi from 0.103.0 to 0.106.0 62780ec @dependabot[bot]
- build(deps): bump github.com/tdewolff/minify/v2 from 2.12.1 to 2.12.4 351d6b0 @dependabot[bot]
- build(deps): bump github.com/yuin/goldmark from 1.4.15 to 1.5.2 ed930db @dependabot[bot]
- build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0 05df964 @dependabot[bot]
- build(deps): bump github.com/magefile/mage from 1.13.0 to 1.14.0 9860e0e @dependabot[bot]
- build(deps): bump github.com/evanw/esbuild from 0.15.9 to 0.15.12 2ef60db @dependabot[bot]

Documentation
- Update Go and Alpine version in Dockerfile 6275aad @wind0r

Build Setup
- build: Update to Go 1.19.2 a066e98 @bep