v0.126.0

This release brings, drum roll, a long-awaited Hugo feature that has had many names. At one point we named it pages from data. You can read all about it in the documentation where it's titled Content Adapters.

Also worth mentioning are the new Extras Goldmark Extensions, which allows you to enable Markdown syntax for inserted text, mark text, subscript and superscript. A big thanks to @bowman2001 for the implementation.

Improvements

• tpl/tplimpl: Plainify title and description in twitter_cards.html 74ab839 @jmooring #12433
• tpl/tplimpl: Plainify title and description in schema.html 92290aa @jmooring #12432
• resources/images: Handle NaN EXIF latitude and longitude 6dbbe6d @jmooring #12490
• Create pages from _content.gotmpl e2d66e3 @bep #12427 #12485 #6310 #5074
• create/skeletons: Remove superfluous language code fallback 55dea41 @jmooring #12479
• tpl/tplimpl: Improve locale value in opengraph.html 87ab7f7 @jmooring #12480
• tpl/tplimpl: Retain query string and fragment in render-image.html 6dfeb9f @jmooring #12468
• markup/goldmark: Support extras extension ca9a77e @jmooring

Dependency Updates

• build(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 ee26e69 @dependabot[bot]
• build(deps): bump golang.org/x/image from 0.15.0 to 0.16.0 6e83d00 @dependabot[bot]

Documentation

• docs: Regen docshelper 2661402 @bep

Build Setup

• livereload: Improve the livereload script build and update to v4.0.2 d02f062 @bep #12451 #6290

v0.125.7

Note that this release is only relevant if you use Hugo's openapi3.Unmarshal template function.

What's Changed

• deps: Downgrade github.com/getkin/kin-openapi v0.124.0 => v0.123.0 3c6260f @bep

v0.125.6

What's Changed

• Fix one more resource change eviction logic issue bb59a7e @bep #12395 #12456
• Make the cache eviction logic for stale entities more robust 503d209 @bep #12458
• build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2 68e9532 @dependabot[bot]
• Run mage generate 9cd7db6 @bep
• resources/page: Pull internal Page methods into its own interface c892e75 @bep

v0.125.5

What's Changed

• Fix rebuilds on cascade deletes/renames 7be7f89 @bep #12449
• commands: Print "Webserver is ..." right before "Total ..." c8e400b @bep #12384
• Make sure replaced pages gets marked as stale 9dd6870 @bep #12436

v0.125.4

What Changed

• Fix rebuilds when running hugo -w 7203a95 @bep #12296
• tpl/tplimpl: Fix double-escaping in opengraph template fb51b69 @jmooring #12418
• commands: Clarify that create or install a theme are two options fe84cc2 @Habbie
• config: Setups with only one active language can never be multihost babcb33 @bep #12288
• Use Apache License without modification 6b86797 @bep #12415
• build(deps): bump github.com/tdewolff/minify/v2 from 2.20.19 to 2.20.20 fb08439 @dependabot[bot]

v0.125.3

This release fixes a security issue reported by @ejona86 (see #12411) that could allow XSS injection from Markdown content files if one of the internal link or image render hook templates added in Hugo 0.123.0 are enabled. You typically control and trust the content files, but according to Hugo's security model, we state that "template and configuration authors (you) are trusted, but the data you send in is not."

• markup/goldmark: Fix data race in the hugocontext wrapper 509ab08 @bep
• tpl: Escape .Title in built-in image and link render hooks 15a4b9b @bep
• tpl/tplimpl: Improve embedded templates 10a8448 @jmooring #12396
• SECURITY.md: Update link to security model 722c486 @ejona86
• modules: Fix potential infinite loop in module collection f40f50e @bep #12407

v0.125.2

What's Changed

• Only add root sections to the section pages menu 06d2489 @bep #12399
• Fix partial rebuilds for SCSS fetched with GetMatch and similar Fixes #12395 004b694 @bep
• commands: Add gen chromastyles --lineNumbersTableStyle flag da6112f @jmooring #12393
• resources/images: Fix TestColorLuminance on s390x faf9fed @bep
• commands: Provide examples for chromastyles flags 11aa893 @jmooring #12387

v0.125.1

What's Changed

• tpl: Use erroridf for remote YouTube errors 0c188fd @bep #12383
• build: Fix `GLIBC_2.29' not found issue bbc6888 @bep #12381

v0.125.0

Some of the notable new features in this release:

• strings.Diff template func.
• .PageInner in render hooks to get the inner page when using .RenderShortcode in a shortcode, typically used to resolve links and page resources relative to an included Page.
• Add Luminance to $image.Color, allowing for sorting by relative luminance. e197c7b @bep #10450

This release is built with Go 1.22.2 (#12351) which comes with a fix for security issue CVE-2023-45288. We don't see how that could be exploited in Hugo, but we do appreciate that people want a clean security report.

Bug fixes

• Fix server rebuilds when adding a content file on Linux fa60a2f @bep #12362
• helpers: Fix TrimShortHTML when used with AsciiDoc content 6049ba9 @jmooring #12369
• github: Fix CI build 9323376 @bep
• all: Fix duplicate words in comments bf0b140 @grimreaper
• all: Typo fixes 17765a7 @coliff
• hugolib: Fix regression for blank summaries 2664052 @curegit
• Fix sectionPagesMenu for pages in root level 488b21d @bep #12306
• Fix resource bundling for overlapping page.md vs page.txt 983b8d5 @bep #12320
• Fix panic with debug.Dump with Page when running the server 38e05bd @bep #12309
• resources/page: Fix GoDoc comment 27414d4 @availhang

Improvements

• Add Luminance to Color e197c7b @bep #10450
• Pass .RenderShortcodes' Page to render hooks as .PageInner df11327 @bep #12356
• github: Add a "free space" step on Ubuntu 8e50ccf @bep
• helpers: Add BenchmarkTrimShortHTML bfc3122 @bep
• github: Update actions 00ae8e8 @bep
• github: Format GitHub actions files e423e56 @bep
• hugolib: Display server address after each rebuild 09eb822 @jmooring #12359
• resources/page: Add taxonomies Page method a6e8439 @jmooring #12316
• commands: Adjust completions 38f68cd @bep
• completion: Improve existing argument completions, add many more a67650b @scop
• Upgrade to Go 1.22.2 2a060b3 @bep #12351
• babel: Run go fmt 92de862 @bep
• babel: Close file before removing 7907935 @testwill
• bump golang.org/x/mod from 0.16.0 to 0.17.0 02d5ec1 @dependabot[bot]
• resources/page: Escape hash sign in permalinks 4500b0e @sorenisanerd #4926 #8232 #12342
• tpl/strings: Improve type checking 7bf1abf @jmooring
• tpl/tplimpl: Improve youtube shortcode 8a0ea12 @jmooring #3694 #9213 #10520 #10575 #10576
• errors: Return error from cast.ToStringE() consistently 6f07e59 @seiyab
• tpl/tplimpl: Improve embedded opengraph template 2da4ec5 @jmooring #8296 #8698 #8991 #9818 #9866 #10647
• tpl/strings: Create strings.Diff template function 6624979 @jmooring #12330
• tpl/tplimpl: Optionally exclude content from sitemap 6738a3e @jmooring #653 #12282
• tpl/tplimpl: Remove trailing slash from void elements 2f7df4b @jmooring #11867
• tpl/tplimpl: Update RSS template f0a26cf @jmooring #3918 #11692
• tpl/tplimpl: Update schema template 74ce5dc @jmooring #7570
• resources: Use different cache key when copying resources 54a8f0c @jmooring #10412 #12310
• tpl/tplimpl: Update Google Analytics template and config ebfca61 @jmooring #11802 #10093
• hugolib: Conditionally suppress .Site.Author deprecation notice e191774 @jmooring #12297

Dependency Updates

• build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.0 to 2.2.1 fe63de3 @dependabot[bot]
• build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0 a18e2bc @dependabot[bot]
• build(deps): bump golang.org/x/tools from 0.19.0 to 0.20.0 97df6be @dependabot[bot]
• build(deps): bump golang.org/x/net from 0.23.0 to 0.24.0 e9b8bec @dependabot[bot]
• build(deps): bump github.com/getkin/kin-openapi from 0.123.0 to 0.124.0 888cc1e @dependabot[bot]
• build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.1 to 2.2.0 060cce0 @dependabot[bot]
• build(deps): bump github.com/yuin/goldmark from 1.7.0 to 1.7.1 5608ba1 @dependabot[bot]
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudfront 2fedca6 @dependabot[bot]
• build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 07873b7 @dependabot[bot]

Documentation

• docs: Regen docshelper df9f2fb @bep
• hugolib: Add an asciidoc rebuild test case 74e9129 @bep #12375
• markup/asciidocext: Add Level to Heading struct c837f36 @jmooring #12291

v0.124.1

What's Changed

• Fix potential deadlock in Translations 758a876 @bep #12129
• Fix rebuild when changing mixed case named templates 19937a2 @bep #12165
• testing: Set usesFMA as true for riscv64 too c1ea22a @anthonyfok
• Fix regression for outputs defined in front matter for term pages 0750a9e @bep #12275