Update Hugo to v0.166.0 - #608
Open
bot-actions[bot] wants to merge 1 commit into
Open
bot-actions[bot] wants to merge 1 commit into
bot-actions[bot] wants to merge 1 commit into
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
👑 Hugo update!
v0.166.0 Release Notes
This release is mostly about hardening and bug fixes, but there are some notable changes:
.Rendernow takes an optional context argument:{{ .Render "view" $ctx }}, mirroring thepartialAPI. This makes it possible to pass e.g. a dict to a content view. See #15077.returnkeyword in templates has been reimplemented. It now works in any template (not just partials) and can be used anywhere, e.g. insideiforrangeblocks. See #15212.resources.Publishtemplate function andIndexOfmethod onPages.relatedconfig: newtokenizeoption for index values, and index creation is faster.Note
Glob patterns
The glob library used for e.g. module mounts (
includeFiles,excludeFiles),cascadetargets,segments,deploymentmatchers andnoVendorhas been upgraded to v1.0.0. This is a complete rewrite of the matching engine that fixes a long list of correctness bugs, but it also means that some patterns may behave differently:{, an empty[]class) now fail with a syntax error instead of being silently accepted.**matches any sequence of characters including separators, but it is not the**/"globstar" of shells:**/xrequires the literal/and does not matchx, anda/**/bdoes not matcha/b. Use{**/,}xif you need both.\is the escape character, so a literal backslash must be written as\\.If a pattern that used to match no longer does (or vice versa), it was most likely relying on a bug in the old engine.
Security
text/orgcontent is now denied by default, as Org mode's export blocks and@@html:...@@snippets pass raw HTML through unescaped, making it the same XSS sink astext/html. Sites with Org content can opt back in viasecurity.allowContent.resources.GetRemoteetc.) now validate the resolved address at dial time and reject loopback, private, link-local, CGNAT and similar ranges. This only applies under the defaultsecurity.http.urlsallowlist; if you have customized it, you have opted into your own hosts and the check stands down. Proxies fromHTTP_PROXY/HTTPS_PROXYhide the destination address from this check and are now ignored unless you setsecurity.http.proxyFromEnvironment = true.security.node.permissions.allowRead.themes/mytheme/assets -> /somewhere/else) are now dropped. This closes a gap in thethemes/confinement; absolute mountsourcevalues are still allowed.Other
{{ return <value> }}outside a partial is now an error; it was previously silently ignored.slugwhose title contains a/(e.g.Watch/listen to this) now gets a single URL segment (.../watch-listen-to-this/) instead of a nested one (.../watch/listen-to-this/). Taxonomy and term pages are not affected.KaTeX
When upgrading to Hugo v0.166.0, sites using
transform.ToMathwith theoutputoption set tohtmlorhtmlAndMathmlmust update the KaTeX stylesheet referenced in their template(s) to version 0.18.4 or higher. Using older CSS versions like 0.16.21 will cause certain mathematical or chemical expressions to render incorrectly.Example update:
See these examples:
Bug fixes
Improvements
Dependency Updates