This release contains two security hardening fixes:
We now run the Node tools PostCSS, Babel and TailwindCSS, by default, with the --permission flag with the permissions defined in security.node.permissions. This means that you need Node >= 22 installed and that css.TailwindCSS now requires that the Tailwind CSS CLI must be installed as a Node.js package. The standalone executable is no longer supported
The permalinks configuration is now much more flexible (the old setup still works). It uses the same target matchers as in the cascade config, meaning you can now do:
The above example isn't great, but it at least shows the gist of it.
A more flexible scheme for identifiers in filenames
What we had before was e.g. content/mypost.en.md which told Hugo that the content files was in English. With the new setup you could also name the file content/mypost._language_en_.md. This alone doesn't sound very useful, but this allows you to use more prefixes:
Now you can inject CSS vars, e.g. from the configuration, into your stylesheets when building with css.Build. Also, now all the render hooks has a .Position method, now also more accurate and effective.
This PR contains the following updates:
| Package | Update | Change | Pending |
|---|---|---|---|
| [hugo-extended](https://github.com/gohugoio/hugo) | minor | `0.159.1` → `0.161.0` | `0.161.1` |
---
### Release Notes
<details>
<summary>gohugoio/hugo (hugo-extended)</summary>
### [`v0.161.0`](https://github.com/gohugoio/hugo/releases/tag/v0.161.0)
[Compare Source](https://github.com/gohugoio/hugo/compare/v0.160.1...v0.161.0)
This release contains two security hardening fixes:
- We now run the Node tools PostCSS, Babel and TailwindCSS, by default, with the `--permission` flag with the permissions defined in [security.node.permissions](https://gohugo.io/configuration/security/). This means that you need Node >= 22 installed and that `css.TailwindCSS` now requires that the Tailwind CSS CLI must be installed as a Node.js package. The [standalone executable](https://github.com/tailwindlabs/tailwindcss/releases/latest) is no longer supported
- We have made the defaults in [security.http.urls](https://gohugo.io/configuration/security/#httpurls) more restrictive.
But there are some notable new features, as well:
#### Nested vars support in css.Build and css.Sass
A practical example in `css.Build` would be to have something like this in `hugo.toml`:
```toml
[params.style]
primary = "#​000000"
background = "#ffffff"
[params.style.dark]
primary = "#ffffff"
background = "#​000000"
```
And in the stylesheet:
```css
@​import "hugo:vars";
@​import "hugo:vars/dark" (prefers-color-scheme: dark);
:root {
color-scheme: light dark;
}
```
#### Slice-based permalinks config
The `permalinks` configuration is now much more flexible (the old setup still works). It uses the same [target](https://gohugo.io/configuration/cascade/#target) matchers as in the `cascade` config, meaning you can now do:
```yaml
permalinks:
- target:
kind: page
path: "/books/**"
pattern: /books/:year/:slug/
- target:
kind: section
path: "/{books,books/**}"
pattern: /libros/:sections[1:]
- target:
kind: page
pattern: /other/:slug/
```
The above example isn't great, but it at least shows the gist of it.
#### A more flexible scheme for identifiers in filenames
What we had before was e.g. `content/mypost.en.md` which told Hugo that the content files was in English. With the new setup you could also name the file `content/mypost._language_en_.md`. This alone doesn't sound very useful, but this allows you to use more prefixes:
| Prefix | Description | Relevant for |
| -------------- | ------------- | ------------------------- |
| language\_ | Language | Content and layout files. |
| role\_ | Role | Content and layout files. |
| version\_ | Version | Content and layout files. |
| outputformat\_ | Output format | Layout files. |
| mediatype\_ | Media type | Layout files. |
| kind\_ | Page kind | Layout files. |
| layout\_ | Layout | Layout files. |
#### All Changes
- langs/i18n: Fix translation lookup when using language variants [`72b85d5`](https://github.com/gohugoio/hugo/commit/72b85d5f) [@​jmooring](https://github.com/jmooring) [#​7982](https://github.com/gohugoio/hugo/issues/7982)
- create: Fix non-deterministic conflict detection in hugo new content [`6436deb`](https://github.com/gohugoio/hugo/commit/6436deb3) [@​jmooring](https://github.com/jmooring) [#​12602](https://github.com/gohugoio/hugo/issues/12602) [#​12786](https://github.com/gohugoio/hugo/issues/12786) [#​14112](https://github.com/gohugoio/hugo/issues/14112) [#​14769](https://github.com/gohugoio/hugo/issues/14769)
- commands: Fix environment isolation for configuration settings [`1eea9fb`](https://github.com/gohugoio/hugo/commit/1eea9fba) [@​jmooring](https://github.com/jmooring) [#​14763](https://github.com/gohugoio/hugo/issues/14763)
- Fix filename dimension identifiers (*role\_X*, *version\_X*) to replace mount config [`8d6145f`](https://github.com/gohugoio/hugo/commit/8d6145f3) [@​bep](https://github.com/bep) [#​14756](https://github.com/gohugoio/hugo/issues/14756)
- Fix it so we never auto-fallback to page resources in other roles/versions [`9747724`](https://github.com/gohugoio/hugo/commit/97477242) [@​bep](https://github.com/bep) [#​14749](https://github.com/gohugoio/hugo/issues/14749) [#​14752](https://github.com/gohugoio/hugo/issues/14752)
- css: Support nested hugo:vars/<name> imports [`7622dd8`](https://github.com/gohugoio/hugo/commit/7622dd86) [@​bep](https://github.com/bep) [#​14705](https://github.com/gohugoio/hugo/issues/14705)
- github: Update GitHub actions versions [`0814059`](https://github.com/gohugoio/hugo/commit/0814059b) [@​bep](https://github.com/bep) [#​14810](https://github.com/gohugoio/hugo/issues/14810)
- hugolib: Do not render aliases if the page is not rendered [`8920d56`](https://github.com/gohugoio/hugo/commit/8920d56e) [@​jmooring](https://github.com/jmooring) [#​14807](https://github.com/gohugoio/hugo/issues/14807)
- langs/i18n: Improve default content language fallback [`633cc77`](https://github.com/gohugoio/hugo/commit/633cc772) [@​jmooring](https://github.com/jmooring) [#​14243](https://github.com/gohugoio/hugo/issues/14243)
- helpers: Remove unused code [`4c40c6d`](https://github.com/gohugoio/hugo/commit/4c40c6d5) [@​bep](https://github.com/bep)
- common/constants: Remove unused consts [`d2594db`](https://github.com/gohugoio/hugo/commit/d2594db6) [@​bep](https://github.com/bep)
- common/paths: Remove unused code [`ab2de51`](https://github.com/gohugoio/hugo/commit/ab2de51e) [@​bep](https://github.com/bep)
- tests: Update Ruby setup action to v1.305.0 [`75f6183`](https://github.com/gohugoio/hugo/commit/75f61832) [@​jmooring](https://github.com/jmooring)
- langs: Use Language.Locale as primary localization key [`1b7495b`](https://github.com/gohugoio/hugo/commit/1b7495bc) [@​jmooring](https://github.com/jmooring) [#​9109](https://github.com/gohugoio/hugo/issues/9109)
- config/security: Add "! " negation to Whitelist, harden default http.urls [`79f030b`](https://github.com/gohugoio/hugo/commit/79f030be) [@​bep](https://github.com/bep) [#​14792](https://github.com/gohugoio/hugo/issues/14792)
- Harden Node tool execution with --permission flag [`a54c398`](https://github.com/gohugoio/hugo/commit/a54c398b) [@​bep](https://github.com/bep) [#​7287](https://github.com/gohugoio/hugo/issues/7287)
- tpl/collections: Honor the Eqer interface in where comparisons [`f5fce93`](https://github.com/gohugoio/hugo/commit/f5fce935) [@​bep](https://github.com/bep) [#​14777](https://github.com/gohugoio/hugo/issues/14777)
- modules: Ignore non-require blocks in go.mod rewrite [`4169c1f`](https://github.com/gohugoio/hugo/commit/4169c1f7) [@​bep](https://github.com/bep) [#​14783](https://github.com/gohugoio/hugo/issues/14783)
- Replace the concurrent map with an identical upstream version [`7574e35`](https://github.com/gohugoio/hugo/commit/7574e35b) [@​bep](https://github.com/bep)
- Add slice-based permalinks config with PageMatcher target [`017a7cd`](https://github.com/gohugoio/hugo/commit/017a7cd6) [@​bep](https://github.com/bep) [#​14744](https://github.com/gohugoio/hugo/issues/14744)
- commands: Add missing import [`e3413d9`](https://github.com/gohugoio/hugo/commit/e3413d92) [@​bep](https://github.com/bep)
- Revert "common/hugo: Deprecate extended and extended\_withdeploy editions" [`b01cc14`](https://github.com/gohugoio/hugo/commit/b01cc147) [@​bep](https://github.com/bep) [#​14771](https://github.com/gohugoio/hugo/issues/14771)
- Adjust the SECURITY.md slightly [`8ee19ff`](https://github.com/gohugoio/hugo/commit/8ee19ff9) [@​bep](https://github.com/bep)
- resources/page: Add passing test for Issue [#​14325](https://github.com/gohugoio/hugo/issues/14325) [`0d58e42`](https://github.com/gohugoio/hugo/commit/0d58e428) [@​jmooring](https://github.com/jmooring)
- Add a more flexible filename identifier scheme that also allows setting roles and versions ([#​14754](https://github.com/gohugoio/hugo/issues/14754)) [`ce2a156`](https://github.com/gohugoio/hugo/commit/ce2a156a) [@​bep](https://github.com/bep) [#​14750](https://github.com/gohugoio/hugo/issues/14750)
- common/hugo: Deprecate extended and extended\_withdeploy editions [`a17bdbc`](https://github.com/gohugoio/hugo/commit/a17bdbc5) [@​jmooring](https://github.com/jmooring) [#​14696](https://github.com/gohugoio/hugo/issues/14696)
- parser/pageparser: Add a parser fuzz test [`8f94d65`](https://github.com/gohugoio/hugo/commit/8f94d65c) [@​bep](https://github.com/bep)
- Replace deprecated .Site.Sites/.Page.Sites with hugo.Sites intests [`90d8bf3`](https://github.com/gohugoio/hugo/commit/90d8bf34) [@​bep](https://github.com/bep)
- agents: Add a note about having the issue ID in test names [`bbb42b5`](https://github.com/gohugoio/hugo/commit/bbb42b5a) [@​bep](https://github.com/bep)
- build(deps): bump github.com/getkin/kin-openapi from 0.135.0 to 0.137.0 [`d4ae662`](https://github.com/gohugoio/hugo/commit/d4ae662d) [@​dependabot](https://github.com/dependabot)\[bot]
- build(deps): bump github.com/mattn/go-isatty from 0.0.21 to 0.0.22 [`9ede5fb`](https://github.com/gohugoio/hugo/commit/9ede5fb9) [@​dependabot](https://github.com/dependabot)\[bot]
- build(deps): bump github.com/tdewolff/minify/v2 from 2.24.12 to 2.24.13 [`833a878`](https://github.com/gohugoio/hugo/commit/833a878e) [@​dependabot](https://github.com/dependabot)\[bot]
- build(deps): bump github.com/magefile/mage from 1.17.1 to 1.17.2 [`4c03129`](https://github.com/gohugoio/hugo/commit/4c03129f) [@​dependabot](https://github.com/dependabot)\[bot]
- deps: Upgrade github.com/bep/imagemeta v0.17.1 => v0.17.2 [`080970b`](https://github.com/gohugoio/hugo/commit/080970bc) [@​bep](https://github.com/bep)
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudfront ([#​14789](https://github.com/gohugoio/hugo/issues/14789)) [`896bc89`](https://github.com/gohugoio/hugo/commit/896bc89a) [@​dependabot](https://github.com/dependabot)\[bot]
- build(deps): bump github.com/mattn/go-isatty from 0.0.20 to 0.0.21 ([#​14788](https://github.com/gohugoio/hugo/issues/14788)) [`100dde5`](https://github.com/gohugoio/hugo/commit/100dde53) [@​dependabot](https://github.com/dependabot)\[bot]
- build(deps): bump github.com/bep/mclib ([#​14787](https://github.com/gohugoio/hugo/issues/14787)) [`bdebb79`](https://github.com/gohugoio/hugo/commit/bdebb797) [@​dependabot](https://github.com/dependabot)\[bot]
- build(deps): bump google.golang.org/api from 0.267.0 to 0.276.0 [`52123ae`](https://github.com/gohugoio/hugo/commit/52123ae2) [@​dependabot](https://github.com/dependabot)\[bot]
- build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.41.5 to 1.41.6 [`38b8afd`](https://github.com/gohugoio/hugo/commit/38b8afdc) [@​dependabot](https://github.com/dependabot)\[bot]
- build(deps): bump github.com/getkin/kin-openapi from 0.134.0 to 0.135.0 ([#​14781](https://github.com/gohugoio/hugo/issues/14781)) [`9276660`](https://github.com/gohugoio/hugo/commit/92766600) [@​dependabot](https://github.com/dependabot)\[bot]
- build(deps): bump github.com/bep/goportabletext from 0.1.0 to 0.2.0 ([#​14779](https://github.com/gohugoio/hugo/issues/14779)) [`790f408`](https://github.com/gohugoio/hugo/commit/790f4084) [@​dependabot](https://github.com/dependabot)\[bot]
- build(deps): bump golang.org/x/image from 0.38.0 to 0.39.0 ([#​14780](https://github.com/gohugoio/hugo/issues/14780)) [`de6955b`](https://github.com/gohugoio/hugo/commit/de6955ba) [@​dependabot](https://github.com/dependabot)\[bot]
- deps: Upgrade github.com/bep/imagemeta v0.17.0 => v0.17.1 ([#​14775](https://github.com/gohugoio/hugo/issues/14775)) [`a77bd52`](https://github.com/gohugoio/hugo/commit/a77bd527) [@​bep](https://github.com/bep) [#​14758](https://github.com/gohugoio/hugo/issues/14758)
- build(deps): bump golang.org/x/tools from 0.43.0 to 0.44.0 [`547ab29`](https://github.com/gohugoio/hugo/commit/547ab29c) [@​dependabot](https://github.com/dependabot)\[bot]
- build(deps): bump github.com/evanw/esbuild from 0.27.4 to 0.28.0 [`9a5c7e0`](https://github.com/gohugoio/hugo/commit/9a5c7e0d) [@​dependabot](https://github.com/dependabot)\[bot]
- build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.41.1 to 1.41.5 [`6613b08`](https://github.com/gohugoio/hugo/commit/6613b08e) [@​dependabot](https://github.com/dependabot)\[bot]
- build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.4 to 2.3.0 [`582c26e`](https://github.com/gohugoio/hugo/commit/582c26ef) [@​dependabot](https://github.com/dependabot)\[bot]
- build(deps): bump github.com/tdewolff/minify/v2 from 2.24.11 to 2.24.12 [`a4f2a8a`](https://github.com/gohugoio/hugo/commit/a4f2a8a5) [@​dependabot](https://github.com/dependabot)\[bot]
### [`v0.160.1`](https://github.com/gohugoio/hugo/releases/tag/v0.160.1)
[Compare Source](https://github.com/gohugoio/hugo/compare/v0.160.0...v0.160.1)
#### What's Changed
- Fix panic when passthrough elements are used in headings [`8b00030`](https://github.com/gohugoio/hugo/commit/8b00030b) [@​bep](https://github.com/bep) [#​14677](https://github.com/gohugoio/hugo/issues/14677)
- Fix panic on edit of legacy mapped template names that's also a valid path in the new setup [`c485516`](https://github.com/gohugoio/hugo/commit/c4855167) [@​bep](https://github.com/bep) [#​14740](https://github.com/gohugoio/hugo/issues/14740)
- Fix RenderShortcodes leaking context markers when indented [`161d0d4`](https://github.com/gohugoio/hugo/commit/161d0d47) [@​bep](https://github.com/bep) [#​12457](https://github.com/gohugoio/hugo/issues/12457)
- Strip nested page context markers from standalone RenderShortcodes [`45e4596`](https://github.com/gohugoio/hugo/commit/45e45966) [@​bep](https://github.com/bep) [#​14732](https://github.com/gohugoio/hugo/issues/14732)
- Rename deprecated cascade.\_target to cascade.target in tests [`58927aa`](https://github.com/gohugoio/hugo/commit/58927aa1) [@​bep](https://github.com/bep)
- Fix auto-creation of root sections in multilingual sites [`ce009e3`](https://github.com/gohugoio/hugo/commit/ce009e3a) [@​bep](https://github.com/bep) [#​14681](https://github.com/gohugoio/hugo/issues/14681)
- readme: Fix links [`0755872`](https://github.com/gohugoio/hugo/commit/07558724) [@​chicks-net](https://github.com/chicks-net)
### [`v0.160.0`](https://github.com/gohugoio/hugo/releases/tag/v0.160.0)
[Compare Source](https://github.com/gohugoio/hugo/compare/v0.159.2...v0.160.0)
Now you can inject [CSS vars](https://gohugo.io/functions/css/build/#vars), e.g. from the configuration, into your stylesheets when building with [css.Build](https://gohugo.io/functions/css/build/). Also, now all the render hooks has a [.Position](https://gohugo.io/render-hooks/links/#position) method, now also more accurate and effective.
#### Bug fixes
- Fix some recently introduced Position issues [`4e91e14`](https://github.com/gohugoio/hugo/commit/4e91e14c) [@​bep](https://github.com/bep) [#​14710](https://github.com/gohugoio/hugo/issues/14710)
- markup/goldmark: Fix double-escaping of ampersands in link URLs [`dc9b51d`](https://github.com/gohugoio/hugo/commit/dc9b51d2) [@​bep](https://github.com/bep) [#​14715](https://github.com/gohugoio/hugo/issues/14715)
- tpl: Fix stray quotes from partial decorator in script context [`43aad71`](https://github.com/gohugoio/hugo/commit/43aad711) [@​bep](https://github.com/bep) [#​14711](https://github.com/gohugoio/hugo/issues/14711)
#### Improvements
- all: Replace NewIntegrationTestBuilder with Test/TestE/TestRunning [`481baa0`](https://github.com/gohugoio/hugo/commit/481baa08) [@​bep](https://github.com/bep)
- tpl/css: Support [@​import](https://github.com/import) "hugo:vars" for CSS custom properties in css.Build [`5d09b5e`](https://github.com/gohugoio/hugo/commit/5d09b5e3) [@​bep](https://github.com/bep) [#​14699](https://github.com/gohugoio/hugo/issues/14699)
- Improve and extend .Position handling in Goldmark render hooks [`303e443`](https://github.com/gohugoio/hugo/commit/303e443e) [@​bep](https://github.com/bep) [#​14663](https://github.com/gohugoio/hugo/issues/14663)
- markup/goldmark: Clean up test [`638262c`](https://github.com/gohugoio/hugo/commit/638262ce) [@​bep](https://github.com/bep)
#### Dependency Updates
- build(deps): bump github.com/magefile/mage from 1.16.1 to 1.17.1 [`bf6e35a`](https://github.com/gohugoio/hugo/commit/bf6e35a7) [@​dependabot](https://github.com/dependabot)\[bot]
- build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 [`0eda24e`](https://github.com/gohugoio/hugo/commit/0eda24e6) [@​dependabot](https://github.com/dependabot)\[bot]
- build(deps): bump golang.org/x/image from 0.37.0 to 0.38.0 [`beb57a6`](https://github.com/gohugoio/hugo/commit/beb57a68) [@​dependabot](https://github.com/dependabot)\[bot]
#### Documentation
- readme: Revise edition descriptions and installation instructions [`9f1f1be`](https://github.com/gohugoio/hugo/commit/9f1f1be0) [@​jmooring](https://github.com/jmooring)
### [`v0.159.2`](https://github.com/gohugoio/hugo/releases/tag/v0.159.2)
[Compare Source](https://github.com/gohugoio/hugo/compare/v0.159.1...v0.159.2)
Note that the security fix below is not a potential threat if you either:
- Trust your Markdown content files.
- Have custom [render hook template](https://gohugo.io/render-hooks/) for links and images.
EDIT IN: This release also adds release archives for non-extended-withdeploy builds.
#### What's Changed
- Fix potential content XSS by escaping dangerous URLs in Markdown links and images [`479fe6c`](https://github.com/gohugoio/hugo/commit/479fe6c6) [@​bep](https://github.com/bep)
- resources/page: Fix shared reader in Source.ValueAsOpenReadSeekCloser [`df520e3`](https://github.com/gohugoio/hugo/commit/df520e31) [@​jmooring](https://github.com/jmooring) [#​14684](https://github.com/gohugoio/hugo/issues/14684)
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE2MC42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
renovate-bot
changed title from chore(deps): update dependency hugo-extended to v0.160.1 to chore(deps): update dependency hugo-extended to v0.161.02026-05-04 03:17:59 +02:00
mxmehl
merged commit 0d844f6380 into main2026-05-04 11:16:59 +02:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
0.159.1→0.161.00.161.1Release Notes
gohugoio/hugo (hugo-extended)
v0.161.0Compare Source
This release contains two security hardening fixes:
--permissionflag with the permissions defined in security.node.permissions. This means that you need Node >= 22 installed and thatcss.TailwindCSSnow requires that the Tailwind CSS CLI must be installed as a Node.js package. The standalone executable is no longer supportedBut there are some notable new features, as well:
Nested vars support in css.Build and css.Sass
A practical example in
css.Buildwould be to have something like this inhugo.toml:And in the stylesheet:
Slice-based permalinks config
The
permalinksconfiguration is now much more flexible (the old setup still works). It uses the same target matchers as in thecascadeconfig, meaning you can now do:The above example isn't great, but it at least shows the gist of it.
A more flexible scheme for identifiers in filenames
What we had before was e.g.
content/mypost.en.mdwhich told Hugo that the content files was in English. With the new setup you could also name the filecontent/mypost._language_en_.md. This alone doesn't sound very useful, but this allows you to use more prefixes:All Changes
72b85d5@jmooring #79826436deb@jmooring #12602 #12786 #14112 #147691eea9fb@jmooring #147638d6145f@bep #147569747724@bep #14749 #147527622dd8@bep #147050814059@bep #148108920d56@jmooring #14807633cc77@jmooring #142434c40c6d@bepd2594db@bepab2de51@bep75f6183@jmooring1b7495b@jmooring #910979f030b@bep #14792a54c398@bep #7287f5fce93@bep #147774169c1f@bep #147837574e35@bep017a7cd@bep #14744e3413d9@bepb01cc14@bep #147718ee19ff@bep0d58e42@jmooringce2a156@bep #14750a17bdbc@jmooring #146968f94d65@bep90d8bf3@bepbbb42b5@bepd4ae662@dependabot[bot]9ede5fb@dependabot[bot]833a878@dependabot[bot]4c03129@dependabot[bot]080970b@bep896bc89@dependabot[bot]100dde5@dependabot[bot]bdebb79@dependabot[bot]52123ae@dependabot[bot]38b8afd@dependabot[bot]9276660@dependabot[bot]790f408@dependabot[bot]de6955b@dependabot[bot]a77bd52@bep #14758547ab29@dependabot[bot]9a5c7e0@dependabot[bot]6613b08@dependabot[bot]582c26e@dependabot[bot]a4f2a8a@dependabot[bot]v0.160.1Compare Source
What's Changed
8b00030@bep #14677c485516@bep #14740161d0d4@bep #1245745e4596@bep #1473258927aa@bepce009e3@bep #146810755872@chicks-netv0.160.0Compare Source
Now you can inject CSS vars, e.g. from the configuration, into your stylesheets when building with css.Build. Also, now all the render hooks has a .Position method, now also more accurate and effective.
Bug fixes
4e91e14@bep #14710dc9b51d@bep #1471543aad71@bep #14711Improvements
481baa0@bep5d09b5e@bep #14699303e443@bep #14663638262c@bepDependency Updates
bf6e35a@dependabot[bot]0eda24e@dependabot[bot]beb57a6@dependabot[bot]Documentation
9f1f1be@jmooringv0.159.2Compare Source
Note that the security fix below is not a potential threat if you either:
EDIT IN: This release also adds release archives for non-extended-withdeploy builds.
What's Changed
479fe6c@bepdf520e3@jmooring #14684Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.
71958d0759tof234705b4cf234705b4cto2630547c12chore(deps): update dependency hugo-extended to v0.160.1to chore(deps): update dependency hugo-extended to v0.161.0