mxmehl/mehl.mx
1
0
Fork 0
Code Issues 3 Pull Requests 1 Actions Releases Wiki Activity

chore(deps): update dependency hugo-extended to v0.164.0 #21

Open
renovate-bot wants to merge 1 commits from renovate/hugo-extended-0.x into main
pull from: renovate/hugo-extended-0.x
merge into: mxmehl:main
Conversation 0 Commits 1 Files Changed 2
+23 -16
renovate-bot commented 2026-06-12 03:16:40 +02:00
Collaborator
Copy Link
Copy Source

This PR contains the following updates:

Package Update Change
hugo-extended minor 0.162.1 → 0.164.0

Release Notes

gohugoio/hugo (hugo-extended)

v0.164.0

Compare Source

Notable new features in this release are:

Notes

Changes

Dependency Updates

v0.163.3

Compare Source

What's Changed

v0.163.2

Compare Source

What's Changed

v0.163.1

Compare Source

The majority of the fixes in this release are security related (including the upstream fix in 93c8c7d (golang.org/x/image)). Thanks to @​vnth4nhnt for finding the issues fixed in a00b5c7 and cf9c8f9 (I will do the CVE work on this later). There has been a uptick in security reports lately, which doesn't mean that Hugo has gotten less secure, this is mostly the work of the new and powerful AI tools using Hugo's restrictive security model as their baseline. Just take a look at Go's recent security issue list to see a demonstration of this.

What's Changed

v0.163.0

Compare Source

The main topic in this release is improvements to the AVIF image handling that we introduced in v0.162.0. See the docs for details, but:

  • We have turned down the default quality for AVIF to 60. Turns out, JPEG/WebP with quality 75 is comparable to AVIF with quality 60. You can now also set quality per image format in your project config (and also per image processed if needed).
  • We have added a hint to the AVIF with the same values as for WEBP. For lossy compression, the photo/picture hints (and the default) encodes with YUV420 chroma subsampling instead of YUV444, keeping 444 for text/icon/drawing. This greatly reduces the memory needed to encode these images.

Improvements

Dependency Updates

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [hugo-extended](https://github.com/gohugoio/hugo) | minor | `0.162.1` → `0.164.0` | --- ### Release Notes <details> <summary>gohugoio/hugo (hugo-extended)</summary> ### [`v0.164.0`](https://github.com/gohugoio/hugo/releases/tag/v0.164.0) [Compare Source](https://github.com/gohugoio/hugo/compare/v0.163.3...v0.164.0) Notable new features in this release are: - The Chroma highlighter styles now introduces [dark/light pairs](https://gohugo.io/quick-reference/syntax-highlighting-styles/#modes). See also the new flags on the [hugo gen chromastyles](/commands/hugo_gen_chromastyles/) command. - New template funcs [encoding.HexEncode](https://gohugo.io/functions/encoding/hexencode/), [encoding.HexDecode](https://gohugo.io/functions/encoding/hexdecode/), and [crypto.Hash](https://gohugo.io/functions/crypto/hash/). - New [markup.rst.syntaxHighlight](https://gohugo.io/configuration/markup/#syntaxhighlight) option. - We added Pandoc citation support. - We now spport sub paths in layouts passed to [Page.Render](https://gohugo.io/methods/page/render/#article). - This release also fixes a performance regression introduced in Hugo v0.128.0. This should mostly be prominent in bigger sites. See [this discussion](https://discourse.gohugo.io/t/hugo-building-slowly-from-release-0-128-0/57314/20) for some background. #### Notes - tpl/resources: Deprecate resources.PostProcess in favour of templates.Defer [`29ed932`](https://github.com/gohugoio/hugo/commit/29ed9325) [@&#8203;bep](https://github.com/bep) [#&#8203;15086](https://github.com/gohugoio/hugo/issues/15086) #### Changes - all: Rewrite deprecated constructs in tests [`5a5f4a5`](https://github.com/gohugoio/hugo/commit/5a5f4a54) [@&#8203;bep](https://github.com/bep) - tpl/tplimpl: Support sub paths in layouts passed to .Render [`d83ce27`](https://github.com/gohugoio/hugo/commit/d83ce27a) [@&#8203;bep](https://github.com/bep) [#&#8203;15056](https://github.com/gohugoio/hugo/issues/15056) - Add markup.rst.syntaxHighlight option [`c6acc24`](https://github.com/gohugoio/hugo/commit/c6acc246) [@&#8203;bep](https://github.com/bep) [#&#8203;5349](https://github.com/gohugoio/hugo/issues/5349) - tpl/resources: Deprecate resources.PostProcess in favour of templates.Defer [`29ed932`](https://github.com/gohugoio/hugo/commit/29ed9325) [@&#8203;bep](https://github.com/bep) [#&#8203;15086](https://github.com/gohugoio/hugo/issues/15086) - tpl/collections: Include key in IsSet unsupported-type warning [`671897a`](https://github.com/gohugoio/hugo/commit/671897ae) [@&#8203;bejaratommy](https://github.com/bejaratommy) [#&#8203;11794](https://github.com/gohugoio/hugo/issues/11794) - create: Keep new content placeholders buildable [`499794d`](https://github.com/gohugoio/hugo/commit/499794d1) [@&#8203;sjh9714](https://github.com/sjh9714) [#&#8203;15078](https://github.com/gohugoio/hugo/issues/15078) - hugio: Speedup hasBytesWriter [`65c8217`](https://github.com/gohugoio/hugo/commit/65c82178) [@&#8203;bep](https://github.com/bep) - tpl/crypto: Add crypto.Hash [`dfb35dc`](https://github.com/gohugoio/hugo/commit/dfb35dcd) [@&#8203;bep](https://github.com/bep) [#&#8203;15072](https://github.com/gohugoio/hugo/issues/15072) - Add encoding.HexDecode/Encode [`a5ec542`](https://github.com/gohugoio/hugo/commit/a5ec5423) [@&#8203;bep](https://github.com/bep) [#&#8203;15068](https://github.com/gohugoio/hugo/issues/15068) [#&#8203;15060](https://github.com/gohugoio/hugo/issues/15060) - tpl/tplimpl: Make template name lookup case-insensitive [`e46d37a`](https://github.com/gohugoio/hugo/commit/e46d37a9) [@&#8203;jmooring](https://github.com/jmooring) [#&#8203;15057](https://github.com/gohugoio/hugo/issues/15057) - hugolib: Return error from .Render when template not found [`fe06735`](https://github.com/gohugoio/hugo/commit/fe067352) [@&#8203;jmooring](https://github.com/jmooring) [#&#8203;15052](https://github.com/gohugoio/hugo/issues/15052) - markup/pandoc: Add citation support [`128fb17`](https://github.com/gohugoio/hugo/commit/128fb17c) [@&#8203;jmooring](https://github.com/jmooring) [#&#8203;15062](https://github.com/gohugoio/hugo/issues/15062) #### Dependency Updates - build(deps): bump github.com/JohannesKaufmann/html-to-markdown/v2 [`921db7b`](https://github.com/gohugoio/hugo/commit/921db7b5) [@&#8203;dependabot](https://github.com/dependabot)\[bot] - build(deps): bump golang.org/x/tools from 0.45.0 to 0.47.0 [`786ce71`](https://github.com/gohugoio/hugo/commit/786ce71e) [@&#8203;dependabot](https://github.com/dependabot)\[bot] - build(deps): bump golang.org/x/image from 0.42.0 to 0.43.0 [`5ad2846`](https://github.com/gohugoio/hugo/commit/5ad28461) [@&#8203;dependabot](https://github.com/dependabot)\[bot] - build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 [`36ad9f5`](https://github.com/gohugoio/hugo/commit/36ad9f58) [@&#8203;dependabot](https://github.com/dependabot)\[bot] - build(deps): bump github.com/pelletier/go-toml/v2 from 2.4.2 to 2.4.3 [`7c0a0bc`](https://github.com/gohugoio/hugo/commit/7c0a0bc9) [@&#8203;dependabot](https://github.com/dependabot)\[bot] - build(deps): bump github.com/getkin/kin-openapi from 0.139.0 to 0.140.0 [`a879ebf`](https://github.com/gohugoio/hugo/commit/a879ebfa) [@&#8203;dependabot](https://github.com/dependabot)\[bot] - build(deps): bump golang.org/x/mod from 0.36.0 to 0.37.0 [`332d5ec`](https://github.com/gohugoio/hugo/commit/332d5ec8) [@&#8203;dependabot](https://github.com/dependabot)\[bot] - build(deps): bump github.com/pelletier/go-toml/v2 from 2.3.1 to 2.4.2 [`212cc11`](https://github.com/gohugoio/hugo/commit/212cc11a) [@&#8203;dependabot](https://github.com/dependabot)\[bot] - deps: Upgrade github.com/evanw/esbuild v0.28.0 => v0.28.1 [`884439b`](https://github.com/gohugoio/hugo/commit/884439b9) [@&#8203;bep](https://github.com/bep) [#&#8203;15033](https://github.com/gohugoio/hugo/issues/15033) - deps: Add Chroma dark/light mode support [`790a8aa`](https://github.com/gohugoio/hugo/commit/790a8aa4) [@&#8203;bep](https://github.com/bep) [#&#8203;15017](https://github.com/gohugoio/hugo/issues/15017) ### [`v0.163.3`](https://github.com/gohugoio/hugo/releases/tag/v0.163.3) [Compare Source](https://github.com/gohugoio/hugo/compare/v0.163.2...v0.163.3) #### What's Changed - markup/highlight: Escape lang in default code block rendering [`ce1a7e0`](https://github.com/gohugoio/hugo/commit/ce1a7e0b) [@&#8203;bep](https://github.com/bep) thanks to [@&#8203;k0ngj1](https://github.com/k0ngj1) for reporting this issue. - parser/pageparser: Preserve non-ASCII whitespace after e.g. summary divider [`70a9068`](https://github.com/gohugoio/hugo/commit/70a9068a) [@&#8203;bep](https://github.com/bep) - resources: Support babel/postcss config variants [`9d66d51`](https://github.com/gohugoio/hugo/commit/9d66d513) [@&#8203;jmooring](https://github.com/jmooring) [#&#8203;15039](https://github.com/gohugoio/hugo/issues/15039) [#&#8203;15040](https://github.com/gohugoio/hugo/issues/15040) [#&#8203;15043](https://github.com/gohugoio/hugo/issues/15043) - hugolib: Fix page/section name collision regression [`f013346`](https://github.com/gohugoio/hugo/commit/f0133466) [@&#8203;jmooring](https://github.com/jmooring) [#&#8203;15046](https://github.com/gohugoio/hugo/issues/15046) ### [`v0.163.2`](https://github.com/gohugoio/hugo/releases/tag/v0.163.2) [Compare Source](https://github.com/gohugoio/hugo/compare/v0.163.1...v0.163.2) #### What's Changed - Continue resolving on ERR\_ACCESS\_DENIED in Node's resolver [`134674f`](https://github.com/gohugoio/hugo/commit/134674f0) [@&#8203;bep](https://github.com/bep) [#&#8203;15041](https://github.com/gohugoio/hugo/issues/15041) - markup: Standardize behavior when external converters are missing [`147f605`](https://github.com/gohugoio/hugo/commit/147f605f) [@&#8203;jmooring](https://github.com/jmooring) [#&#8203;14222](https://github.com/gohugoio/hugo/issues/14222) ### [`v0.163.1`](https://github.com/gohugoio/hugo/releases/tag/v0.163.1) [Compare Source](https://github.com/gohugoio/hugo/compare/v0.163.0...v0.163.1) The majority of the fixes in this release are security related (including the upstream fix in [`93c8c7d`](https://github.com/gohugoio/hugo/commit/93c8c7d3) (golang.org/x/image)). Thanks to [@&#8203;vnth4nhnt](https://github.com/vnth4nhnt) for finding the issues fixed in [`a00b5c7`](https://github.com/gohugoio/hugo/commit/a00b5c72) and [`cf9c8f9`](https://github.com/gohugoio/hugo/commit/cf9c8f93) (I will do the CVE work on this later). There has been a uptick in security reports lately, which doesn't mean that Hugo has gotten less secure, this is mostly the work of the new and powerful AI tools using Hugo's restrictive [security model](https://gohugo.io/about/security/) as their baseline. Just take a look at Go's recent [security issue list](https://github.com/golang/go/issues?q=is%3Aissue%20label%3ASecurity) to see a demonstration of this. #### What's Changed - build(deps): bump golang.org/x/image from 0.41.0 to 0.42.0 [`93c8c7d`](https://github.com/gohugoio/hugo/commit/93c8c7d3) [@&#8203;dependabot](https://github.com/dependabot)\[bot] - Fix multi --renderSegments merge behavior [`95e5e9f`](https://github.com/gohugoio/hugo/commit/95e5e9f4) [@&#8203;bep](https://github.com/bep) [#&#8203;15024](https://github.com/gohugoio/hugo/issues/15024) - security: Normalize integer IPv4 host encodings in http.urls check [`a00b5c7`](https://github.com/gohugoio/hugo/commit/a00b5c72) [@&#8203;bep](https://github.com/bep) - Drop symlinks in os.ReadDir, os.ReadFile, os.Stat and os.FileExists [`cf9c8f9`](https://github.com/gohugoio/hugo/commit/cf9c8f93) [@&#8203;bep](https://github.com/bep) [#&#8203;15019](https://github.com/gohugoio/hugo/issues/15019) - commands: Fix convert command [`2602796`](https://github.com/gohugoio/hugo/commit/2602796c) [@&#8203;jmooring](https://github.com/jmooring) [#&#8203;15012](https://github.com/gohugoio/hugo/issues/15012) ### [`v0.163.0`](https://github.com/gohugoio/hugo/releases/tag/v0.163.0) [Compare Source](https://github.com/gohugoio/hugo/compare/v0.162.1...v0.163.0) The main topic in this release is improvements to the AVIF image handling that we introduced in `v0.162.0`. See [the docs](https://gohugo.io/configuration/imaging/#avif) for details, but: - We have turned down the default `quality` for AVIF to 60. Turns out, JPEG/WebP with quality 75 is comparable to AVIF with quality 60. You can now also set quality per image format in your project config (and also per image processed if needed). - We have added a `hint` to the AVIF with the same values as for `WEBP`. For `lossy` compression, the photo/picture hints (and the default) encodes with YUV420 chroma subsampling instead of YUV444, keeping 444 for text/icon/drawing. This greatly reduces the memory needed to encode these images. #### Improvements - resources/jsconfig: Remove deprecated baseUrl setting [`ff2903a`](https://github.com/gohugoio/hugo/commit/ff2903a9) [@&#8203;bep](https://github.com/bep) [#&#8203;14991](https://github.com/gohugoio/hugo/issues/14991) [#&#8203;14996](https://github.com/gohugoio/hugo/issues/14996) - all: Adjust tests for deprecated link and image render hook settings [`ca68936`](https://github.com/gohugoio/hugo/commit/ca68936d) [@&#8203;jmooring](https://github.com/jmooring) - all: Run go fix ./... [`781fabf`](https://github.com/gohugoio/hugo/commit/781fabf4) [@&#8203;bep](https://github.com/bep) - pagesfromdata: Use relative path for content adapter template metrics [`1d018ef`](https://github.com/gohugoio/hugo/commit/1d018ef8) [@&#8203;anupamojha-eng](https://github.com/anupamojha-eng) [#&#8203;14999](https://github.com/gohugoio/hugo/issues/14999) - ci: Re-add macos-latest to the test matrix [`121bc6c`](https://github.com/gohugoio/hugo/commit/121bc6ce) [@&#8203;bep](https://github.com/bep) - images: Deprecate Imaging.Compression and move it down to webp and avif configs [`cf18b82`](https://github.com/gohugoio/hugo/commit/cf18b827) [@&#8203;bep](https://github.com/bep) [#&#8203;14998](https://github.com/gohugoio/hugo/issues/14998) - Only support the latest Go version [`98ad9b3`](https://github.com/gohugoio/hugo/commit/98ad9b3c) [@&#8203;bep](https://github.com/bep) [#&#8203;14997](https://github.com/gohugoio/hugo/issues/14997) - page: Add IsBranch and deprecate IsNode [`b89e7fe`](https://github.com/gohugoio/hugo/commit/b89e7fe6) [@&#8203;bep](https://github.com/bep) [#&#8203;11574](https://github.com/gohugoio/hugo/issues/11574) - images: Force cache invalidation for AVIF target [`e8fefc8`](https://github.com/gohugoio/hugo/commit/e8fefc83) [@&#8203;bep](https://github.com/bep) [#&#8203;14990](https://github.com/gohugoio/hugo/issues/14990) - images: Add a per-format AVIF hint setting [`a043d3e`](https://github.com/gohugoio/hugo/commit/a043d3ec) [@&#8203;bep](https://github.com/bep) [#&#8203;14992](https://github.com/gohugoio/hugo/issues/14992) - images: Make AVIF chroma subsampling content-aware via the hint [`341f575`](https://github.com/gohugoio/hugo/commit/341f575d) [@&#8203;bep](https://github.com/bep) [#&#8203;14987](https://github.com/gohugoio/hugo/issues/14987) - Cap AVIF lossy quality at 99 [`248241b`](https://github.com/gohugoio/hugo/commit/248241b6) [@&#8203;bep](https://github.com/bep) [#&#8203;14981](https://github.com/gohugoio/hugo/issues/14981) - config: Deprecate the glogal imaging quality setting [`4e47d95`](https://github.com/gohugoio/hugo/commit/4e47d95d) [@&#8203;bep](https://github.com/bep) [#&#8203;14979](https://github.com/gohugoio/hugo/issues/14979) - images: Make 60 the default quality for AVIF [`03b4b54`](https://github.com/gohugoio/hugo/commit/03b4b542) [@&#8203;bep](https://github.com/bep) [#&#8203;14979](https://github.com/gohugoio/hugo/issues/14979) - livereload: Disconnect from websocket server on pageswap [`79be053`](https://github.com/gohugoio/hugo/commit/79be0532) [@&#8203;bep](https://github.com/bep) [#&#8203;14983](https://github.com/gohugoio/hugo/issues/14983) - tpl/tplimpl/embedded: Prevent leading newline in sitemap template [`0f44046`](https://github.com/gohugoio/hugo/commit/0f440460) [@&#8203;bep](https://github.com/bep) [#&#8203;14977](https://github.com/gohugoio/hugo/issues/14977) - images: Recover from memory alloc errors in WASM image processors [`4e17421`](https://github.com/gohugoio/hugo/commit/4e17421e) [@&#8203;bep](https://github.com/bep) [#&#8203;14985](https://github.com/gohugoio/hugo/issues/14985) - images: Add quality setting per image format [`b01ecd4`](https://github.com/gohugoio/hugo/commit/b01ecd4c) [@&#8203;bep](https://github.com/bep) [#&#8203;14957](https://github.com/gohugoio/hugo/issues/14957) - misc: Remove duplicate words in comments [`45c00b7`](https://github.com/gohugoio/hugo/commit/45c00b7c) [@&#8203;jmooring](https://github.com/jmooring) [#&#8203;14936](https://github.com/gohugoio/hugo/issues/14936) [#&#8203;14950](https://github.com/gohugoio/hugo/issues/14950) [#&#8203;14965](https://github.com/gohugoio/hugo/issues/14965) - Add some PNG to AVIF golden test cases [`28d882a`](https://github.com/gohugoio/hugo/commit/28d882ab) [@&#8203;bep](https://github.com/bep) #### Dependency Updates - build(deps): bump github.com/bits-and-blooms/bitset [`0d29fc8`](https://github.com/gohugoio/hugo/commit/0d29fc81) [@&#8203;dependabot](https://github.com/dependabot)\[bot] - build(deps): bump github.com/tetratelabs/wazero [`bb57404`](https://github.com/gohugoio/hugo/commit/bb57404f) [@&#8203;dependabot](https://github.com/dependabot)\[bot] - build(deps): bump github.com/rogpeppe/go-internal from 1.14.1 to 1.15.0 [`7d1b1fb`](https://github.com/gohugoio/hugo/commit/7d1b1fb3) [@&#8203;dependabot](https://github.com/dependabot)\[bot] - build(deps): bump github.com/getkin/kin-openapi from 0.138.0 to 0.139.0 [`77a1147`](https://github.com/gohugoio/hugo/commit/77a11470) [@&#8203;dependabot](https://github.com/dependabot)\[bot] </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMjAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI1Ni4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
renovate-bot force-pushed renovate/hugo-extended-0.x from adf83c7d73 to 876816c757 2026-06-15 03:16:40 +02:00 Compare
renovate-bot changed title from chore(deps): update dependency hugo-extended to v0.163.0 to chore(deps): update dependency hugo-extended to v0.163.1 2026-06-15 03:16:41 +02:00
renovate-bot force-pushed renovate/hugo-extended-0.x from 876816c757 to d6a9d7d4c9 2026-06-17 13:53:00 +02:00 Compare
renovate-bot changed title from chore(deps): update dependency hugo-extended to v0.163.1 to chore(deps): update dependency hugo-extended to v0.163.2 2026-06-19 03:16:51 +02:00
renovate-bot force-pushed renovate/hugo-extended-0.x from d6a9d7d4c9 to 53906ba4bb 2026-06-19 03:16:51 +02:00 Compare
renovate-bot changed title from chore(deps): update dependency hugo-extended to v0.163.2 to chore(deps): update dependency hugo-extended to v0.163.3 2026-06-22 03:17:16 +02:00
renovate-bot force-pushed renovate/hugo-extended-0.x from 53906ba4bb to 199382c078 2026-06-22 03:17:17 +02:00 Compare
renovate-bot added 1 commit 2026-07-10 03:17:52 +02:00
chore(deps): update dependency hugo-extended to v0.164.0
renovate/stability-days Updates have met minimum release age requirement
Details
Website build and deploy / build (pull_request) Successful in 1m3s
Details
67671979d7
renovate-bot force-pushed renovate/hugo-extended-0.x from 199382c078 to 67671979d7 2026-07-10 03:17:52 +02:00 Compare
renovate-bot changed title from chore(deps): update dependency hugo-extended to v0.163.3 to chore(deps): update dependency hugo-extended to v0.164.0 2026-07-10 03:17:52 +02:00
Some checks are pending
renovate/stability-days Updates have met minimum release age requirement
Details
Website build and deploy / build (pull_request) Successful in 1m3s
Details
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/hugo-extended-0.x:renovate/hugo-extended-0.x
git checkout renovate/hugo-extended-0.x
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
renovate-bot mxmehl
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mxmehl/mehl.mx#21
Delete Branch "renovate/hugo-extended-0.x"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?