Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 1, 2025

This PR contains the following updates:

Package Update Change
hugo minor 0.142.0 -> 0.152.2

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

gohugoio/hugo (hugo)

v0.152.2

Compare Source

In v0.152.0 we tightened the source validation for file mounts. We always said that project mounts can mount with absolute file/directorynames, modules/themes are restricted to relative. In v0.152.0 we narrowed module/themes mounts to be local, which made the setup in the bug report listed below fail:

[[module.mounts]]
source = '../../node_modules/bootstrap'
target = 'assets/vendor/bootstrap'

One part of this is security. But the construct above is usually very odd (the project uses files in a theme/module, not the other way around) and not very portable. But the example above demonstrates a valid exception, that we now have added support for in a portable way. The above example now works as it did before v0.152.0, but going forward you can also write:

[[module.mounts]]
source = 'node_modules/bootstrap'
target = 'assets/vendor/bootstrap'

We now have the node_modules as a special case: For themes/modules we first check if the mounted source exists locally, if not we try relative to the project root.

What's Changed

v0.152.1

Compare Source

These fixes are are all related to the YAML library upgrade in v0.152.0.

v0.152.0

Compare Source

The big new thing and the motivation behind this release is the upgrade to a more modern YAML library in @​goccy 's github.com/goccy/go-yaml. It's been a surprisingly long and winding road to get here. Note that this upgrade comes with some minor breaking changes, most notably that the old YAML 1.1 spec listed a set of strings that, when unquoted, were treated as boolean true or false. So if you're using any of the values in the table below as booleans, you need to adjust your YAML, but I suspect that fixing this very surprising behavior will fix more issues than it introduces. A big new thing with this new YAML library is the support for YAML anchors and aliases which helps to reduce duplication in e.g. your configuration. There are some examples in Hugo's release build configuration and in the Hugo's CI release setup.

Values Old meaning New meaning
yes, Yes, YES, y, Y, on, On, ON true (bool) yes, Yes, YES, y, Y, on, On, ON (string)
no, No, NO, n, N, off, Off, OFF false (bool) no, No, NO, n, N, off, Off, OFF (string)

Note

Improvements

Dependency Updates

Build Setup

v0.151.2

Compare Source

What's Changed

v0.151.1

Compare Source

This release is mostly motivated by some upstream security fixes:

I, @​bep, have inspected the above issues, and none of them seem to be relevant for Hugo, but we understand that many want to have a clean security report.

Bug fixes

Improvements

Dependency Updates

v0.151.0

Compare Source

Some notable new features in Hugo v0.151.0 are:

Note

Improvements and bug fixes

Dependency Updates

v0.150.1

Compare Source

What's Changed

v0.150.0

Compare Source

The big new feature in this relase is the new version config option on Module imports, which allows you to set the requested module version query directly in your Hugo configuration (e.g. hugo.toml). This is a feature that have been requested by many, and I (@​bep) was reminded about it by this recent thread, which also outlines a common use case for this: Mounting multiple old versions/branches of API documentation into the project.

What's Changed

v0.149.1

Compare Source

The main motivation behind this release is the Go 1.25.1 upgrade, which comes with a security fix. Hugo does not use the feature in question, but we understand that many Hugo users like to have a clean security report.

Note

Note that CSS minification now targets CSS3, removing certain optimizations that were specific to CSS2.

What's Changed

v0.149.0

Compare Source

[!NOTE]
If running on Netlify, make sure you have configured your build with their latest build image, see this issue.

Hugo v0.149.0 comes with bug fixes and a set of new features/improvements, notably:

Note

Bug fixes

Improvements

Dependency Updates

Documentation

v0.148.2

Compare Source

What's Changed

v0.148.1

Compare Source

What's Changed

v0.148.0

Compare Source

[!NOTE]
There's some minor breaking changes in this release. Please read this thread for more information.

Note

Bug fixes

Improvements

Dependency Updates

v0.147.9

Compare Source

Improvements and fixes

Dependency Updates

v0.147.8

Compare Source

The primary motivation behind this release is to get the Docker package security patched and up to date.

Improvements

Dependency Updates

v0.147.7

Compare Source

Bug fixes

Improvements

Dependency Updates

v0.147.6

Compare Source

What's Changed

v0.147.5

Compare Source

We have gotten some requests about updating the minifier library we use, so here you go @​myitcv and others. I'm probably going to regret doing that particular upgrade on a Thursday, but so be it.

What's Changed

v0.147.4

Compare Source

What's Changed

v0.147.3

Compare Source

Mostly bug fixes here, but also a new template func to get a really big number. You can read about why that is useful in the documentation.

v0.147.2

Compare Source

What's Changed

v0.147.1

Compare Source

Bug fixes

Improvements

Dependency Updates

v0.147.0

Compare Source

This release comes with a new aligny option (shoutout to @​pranshugaba for the implementation) for images.Text that, in combination with alignx makes it simple to e.g. center the text on top of image in both axis. But the main reason this release comes now and not later, is the improvements/fixes to the order Hugo applies the default configuration to some keys. This is inherited from how we did this before we rewrote the configuration handling, and it made the merging of configuration from modules/themes into the config root harder and less flexible than it had to be. Me, @​bep, looking into this, was triggered by this forum topic. Having many sites share a common configuration is very useful. With this release, you can simply get what the thread starter asks for by doing something à la:

baseURL = "http://example.org"
title = "My Hugo Site"

### ... import any themes/modules.
### This will merge in all config imported from imported modules. 
_merge = "deep"

See the documentation for details.

Bug fixes

Improvements


Configuration

📅 Schedule: Branch creation - "every weekend" in timezone US/Eastern, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/hugo-0.x branch 26 times, most recently from d3431f9 to b2ef1ea Compare November 8, 2025 10:59
@renovate renovate bot force-pushed the renovate/hugo-0.x branch 4 times, most recently from 2958e6e to 142c675 Compare November 10, 2025 11:56
@renovate renovate bot force-pushed the renovate/hugo-0.x branch 16 times, most recently from 5d94643 to bb24d51 Compare November 25, 2025 19:12
@renovate renovate bot force-pushed the renovate/hugo-0.x branch 12 times, most recently from 27272a3 to 10b9593 Compare December 2, 2025 21:15
@renovate renovate bot force-pushed the renovate/hugo-0.x branch from 10b9593 to df0ade3 Compare December 3, 2025 05:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant