Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 9, 2025

Bumps github.com/gohugoio/hugo from 0.124.0 to 0.147.8.

Release notes

Sourced from github.com/gohugoio/hugo's releases.

v0.147.8

The primary motivation behind this release is to get the Docker package security patched and up to date.

Improvements

  • dockerfile: Update Alpine 8e61f1fe1 @​bep #13783
  • dockerfile: Update Go version f37412a57 @​bep #13780
  • hugolib: Emit ignorable warning when home page is a leaf bundle 01241d5dc @​jmooring #13538
  • all: Replace _build with build in tests 32eb1a8ad @​bep

Dependency Updates

  • build(deps): bump github.com/evanw/esbuild from 0.25.3 to 0.25.5 21a4a9acd @​dependabot[bot]
  • build(deps): bump github.com/niklasfasching/go-org from 1.7.0 to 1.8.0 7a4a4790e @​dependabot[bot]
  • build(deps): bump golang.org/x/net from 0.39.0 to 0.40.0 54065b7ef @​dependabot[bot]
  • build(deps): bump github.com/yuin/goldmark from 1.7.11 to 1.7.12 e333836f4 @​dependabot[bot]
  • build(deps): bump github.com/tdewolff/minify/v2 from 2.23.5 to 2.23.8 cc7bfeea3 @​dependabot[bot]

v0.147.7

Bug fixes

  • Fix language handling in shortcode templates 5273a884d @​bep #13767
  • Make sure that unreferenced but changed bundle resources gets republished 766a2e786 @​bep #13748
  • resources/page: Respect disablePathToLower for permalink tokens 843ffeb48 @​jmooring #13755

Improvements

  • Handle KaTeX warnings (#13760) 633494851 @​bep #13735
  • common/collections: Increase test coverage bff5d1912 @​pixel365
  • parser/pageparser: Add coverage for all IsX methods of Item da370d30d @​pixel365
  • resources: Remove unused interface 6bd328c58 @​bep

Dependency Updates

  • build(deps): bump golang.org/x/image from 0.26.0 to 0.27.0 75259636c @​dependabot[bot]
  • build(deps): bump golang.org/x/text from 0.24.0 to 0.25.0 0df9f3510 @​dependabot[bot]
  • build(deps): bump github.com/spf13/cast from 1.7.1 to 1.8.0 302e6a726 @​dependabot[bot]
  • build(deps): bump github.com/alecthomas/chroma/v2 from 2.17.2 to 2.18.0 202fe0d45 @​dependabot[bot]
  • deps: Upgrade github.com/olekukonko/tablewriter v0.0.5 => v1.0.7 13e161755 @​bep

v0.147.6

What's Changed

  • Improve warning message on superfluous prefix when using function 'partials.Include' e57dcd379 @​deining

... (truncated)

Commits
  • 10da2bd releaser: Bump versions for release of 0.147.8
  • 01241d5 hugolib: Emit ignorable warning when home page is a leaf bundle
  • 8e61f1f dockerfile: Update Alpine
  • f37412a dockerfile: Update Go version
  • 21a4a9a build(deps): bump github.com/evanw/esbuild from 0.25.3 to 0.25.5
  • 7a4a479 build(deps): bump github.com/niklasfasching/go-org from 1.7.0 to 1.8.0
  • 54065b7 build(deps): bump golang.org/x/net from 0.39.0 to 0.40.0
  • e333836 build(deps): bump github.com/yuin/goldmark from 1.7.11 to 1.7.12
  • cc7bfee build(deps): bump github.com/tdewolff/minify/v2 from 2.23.5 to 2.23.8
  • 32eb1a8 all: Replace _build with build in tests
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/gohugoio/hugo](https://github.com/gohugoio/hugo) from 0.124.0 to 0.147.8.
- [Release notes](https://github.com/gohugoio/hugo/releases)
- [Changelog](https://github.com/gohugoio/hugo/blob/master/hugoreleaser.yaml)
- [Commits](gohugoio/hugo@v0.124.0...v0.147.8)

---
updated-dependencies:
- dependency-name: github.com/gohugoio/hugo
  dependency-version: 0.147.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jun 9, 2025
@github-actions github-actions bot added the stale label Jun 17, 2025
@github-actions github-actions bot closed this Jun 21, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 21, 2025

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/go_modules/github.com/gohugoio/hugo-0.147.8 branch June 21, 2025 01:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code stale

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants