chore: bump github.com/gohugoio/hugo from 0.124.0 to 0.150.0

[dependabot]

Bumps github.com/gohugoio/hugo from 0.124.0 to 0.150.0.

Release notes

Sourced from github.com/gohugoio/hugo's releases.

v0.150.0

The big new feature in this relase is the new version config option on Module imports, which allows you to set the requested module version query directly in your Hugo configuration (e.g. hugo.toml). This is a feature that have been requested by many, and I (@​bep) was reminded about it by this recent thread, which also outlines a common use case for this: Mounting multiple old versions/branches of API documentation into the project.

What's Changed

• build(deps): bump golang.org/x/mod from 0.27.0 to 0.28.0 d1f6a1dc5 @​dependabot[bot]
• modules: Add support for direct version module imports in hugo.toml 747cf4ad6 @​bep #13964
• resources/page: Fix truncated summary logic d8774d7fc @​jmooring #13967 #13968
• config/security: Add PROGRAMDATA to the osenv allowlist 3b8947d82 @​jmooring

v0.149.1

The main motivation behind this release is the Go 1.25.1 upgrade, which comes with a security fix. Hugo does not use the feature in question, but we understand that many Hugo users like to have a clean security report.

Note

Note that CSS minification now targets CSS3, removing certain optimizations that were specific to CSS2.

What's Changed

• Remove noindex meta tag from alias.html 25c0f2408 @​lzap
• Fix nilpointer on ToC heading 4f2d2b2cc @​bep #11843
• tpl/collections: Require collections.D args to be ints b8eb45c9d @​bep #13952
• Upgrade to Go 1.25.1 1d90afff1 @​bep #13960
• Fix config env handling for some slice options e751afa9b @​PikachuTW #13950
• minifiers: Update deprecation handling a09b8a60e @​jmooring #11893 #13947 #13948

v0.149.0

[!NOTE]
If running on Netlify, make sure you have configured your build with their latest build image, see this issue.

Hugo v0.149.0 comes with bug fixes and a set of new features/improvements, notably:

• We now build with the recently released Go 1.25
• A new collections.D template function that generates random sequences of integers using J. S. Vitter’s Method D, by some called The Best Algorithm No One Knows About.
• Two new permalinks tokens, :sectionslug and :sectionslugs, especially useful in multilingual Hugo projects.
• A new --omitClassComments flag on hugo gen chromastyles
• Several improvements to how ToC from Markdown gets rendered, see #13401 and #12605.
• A new format option in transform.Unmarshal

Note

• Remove test with deprecated path usage 80e973ea5 @​bep

... (truncated)

Commits

• 3f5473b releaser: Bump versions for release of 0.150.0
• d1f6a1d build(deps): bump golang.org/x/mod from 0.27.0 to 0.28.0
• 747cf4a modules: Add support for direct version module imports in hugo.toml
• d8774d7 resources/page: Fix truncated summary logic
• 3b8947d config/security: Add PROGRAMDATA to the osenv allowlist
• 321a66e releaser: Prepare repository for 0.150.0-DEV
• 57a784e releaser: Bump versions for release of 0.149.1
• 25c0f24 Remove noindex meta tag from alias.html
• 4f2d2b2 Fix nilpointer on ToC heading
• b8eb45c tpl/collections: Require collections.D args to be ints
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #704.