Errors after upgrades

[okohll]

I've just upgraded all of node, hugo and docsy and have some errors after running hugo.

• Node is now 26.0.0, from homebrew
• hugo is v0.161.1, also from homebrew
• docsy was upgraded with 'hugo mod get -u github.com/google/docsy'

The output of 'hugo' is

oliverkohll@Olivers-MacBook-Air-3 ~/w/abdocs (master)> hugo
Start building sites … 
hugo v0.161.1+extended+withdeploy darwin/arm64 BuildDate=2026-04-29T13:56:01Z VendorInfo=Homebrew

WARN  deprecated: .Language.LanguageDirection was deprecated in Hugo v0.158.0 and will be removed in a future release. Use .Language.Direction instead.
Total in 2265 ms
ERROR error building site: render: [en v1.0.0 guest] failed to render pages: render of "/Users/oliverkohll/workspace/abdocs/content/blog/_index.md" failed: "/Users/oliverkohll/Library/Caches/hugo_cache/modules/filecache/modules/pkg/mod/github.com/google/docsy@v0.15.0/layouts/docs/baseof.html:9:7": execute of template failed: template: docs/list.html:9:7: executing "docs/list.html" at <partial "head.html" .>: error calling partial: "/Users/oliverkohll/Library/Caches/hugo_cache/modules/filecache/modules/pkg/mod/github.com/google/docsy@v0.15.0/layouts/_partials/head.html:64:3": execute of template failed: template: _partials/head.html:64:3: executing "_partials/head.html" at <partialCached "head-css.html" . "head-css-cache-key">: error calling partialCached: "/Users/oliverkohll/Library/Caches/hugo_cache/modules/filecache/modules/pkg/mod/github.com/google/docsy@v0.15.0/layouts/_partials/head-css.html:19:35": execute of template failed: template: _partials/head-css.html:19:35: executing "_partials/head-css.html" at <$css.RelPermalink>: error calling RelPermalink: POSTCSS: failed to transform "/scss/main.css" (text/css): Error: Access to this API has been restricted. Use --allow-fs-read to manage permissions.
    at Object.existsSync (node:fs:286:18)
    at isFile (/Users/oliverkohll/workspace/abdocs/node_modules/browserslist/node.js:42:19)
    at /Users/oliverkohll/workspace/abdocs/node_modules/browserslist/node.js:340:11
    at eachParent (/Users/oliverkohll/workspace/abdocs/node_modules/browserslist/node.js:53:18)
    at Object.findConfig (/Users/oliverkohll/workspace/abdocs/node_modules/browserslist/node.js:328:20)
    at browserslist.loadConfig (/Users/oliverkohll/workspace/abdocs/node_modules/browserslist/node.js:237:37)
    at prepareQueries (/Users/oliverkohll/workspace/abdocs/node_modules/browserslist/index.js:365:31)
    at browserslist (/Users/oliverkohll/workspace/abdocs/node_modules/browserslist/index.js:388:13)
    at Browsers.parse (/Users/oliverkohll/workspace/abdocs/node_modules/autoprefixer/lib/browsers.js:61:12)
    at new Browsers (/Users/oliverkohll/workspace/abdocs/node_modules/autoprefixer/lib/browsers.js:11:26) {
  code: 'ERR_ACCESS_DENIED',
  permission: 'FileSystemRead',
  resource: '/Users/oliverkohll/workspace/package.json'
}

Does anyone know where to start debugging this? It is likely to be down to node, hugo, my content or docsy?

I don't know why it would be reading that file /Users/oliverkohll/workspace/package.json as that's outside of the project directory (it's in the parent) and doesn't exist. I tried copying the project's package.json there but with the same result.

[deining]

With hugo v0.160, Node's --permission model was enabled.

Please try to reinstall your npm dependencies by running this command

npm i

If this does not help, you may consider disabling Node permissions in your hugo.toml:

[security.node]
      disable = true

Hope this helps.

[okohll]

Thanks you, pointed me in the right direction - in the end I needed

[security]
[security.node]
[security.node.permissions]
disable = true

(from https://gohugo.io/configuration/security/)