- Notifications
You must be signed in to change notification settings - Fork1.1k
Commit277b2d2
authored
chore: bump github.com/gohugoio/hugo from 0.151.2 to 0.152.2 (#20495)
Bumps [github.com/gohugoio/hugo](https://github.com/gohugoio/hugo) from0.151.2 to 0.152.2.<details><summary>Release notes</summary><p><em>Sourced from <ahref="https://github.com/gohugoio/hugo/releases">github.com/gohugoio/hugo'sreleases</a>.</em></p><blockquote><h2>v0.152.2</h2><p>In <code>v0.152.0</code> we tightened the source validation for <ahref="https://gohugo.io/configuration/module/#mounts">file mounts</a>.We always said that <em>project mounts can mount with absolutefile/directorynames, modules/themes are restricted to relative</em>. In<code>v0.152.0</code> we narrowed module/themes mounts to be local,which made the setup in the bug report listed below fail:</p><pre lang="toml"><code>[[module.mounts]]source = '../../node_modules/bootstrap'target = 'assets/vendor/bootstrap'</code></pre><p>One part of this is security. But the construct above is<em>usually</em> very odd (the project uses files in a theme/module, notthe other way around) and not very portable. But the example abovedemonstrates a valid exception, that we now have added support for in aportable way. The above example now works as it did before<code>v0.152.0</code>, but going forward you can also write:</p><pre lang="toml"><code>[[module.mounts]]source = 'node_modules/bootstrap'target = 'assets/vendor/bootstrap'</code></pre><p>We now have the <code>node_modules</code> as a special case: Forthemes/modules we first check if the mounted source exists locally, ifnot we try relative to the project root.</p><h2>What's Changed</h2><ul><li>deps: Update github.com/tdewolff/minify v2.24.4 => v2.24.51c8c21e45 <ahref="https://github.com/jmooring"><code>@jmooring</code></a> <ahref="https://redirect.github.com/gohugoio/hugo/issues/14086">#14086</a></li><li>hugofs: Make node_modules a "special case" mount 809ebe01f<a href="https://github.com/bep"><code>@bep</code></a> <ahref="https://redirect.github.com/gohugoio/hugo/issues/14089">#14089</a></li><li>github: Fix typo in stale PR message 08a0679a8 <ahref="https://github.com/jordelver"><code>@jordelver</code></a></li></ul><h2>v0.152.1</h2><p>These fixes are are all related to the YAML library upgrade in <ahref="https://github.com/gohugoio/hugo/releases/tag/v0.152.0">v0.152.0</a>.</p><ul><li>Expand the numeric conversions to template funcs/methods e08278d16<a href="https://github.com/bep"><code>@bep</code></a> <ahref="https://redirect.github.com/gohugoio/hugo/issues/14079">#14079</a></li><li>Fix where with uint64 df4f80d54 <ahref="https://github.com/bep"><code>@bep</code></a> <ahref="https://redirect.github.com/gohugoio/hugo/issues/14081">#14081</a></li><li>Fix it so YAML integer types can be used where Go int types areexpected d4c78885a <ahref="https://github.com/bep"><code>@bep</code></a> <ahref="https://redirect.github.com/gohugoio/hugo/issues/14079">#14079</a></li><li>tpl/compare: Fix compare/sort of uint64s 29e2c2fa9 <ahref="https://github.com/bep"><code>@bep</code></a> <ahref="https://redirect.github.com/gohugoio/hugo/issues/14078">#14078</a></li><li>Fix "assignment to entry in nil map" on empty YAML configfiles 0579afc3c <a href="https://github.com/bep"><code>@bep</code></a><ahref="https://redirect.github.com/gohugoio/hugo/issues/14074">#14074</a></li></ul><h2>v0.152.0</h2><p>The big new thing and the motivation behind this release is theupgrade to a more modern YAML library in <ahref="https://github.com/goccy"><code>@goccy</code></a> 's <ahref="https://github.com/goccy/go-yaml">github.com/goccy/go-yaml</a>.It's been a surprisingly long and winding road to get here. <strong>Notethat this upgrade comes with some minor breaking changes, most notablythat the old YAML 1.1 spec listed a set of strings that, when unquoted,were treated as boolean <code>true</code> or<code>false</code>.</strong> So if you're using any of the values in thetable below as booleans, you need to adjust your YAML, but I suspectthat fixing this very surprising behavior will fix more issues than itintroduces. A big new thing with this new YAML library is the supportfor <ahref="https://www.linode.com/docs/guides/yaml-anchors-aliases-overrides-extensions/">YAMLanchors and aliases</a> which helps to reduce duplication in e.g. yourconfiguration. There are some examples in Hugo's <ahref="https://github.com/gohugoio/hugo/blob/master/hugoreleaser.yaml">releasebuild configuration</a> and in the <ahref="https://github.com/gohugoio/hugo/blob/master/.circleci/config.yml">Hugo'sCI release setup</a>.</p><table><thead><tr><th align="left">Values</th><th align="left">Old meaning</th><th align="left">New meaning</th></tr></thead><tbody><tr><td align="left"><code>yes</code>, <code>Yes</code>, <code>YES</code>,<code>y</code>, <code>Y</code>, <code>on</code>, <code>On</code>,<code>ON</code></td><td align="left"><code>true</code> (bool)</td><td align="left"><code>yes</code>, <code>Yes</code>, <code>YES</code>,<code>y</code>, <code>Y</code>, <code>on</code>, <code>On</code>,<code>ON</code> (string)</td></tr><tr><td align="left"><code>no</code>, <code>No</code>, <code>NO</code>,<code>n</code>, <code>N</code>, <code>off</code>, <code>Off</code>,<code>OFF</code></td><td align="left"><code>false</code> (bool)</td><td align="left"><code>no</code>, <code>No</code>, <code>NO</code>,<code>n</code>, <code>N</code>, <code>off</code>, <code>Off</code>,<code>OFF</code> (string)</td></tr></tbody></table><h2>Note</h2><ul><li>Replace to gopkg.in/yaml with github.com/goccy/go-yaml (note)a3d954846 <a href="https://github.com/bep"><code>@bep</code></a> <ahref="https://redirect.github.com/gohugoio/hugo/issues/8822">#8822</a><ahref="https://redirect.github.com/gohugoio/hugo/issues/13043">#13043</a><ahref="https://redirect.github.com/gohugoio/hugo/issues/14053">#14053</a></li></ul><!-- raw HTML omitted --></blockquote><p>... (truncated)</p></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/gohugoio/hugo/commit/6abdacad3f3fe944ea42177844469139e81feda6"><code>6abdaca</code></a>releaser: Bump versions for release of 0.152.2</li><li><ahref="https://github.com/gohugoio/hugo/commit/1c8c21e45eb7d87c1038b3f3b9ea87b82a11c867"><code>1c8c21e</code></a>deps: Update github.com/tdewolff/minify v2.24.4 => v2.24.5</li><li><ahref="https://github.com/gohugoio/hugo/commit/809ebe01fa954a44a48c265f0c9a4e4845b9a0f8"><code>809ebe0</code></a>hugofs: Make node_modules a "special case" mount</li><li><ahref="https://github.com/gohugoio/hugo/commit/08a0679a895678b38f1324ae78503fd32ec22996"><code>08a0679</code></a>github: Fix typo in stale PR message</li><li><ahref="https://github.com/gohugoio/hugo/commit/524b98665b64f206f14879ffe29c64f413592a2f"><code>524b986</code></a>releaser: Prepare repository for 0.153.0-DEV</li><li><ahref="https://github.com/gohugoio/hugo/commit/5869cbddd88590563c2b7b400e804ccc7d2cb697"><code>5869cbd</code></a>releaser: Bump versions for release of 0.152.1</li><li><ahref="https://github.com/gohugoio/hugo/commit/e08278d165399bd2d7d7331d966129a2faa268b2"><code>e08278d</code></a>Expand the numeric conversions to template funcs/methods</li><li><ahref="https://github.com/gohugoio/hugo/commit/df4f80d54f389407d935a0388707be2bf888d882"><code>df4f80d</code></a>Fix where with uint64</li><li><ahref="https://github.com/gohugoio/hugo/commit/d4c78885ae4cb7c488ea2ed399aa57f0861f44cb"><code>d4c7888</code></a>Fix it so YAML integer types can be used where Go int types areexpected</li><li><ahref="https://github.com/gohugoio/hugo/commit/29e2c2fa92b10c1250376913558448e838e390fe"><code>29e2c2f</code></a>tpl/compare: Fix compare/sort of uint64s</li><li>Additional commits viewable in <ahref="https://github.com/gohugoio/hugo/compare/v0.151.2...v0.152.2">compareview</a></li></ul></details><br />[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)Dependabot will resolve any conflicts with this PR as long as you don'talter it yourself. You can also trigger a rebase manually by commenting`@dependabot rebase`.[//]: # (dependabot-automerge-start)[//]: # (dependabot-automerge-end)---<details><summary>Dependabot commands and options</summary><br />You can trigger Dependabot actions by commenting on this PR:- `@dependabot rebase` will rebase this PR- `@dependabot recreate` will recreate this PR, overwriting any editsthat have been made to it- `@dependabot merge` will merge this PR after your CI passes on it- `@dependabot squash and merge` will squash and merge this PR afteryour CI passes on it- `@dependabot cancel merge` will cancel a previously requested mergeand block automerging- `@dependabot reopen` will reopen this PR if it is closed- `@dependabot close` will close this PR and stop Dependabot recreatingit. You can achieve the same result by closing it manually- `@dependabot show <dependency name> ignore conditions` will show allof the ignore conditions of the specified dependency- `@dependabot ignore this major version` will close this PR and stopDependabot creating any more for this major version (unless you reopenthe PR or upgrade to it yourself)- `@dependabot ignore this minor version` will close this PR and stopDependabot creating any more for this minor version (unless you reopenthe PR or upgrade to it yourself)- `@dependabot ignore this dependency` will close this PR and stopDependabot creating any more for this dependency (unless you reopen thePR or upgrade to it yourself)</details>Signed-off-by: dependabot[bot] <support@github.com>Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>1 parentaf3ff82 commit277b2d2
2 files changed
+13
-12
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
127 | 127 | | |
128 | 128 | | |
129 | 129 | | |
130 | | - | |
| 130 | + | |
131 | 131 | | |
132 | 132 | | |
133 | 133 | | |
| |||
411 | 411 | | |
412 | 412 | | |
413 | 413 | | |
414 | | - | |
| 414 | + | |
415 | 415 | | |
416 | 416 | | |
417 | 417 | | |
| |||
455 | 455 | | |
456 | 456 | | |
457 | 457 | | |
458 | | - | |
459 | 458 | | |
460 | 459 | | |
461 | 460 | | |
| |||
522 | 521 | | |
523 | 522 | | |
524 | 523 | | |
| 524 | + | |
525 | 525 | | |
526 | 526 | | |
527 | 527 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1104 | 1104 | | |
1105 | 1105 | | |
1106 | 1106 | | |
1107 | | - | |
1108 | 1107 | | |
1109 | 1108 | | |
1110 | 1109 | | |
| |||
1189 | 1188 | | |
1190 | 1189 | | |
1191 | 1190 | | |
| 1191 | + | |
| 1192 | + | |
1192 | 1193 | | |
1193 | 1194 | | |
1194 | 1195 | | |
| |||
1197 | 1198 | | |
1198 | 1199 | | |
1199 | 1200 | | |
1200 | | - | |
1201 | | - | |
| 1201 | + | |
| 1202 | + | |
1202 | 1203 | | |
1203 | 1204 | | |
1204 | 1205 | | |
1205 | 1206 | | |
1206 | | - | |
1207 | | - | |
| 1207 | + | |
| 1208 | + | |
1208 | 1209 | | |
1209 | 1210 | | |
1210 | 1211 | | |
| |||
1826 | 1827 | | |
1827 | 1828 | | |
1828 | 1829 | | |
1829 | | - | |
1830 | | - | |
1831 | | - | |
1832 | | - | |
| 1830 | + | |
| 1831 | + | |
| 1832 | + | |
| 1833 | + | |
1833 | 1834 | | |
1834 | 1835 | | |
1835 | 1836 | | |
| |||
0 commit comments
Comments
(0)