Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump Hugo version to 0.140.2 #576

Conversation

jenkins-infra-updatecli[bot]
Copy link
Contributor

Bump Hugo version

Update Hugo version in docker image name in docker-compose.yaml

change detected: * key "$.services.status.image" updated from "hugomods/hugo:ci-0.140.1" to "hugomods/hugo:ci-0.140.2", in file "docker-compose.yaml"

0.140.2
Release published on the 2024-12-30 15:33:58 +0000 UTC at the url https://github.com/gohugoio/hugo/releases/tag/v0.140.2

The timing of this release comes from the security fix in `golang.org/x/net`'s `html.Parse` function. This is used in two places in Hugo:

1. Extracting table of contents from Asciidoctor rendered output.
2. Collecting HTML classes etc. when build stats is [enabled](https://gohugo.io/getting-started/configuration-build/#configure-build-stats)

It's a little bit of a stretch to see how this could be exploited in Hugo, but we understand that many want a clean security report. See [this issue](https://github.com/golang/go/issues/70179) for details.


## What's Changed

* Print cli usage of `hugo gen chromastyles` alongside css 83cec785c @diwasrimal 
* build(deps): bump golang.org/x/net from 0.32.0 to 0.33.0 4e52be8b9 @dependabot[bot] 
* config/allconfig: Fix slice of language configs 7888ac585 @jmooring #13201 
* config/allconfig: Throw error when output format is not defined eb1dbe070 @jmooring #13199 
* Fix same resource file published more than once 77824d704 @bep #13164 
* markup/highlight: Add wrapperClass option ec0caaec7 @bep 
* Update README.md 845b8885d @bep 


Update Hugo version in the Netlify configuration file

1 file(s) updated with "HUGO_VERSION = \"0.140.2\"": * netlify.toml

0.140.2
Release published on the 2024-12-30 15:33:58 +0000 UTC at the url https://github.com/gohugoio/hugo/releases/tag/v0.140.2

The timing of this release comes from the security fix in `golang.org/x/net`'s `html.Parse` function. This is used in two places in Hugo:

1. Extracting table of contents from Asciidoctor rendered output.
2. Collecting HTML classes etc. when build stats is [enabled](https://gohugo.io/getting-started/configuration-build/#configure-build-stats)

It's a little bit of a stretch to see how this could be exploited in Hugo, but we understand that many want a clean security report. See [this issue](https://github.com/golang/go/issues/70179) for details.


## What's Changed

* Print cli usage of `hugo gen chromastyles` alongside css 83cec785c @diwasrimal 
* build(deps): bump golang.org/x/net from 0.32.0 to 0.33.0 4e52be8b9 @dependabot[bot] 
* config/allconfig: Fix slice of language configs 7888ac585 @jmooring #13201 
* config/allconfig: Throw error when output format is not defined eb1dbe070 @jmooring #13199 
* Fix same resource file published more than once 77824d704 @bep #13164 
* markup/highlight: Add wrapperClass option ec0caaec7 @bep 
* Update README.md 845b8885d @bep 


Jenkins pipeline link
Updatecli logo

Created automatically by Updatecli

Options:

Most of Updatecli configuration is done via its manifest(s).

  • If you close this pull request, Updatecli will automatically reopen it, the next time it runs.
  • If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made.

Feel free to report any issues at github.com/updatecli/updatecli.
If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!

jenkins-infra-updatecli added 2 commits January 2, 2025 10:05
@jenkins-infra-updatecli jenkins-infra-updatecli bot added the dependencies Pull requests that update a dependency file label Jan 2, 2025
@dduportal dduportal merged commit 3f83aa2 into main Jan 2, 2025
6 checks passed
@dduportal dduportal deleted the updatecli_main_aa48033eaa9125c18d284d579cf9ba65a17df36203a775479df317fccdc725d3 branch January 2, 2025 10:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant