Joe Mooring
80e60847fb
config: Preserve intentionally empty maps
...
Closes #14944
2026-05-26 11:50:04 +02:00
Bjørn Erik Pedersen
df5421918a
hugolib: Fix Page.GitInfo for modules with go.mod in a repo subdirectory
...
Map content files using their path relative to the git repo root by
prepending the module's Origin.Subdir to the lookup key.
Fixes #14942
2026-05-26 00:28:22 +02:00
Bjørn Erik Pedersen
aeb9a5cc02
hugolib: Merge existing hugo_stats.json when renderSegments is set
...
With renderSegments only a subset of pages is rendered, so the resulting
hugo_stats.json would no longer contain elements from the excluded pages,
causing tools like Tailwind to strip classes that are actually in use.
Fixes #14939
2026-05-25 17:00:52 +02:00
Bjørn Erik Pedersen
c4bbc2805c
all: Replace RWMutex struct caches with ConcurrentMap
2026-05-24 15:29:47 +02:00
Joe Mooring
d8c70218b7
tpl/tplimpl: Consolidate and improve embedded template integration tests
...
Closes #14932
2026-05-24 15:29:33 +02:00
Bjørn Erik Pedersen
ee4f1acd93
parser: Drop empty sub maps from hugo config output
...
Fixes #14855
2026-05-24 11:52:43 +02:00
Bjørn Erik Pedersen
b6133657e0
markup/highlight: Allow overriding type and code via options
...
Treat type and code as highlighting options in both transform.Highlight
and transform.HighlightCodeBlock. The type option overrides the language
and code overrides the code, so the two functions now share the same
options handling.
transform.Highlight's LANG argument is now optional:
transform.Highlight CODE [LANG] [OPTIONS]
Fixes #11872
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-23 13:12:07 +02:00
Bjørn Erik Pedersen
4bc7caea14
Fix typo in CONTRIBUTING.md
2026-05-23 12:47:00 +02:00
Bjørn Erik Pedersen
7711ba4d0c
Remove note on refactoring contributions
...
Removed note about holding off on big refactoring.
2026-05-23 11:55:27 +02:00
Bjørn Erik Pedersen
d2c821b5c7
Update AI assistance disclosure requirements
...
Clarify expectations for AI contributions and manual verification in pull requests.
2026-05-23 11:54:57 +02:00
dependabot[bot]
4f444c810c
build(deps): bump golang.org/x/net from 0.54.0 to 0.55.0
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.54.0 to 0.55.0.
- [Commits](https://github.com/golang/net/compare/v0.54.0...v0.55.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.55.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-23 11:43:45 +02:00
dependabot[bot]
fe6c72652f
build(deps): bump golang.org/x/image from 0.40.0 to 0.41.0
...
Bumps [golang.org/x/image](https://github.com/golang/image ) from 0.40.0 to 0.41.0.
- [Commits](https://github.com/golang/image/compare/v0.40.0...v0.41.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/image
dependency-version: 0.41.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-23 11:43:06 +02:00
Bjørn Erik Pedersen
4ed7600fd6
hugolib: Use AllTranslated in IsTranslated
...
Which makes it faster:
```
│ benchcmp.bench │ feat-speedupistranslated.bench │
│ sec/op │ sec/op vs base │
IsTranslatedOneLanguage-10 996.2n ± ∞ ¹ 685.6n ± ∞ ¹ -31.18% (p=0.029 n=4)
¹ need >= 6 samples for confidence interval at level 0.95
│ benchcmp.bench │ feat-speedupistranslated.bench │
│ B/op │ B/op vs base │
IsTranslatedOneLanguage-10 832.0 ± ∞ ¹ 536.0 ± ∞ ¹ -35.58% (p=0.029 n=4)
¹ need >= 6 samples for confidence interval at level 0.95
│ benchcmp.bench │ feat-speedupistranslated.bench │
│ allocs/op │ allocs/op vs base │
IsTranslatedOneLanguage-10 18.00 ± ∞ ¹ 13.00 ± ∞ ¹ -27.78% (p=0.029 n=4)
¹ need >= 6 samples for confidence interval at level 0.95
````
2026-05-22 14:11:50 +02:00
Bjørn Erik Pedersen
cbe4339a5f
tpl: Simplify sitemap template
...
The benefit of my performance motivated construct in 6475d308ec was most likely minimal and not worth the loss of clarity.
See #14912
2026-05-21 21:36:43 +02:00
Bjørn Erik Pedersen
6475d308ec
tpl: Use AllTranslations in sitemap template
...
Closes #14912
Closes #14917
2026-05-21 19:44:23 +02:00
Bjørn Erik Pedersen
67aede4364
tpl/collections: Make dict return nil when no values are provided
2026-05-21 16:03:02 +02:00
Bjørn Erik Pedersen
87f194b249
Sync Go template package to 1.26.3
...
See #14897
2026-05-21 14:28:31 +02:00
Bjørn Erik Pedersen
5f01b0603d
Merge commit 'c23d97904fd31ef745bece57133aa1b9275ec20c'
2026-05-21 12:22:49 +02:00
Bjørn Erik Pedersen
c23d97904f
Squashed 'docs/' changes from 0755fb534d..1f8ddb8a52
...
1f8ddb8a52 content: clarify resources front matter key descriptions
e064ab8528 content: Add deprecation badges to module config page
727ca5563a github: Add push trigger to lint workflow
64dd5c9886 content: Fix typo
c5bc6b6515 github: Fix lint workflow
faec0c3a0a github: Combine linting actions into a single workflow
06112aeaf2 theme: Miscellaneous template edits
75d4902270 theme: Format templates with gotmplfmt
fec2e2a67e content: Document that the language code in a file name must be lowercase
9dbd841ba6 content: Document the src attribute in the Page Resources metadata reference
fd3ffef985 content: Fix "build from source" instructions for Windows
af4c9cd4d7 content: Miscellaneous edits
408d8b2f0a content: Miscellaneous edits
e8804afe6e content: Fix typo
d98276be30 content: Updates for v0.161.0
01b1f8fa12 content: Note merge limitation for slice configuration values
d2b18f0c8d content: Document page matcher usage for cascading values
45e5bd9ab3 content: Update Cloudflare Worker host/deploy guide
b83726b89a content: Document fallback rendering for fenced code blocks
8f1eeb42bc content: Update reference for source code shortcode
e8da56303b content: Add gotmplfmt to list of VS Code extensions
950fabbfd6 content: Update FAQ on feature availability error
6411146d24 content: Update quick start guide
38cc39fd51 content: Add Hugo Shortcodes to list of VS Code extensions
72d98b107b content: Misc updates to get validators to pass
9fb0e1ca35 Add a paragraph about sec boundaries
e6abf5644f content: Improve syntax highlighting documentation
c06193bd1a content: Update go-i18n package reference
ce58fef945 Hugo 0.161.1
c7e0f63385 content: Fix package references
7f15fb3bf9 data: Regen docshelper
7483d53b55 Update HUGO_VERSION to 0.161.0
c4abcdb45f security: Add a bullet point about "pragmatic defaults"
3cd7492862 content: Improve explanation of mount removal in module configurations
4099f07bb9 content: Update GitHub Pages workflow example
a6c9853a58 content: Fix typo
e6f79a938b Update netlify.toml
abda3d6659 content: Update Action versions in GitHub Pages workflow example
55dd288fa9 content: Add GitCMS to front-ends tools list
21081f6d49 content: Remove outdated new-in badges
b2ec263884 content: Update version references
825e0b8ea9 One more CSS var adjustment
85f95a899b Adjust css.Build var docs a little
df48288002 content: Updates for v0.160.0
a82a9b9797 Update HUGO_VERSION to 0.160.0
1155747dc4 content: Improve CSS processing feature description
f6ce893974 content: Add css.Build to features
67b8ed1198 content: Fix typos
0f62a67863 content: Fix typo
dbb42aed4a content: Document the deploy edition
549f30f933 content: De-emphasize references to the extended edition
8f5c9782d4 content: Add Pages CMS to front-ends documentation
b2bfc3af48 Update HUGO_VERSION to 0.159.2
3793156fc5 content: Fix typos
bacd4824ef content: Specify function namespace in example
7f2dc0d40a Regen docs.yml
65a851f731 Update HUGO_VERSION to 0.159.1
ce05fe3fc0 content: Adjust variable references in build script examples
8a04f9fe64 content: Improve hosting build script examples
67962ce05c content: Link to Codeberg Pages 404 handling
fd248f57ed content: Identify esbuild as the foundation for build functions
62f02879fd content: Remove outdated content
553c407f9e content: Miscellaneous corrections
77e2cad088 content: Add new-in badge for usePackageJSON
0746e1e621 Add a page on using npm dependencies in Hugo Modules
8824850f5c Update HUGO_VERSION to 0.159.0
git-subtree-dir: docs
git-subtree-split: 1f8ddb8a5230518f07c50b4b03cba3cae21081c4
2026-05-21 12:22:48 +02:00
Joe Mooring
5d51b82a7e
resources: Fix the :counter placeholder
...
Closes #14921
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-21 09:45:11 +02:00
Bjørn Erik Pedersen
d81e3c29c0
Upgrade to Go 1.26.3
...
Fixes #14897
2026-05-20 11:00:30 +02:00
Bjørn Erik Pedersen
7c65a4dbc0
ci: Check embedded template formatting with gotmplfmt
2026-05-19 16:50:25 +02:00
Bjørn Erik Pedersen
d31a9275c6
tpl: Run gotmplfmt -w .
2026-05-19 16:15:45 +02:00
dependabot[bot]
6a2a03806d
build(deps): bump github.com/getkin/kin-openapi from 0.137.0 to 0.138.0
...
Bumps [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi ) from 0.137.0 to 0.138.0.
- [Release notes](https://github.com/getkin/kin-openapi/releases )
- [Commits](https://github.com/getkin/kin-openapi/compare/v0.137.0...v0.138.0 )
---
updated-dependencies:
- dependency-name: github.com/getkin/kin-openapi
dependency-version: 0.138.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-19 12:34:07 +02:00
dependabot[bot]
cf1de598d9
build(deps): bump github.com/JohannesKaufmann/html-to-markdown/v2
...
Bumps [github.com/JohannesKaufmann/html-to-markdown/v2](https://github.com/JohannesKaufmann/html-to-markdown ) from 2.5.0 to 2.5.1.
- [Release notes](https://github.com/JohannesKaufmann/html-to-markdown/releases )
- [Commits](https://github.com/JohannesKaufmann/html-to-markdown/compare/v2.5.0...v2.5.1 )
---
updated-dependencies:
- dependency-name: github.com/JohannesKaufmann/html-to-markdown/v2
dependency-version: 2.5.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-19 12:25:06 +02:00
Joe Mooring
c36608c584
markup/goldmark/codeblocks: Always split Chroma options into .Options
...
Closes #14909
2026-05-19 12:23:42 +02:00
Joe Mooring
1e4037cade
docs: Update docs.yaml
2026-05-18 21:24:35 -07:00
Alexandre Vaz
2f361a8e25
hugolib: Allow empty params front matter
...
Treat an empty front matter params key as an empty params map instead of failing while decoding page metadata.
Fixes #14886
2026-05-17 19:59:44 +02:00
Joe Mooring
81d77620c6
commands: Fix import from Jekyll
...
- Look for _config.yml, _config.yaml, or _config.toml
- Fix theme submodule URL
- Fix config filename in the instructions
- Add tests
Closes #14795
Closes #14906
2026-05-17 10:46:40 +02:00
Joe Mooring
5559263326
common/hmaps: Merge slice-valued module config into site config
...
When a module provides a config key whose value is a slice (e.g.
cascade or permalinks), and the site config declares the same key as a
map with only a merge strategy marker (_merge = 'deep'), the types do
not match and Params.merge silently dropped the module's value, leaving
the site with no effective cascade or permalink config from the module.
Fix Params.merge so that when the destination value is an empty Params
(IsZero — only the _merge key is present) and the source value is a
non-Params type, the source value is used provided the user-declared
merge strategy is not 'none'. This honours the explicit _merge
directive regardless of the surrounding shallow-merge context.
Closes #13869
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-15 19:50:42 +02:00
dependabot[bot]
97f990cc4f
build(deps): bump golang.org/x/image from 0.39.0 to 0.40.0
...
Bumps [golang.org/x/image](https://github.com/golang/image ) from 0.39.0 to 0.40.0.
- [Commits](https://github.com/golang/image/compare/v0.39.0...v0.40.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/image
dependency-version: 0.40.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-15 16:00:01 +02:00
Bjørn Erik Pedersen
656fc04035
tpl: Use GetMatch for both local and global image resources
...
See #14062
2026-05-14 20:49:33 +02:00
Bjørn Erik Pedersen
a20cb5b1c0
Revert "markup/tableofcontents: Skip empty TOC levels"
...
This reverts commit 7d4af7a179 .
Closes #14898
2026-05-14 19:46:41 +02:00
dependabot[bot]
b99634e253
build(deps): bump golang.org/x/tools from 0.44.0 to 0.45.0
...
Bumps [golang.org/x/tools](https://github.com/golang/tools ) from 0.44.0 to 0.45.0.
- [Release notes](https://github.com/golang/tools/releases )
- [Commits](https://github.com/golang/tools/compare/v0.44.0...v0.45.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/tools
dependency-version: 0.45.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-14 15:39:54 +02:00
Bjørn Erik Pedersen
4d775cbe95
tpl/templates: Reject Defer inside partialCached
...
A partial's rendered output (placeholder included) is cached by
partialCached across rebuilds, but BuildState.DeferredExecutions
is reset every stage. On a fast-render rebuild the cached string
replays the placeholder while doDefer is not called this build,
leaving executeDeferredTemplates to panic with "deferred execution
with id ... not found".
Mark the ctx inside IncludeCached's body execution and have Defer
return a clear error if it sees the flag. Catches transitive cases
(partialCached -> partial -> Defer) via ctx propagation. Defer in
baseof.html and in a plain partial is unaffected.
Fixes #13492
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-14 14:17:42 +02:00
dependabot[bot]
fdd977e95d
build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3
...
Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2 ) from 1.92.1 to 1.97.3.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.92.1...service/s3/v1.97.3 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
dependency-version: 1.97.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-13 22:32:44 +02:00
Bjørn Erik Pedersen
ae7bf74b3e
common/hexec: Make NODE_PATH a fallback for ESM bare imports
...
Node's ESM resolver does not consult NODE_PATH (unlike CJS require), so
an ESM postcss.config.js shipped by a Hugo theme fails when loaded from
the module cache: bare imports like `import x from "postcss-import"`
have no node_modules to walk up to.
Install a synchronous resolver hook (module.registerHooks) via
--import=data:... on every Node invocation. On ERR_MODULE_NOT_FOUND for
a bare specifier it resolves the package from each NODE_PATH entry via
createRequire().resolve(). No-op for relative, absolute, URL-scheme and
non-MODULE_NOT_FOUND failures. Synchronous hooks run on the main thread,
so no --allow-worker is needed under the Node permission model.
Fixes #13987
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-13 22:00:04 +02:00
dependabot[bot]
123018de21
build(deps): bump github.com/pelletier/go-toml/v2 from 2.3.0 to 2.3.1
...
Bumps [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml ) from 2.3.0 to 2.3.1.
- [Release notes](https://github.com/pelletier/go-toml/releases )
- [Commits](https://github.com/pelletier/go-toml/compare/v2.3.0...v2.3.1 )
---
updated-dependencies:
- dependency-name: github.com/pelletier/go-toml/v2
dependency-version: 2.3.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-13 18:23:27 +02:00
Bjørn Erik Pedersen
ba5d812673
config: Allow repeating the root key in /config files
...
If a non-default-name file in the config folder parses to a map with a
single top-level key matching the file's basename, unwrap it. This lets
TOML/YAML express slice-typed roots (cascade, permalinks), which can't
have a headless top-level array, and also lets users copy-paste docs
examples that include the root container (e.g. params.yaml with a
top-level params: block).
Fixes #12899
Fixes #14882
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-13 18:22:01 +02:00
Bjørn Erik Pedersen
be4a0df3a2
Revise test naming guidelines in AGENTS.md
...
Updated test naming conventions for clarity and documentation.
2026-05-13 17:42:20 +02:00
Bjørn Erik Pedersen
e4cf565c0d
Update AGENTS.md
2026-05-13 17:34:08 +02:00
Alexandre Vaz
9e64953338
js: Return error for missing batch imports
...
A stale or removed resource used by js.Batch could panic while the esbuild import loader read its content during a rebuild. Return the read error through the loader so esbuild reports a normal build error and a later rebuild can recover when the file returns.
Closes #13737
2026-05-13 17:15:14 +02:00
Alexandre Vaz
f0cfc28c00
resources/images: Keep smart crop target size
...
Smartcrop can return a crop rectangle that is smaller than the requested dimensions after prescaling and rounding. Expand that rectangle within the source image bounds before applying Hugo's crop/fill pipeline, so smart crops keep the requested size without stretching the image.
Bump the smart crop cache version for crop/fill only.
Fixes #13688
Co-Authored-By: Joe Mooring <joe.mooring@veriphor.com >
2026-05-13 12:10:44 +02:00
Bjørn Erik Pedersen
16e854a437
testing: Use synctest where relevant
2026-05-13 10:07:26 +02:00
Bjørn Erik Pedersen
f8b5fa09a6
Fix prevention of direct symlink reads in resources.Get
...
* Note for themes, this is only an issue for themes stored locally, e.g. below `themes/...`. Themes mounted as modules from GitHub gets symlinks stripped away.
* Thas was also not an issue for file reading walking one or more directories.
* This is an regression introduced in `v0.123.0`.
2026-05-13 10:06:43 +02:00
Bjørn Erik Pedersen
86fbb0f7a8
security: Validate redirects against security.http.urls
...
A server allowed by security.http.urls could redirect resources.GetRemote
to a host that is not. Re-run the check on each hop via CheckRedirect.
Fixes #14871
2026-05-13 10:06:43 +02:00
Alexandre Vaz
7d4af7a179
markup/tableofcontents: Skip empty TOC levels
...
Fixes #7128
2026-05-12 19:02:23 +02:00
Bjørn Erik Pedersen
28147cb040
Fall back to hugo.buildDate in hugo.BuildDate() in non-vcs builds
...
Fixes #14862
2026-05-11 12:26:13 +02:00
Bjørn Erik Pedersen
db40fada48
agents: Add a note to Ai security researchers
2026-05-11 11:31:17 +02:00
Bjørn Erik Pedersen
b88fa8cc66
deps: Upgrade to Chroma v2.24.1
...
Closes #14839
2026-05-10 20:19:11 +02:00