Bjørn Erik Pedersen
d88a29e002
npm: Use workspaces to simplify hugo mod npm pack
...
Rewrite `hugo mod npm pack` to use npm workspaces. Module deps are now
written to packages/hugoautogen/package.json and the root package.json
gets a "workspaces" reference. A hugo_packagemeta.json sidecar stores a
hash of all input package files so regular commands can warn when npm
deps are out of sync.
Other changes:
- Workspace glob patterns (*, **, {a,b}) are resolved via gobwas/glob.
- Workspaces defined in package.hugo.json are supported.
- package.hugo.json is only recognised at module roots, not in workspaces.
- When package.hugo.json exists, package.json is not mounted or vendored.
- packages/hugoautogen is not mounted or vendored from dependencies.
- Add usePackageJSON import option (auto/always/never) to control whether
a module's npm deps are included. "auto" checks for Hugo config files
or package.hugo.json.
- The staleness check is skipped when running `hugo mod npm pack` itself.
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-23 16:00:50 +01:00
dependabot[bot]
3ff9b7f89f
build(deps): bump github.com/olekukonko/tablewriter from 1.1.3 to 1.1.4 ( #14641 )
...
Bumps [github.com/olekukonko/tablewriter](https://github.com/olekukonko/tablewriter ) from 1.1.3 to 1.1.4.
- [Release notes](https://github.com/olekukonko/tablewriter/releases )
- [Commits](https://github.com/olekukonko/tablewriter/compare/v1.1.3...v1.1.4 )
---
updated-dependencies:
- dependency-name: github.com/olekukonko/tablewriter
dependency-version: 1.1.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-21 21:19:50 +01:00
Tay
9dd9c76027
commands: Close cpu profile file when StartCPUProfile fails
2026-03-21 21:17:12 +01:00
Bjørn Erik Pedersen
a8fca598e6
Replace deprecated site.Data with hugo.Data in tests
...
This also fixes a subtle server reload issue when changing files inside /data and using the recently added hugo.Data method.
2026-03-21 19:09:14 +01:00
Bjørn Erik Pedersen
182b104571
Replace deprecated excludeFiles and includeFiles with files in tests
2026-03-21 16:59:13 +01:00
dependabot[bot]
be93ccd304
build(deps): bump github.com/yuin/goldmark from 1.7.16 to 1.7.17
...
Bumps [github.com/yuin/goldmark](https://github.com/yuin/goldmark ) from 1.7.16 to 1.7.17.
- [Release notes](https://github.com/yuin/goldmark/releases )
- [Commits](https://github.com/yuin/goldmark/compare/v1.7.16...v1.7.17 )
---
updated-dependencies:
- dependency-name: github.com/yuin/goldmark
dependency-version: 1.7.17
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-20 11:37:30 +01:00
dependabot[bot]
2669bca6fd
build(deps): bump github.com/magefile/mage from 1.15.0 to 1.16.1
...
Bumps [github.com/magefile/mage](https://github.com/magefile/mage ) from 1.15.0 to 1.16.1.
- [Release notes](https://github.com/magefile/mage/releases )
- [Commits](https://github.com/magefile/mage/compare/v1.15.0...v1.16.1 )
---
updated-dependencies:
- dependency-name: github.com/magefile/mage
dependency-version: 1.16.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-19 20:39:12 +01:00
dependabot[bot]
753d447f11
build(deps): bump golang.org/x/image from 0.36.0 to 0.37.0
...
Bumps [golang.org/x/image](https://github.com/golang/image ) from 0.36.0 to 0.37.0.
- [Commits](https://github.com/golang/image/compare/v0.36.0...v0.37.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/image
dependency-version: 0.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-19 20:38:51 +01:00
dependabot[bot]
4f39d724fe
build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.78.0 to 1.79.3.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.3 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.79.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-19 20:21:44 +01:00
Joe Mooring
eaf4c7515a
tpl/tplimpl: Fix Vimeo shortcode test
...
Closes #14649
2026-03-19 20:21:21 +01:00
Bjørn Erik Pedersen
3315a86d67
Remove the AI Watchdog workflow for now
...
It's failing with a 404 that I don't know how to fix (or don't have the time to investigate). It works fine when run locally.
2026-03-19 17:28:20 +01:00
Bjørn Erik Pedersen
38244842e0
Remove 'bep' from PR user logins skip list
...
To test it and see why it fails.
2026-03-19 17:02:16 +01:00
Bjørn Erik Pedersen
7813c5c89d
tpl/tplimpl: Comment out the Vimeo simple shortcode tests
...
See #14649
2026-03-19 13:52:36 +01:00
Bjørn Erik Pedersen
eb11c3d0bc
Replace deprecated :filename with :contentbasename in the permalinks test
2026-03-18 08:47:26 +01:00
hugoreleaser
fa8658111f
releaser: Prepare repository for 0.159.0-DEV
...
[ci skip]
2026-03-16 17:56:18 +00:00
hugoreleaser
f41be7959a
releaser: Bump versions for release of 0.158.0
...
[ci skip]
v0.158.0
2026-03-16 17:42:04 +00:00
Bjørn Erik Pedersen
0e46a97e8a
deps: Upgrade github.com/evanw/esbuild v0.27.3 => v0.27.4
2026-03-16 18:39:08 +01:00
dependabot[bot]
c27d9e8fcf
build(deps): bump github.com/getkin/kin-openapi from 0.133.0 to 0.134.0
...
Bumps [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi ) from 0.133.0 to 0.134.0.
- [Release notes](https://github.com/getkin/kin-openapi/releases )
- [Commits](https://github.com/getkin/kin-openapi/compare/v0.133.0...v0.134.0 )
---
updated-dependencies:
- dependency-name: github.com/getkin/kin-openapi
dependency-version: 0.134.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-16 11:59:42 +01:00
dependabot[bot]
098eac59a9
build(deps): bump golang.org/x/tools from 0.42.0 to 0.43.0
...
Bumps [golang.org/x/tools](https://github.com/golang/tools ) from 0.42.0 to 0.43.0.
- [Release notes](https://github.com/golang/tools/releases )
- [Commits](https://github.com/golang/tools/compare/v0.42.0...v0.43.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/tools
dependency-version: 0.43.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-16 11:56:42 +01:00
Bjørn Erik Pedersen
3c980c072e
resources: Re-publish on transformation cache hit
...
When a resource transformation result was served from cache (same
options as a previous build), the output file was not re-written to
disk. This caused incorrect output when toggling transformation
options (e.g. minify) back to a previously seen value in server mode.
Fixes #14629
2026-03-15 18:32:41 +01:00
Joe Mooring
404ac00001
create/skeletons: Use css.Build in theme skeleton
...
Closes #14626
2026-03-15 16:51:24 +01:00
Bjørn Erik Pedersen
06fcb72421
tpl/css: Add a test case for rebuilds on CSS options changes
2026-03-15 11:09:02 +01:00
Joe Mooring
9b5f1d491d
hugolib: Allow regular pages to cascade to self
...
Closes #14627
2026-03-15 10:17:45 +01:00
dependabot[bot]
87f8de8c7a
build(deps): bump gocloud.dev from 0.44.0 to 0.45.0
...
Bumps [gocloud.dev](https://github.com/google/go-cloud ) from 0.44.0 to 0.45.0.
- [Release notes](https://github.com/google/go-cloud/releases )
- [Commits](https://github.com/google/go-cloud/compare/v0.44.0...v0.45.0 )
---
updated-dependencies:
- dependency-name: gocloud.dev
dependency-version: 0.45.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-14 16:06:09 +01:00
dependabot[bot]
67ef6c68de
build(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0
...
Bumps [golang.org/x/sync](https://github.com/golang/sync ) from 0.19.0 to 0.20.0.
- [Commits](https://github.com/golang/sync/compare/v0.19.0...v0.20.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/sync
dependency-version: 0.20.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-14 16:05:19 +01:00
Bjørn Erik Pedersen
623722bb07
tpl/css: Allow the user to override single loader entries
...
Fixes #14623
Co-authored-by: Joe Mooring <joe.mooring@veriphor.com >
2026-03-14 15:17:21 +01:00
Bjørn Erik Pedersen
e431f90bc6
tpl/css: Fix external source maps
...
Fixes #14620
2026-03-14 12:08:18 +01:00
Bjørn Erik Pedersen
a7cbcf15f0
tpl/css: Make default loader resolution for CSS @import and url() always behave the same
...
Before this commit, we did dynamic loader resolution for CSS bundling for resources resolved by Hugo while any fallback to ESBuild would fall back to a (potentially) empty loaders config.
This revises the logic to always use a static list (see below) if `loaders` is not set. This should be easier do document and less confusing for the end user.
````
".png", ".jpg", ".jpeg", ".gif", ".svg", ".webp", ".avif",
".woff", ".woff2", ".ttf", ".eot", ".otf"
````
Fixes #14619
2026-03-13 20:24:32 +01:00
Joe Mooring
59e0446fe5
hugolib: Fix server no watch
...
Closes #14615
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-03-13 16:28:37 +01:00
Joe Mooring
36cdb2c789
internal/js: Add default mainFields for CSS builds
...
Closes #14614
2026-03-13 08:33:17 +01:00
Bjørn Erik Pedersen
3e3b849cc7
Add css.Build
...
Fixes #14609
Fixes #14613
2026-03-12 13:32:40 +01:00
Bjørn Erik Pedersen
1f578f160c
Upgrade to to Go 1.26.1 ( #14597 ) (note)
...
This fixes a security issue: https://www.cve.org/CVERecord?id=CVE-2026-27142
Closes #14595
2026-03-11 12:36:13 +01:00
Bjørn Erik Pedersen
842d8f1052
resources: Fix context canceled on GetRemote with per-request timeout
...
The per-request timeout context was cancelled via defer in the getRes
closure, before io.ReadAll(res.Body) in the outer scope could read
the response body. Fix this by returning the cancel function from
getRes so each caller manages its own cancel lifecycle.
Fixes #14611
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-10 19:45:14 +01:00
Bjørn Erik Pedersen
c47ec23342
resources: Use full path for Exif etc. decoding error/warning messages
...
Fixes #12693
2026-03-08 23:03:57 +01:00
Bjørn Erik Pedersen
4652ae4a44
Move to new locales library and upgrade CLDR from v36.1 to v48.1
...
* I had all kinds of issues upgrading CLDR on the old library, so I decided to start fresh in github.com/bep/golocales
* It shaves off about 3 MB of the binary, and package init cost is zero compared to the old localescompressed (5000x faster).
* We will probably move to the `text/**` packages at this point, but this will have to do for now.
2026-03-08 21:43:37 +01:00
Bjørn Erik Pedersen
4eafd9eb7b
tpl/tplimpl: Prefer early suffixes when media type matches
...
Fixes #13877
Close #14601
Co-Authored-By: Joe Mooring <joe.mooring@veriphor.com >
2026-03-08 21:42:36 +01:00
Joe Mooring
13a95b9c01
tpl/strings: Add strings.ReplacePairs function
...
Closes #14594
2026-03-07 20:21:02 +01:00
Bjørn Erik Pedersen
e3108225bf
all: Run go fix ./...
2026-03-07 18:30:42 +01:00
Bjørn Erik Pedersen
c9b88e4d15
internal/warpc: Fix SIGSEGV in Close() when dispatcher fails to start
...
Only set started=true when Start() succeeds, so Close() doesn't
attempt to close a nil dispatcher.
Fixes #14536
2026-03-07 15:30:07 +01:00
Bjørn Erik Pedersen
54c804876a
github: Remove pull_request_template.md
...
* Main reason is that it slows down my own `gh` workflow (I also frequently accidentally select that template).
* We also don't have a large volume of PRs from new contributors, so the template isn't as necessary.
2026-03-07 12:48:15 +01:00
Bjørn Erik Pedersen
157bfddda5
testing: Make commands tests pass in Go 1.26.1
2026-03-06 12:23:25 +01:00
Joe Mooring
d4f2122dea
refactor: Deprecate language configuration and template methods
...
Configuration:
- languageCode -> locale (either in root or per-language)
- languageName -> label
- languageDirection -> direction
Methods:
- .Language.LanguageCode -> .Language.Locale
- .Language.LanguageName -> .Language.Label
- .Language.LanguageDirection -> .Language.Direction
- .Site.LanguageCode -> .Site.Language.Locale
Example configuration:
[languages.en]
direction = 'ltr'
label = 'English'
locale = 'en-US'
weight = 1
Closes #14269
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-03-04 11:45:52 +01:00
Bjørn Erik Pedersen
991d2f9aba
Replace Exif with Meta in tests
2026-03-04 11:38:28 +01:00
dependabot[bot]
b29c2f7ade
build(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 ( #14569 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.50.0 to 0.51.0.
- [Commits](https://github.com/golang/net/compare/v0.50.0...v0.51.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.51.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-02 13:01:37 +01:00
dependabot[bot]
e91d191155
build(deps): bump github.com/tdewolff/minify/v2 from 2.24.9 to 2.24.10 ( #14585 )
...
Bumps [github.com/tdewolff/minify/v2](https://github.com/tdewolff/minify ) from 2.24.9 to 2.24.10.
- [Release notes](https://github.com/tdewolff/minify/releases )
- [Commits](https://github.com/tdewolff/minify/compare/v2.24.9...v2.24.10 )
---
updated-dependencies:
- dependency-name: github.com/tdewolff/minify/v2
dependency-version: 2.24.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-02 12:57:29 +01:00
dependabot[bot]
a8a54bd020
build(deps): bump github.com/bep/imagemeta from 0.15.0 to 0.17.0 ( #14584 )
...
Bumps [github.com/bep/imagemeta](https://github.com/bep/imagemeta ) from 0.15.0 to 0.17.0.
- [Release notes](https://github.com/bep/imagemeta/releases )
- [Commits](https://github.com/bep/imagemeta/compare/v0.15.0...v0.17.0 )
---
updated-dependencies:
- dependency-name: github.com/bep/imagemeta
dependency-version: 0.17.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-02 12:57:10 +01:00
Bjørn Erik Pedersen
f797f84902
Fix index out of range panic in fileEventsContentPaths
...
The nested loop had dirs as the outer loop and others as the inner loop
with a single counter, causing n to exceed len(others) when multiple
dirs existed. Swap the loop order so each file in others is checked
against all dirs exactly once.
Fixes #14573
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-27 12:05:13 +01:00
Joe Mooring
e8577771c3
resources: Improve getImageOps error message
...
Closes #14571
2026-02-26 22:20:08 +01:00
Bjørn Erik Pedersen
44dc3847f4
resources/images: Add IsImageResourceWithMeta etc. tests for bmp and gif
...
Closes #14568
2026-02-26 16:49:11 +01:00
hugoreleaser
5594b28229
releaser: Prepare repository for 0.158.0-DEV
...
[ci skip]
2026-02-25 16:57:59 +00:00