Bjørn Erik Pedersen a3d9548469 Replace to gopkg.in/yaml with github.com/goccy/go-yaml (note) ...

This commit also adds validation to prevent the "Billion Laughs" attack (see https://github.com/goccy/go-yaml/issues/461). The limit of non-scalar aliases to the same node is set to 10,000. See benchmarks below.

```                                                            │        sec/op         │
UnmarshalBillionLaughs/Billion_Laughs_no_validation-10                 125.2µ ± ∞ ¹
UnmarshalBillionLaughs/Billion_Laughs_with_validation-10               655.8µ ± ∞ ¹
UnmarshalBillionLaughs/YAML_Front_Matter_no_validation-10              9.223µ ± ∞ ¹
UnmarshalBillionLaughs/YAML_Front_Matter_with_validation-10            9.443µ ± ∞ ¹
geomean                                                                51.71µ
¹ need >= 6 samples for confidence interval at level 0.95

                                                            │ fix-goyaml-8822.bench │
                                                            │         B/op          │
UnmarshalBillionLaughs/Billion_Laughs_no_validation-10                177.0Ki ± ∞ ¹
UnmarshalBillionLaughs/Billion_Laughs_with_validation-10              177.0Ki ± ∞ ¹
UnmarshalBillionLaughs/YAML_Front_Matter_no_validation-10             11.67Ki ± ∞ ¹
UnmarshalBillionLaughs/YAML_Front_Matter_with_validation-10           11.67Ki ± ∞ ¹
geomean                                                               45.45Ki
¹ need >= 6 samples for confidence interval at level 0.95

                                                            │ fix-goyaml-8822.bench │
                                                            │       allocs/op       │
UnmarshalBillionLaughs/Billion_Laughs_no_validation-10                 3.302k ± ∞ ¹
UnmarshalBillionLaughs/Billion_Laughs_with_validation-10               3.305k ± ∞ ¹
UnmarshalBillionLaughs/YAML_Front_Matter_no_validation-10               253.0 ± ∞ ¹
UnmarshalBillionLaughs/YAML_Front_Matter_with_validation-10             253.0 ± ∞ ¹
````

Fixes #8822
Fixes #13043
Fixes #14053
Fixes ##8427

2025-10-18 13:52:22 +02:00

..

commands_errors.txt

Fix "unknown command" message when no suggestion

2023-05-22 18:54:34 +02:00

completion.txt

Create a struct with all of Hugo's config options

2023-05-16 18:01:29 +02:00

config__cachedir.txt

Use os.UserCacheDir as first fallback if cacheDir is not set

2023-07-27 20:59:47 +02:00

config.txt

commands: Use consistent style when describing subcommands

2024-10-15 08:51:53 +02:00

convert.txt

commands: Use consistent style when describing subcommands

2024-10-15 08:51:53 +02:00

deprecate.txt

Write all logging (INFO, WARN, ERROR) to stderr

2024-12-13 09:23:09 +01:00

env.txt

Create a struct with all of Hugo's config options

2023-05-16 18:01:29 +02:00

gen.txt

testscripts: Make test assertion less specific

2025-10-05 18:08:52 +02:00

hugo__configdir.txt

Write all logging (INFO, WARN, ERROR) to stderr

2024-12-13 09:23:09 +01:00

hugo__errors.txt

commands: Use punctuation consistently in short description

2025-02-13 08:40:26 +01:00

hugo__flags.txt

commands: Fail the build when no config file or config dir

2023-05-27 16:56:54 +02:00

hugo__minify_issue13988.txt

commands: Map --minify CLI flag to the correct configuration key

2025-09-18 16:50:47 +02:00

hugo__noconfig.txt

Don't create the public folder unless needed

2023-05-28 12:55:44 +02:00

hugo__path-warnings_issue13164.txt

Fix same resource file published more than once

2024-12-27 18:55:24 +01:00

hugo__path-warnings-postprocess.txt

Fix false path warnings with resources.PostProcess

2023-06-27 21:55:35 +02:00

hugo__path-warnings.txt

Write all logging (INFO, WARN, ERROR) to stderr

2024-12-13 09:23:09 +01:00

hugo__processingstats2.txt

all: Rework page store, add a dynacache, improve partial rebuilds, and some general spring cleaning

2024-01-27 16:28:14 +01:00

hugo__processingstats.txt

all: Rework page store, add a dynacache, improve partial rebuilds, and some general spring cleaning

2024-01-27 16:28:14 +01:00

hugo__publishdir_in_config.txt

commands: Load config before creating the filesystem

2023-05-18 15:38:25 +02:00

hugo__static_composite.txt

Fix regression on handling of overlapping file mounts

2024-02-22 15:36:27 +01:00

hugo__static.txt

testscripts: Add and improve commands tests for static mounts

2025-10-16 12:39:11 +02:00

hugo__watch.txt

Don't inject livereload script on hugo -w

2023-06-02 09:04:00 +02:00

hugo_build.txt

commands: Add "hugo build" as an alias for "hugo"

2024-09-30 10:36:29 +02:00

hugo_configdev_env.txt

Fix regression when loading config -e is empty or HUGO_ENV or HUGO_ENVIRONMENT is set

2023-05-24 16:39:31 +02:00

hugo_configdev_environment.txt

Fix regression when loading config -e is empty or HUGO_ENV or HUGO_ENVIRONMENT is set

2023-05-24 16:39:31 +02:00

hugo_configprod.txt

Fix regression when loading config -e is empty or HUGO_ENV or HUGO_ENVIRONMENT is set

2023-05-24 16:39:31 +02:00

hugo_printpathwarnings.txt

Write all logging (INFO, WARN, ERROR) to stderr

2024-12-13 09:23:09 +01:00

hugo_printunusedtemplates.txt

Reimplement and simplify Hugo's template system

2025-04-06 20:59:41 +02:00

hugo.txt

Fix deprecation errors

2024-08-05 19:23:53 +02:00

import_jekyll.txt

commands: Use consistent style when describing subcommands

2024-10-15 08:51:53 +02:00

list.txt

commands: Fix --clock with the list command

2024-02-17 13:14:15 +01:00

mod__disable.txt

Fix it so disable a module does not disable transitive dependency required by others

2023-08-23 18:05:18 +02:00

mod__hugodirectsum_tamper.txt

modules: Add support for direct version module imports in hugo.toml

2025-09-07 22:47:25 +02:00

mod__hugodirectsum.txt

modules: Add support for direct version module imports in hugo.toml

2025-09-07 22:47:25 +02:00

mod__tamper_gosum.txt

modules: Add support for direct version module imports in hugo.toml

2025-09-07 22:47:25 +02:00

mod__themesdir.txt

commands: Reinstate some of the removed build flags (e.g. --theme) to new and mod

2023-05-28 12:55:44 +02:00

mod_get_u.txt

commands/mod: Ignore invalid module path

2024-02-22 16:00:03 +01:00

mod_get.txt

Fix so hugo get -u updates transitively

2023-10-22 16:32:01 +02:00

mod_init.txt

commands: Ignore "module does not exist" errors in hugo mod init

2024-09-19 12:26:04 +02:00

mod_npm_withexisting.txt

commands: Skip flaky test on Windows

2025-03-03 12:50:33 +01:00

mod_npm.txt

Upgrade to Go 1.23

2024-08-15 10:18:19 +02:00

mod_tidy.txt

Create a struct with all of Hugo's config options

2023-05-16 18:01:29 +02:00

mod_vendor__versions.txt

modules: Add support for direct version module imports in hugo.toml

2025-09-07 22:47:25 +02:00

mod_vendor.txt

testscripts: Make mod vendor test stable

2023-08-23 20:52:09 +02:00

mod.txt

Upgrade to Go 1.23

2024-08-15 10:18:19 +02:00

new_content_archetypedir.txt

all: Rework page store, add a dynacache, improve partial rebuilds, and some general spring cleaning

2024-01-27 16:28:14 +01:00

new_content.txt

create: Fix new content command with future dates

2025-08-27 09:33:17 +02:00

new.txt

commands: Fix description of new theme commands

2025-05-09 20:03:21 +02:00

noop.txt

Make sure resources directory isn't created in hugo new theme

2023-08-23 22:50:35 +02:00

server__edit_config.txt

commands: Make the server flag --renderToDisk into --renderToMemory (note)

2024-02-05 14:04:17 +01:00

server__edit_content.txt

commands: Make the server flag --renderToDisk into --renderToMemory (note)

2024-02-05 14:04:17 +01:00

server__error_recovery_edit_config.txt

hugolib/commands: Fix stuck server error issues

2024-10-24 13:34:11 +02:00

server__error_recovery_edit_content.txt

Replace to gopkg.in/yaml with github.com/goccy/go-yaml (note)

2025-10-18 13:52:22 +02:00

server__multihost.txt

testscripts: Add and improve commands tests for static mounts

2025-10-16 12:39:11 +02:00

server__watch_hugo_stats.txt

commands: Make the server flag --renderToDisk into --renderToMemory (note)

2024-02-05 14:04:17 +01:00

server__watch_moduleconfig.txt

commands: Make the server flag --renderToDisk into --renderToMemory (note)

2024-02-05 14:04:17 +01:00

server_disablelivereload__config.txt

commands: Make the server flag --renderToDisk into --renderToMemory (note)

2024-02-05 14:04:17 +01:00

server_disablelivereload.txt

commands: Make the server flag --renderToDisk into --renderToMemory (note)

2024-02-05 14:04:17 +01:00

server_render_static_to_disk.txt

testscripts: Add and improve commands tests for static mounts

2025-10-16 12:39:11 +02:00

server_render_to_memory.txt

commands: Make the server flag --renderToDisk into --renderToMemory (note)

2024-02-05 14:04:17 +01:00

server.txt

transform/livereloadinject: Skip livereload.js injection if no tags found (note)

2025-10-02 13:39:35 +02:00

version.txt

Create a struct with all of Hugo's config options

2023-05-16 18:01:29 +02:00

warnf_stderr.txt

Write all logging (INFO, WARN, ERROR) to stderr

2024-12-13 09:23:09 +01:00