Skip to content

chore(deps): bump github.com/gohugoio/hugo from 0.159.2 to 0.161.0 in /backend#4354

Merged
harehare merged 1 commit into
mainfrom
dependabot/go_modules/backend/github.com/gohugoio/hugo-0.161.0
May 27, 2026
Merged

chore(deps): bump github.com/gohugoio/hugo from 0.159.2 to 0.161.0 in /backend#4354
harehare merged 1 commit into
mainfrom
dependabot/go_modules/backend/github.com/gohugoio/hugo-0.161.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 8, 2026

Bumps github.com/gohugoio/hugo from 0.159.2 to 0.161.0.

Release notes

Sourced from github.com/gohugoio/hugo's releases.

v0.161.0

This release contains two security hardening fixes:

  • We now run the Node tools PostCSS, Babel and TailwindCSS, by default, with the --permission flag with the permissions defined in security.node.permissions. This means that you need Node >= 22 installed and that css.TailwindCSS now requires that the Tailwind CSS CLI must be installed as a Node.js package. The standalone executable is no longer supported
  • We have made the defaults in security.http.urls more restrictive.

But there are some notable new features, as well:

Nested vars support in css.Build and css.Sass

A practical example in css.Build would be to have something like this in hugo.toml:

[params.style]
    primary    = "[#000000](https://github.com/gohugoio/hugo/issues/000000)"
    background = "#ffffff"
    [params.style.dark]
        primary    = "#ffffff"
        background = "[#000000](https://github.com/gohugoio/hugo/issues/000000)"

And in the stylesheet:

@import "hugo:vars";
@import "hugo:vars/dark" (prefers-color-scheme: dark);
:root {
color-scheme: light dark;
}

Slice-based permalinks config

The permalinks configuration is now much more flexible (the old setup still works). It uses the same target matchers as in the cascade config, meaning you can now do:

permalinks:
  - target:
      kind: page
      path: "/books/**"
    pattern: /books/:year/:slug/
  - target:
      kind: section
      path: "/{books,books/**}"
    pattern: /libros/:sections[1:]
  - target:
      kind: page
    pattern: /other/:slug/

The above example isn't great, but it at least shows the gist of it.

... (truncated)

Commits
  • 98d396c releaser: Bump versions for release of 0.161.0
  • d4ae662 build(deps): bump github.com/getkin/kin-openapi from 0.135.0 to 0.137.0
  • 9ede5fb build(deps): bump github.com/mattn/go-isatty from 0.0.21 to 0.0.22
  • 833a878 build(deps): bump github.com/tdewolff/minify/v2 from 2.24.12 to 2.24.13
  • 7622dd8 css: Support nested hugo:vars/<name> imports
  • 0814059 github: Update GitHub actions versions
  • 8920d56 hugolib: Do not render aliases if the page is not rendered
  • 633cc77 langs/i18n: Improve default content language fallback
  • 90d8bf3 Replace deprecated .Site.Sites/.Page.Sites with hugo.Sites intests
  • 4c40c6d helpers: Remove unused code
  • Additional commits viewable in compare view

@dependabot dependabot Bot added automerge dependencies Pull requests that update a dependency file labels May 8, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/backend/github.com/gohugoio/hugo-0.161.0 branch from c8891d6 to 4af08f0 Compare May 23, 2026 09:31
Bumps [github.com/gohugoio/hugo](https://github.com/gohugoio/hugo) from 0.159.2 to 0.161.0.
- [Release notes](https://github.com/gohugoio/hugo/releases)
- [Commits](gohugoio/hugo@v0.159.2...v0.161.0)

---
updated-dependencies:
- dependency-name: github.com/gohugoio/hugo
  dependency-version: 0.161.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/backend/github.com/gohugoio/hugo-0.161.0 branch from 4af08f0 to 66b4743 Compare May 23, 2026 09:42
@harehare harehare merged commit e1033ba into main May 27, 2026
4 checks passed
@dependabot dependabot Bot deleted the dependabot/go_modules/backend/github.com/gohugoio/hugo-0.161.0 branch May 27, 2026 11:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automerge dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant