Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump github.com/gohugoio/hugo from 0.138.0 to 0.140.0 #151

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 18, 2024

Bumps github.com/gohugoio/hugo from 0.138.0 to 0.140.0.

Release notes

Sourced from github.com/gohugoio/hugo's releases.

v0.140.0

The big new feature in this release is js.Batch – this enables JavaScript bundle groups (e.g. scripts per section) with global code splitting and flexible hooks/runners setup.

Bug fixes

  • Fix panic on server rebuilds when using both base templates and template.Defer a5e5be234 @​bep #12963
  • js: Fix js.Batch for multihost setups 565c30eac @​bep #13151
  • parser/pageparser: Fix Org Mode summary delimiter assignment 48dd6a918 @​jmooring #13152
  • Fix a rebuild on resource rename case 744b8566e @​bep
  • tpl/tplimpl: Fix title attribute in details shortcode a32c889a7 @​jmooring
  • Fix Sass imports on the form index.{scss,sass} 5ab38de36 @​bep #13123
  • markup/goldmark: Fix blockquote render hook text parsing 34373407b @​jmooring #12913 #13119

Improvements

Dependency Updates

  • build(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 157d86414 @​dependabot[bot]
  • build(deps): bump golang.org/x/tools from 0.27.0 to 0.28.0 947e4e66b @​dependabot[bot]
  • build(deps): bump github.com/hairyhenderson/go-codeowners 5f897868c @​dependabot[bot]
  • build(deps): bump golang.org/x/net from 0.31.0 to 0.32.0 7b6921848 @​dependabot[bot]

v0.139.5

This is a release created for technical reasons, see gohugoio/hugo#13147

It's the same as https://github.com/gohugoio/hugo/releases/tag/v0.139.4 -- go there for release archives.

v0.139.4

This release contains a security fix. See this Security Advisory for details. Note that this is only relevant if you don't trust your content (e.g. Markdown) files.

What's Changed

  • tpl/tplimpl: Escape Markdown attributes in render hooks and shortcodes 54398f8d5 @​jmooring

... (truncated)

Commits
  • 3f35721 releaser: Bump versions for release of 0.140.0
  • 5c80cb0 js/esbuild: Add missing es2024 target
  • a5e5be2 Fix panic on server rebuilds when using both base templates and template.Defer
  • 565c30e js: Fix js.Batch for multihost setups
  • 48dd6a9 parser/pageparser: Fix Org Mode summary delimiter assignment
  • 744b856 Fix a rebuild on resource rename case
  • 7de5317 js/esbuild: Add runners after scripts
  • 4cbd4ef js/esbuild: Batch: Avoid nil Instances slice
  • a32c889 tpl/tplimpl: Fix title attribute in details shortcode
  • 852d868 tpl/tplimpl: Update youtube shortcode
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/gohugoio/hugo](https://github.com/gohugoio/hugo) from 0.138.0 to 0.140.0.
- [Release notes](https://github.com/gohugoio/hugo/releases)
- [Changelog](https://github.com/gohugoio/hugo/blob/master/hugoreleaser.toml)
- [Commits](gohugoio/hugo@v0.138.0...v0.140.0)

---
updated-dependencies:
- dependency-name: github.com/gohugoio/hugo
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Copy link
Owner

@per1234 per1234 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See the review on the previous bump PR:

#142 (review)

Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 24, 2024

Superseded by #153.

@dependabot dependabot bot closed this Dec 24, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/gohugoio/hugo-0.140.0 branch December 24, 2024 06:48
@per1234 per1234 added conclusion: duplicate Has already been submitted type: enhancement Proposed improvement labels Dec 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
conclusion: duplicate Has already been submitted topic: infrastructure Related to project infrastructure type: enhancement Proposed improvement
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant