Sourced from github.com/gohugoio/hugo's releases.
v0.161.1
What's Changed
- resources: Honor Retry-After header in resources.GetRemote retries c4eba928
@bep#14828- warpc: Move to parson.c in https://github.com/kgabis/parson 8b40a96b
@bep#14823- config/security: Add AllowChildProcess to security.node.permissions d65af84d
@bep#14824- config/security: Restrict default http.urls "@" deny to userinfo 454450a6
@bep#14825v0.161.0
This release contains two security hardening fixes:
- We now run the Node tools PostCSS, Babel and TailwindCSS, by default, with the
--permissionflag with the permissions defined in security.node.permissions. This means that you need Node >= 22 installed and thatcss.TailwindCSSnow requires that the Tailwind CSS CLI must be installed as a Node.js package. The standalone executable is no longer supported- We have made the defaults in security.http.urls more restrictive.
But there are some notable new features, as well:
Nested vars support in css.Build and css.Sass
A practical example in
css.Buildwould be to have something like this inhugo.toml:[params.style] primary = "[#000000](https://github.com/gohugoio/hugo/issues/000000)" background = "#ffffff" [params.style.dark] primary = "#ffffff" background = "[#000000](https://github.com/gohugoio/hugo/issues/000000)"And in the stylesheet:
@import "hugo:vars"; @import "hugo:vars/dark" (prefers-color-scheme: dark);:root { color-scheme: light dark; }
Slice-based permalinks config
The
permalinksconfiguration is now much more flexible (the old setup still works). It uses the same target matchers as in thecascadeconfig, meaning you can now do:permalinks: - target: kind: page path: "/books/**" </tr></table>
... (truncated)
ea8f66a
releaser: Bump versions for release of 0.161.1c4eba92
resources: Honor Retry-After header in resources.GetRemote retries8b40a96
warpc: Move to parson.c in https://github.com/kgabis/parsond65af84
config/security: Add AllowChildProcess to security.node.permissions454450a
config/security: Restrict default http.urls "@" deny to
userinfo2bfcc6b
releaser: Prepare repository for 0.162.0-DEV98d396c
releaser: Bump versions for release of 0.161.0d4ae662
build(deps): bump github.com/getkin/kin-openapi from 0.135.0 to
0.137.09ede5fb
build(deps): bump github.com/mattn/go-isatty from 0.0.21 to 0.0.22833a878
build(deps): bump github.com/tdewolff/minify/v2 from 2.24.12 to
2.24.13