chore(deps): update dependency gohugoio/hugo to v0.158.0 #6

Merged

onlyhavecans merged 1 commit from renovate/gohugoio-hugo-0.x into main

2026-03-17 08:23:31 -07:00

Renovate-Bot commented

2026-03-16 12:02:32 -07:00

Member

This PR contains the following updates:

Package	Update	Change
gohugoio/hugo	minor	`v0.157.0` → `v0.158.0`

Release Notes

gohugoio/hugo (gohugoio/hugo)

`v0.158.0`

Compare Source

This release adds css.Build, native and very fast bundling/transformation/minifying of CSS resources. Also see the new strings.ReplacePairs, a very fast option if you need to do many string replacements.

Notes

Upgrade to to Go 1.26.1 (#14597) (note) 1f578f1 @bep #14595. This fixes a security issue in Go's template package used by Hugo: https://www.cve.org/CVERecord?id=CVE-2026-27142

Deprecations

The methods and config options are deprecated and will be removed in a future Hugo release.

Also see this article

Language configuration

languageCode → Use locale instead.
languages.<lang>.languageCode → Use languages.<lang>.locale instead.
languages.<lang>.languageName → Use languages.<lang>.label instead.
languages.<lang>.languageDirection → Use languages.<lang>.direction instead.

Language methods

.Site.LanguageCode → Use .Site.Language.Locale instead.
.Language.LanguageCode → Use .Language.Locale instead.
.Language.LanguageName → Use .Language.Label instead.
.Language.LanguageDirection → Use .Language.Direction instead.

Bug fixes

tpl/css: Fix external source maps e431f90 @bep #14620
hugolib: Fix server no watch 59e0446 @jmooring #14615
resources: Fix context canceled on GetRemote with per-request timeout 842d8f1 @bep #14611
tpl/tplimpl: Prefer early suffixes when media type matches 4eafd9e @bep #13877 #14601
all: Run go fix ./... e310822 @bep
internal/warpc: Fix SIGSEGV in Close() when dispatcher fails to start c9b88e4 @bep #14536
Fix index out of range panic in fileEventsContentPaths f797f84 @bep #14573

Improvements

resources: Re-publish on transformation cache hit 3c980c0 @bep #14629
create/skeletons: Use css.Build in theme skeleton 404ac00 @jmooring #14626
tpl/css: Add a test case for rebuilds on CSS options changes 06fcb72 @bep
hugolib: Allow regular pages to cascade to self 9b5f1d4 @jmooring #14627
tpl/css: Allow the user to override single loader entries 623722b @bep #14623
tpl/css: Make default loader resolution for CSS @import and url() always behave the same a7cbcf1 @bep #14619
internal/js: Add default mainFields for CSS builds 36cdb2c @jmooring #14614
Add css.Build 3e3b849 @bep #14609 #14613
resources: Use full path for Exif etc. decoding error/warning messages c47ec23 @bep #12693
Move to new locales library and upgrade CLDR from v36.1 to v48.1 4652ae4 @bep
tpl/strings: Add strings.ReplacePairs function 13a95b9 @jmooring #14594
github: Remove pull_request_template.md 54c8048 @bep
testing: Make commands tests pass in Go 1.26.1 157bfdd @bep
refactor: Deprecate language configuration and template methods d4f2122 @jmooring #14269
Replace Exif with Meta in tests 991d2f9 @bep
resources: Improve getImageOps error message e857777 @jmooring #14571
resources/images: Add IsImageResourceWithMeta etc. tests for bmp and gif 44dc384 @bep #14568

Dependency Updates

deps: Upgrade github.com/evanw/esbuild v0.27.3 => v0.27.4 0e46a97 @bep
build(deps): bump github.com/getkin/kin-openapi from 0.133.0 to 0.134.0 c27d9e8 @dependabot[bot]
build(deps): bump golang.org/x/tools from 0.42.0 to 0.43.0 098eac5 @dependabot[bot]
build(deps): bump gocloud.dev from 0.44.0 to 0.45.0 87f8de8 @dependabot[bot]
build(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0 67ef6c6 @dependabot[bot]
build(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 (#14569) b29c2f7 @dependabot[bot]
build(deps): bump github.com/tdewolff/minify/v2 from 2.24.9 to 2.24.10 (#14585) e91d191 @dependabot[bot]
build(deps): bump github.com/bep/imagemeta from 0.15.0 to 0.17.0 (#14584) a8a54bd @dependabot[bot]

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [gohugoio/hugo](https://github.com/gohugoio/hugo) | minor | `v0.157.0` → `v0.158.0` | --- ### Release Notes <details> <summary>gohugoio/hugo (gohugoio/hugo)</summary> ### [`v0.158.0`](https://github.com/gohugoio/hugo/releases/tag/v0.158.0) [Compare Source](https://github.com/gohugoio/hugo/compare/v0.157.0...v0.158.0) This release adds [css.Build](https://gohugo.io/functions/css/build/), native and very fast bundling/transformation/minifying of CSS resources. Also see the new [strings.ReplacePairs](https://gohugo.io/functions/strings/replacepairs/), a very fast option if you need to do many string replacements. #### Notes - Upgrade to to Go 1.26.1 ([#14597](https://github.com/gohugoio/hugo/issues/14597)) (note) [`1f578f1`](https://github.com/gohugoio/hugo/commit/1f578f16) [@bep](https://github.com/bep) [#14595](https://github.com/gohugoio/hugo/issues/14595). This fixes a security issue in Go's template package used by Hugo: <https://www.cve.org/CVERecord?id=CVE-2026-27142> #### Deprecations The methods and config options are deprecated and will be removed in a future Hugo release. Also see [this article](https://discourse.gohugo.io/t/deprecations-in-v0-158-0/56869) ##### Language configuration - `languageCode` → Use `locale` instead. - `languages.<lang>.languageCode` → Use `languages.<lang>.locale` instead. - `languages.<lang>.languageName` → Use `languages.<lang>.label` instead. - `languages.<lang>.languageDirection` → Use `languages.<lang>.direction` instead. ##### Language methods - `.Site.LanguageCode` → Use `.Site.Language.Locale` instead. - `.Language.LanguageCode` → Use `.Language.Locale` instead. - `.Language.LanguageName` → Use `.Language.Label` instead. - `.Language.LanguageDirection` → Use `.Language.Direction` instead. #### Bug fixes - tpl/css: Fix external source maps [`e431f90`](https://github.com/gohugoio/hugo/commit/e431f90b) [@bep](https://github.com/bep) [#14620](https://github.com/gohugoio/hugo/issues/14620) - hugolib: Fix server no watch [`59e0446`](https://github.com/gohugoio/hugo/commit/59e0446f) [@jmooring](https://github.com/jmooring) [#14615](https://github.com/gohugoio/hugo/issues/14615) - resources: Fix context canceled on GetRemote with per-request timeout [`842d8f1`](https://github.com/gohugoio/hugo/commit/842d8f10) [@bep](https://github.com/bep) [#14611](https://github.com/gohugoio/hugo/issues/14611) - tpl/tplimpl: Prefer early suffixes when media type matches [`4eafd9e`](https://github.com/gohugoio/hugo/commit/4eafd9eb) [@bep](https://github.com/bep) [#13877](https://github.com/gohugoio/hugo/issues/13877) [#14601](https://github.com/gohugoio/hugo/issues/14601) - all: Run go fix ./... [`e310822`](https://github.com/gohugoio/hugo/commit/e3108225) [@bep](https://github.com/bep) - internal/warpc: Fix SIGSEGV in Close() when dispatcher fails to start [`c9b88e4`](https://github.com/gohugoio/hugo/commit/c9b88e4d) [@bep](https://github.com/bep) [#14536](https://github.com/gohugoio/hugo/issues/14536) - Fix index out of range panic in fileEventsContentPaths [`f797f84`](https://github.com/gohugoio/hugo/commit/f797f849) [@bep](https://github.com/bep) [#14573](https://github.com/gohugoio/hugo/issues/14573) #### Improvements - resources: Re-publish on transformation cache hit [`3c980c0`](https://github.com/gohugoio/hugo/commit/3c980c07) [@bep](https://github.com/bep) [#14629](https://github.com/gohugoio/hugo/issues/14629) - create/skeletons: Use css.Build in theme skeleton [`404ac00`](https://github.com/gohugoio/hugo/commit/404ac000) [@jmooring](https://github.com/jmooring) [#14626](https://github.com/gohugoio/hugo/issues/14626) - tpl/css: Add a test case for rebuilds on CSS options changes [`06fcb72`](https://github.com/gohugoio/hugo/commit/06fcb724) [@bep](https://github.com/bep) - hugolib: Allow regular pages to cascade to self [`9b5f1d4`](https://github.com/gohugoio/hugo/commit/9b5f1d49) [@jmooring](https://github.com/jmooring) [#14627](https://github.com/gohugoio/hugo/issues/14627) - tpl/css: Allow the user to override single loader entries [`623722b`](https://github.com/gohugoio/hugo/commit/623722bb) [@bep](https://github.com/bep) [#14623](https://github.com/gohugoio/hugo/issues/14623) - tpl/css: Make default loader resolution for CSS [@import](https://github.com/import) and url() always behave the same [`a7cbcf1`](https://github.com/gohugoio/hugo/commit/a7cbcf15) [@bep](https://github.com/bep) [#14619](https://github.com/gohugoio/hugo/issues/14619) - internal/js: Add default mainFields for CSS builds [`36cdb2c`](https://github.com/gohugoio/hugo/commit/36cdb2c7) [@jmooring](https://github.com/jmooring) [#14614](https://github.com/gohugoio/hugo/issues/14614) - Add css.Build [`3e3b849`](https://github.com/gohugoio/hugo/commit/3e3b849c) [@bep](https://github.com/bep) [#14609](https://github.com/gohugoio/hugo/issues/14609) [#14613](https://github.com/gohugoio/hugo/issues/14613) - resources: Use full path for Exif etc. decoding error/warning messages [`c47ec23`](https://github.com/gohugoio/hugo/commit/c47ec233) [@bep](https://github.com/bep) [#12693](https://github.com/gohugoio/hugo/issues/12693) - Move to new locales library and upgrade CLDR from v36.1 to v48.1 [`4652ae4`](https://github.com/gohugoio/hugo/commit/4652ae4a) [@bep](https://github.com/bep) - tpl/strings: Add strings.ReplacePairs function [`13a95b9`](https://github.com/gohugoio/hugo/commit/13a95b9c) [@jmooring](https://github.com/jmooring) [#14594](https://github.com/gohugoio/hugo/issues/14594) - github: Remove pull\_request\_template.md [`54c8048`](https://github.com/gohugoio/hugo/commit/54c80487) [@bep](https://github.com/bep) - testing: Make commands tests pass in Go 1.26.1 [`157bfdd`](https://github.com/gohugoio/hugo/commit/157bfddd) [@bep](https://github.com/bep) - refactor: Deprecate language configuration and template methods [`d4f2122`](https://github.com/gohugoio/hugo/commit/d4f2122d) [@jmooring](https://github.com/jmooring) [#14269](https://github.com/gohugoio/hugo/issues/14269) - Replace Exif with Meta in tests [`991d2f9`](https://github.com/gohugoio/hugo/commit/991d2f9a) [@bep](https://github.com/bep) - resources: Improve getImageOps error message [`e857777`](https://github.com/gohugoio/hugo/commit/e8577771) [@jmooring](https://github.com/jmooring) [#14571](https://github.com/gohugoio/hugo/issues/14571) - resources/images: Add IsImageResourceWithMeta etc. tests for bmp and gif [`44dc384`](https://github.com/gohugoio/hugo/commit/44dc3847) [@bep](https://github.com/bep) [#14568](https://github.com/gohugoio/hugo/issues/14568) #### Dependency Updates - deps: Upgrade github.com/evanw/esbuild v0.27.3 => v0.27.4 [`0e46a97`](https://github.com/gohugoio/hugo/commit/0e46a97e) [@bep](https://github.com/bep) - build(deps): bump github.com/getkin/kin-openapi from 0.133.0 to 0.134.0 [`c27d9e8`](https://github.com/gohugoio/hugo/commit/c27d9e8f) [@dependabot](https://github.com/dependabot)\[bot] - build(deps): bump golang.org/x/tools from 0.42.0 to 0.43.0 [`098eac5`](https://github.com/gohugoio/hugo/commit/098eac59) [@dependabot](https://github.com/dependabot)\[bot] - build(deps): bump gocloud.dev from 0.44.0 to 0.45.0 [`87f8de8`](https://github.com/gohugoio/hugo/commit/87f8de8c) [@dependabot](https://github.com/dependabot)\[bot] - build(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0 [`67ef6c6`](https://github.com/gohugoio/hugo/commit/67ef6c68) [@dependabot](https://github.com/dependabot)\[bot] - build(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 ([#14569](https://github.com/gohugoio/hugo/issues/14569)) [`b29c2f7`](https://github.com/gohugoio/hugo/commit/b29c2f7a) [@dependabot](https://github.com/dependabot)\[bot] - build(deps): bump github.com/tdewolff/minify/v2 from 2.24.9 to 2.24.10 ([#14585](https://github.com/gohugoio/hugo/issues/14585)) [`e91d191`](https://github.com/gohugoio/hugo/commit/e91d1911) [@dependabot](https://github.com/dependabot)\[bot] - build(deps): bump github.com/bep/imagemeta from 0.15.0 to 0.17.0 ([#14584](https://github.com/gohugoio/hugo/issues/14584)) [`a8a54bd`](https://github.com/gohugoio/hugo/commit/a8a54bd0) [@dependabot](https://github.com/dependabot)\[bot] </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).