Hugo

Latest version: v0.145.0

Safety actively analyzes 714815 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 7 of 54

0.132.0

Server-side [math rendering](https://gohugo.io/functions/transform/tomath/) using KaTeX with Markdown render hooks support, [blockquote Markdown render hooks](https://gohugo.io/render-hooks/blockquotes/) with [GitHub style alerts](https://docs.github.com/en/get-started/writing-on-github/getting-started-with-writing-and-formatting-on-github/basic-writing-and-formatting-syntax#alerts) syntax support, and more.

Bug fixes

* Improve Katex error handling and fix handling of large expressions e1e1baa1b bep 12748
* Fix compare of uints and ints in eq, gt etc. fbfccb394 bep 12733
* Fix deprecation errors 69455fa42 bep

Improvements

* internal/warpc: Add license headers 2192cf7ec bep
* Add katex option ThrowOnError e42263529 bep
* Add some more KaTeX options 891aa00fe bep 12745 12746
* tpl/transform: Make Plainify and ToMath return template.HTML 946e6af0b bep 8732
* Add build time math rendering 33c0938cd bep 11927
* github: Turn off the image workflow for pull request 0c3a1c728 bep
* github: Update image actions versions and some adjustments ceed81245 bep
* github: Update GitHub actions versions dbff48e6c bep
* markup: Add blockquote render hooks 665ac949b bep 12590
* markup/goldmark/codeblocks: Simplify codeblcok hook code 4c162deb0 bep
* Add render hooks for inline and block passthrough snippets c6227f1d8 bep 11927
* tpl/cast: Improve float 10891f305 bep 12718
* Skip TestEchoParam c07e94fa6 bep

Dependency Updates

* deps: Upgrade github.com/bep/imagemeta v0.7.6 => v0.8.0 5d84f6475 bep 12741
* build(deps): bump golang.org/x/net from 0.27.0 to 0.28.0 1781b1842 dependabot[bot]
* build(deps): bump golang.org/x/image from 0.18.0 to 0.19.0 d6d9dddff dependabot[bot]
* build(deps): bump github.com/bep/imagemeta from 0.7.5 to 0.7.6 (12720) 8f8d12ab2 dependabot[bot] 12718

Documentation

* docs: Regen docshelper ef2e30eca bep

Build Setup

* github: Build and publish Docker image on release b08de70cc morremeyer 10760

0.131.0

**Note** that if you use Hugo's image processing, your processed images will get new (shorter!) file names when you build your site with this release. We have upgraded a third party hashing library to fix some rare but potential hash collisions, and since this would change some of the image hashes, we thought we might as well do some other related changes: We now use [xxHash](https://xxhash.com/) to create the image file hashes (very fast!) and we have removed the verbose processing information, making the filenames much shorter.

This release is also a full dependency refresh and it comes with one notable and very useful new feature. It is now possible to use `permalinks` tokens in the front matter `url`. See the [documentation](https://gohugo.io/content-management/urls/#permalinks-tokens-in-front-matter) for more info. Thanks to n1xx1 for the implementation.

Note

* identity: Use xxHash in hashstructure (note) 2babd6404 bep

Bug fixes

* Fix images.AutoOrient regression 944fcc216 bep 12712

Improvements

* revamp pagegroup tests with quicktest 914fa13ef n1xx1
* allow nested params when using Pages.GroupByParam and Pages.GroupByParamDate 51f09b17f n1xx1
* Run go mod tidy a5db76fe6 bep
* resources/page: Expand parmalinks tokens in `url` 566fe7ba1 n1xx1 9714
* Bump to go 1.21 in go.mod 92573012e bep
* tpl: Sync Go template packages with the Go 1.22.5 source 071f8b446 bep
* Upgrade to Go 1.22.5 ae9d5e7d8 bep
* Shorten processed image filenames 216a69a1e bep 12688 12656
* Consolidate all hashing to the common/hashing package e67886c03 bep
* Replace the MD5 hashing of images with xxHash d5eda13cb bep
* resources: Add BenchmarkHashImage 8b5d79698 bep
* identity: Upgrade to github.com/mitchellh/hashstructure/v2 v2.0.2 78db8aebc bep 11644
* identity: Add BenchmarkHashString 3140e0b99 bep

Dependency Updates

* build(deps): bump github.com/bep/godartsass/v2 from 2.0.0 to 2.1.0 be643580d dependabot[bot]
* build(deps): bump google.golang.org/api from 0.152.0 to 0.189.0 20e4dd2ee dependabot[bot]
* build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 f41149979 dependabot[bot]
* build(deps): bump gocloud.dev from 0.36.0 to 0.38.0 47fee839f dependabot[bot]
* build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.3 99665ef22 dependabot[bot]
* build(deps): bump github.com/kyokomi/emoji/v2 from 2.2.12 to 2.2.13 eb2eeee68 dependabot[bot]
* deps: Upgrade github.com/hairyhenderson/go-codeowners v0.4.0 => v0.5.0 bea5a46de bep
* build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 f1a7f3d01 dependabot[bot]
* build(deps): bump github.com/evanw/esbuild from 0.21.4 to 0.23.0 08243be1d dependabot[bot]
* build(deps): bump github.com/tdewolff/minify/v2 from 2.20.36 to 2.20.37 0490a8a16 dependabot[bot]
* Revert "deps: Set toolchain go1.21.0 in go.mod" d795cacd7 bep
* deps: Set toolchain go1.21.0 in go.mod 78c9a18b0 bep
* deps: Upgrade golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d => v0.23.0 79aa2ab61 bep
* deps: Replace github.com/mitchellh/hashstructure/v2 with github.com/gohugoio/hashstructure c9d7577cb bep 11644
* deps: Upgrade github.com/bep/imagemeta v0.7.4 => v0.7.5 9989404d9 bep
* deps: Upgrade github.com/aws/aws-sdk-go-v2 v1.26.1 => v1.30.3 b81ba2a0f bep
* deps: Upgrade to github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.7.0 afdd87db5 bep

0.130.0

What's Changed

* math: Add trigonometric functions and some angle helper functions 9d2b5f98d raoulb [Documentation](https://gohugo.io/functions/math/)
* Switch EXIF library 72ff937e1 bep 10855 8586 8996 [Documentation](https://gohugo.io/methods/resource/exif/)

0.129.0

This release brings a rewrite of the logic around browser refreshes when running `hugo server`. We have seen some situations where asset changes (e.g. image/CSS/JS) has not been refreshed reliably in all browsers, even with the developer console open and the cache disabled. We suspect this comes from a recent browser bug (typically: Works fine in Safari, does not refresh in Chrome). The strategy we've been using when a change triggers multiple changes (e.g. both HTML and CSS) is to do one "browser force refresh", which in [LiveReload](https://github.com/livereload/livereload-js) ends up as a `window.location.reload()`. With this release we:

1. Are more specific about what we refresh, but fall back to "force refresh" for bigger change sets.
2. INFO log exactly what we do in these situations with the prefix `livereload`.

Start the server with:


hugo server --logLevel info


And you should see how Hugo handles browser updates when you change content/templates etc.

A related tip; start the server with


hugo server --logLevel info -N


Hugo will navigate to the content file you're changing and log it in the console.

Also new in this release a new [xxHash](https://gohugo.io/functions/hash/xxhash/) hashing function that is [much faster](https://github.com/gohugoio/hugo/commit/644d55475d631f60177eb792e9a010a39160df85) than any of the other hashing functions in Hugo, especially for larger inputs.

Note

We have upgraded the integration with Git used to load [GitInfo](https://gohugo.io/methods/page/gitinfo/) to be part of Hugo's [Security Policy](https://gohugo.io/about/security/#security-policy). We have added `git` to the default whitelist, but if you have a custom security policy, you may have to update that.


Bug fixes

* commands: Fix --navigateToChanged server behavior when editing headless content cc2d19e19 bep 12648
* commands: Fix hugo mod get -u ./... 251a23ef7 bep 12625

Improvements

* tpl: Use xxHash instead of MD5 to hash the deferred templates 4d8bfa7f1 bep
* Throw error if resources.PostProcess is used in a deferred template f0ed91cab bep 12655
* commands: Simplify the browser live reload logic 094f74675 bep 12643
* Use xxHash for the change detector fb8909d5b bep 12643
* source: Expose GitInfo Body 0ee2610d7 PeskyPotato 10905
* Add hash.XxHash 644d55475 bep 12635

Dependency Updates

* deps: Upgrade github.com/bep/gitmap v1.4.0 => v1.6.0 (note) 7be037750 bep 8627
* deps: Go mod tidy 439f07eac bep
* deps: Upgraded github.com/tdewolff/minify/v2 v2.20.20 => v2.20.36 ce5a2ce00 bep
* deps: Upgrade to golang.org/x/image v0.18.0 0f42d975e bep

0.128.2

What's Changed

* Fix site.GetPage, never do short lookups for paths with leadig slash 8cf96f244 bep 12638

0.128.1

What's Changed

* Fix it so publishDate rolls up to section, taxonomy, or term pages 7b6dafc53 bep 12438
* create/skeletons: Fix languageCode region subtag a95fe5061 CyrusYip
* Update README.md 932ab4c05 jmooring

Page 7 of 54

Links

Releases

Has known vulnerabilities

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.