From: Joe Mooring <joe.mooring@veriphor.com>
Date: Fri, 13 Feb 2026 01:42:27 +0000 (-0800)
Subject: commands: Skip chmod for files without owner-write permission
X-Git-Url: http://git.maquefel.me/?a=commitdiff_plain;h=7850e7ceb5618eacebdf327224e6c6cab1f51158;p=brevno-suite%2Fhugo

commands: Skip chmod for files without owner-write permission

Closes #14507

Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
---

diff --git a/commands/server.go b/commands/server.go
index a9454ffc2..25c16bc4d 100644
--- a/commands/server.go
+++ b/commands/server.go
@@ -1160,14 +1160,14 @@ func (s *staticSyncer) syncsStaticEvents(staticEvents []fsnotify.Event) error {
 	return err
 }
 
+// chmodFilter is a ChmodFilter for static syncing.
+// Returns true to skip syncing permissions for directories and files without
+// owner-write permission. The primary use case is files from the module cache (0444).
 func chmodFilter(dst, src os.FileInfo) bool {
-	// Hugo publishes data from multiple sources, potentially
-	// with overlapping directory structures. We cannot sync permissions
-	// for directories as that would mean that we might end up with write-protected
-	// directories inside /public.
-	// One example of this would be syncing from the Go Module cache,
-	// which have 0555 directories.
-	return src.IsDir()
+	if src.IsDir() {
+		return true
+	}
+	return src.Mode().Perm()&0o200 == 0
 }
 
 func cleanErrorLog(content string) string {
diff --git a/testscripts/commands/hugo__static_issue14507.txt b/testscripts/commands/hugo__static_issue14507.txt
new file mode 100644
index 000000000..429b9b9cc
--- /dev/null
+++ b/testscripts/commands/hugo__static_issue14507.txt
@@ -0,0 +1,27 @@
+hugo
+
+# Verify published files are writable.
+[!windows] exec sh -c 'test -w public/a.txt'
+[!windows] exec sh -c 'test -w public/sitemap.xml'
+
+[windows] exec cmd /c attrib public\a.txt
+[windows] ! stdout 'R.*public'
+[windows] exec cmd /c attrib public\sitemap.xml
+[windows] ! stdout 'R.*public'
+
+-- hugo.toml --
+baseURL = 'https://example.org/'
+disableKinds = ['page','rss','section','sitemap','taxonomy','term']
+
+[[module.imports]]
+path = 'github.com/gohugoio/hugoTestModule2'
+-- content/_index.md --
+---
+title: home
+---
+-- layouts/all.html --
+{{ .Title }}
+-- go.mod --
+module github.com/gohugoio/tests/testIssue14507
+
+go 1.23