]>
git.maquefel.me Git - brevno-suite/hugo/log
hugoreleaser [Thu, 20 Jul 2023 07:02:18 +0000 (07:02 +0000)]
releaser: Prepare repository for 0.116.0-DEV
[ci skip]
hugoreleaser [Thu, 20 Jul 2023 06:49:57 +0000 (06:49 +0000)]
releaser: Bump versions for release of 0.115.4
[ci skip]
Bjørn Erik Pedersen [Wed, 19 Jul 2023 17:10:34 +0000 (19:10 +0200)]
Fix broken handling of legacy taxonomyTerm in disableKinds
Fixes #11257
Bjørn Erik Pedersen [Wed, 19 Jul 2023 17:54:36 +0000 (19:54 +0200)]
commands: Move testscript into its correct place
Bjørn Erik Pedersen [Wed, 19 Jul 2023 15:32:19 +0000 (17:32 +0200)]
publisher: Improve class collector for dynamic classes
E.g.
* AlpinesJS' :class="isTrue 'class1' : 'class2'"
* And dynamic classes with colon in them, e.g. `hover:bg-white`
Bjørn Erik Pedersen [Wed, 19 Jul 2023 13:37:17 +0000 (15:37 +0200)]
Fix cache busting setup
By correctly capturing the target variable when compiling the cache buster.
Fixes #11268
Bjørn Erik Pedersen [Wed, 19 Jul 2023 10:20:13 +0000 (12:20 +0200)]
commands: Delay server builds after the watcher is set up
See #11264
Bjørn Erik Pedersen [Wed, 19 Jul 2023 08:28:56 +0000 (10:28 +0200)]
Create hugo_stats.json if it's mounted but does not exists
A common pattern for Tailwind 3 is to mount that file to get it on the server watch list.
A common pattern is also to add hugo_stats.json to .gitignore.
This has meant that the first time you start the server (no hugo_stats.json), it just doesn't work as expected.
Fixes #11264
Bjørn Erik Pedersen [Wed, 19 Jul 2023 07:23:48 +0000 (09:23 +0200)]
Re-instate disableLiveReload as a config option (and not just a flag)
Closes #11259
Joe Mooring [Wed, 19 Jul 2023 15:31:59 +0000 (08:31 -0700)]
common/htime: Fix localization of abbreviated month names
Fixes #11267
Bjørn Erik Pedersen [Mon, 17 Jul 2023 17:15:48 +0000 (19:15 +0200)]
Improve error messages for PostCSS etc.
Fixes #9730
Bjørn Erik Pedersen [Sun, 16 Jul 2023 08:42:13 +0000 (10:42 +0200)]
Fix setting config from env with complex (e.g. YAML) strings
So you can do
```
HUGO_OUTPUTS="home: [rss]" hugo
```
And similar.
Fixes #11249
David Karlsson [Sat, 15 Jul 2023 09:13:08 +0000 (11:13 +0200)]
Fix for data mounts in sub folders
Before this change, data files from Hugo modules were always mounted at the
root of the `data` directory. The File and FileMetaInfo structs for modules
are different from 'native' data directories.
This changes how the keyParts for data files are generated so that data
from modules or native directories are treated the same.
hugoreleaser [Thu, 13 Jul 2023 16:23:50 +0000 (16:23 +0000)]
releaser: Prepare repository for 0.116.0-DEV
[ci skip]
hugoreleaser [Thu, 13 Jul 2023 16:11:34 +0000 (16:11 +0000)]
releaser: Bump versions for release of 0.115.3
[ci skip]
Bjørn Erik Pedersen [Thu, 13 Jul 2023 13:42:30 +0000 (15:42 +0200)]
Improve behavior of defaultContentLanguageInSubdir when only the default language is enabled
1 .Create sitemapindex in root of publishDir (will contain link to sitemap.xml in defaultContentLanguage site)
2. Create index.html in root of publishDir (will redirect to defaultContentLanguage site)
Fixes #11229
Bjørn Erik Pedersen [Thu, 13 Jul 2023 13:01:41 +0000 (15:01 +0200)]
Return error when .Render is invoked without arg
Fixes #11243
Joe Mooring [Tue, 11 Jul 2023 20:01:52 +0000 (13:01 -0700)]
js: Pass tsconfig.json to esBuild
Note that esBuild only inspects/honors certain fields.
See https://esbuild.github.io/content-types/#tsconfig-json.
Fixes #11232
Bjørn Erik Pedersen [Tue, 11 Jul 2023 07:48:57 +0000 (09:48 +0200)]
tpl/collections: Fix WordCount (etc.) regression in Where, Sort, Delimit
Fixes #11234
Joe Mooring [Sat, 8 Jul 2023 20:58:11 +0000 (13:58 -0700)]
config/allconfig: Update timeout description
Joe Mooring [Sat, 8 Jul 2023 20:52:24 +0000 (13:52 -0700)]
docs: Refresh docs.json
hugoreleaser [Sat, 8 Jul 2023 17:19:03 +0000 (17:19 +0000)]
releaser: Prepare repository for 0.116.0-DEV
[ci skip]
hugoreleaser [Sat, 8 Jul 2023 17:06:56 +0000 (17:06 +0000)]
releaser: Bump versions for release of 0.115.2
[ci skip]
Joe Mooring [Sat, 8 Jul 2023 15:36:42 +0000 (08:36 -0700)]
snap: Allow access to AWS, Azure, and GCS config/credentials
Fixes #11122
Joe Mooring [Tue, 4 Jul 2023 16:52:25 +0000 (09:52 -0700)]
snap: Update metadata and security.exec.osEnv
See #11217
Bjørn Erik Pedersen [Sat, 8 Jul 2023 14:29:47 +0000 (16:29 +0200)]
Make imageConfig work with modules
Fixes #11205
Bjørn Erik Pedersen [Sat, 8 Jul 2023 14:16:06 +0000 (16:16 +0200)]
Restore language.disabled config
Fixes #11219
Bjørn Erik Pedersen [Sat, 8 Jul 2023 10:25:53 +0000 (12:25 +0200)]
Fix hugo mod vendor for modules with hugo.toml
Fixes #11221
Bjørn Erik Pedersen [Sat, 8 Jul 2023 09:55:52 +0000 (11:55 +0200)]
Fix static content files multilingual root regression
Fixes #11223
Bjørn Erik Pedersen [Fri, 7 Jul 2023 16:41:10 +0000 (18:41 +0200)]
Fix defaultContentLanguageInSubdir with only 1 language
Fixes #10064
David Karlsson [Fri, 7 Jul 2023 11:54:06 +0000 (13:54 +0200)]
config: Expand default security.exec.osEnv policy
To better support private Hugo modules and automatically
launching a text editor on content creation, this change
adds the following environment variables to the default
security policy:
- HOME
- XDG_CONFIG_HOME
- USERPROFILE
- SSH_AUTH_SOCK
- DISPLAY
- LANG
Fixes #9333
Bjørn Erik Pedersen [Wed, 5 Jul 2023 17:32:57 +0000 (19:32 +0200)]
Add titleCaseStyle none and firstupper
Fixes #11204
Anthony Fok [Tue, 4 Jul 2023 00:53:49 +0000 (18:53 -0600)]
Bump github.com/bep/clock v0.3.0 to renamed github.com/bep/clocks v0.5.0
hugoreleaser [Mon, 3 Jul 2023 17:39:56 +0000 (17:39 +0000)]
releaser: Prepare repository for 0.116.0-DEV
[ci skip]
hugoreleaser [Mon, 3 Jul 2023 17:28:25 +0000 (17:28 +0000)]
releaser: Bump versions for release of 0.115.1
[ci skip]
Bjørn Erik Pedersen [Mon, 3 Jul 2023 17:25:27 +0000 (19:25 +0200)]
docs: Regen docs helper
Bjørn Erik Pedersen [Mon, 3 Jul 2023 07:58:33 +0000 (09:58 +0200)]
Fix buildStats when tags and classes are disabled
Fixes #11202
Bjørn Erik Pedersen [Sun, 2 Jul 2023 09:02:47 +0000 (11:02 +0200)]
Rework the build.writeStats struct
Mostly to make it easier to toggle on/off this feature from the env.
See #11191
Joe Mooring [Sun, 2 Jul 2023 00:55:23 +0000 (17:55 -0700)]
snap: Explicitly set security.exec.osenv during build
Fixes #11199
Joe Mooring [Sat, 1 Jul 2023 21:55:57 +0000 (14:55 -0700)]
snap: Restore security.exec.osenv whitelist
Fixes #11195
Bjørn Erik Pedersen [Sat, 1 Jul 2023 14:08:23 +0000 (16:08 +0200)]
github: Build for Dragonfly in CI build
To discover upstream issues before we release.
Bjørn Erik Pedersen [Sat, 1 Jul 2023 08:37:38 +0000 (10:37 +0200)]
Make build.writeStats a struct
So you can do
```toml
[build.writeStats]
tags = true
classes = true
ids = false
```
Fixes #11191
dependabot[bot] [Sat, 1 Jul 2023 08:35:17 +0000 (08:35 +0000)]
build(deps): bump github.com/evanw/esbuild from 0.18.10 to 0.18.11
Bumps [github.com/evanw/esbuild](https://github.com/evanw/esbuild) from 0.18.10 to 0.18.11.
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.18.10...v0.18.11)
---
updated-dependencies:
- dependency-name: github.com/evanw/esbuild
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
dependabot[bot] [Fri, 30 Jun 2023 08:34:29 +0000 (08:34 +0000)]
build(deps): bump github.com/alecthomas/chroma/v2 from 2.7.0 to 2.8.0
Bumps [github.com/alecthomas/chroma/v2](https://github.com/alecthomas/chroma) from 2.7.0 to 2.8.0.
- [Release notes](https://github.com/alecthomas/chroma/releases)
- [Changelog](https://github.com/alecthomas/chroma/blob/master/.goreleaser.yml)
- [Commits](https://github.com/alecthomas/chroma/compare/v2.7.0...v2.8.0)
---
updated-dependencies:
- dependency-name: github.com/alecthomas/chroma/v2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Bjørn Erik Pedersen [Fri, 30 Jun 2023 13:57:46 +0000 (15:57 +0200)]
commands: Fix index out of range in hugo mod get
Fixes #11190
Bjørn Erik Pedersen [Fri, 30 Jun 2023 06:47:11 +0000 (08:47 +0200)]
Only print the path warnings once
We could reset and rerun it on server rebuilds, but that report needs a full build to make sense.
Also clean up the config vs flags in this area: Make all config settings match the flags e.g. `printPathWarnings`, but set up aliases for the
old.
Fixes #11187
Bjørn Erik Pedersen [Fri, 30 Jun 2023 06:01:25 +0000 (08:01 +0200)]
Update README.md
hugoreleaser [Thu, 29 Jun 2023 16:09:06 +0000 (16:09 +0000)]
releaser: Prepare repository for 0.116.0-DEV
[ci skip]
hugoreleaser [Thu, 29 Jun 2023 15:56:39 +0000 (15:56 +0000)]
releaser: Bump versions for release of 0.115.0
[ci skip]
Bjørn Erik Pedersen [Wed, 28 Jun 2023 08:27:39 +0000 (10:27 +0200)]
Misc permalinks adjustments
* Move config loading to the page package
* Fix a lower bound panic for the `:sections` slice syntax.
* Always return the `:title`
* Add some permalinks integration tests
* Also see issues below
Fixes #9448
Fixes #11184
See #8523
Bjørn Erik Pedersen [Thu, 29 Jun 2023 06:53:50 +0000 (08:53 +0200)]
commands: Handle hugo mod get --help
Fixes #11141
Joe Mooring [Sun, 25 Jun 2023 01:37:07 +0000 (18:37 -0700)]
Update README.md
Andreas Deininger [Tue, 27 Jun 2023 14:33:28 +0000 (16:33 +0200)]
commands: Fix panic when running hugo new theme without theme name
Closes #11162.
Mos Roshanavand [Mon, 26 Jun 2023 18:20:24 +0000 (20:20 +0200)]
Print help message when triggered with no flags
Bjørn Erik Pedersen [Wed, 28 Jun 2023 08:01:44 +0000 (10:01 +0200)]
Fix output formats and media type per language config regression
Fixes #11159
dependabot[bot] [Tue, 27 Jun 2023 08:57:43 +0000 (08:57 +0000)]
build(deps): bump github.com/evanw/esbuild from 0.18.5 to 0.18.10
Bumps [github.com/evanw/esbuild](https://github.com/evanw/esbuild) from 0.18.5 to 0.18.10.
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.18.5...v0.18.10)
---
updated-dependencies:
- dependency-name: github.com/evanw/esbuild
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
khayyam [Wed, 28 Jun 2023 07:41:36 +0000 (03:41 -0400)]
common/collections: Fix append regression to allow appending nil
Closes #11180
Andreas Deininger [Wed, 28 Jun 2023 07:30:27 +0000 (09:30 +0200)]
commands: Fix help message for hugo new theme
Closes #11161.
Bjørn Erik Pedersen [Wed, 28 Jun 2023 06:56:35 +0000 (08:56 +0200)]
Don't panic on invalid security whitelist regexp
Fixes #11176
Bjørn Erik Pedersen [Tue, 27 Jun 2023 07:16:42 +0000 (09:16 +0200)]
Fix false path warnings with resources.PostProcess
Fixes #7735
Joe Mooring [Mon, 26 Jun 2023 19:22:55 +0000 (12:22 -0700)]
docs: Update permalinks documentation
See #8523
See #10847
Bjørn Erik Pedersen [Mon, 26 Jun 2023 18:48:44 +0000 (20:48 +0200)]
Merge branch 'master' of github.com:gohugoio/hugo
Mai-Lapyst [Mon, 26 Jun 2023 13:31:01 +0000 (15:31 +0200)]
resources/page: Allow section and taxonomy pages to have a permalink configuration
Allows using permalink configuration for sections (branch bundles) and
also for taxonomy pages. Extends the current permalink configuration to
be able to specified per page kind while also staying backward compatible:
all permalink patterns not dedicated to a certain kind, get automatically
added for both normal pages and term pages.
Fixes #8523
Oleksandr Redko [Mon, 26 Jun 2023 11:26:36 +0000 (14:26 +0300)]
tpl/tplimpl: Fix typo in global variable name
Joe Mooring [Sat, 24 Jun 2023 15:45:53 +0000 (08:45 -0700)]
commands: Enable format flag with hugo new site
Fixes #11155
Bjørn Erik Pedersen [Sat, 24 Jun 2023 09:28:29 +0000 (11:28 +0200)]
Update README.md
Bjørn Erik Pedersen [Fri, 23 Jun 2023 11:18:21 +0000 (13:18 +0200)]
Merge branch 'release-0.114.1'
hugoreleaser [Fri, 23 Jun 2023 11:14:00 +0000 (11:14 +0000)]
releaser: Prepare repository for 0.115.0-DEV
[ci skip]
hugoreleaser [Fri, 23 Jun 2023 11:02:58 +0000 (11:02 +0000)]
releaser: Bump versions for release of 0.114.1
[ci skip]
Bjørn Erik Pedersen [Fri, 23 Jun 2023 11:01:09 +0000 (13:01 +0200)]
Revert "build(deps): bump gocloud.dev from 0.24.0 to 0.30.0"
This reverts commit
941818295d10a00ef557bce30ee9df86affc9f0f .
Bjørn Erik Pedersen [Fri, 23 Jun 2023 10:09:57 +0000 (12:09 +0200)]
Fix broken nodeploy setup
Fixes #11149
dependabot[bot] [Thu, 22 Jun 2023 08:58:34 +0000 (08:58 +0000)]
build(deps): bump github.com/niklasfasching/go-org from 1.6.6 to 1.7.0
Bumps [github.com/niklasfasching/go-org](https://github.com/niklasfasching/go-org) from 1.6.6 to 1.7.0.
- [Commits](https://github.com/niklasfasching/go-org/compare/v1.6.6...v1.7.0)
---
updated-dependencies:
- dependency-name: github.com/niklasfasching/go-org
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Bjørn Erik Pedersen [Fri, 23 Jun 2023 10:09:57 +0000 (12:09 +0200)]
Fix broken nodeploy setup
Fixes #11149
Joe Mooring [Wed, 21 Jun 2023 22:39:02 +0000 (15:39 -0700)]
snap: Switch from Embedded Dart Sass to Dart Sass (#11146)
- Continues to get latest version of Dart Sass during each build
- Removes superfluous BUILD_TAGS logic (we only build extended)
Bjørn Erik Pedersen [Wed, 21 Jun 2023 21:18:38 +0000 (23:18 +0200)]
commands: Make hugo env respect --logLevel
Fixes #11145
Brian Knight [Wed, 21 Jun 2023 18:38:54 +0000 (14:38 -0400)]
commands: Update Jekyll post-import output
Update CLI output after a successful Jekyll import to
suggest a maintained theme and include clearer steps
to running a server locally.
Fixes #10715
Co-authored-by: Joe Mooring <joe@mooring.com>
dependabot[bot] [Tue, 20 Jun 2023 08:03:28 +0000 (08:03 +0000)]
build(deps): bump gocloud.dev from 0.24.0 to 0.30.0
Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.24.0 to 0.30.0.
- [Release notes](https://github.com/google/go-cloud/releases)
- [Commits](https://github.com/google/go-cloud/compare/v0.24.0...v0.30.0)
---
updated-dependencies:
- dependency-name: gocloud.dev
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
dependabot[bot] [Tue, 20 Jun 2023 07:19:34 +0000 (07:19 +0000)]
build(deps): bump github.com/evanw/esbuild from 0.18.4 to 0.18.5
Bumps [github.com/evanw/esbuild](https://github.com/evanw/esbuild) from 0.18.4 to 0.18.5.
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.18.4...v0.18.5)
---
updated-dependencies:
- dependency-name: github.com/evanw/esbuild
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Joe Mooring [Mon, 19 Jun 2023 19:59:38 +0000 (12:59 -0700)]
deps: Update github.com/tdewolff/minify/v2 v2.12.5 => v2.12.7
Fixes #11132
hugoreleaser [Mon, 19 Jun 2023 17:12:27 +0000 (17:12 +0000)]
releaser: Prepare repository for 0.115.0-DEV
[ci skip]
hugoreleaser [Mon, 19 Jun 2023 17:01:43 +0000 (17:01 +0000)]
releaser: Bump versions for release of 0.114.0
[ci skip]
Bjørn Erik Pedersen [Mon, 19 Jun 2023 16:56:31 +0000 (18:56 +0200)]
Revert "build(deps): bump gocloud.dev from 0.24.0 to 0.29.0"
This reverts commit
7bed16c30fc9405305c4c80d099cee5287126a42 .
Again ...
It doesn't build on Dragonfly:
```
../gomodcache/github.com/!azure/azure-sdk-for-go/sdk/storage/azblob@v1.0.0/blockblob/chunkwriting.go:273:15: undefined: mmb
../gomodcache/github.com/!azure/azure-sdk-for-go/sdk/storage/azblob@v1.0.0/blockblob/chunkwriting.go:279:65: undefined: mmb
../gomodcache/github.com/!azure/azure-sdk-for-go/sdk/storage/azblob@v1.0.0/blockblob/chunkwriting.go:281:22: undefined: mmb
../gomodcache/github.com/!azure/azure-sdk-for-go/sdk/storage/azblob@v1.0.0/blockblob/chunkwriting.go:287:39: undefined: mmb
../gomodcache/github.com/!azure/azure-sdk-for-go/sdk/storage/azblob@v1.0.0/blockblob/chunkwriting.go:293:18: undefined: newMMB
../gomodcache/github.com/!azure/azure-sdk-for-go/sdk/storage/azblob@v1.0.0/blockblob/chunkwriting.go:303:37: undefined: mmb
• core: Total in 123.22s …
error running command: exit status 1
Exited with code exit status 1
```
Bjørn Erik Pedersen [Mon, 19 Jun 2023 15:52:42 +0000 (17:52 +0200)]
docs: Regen docshelper
Bjørn Erik Pedersen [Mon, 19 Jun 2023 15:49:45 +0000 (17:49 +0200)]
Add empty Environ when loading test config
To prevent OS environment vars confusing the tests.
Bjørn Erik Pedersen [Mon, 19 Jun 2023 15:40:17 +0000 (17:40 +0200)]
docs: Regen CLI docs
Bjørn Erik Pedersen [Mon, 19 Jun 2023 15:35:43 +0000 (17:35 +0200)]
common/loggers: Drop the bold INFO etc. prefixes
That looked a little too much.
Bjørn Erik Pedersen [Mon, 19 Jun 2023 13:56:44 +0000 (15:56 +0200)]
loggers: Avoid using Logf for the LevelLoggerToWriter
To prevent issues with percentage chars.
Bjørn Erik Pedersen [Mon, 19 Jun 2023 11:27:03 +0000 (13:27 +0200)]
tocss/dartsas: Avoid using Logf for the internal Dart Sass logging
As that does not work when percentages are used in the log messages.
Bjørn Erik Pedersen [Mon, 19 Jun 2023 11:02:47 +0000 (13:02 +0200)]
helpers: Remove superflous formatting flag in deprecation warnings
Bjørn Erik Pedersen [Mon, 19 Jun 2023 10:12:33 +0000 (12:12 +0200)]
Revert "deps: Update github.com/tdewolff/minify/v2 v2.12.5 => v2.12.6"
This reverts commit
409c6c3fcd46a57c2f469663bb0106a1a3cf4469 .
See #11132
Andreas Deininger [Mon, 19 Jun 2023 07:28:10 +0000 (09:28 +0200)]
all: Fix some typos
Oleksandr Redko [Mon, 22 May 2023 17:11:12 +0000 (20:11 +0300)]
all: Fix typos in function names and comments
Bjørn Erik Pedersen [Sun, 18 Jun 2023 16:35:11 +0000 (18:35 +0200)]
deploy: Fix deploy defaults for non-zero flag values (e.g. maxDeletes, invalidateCDN)
This was broken in the config rewrite in Hugo 0.112.0.
The workaround is to be explicit about setting these flag values (even if just using the defaults), e.g.:
```
hugo deploy --invalidateCDN --maxDeletes 256
```
Fixes #11127
Bjørn Erik Pedersen [Sun, 18 Jun 2023 16:56:45 +0000 (18:56 +0200)]
common/loggers: Re-add trailing newline in logger.Printf
Fixes #11130
dependabot[bot] [Sun, 18 Jun 2023 11:04:19 +0000 (11:04 +0000)]
build(deps): bump github.com/evanw/esbuild from 0.18.3 to 0.18.4
Bumps [github.com/evanw/esbuild](https://github.com/evanw/esbuild) from 0.18.3 to 0.18.4.
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.18.3...v0.18.4)
---
updated-dependencies:
- dependency-name: github.com/evanw/esbuild
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Bjørn Erik Pedersen [Fri, 16 Jun 2023 06:17:42 +0000 (08:17 +0200)]
Replace the old log setup, with structured logging etc.
Fixes #11124
Joe Mooring [Sat, 17 Jun 2023 15:41:15 +0000 (08:41 -0700)]
Revert "snap: Transition base snap from core20 to core22 (#11101)" (#11125)
Closes #11116
dependabot[bot] [Thu, 15 Jun 2023 17:53:38 +0000 (17:53 +0000)]
build(deps): bump github.com/evanw/esbuild from 0.18.2 to 0.18.3
Bumps [github.com/evanw/esbuild](https://github.com/evanw/esbuild) from 0.18.2 to 0.18.3.
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.18.2...v0.18.3)
---
updated-dependencies:
- dependency-name: github.com/evanw/esbuild
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Bjørn Erik Pedersen [Thu, 15 Jun 2023 14:34:16 +0000 (16:34 +0200)]
Fix upstream Go templates bug with reversed key/value assignment
The template packages are based on go1.20.5 with the patch in
befec5ddbbfbd81ec84e74e15a38044d67f8785b added.
This also includes a security fix that now disallows Go template actions in JS literals (inside backticks).
This will throw an error saying "... appears in a JS template literal".
If you're really sure this isn't a security risk in your case, you can revert to the old behaviour:
```toml
[security]
[security.gotemplates]
allowActionJSTmpl = true
```
See https://github.com/golang/go/issues/59234
Fixes #11112
dependabot[bot] [Wed, 14 Jun 2023 17:02:18 +0000 (17:02 +0000)]
build(deps): bump golang.org/x/sync from 0.2.0 to 0.3.0
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.2.0 to 0.3.0.
- [Commits](https://github.com/golang/sync/compare/v0.2.0...v0.3.0)
---
updated-dependencies:
- dependency-name: golang.org/x/sync
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>