commands: Fix index out of range in hugo mod get

Fixes #11190

Only print the path warnings once

We could reset and rerun it on server rebuilds, but that report needs a full build to make sense.

Also clean up the config vs flags in this area: Make all config settings match the flags e.g. `printPathWarnings`, but set up aliases for the
old.

Fixes #11187

Update README.md

releaser: Prepare repository for 0.116.0-DEV

[ci skip]

releaser: Bump versions for release of 0.115.0

[ci skip]

Misc permalinks adjustments

* Move config loading to the page package
* Fix a lower bound panic for the `:sections` slice syntax.
* Always return the `:title`
* Add some permalinks integration tests
* Also see issues below

Fixes #9448
Fixes #11184
See #8523

commands: Handle hugo mod get --help

Fixes #11141

Update README.md

commands: Fix panic when running hugo new theme without theme name

Closes #11162.

Print help message when triggered with no flags

Fix output formats and media type  per language config regression

Fixes #11159

build(deps): bump github.com/evanw/esbuild from 0.18.5 to 0.18.10

Bumps [github.com/evanw/esbuild](https://github.com/evanw/esbuild) from 0.18.5 to 0.18.10.
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.18.5...v0.18.10)

---
updated-dependencies:
- dependency-name: github.com/evanw/esbuild
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

common/collections: Fix append regression to allow appending nil

Closes #11180

commands: Fix help message for hugo new theme

Closes #11161.

Don't panic on invalid security whitelist regexp

Fixes #11176

Fix false path warnings with resources.PostProcess

Fixes #7735

docs: Update permalinks documentation

See #8523
See #10847

Merge branch 'master' of github.com:gohugoio/hugo

resources/page: Allow section and taxonomy pages to have a permalink configuration

Allows using permalink configuration for sections (branch bundles) and
also for taxonomy pages. Extends the current permalink configuration to
be able to specified per page kind while also staying backward compatible:
all permalink patterns not dedicated to a certain kind, get automatically
added for both normal pages and term pages.

Fixes #8523

tpl/tplimpl: Fix typo in global variable name

commands: Enable format flag with hugo new site

Fixes #11155

Update README.md

Merge branch 'release-0.114.1'

releaser: Prepare repository for 0.115.0-DEV

[ci skip]

releaser: Bump versions for release of 0.114.1

[ci skip]

Revert "build(deps): bump gocloud.dev from 0.24.0 to 0.30.0"

This reverts commit 941818295d10a00ef557bce30ee9df86affc9f0f.

Fix broken nodeploy setup

Fixes #11149

build(deps): bump github.com/niklasfasching/go-org from 1.6.6 to 1.7.0

Bumps [github.com/niklasfasching/go-org](https://github.com/niklasfasching/go-org) from 1.6.6 to 1.7.0.
- [Commits](https://github.com/niklasfasching/go-org/compare/v1.6.6...v1.7.0)

---
updated-dependencies:
- dependency-name: github.com/niklasfasching/go-org
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix broken nodeploy setup

Fixes #11149

snap: Switch from Embedded Dart Sass to Dart Sass (#11146)

- Continues to get latest version of Dart Sass during each build
- Removes superfluous BUILD_TAGS logic (we only build extended)

commands: Make hugo env respect --logLevel

Fixes #11145

commands: Update Jekyll post-import output

Update CLI output after a successful Jekyll import to
suggest a maintained theme and include clearer steps
to running a server locally.

Fixes #10715

Co-authored-by: Joe Mooring <joe@mooring.com>

build(deps): bump gocloud.dev from 0.24.0 to 0.30.0

Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.24.0 to 0.30.0.
- [Release notes](https://github.com/google/go-cloud/releases)
- [Commits](https://github.com/google/go-cloud/compare/v0.24.0...v0.30.0)

---
updated-dependencies:
- dependency-name: gocloud.dev
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump github.com/evanw/esbuild from 0.18.4 to 0.18.5

Bumps [github.com/evanw/esbuild](https://github.com/evanw/esbuild) from 0.18.4 to 0.18.5.
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.18.4...v0.18.5)

---
updated-dependencies:
- dependency-name: github.com/evanw/esbuild
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

deps: Update github.com/tdewolff/minify/v2 v2.12.5 => v2.12.7

Fixes #11132

releaser: Prepare repository for 0.115.0-DEV

[ci skip]

releaser: Bump versions for release of 0.114.0

[ci skip]

Revert "build(deps): bump gocloud.dev from 0.24.0 to 0.29.0"

This reverts commit 7bed16c30fc9405305c4c80d099cee5287126a42.

Again ...

It doesn't build on Dragonfly:

```
../gomodcache/github.com/!azure/azure-sdk-for-go/sdk/storage/azblob@v1.0.0/blockblob/chunkwriting.go:273:15: undefined: mmb
../gomodcache/github.com/!azure/azure-sdk-for-go/sdk/storage/azblob@v1.0.0/blockblob/chunkwriting.go:279:65: undefined: mmb
../gomodcache/github.com/!azure/azure-sdk-for-go/sdk/storage/azblob@v1.0.0/blockblob/chunkwriting.go:281:22: undefined: mmb
../gomodcache/github.com/!azure/azure-sdk-for-go/sdk/storage/azblob@v1.0.0/blockblob/chunkwriting.go:287:39: undefined: mmb
../gomodcache/github.com/!azure/azure-sdk-for-go/sdk/storage/azblob@v1.0.0/blockblob/chunkwriting.go:293:18: undefined: newMMB
../gomodcache/github.com/!azure/azure-sdk-for-go/sdk/storage/azblob@v1.0.0/blockblob/chunkwriting.go:303:37: undefined: mmb
• core: Total in 123.22s …
error running command: exit status 1

Exited with code exit status 1

```

docs: Regen docshelper

Add empty Environ when loading test config

To prevent OS environment vars confusing the tests.

docs: Regen CLI docs

common/loggers: Drop the bold INFO etc. prefixes

That looked a little too much.

loggers: Avoid using Logf for the LevelLoggerToWriter

To prevent issues with percentage chars.

tocss/dartsas: Avoid using Logf for the internal Dart Sass logging

As that does not work when percentages are used in the log messages.

helpers: Remove superflous formatting flag in deprecation warnings

Revert "deps: Update github.com/tdewolff/minify/v2 v2.12.5 => v2.12.6"

This reverts commit 409c6c3fcd46a57c2f469663bb0106a1a3cf4469.

See #11132

all: Fix some typos

all: Fix typos in function names and comments

deploy: Fix deploy defaults for non-zero flag values (e.g. maxDeletes, invalidateCDN)

This was broken in the config rewrite in Hugo 0.112.0.

The workaround is to be explicit about setting these flag values (even if just using the defaults), e.g.:

```
hugo deploy --invalidateCDN --maxDeletes 256
```

Fixes #11127

common/loggers: Re-add trailing newline in logger.Printf

Fixes #11130

build(deps): bump github.com/evanw/esbuild from 0.18.3 to 0.18.4

Bumps [github.com/evanw/esbuild](https://github.com/evanw/esbuild) from 0.18.3 to 0.18.4.
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.18.3...v0.18.4)

---
updated-dependencies:
- dependency-name: github.com/evanw/esbuild
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Replace the old log setup, with structured logging etc.

Fixes #11124

Revert "snap: Transition base snap from core20 to core22 (#11101)" (#11125)

Closes #11116

build(deps): bump github.com/evanw/esbuild from 0.18.2 to 0.18.3

Bumps [github.com/evanw/esbuild](https://github.com/evanw/esbuild) from 0.18.2 to 0.18.3.
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.18.2...v0.18.3)

---
updated-dependencies:
- dependency-name: github.com/evanw/esbuild
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix upstream Go templates bug with reversed key/value assignment

The template packages are based on go1.20.5 with the patch in befec5ddbbfbd81ec84e74e15a38044d67f8785b  added.

This also includes a security fix that now disallows Go template actions in JS literals (inside backticks).

This will throw an error saying "... appears in a JS template literal".

If you're really sure this isn't a security risk in your case, you can revert to the old behaviour:

```toml
[security]
[security.gotemplates]
allowActionJSTmpl = true
```

See https://github.com/golang/go/issues/59234

Fixes #11112

build(deps): bump golang.org/x/sync from 0.2.0 to 0.3.0

Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.2.0 to 0.3.0.
- [Commits](https://github.com/golang/sync/compare/v0.2.0...v0.3.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

common/collections: Always make a copy of the input slice in Append

Fixes #10458.

tpl/collections: Fix append when appending a slice to a slice of slices

Fixes #11093

build(deps): bump google.golang.org/api from 0.123.0 to 0.127.0

Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.123.0 to 0.127.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.123.0...v0.127.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump golang.org/x/tools from 0.9.1 to 0.9.3

Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.9.1 to 0.9.3.
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](https://github.com/golang/tools/compare/v0.9.1...v0.9.3)

---
updated-dependencies:
- dependency-name: golang.org/x/tools
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Re-add site.RSSLink (and deprecate it)

Fixes #11110

build(deps): bump github.com/kyokomi/emoji/v2 from 2.2.11 to 2.2.12

Bumps [github.com/kyokomi/emoji/v2](https://github.com/kyokomi/emoji) from 2.2.11 to 2.2.12.
- [Release notes](https://github.com/kyokomi/emoji/releases)
- [Commits](https://github.com/kyokomi/emoji/compare/v2.2.11...v2.2.12)

---
updated-dependencies:
- dependency-name: github.com/kyokomi/emoji/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump github.com/getkin/kin-openapi from 0.117.0 to 0.118.0

Bumps [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi) from 0.117.0 to 0.118.0.
- [Release notes](https://github.com/getkin/kin-openapi/releases)
- [Commits](https://github.com/getkin/kin-openapi/compare/v0.117.0...v0.118.0)

---
updated-dependencies:
- dependency-name: github.com/getkin/kin-openapi
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump golang.org/x/net from 0.10.0 to 0.11.0

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.10.0 to 0.11.0.
- [Commits](https://github.com/golang/net/compare/v0.10.0...v0.11.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix .Width and .Height for animated gifs

Fixes #11079

snap: Transition base snap from core20 to core22 (#11101)

- Syntax changes
- Bump Go from 1.19 to 1.20
- Remove unused build tag logic (we only build the extended version)

Merge commit '3c1deaf201a35de08d23cc58f8f03682cace3349'

Squashed 'docs/' changes from 1d5548d73..85befbb4d

85befbb4d Update plainify.md
56e137043 Update comparison operators (#2104)
4241135e0 Front matter docu: improve link to TOML spec (#2102)
5115de3c0 netlify: Hugo 0.113.0
99b74a053 Merge branch 'temp01130'
1622d5d1a docs: Regenerate CLI docs
adb4297eb netlify: Hugo 0.112.7
cd6813309 Update editors.md to include vim-hugo (#2098)
f7c2406dd netlify: Hugo 0.112.6
b891028c3 docs: Regenerate CLI docs

git-subtree-dir: docs
git-subtree-split: 85befbb4dc2f526da99fa9f47d54a12e6282d36e

build(deps): bump gocloud.dev from 0.24.0 to 0.29.0

Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.24.0 to 0.29.0.
- [Release notes](https://github.com/google/go-cloud/releases)
- [Commits](https://github.com/google/go-cloud/compare/v0.24.0...v0.29.0)

---
updated-dependencies:
- dependency-name: gocloud.dev
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

tpl/math: Allow variadic math functions to take slice args, add math.Product, math.Sum

* Update math.Min and math.Max to allow 1 or more args, either scalar or slice, or combination of the two
* Add math.Sum (allow 1 or more args, either scalar or slice, or combination of the two)
* Add math.Product (allow 1 or more args, either scalar or slice, or combination of the two)

Fixes #11030

Fix config merge regression with root slices (e.g. disableKinds)

Fixes #11089

build(deps): bump golang.org/x/image from 0.7.0 to 0.8.0

Bumps [golang.org/x/image](https://github.com/golang/image) from 0.7.0 to 0.8.0.
- [Commits](https://github.com/golang/image/compare/v0.7.0...v0.8.0)

---
updated-dependencies:
- dependency-name: golang.org/x/image
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

commands: Remove flags log, verboseLog, add flag logLevel, deprecate flags verbose and debug

Fixes #9648
Fixes #11071

build(deps): bump github.com/magefile/mage from 1.14.0 to 1.15.0

Bumps [github.com/magefile/mage](https://github.com/magefile/mage) from 1.14.0 to 1.15.0.
- [Release notes](https://github.com/magefile/mage/releases)
- [Changelog](https://github.com/magefile/mage/blob/master/.goreleaser.yml)
- [Commits](https://github.com/magefile/mage/compare/v1.14.0...v1.15.0)

---
updated-dependencies:
- dependency-name: github.com/magefile/mage
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.6 to 2.0.8

Bumps [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml) from 2.0.6 to 2.0.8.
- [Release notes](https://github.com/pelletier/go-toml/releases)
- [Changelog](https://github.com/pelletier/go-toml/blob/v2/.goreleaser.yaml)
- [Commits](https://github.com/pelletier/go-toml/compare/v2.0.6...v2.0.8)

---
updated-dependencies:
- dependency-name: github.com/pelletier/go-toml/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump github.com/evanw/esbuild from 0.17.19 to 0.18.2

Bumps [github.com/evanw/esbuild](https://github.com/evanw/esbuild) from 0.17.19 to 0.18.2.
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.17.19...v0.18.2)

---
updated-dependencies:
- dependency-name: github.com/evanw/esbuild
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix handling of aliases (e.g. hugo serve)

Fixes #11090

cache: Set default cache path based on $USER

Change the default cache directory to `$TMPDIR/hugo_cache_$USER`, so
that multi-user systems do not have caches that interfere with each
other.  The other cache-choosing logic (e.g. Netlify exceptions,
configuration options) are not affected.

Fixes #7391

build(deps): bump go.uber.org/atomic from 1.10.0 to 1.11.0

Bumps [go.uber.org/atomic](https://github.com/uber-go/atomic) from 1.10.0 to 1.11.0.
- [Release notes](https://github.com/uber-go/atomic/releases)
- [Changelog](https://github.com/uber-go/atomic/blob/master/CHANGELOG.md)
- [Commits](https://github.com/uber-go/atomic/compare/v1.10.0...v1.11.0)

---
updated-dependencies:
- dependency-name: go.uber.org/atomic
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump github.com/hairyhenderson/go-codeowners

Bumps [github.com/hairyhenderson/go-codeowners](https://github.com/hairyhenderson/go-codeowners) from 0.2.3-0.20201026200250-cdc7c0759690 to 0.3.0.
- [Release notes](https://github.com/hairyhenderson/go-codeowners/releases)
- [Commits](https://github.com/hairyhenderson/go-codeowners/commits/v0.3.0)

---
updated-dependencies:
- dependency-name: github.com/hairyhenderson/go-codeowners
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

resources: Remove failing and superflous test assertion

build(deps): bump github.com/frankban/quicktest from 1.14.4 to 1.14.5

Bumps [github.com/frankban/quicktest](https://github.com/frankban/quicktest) from 1.14.4 to 1.14.5.
- [Commits](https://github.com/frankban/quicktest/compare/v1.14.4...v1.14.5)

---
updated-dependencies:
- dependency-name: github.com/frankban/quicktest
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.19

Bumps [github.com/mattn/go-isatty](https://github.com/mattn/go-isatty) from 0.0.17 to 0.0.19.
- [Commits](https://github.com/mattn/go-isatty/compare/v0.0.17...v0.0.19)

---
updated-dependencies:
- dependency-name: github.com/mattn/go-isatty
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump github.com/spf13/afero from 1.9.3 to 1.9.5

Bumps [github.com/spf13/afero](https://github.com/spf13/afero) from 1.9.3 to 1.9.5.
- [Release notes](https://github.com/spf13/afero/releases)
- [Commits](https://github.com/spf13/afero/compare/v1.9.3...v1.9.5)

---
updated-dependencies:
- dependency-name: github.com/spf13/afero
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

commands,config: Fix typo in log and error messages

helpers: Avoid url.Parse in RelURL and AbsURL if we can

```
RelURL-10            159ns ± 5%      18ns ± 4%   -88.89%  (p=0.029 n=4+4)
AbsURL/relurl-10     532ns ± 0%     537ns ± 0%    +1.09%  (p=0.029 n=4+4)
AbsURL/absurl-10     142ns ± 0%       4ns ± 3%   -96.91%  (p=0.029 n=4+4)

name              old alloc/op   new alloc/op   delta
RelURL-10             144B ± 0%        0B       -100.00%  (p=0.029 n=4+4)
AbsURL/relurl-10      544B ± 0%      544B ± 0%      ~     (all equal)
AbsURL/absurl-10      144B ± 0%        0B       -100.00%  (p=0.029 n=4+4)

name              old allocs/op  new allocs/op  delta
RelURL-10             1.00 ± 0%      0.00       -100.00%  (p=0.029 n=4+4)
AbsURL/relurl-10      10.0 ± 0%      10.0 ± 0%      ~     (all equal)
AbsURL/absurl-10      1.00 ± 0%      0.00       -100.00%  (p=0.029 n=4+4)
```

Adjust benchmarks

Adjust benchmark

Add BenchmarkAbsURL

helpers: Improve schema detection when creating relative URLs

Fixes #11080

helpers: Add a basic benchmark for RelURL

config: Remove unexpected _merge keys introduced in author and social maps

Fixes #11083

Upgrade to v2 of the Dart Sass Embedded Protocol

Fixes #11059

Fix indented SASS imports for Dart Sass

Fixes #11074

releaser: Prepare repository for 0.114.0-DEV

[ci skip]

releaser: Bump versions for release of 0.113.0

[ci skip]

docs: Regenerate CLI docs

commands: Update CLI docs vs server and production

Fixes #11067

commands: Add TLS/HTTPS support to hugo server

* commands: Add TLS/HTTPS support to hugo server

The "auto cert" handling in this PR is backed by mkcert (see link below).

To get this up and running on a new PC, you can:

```
hugo server trust
hugo server --tlsAuto
```

When `--tlsAuto` (or `--tlsCertFile` and `--tlsKeyFile`) is set and no `--baseURL` is provided as a flag, the server is
started with TLS and `https` as the protocol.

Note that you only need to run `hugo server trust` once per PC.

If you already have the key and the cert file (e.g. by using mkcert directly), you can do:

```
hugo server --tlsCertFile mycert.pem --tlsKeyFile mykey.pem
```

See https://github.com/FiloSottile/mkcert

Fixes #11064

releaser: Prepare repository for 0.113.0-DEV

[ci skip]