This version is built with Go 1.21.1 which contains some relevant security fixes for the html/template
package, see Issue 62196 and Issue 62197. This is the main reason Hugo 0.119.0 is released sooner rather than later. But this release also comes with a dependency refresh and some useful image processing improvements:
Process
support all of the existing scaling operations, but it can also be used do simple format conversions (e.g. from JPG to PNG). A before/after example:
There are some issues with the above:
- The source image does not support transparency, so the transparency pixels will be filled with the configured background colour.
- The image will be decoded and encoded twice with a potential loss in quality.
- It's clumsy.
With Hugo 0.119.0 the above can be written as:
Bug fixes
Improvements
- common: Remove unused constants 6b65b2f @alexandear
- Add images.Process filter 6a246d1 @bep #8439
- Add $image.Process ef0e714 @bep #11483
- google_analytics_async.html: Add deprecation warning c32094a @carlmjohnson
- Add images.Opacity filter f9b3c0f @bep #11471
- Upgrade to Go 1.21.1 1e9b87f @bep #11474 #11414
- create/skeletons: Improve viewport meta tag f916315 @jmooring
- commands/gen: Remove default highlight style 75c0f88 @jmooring #11445
- Adjust baseline benchmarks 69f5bad @bep
- commands: Print language code after web server address info 525bed9 @ilmari-lauhakangas
Dependency Updates
- build(deps): bump golang.org/x/tools from 0.12.0 to 0.13.0 a262fd4 @dependabot[bot]
- build(deps): bump github.com/alecthomas/chroma/v2 from 2.8.0 to 2.9.1 f0d3245 @dependabot[bot]
- build(deps): bump github.com/evanw/esbuild from 0.19.2 to 0.19.3 e8bc8e6 @dependabot[bot]
- build(deps): bump github.com/aws/aws-sdk-go from 1.44.314 to 1.45.14 11fcda9 @dependabot[bot]
- build(deps): bump github.com/getkin/kin-openapi from 0.118.0 to 0.120.0 f31375d @dependabot[bot]
- build(deps): bump golang.org/x/image from 0.11.0 to 0.12.0 6415b59 @dependabot[bot]