Skip to content

chore(deps): update ghcr.io/gohugoio/hugo docker tag to v0.163.1#214

Open
deckhouse-BOaTswain wants to merge 1 commit into
mainfrom
renovate/ghcr.io-gohugoio-hugo-0.x
Open

chore(deps): update ghcr.io/gohugoio/hugo docker tag to v0.163.1#214
deckhouse-BOaTswain wants to merge 1 commit into
mainfrom
renovate/ghcr.io-gohugoio-hugo-0.x

Conversation

@deckhouse-BOaTswain

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
ghcr.io/gohugoio/hugo minor v0.162.1 -> v0.163.1

Release Notes

gohugoio/hugo (ghcr.io/gohugoio/hugo)

v0.163.1

Compare Source

The majority of the fixes in this release are security related (including the upstream fix in 93c8c7d (golang.org/x/image)). Thanks to @​vnth4nhnt for finding the issues fixed in a00b5c7 and cf9c8f9 (I will do the CVE work on this later). There has been a uptick in security reports lately, which doesn't mean that Hugo has gotten less secure, this is mostly the work of the new and powerful AI tools using Hugo's restrictive security model as their baseline. Just take a look at Go's recent security issue list to see a demonstration of this.

What's Changed

v0.163.0

Compare Source

The main topic in this release is improvements to the AVIF image handling that we introduced in v0.162.0. See the docs for details, but:

  • We have turned down the default quality for AVIF to 60. Turns out, JPEG/WebP with quality 75 is comparable to AVIF with quality 60. You can now also set quality per image format in your project config (and also per image processed if needed).
  • We have added a hint to the AVIF with the same values as for WEBP. For lossy compression, the photo/picture hints (and the default) encodes with YUV420 chroma subsampling instead of YUV444, keeping 444 for text/icon/drawing. This greatly reduces the memory needed to encode these images.
Improvements
Dependency Updates

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants