Skip to content

chore(deps): update ghcr.io/gohugoio/hugo docker tag to v0.163.1#31

Open
deckhouse-BOaTswain wants to merge 1 commit into
mainfrom
renovate/ghcr.io-gohugoio-hugo-0.x
Open

chore(deps): update ghcr.io/gohugoio/hugo docker tag to v0.163.1#31
deckhouse-BOaTswain wants to merge 1 commit into
mainfrom
renovate/ghcr.io-gohugoio-hugo-0.x

Conversation

@deckhouse-BOaTswain

@deckhouse-BOaTswain deckhouse-BOaTswain commented May 26, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
ghcr.io/gohugoio/hugo minor v0.162.0 -> v0.163.1

Release Notes

gohugoio/hugo (ghcr.io/gohugoio/hugo)

v0.163.1

Compare Source

The majority of the fixes in this release are security related (including the upstream fix in 93c8c7d (golang.org/x/image)). Thanks to @​vnth4nhnt for finding the issues fixed in a00b5c7 and cf9c8f9 (I will do the CVE work on this later). There has been a uptick in security reports lately, which doesn't mean that Hugo has gotten less secure, this is mostly the work of the new and powerful AI tools using Hugo's restrictive security model as their baseline. Just take a look at Go's recent security issue list to see a demonstration of this.

What's Changed

v0.163.0

Compare Source

The main topic in this release is improvements to the AVIF image handling that we introduced in v0.162.0. See the docs for details, but:

  • We have turned down the default quality for AVIF to 60. Turns out, JPEG/WebP with quality 75 is comparable to AVIF with quality 60. You can now also set quality per image format in your project config (and also per image processed if needed).
  • We have added a hint to the AVIF with the same values as for WEBP. For lossy compression, the photo/picture hints (and the default) encodes with YUV420 chroma subsampling instead of YUV444, keeping 444 for text/icon/drawing. This greatly reduces the memory needed to encode these images.
Improvements
Dependency Updates

v0.162.1

Compare Source

What's Changed


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@deckhouse-BOaTswain deckhouse-BOaTswain changed the title chore(deps): update ghcr.io/gohugoio/hugo docker tag to v0.162.0 chore(deps): update ghcr.io/gohugoio/hugo docker tag to v0.162.0 - autoclosed May 27, 2026
@deckhouse-BOaTswain deckhouse-BOaTswain deleted the renovate/ghcr.io-gohugoio-hugo-0.x branch May 27, 2026 17:13
@deckhouse-BOaTswain deckhouse-BOaTswain changed the title chore(deps): update ghcr.io/gohugoio/hugo docker tag to v0.162.0 - autoclosed chore(deps): update ghcr.io/gohugoio/hugo docker tag to v0.162.1 May 28, 2026
@deckhouse-BOaTswain deckhouse-BOaTswain force-pushed the renovate/ghcr.io-gohugoio-hugo-0.x branch 2 times, most recently from 30610be to ef25315 Compare May 28, 2026 19:27
@deckhouse-BOaTswain deckhouse-BOaTswain force-pushed the renovate/ghcr.io-gohugoio-hugo-0.x branch from ef25315 to fd9655d Compare June 8, 2026 16:38
@deckhouse-BOaTswain deckhouse-BOaTswain changed the title chore(deps): update ghcr.io/gohugoio/hugo docker tag to v0.162.1 chore(deps): update ghcr.io/gohugoio/hugo docker tag to v0.163.0 Jun 8, 2026
@deckhouse-BOaTswain deckhouse-BOaTswain force-pushed the renovate/ghcr.io-gohugoio-hugo-0.x branch from fd9655d to c0fd84b Compare June 11, 2026 18:32
@deckhouse-BOaTswain deckhouse-BOaTswain changed the title chore(deps): update ghcr.io/gohugoio/hugo docker tag to v0.163.0 chore(deps): update ghcr.io/gohugoio/hugo docker tag to v0.163.1 Jun 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants