The world’s fastest framework for building websites.
The work title for the v0.123.0 release has been "the million pages release", introducing a new memory limit that allows for a streaming build, shifting large objects out of memory when not in use. This release is also a rewrite of the Hugo core, fixing lots of long-lived bugs and adding some other exciting improvements (see below). There are some breaking changes that have been announced for a long time. Most sites will not be affected by this, but we recommend that you test your site with the new Hugo version before you set it up to build to production. Many people have contributed to this release, but a special shoutout goes to @bep and @jmooring, but also to @TiGR and @McShelby for their help testing and reporting bugs.
A list of notable new features:
HUGO_MEMORYLIMIT (in gigabytes) allowing for much larger data/page sets and/or running on lower specced PCs. This is backed by a partitioned LRU cache used throughout Hugo. A cache that gets dynamically resized in low memory situations, allowing Go's Garbage Collector to free the memory. Note that for regular sized Hugo sites, the performance should be about the same as before.[params] concept to front matter, see docs
The big new thing in Hugo 0.122.0 is LaTeX or TeX typsetting directly from Markdown using standard syntax. Thanks to @j2kun and @jmooring for making this happen.
The main motivation behind this release is a security fix in the upstream golang.org/x/crypto library. We don't see how that CVE could be exploited via Hugo, but we do appreciate that many want to have a clean security report.
There's also some new features in this release:
The only change in this release is that the release binaries are compiled with Go 1.21.5 which contains some security fixes that are relevant for Hugo.
There are some minor new features in this release, but it's mostly a release with bug fixes and dependency updates. One notable dependency update is libweb v1.3.2 which comes with a security fix for the Webp decoder (chromium: #1479274, CVE-2023-4863). Hugo only uses the encoder (we use Go's native Webp decoder) so we're not affected by this, but we have been contacted by some corporate Hugo users who's eager to have a clean security report.
.Map accessors if you get an error.opengraph, schema and twitter_cards templates 14d85ec13 @razonyangThe only change in this release is that the release binaries are compiled with Go 1.21.4 which comes with a security fix for Windows that may be relevant for Hugo. See:
This is a full dependency refresh and a couple of new cool features:
A new Padding image filter, and a new debug.Timer template func. The new debug.Timer is useful for finding performance bottle necks in templates:
{{ $timer := debug.Timer "slowTemplate" }}
// ...
{{ $timer.Stop }}
If you then run hugo --logLevel info you should see timer info logged at the end of the build. You can have as many timers as you want and if you don't stop them, they will be stopped at the end of build.
Hugo now also builds release binaries for Solaris now that a long-living issue in the upstream ƒsnotify library has been fixed, thanks to @nshalman.
enableEmoji flag now only works for Markdown content. This is unfortunate, but the old solution has some known issues and it was too hard to make it work properly as a general thing across all formats. See #11598site.DisqusShortname is deprecated 2eca1b3ccsite.GoogleAnalytics is deprecated a692278bcsite.Author is deprecated d4016dd5csite.Social is deprecated 4910312eeAlso, we have changed the string type for some of the fields and methods:
template.HTML
$resource.Data.Integrity now returns a string and not a template.HTMLAttr
delimit now returns a string and not a template.HTML See #10876 #11502.string, see #11536Pager now returns a string.site.BaseURL now returns a string.The above should both solve some issues and make the above types more useful and easer to reason about. But if you use the delimit function to process HTML and see some unexpected escaping after this release, e.g.:
{{ $s := slice "<i>foo</i>" }}
{{ delimit $s "," }}
Then you need to mark the type with safeHTML:
{{ $s := slice "<i>foo</i>" }}
{{ delimit $s "," | safeHTML }}