Sourced from github.com/gohugoio/hugo's releases.

v0.119.0

This version is built with Go 1.21.1 which contains some relevant security fixes for the html/template package, see Issue 62196 and Issue 62197. This is the main reason Hugo 0.119.0 is released sooner rather than later. But this release also comes with a dependency refresh and some useful image processing improvements:

• A new general-purpose Process method and filter.
• A new Opacity filter.

Process support all of the existing scaling operations, but it can also be used do simple format conversions (e.g. from JPG to PNG). A before/after example:

{{ $watermark := resources.Get "logo.jpg" | images.Filter  
       (images.GaussianBlur 6) 
       (images.Opacity 0.5) 
}}
{{ $watermark = $watermark.Resize (printf "%dx%d png" $watermark.Width $watermark.Height )

There are some issues with the above:

1. The source image does not support transparency, so the transparency pixels will be filled with the configured background colour.
2. The image will be decoded and encoded twice with a potential loss in quality.
3. It's clumsy.

With Hugo 0.119.0 the above can be written as:

{{ $watermark := resources.Get "logo.jpg" | images.Filter  
       (images.GaussianBlur 6) 
       (images.Opacity 0.5) 
       (images.Process "png") 
}}

Bug fixes

• Fix tests for Go 1.21.1 79a17d9e5 @​bep #11450
• Fix recently broken benchmark 18ce85462 @​bep

Improvements

• common: Remove unused constants 6b65b2fae @​alexandear
• Add images.Process filter 6a246d115 @​bep #8439
• Add $image.Process ef0e7149d @​bep #11483
• google_analytics_async.html: Add deprecation warning c32094ace @​carlmjohnson
• Add images.Opacity filter f9b3c0f48 @​bep #11471
• Upgrade to Go 1.21.1 1e9b87f76 @​bep #11474 #11414
• create/skeletons: Improve viewport meta tag f9163155d @​jmooring
• commands/gen: Remove default highlight style 75c0f8828 @​jmooring #11445
• Adjust baseline benchmarks 69f5bad40 @​bep
• commands: Print language code after web server address info 525bed991 @​ilmari-lauhakangas

... (truncated)

• b84644c releaser: Bump versions for release of 0.119.0
• a9d19db docs: Even more about images.Process
• 12d7131 docs: More about images.Process
• 6b65b2f common: Remove unused constants
• 1768684 docs: Regen docshelper
• eb0ed33 Merge commit '9aec42c5452b3eb224888c50ba1c3f3b68a447e9'
• 9aec42c Squashed 'docs/' changes from 686c7b6eb..7ef2dbce4
• 6a246d1 Add images.Process filter
• ef0e714 Add $image.Process
• c32094a google_analytics_async.html: Add deprecation warning
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions