chore(deps): update dependency gohugoio/hugo to v0.140.1

[uniget-bot]

This PR contains the following updates:

Package	Update	Change
gohugoio/hugo	patch	0.140.0 -> 0.140.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

gohugoio/hugo (gohugoio/hugo)

v0.140.1

Compare Source

Some bug fixes in the (most likely) last Hugo release of the year. Of some technical interest to some, I can mention that I, @​bep, have reworked hugoreleaser to use YAML (with anchors/aliases) instead of TOML for the release configuration. Have a look at the end result.

What's Changed

• Update gocloud and docs for S3-Compatible Endpoints e229f4b @​tebriel
• js/esbuild: Don't try to resolve packages in /assets marked as external 0202539 @​bep #​13183
• Fix union, complement, symdiff, and intersect for transient resources 4a5e940 @​bep #​13181
• release: Add withdeploy deb extended archives 48a7aee @​bep #​13166
• common/loggers: Write PrintTimerIfDelayed output to stdErr 6c583e3 @​jmooring #​13171
• build(deps): bump github.com/spf13/cast from 1.7.0 to 1.7.1 5d64b49 @​dependabot[bot]
• hugolib: Fix fallbacks for menu entry Name and Title b3f3294 @​jmooring #​13161

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[nicholasdille-bot]

Auto-approved because label type/renovate is present.

[github-actions]

🔍 Vulnerabilities of ghcr.io/uniget-org/tools/hugo:0.140.1

📦 Image Reference ghcr.io/uniget-org/tools/hugo:0.140.1

digest	sha256:0a91d135cbdd5ec41e162c4721267b24be7482db09500d44d6637e0a069f33bf
vulnerabilities
platform	linux/amd64
size	18 MB
packages	94

golang.org/x/net 0.32.0 (golang) pkg:golang/golang.org/x/[email protected] Allocation of Resources Without Limits or Throttling Affected range <0.33.0 Fixed version 0.33.0 CVSS Score 8.7 CVSS Vector CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Description An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.

[github-actions]

Attempting automerge. See https://github.com/uniget-org/tools/actions/runs/12475668337.

[github-actions]

PR is clean and can be merged. See https://github.com/uniget-org/tools/actions/runs/12475668337.