chore: bump github.com/gohugoio/hugo from 0.163.0 to 0.163.3 (#26579) Bumps [github.com/gohugoio/hugo](https://github.com/gohugoio/hugo) from 0.163.0 to 0.163.3.

Release notes

Sourced from github.com/gohugoio/hugo's releases.

v0.163.3

What's Changed

markup/highlight: Escape lang in default code block rendering ce1a7e0b @bep thanks to @k0ngj1 for reporting this issue.

parser/pageparser: Preserve non-ASCII whitespace after e.g. summary divider 70a9068a @bep

resources: Support babel/postcss config variants 9d66d513 @jmooring #15039 #15040 #15043

hugolib: Fix page/section name collision regression f0133466 @jmooring #15046

v0.163.2

What's Changed

Continue resolving on ERR_ACCESS_DENIED in Node's resolver 134674f0 @bep #15041

markup: Standardize behavior when external converters are missing 147f605f @jmooring #14222

v0.163.1

The majority of the fixes in this release are security related (including the upstream fix in 93c8c7d3 (golang.org/x/image)). Thanks to @vnth4nhnt for finding the issues fixed in a00b5c72 and cf9c8f93 (I will do the CVE work on this later). There has been a uptick in security reports lately, which doesn't mean that Hugo has gotten less secure, this is mostly the work of the new and powerful AI tools using Hugo's restrictive security model as their baseline. Just take a look at Go's recent security issue list to see a demonstration of this.

What's Changed

build(deps): bump golang.org/x/image from 0.41.0 to 0.42.0 93c8c7d3 @dependabot[bot]

Fix multi --renderSegments merge behavior 95e5e9f4 @bep #15024

security: Normalize integer IPv4 host encodings in http.urls check a00b5c72 @bep

Drop symlinks in os.ReadDir, os.ReadFile, os.Stat and os.FileExists cf9c8f93 @bep #15019

commands: Fix convert command 2602796c @jmooring #15012

Commits

4d22555 releaser: Bump versions for release of 0.163.3
ce1a7e0 markup/highlight: Escape lang in default code block rendering
e8988c3 Merge commit 'c86d9f4aa8a58931f52df6516f10b67c807505fb'
c86d9f4 Squashed 'docs/' changes from 1f8ddb8a52..e17426e2b6
70a9068 parser/pageparser: Preserve non-ASCII whitespace after e.g. summary divider
9d66d51 resources: Support babel/postcss config variants
f013346 hugolib: Fix page/section name collision regression
96e06e1 releaser: Prepare repository for 0.164.0-DEV
19a5cec releaser: Bump versions for release of 0.163.2
134674f Continue resolving on ERR_ACCESS_DENIED in Node's resolver
Additional commits viewable in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/gohugoio/hugo&package-manager=go_modules&previous-version=0.163.0&new-version=0.163.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/coder/coder/network/alerts).

Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Sunbelt Computer Software

PL/B Language Development and Support