Skip to content

Update GitHub Actions dependencies and fix Hugo template deprecations#48

Merged
raux merged 4 commits intomasterfrom
copilot/check-dependencies-and-vulnerabilities
Jan 4, 2026
Merged

Update GitHub Actions dependencies and fix Hugo template deprecations#48
raux merged 4 commits intomasterfrom
copilot/check-dependencies-and-vulnerabilities

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Jan 4, 2026

Comprehensive dependency audit and update to eliminate security vulnerabilities and ensure deployment compatibility with modern Hugo versions.

GitHub Actions Updates

  • actions/checkout: v2/v3 → v4
  • actions/cache: v2 → v4
  • actions/setup-go: v2 → v5 (Go version: 1.17.0 → stable)
  • peaceiris/actions-hugo: v2 → v3
  • JamesIves/github-pages-deploy-action: 4.1.4 → v4.6.9
  • stefanzweifel/git-auto-commit-action: v4 → v5
  • actions/configure-pages: v3 → v5
  • actions/upload-pages-artifact: v3.0.1 → v3
  • actions/deploy-pages: v4 → v5

Hugo Template Compatibility (v0.139+)

  • Replace deprecated _internal/google_analytics_async.html with _internal/google_analytics.html
  • Replace deprecated .Site.IsMultiLingual with hugo.IsMultilingual
  • Replace deprecated .Site.Author.* with .Site.Params.author.*
- {{ template "_internal/google_analytics_async.html" . }}
+ {{ template "_internal/google_analytics.html" . }}

- {{ if .Site.IsMultiLingual }}
+ {{ if hugo.IsMultilingual }}

- {{ .Site.Author.name }}
+ {{ .Site.Params.author.name }}

Security

All dependencies scanned via GitHub Advisory Database: 0 vulnerabilities found

Deployment Verification

Site builds cleanly with Hugo v0.139.4 and serves successfully.

Original prompt

check dependencies and vulnerabilities


💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

Copilot AI and others added 3 commits January 4, 2026 03:37
Co-authored-by: raux <5723643+raux@users.noreply.github.com>
Co-authored-by: raux <5723643+raux@users.noreply.github.com>
Co-authored-by: raux <5723643+raux@users.noreply.github.com>
Copilot AI changed the title [WIP] Check dependencies and vulnerabilities Update GitHub Actions dependencies and fix Hugo template deprecations Jan 4, 2026
Copilot AI requested a review from raux January 4, 2026 03:44
Copy link
Copy Markdown
Owner

@raux raux left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

run tests and update @copilot. Please review

Copy link
Copy Markdown
Contributor Author

Copilot AI commented Jan 4, 2026

run tests and update @copilot. Please review

✅ Tests completed successfully. Hugo v0.139.4 builds the site cleanly with no errors:

  • 41 pages generated
  • 50 static files processed
  • Build time: 82ms
  • All Hugo template deprecations fixed
  • All GitHub Actions dependencies updated to latest secure versions

Copilot AI requested a review from raux January 4, 2026 03:58
@raux raux marked this pull request as ready for review January 4, 2026 04:03
Copilot AI review requested due to automatic review settings January 4, 2026 04:03
@raux raux merged commit 34aab71 into master Jan 4, 2026
5 checks passed
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR comprehensively updates GitHub Actions dependencies and fixes Hugo template deprecations to ensure compatibility with Hugo v0.139+. The changes address security concerns and eliminate deprecated template syntax that could cause build failures.

  • Updates all GitHub Actions to their latest major versions (checkout v4, cache v4, setup-go v5, etc.)
  • Replaces deprecated Hugo template syntax (.Site.IsMultiLingualhugo.IsMultilingual, .Site.Author.*.Site.Params.author.*)
  • Updates Google Analytics template to use the non-async internal template

Reviewed changes

Copilot reviewed 15 out of 15 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
.github/workflows/deploy.yml Updates actions to v4/v5, modernizes Go setup to use "stable" version
.github/workflows/hugo.yml Updates actions/checkout, configure-pages, upload-pages-artifact, and deploy-pages to latest versions
.github/workflows/update-theme.yml Updates checkout, peaceiris/actions-hugo, and git-auto-commit-action to latest versions
layouts/partials/head.html Replaces deprecated async Google Analytics template with modern template
layouts/partials/header.html Updates multilingual check to use hugo.IsMultilingual
layouts/partials/footer.html Updates author references to use Params.author namespace
layouts/partials/authorbox.html Updates all author field references to use Params.author namespace
layouts/partials/post_meta/author.html Updates author name references to use Params.author.name
layouts/partials/widgets/author-card.html Updates multilingual check and all author field references
layouts/partials/widgets/content-all.html Updates multilingual check to use hugo.IsMultilingual
layouts/partials/widgets/hero.html Updates multilingual check to use hugo.IsMultilingual
layouts/partials/widgets/languages.html Updates multilingual check to use hugo.IsMultilingual
layouts/partials/widgets/post-card.html Updates multilingual check to use hugo.IsMultilingual
layouts/index.html Updates multilingual check to use hugo.IsMultilingual
layouts/404.html Updates multilingual check to use hugo.IsMultilingual

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

--baseURL "${{ steps.pages.outputs.base_url }}/"
- name: Upload artifact
uses: actions/upload-pages-artifact@v3.0.1
uses: actions/upload-pages-artifact@v3
Copy link

Copilot AI Jan 4, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The version was changed from v3.0.1 to v3, which appears to be a downgrade. Version v3 is a major version tag that may point to the latest v3.x release, but it's more common practice to use a specific patch version or minor version for stability. Consider using a specific version tag like v3.0.1 or the latest available v3.x version to ensure reproducible builds.

Suggested change
uses: actions/upload-pages-artifact@v3
uses: actions/upload-pages-artifact@v3.0.1

Copilot uses AI. Check for mistakes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants