Skip to content

chore: update KeepIt theme submodule to latest (security)#3

Open
0xOperant wants to merge 5 commits into
masterfrom
fix/update-keepit-theme
Open

chore: update KeepIt theme submodule to latest (security)#3
0xOperant wants to merge 5 commits into
masterfrom
fix/update-keepit-theme

Conversation

@0xOperant
Copy link
Copy Markdown
Owner

Summary

  • Advances themes/KeepIt submodule from fe8c3e34724724
  • Picks up 15 upstream commits including search query sanitization and other fixes
  • Addresses Dependabot alert for jquery CVE-2019-11358 (MEDIUM)

Test plan

  • Verify Hugo builds correctly with updated theme
  • Confirm Dependabot alert closes after merge

🤖 Generated with Claude Code

0xOperant and others added 5 commits May 15, 2026 14:26
Advances submodule from fe8c3e3 to 4724724 to pick up upstream fixes
including search query sanitization (may address jquery CVE-2019-11358).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Required to deploy the KeepIt theme update on current Hugo (0.161+):

- Replace getJSON-based twitter shortcodes (removed in Hugo) with static
  blockquote+link embeds. The defunct api.twitter.com oEmbed endpoint
  this shortcode called no longer works anyway.
- config.toml: :filename permalink token → :contentbasename
  (removed in Hugo 0.144.0).
- config.toml: [privacy.twitter] → [privacy.x]
  (renamed/removed in Hugo 0.141.0).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Switches from a static link to the standard X/Twitter embed: a blockquote
hydrated client-side by platform.twitter.com/widgets.js. The script is
loaded once per page via Page.Scratch. data-dnt="true" preserves the
Do-Not-Track behavior previously set via privacy.twitter.enableDNT.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Hugo removed _internal/google_analytics_async.html; the remaining
_internal/google_analytics.html now handles both sync and async output
(it generates the modern gtag.js async snippet by default).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Verified against a local hugo 0.161.1 build (same version CI pins to
'latest'). 95 pages render, exit 0, only a harmless languageCode
deprecation warning remains.

- layouts/partials/css.html: resources.ToCSS → css.Sass
  (resources.ToCSS removed in Hugo 0.128.0).
- layouts/partials/seo_schema.html, rss.xml, index.atom.xml:
  .Site.Author.* → .Site.Params.Author.* (.Site.Author removed).
- config.toml: convert string `params.author = "Dave Bell"` to a
  [params.author] table with name/email/link/handle, and drop the
  separate root-level [author] block. Theme requires the table form.
- layouts/{_default,page}/single.html, partials/footer.html: update
  consumers of the old `.Site.Params.author` string to the new
  `.Site.Params.Author.name` table field.
- config.toml: add `ignoreFiles = ['themes/KeepIt/content/']` so the
  KeepIt example posts (which use the removed `gist` shortcode) don't
  bleed into the site or break the build.
- config.toml: add `ignoreLogs = ['warning-goldmark-raw-html']` to
  quiet expected raw-HTML warnings.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@0xOperant
Copy link
Copy Markdown
Owner Author

@claude

@claude
Copy link
Copy Markdown

claude Bot commented May 15, 2026

Claude encountered an error —— View job


I'll analyze this and get back to you.

@0xOperant
Copy link
Copy Markdown
Owner Author

@claude try again

@claude
Copy link
Copy Markdown

claude Bot commented May 15, 2026

Claude encountered an error —— View job


I'll analyze this and get back to you.

@0xOperant
Copy link
Copy Markdown
Owner Author

@claude try now

@claude
Copy link
Copy Markdown

claude Bot commented May 15, 2026

Claude encountered an error after 0s —— View job


I'll analyze this and get back to you.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant