2.17.2

Name: hugo
Author: gohugoio

gohugoio/hugo2.17.2Aug 27, 2026by github-actions[bot]

Upgrading?

What changed from v1.4.5 → 2.17.2?What's new in v2026.8.27 after 2.17.2?

AI Summary

This release fixes critical bugs in the SVG export functionality, including a command injection vulnerability, incorrect gradient rendering, and typography token detachment issues.

Key Highlights

Fixed linear gradients in SVG text exports being emitted as radial gradients
Fixed typography token becoming detached when editing text content
Patched command injection vulnerability in SVG exporter

Full Release Notes


### :bug: Bugs fixed

- Fix linear gradients in SVG text exports being emitted as radial gradients [#5972](https://github.com/penpot/penpot/issues/5972) (PR: [#11272](https://github.com/penpot/penpot/pull/11272))
- Fix typography token becoming detached when editing text content [#11362](https://github.com/penpot/penpot/issues/11362) (PR: [#11366](https://github.com/penpot/penpot/pull/11366))
- Fix command injection in SVG exporter via legacy fill-color (https://github.com/penpot/penpot/security/advisories/GHSA-4f36-m4hj-cv86)

Related Repositories

ollama/ollama★ 184,215

Get up and running with Kimi, GLM, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.

fatedier/frp★ 110,053

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

infiniflow/ragflow★ 92,614

RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs

junegunn/fzf★ 83,715

:cherry_blossom: A command-line fuzzy finder

caddyserver/caddy★ 78,239

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS