v0.151.1

This release is mostly motivated by some upstream security fixes:

* Upgrade from Go 1.25.1 to Go 1.25.3 which comes with [10 security fixes](https://github.com/golang/go/issues?q=milestone%3AGo1.25.2%20label%3ASecurity).
* Go's `net/html` package also has one [security patch](https://github.com/golang/net/commit/59706cdaa8f95502fdec64b67b4c61d6ca58727d)

I, @bep, have inspected the above issues, and none of them seem to be relevant for Hugo, but we understand that many want to have a clean security report.

## Bug fixes

* tpl: Fix strings/truncate CJK handling 88aea5668 @oishikazuo #14039 
* parser/pagerparser: Fix closing shortcode error handling when repeated a133393ed @bep 

## Improvements

* Upgrade Go to 1.25.3 e2fb0b0e8 @bep 
* create/skeletons: Wrap section and home lists with section tags 29cf87444 @imomaliev 
* markup/goldmark: Align blockquote default output with Goldmark 1b4dd436d @jmooring #14046 
* parser/pageparser: Store shortcode names as unique.Handle[string] to save memory allocations 4414ef73f @bep 
* testscripts: Make test assertion less specific 9197debbf @bep 

## Dependency Updates

* build(deps): bump github.com/gohugoio/hashstructure from 0.5.0 to 0.6.0 f4c11571b @dependabot[bot] 
* build(deps): bump golang.org/x/image from 0.30.0 to 0.32.0 54075acc2 @dependabot[bot] 
* build(deps): bump github.com/evanw/esbuild from 0.25.10 to 0.25.11 8b52303e3 @dependabot[bot] 
* build(deps): bump golang.org/x/tools from 0.37.0 to 0.38.0 3d45d30a4 @dependabot[bot] 
* build(deps): bump golang.org/x/mod from 0.28.0 to 0.29.0 095157cd6 @dependabot[bot]