v0.161.1

gohugoio/hugov0.161.1Apr 29, 2026by bep

AI Summary

Security and configuration updates to honor Retry-After headers in remote resource requests and restrict default http.urls.

Key Highlights

  • Honor Retry-After header in resources.GetRemote retries
  • Add AllowChildProcess to security node permissions
  • Restrict default http.urls '@' deny to userinfo

New Features

  • Security updates (Retry-After, Node permissions)

Full Release Notes

## What's Changed

* resources: Honor Retry-After header in resources.GetRemote retries c4eba928 @bep #14828 
* warpc: Move to parson.c in https://github.com/kgabis/parson 8b40a96b @bep #14823 
* config/security: Add AllowChildProcess to security.node.permissions d65af84d @bep #14824 
* config/security: Restrict default http.urls "@" deny to userinfo 454450a6 @bep #14825