hugo: Update to 0.80.0

Changelog:
0.80.0
Enhancements

Templates

  * Regenerate templates a2d146ec @bep
  * tpl/internal/go_templates: Revert formatting 718e09ed @bep
  * Add title parameter to YouTube shortcode 4fc918e0 @azenk

Output

  * Add missing OutputStyle option 428b0b32 @bep

Other

  * Allow Dart Sass transformations to be cached on disk ffbf5e45 @bep
  * Dart Sass only supports expanded and compressed 48994ea7 @bep
  * Update emoji import paths and version 1f7e9f73 @moorereason
  * Add Dart Sass support cea15740 @bep #7380#8102
  * GroupByParamDate now supports datetimes f9f77978 @zerok
  * Skip para test when not on CI a9718f44 @bep #6963
  * Update SECURITY.md f802bb23 @bep
  * Improve LookPath 10ae7c32 @bep
  * create a SECURITY.md ae2d1bd5 @davidsneighbour #8074
  * Show more detail on failed time test 8103188b @moorereason #6963
  * Add images.Overlay filter 3ba147e7 @bep #8057#4595#6731
  * Bump github.com/spf13/cobra from 0.15.0 to 0.20.0 c84ad8db @anthonyfok
  * configure proper link to discourse.gohugo.io (#8020) 4e0acb89
    @davidsneighbour
  * Format code with gofumpt d90e37e0 @bep
  * bump github.com/evanw/esbuild from 0.8.15 to 0.8.17 32471b57 @dependabot
    [bot]
  * Use --baseURL path for live-reload URL 0ad378b0 @sth #6595
  * bump github.com/getkin/kin-openapi from 0.31.0 to 0.32.0 907d9e92
    @dependabot[bot]

Fixes

Templates

  * Fix series detection in opengraph d2d493ab @Humberd
  * Fix substr when length parameter is zero 5862fd2a @moorereason #7993
  * Refactor and fix substr logic 64789fb5 @moorereason #7993

Other

  * Fix Resource.ResourceType so it always returns MIME's main type 81975f84
    @bep #8052
  * hugolib/paths: Fix typo ce96895d @mayocream
  * Fix minor typos 04b89857 @phil-davis
  * Fix BenchmarkMergeByLanguage 21fa1e86 @bep #7914
  * Fix RelURL and AbsURL when path starts with language aebfe156
    @ivan-meridianbanc-com

0.79.1:
Hugo depends on Go's os/exec for certain features, e.g. for rendering of Pandoc
documents if these binaries are found in the system %PATH% on Windows. However,
if a malicious file with the same name (exe or bat) was found in the current
working directory at the time of running hugo, the malicious command would be
invoked instead of the system one.

Windows users who ran hugo inside untrusted Hugo sites was affected.

The origin of this issue comes from Go, see golang/go#38736

We have fixed this in Hugo by using a patched version of exec.LookPath from
https://github.com/cli/safeexec (thanks to @mislav for the implementation).

Thanks to @Ry0taK for the bug report.

0.79.0:
Hugo 0.79.0 is a small, but useful release. You can now set custom .Params in
your menu configuration, and you can now also override deeply nested
snake_cased configuration variables with OS environment variables. Other than
that we have refreshed all the core upstream dependencies. A special thanks to
@alecthomas (some new Chroma lexers and fixes) and @evanw (ESBuild).

This release represents 33 contributions by 8 contributors to the main Hugo
code base. @bep leads the Hugo development with a significant amount of
contributions, but also a big shoutout @AdamKorcz, and @davidejones for their
ongoing contributions. And a big thanks to @digitalcraftsman for his relentless
work on keeping the themes site in pristine condition and to @davidsneighbour,
@coliff and @kaushalmodi for all the great work on the documentation site.

Many have also been busy writing and fixing the documentation in hugoDocs,
which has received 13 contributions by 11 contributors. A special thanks to
@Valac01, @bep, @mhansen, and @chanjarster for their work on the documentation
site.

Enhancements

Templates

  * Add more layout lookup tests 34061706 @moorereason #7964

Other

  * bump gopkg.in/yaml.v2 from 2.3.0 to 2.4.0 17e0bbe8 @dependabot[bot]
  * Allow setting the delimiter used for setting config via OS env, e.g. HUGO_
    7e223b3b @bep #7829
  * Update to github.com/evanw/esbuild 0.8.11 to 0.8.14 8a6e7060 @bep #7986
  * bump github.com/google/go-cmp from 0.5.2 to 0.5.3 6f7633df @dependabot[bot]
  * Remove unneeded meta tag from blog example a546059a @coliff
  * bump github.com/getkin/kin-openapi from 0.30.0 to 0.31.0 b5d906e3
    @dependabot[bot]
  * Regen docshelper fd70bdaf @bep
  * Add menu params 8f5c9a74 @davidejones #7951
  * Preserve url set in frontmatter without sanitizing e4fcb672 @satotake #6007
  * Add file deleted by accident 18c13adc @bep #7972
  * Regenerate docshelper" 20a35374 @bep #7972
  * Regenerate docshelper caf16c20 @bep
  * Update to Chroma v0.8.2 b298c06e @bep #7970
  * bump github.com/evanw/esbuild from 0.8.8 to 0.8.11 55e290af @dependabot
    [bot]
  * bump github.com/getkin/kin-openapi from 0.26.0 to 0.30.0 506a190a
    @dependabot[bot]
  * bump github.com/evanw/esbuild from 0.8.6 to 0.8.8 fc81de64 @dependabot[bot]
  * Let ESBuild handle all imports from node_modules 78f227b6 @bep #7948
  * bump github.com/evanw/esbuild from 0.8.5 to 0.8.6 5e03f644 @dependabot[bot]
  * bump github.com/evanw/esbuild from 0.8.4 to 0.8.5 a92ef20f @dependabot[bot]
  * bump github.com/getkin/kin-openapi from 0.22.1 to 0.26.0 0d54a844
    @dependabot[bot]
  * Update GH docs to say "main" as default branch 943f3c93 @maco
  * Updated year in header 4f20bf29 @AdamKorcz
  * Added first fuzzer 4c613d5d @AdamKorcz
  * bump github.com/frankban/quicktest from 1.11.1 to 1.11.2 82a182e5
    @dependabot[bot]
  * bump golang.org/x/text from 0.3.3 to 0.3.4 dfc662b2 @dependabot[bot]
  * bump github.com/evanw/esbuild from 0.8.3 to 0.8.4 2f0917cc @dependabot[bot]
  * Disable NPM test on Travis on Windows 3437174c @bep
  * Install nodejs on Windows f66302ca @bep
  * Remove external source map option 944150ba @bep #7932

Fixes

Other

  * Fix memory usage in writeStats d162bbd7 @bep #7945
  * Fix server rebuild issue with partials referenced from render hooks
    e442cf30 @bep #7990
  * Misc fixes bf2837a3 @bep #7924#7923

(ryoon)