ci: harden GitHub Actions workflows

Pin workflow actions to commit SHAs, set explicit permissions and timeouts, update Ubuntu runners, and include the generated action bundle.

Co-Authored-By: Codex <noreply@openai.com>

.github/ISSUE_TEMPLATE/1_user_support.md

@@ -1,36 +0,0 @@
----
-name: User Support
-about: Questions for this Action
-title: 'sample_title'
-labels: support
-assignees: peaceiris
----
-
-**Note that an issue which does not follow the template will be closed silently.**
-
-## Check list before opening this issue
-
-- [ ] I read the latest README of this repository.
-
-For users of the GitHub Pages Action:
-
-- [ ] I checked [Available Options](https://github.com/peaceiris/actions-gh-pages#options)
-- [ ] I followed [Tips and FAQs](https://github.com/peaceiris/actions-gh-pages#tips-and-faq)
-- [ ] I tried [Workflow Examples](https://github.com/peaceiris/actions-gh-pages#examples)
-
-## Describe your question
-
-A clear and concise description of what the question is.
-
-## Link to your contents
-
-- Link to your public repository here
-- Link to your workflow here
-
-## Screenshots
-
-If applicable, add screenshots to help explain your question.
-
-## Additional context
-
-Add any other context about the problem here.

.github/ISSUE_TEMPLATE/1_user_support.yml

@@ -0,0 +1,52 @@
+name: User Support
+description: Questions for this action
+title: "support: "
+labels: support
+assignees: peaceiris
+body:
+  - type: markdown
+    attributes:
+      value:
+        Please note we will close your issue without comment if you do not fill out the issue checklist below and provide ALL the requested information.
+  - type: checkboxes
+    attributes:
+      label: Checklist
+      description: Checklist before creating an issue.
+      options:
+        - label: "I am using the latest version of this action."
+          required: true
+        - label: "I have read the latest README and followed the instructions."
+          required: true
+        - label: "I have read the latest GitHub Actions official documentation and learned the basic spec and concepts."
+          required: true
+  - type: textarea
+    attributes:
+      label: Describe your question
+      description: A clear and concise description of what the question is.
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Relevant links
+      description:
+        Links to your public repository, YAML config file, and YAML workflow file.
+        Please use [a permanent link](https://docs.github.com/en/github/managing-files-in-a-repository/managing-files-on-github/getting-permanent-links-to-files), not a default branch.
+      render: markdown
+      value: |
+        Public repository:
+        YAML config:
+        YAML workflow:
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Relevant log output
+      description: Copy and paste any relevant log output here.
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Additional context.
+      description: Write any other context about the question here.
+    validations:
+      required: true

.github/ISSUE_TEMPLATE/2_bug_report.md

@@ -1,39 +0,0 @@
----
-name: Bug Report
-about: First, use the User Support Issue Template
-title: 'sample_title'
-labels: bug
-assignees: peaceiris
-
----
-
-**Note that an issue which does not follow the template will be closed silently.**
-
-## Describe the bug
-
-A clear and concise description of what the bug is.
-
-## To Reproduce
-
-Steps to reproduce the behavior:
-1. Go to '...'
-2. Click on '....'
-3. Scroll down to '....'
-4. See error
-
-## Expected behavior
-
-A clear and concise description of what you expected to happen.
-
-## Screenshots
-
-If applicable, add screenshots to help explain your problem.
-
-## Your YAML file
-
-- A link to your repository
-- A link to your YAML file
-
-## Additional context
-
-Add any other context about the problem here.

.github/ISSUE_TEMPLATE/2_bug_report.txt

@@ -0,0 +1,52 @@
+name: Bug Report
+description: Try the User Support Issue Template first.
+title: 'bug: '
+labels: bug
+assignees: peaceiris
+body:
+  - type: markdown
+    attributes:
+      value:
+        Please note we will close your issue without comment if you do not fill out the issue checklist below and provide ALL the requested information.
+  - type: checkboxes
+    attributes:
+      label: Checklist
+      description: Checklist before creating an issue.
+      options:
+        - label: "I am using the latest version of this action."
+          required: true
+        - label: "I have read the latest README and followed the instructions."
+          required: true
+        - label: "I have read the latest GitHub Actions official documentation and learned the basic spec and concepts."
+          required: true
+  - type: textarea
+    attributes:
+      label: "Describe the bug"
+      description: "A clear and concise description of what the bug is."
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Relevant links
+      description:
+        Links to your public repository, YAML config file, and YAML workflow file.
+        Please use [a permanent link](https://docs.github.com/en/github/managing-files-in-a-repository/managing-files-on-github/getting-permanent-links-to-files), not a default branch.
+      render: markdown
+      value: |
+        Public repository:
+        YAML config:
+        YAML workflow:
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Relevant log output
+      description: Copy and paste any relevant log output here.
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Additional context.
+      description: Write any other context about the question here.
+    validations:
+      required: true

.github/ISSUE_TEMPLATE/3_proposal.md

@@ -1,26 +0,0 @@
----
-name: Proposal
-about: Suggest an idea for this project
-title: 'sample_title'
-labels: proposal
-assignees: peaceiris
-
----
-
-**Note that an issue which does not follow the template will be closed silently.**
-
-## Is your feature request related to a problem? Please describe.
-
-A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
-
-## Describe the solution you'd like
-
-A clear and concise description of what you want to happen.
-
-## Describe alternatives you've considered
-
-A clear and concise description of any alternative solutions or features you've considered.
-
-## Additional context
-
-Add any other context or screenshots about the feature request here.

.github/ISSUE_TEMPLATE/3_proposal.yml

@@ -0,0 +1,45 @@
+name: Proposal
+description: Suggest an idea for this project
+title: 'proposal: '
+labels: proposal
+assignees: peaceiris
+body:
+  - type: markdown
+    attributes:
+      value:
+        Please note we will close your issue without comment if you do not fill out the issue checklist below and provide ALL the requested information.
+  - type: checkboxes
+    attributes:
+      label: Checklist
+      description: Checklist before creating an issue.
+      options:
+        - label: "I am using the latest version of this action."
+          required: true
+        - label: "I have read the latest README and followed the instructions."
+          required: true
+        - label: "I have read the latest GitHub Actions official documentation and learned the basic spec and concepts."
+          required: true
+  - type: textarea
+    attributes:
+      label: "Describe your proposal"
+      description: "A clear and concise description of what the proposal is."
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: "Describe the solution you'd like"
+      description: "A clear and concise description of what you want to happen."
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: "Describe alternatives you've considered"
+      description: "A clear and concise description of any alternative solutions or features you've considered."
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: "Additional context"
+      description: "Add any other context or screenshots about the feature request here."
+    validations:
+      required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -7,5 +7,5 @@ contact_links:
     url: https://discourse.gohugo.io/
     about: Please ask questions about Hugo here.
   - name: GitHub Actions Documentation
-    url: https://docs.github.com/en/free-pro-team@latest/actions
+    url: https://docs.github.com/en/actions
     about: GitHub Actions official documentation here.

.github/label-commenter-config.yml

@@ -30,3 +30,14 @@ labels:
     labeled:
       issue:
         body: This issue is easy for contributing. Everyone can work on this.
+  - name: resolved
+    labeled:
+      issue:
+        body: |
+          This issue has been **LOCKED** because of it being resolved!
+
+          The issue has been fixed and is therefore considered resolved.
+          If you still encounter this or it has changed, open a new issue instead of responding to solved ones.
+        action: close
+        locking: lock
+        lock_reason: resolved

.github/workflows/codeql-analysis.yml

@@ -6,19 +6,24 @@ on:
       - main
   pull_request:
 
+permissions:
+  security-events: write
+  contents: read
+
 jobs:
   CodeQL-Build:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-24.04
+    timeout-minutes: 20
     steps:
-      - uses: actions/checkout@v2.3.4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v1
+        uses: github/codeql-action/init@1521896cd211af95be3f02edf6f436e10b819c27 # v3.35.4
         with:
           languages: javascript
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v1
+        uses: github/codeql-action/autobuild@1521896cd211af95be3f02edf6f436e10b819c27 # v3.35.4
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v1
+        uses: github/codeql-action/analyze@1521896cd211af95be3f02edf6f436e10b819c27 # v3.35.4

.github/workflows/dependency-review.yml

@@ -0,0 +1,17 @@
+# Source repository: https://github.com/actions/dependency-review-action
+# Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
+name: 'Dependency Review'
+
+on:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4.9.0

.github/workflows/dev-image.yml

@@ -21,11 +21,15 @@ on:
       - 'Dockerfile'
       - 'Makefile'
 
+permissions:
+  contents: read
+
 jobs:
   dev-image-test:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-24.04
+    timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v2.3.4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
       - run: make build
       - run: make cirun cmd="npm ci"
       # - run: make ciall

.github/workflows/label-commenter.yml

@@ -10,16 +10,21 @@ on:
   #     - labeled
   #     - unlabeled
 
+permissions:
+  contents: read
+  issues: write
+
 jobs:
   comment:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v2.3.4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           ref: main
 
       - name: Label Commenter
-        uses: peaceiris/actions-label-commenter@v1.9.1
+        uses: peaceiris/actions-label-commenter@c74c602750041f04c2bb68d200fc2fdae169a044 # v1.10.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           # config_file: .github/label-commenter-config.yml

.github/workflows/purge-readme-image-cache.yml

@@ -4,13 +4,16 @@ on:
   schedule:
     - cron: '4 18 * * */7'
 
+permissions: {}
+
 jobs:
   purge:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-24.04
+    timeout-minutes: 5
     steps:
-
-    - run: >
-        curl -sL https://github.com/${GITHUB_REPOSITORY} |
-        grep -oE '<img src="https?://camo.githubusercontent.com/[^"]+' |
-        sed -e 's/<img src="//' |
-        xargs -I % curl -sX PURGE %
+      - name: Purge README image cache
+        run: >
+          curl -sL "https://github.com/${GITHUB_REPOSITORY}" |
+          grep -oE '<img src="https?://camo.githubusercontent.com/[^"]+' |
+          sed -e 's/<img src="//' |
+          xargs -I % curl -sX PURGE %

.github/workflows/release.yml

@@ -5,21 +5,15 @@ on:
     tags:
       - 'v*.*.*'
 
+permissions:
+  contents: write
+
 jobs:
   release:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v2.3.4
-
-      - name: Dump GitHub context
-        env:
-          GITHUB_CONTEXT: ${{ toJson(github) }}
-        run: echo "${GITHUB_CONTEXT}"
-
-      - name: Install github/hub
-        run: |
-          export HUB_VERSION="2.14.2"
-          curl -fsSL https://github.com/github/hub/raw/8d91904208171b013f9a9d1175f4ab39068db047/script/get | bash -s "${HUB_VERSION}"
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Create release
         env:
@@ -29,8 +23,8 @@ jobs:
           echo "See [CHANGELOG.md](https://github.com/${GITHUB_REPOSITORY}/blob/${TAG_NAME}/CHANGELOG.md) for more details." > ./release_notes.md
           RELEASE_NAME="$(jq -r '.name' ./package.json)"
           sed -i "1i${RELEASE_NAME} ${TAG_NAME}\n" ./release_notes.md
-          ./bin/hub release create \
+          gh release create "${TAG_NAME}" \
             --draft \
             --prerelease \
-            --file ./release_notes.md \
-            "${TAG_NAME}"
+            --notes-file ./release_notes.md \
+            --title "${RELEASE_NAME} ${TAG_NAME}"

.github/workflows/test-action.yml

@@ -1,38 +1,39 @@
-name: Daily Test
+name: Test Action
 
 on:
-  schedule:
-    - cron: '13 13 * * *'
+  push:
+    branches: [main, feat/node24]
+  pull_request:
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   test:
-    runs-on: ${{ matrix.os }}
+    runs-on: ubuntu-24.04
+    timeout-minutes: 20
     strategy:
       matrix:
-        os:
-          - 'ubuntu-20.04'
-          - 'ubuntu-18.04'
-          - 'macos-latest'
-          - 'windows-latest'
-        hugo-version:
-          - 'latest'
-          - '0.61.0'
-        extended:
-          - true
-          - false
+        hugo-version: ['latest', '0.160.1']
+        extended: [true, false]
     steps:
-      - uses: actions/checkout@v2.3.4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version-file: '.nvmrc'
+          cache: 'npm'
+
+      - run: npm ci
+
+      - run: npm run build
 
       - name: Setup Hugo
-        uses: peaceiris/actions-hugo@v2.4.13
+        uses: ./
         with:
           hugo-version: ${{ matrix.hugo-version }}
           extended: ${{ matrix.extended }}
 
-      - name: Run hugo version
-        run: echo "::set-output name=hugo_version::$(hugo version)"
-        id: hugo_version
-
-      - name: '${{ steps.hugo_version.outputs.hugo_version }}'
-        run: echo '${{ steps.hugo_version.outputs.hugo_version }}'
+      - name: Verify Hugo
+        run: hugo version

.github/workflows/test.yml

@@ -10,49 +10,48 @@ on:
     paths-ignore:
       - '**.md'
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ${{ matrix.os }}
+    timeout-minutes: 30
     strategy:
+      fail-fast: false
       matrix:
         os:
-          - 'ubuntu-20.04'
-          - 'ubuntu-18.04'
+          - 'ubuntu-24.04'
           - 'macos-latest'
           - 'windows-latest'
     steps:
-      - uses: actions/checkout@v2.3.4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
-      - name: Read .nvmrc
-        run: echo "::set-output name=NVMRC::$(cat .nvmrc)"
-        id: nvm
-
-      - name: Setup Node
-        uses: actions/setup-node@v2.1.5
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
-          node-version: '${{ steps.nvm.outputs.NVMRC }}'
+          node-version-file: '.nvmrc'
+          cache: 'npm'
 
-      - run: npm i -g npm
       - run: npm ci
 
       - name: Run prettier
-        if: startsWith(matrix.os, 'ubuntu-18.04')
+        if: matrix.os == 'ubuntu-24.04'
         run: npm run format:check
 
       - name: Run eslint
-        if: startsWith(matrix.os, 'ubuntu-18.04')
+        if: matrix.os == 'ubuntu-24.04'
         run: npm run lint
 
       - name: Run ncc
-        if: startsWith(matrix.os, 'ubuntu-18.04')
+        if: matrix.os == 'ubuntu-24.04'
         run: npm run build
 
       - run: npm test
 
       - name: Upload test coverage as artifact
-        uses: actions/upload-artifact@v2
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: coverage-${{ matrix.os }}
           path: coverage
 
-      - uses: codecov/codecov-action@v1.5.0
+      - uses: codecov/codecov-action@aa56896cf108bd10b5eb883cd1d24196da57f695 # v5.5.4

.github/workflows/update-major-tag.yml

@@ -2,22 +2,23 @@ name: Update major tag
 
 on:
   release:
-    types: [published]
+    types: [released]
+
+permissions:
+  contents: write
 
 jobs:
   update:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-24.04
+    timeout-minutes: 5
     steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
-    - uses: actions/checkout@v2.3.4
-
-    - name: Update major tag
-      if: github.event.release.prerelease == false
-      run: |
-        git config user.name "${GITHUB_ACTOR}"
-        git config user.email "${GITHUB_ACTOR}@users.noreply.github.com"
-        git remote set-url origin "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@github.com/${GITHUB_REPOSITORY}.git"
-        export TAG_NAME="${GITHUB_REF##refs/tags/}"
-        export TAG_MAJOR="${TAG_NAME%%.*}"
-        git tag --force -a "${TAG_MAJOR}" -m "Release ${TAG_NAME}"
-        git push --force origin "${TAG_MAJOR}"
+      - name: Update major tag
+        run: |
+          git config user.name "${GITHUB_ACTOR}"
+          git config user.email "${GITHUB_ACTOR}@users.noreply.github.com"
+          export TAG_NAME="${GITHUB_REF##refs/tags/}"
+          export TAG_MAJOR="${TAG_NAME%%.*}"
+          git tag --force -a "${TAG_MAJOR}" -m "Release ${TAG_NAME}"
+          git push --force origin "${TAG_MAJOR}"

.nvmrc

@@ -1 +1 @@
-12.22.1
+20.11.1

AGENTS.md

@@ -0,0 +1,31 @@
+# Repository Guidelines
+
+## Project Structure & Module Organization
+
+This repository contains a TypeScript GitHub Action for installing Hugo. Runtime source lives in `src/`, with `src/index.ts` as the action entry and `src/main.ts` coordinating input handling and installation. Tests live in `__tests__/`, with fixtures in `__tests__/data/`. The action metadata is `action.yml`; it points to the bundled output `lib/index.js`, which is generated by `npm run build`. Workflow automation is under `.github/workflows/`, and project imagery is in `images/`.
+
+## Build, Test, and Development Commands
+
+- `npm ci`: install dependencies from `package-lock.json`.
+- `npm run all`: run format check, ESLint, and Jest tests; use this before opening a PR.
+- `npm test`: run Jest with coverage and verbose output.
+- `npm run lint` / `npm run lint:fix`: check or fix TypeScript lint issues.
+- `npm run format:check` / `npm run format`: check or apply Prettier formatting for `*.ts`.
+- `npm run build`: bundle `src/index.ts` into `lib/` with `ncc`.
+- `make build`, `make test`, `make all`: run the Docker-based development image and test flow.
+
+## Coding Style & Naming Conventions
+
+Use TypeScript with `strict` and `noImplicitAny` enabled. Follow the existing Prettier settings: 2-space indentation, single quotes, semicolons, 100-column print width, no trailing commas, and no bracket spacing. Use named exports for reusable helpers, keep filenames lowercase with hyphenated words such as `get-latest-version.ts`, and keep tests named `*.test.ts`. Makefiles use tabs, as defined in `.editorconfig`.
+
+## Testing Guidelines
+
+Jest with `ts-jest` and `jest-circus` runs all `**/*.test.ts` files in a Node environment. Add focused unit tests next to related behavior in `__tests__/`, and place mocked API responses or reusable input data in `__tests__/data/`. Preserve or improve coverage when changing installer logic, URL generation, OS/arch detection, or latest-version lookup.
+
+## Commit & Pull Request Guidelines
+
+Commit history follows short Conventional Commit-style prefixes such as `feat:`, `ci:`, and `docs:`. Keep commit subjects imperative and scoped to one change. PRs should describe the behavior change, mention linked issues when applicable, and list verification commands such as `npm run all` and `npm run build`. Include updates to `README.md`, `action.yml`, and tests whenever inputs, runtime behavior, or documented examples change.
+
+## Agent-Specific Instructions
+
+Use English for repository-facing content, including documentation, code comments, commit messages, and pull request text, unless the task explicitly requires another language.

CHANGELOG.md

@@ -2,6 +2,114 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+# [3.0.0](https://github.com/peaceiris/actions-hugo/compare/v2.6.0...v3.0.0) (2024-04-02)
+
+
+### build
+
+* node 20.11.1 ([01bd2b1](https://github.com/peaceiris/actions-hugo/commit/01bd2b16cc6cadbc63cba9bddb36c689f462c2db))
+
+### chore
+
+* npm audit fix ([966dfad](https://github.com/peaceiris/actions-hugo/commit/966dfad3859a5cfc80b6e36761b0b4c7b3dd5e0c))
+* revert version ([d85452e](https://github.com/peaceiris/actions-hugo/commit/d85452eadfba7065bf8c0601c8c22e427982d108))
+
+### ci
+
+* bump actions/dependency-review-action from 2 to 3 (#622) ([844f873](https://github.com/peaceiris/actions-hugo/commit/844f8735f61722d43677c23cbeae4283af7b554a)), closes [#622](https://github.com/peaceiris/actions-hugo/issues/622)
+* bump actions/setup-node from 3.5.1 to 3.6.0 (#625) ([3fa8fd6](https://github.com/peaceiris/actions-hugo/commit/3fa8fd6cee4e03774c4e900dca8b766d1cdcae93)), closes [#625](https://github.com/peaceiris/actions-hugo/issues/625)
+* bump checkout to v4 (#639) ([aadc3a9](https://github.com/peaceiris/actions-hugo/commit/aadc3a98dfd3437f8f97d436ea91b82a73dc85dd)), closes [#639](https://github.com/peaceiris/actions-hugo/issues/639)
+* bump peaceiris/actions-hugo from 2.5.0 to 2.6.0 (#621) ([b1822b6](https://github.com/peaceiris/actions-hugo/commit/b1822b6abe1a489f9ba7b9b664d916aeafd3e592)), closes [#621](https://github.com/peaceiris/actions-hugo/issues/621)
+
+### docs
+
+* bump ruby version to 3.2 (#629) ([7c4b9f1](https://github.com/peaceiris/actions-hugo/commit/7c4b9f1f99c72728600c292c1f0e7138cc3a8865)), closes [#629](https://github.com/peaceiris/actions-hugo/issues/629)
+* bump versions (#628) ([7652d53](https://github.com/peaceiris/actions-hugo/commit/7652d5336914f4ecd975baff70cd3c4b5070678b)), closes [#628](https://github.com/peaceiris/actions-hugo/issues/628)
+* remove braces (#634) ([31c4654](https://github.com/peaceiris/actions-hugo/commit/31c46541ceabb0656cd9e943914ab1701da3e788)), closes [#634](https://github.com/peaceiris/actions-hugo/issues/634)
+* replace set-output with GITHUB_OUTPUT ([3d92e2f](https://github.com/peaceiris/actions-hugo/commit/3d92e2fd556bef7470d7e2a6aea63141183c20a6))
+* update cache usage (#636) ([c0084b0](https://github.com/peaceiris/actions-hugo/commit/c0084b0763db3a37f864755d9174f2a6f3e0c1c5)), closes [#636](https://github.com/peaceiris/actions-hugo/issues/636)
+
+### feat
+
+* bump to use node20 runtime (#641) ([c57490a](https://github.com/peaceiris/actions-hugo/commit/c57490a8b04136ae58ab5866a93d3db2f0fa0945)), closes [#641](https://github.com/peaceiris/actions-hugo/issues/641)
+
+
+
+# [2.6.0](https://github.com/peaceiris/actions-hugo/compare/v2.5.0...v2.6.0) (2022-10-23)
+
+
+### chore
+
+* Convert templates to YAML issue forms ([5fb41c8](https://github.com/peaceiris/actions-hugo/commit/5fb41c87da82b4f59a6198b0752b2bca9078d4a4))
+* Fix prettier (#535) ([5fa8f53](https://github.com/peaceiris/actions-hugo/commit/5fa8f53e895b6475798170197409983ae10d261c)), closes [#535](https://github.com/peaceiris/actions-hugo/issues/535)
+* fix year (#613) ([8da14cc](https://github.com/peaceiris/actions-hugo/commit/8da14cc542424be0081be3474ad36c74e34a7dfe)), closes [#613](https://github.com/peaceiris/actions-hugo/issues/613)
+* update url ([c1f39e2](https://github.com/peaceiris/actions-hugo/commit/c1f39e2b46476a13ad7e4a5eb06b8e2f582a2f13))
+
+### ci
+
+* add actions/dependency-review-action v1 ([4809af4](https://github.com/peaceiris/actions-hugo/commit/4809af4bd48eabfbb4c6be7588a9b3859dba454a))
+* add resolved ([101470c](https://github.com/peaceiris/actions-hugo/commit/101470c99f5450d86c10ea44c549fd267b317ffc))
+* bump actions/checkout from 2.3.4 to 2.3.5 (#546) ([3bb386e](https://github.com/peaceiris/actions-hugo/commit/3bb386ec5a21d7ae895f0880b0a2fb1ea189cd8b)), closes [#546](https://github.com/peaceiris/actions-hugo/issues/546)
+* bump actions/checkout from 2.3.5 to 2.4.0 (#548) ([86a3c30](https://github.com/peaceiris/actions-hugo/commit/86a3c300c730f9c35886afeca0af0c2ce031b0b4)), closes [#548](https://github.com/peaceiris/actions-hugo/issues/548)
+* bump actions/checkout from 2.4.0 to 3 (#565) ([a41bdb5](https://github.com/peaceiris/actions-hugo/commit/a41bdb53bd93ff61a324fffa43fab5b65bca4fdd)), closes [#565](https://github.com/peaceiris/actions-hugo/issues/565)
+* bump actions/dependency-review-action from 1 to 2 (#593) ([831547a](https://github.com/peaceiris/actions-hugo/commit/831547a4b23e8d07bbc73bdcc8423938d344bb4a)), closes [#593](https://github.com/peaceiris/actions-hugo/issues/593)
+* bump actions/setup-node from 2.1.5 to 2.2.0 (#529) ([497618b](https://github.com/peaceiris/actions-hugo/commit/497618ba62018779773217131791215872b92631)), closes [#529](https://github.com/peaceiris/actions-hugo/issues/529)
+* bump actions/setup-node from 2.2.0 to 2.3.0 (#531) ([781702e](https://github.com/peaceiris/actions-hugo/commit/781702ee9d9be2f39d1cc7971dfde041e1b17e1b)), closes [#531](https://github.com/peaceiris/actions-hugo/issues/531)
+* bump actions/setup-node from 2.3.0 to 2.3.2 (#537) ([239a50c](https://github.com/peaceiris/actions-hugo/commit/239a50c280a0b6595f3fd9f60f17d34e290a3ae4)), closes [#537](https://github.com/peaceiris/actions-hugo/issues/537)
+* bump actions/setup-node from 2.3.2 to 2.4.0 (#538) ([57272db](https://github.com/peaceiris/actions-hugo/commit/57272db01ca4c3253e4bb6163664a50a23a76cc5)), closes [#538](https://github.com/peaceiris/actions-hugo/issues/538)
+* bump actions/setup-node from 2.4.0 to 2.4.1 (#543) ([cebd001](https://github.com/peaceiris/actions-hugo/commit/cebd0015e0fbf4cdcd17422a1ba70f0c13b8b5c4)), closes [#543](https://github.com/peaceiris/actions-hugo/issues/543)
+* bump actions/setup-node from 2.4.1 to 2.5.0 (#551) ([008429a](https://github.com/peaceiris/actions-hugo/commit/008429aaabf87bac670904f069d682b7493ef9e1)), closes [#551](https://github.com/peaceiris/actions-hugo/issues/551)
+* bump actions/setup-node from 2.5.0 to 2.5.1 (#552) ([1575f40](https://github.com/peaceiris/actions-hugo/commit/1575f408aee0a92b8b324e1d7537fac7316d69d0)), closes [#552](https://github.com/peaceiris/actions-hugo/issues/552)
+* bump actions/setup-node from 2.5.1 to 3.0.0 (#557) ([550aee6](https://github.com/peaceiris/actions-hugo/commit/550aee6c368724015b790edca76711b5b6c8e781)), closes [#557](https://github.com/peaceiris/actions-hugo/issues/557)
+* bump actions/setup-node from 3.0.0 to 3.1.0 (#574) ([2f2b8d3](https://github.com/peaceiris/actions-hugo/commit/2f2b8d32b92379b30f0a4ad74d0cd6472c42e482)), closes [#574](https://github.com/peaceiris/actions-hugo/issues/574)
+* bump actions/setup-node from 3.1.0 to 3.1.1 (#577) ([25736cc](https://github.com/peaceiris/actions-hugo/commit/25736cc1c02fdd4b3eae34d261d2ad7fe45e135a)), closes [#577](https://github.com/peaceiris/actions-hugo/issues/577)
+* bump actions/setup-node from 3.1.1 to 3.4.1 (#598) ([11bede6](https://github.com/peaceiris/actions-hugo/commit/11bede66e7d1c36c4e39a5d1e32442056e41e7ef)), closes [#598](https://github.com/peaceiris/actions-hugo/issues/598)
+* bump actions/setup-node from 3.4.1 to 3.5.0 (#606) ([a2eba60](https://github.com/peaceiris/actions-hugo/commit/a2eba606985f706c754c8e4c283bc3d913897a31)), closes [#606](https://github.com/peaceiris/actions-hugo/issues/606)
+* bump actions/setup-node from 3.5.0 to 3.5.1 (#612) ([c0150f2](https://github.com/peaceiris/actions-hugo/commit/c0150f24bb3e706c93def97a4dae60b9b6fd23ff)), closes [#612](https://github.com/peaceiris/actions-hugo/issues/612)
+* bump actions/upload-artifact from 2 to 3 (#576) ([6ce18a7](https://github.com/peaceiris/actions-hugo/commit/6ce18a799f48752081f8aff7bdc21e0757b9f260)), closes [#576](https://github.com/peaceiris/actions-hugo/issues/576)
+* bump codecov/codecov-action from 1.5.0 to 1.5.2 (#526) ([ad8a667](https://github.com/peaceiris/actions-hugo/commit/ad8a66742861fb836a13187e2d66d126c2758296)), closes [#526](https://github.com/peaceiris/actions-hugo/issues/526)
+* bump codecov/codecov-action from 1.5.2 to 2.0.1 (#530) ([19b5ac8](https://github.com/peaceiris/actions-hugo/commit/19b5ac8979b2b5edfe306c9f3659b98effd6e285)), closes [#530](https://github.com/peaceiris/actions-hugo/issues/530)
+* bump codecov/codecov-action from 2.0.1 to 2.0.2 (#533) ([54f7007](https://github.com/peaceiris/actions-hugo/commit/54f7007102553a5e97014fbcb91aea3c0920db0b)), closes [#533](https://github.com/peaceiris/actions-hugo/issues/533)
+* bump codecov/codecov-action from 2.0.2 to 2.0.3 (#540) ([b911fb4](https://github.com/peaceiris/actions-hugo/commit/b911fb4dcf324e9f66c0553f61e037bead654e5d)), closes [#540](https://github.com/peaceiris/actions-hugo/issues/540)
+* bump codecov/codecov-action from 2.0.3 to 2.1.0 (#542) ([f93586e](https://github.com/peaceiris/actions-hugo/commit/f93586ef6c1a3a4f26eb0b6117e732507466d4de)), closes [#542](https://github.com/peaceiris/actions-hugo/issues/542)
+* bump codecov/codecov-action from 2.1.0 to 3 (#575) ([3c69ee1](https://github.com/peaceiris/actions-hugo/commit/3c69ee16122614bd86d8881c92e1e374669ca559)), closes [#575](https://github.com/peaceiris/actions-hugo/issues/575)
+* bump github/codeql-action from 1 to 2 (#581) ([808d10a](https://github.com/peaceiris/actions-hugo/commit/808d10a6aac88104619e8d47fca8a56eaeb71b12)), closes [#581](https://github.com/peaceiris/actions-hugo/issues/581)
+* bump peaceiris/actions-hugo from 2.4.13 to 2.5.0 (#521) ([6a16840](https://github.com/peaceiris/actions-hugo/commit/6a16840a8614e1d75a22df38f4a7555e7bb623ea)), closes [#521](https://github.com/peaceiris/actions-hugo/issues/521)
+* bump peaceiris/actions-label-commenter from 1.9.1 to 1.9.2 (#528) ([dead32d](https://github.com/peaceiris/actions-hugo/commit/dead32d58922938cb063b358881eb7df21e5b228)), closes [#528](https://github.com/peaceiris/actions-hugo/issues/528)
+* bump peaceiris/actions-label-commenter from 1.9.2 to 1.10.0 (#532) ([82ac7db](https://github.com/peaceiris/actions-hugo/commit/82ac7db7f2d5ece5824b40882acb6c9dbd31da56)), closes [#532](https://github.com/peaceiris/actions-hugo/issues/532)
+* Change event from published to released ([5d8b0b2](https://github.com/peaceiris/actions-hugo/commit/5d8b0b2005c61de25aa469e038efb717902a8500))
+* drop ubuntu-18.04, add ubuntu-22.04 and ubuntu-latest (#603) ([bd5a5ed](https://github.com/peaceiris/actions-hugo/commit/bd5a5edf1b6a534bee1c70bd49f0ba3ff435e597)), closes [#603](https://github.com/peaceiris/actions-hugo/issues/603)
+* Remove updating npm ([ba23c24](https://github.com/peaceiris/actions-hugo/commit/ba23c24d3ae3be77ed05b3c0ac9990b030648de0))
+
+### deps
+
+* bump @actions/core from 1.2.7 to 1.6.0 (#544) ([be79927](https://github.com/peaceiris/actions-hugo/commit/be79927858b2280c3c371f70e54a8f73fd17d931)), closes [#544](https://github.com/peaceiris/actions-hugo/issues/544)
+* bump @actions/exec from 1.0.4 to 1.1.1 (#571) ([7d27b3c](https://github.com/peaceiris/actions-hugo/commit/7d27b3ca0d7d3196371a1d3fb1575317d6099146)), closes [#571](https://github.com/peaceiris/actions-hugo/issues/571)
+* bump @actions/tool-cache from 1.6.1 to 1.7.2 (#570) ([616b5f1](https://github.com/peaceiris/actions-hugo/commit/616b5f11b689c6a3064f589815e8bfbc04c444e9)), closes [#570](https://github.com/peaceiris/actions-hugo/issues/570)
+* bump ansi-regex from 5.0.0 to 5.0.1 (#562) ([857689a](https://github.com/peaceiris/actions-hugo/commit/857689ab4c02dd173b4d9b2bc569b94f0bd56a11)), closes [#562](https://github.com/peaceiris/actions-hugo/issues/562)
+* bump glob-parent from 5.1.1 to 5.1.2 (#563) ([91a922c](https://github.com/peaceiris/actions-hugo/commit/91a922ca60edf9a5dd9466dae065fcbd8e02efc2)), closes [#563](https://github.com/peaceiris/actions-hugo/issues/563)
+* bump minimist from 1.2.5 to 1.2.6 (#572) ([b2630b1](https://github.com/peaceiris/actions-hugo/commit/b2630b1c8ff9200bde342ec33b98c1ede4c03473)), closes [#572](https://github.com/peaceiris/actions-hugo/issues/572)
+* bump path-parse from 1.0.6 to 1.0.7 (#559) ([dee3925](https://github.com/peaceiris/actions-hugo/commit/dee39257f51c6bfbeffdc8b475029fad02299a5a)), closes [#559](https://github.com/peaceiris/actions-hugo/issues/559)
+* bump shelljs from 0.8.4 to 0.8.5 (#561) ([26d3d6b](https://github.com/peaceiris/actions-hugo/commit/26d3d6b6560f1131c4f9ae9622a7558ac9a2c19d)), closes [#561](https://github.com/peaceiris/actions-hugo/issues/561)
+* bump tmpl from 1.0.4 to 1.0.5 (#558) ([8f469b1](https://github.com/peaceiris/actions-hugo/commit/8f469b17c39a96eeffd077531bf8db8b9f22e916)), closes [#558](https://github.com/peaceiris/actions-hugo/issues/558)
+* bump trim-off-newlines from 1.0.1 to 1.0.3 (#560) ([f90a733](https://github.com/peaceiris/actions-hugo/commit/f90a73305c9f1a235a04a6dd16b8d728f72c623c)), closes [#560](https://github.com/peaceiris/actions-hugo/issues/560)
+* bump ws from 7.4.0 to 7.5.7 (#573) ([b15a5c7](https://github.com/peaceiris/actions-hugo/commit/b15a5c70d3e8c52cb88b2cc6786611441c83e9d4)), closes [#573](https://github.com/peaceiris/actions-hugo/issues/573)
+* node 12.22.4 ([4083be1](https://github.com/peaceiris/actions-hugo/commit/4083be136338c4140b03cbe12fe046a46c38dbdd))
+
+### docs
+
+* Add concurrency ([8d746f0](https://github.com/peaceiris/actions-hugo/commit/8d746f09e2808a6e250393fde3d471d7cf53a047))
+* Improve concurrency usage ([20d6724](https://github.com/peaceiris/actions-hugo/commit/20d6724b2ce2fbb34442e0a950796050e21e054d))
+* Improve if syntax ([068938a](https://github.com/peaceiris/actions-hugo/commit/068938ab2245aee69d3120f8b120f009345713a8))
+* use setup-node cache-dependency-path (#602) ([46553ea](https://github.com/peaceiris/actions-hugo/commit/46553eae11dc4ca2d07de9f176dc4fa4c2c50c10)), closes [#602](https://github.com/peaceiris/actions-hugo/issues/602)
+* Use ubuntu-20.04 ([903b945](https://github.com/peaceiris/actions-hugo/commit/903b94526d6bc9980c3ed3de99ba63dad5209b10))
+
+### feat
+
+* bump node12 to node16 (#617) ([9a77c64](https://github.com/peaceiris/actions-hugo/commit/9a77c647c2a01d1de23ed40d01b9c80a00bffcd3)), closes [#617](https://github.com/peaceiris/actions-hugo/issues/617)
+
+
+
 # [2.5.0](https://github.com/peaceiris/actions-hugo/compare/v2.4.13...v2.5.0) (2021-05-27)
 
 

LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2020 Shohei Ueda (peaceiris)
+Copyright (c) 2019 Shohei Ueda (peaceiris)
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

README.md

@@ -2,6 +2,7 @@
 
 <img width="400" alt="GitHub Actions for Hugo" src="./images/ogp.svg">
 
+[![Project status: active – The project has reached a stable, usable state and is being actively developed.](https://www.repostatus.org/badges/latest/active.svg)](https://www.repostatus.org/#active)
 [![license](https://img.shields.io/github/license/peaceiris/actions-hugo.svg)](https://github.com/peaceiris/actions-hugo/blob/main/LICENSE)
 [![release](https://img.shields.io/github/release/peaceiris/actions-hugo.svg)](https://github.com/peaceiris/actions-hugo/releases/latest)
 [![GitHub release date](https://img.shields.io/github/release-date/peaceiris/actions-hugo.svg)](https://github.com/peaceiris/actions-hugo/releases)
@@ -23,7 +24,7 @@ We no longer build or pull a Hugo docker image.
 Thanks to this change, we can complete this action in less than a few seconds.
 (A docker base action was taking about 1 min or more execution time to build and pull a docker image.)
 
-| OS (runs-on) | ubuntu-18.04, ubuntu-20.04 | macos-latest | windows-2019 |
+| OS (runs-on) | ubuntu-latest, ubuntu-20.04, ubuntu-22.04 | macos-latest | windows-2019 |
 |---|:---:|:---:|:---:|
 | Support | ✅️ | ✅️ | ✅️ |
 
@@ -70,7 +71,7 @@ For the first deployment, we have to do this operation: [First Deployment with `
 [![peaceiris/actions-gh-pages - GitHub](https://gh-card.dev/repos/peaceiris/actions-gh-pages.svg?fullname)](https://github.com/peaceiris/actions-gh-pages)
 
 ```yaml
-name: github pages
+name: GitHub Pages
 
 on:
   push:
@@ -80,17 +81,19 @@ on:
 
 jobs:
   deploy:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-22.04
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.ref }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           submodules: true  # Fetch Hugo themes (true OR recursive)
           fetch-depth: 0    # Fetch all history for .GitInfo and .Lastmod
 
       - name: Setup Hugo
-        uses: peaceiris/actions-hugo@v2
+        uses: peaceiris/actions-hugo@v3
         with:
-          hugo-version: '0.83.1'
+          hugo-version: '0.119.0'
           # extended: true
 
       - name: Build
@@ -118,9 +121,9 @@ Set `extended: true` to use a Hugo extended version.
 
 ```yaml
 - name: Setup Hugo
-  uses: peaceiris/actions-hugo@v2
+  uses: peaceiris/actions-hugo@v3
   with:
-    hugo-version: '0.83.1'
+    hugo-version: '0.119.0'
     extended: true
 ```
 
@@ -130,7 +133,7 @@ Set `hugo-version: 'latest'` to use the latest version of Hugo.
 
 ```yaml
 - name: Setup Hugo
-  uses: peaceiris/actions-hugo@v2
+  uses: peaceiris/actions-hugo@v3
   with:
     hugo-version: 'latest'
 ```
@@ -148,12 +151,27 @@ This action fetches the latest version of Hugo by [hugo | Homebrew Formulae](htt
 ### ⭐️ Caching Hugo Modules
 
 Insert a cache step before site-building as follows.
-Note that the cache dir location of Hugo on a Linux-based operating system is `/tmp/hugo_cache`. On macOS, `${TMPDIR}/hugo_cache` has the location.
+
+First, to maximize compatibility with all Hugo versions, let's define the variable `HUGO_CACHEDIR`:
 
 ```yaml
-- uses: actions/cache@v2
+# * ...
+
+jobs:
+  deploy:
+    runs-on: ubuntu-22.04
+    env:
+      HUGO_CACHEDIR: /tmp/hugo_cache # <- Define the env variable here, so that Hugo's cache dir is now predictible in your workflow and doesn't depend on the Hugo's version you're using.
+
+# * ...
+```
+
+Now, let's add the cache action call just above the _Build_ step:
+
+```yaml
+- uses: actions/cache@v4
   with:
-    path: /tmp/hugo_cache
+    path: ${{ env.HUGO_CACHEDIR }} # <- Use the same env variable just right here
     key: ${{ runner.os }}-hugomod-${{ hashFiles('**/go.sum') }}
     restore-keys: |
       ${{ runner.os }}-hugomod-
@@ -173,7 +191,7 @@ How to sync a Hugo version between a Docker Compose and a GitHub Actions workflo
 Write a `HUGO_VERSION` to the `.env` file like the following and push it to a remote branch.
 
 ```sh
-HUGO_VERSION=0.83.1
+HUGO_VERSION=0.119.0
 ```
 
 Next, add a step to read a Hugo version from the `.env` file.
@@ -183,10 +201,10 @@ Next, add a step to read a Hugo version from the `.env` file.
       id: hugo-version
       run: |
         . ./.env
-        echo "::set-output name=HUGO_VERSION::${HUGO_VERSION}"
+        echo "HUGO_VERSION=${HUGO_VERSION}" >> "${GITHUB_OUTPUT}"
 
     - name: Setup Hugo
-      uses: peaceiris/actions-hugo@v2
+      uses: peaceiris/actions-hugo@v3
       with:
         hugo-version: '${{ steps.hugo-version.outputs.HUGO_VERSION }}'
         extended: true
@@ -225,7 +243,7 @@ The alpine base Hugo Docker image is provided on the following repository.
 
 Here is an example workflow for the [google/docsy] Hugo theme.
 This theme needs `autoprefixer` and `postcss-cli` to build a project.
-The following workflow is tested on [google/docsy-example].
+The following workflow is tested with [google/docsy-example].
 
 [google/docsy]: https://github.com/google/docsy
 [google/docsy-example]: https://github.com/google/docsy-example
@@ -233,48 +251,46 @@ The following workflow is tested on [google/docsy-example].
 A workflow for the Hugo Babel pipeline is also the same as follows.
 
 ```yaml
-name: github pages
+name: GitHub Pages
 
 on:
   push:
     branches:
-      - main  # Set a branch to deploy
+      - master  # Set a branch to deploy
   pull_request:
 
 jobs:
   deploy:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-22.04
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.ref }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@4
         with:
-          submodules: recursive  # Fetch the Docsy theme
           fetch-depth: 0         # Fetch all history for .GitInfo and .Lastmod
 
       - name: Setup Hugo
-        uses: peaceiris/actions-hugo@v2
+        uses: peaceiris/actions-hugo@v3
         with:
-          hugo-version: '0.83.1'
+          hugo-version: '0.119.0'
           extended: true
 
-      - name: Setup Node
-        uses: actions/setup-node@v2
+      - uses: actions/setup-node@v4
         with:
-          node-version: '14'
-
-      - name: Cache dependencies
-        uses: actions/cache@v1
-        with:
-          path: ~/.npm
-          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
-          restore-keys: |
-            ${{ runner.os }}-node-
+          node-version: '20'
+          cache: 'npm'
+          # The action defaults to search for the dependency file (package-lock.json,
+          # npm-shrinkwrap.json or yarn.lock) in the repository root, and uses its
+          # hash as a part of the cache key.
+          # https://github.com/actions/setup-node/blob/main/docs/advanced-usage.md#caching-packages-data
+          cache-dependency-path: '**/package-lock.json'
 
       - run: npm ci
       - run: hugo --minify
 
       - name: Deploy
         uses: peaceiris/actions-gh-pages@v3
-        if: github.ref == 'refs/heads/main'
+        if: github.ref == 'refs/heads/master'
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
 ```
@@ -288,7 +304,7 @@ jobs:
 Here is an example workflow for a Hugo project using `asciidoctor`.
 
 ```yaml
-name: github pages
+name: GitHub Pages
 
 on:
   push:
@@ -298,23 +314,25 @@ on:
 
 jobs:
   deploy:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-22.04
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.ref }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           submodules: true  # Fetch Hugo themes (true OR recursive)
           fetch-depth: 0    # Fetch all history for .GitInfo and .Lastmod
 
       - name: Setup Hugo
-        uses: peaceiris/actions-hugo@v2
+        uses: peaceiris/actions-hugo@v3
         with:
-          hugo-version: '0.83.1'
+          hugo-version: '0.119.0'
           extended: true
 
       - name: Setup Ruby
         uses: ruby/setup-ruby@v1
         with:
-          ruby-version: 2.7
+          ruby-version: 3.2
 
       - run: gem install asciidoctor
 
@@ -339,7 +357,7 @@ jobs:
 cf. [Gitinfo fails on unicode filename · Issue #3071 · gohugoio/hugo](https://github.com/gohugoio/hugo/issues/3071)
 
 ```yaml
-name: github pages
+name: GitHub Pages
 
 on:
   push:
@@ -348,9 +366,11 @@ on:
 
 jobs:
   deploy:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-22.04
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.ref }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
@@ -358,9 +378,9 @@ jobs:
         run: git config core.quotePath false
 
       - name: Setup Hugo
-        uses: peaceiris/actions-hugo@v2
+        uses: peaceiris/actions-hugo@v3
         with:
-          hugo-version: '0.83.1'
+          hugo-version: '0.119.0'
 ```
 
 <div align="right">

action.yml

@@ -11,7 +11,7 @@ inputs:
     required: false
     default: 'false'
 runs:
-  using: 'node12'
+  using: 'node24'
   main: 'lib/index.js'
 branding:
   icon: 'package'

package.json

@@ -1,11 +1,11 @@
 {
   "name": "actions-hugo",
-  "version": "2.5.0",
+  "version": "3.0.0",
   "description": "GitHub Actions for Hugo",
   "main": "lib/index.js",
   "engines": {
-    "node": ">=12.14.1",
-    "npm": ">=6.13.7"
+    "node": ">=20.10.0",
+    "npm": ">=10.2.3"
   },
   "scripts": {
     "all": "npm run format:check && npm run lint && npm test",
@@ -14,8 +14,8 @@
     "test": "jest --coverage --verbose",
     "build": "ncc build ./src/index.ts -o lib",
     "tsc": "tsc",
-    "format": "prettier --write **/*.ts",
-    "format:check": "prettier --check **/*.ts",
+    "format": "prettier --write '**/*.ts'",
+    "format:check": "prettier --check '**/*.ts'",
     "release": "standard-version",
     "postinstall": "npx husky install"
   },
@@ -25,7 +25,7 @@
       "eslint"
     ],
     "README.md": [
-      "npx doctoc@2.0.0 --github"
+      "npx doctoc@2.1.0 --github"
     ]
   },
   "repository": {
@@ -47,19 +47,19 @@
   },
   "homepage": "https://github.com/peaceiris/actions-hugo#readme",
   "dependencies": {
-    "@actions/core": "^1.2.7",
-    "@actions/exec": "^1.0.4",
+    "@actions/core": "^1.10.0",
+    "@actions/exec": "^1.1.1",
     "@actions/io": "^1.1.0",
-    "@actions/tool-cache": "^1.6.1",
+    "@actions/tool-cache": "^1.7.2",
     "node-fetch": "^2.6.1"
   },
   "devDependencies": {
     "@types/jest": "^26.0.20",
-    "@types/node": "~12",
+    "@types/node": "~20",
     "@types/node-fetch": "^2.5.8",
     "@typescript-eslint/eslint-plugin": "^4.16.1",
     "@typescript-eslint/parser": "^4.16.1",
-    "@vercel/ncc": "^0.27.0",
+    "@vercel/ncc": "^0.38.1",
     "eslint": "^7.21.0",
     "eslint-plugin-jest": "^24.1.5",
     "husky": "^5.1.3",