--- title: Release v0.165.0 · gohugoio/hugo | daily.dev description: Hugo v0.165.0 removes tailwindcss from the default security.exec.allow list, fixes bugs including resource transformation chaining after content access, and... canonical: https://daily.dev/posts/release-v0-165-0-gohugoio-hugo-4zn1e82fe twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Release v0.165.0 · gohugoio/hugo | daily.dev og:description: Hugo v0.165.0 removes tailwindcss from the default security.exec.allow list, fixes bugs including resource transformation chaining after content access, and... og:url: https://daily.dev/posts/release-v0-165-0-gohugoio-hugo-4zn1e82fe og:image: https://api.daily.dev/og/posts/4ZN1e82Fe.png og:image:alt: Release v0.165.0 · gohugoio/hugo og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Release v0.165.0 · gohugoio/hugo **[Hugo](https://daily.dev/sources/hugo)** · 2 min read · 1 upvotes · 0 comments ## Summary Hugo v0.165.0 removes tailwindcss from the default security.exec.allow list, fixes bugs including resource transformation chaining after content access, and bundles a large batch of dependency version bumps handled by Dependabot. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Why was tailwindcss removed from Hugo's default security.exec.allow list in v0.165.0? Hugo v0.165.0 removed tailwindcss from the default security.exec.allow configuration list. Sites relying on the default allow list to execute the tailwindcss binary during builds will need to explicitly add it back to their security.exec.allow configuration, or the build will be blocked by Hugo's security policy. _Track Hugo config changes like this on daily.dev before a site build unexpectedly breaks._ ### What bug was fixed in Hugo v0.165.0 related to resource transformation chaining? Hugo v0.165.0 fixes an issue where resource transformation chaining broke after content access, as tracked in commit f772998 under issue #15189. This addresses cases where applying multiple transformations to a resource failed once that resource's content had been accessed earlier in the pipeline. _Developers debugging Hugo transformation pipelines can follow fixes like this on daily.dev._ --- Tags: [#security](https://daily.dev/tags/security), [#golang](https://daily.dev/tags/golang) [View this post on daily.dev](https://daily.dev/posts/release-v0-165-0-gohugoio-hugo-4zn1e82fe) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Release v0.165.0 · gohugoio/hugo","url":"https://daily.dev/posts/release-v0-165-0-gohugoio-hugo-4zn1e82fe","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/release-v0-165-0-gohugoio-hugo-4zn1e82fe"},"datePublished":"2026-08-12T15:43:50.386Z","dateModified":"2026-09-14T08:06:05.323Z","description":"Hugo v0.165.0 removes tailwindcss from the default security.exec.allow list, fixes bugs including resource transformation chaining after content access, and...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/99cbbadd5367b8da56690cdfcc463568?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/99cbbadd5367b8da56690cdfcc463568?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Hugo","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Hugo","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/0b9e9e4bd6dc4a96bba3ca9663c6d6b7","url":"https://daily.dev/sources/hugo"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/release-v0-165-0-gohugoio-hugo-4zn1e82fe","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,golang","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Hugo","item":"https://daily.dev/sources/hugo"},{"@type":"ListItem","position":3,"name":"Release v0.165.0 · gohugoio/hugo"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/release-v0-165-0-gohugoio-hugo-4zn1e82fe#faq","mainEntity":[{"@type":"Question","name":"Why was tailwindcss removed from Hugo's default security.exec.allow list in v0.165.0?","acceptedAnswer":{"@type":"Answer","text":"Hugo v0.165.0 removed tailwindcss from the default security.exec.allow configuration list. Sites relying on the default allow list to execute the tailwindcss binary during builds will need to explicitly add it back to their security.exec.allow configuration, or the build will be blocked by Hugo's security policy. Track Hugo config changes like this on daily.dev before a site build unexpectedly breaks."}},{"@type":"Question","name":"What bug was fixed in Hugo v0.165.0 related to resource transformation chaining?","acceptedAnswer":{"@type":"Answer","text":"Hugo v0.165.0 fixes an issue where resource transformation chaining broke after content access, as tracked in commit f772998 under issue #15189. This addresses cases where applying multiple transformations to a resource failed once that resource's content had been accessed earlier in the pipeline. Developers debugging Hugo transformation pipelines can follow fixes like this on daily.dev."}}]} ```