From 9e170fdf659d89235acb90115c32edbf2cf851f5 Mon Sep 17 00:00:00 2001
From: Axel Vasquez <axelv@squez.com.ar>
Date: Thu, 25 Jun 2026 09:14:53 +0300
Subject: [PATCH 1/4] chore(workflow): Build check with Hugo v163.3

---
 .github/workflows/check.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index 9964a2fb..80a8ef34 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -12,7 +12,7 @@ jobs:
   Build:
     runs-on: ubuntu-latest
     env:
-      HUGO_VERSION: "0.161.1"
+      HUGO_VERSION: "0.163.3"
     steps:
       - name: Checkout code
         uses: actions/checkout@v5

From bcf8f1cb66f26f77aa418dda0f638faa94b61608 Mon Sep 17 00:00:00 2001
From: Axel Vasquez <axelv@squez.com.ar>
Date: Sun, 28 Jun 2026 19:04:34 -0300
Subject: [PATCH 2/4] chore(config): Add default security configuration

---
 config.toml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/config.toml b/config.toml
index 549a24fb..ebfd8bef 100644
--- a/config.toml
+++ b/config.toml
@@ -79,3 +79,23 @@ footnoteReturnLinkContents = ":leftwards_arrow_with_hook:"
 
 [author]
     name = "Sysarmy"
+
+[security]
+  allowContent = ['! ^text/html$']
+  enableInlineShortcodes = false
+  [security.exec]
+    allow = ['^(dart-)?sass(-embedded)?$', '^go$', '^git$', '^node$', '^postcss$', '^tailwindcss$']
+    osEnv = ['(?i)^((HTTPS?|NO)_PROXY|PATH(EXT)?|APPDATA|TE?MP|TERM|GO\w+|(XDG_CONFIG_)?HOME|USERPROFILE|SSH_AUTH_SOCK|DISPLAY|LANG|SYSTEMDRIVE|PROGRAMDATA)$']
+  [security.funcs]
+    getenv = ['^HUGO_', '^CI$']
+  [security.http]
+    methods = ['(?i)GET|POST']
+    urls = ['(?i)^https?://[a-z0-9]', '! ^https?://\d+\.', '! (?i)localhost', '! (?i)^https?://[^/?#]*@']
+  [security.node]
+    [security.node.permissions]
+      allowAddons = ['tailwindcss']
+      allowChildProcess = ['tailwindcss']
+      allowRead = ['.']
+      allowWorker = ['tailwindcss']
+      allowWrite = []
+      disable = false

From a04fd610706f559fba9ddb81aea8a474c473a576 Mon Sep 17 00:00:00 2001
From: Axel Vasquez <axelv@squez.com.ar>
Date: Sun, 28 Jun 2026 19:48:38 -0300
Subject: [PATCH 3/4] chore(config): Fix allow content configuration

---
 config.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config.toml b/config.toml
index ebfd8bef..a974445f 100644
--- a/config.toml
+++ b/config.toml
@@ -81,7 +81,7 @@ footnoteReturnLinkContents = ":leftwards_arrow_with_hook:"
     name = "Sysarmy"
 
 [security]
-  allowContent = ['! ^text/html$']
+  allowContent = ['text/html', 'text/markdown']
   enableInlineShortcodes = false
   [security.exec]
     allow = ['^(dart-)?sass(-embedded)?$', '^go$', '^git$', '^node$', '^postcss$', '^tailwindcss$']

From 1064ba43e307c0f8cdb48f1ed1b3bbbbabdd65e9 Mon Sep 17 00:00:00 2001
From: Axel Vasquez <axelv@squez.com.ar>
Date: Mon, 29 Jun 2026 15:19:55 -0300
Subject: [PATCH 4/4] chore(workflow): Build with Hugo v163.3

---
 .github/workflows/push.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index 911f1556..8cbd8f36 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -13,7 +13,7 @@ jobs:
     env:
       GITHUB_BRANCH: gh-pages
       GIT_DEPLOY_KEY: ${{ secrets.GIT_DEPLOY_KEY }}
-      HUGO_VERSION: "0.161.1"
+      HUGO_VERSION: "0.163.3"
     steps:
       - name: Checkout code
         uses: actions/checkout@v3