chore(deps): update dependency hugo to latest (#2617)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [hugo](https://redirect.github.com/gohugoio/hugo) | tools | minor |
`0.168.0` → `0.169.0` |

---

### Release Notes

<details>
<summary>gohugoio/hugo (hugo)</summary>

###
[`v0.169.0`](https://redirect.github.com/gohugoio/hugo/releases/tag/v0.169.0)

[Compare
Source](https://redirect.github.com/gohugoio/hugo/compare/v0.168.0...v0.169.0)

The main motivation behind this release is to get out a build with [Go
1.27.3](https://redirect.github.com/golang/go/issues?q=milestone%3AGo1.27.3+label%3ACherryPickApproved),
which blocks trust in a small set of intermediate certificates due to
specific security concerns around their operation. See the [eMudhra
incident](https://go.dev/blog/emudhra-incident) for more information.
This affects Hugo features that fetch remote resources over HTTPS, e.g.
`resources.GetRemote`.

This release also contains some security hardening of the template
functions and menu entries that can render content as HTML (see below),
a deprecation of looking up reserved front matter fields via `.Params`
(also below), a faster and more robust `plainify`, and a set of bug
fixes.

#### Security notes

Templates are trusted in Hugo, but content (including front matter) is
not necessarily. This release tightens a few places where values from
content could end up rendered as unescaped HTML:

- `pre` and `post` values in menu entries defined in **front matter**
are now HTML escaped, unless `text/html` is allowed in
[`security.allowContent`](https://gohugo.io/configuration/security/),
which already marks HTML in `/content` as trusted. A warning
(`warning-menu-pre-post-html-escaped`) is logged when a value containing
HTML markup is escaped. Menu entries defined in the project
configuration are not affected.
[`f63482b`](https://redirect.github.com/gohugoio/hugo/commit/f63482bf)
- `emojify` and `plainify` now return a `string` unless the input is
`template.HTML`, in which case the result is also `template.HTML`.
Previously both always returned `template.HTML`, so e.g. `{{ .Title |
emojify }}` would mark a potentially unsafe title as safe HTML. If you
relied on the old behavior with trusted input, pipe the result through
`safeHTML`. Thanks to
[@&#8203;Reload3d](https://redirect.github.com/Reload3d) for reporting
this.
[#&#8203;15452](https://redirect.github.com/gohugoio/hugo/issues/15452)

#### Deprecations

Reserved front matter fields such as `title`, `date` and `summary` are
currently also stored in `.Params`. Lookups such as `.Params.title` (and
`ByParam "title"`, `where .Pages "Params.title" ...` etc.) are now
redirected to the corresponding `Page` method and logged as deprecated,
unless the field was set in the `params` section of front matter. The
content of `.Params` is unchanged for now.
[`53e1fef`](https://redirect.github.com/gohugoio/hugo/commit/53e1fef9)

| Deprecated               | Use instead         |
| ------------------------ | ------------------- |
| `.Params.date`           | `.Date`             |
| `.Params.description`    | `.Description`      |
| `.Params.draft`          | `.Draft`            |
| `.Params.expirydate`     | `.ExpiryDate`       |
| `.Params.keywords`       | `.Keywords`         |
| `.Params.lastmod`        | `.Lastmod`          |
| `.Params.layout`         | `.Layout`           |
| `.Params.linktitle`      | `.LinkTitle`        |
| `.Params.publishdate`    | `.PublishDate`      |
| `.Params.slug`           | `.Slug`             |
| `.Params.summary`        | `.RawSummary` (new) |
| `.Params.title`          | `.Title`            |
| `.Params.translationkey` | `.TranslationKey`   |
| `.Params.type`           | `.Type`             |
| `.Params.weight`         | `.Weight`           |

#### Bug fixes

- hugolib: Fix template change detection when saving via temp file and
rename
[`46e51f3`](https://redirect.github.com/gohugoio/hugo/commit/46e51f30)
[@&#8203;bep](https://redirect.github.com/bep)
[#&#8203;15484](https://redirect.github.com/gohugoio/hugo/issues/15484)
- markup/goldmark: Fix auto heading ID when link text starts with a
bracket
[`c22158c`](https://redirect.github.com/gohugoio/hugo/commit/c22158c1)
[@&#8203;chanellebingham](https://redirect.github.com/chanellebingham)
[#&#8203;15472](https://redirect.github.com/gohugoio/hugo/issues/15472)
- urls: Fix JoinPath panic with empty slice
[`ce5d232`](https://redirect.github.com/gohugoio/hugo/commit/ce5d232b)
[@&#8203;Ferdinand-MZ](https://redirect.github.com/Ferdinand-MZ)
[#&#8203;15473](https://redirect.github.com/gohugoio/hugo/issues/15473)
- js: Fix js.Build with browser-disabled extensionless requires
[`2efee51`](https://redirect.github.com/gohugoio/hugo/commit/2efee511)
[@&#8203;bep](https://redirect.github.com/bep)
[#&#8203;15481](https://redirect.github.com/gohugoio/hugo/issues/15481)
- Fix Site.Key used in e.g. partialCached
[`b86e0ca`](https://redirect.github.com/gohugoio/hugo/commit/b86e0caa)
[@&#8203;bep](https://redirect.github.com/bep)
[#&#8203;15466](https://redirect.github.com/gohugoio/hugo/issues/15466)
- ci: Fix Windows running out of disk space and simplify test runs
[`77230eb`](https://redirect.github.com/gohugoio/hugo/commit/77230eba)
[@&#8203;bep](https://redirect.github.com/bep)
- hugolib: Fix build hang after too many page render errors
[`85fb23f`](https://redirect.github.com/gohugoio/hugo/commit/85fb23f1)
[@&#8203;bep](https://redirect.github.com/bep)
[#&#8203;15449](https://redirect.github.com/gohugoio/hugo/issues/15449)
- tpl/cast: Fix nil pointer panic in hugo gen docshelper
[`8df3180`](https://redirect.github.com/gohugoio/hugo/commit/8df31809)
[@&#8203;jmooring](https://redirect.github.com/jmooring)
[#&#8203;15444](https://redirect.github.com/gohugoio/hugo/issues/15444)

#### Improvements

- Redirect .Params.title etc. to .Title etc. and deprecate it
[`53e1fef`](https://redirect.github.com/gohugoio/hugo/commit/53e1fef9)
[@&#8203;bep](https://redirect.github.com/bep)
- ci: Revert to plain go install
honnef.co/go/tools/cmd/staticcheck\@&#8203;latest
[`3e67572`](https://redirect.github.com/gohugoio/hugo/commit/3e67572c)
[@&#8203;bep](https://redirect.github.com/bep)
- navigation: Escape pre/post in front matter menu entries
[`f63482b`](https://redirect.github.com/gohugoio/hugo/commit/f63482bf)
[@&#8203;bep](https://redirect.github.com/bep)
- Upgrade to Go 1.27.3
[`7343fc9`](https://redirect.github.com/gohugoio/hugo/commit/7343fc9c)
[@&#8203;bep](https://redirect.github.com/bep)
- resources: Make processed image key stable across builds
[`ff4eab7`](https://redirect.github.com/gohugoio/hugo/commit/ff4eab75)
[@&#8203;bep](https://redirect.github.com/bep)
[#&#8203;15467](https://redirect.github.com/gohugoio/hugo/issues/15467)
- tpl: Make StripHTML (plainify) more robust and faster
[`7ec3a36`](https://redirect.github.com/gohugoio/hugo/commit/7ec3a366)
[@&#8203;bep](https://redirect.github.com/bep)
[#&#8203;15462](https://redirect.github.com/gohugoio/hugo/issues/15462)
- tpl/transform: Make emojify and plainify preserve template.HTML input
type
[`895f583`](https://redirect.github.com/gohugoio/hugo/commit/895f5837)
[@&#8203;bep](https://redirect.github.com/bep)
[#&#8203;15452](https://redirect.github.com/gohugoio/hugo/issues/15452)
- Make emojify return a string
[`87bf585`](https://redirect.github.com/gohugoio/hugo/commit/87bf5858)
[@&#8203;bep](https://redirect.github.com/bep)
[#&#8203;15452](https://redirect.github.com/gohugoio/hugo/issues/15452)
- Skip staticcheck in check.sh unless --full is set
[`9d50291`](https://redirect.github.com/gohugoio/hugo/commit/9d502917)
[@&#8203;bep](https://redirect.github.com/bep)
[#&#8203;15453](https://redirect.github.com/gohugoio/hugo/issues/15453)
- Delete CLAUDE.md
[`683a877`](https://redirect.github.com/gohugoio/hugo/commit/683a877f)
[@&#8203;bep](https://redirect.github.com/bep)

#### Dependency Updates

- build(deps): bump github.com/getkin/kin-openapi from 0.151.0 to
0.152.0
[`6e494d0`](https://redirect.github.com/gohugoio/hugo/commit/6e494d01)
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]
- build(deps): bump github.com/tdewolff/minify/v2 from 2.24.19 to
2.24.22
[`8c1fdca`](https://redirect.github.com/gohugoio/hugo/commit/8c1fdcac)
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]
- build(deps): bump github.com/tdewolff/parse/v2 from 2.8.16 to 2.8.18
[`ed22b85`](https://redirect.github.com/gohugoio/hugo/commit/ed22b85c)
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]
- build(deps): bump github.com/getkin/kin-openapi from 0.149.0 to
0.151.0
[`4102d1a`](https://redirect.github.com/gohugoio/hugo/commit/4102d1af)
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]
- build(deps): bump golang.org/x/tools from 0.51.0 to 0.52.0
[`ac5af66`](https://redirect.github.com/gohugoio/hugo/commit/ac5af664)
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled because a matching PR was automerged
previously.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/prometheus/client_java).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODguMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE4OC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]