Update: add a workflow to update image

.github/workflows/update-hugo.yml

@@ -0,0 +1,24 @@
+---
+name: update-hugo
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 0 * * *'
+
+permissions:
+  contents: "write"
+  pull-requests: "write"
+
+jobs:
+  updatecli:
+    runs-on: "ubuntu-latest"
+    steps:
+      - uses: actions/checkout@v4
+      - uses: updatecli/updatecli-action@v2
+      - run: "updatecli diff --config ./updatecli/updatecli.d --values updatecli/values.yaml"
+        env:
+          UPDATECLI_GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
+      - run: "updatecli apply --config ./updatecli/updatecli.d --values updatecli/values.yaml"
+        env:
+          UPDATECLI_GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"

updatecli/updatecli.d/hugo.yaml

@@ -0,0 +1,48 @@
+name: Update Hugo from upstream
+
+scms:
+  default:
+    kind: github
+    spec:
+      user: "{{ .github.user }}"
+      email: "{{ .github.email }}"
+      owner: "{{ .github.owner }}"
+      repository: "{{ .github.repository }}"
+      token: "{{ requiredEnv .github.token }}"
+      branch: "{{ .github.branch }}"
+
+sources:
+  gohugo:
+    name: Get latest Hugo release
+    kind: githubrelease
+    spec:
+      owner: "gohugoio"
+      repository: "hugo"
+      token: '{{ requiredEnv "GITHUB_TOKEN" }}'
+      versionfilter:
+        kind: latest
+    transformers:
+    - trimprefix: 'v'
+
+targets:
+  dockerfile:
+    name: Update Dockerfile ARG HUGO_VERSION
+    kind: dockerfile
+    scmid: default
+    sourceid: gohugo
+    spec:
+      file: Dockerfile
+      instruction:
+        keyword: ARG
+        matcher: HUGO_VERSION
+
+actions:
+  default:
+    kind: github/pullrequest
+    scmid: default
+    title: 'Update Hugo version to {{ source "gohugo" }}'
+    spec:
+      automerge: false
+      labels:
+      - dependencies
+      - enhancement

updatecli/values.yaml

@@ -0,0 +1,7 @@
+github:
+  user: "GitHub Actions Bot"
+  owner: "hostwithquantum"
+  repository: hugo-docker
+  token: "UPDATECLI_GITHUB_TOKEN"
+  branch: main
+  hidecredit: true