and now the build passes with zero errors

(until I shit my pants again with some other shenanigans)

.gitea/workflows/deploy.yaml

@@ -17,11 +17,18 @@ jobs:
     steps:
       - run: echo "${{ secrets.SSH_PRIVATE_KEY }}" > /private.key
       - run: chmod 600 /private.key
+      - run: |
+          export HUGO_VERSION=$(curl --silent -I https://github.com/gohugoio/hugo/releases/latest | grep location | sed 's|.*tag/||' | tr -d '\r')
+          export HUGO_VERSION_SHORT=$(echo ${HUGO_VERSION} | sed 's/v//')
+          wget https://github.com/gohugoio/hugo/releases/download/${HUGO_VERSION}/hugo_${HUGO_VERSION_SHORT}_linux-amd64.deb
+          dpkg -i hugo_*.deb
       - uses: actions/checkout@v4
+        with:
+          submodules: true
       - run: APP_VERSION=latest make
       - run: |
-        SSH_PRIVATE_KEY=/private.key
-        SSH_USERNAME=${{ secrets.SSH_USERNAME }}
-        DEPLOYMENT_HOST=${{ secrets.DEPLOYMENT_HOST }}
-        DEPLOYMENT_PATH=${{ secrets.DEPLOYMENT_PATH }}
+          export SSH_PRIVATE_KEY=/private.key
+          export SSH_USERNAME=${{ secrets.SSH_USERNAME }}
+          export DEPLOYMENT_HOST=${{ secrets.DEPLOYMENT_HOST }}
+          export DEPLOYMENT_PATH=${{ secrets.DEPLOYMENT_PATH }}
           make deploy

makefile

@@ -4,7 +4,7 @@ include .vars
 default: build
 
 prep:
-	git submodule foreach --recursive bash -c "git checkout $$(git remote show origin | grep HEAD | sed 's/.*\: //'); git pull"
+	git submodule foreach --recursive bash -c "git checkout \$$(git remote show origin | grep HEAD | sed 's/.*\: //'); git pull"
 
 build: prep
 	./version.sh