chore(deps): update dependency go-task/task to v3.54.0

[renovate]

This PR contains the following updates:

Package	Update	Change
go-task/task	minor	v3.50.0 → v3.54.0

---

Release Notes

go-task/task (go-task/task)

v3.54.0

Compare Source

🚀 Features

• Added versioned Homebrew casks (go-task@<major>.<minor>) to install a
  specific minor version of Task (#​3023 by @​vmaerten).
• Added a remote.headers config option to send HTTP headers when downloading a
  remote Taskfile, configured per host. Header values support templating
  functions, e.g. {{env "GITLAB_TOKEN"}}. This keeps the credential out of the
  include URL, where it would leak into error messages and the confirmation
  prompt (#​2329 by @​vmaerten).

🐛 Fixes

• Fixed remote Git Taskfile cache poisoning on shared hosts (GHSA-679p-658w-m3wr,
  reported by @​danielcadev, fixed by @​vmaerten).

• Fixed tasks cancelled by the user returning exit code 201 instead of 205
  (#​3040, #​3041 by @​r3wretrhy).

• Fixed a bug on Windows where watching source paths did not work as expected
  (#​2863, #​3028 by @​pd93).

• Fixed a remote Taskfile whose server refuses the credentials being reported as
  a missing Taskfile. A 401 now stops the search and reports the status code,
  instead of retrying every default Taskfile name and concluding that no
  Taskfile exists (#​2329 by @​vmaerten).

• task --completion <shell> now serves a new completion engine that unifies
  Bash, Fish, Zsh, Nushell and PowerShell behind a single task __complete
  command, so every shell offers the same suggestions: task names, aliases,
  flags, flag values and per-task CLI variables. The Zsh show-aliases and
  verbose zstyles keep working, now backed by the --no-aliases and
  --no-descriptions completion flags (#​2897 by @​vmaerten).

📦 Package API

• Bumped the minimum Go version to 1.26. Task follows Go's two-latest support
  window, and is now tested against 1.26 and 1.27. This only affects projects
  importing Task as a Go module (#​2920 by @​vmaerten).

Other

• Refactored some functional options to always return a concrete type instead of
  an interface and moved options into their own file (#​3037 by @​pd93).
• Refactored the execext package to use mvdan/sh's new BashOpts API (#​3035 by
  @​pd93).

v3.53.1

Compare Source

🚀 Features

• Remote Taskfiles are now generally available! This has been an
  experimental feature for 3 years, but is now enabled by default. Massive
  thanks to all those that contributed and gave feedback (too many to list
  here). We've also given the
  Remote Taskfiles documentation a
  bit of a polish (#​1317, #​2906 by @​pd93).
• Added a per-command timeout that terminates a command once it exceeds the
  given duration (Go duration syntax). It covers shell commands, task calls,
  deferred commands, deps and the if condition, obeys ignore_error, and
  reports exit code 124. Callers that join a run: once or when_changed
  task already running now honor their own timeout, and inherit that task's
  failure instead of being told it succeeded (#​1569, #​2898 by @​vmaerten).
• Considerably improve performance of fingerprinting on large repositories
  (monorepos). Fingerprinting is up to 86% faster and make up to 70% fewer
  memory allocations on the more advanced scenarios. Benchmarks were added as
  well. We're basically skipping work when not needed. (#​2853, #​2883 by
  @​Napolitain, #​2884 by @​Napolitain).
• Further improved fingerprinting performance on large repositories: hashing
  source files now reuses a single buffer, reducing memory allocations by ~98%
  and wall-clock time by ~7% (#​2925 by @​vmaerten).
• includes.excludes can now exclude a whole namespace: append :* to the
  namespace name, e.g. excludes: ['debug:*']. Bare entries still match a
  single task name exactly (#​2300, #​2959 by @​xmxxc).
• Added support for enum.ref in --interactive prompts. Required vars using
  enum.ref now show the selection list like static enums, instead of falling
  back to free-form input (#​2817 by @​vmaerten).
• Added Nushell completions, available via task --completion nu. They complete
  task names and aliases, every flag with its description, and the values of
  --completion, --output and --sort (#​2966 by @​vmaerten).
• Added a verbose log line for failed tasks. In --verbose mode, a task whose
  command exits non-zero now reports task: "<name>" failed: <error> instead of
  stopping without a trace (#​2240 by @​Drino).

🐛 Fixes

• Fixed a pinned checksum: not being verified when a remote Taskfile came from
  the cache (#​2980 by @​vmaerten).
• Fixed the fingerprint variable ({{.CHECKSUM}}/{{.TIMESTAMP}}) ignoring a
  method: set at the Taskfile level: the variable now follows the same method
  resolution as the up-to-date check. Only the variable matching the effective
  method is injected, so a task inheriting a Taskfile-level method: timestamp
  gets {{.TIMESTAMP}} and no longer a {{.CHECKSUM}} (which now renders as an
  empty string), and neither variable is injected when the effective method is
  none (#​2924 by @​vmaerten).
• Fixed ref: in for: matrix: and enum: only accepting literal lists. Refs
  computed with template functions like keys or splitList no longer fail
  with "must resolve to a list" (#​2544, #​2956 by @​no-hup).
• Fixed pressing Esc at an interactive variable prompt not cancelling the run
  (#​2942 by @​anilnatha).
• Fixed joinUrl collapsing the // in a URL scheme (e.g. producing
  http:/localhost instead of http://localhost) (#​2915 by @​vsaraikin).
• Fixed the JSON schema rejecting ignore_error on a command inside a for
  loop. Editors no longer flag a Taskfile that Task runs perfectly fine (#​2044
  by @​gokeefe-atb).
• Fixed the JSON schema rejecting more keys the Taskfile parser accepts:
  ignore_error on a task: call, and if, set and shopt on a command
  inside a for loop (#​2967 by @​vmaerten).

📚 Documentation & Website

• Updated taskfile versions doc to mention when version checks were introduced
  (#​2184 by @​jubr).
• Load the sidebar data and titles/excerpts from the blog post markdown document
  and its frontmatter on the website (#​2981 by @​pd93).

v3.52.0

Compare Source

• Fixed --interactive prompts for required vars sometimes appearing in a random
  order. Prompts now follow the order the vars are declared in the Taskfile.
  (#​2871 by @​caproven)
• Fixed Fish completions not being picked up correctly by installing them to
  Fish's vendor_completions.d directory instead of completions (#​2850, #​2859
  by @​Legimity).
• PowerShell completions now work with aliases of the task command, not just
  the task binary itself (#​2852 by @​kojiishi).
• Fixed task and namespace aliases not being completed by the Zsh completion. A
  show-aliases zstyle can turn this off (#​2865, #​2864 by @​vmaerten).
• Fixed task names containing certain characters (e.g. \, _, ^) leaking
  into checksum/timestamp filenames, breaking sources:/generates: up-to-date
  detection (#​2886 by @​s3onghyun).
• Fixed for: matrix: loops using ref: rows producing wrong values when the
  same task was run concurrently (e.g. by parallel deps) with different vars
  (#​2890, #​2894 by @​amitmishra11).
• Added a secret: true flag for variables that masks their value in logs,
  task --summary, and command output (#​2514 by @​vmaerten).
• Added the use_gitignore setting (global or per-task) to skip files matched
  by your .gitignore when fingerprinting sources/generates and when
  watching (#​2773 by @​vmaerten).
• Added support for configuring output flags (--output,
  --output-group-begin, --output-group-end, --output-group-error-only) via
  the TASK_OUTPUT* environment variables (#​2873 by @​liiight).
• Added a --temp-dir flag (with TASK_TEMP_DIR env var and temp-dir taskrc
  config) to customise the directory where Task stores temporary files such as
  checksums. Relative paths are resolved against the root Taskfile (#​2891 by
  @​kjasn).
• Defined environment variable behavior for remote taskfiles (#​2267, #​2847 by
  @​vmaerten).
• Added support for remote Taskfiles hosted on Azure DevOps, whose git URLs use
  a /_git/ path segment rather than a .git suffix (#​2904 by @​pd93).
• Re-added the example remote taskfile at
  taskfile.dev/Taskfile.yml (#​2905 by
  @​pd93).
• Fixed malformed includes: entries (missing taskfile/dir) reporting a
  misleading "include cycle detected" error instead of a clear configuration
  error (#​1881, #​2892 by @​Lewin671).

v3.51.1

Compare Source

• A significant performance boost was achieved for large Taskfiles (monorepos)
  by skipping templating altogether when the string is static (#​2820 by @​romnn).
• Added absPath template function that resolves a path to its absolute form,
  cleaning .. and . components (#​2681, #​2788 by @​mateenanjum).
• Added joinEnv function to join paths based on your oprating system: ; for
  Windows and : elsewhere, and joinUrl to join URL paths. Also, added two
  new special variables: FILE_PATH_SEPARATOR which returns \ on Windows and
  / elsewhere, and PATH_LIST_SEPARATOR which returns ; on Windows and :
  elsewhere (#​2406, #​2408 by @​solvingj).
• Update the shell interpreter with a regression fix (#​2812, #​2832 by
  @​andreynering).
• Fix potential panic with the shell interpreter (#​2810 by @​trulede).

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • Between 08:00 PM and 11:59 PM, Monday through Friday (* 20-23 * * 1-5)
  • Between 09:00 AM and 09:59 PM, only on Sunday and Saturday (* 9-21 * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 9ef82b74-3d71-4a9d-b313-d9f9b7261cfa

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}