chore(deps): update dependency go-task/task to v3.54.0

[renovate]

This PR contains the following updates:

Package	Update	Change
go-task/task	minor	v3.53.1 → v3.54.0

---

Release Notes

go-task/task (go-task/task)

v3.54.0

Compare Source

🚀 Features

• Added versioned Homebrew casks (go-task@<major>.<minor>) to install a
  specific minor version of Task (#​3023 by @​vmaerten).
• Added a remote.headers config option to send HTTP headers when downloading a
  remote Taskfile, configured per host. Header values support templating
  functions, e.g. {{env "GITLAB_TOKEN"}}. This keeps the credential out of the
  include URL, where it would leak into error messages and the confirmation
  prompt (#​2329 by @​vmaerten).

🐛 Fixes

• Fixed remote Git Taskfile cache poisoning on shared hosts (GHSA-679p-658w-m3wr,
  reported by @​danielcadev, fixed by @​vmaerten).

• Fixed tasks cancelled by the user returning exit code 201 instead of 205
  (#​3040, #​3041 by @​r3wretrhy).

• Fixed a bug on Windows where watching source paths did not work as expected
  (#​2863, #​3028 by @​pd93).

• Fixed a remote Taskfile whose server refuses the credentials being reported as
  a missing Taskfile. A 401 now stops the search and reports the status code,
  instead of retrying every default Taskfile name and concluding that no
  Taskfile exists (#​2329 by @​vmaerten).

• task --completion <shell> now serves a new completion engine that unifies
  Bash, Fish, Zsh, Nushell and PowerShell behind a single task __complete
  command, so every shell offers the same suggestions: task names, aliases,
  flags, flag values and per-task CLI variables. The Zsh show-aliases and
  verbose zstyles keep working, now backed by the --no-aliases and
  --no-descriptions completion flags (#​2897 by @​vmaerten).

📦 Package API

• Bumped the minimum Go version to 1.26. Task follows Go's two-latest support
  window, and is now tested against 1.26 and 1.27. This only affects projects
  importing Task as a Go module (#​2920 by @​vmaerten).

Other

• Refactored some functional options to always return a concrete type instead of
  an interface and moved options into their own file (#​3037 by @​pd93).
• Refactored the execext package to use mvdan/sh's new BashOpts API (#​3035 by
  @​pd93).

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • Between 09:00 AM and 09:59 PM, only on Sunday and Saturday (* 9-21 * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 787ba52e-a1a4-41b5-b6e4-47445275cb75

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}