[renovate]

This PR contains the following updates:

Package	Update	Change
go-task/task	minor	v3.53.1 → v3.54.0

---

Release Notes

go-task/task

v3.54.0

Compare Source

🚀 Features

• Added versioned Homebrew casks (go-task@<major>.<minor>) to install a
  specific minor version of Task (#​3023 by @​vmaerten).
• Added a remote.headers config option to send HTTP headers when downloading a
  remote Taskfile, configured per host. Header values support templating
  functions, e.g. {{env "GITLAB_TOKEN"}}. This keeps the credential out of the
  include URL, where it would leak into error messages and the confirmation
  prompt (#​2329 by @​vmaerten).

🐛 Fixes

• Fixed remote Git Taskfile cache poisoning on shared hosts (GHSA-679p-658w-m3wr,
  reported by @​danielcadev, fixed by @​vmaerten).

• Fixed tasks cancelled by the user returning exit code 201 instead of 205
  (#​3040, #​3041 by @​r3wretrhy).

• Fixed a bug on Windows where watching source paths did not work as expected
  (#​2863, #​3028 by @​pd93).

• Fixed a remote Taskfile whose server refuses the credentials being reported as
  a missing Taskfile. A 401 now stops the search and reports the status code,
  instead of retrying every default Taskfile name and concluding that no
  Taskfile exists (#​2329 by @​vmaerten).

• task --completion <shell> now serves a new completion engine that unifies
  Bash, Fish, Zsh, Nushell and PowerShell behind a single task __complete
  command, so every shell offers the same suggestions: task names, aliases,
  flags, flag values and per-task CLI variables. The Zsh show-aliases and
  verbose zstyles keep working, now backed by the --no-aliases and
  --no-descriptions completion flags (#​2897 by @​vmaerten).

📦 Package API

• Bumped the minimum Go version to 1.26. Task follows Go's two-latest support
  window, and is now tested against 1.26 and 1.27. This only affects projects
  importing Task as a Go module (#​2920 by @​vmaerten).

Other

• Refactored some functional options to always return a concrete type instead of
  an interface and moved options into their own file (#​3037 by @​pd93).
• Refactored the execext package to use mvdan/sh's new BashOpts API (#​3035 by
  @​pd93).

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • Between 09:00 AM and 12:59 PM, only on Sunday and Saturday (* 9-12 * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: c07e0e93-9c25-4be4-9864-2e331d41ae8c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}