chore(deps): bump github.com/go-task/task/v3 from 3.51.1 to 3.52.0

[dependabot]

Bumps github.com/go-task/task/v3 from 3.51.1 to 3.52.0.

Release notes

Sourced from github.com/go-task/task/v3's releases.

v3.52.0

• Fixed --interactive prompts for required vars sometimes appearing in a random order. Prompts now follow the order the vars are declared in the Taskfile. (#2871 by @​caproven)
• Fixed Fish completions not being picked up correctly by installing them to Fish's vendor_completions.d directory instead of completions (#2850, #2859 by @​Legimity).
• PowerShell completions now work with aliases of the task command, not just the task binary itself (#2852 by @​kojiishi).
• Fixed task and namespace aliases not being completed by the Zsh completion. A show-aliases zstyle can turn this off (#2865, #2864 by @​vmaerten).
• Fixed task names containing certain characters (e.g. \, _, ^) leaking into checksum/timestamp filenames, breaking sources:/generates: up-to-date detection (#2886 by @​s3onghyun).
• Fixed for: matrix: loops using ref: rows producing wrong values when the same task was run concurrently (e.g. by parallel deps) with different vars (#2890, #2894 by @​amitmishra11).
• Added a secret: true flag for variables that masks their value in logs, task --summary, and command output (#2514 by @​vmaerten).
• Added the use_gitignore setting (global or per-task) to skip files matched by your .gitignore when fingerprinting sources/generates and when watching (#2773 by @​vmaerten).
• Added support for configuring output flags (--output, --output-group-begin, --output-group-end, --output-group-error-only) via the TASK_OUTPUT* environment variables (#2873 by @​liiight).
• Added a --temp-dir flag (with TASK_TEMP_DIR env var and temp-dir taskrc config) to customise the directory where Task stores temporary files such as checksums. Relative paths are resolved against the root Taskfile (#2891 by @​kjasn).
• Defined environment variable behavior for remote taskfiles (#2267, #2847 by @​vmaerten).
• Added support for remote Taskfiles hosted on Azure DevOps, whose git URLs use a /_git/ path segment rather than a .git suffix (#2904 by @​pd93).
• Re-added the example remote taskfile at taskfile.dev/Taskfile.yml (#2905 by @​pd93).
• Fixed malformed includes: entries (missing taskfile/dir) reporting a misleading "include cycle detected" error instead of a clear configuration error (#1881, #2892 by @​Lewin671).

Changelog

Sourced from github.com/go-task/task/v3's changelog.

v3.52.0 - 2026-07-02

• Fixed --interactive prompts for required vars sometimes appearing in a random order. Prompts now follow the order the vars are declared in the Taskfile. (#2871 by @​caproven)
• Fixed Fish completions not being picked up correctly by installing them to Fish's vendor_completions.d directory instead of completions (#2850, #2859 by @​Legimity).
• PowerShell completions now work with aliases of the task command, not just the task binary itself (#2852 by @​kojiishi).
• Fixed task and namespace aliases not being completed by the Zsh completion. A show-aliases zstyle can turn this off (#2865, #2864 by @​vmaerten).
• Fixed task names containing certain characters (e.g. \, _, ^) leaking into checksum/timestamp filenames, breaking sources:/generates: up-to-date detection (#2886 by @​s3onghyun).
• Fixed for: matrix: loops using ref: rows producing wrong values when the same task was run concurrently (e.g. by parallel deps) with different vars (#2890, #2894 by @​amitmishra11).
• Added a secret: true flag for variables that masks their value in logs, task --summary, and command output (#2514 by @​vmaerten).
• Added the use_gitignore setting (global or per-task) to skip files matched by your .gitignore when fingerprinting sources/generates and when watching (#2773 by @​vmaerten).
• Added support for configuring output flags (--output, --output-group-begin, --output-group-end, --output-group-error-only) via the TASK_OUTPUT* environment variables (#2873 by @​liiight).
• Added a --temp-dir flag (with TASK_TEMP_DIR env var and temp-dir taskrc config) to customise the directory where Task stores temporary files such as checksums. Relative paths are resolved against the root Taskfile (#2891 by @​kjasn).
• Defined environment variable behavior for remote taskfiles (#2267, #2847 by @​vmaerten).
• Added support for remote Taskfiles hosted on Azure DevOps, whose git URLs use a /_git/ path segment rather than a .git suffix (#2904 by @​pd93).
• Re-added the example remote taskfile at taskfile.dev/Taskfile.yml (#2905 by @​pd93).
• Fixed malformed includes: entries (missing taskfile/dir) reporting a misleading "include cycle detected" error instead of a clear configuration error (#1881, #2892 by @​Lewin671).

Commits

• 536f490 v3.52.0
• 2b387c1 chore: changelog for #2892
• b5861b1 fix: reject include without taskfile or dir (#2892)
• b5f671e feat: changelog for #2905
• c7cb5e1 feat: readd example hosted remote taskfile (#2905)
• 11010d0 chore: changelog for #2904
• a6cedbe fix: remote taskfiles from ADO git path (#2904)
• 6cf0303 chore(deps): update all non-major dependencies (#2889)
• b779f85 chore(deps): update module golang.org/x/crypto to v0.52.0 [security] (#2903)
• 48b215d ci: enable indirect Go deps and group action digest updates (#2902)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

Superseded by #142.