chore(deps): bump github.com/go-task/task/v3 from 3.51.1 to 3.53.1

[dependabot]

Bumps github.com/go-task/task/v3 from 3.51.1 to 3.53.1.

Release notes

Sourced from github.com/go-task/task/v3's releases.

v3.53.1

🚀 Features

• Remote Taskfiles are now generally available! This has been an experimental feature for 3 years, but is now enabled by default. Massive thanks to all those that contributed and gave feedback (too many to list here). We've also given the Remote Taskfiles documentation a bit of a polish (#1317, #2906 by @​pd93).
• Added a per-command timeout that terminates a command once it exceeds the given duration (Go duration syntax). It covers shell commands, task calls, deferred commands, deps and the if condition, obeys ignore_error, and reports exit code 124. Callers that join a run: once or when_changed task already running now honor their own timeout, and inherit that task's failure instead of being told it succeeded (#1569, #2898 by @​vmaerten).
• Considerably improve performance of fingerprinting on large repositories (monorepos). Fingerprinting is up to 86% faster and make up to 70% fewer memory allocations on the more advanced scenarios. Benchmarks were added as well. We're basically skipping work when not needed. (#2853, #2883 by @​Napolitain, #2884 by @​Napolitain).
• Further improved fingerprinting performance on large repositories: hashing source files now reuses a single buffer, reducing memory allocations by ~98% and wall-clock time by ~7% (#2925 by @​vmaerten).
• includes.excludes can now exclude a whole namespace: append :* to the namespace name, e.g. excludes: ['debug:*']. Bare entries still match a single task name exactly (#2300, #2959 by @​xmxxc).
• Added support for enum.ref in --interactive prompts. Required vars using enum.ref now show the selection list like static enums, instead of falling back to free-form input (#2817 by @​vmaerten).
• Added Nushell completions, available via task --completion nu. They complete task names and aliases, every flag with its description, and the values of --completion, --output and --sort (#2966 by @​vmaerten).
• Added a verbose log line for failed tasks. In --verbose mode, a task whose command exits non-zero now reports task: "<name>" failed: <error> instead of stopping without a trace (#2240 by @​Drino).

🐛 Fixes

• Fixed a pinned checksum: not being verified when a remote Taskfile came from the cache (#2980 by @​vmaerten).
• Fixed the fingerprint variable ({{.CHECKSUM}}/{{.TIMESTAMP}}) ignoring a method: set at the Taskfile level: the variable now follows the same method resolution as the up-to-date check. Only the variable matching the effective method is injected, so a task inheriting a Taskfile-level method: timestamp gets {{.TIMESTAMP}} and no longer a {{.CHECKSUM}} (which now renders as an empty string), and neither variable is injected when the effective method is none (#2924 by @​vmaerten).
• Fixed ref: in for: matrix: and enum: only accepting literal lists. Refs computed with template functions like keys or splitList no longer fail with "must resolve to a list" (#2544, #2956 by @​no-hup).
• Fixed pressing Esc at an interactive variable prompt not cancelling the run (#2942 by @​anilnatha).
• Fixed joinUrl collapsing the // in a URL scheme (e.g. producing http:/localhost instead of http://localhost) (#2915 by @​vsaraikin).
• Fixed the JSON schema rejecting ignore_error on a command inside a for loop. Editors no longer flag a Taskfile that Task runs perfectly fine (#2044 by @​gokeefe-atb).
• Fixed the JSON schema rejecting more keys the Taskfile parser accepts: ignore_error on a task: call, and if, set and shopt on a command inside a for loop (#2967 by @​vmaerten).

📚 Documentation & Website

• Updated taskfile versions doc to mention when version checks were introduced (#2184 by @​jubr).
• Load the sidebar data and titles/excerpts from the blog post markdown document and its frontmatter on the website (#2981 by @​pd93).

v3.52.0

• Fixed --interactive prompts for required vars sometimes appearing in a random order. Prompts now follow the order the vars are declared in the Taskfile. (#2871 by @​caproven)
• Fixed Fish completions not being picked up correctly by installing them to Fish's vendor_completions.d directory instead of completions (#2850, #2859 by @​Legimity).
• PowerShell completions now work with aliases of the task command, not just the task binary itself (#2852 by @​kojiishi).
• Fixed task and namespace aliases not being completed by the Zsh completion. A show-aliases zstyle can turn this off (#2865, #2864 by @​vmaerten).
• Fixed task names containing certain characters (e.g. \, _, ^) leaking into checksum/timestamp filenames, breaking sources:/generates: up-to-date detection (#2886 by @​s3onghyun).
• Fixed for: matrix: loops using ref: rows producing wrong values when the same task was run concurrently (e.g. by parallel deps) with different vars (#2890, #2894 by @​amitmishra11).
• Added a secret: true flag for variables that masks their value in logs, task --summary, and command output (#2514 by @​vmaerten).
• Added the use_gitignore setting (global or per-task) to skip files matched by your .gitignore when fingerprinting sources/generates and when watching (#2773 by @​vmaerten).
• Added support for configuring output flags (--output, --output-group-begin, --output-group-end, --output-group-error-only) via the TASK_OUTPUT* environment variables (#2873 by @​liiight).
• Added a --temp-dir flag (with TASK_TEMP_DIR env var and temp-dir taskrc config) to customise the directory where Task stores temporary files such as checksums. Relative paths are resolved against the root Taskfile (#2891 by @​kjasn).
• Defined environment variable behavior for remote taskfiles (#2267, #2847 by @​vmaerten).
• Added support for remote Taskfiles hosted on Azure DevOps, whose git URLs use a /_git/ path segment rather than a .git suffix (#2904 by @​pd93).
• Re-added the example remote taskfile at taskfile.dev/Taskfile.yml (#2905 by @​pd93).
• Fixed malformed includes: entries (missing taskfile/dir) reporting a misleading "include cycle detected" error instead of a clear configuration error (#1881, #2892 by @​Lewin671).

Changelog

Sourced from github.com/go-task/task/v3's changelog.

v3.53.1 - 2026-08-18

🚀 Features

• Remote Taskfiles are now generally available! This has been an experimental feature for 3 years, but is now enabled by default. Massive thanks to all those that contributed and gave feedback (too many to list here). We've also given the Remote Taskfiles documentation a bit of a polish (#1317, #2906 by @​pd93).
• Added a per-command timeout that terminates a command once it exceeds the given duration (Go duration syntax). It covers shell commands, task calls, deferred commands, deps and the if condition, obeys ignore_error, and reports exit code 124. Callers that join a run: once or when_changed task already running now honor their own timeout, and inherit that task's failure instead of being told it succeeded (#1569, #2898 by @​vmaerten).
• Considerably improve performance of fingerprinting on large repositories (monorepos). Fingerprinting is up to 86% faster and make up to 70% fewer memory allocations on the more advanced scenarios. Benchmarks were added as well. We're basically skipping work when not needed. (#2853, #2883 by @​Napolitain, #2884 by @​Napolitain).
• Further improved fingerprinting performance on large repositories: hashing source files now reuses a single buffer, reducing memory allocations by ~98% and wall-clock time by ~7% (#2925 by @​vmaerten).
• includes.excludes can now exclude a whole namespace: append :* to the namespace name, e.g. excludes: ['debug:*']. Bare entries still match a single task name exactly (#2300, #2959 by @​xmxxc).
• Added support for enum.ref in --interactive prompts. Required vars using enum.ref now show the selection list like static enums, instead of falling back to free-form input (#2817 by @​vmaerten).
• Added Nushell completions, available via task --completion nu. They complete task names and aliases, every flag with its description, and the values of --completion, --output and --sort (#2966 by @​vmaerten).
• Added a verbose log line for failed tasks. In --verbose mode, a task whose command exits non-zero now reports task: "<name>" failed: <error> instead of stopping without a trace (#2240 by @​Drino).

🐛 Fixes

• Fixed a pinned checksum: not being verified when a remote Taskfile came from the cache (#2980 by @​vmaerten).
• Fixed the fingerprint variable ({{.CHECKSUM}}/{{.TIMESTAMP}}) ignoring a method: set at the Taskfile level: the variable now follows the same method resolution as the up-to-date check. Only the variable matching the effective method is injected, so a task inheriting a Taskfile-level method: timestamp gets {{.TIMESTAMP}} and no longer a {{.CHECKSUM}} (which now renders as an empty string), and neither variable is injected when the effective method is none (#2924 by @​vmaerten).
• Fixed ref: in for: matrix: and enum: only accepting literal lists. Refs computed with template functions like keys or splitList no longer fail

... (truncated)

Commits

• ff3372f v3.53.1
• beed208 fix(ci): run pnpm install from the website directory
• 3ae5b31 chore: remove accidentally committed worktree gitlink
• 1530114 v3.53.0
• 2449247 feat(homebrew): migrate from Formula to Cask (#2702)
• ed98857 docs: credit JetBrains for the open source licenses (#2984)
• 4bcc01f feat: add blog post for remote taskfiles (#2974)
• d9d0e44 chore(deps): update all non-major dependencies (#2978)
• 936b90c feat(website): serve the released docs from a versioned copy (#2979)
• b7836eb feat: set content type for example remote taskfile
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)