Manage versioning of Task tool dependency

The "Task" task runner tool is used to perform all common development and maintenance operations for the project.

Previously, the version of Task was not well managed.

The GitHub Actions workflows used the latest version of Task, only constrained by major version. This meant that the
GitHub Actions workflows could break at any time through a new release of Task that contained regressions or breaking
changes.

The contributors used whichever version of Task happened to be installed on their machine. This meant that they might
get different results from that produced by the environment of the GitHub Actions workflows.

The better solution is to take the same approach for managing the Task dependency as is done for the project's other
dependencies:

* Install a specific version of Task according to a single source of versioning data.
* Use the Dependabot service to get automated update pull requests.

Since Task is a Go module-based project, this can be accomplished by using the Go modules system, which has explicit
support for tool dependencies as of the Go 1.24 release.

Author: per1234

.github/workflows/check-code-generation-task.yml

@@ -59,14 +59,10 @@ jobs:
         with:
           go-version-file: go.mod
 
-      - name: Install Task
-        uses: arduino/setup-task@v2
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          version: 3.x
-
       - name: Generate code
-        run: task go:generate
+        run: |
+          go tool \
+            github.com/go-task/task/v3/cmd/task go:generate
 
       - name: Check for forgotten code generation
         run: git diff --color --exit-code

.github/workflows/check-general-formatting-task.yml

@@ -53,11 +53,10 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v5
 
-      - name: Install Task
-        uses: arduino/setup-task@v2
+      - name: Install Go
+        uses: actions/setup-go@v6
         with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          version: 3.x
+          go-version-file: go.mod
 
       - name: Download latest editorconfig-checker release binary package
         id: download
@@ -87,6 +86,7 @@ jobs:
 
       - name: Check formatting
         run: |
-          task \
-            --silent \
-            general:check-formatting
+          go tool \
+            github.com/go-task/task/v3/cmd/task \
+              --silent \
+              general:check-formatting

.github/workflows/check-go-dependencies-task.yml

@@ -85,17 +85,12 @@ jobs:
         with:
           go-version-file: go.mod
 
-      - name: Install Task
-        uses: arduino/setup-task@v2
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          version: 3.x
-
       - name: Update dependencies license metadata cache
         run: |
-          task \
-            --silent \
-            general:cache-dep-licenses
+          go tool \
+            github.com/go-task/task/v3/cmd/task \
+              --silent \
+              general:cache-dep-licenses
 
       - name: Check for outdated cache
         id: diff
@@ -152,14 +147,9 @@ jobs:
         with:
           go-version-file: go.mod
 
-      - name: Install Task
-        uses: arduino/setup-task@v2
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          version: 3.x
-
       - name: Check for dependencies with unapproved licenses
         run: |
-          task \
-            --silent \
-            general:check-dep-licenses
+          go tool \
+            github.com/go-task/task/v3/cmd/task \
+              --silent \
+              general:check-dep-licenses

.github/workflows/check-go-task.yml

@@ -75,16 +75,12 @@ jobs:
         with:
           go-version-file: go.mod
 
-      - name: Install Task
-        uses: arduino/setup-task@v2
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          version: 3.x
-
       - name: Check for errors
         env:
           GO_MODULE_PATH: ${{ matrix.module.path }}
-        run: task go:vet
+        run: |
+          go tool \
+            github.com/go-task/task/v3/cmd/task go:vet
 
   check-outdated:
     name: check-outdated (${{ matrix.module.path }})
@@ -112,16 +108,12 @@ jobs:
         with:
           go-version-file: ${{ matrix.module.path }}/go.mod
 
-      - name: Install Task
-        uses: arduino/setup-task@v2
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          version: 3.x
-
       - name: Modernize usages of outdated APIs
         env:
           GO_MODULE_PATH: ${{ matrix.module.path }}
-        run: task go:fix
+        run: |
+          go tool \
+            github.com/go-task/task/v3/cmd/task go:fix
 
       - name: Check if any fixes were needed
         run: |
@@ -155,22 +147,17 @@ jobs:
         with:
           go-version-file: ${{ matrix.module.path }}/go.mod
 
-      - name: Install Task
-        uses: arduino/setup-task@v2
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          version: 3.x
-
       - name: Install golint
         run: go install golang.org/x/lint/golint@latest
 
       - name: Check style
         env:
           GO_MODULE_PATH: ${{ matrix.module.path }}
         run: |
-          task \
-            --silent \
-            go:lint
+          go tool \
+            github.com/go-task/task/v3/cmd/task  \
+              --silent \
+              go:lint
 
   check-formatting:
     name: check-formatting (${{ matrix.module.path }})
@@ -198,16 +185,12 @@ jobs:
         with:
           go-version-file: ${{ matrix.module.path }}/go.mod
 
-      - name: Install Task
-        uses: arduino/setup-task@v2
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          version: 3.x
-
       - name: Format code
         env:
           GO_MODULE_PATH: ${{ matrix.module.path }}
-        run: task go:format
+        run: |
+          go tool \
+            github.com/go-task/task/v3/cmd/task go:format
 
       - name: Check formatting
         run: |
@@ -241,16 +224,12 @@ jobs:
         with:
           go-version-file: ${{ matrix.module.path }}/go.mod
 
-      - name: Install Task
-        uses: arduino/setup-task@v2
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          version: 3.x
-
       - name: Run go mod tidy
         env:
           GO_MODULE_PATH: ${{ matrix.module.path }}
-        run: task go:tidy
+        run: |
+          go tool \
+            github.com/go-task/task/v3/cmd/task go:tidy
 
       - name: Check whether any tidying was needed
         run: |

.github/workflows/check-markdown-task.yml

@@ -76,6 +76,11 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v5
 
+      - name: Install Go
+        uses: actions/setup-go@v6
+        with:
+          go-version-file: go.mod
+
       - name: Setup Node.js
         uses: actions/setup-node@v5
         with:
@@ -84,14 +89,10 @@ jobs:
       - name: Initialize markdownlint-cli problem matcher
         uses: xt0rted/markdownlint-problem-matcher@v3
 
-      - name: Install Task
-        uses: arduino/setup-task@v2
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          version: 3.x
-
       - name: Lint
-        run: task markdown:lint
+        run: |
+          go tool \
+            github.com/go-task/task/v3/cmd/task markdown:lint
 
   links:
     needs: run-determination
@@ -114,14 +115,9 @@ jobs:
         with:
           node-version-file: package.json
 
-      - name: Install Task
-        uses: arduino/setup-task@v2
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          version: 3.x
-
       - name: Check links
         run: |
-          task \
-            --silent \
-            markdown:check-links
+          go tool \
+            github.com/go-task/task/v3/cmd/task \
+              --silent \
+              markdown:check-links

.github/workflows/check-mkdocs-task.yml

@@ -93,11 +93,7 @@ jobs:
         with:
           node-version-file: package.json
 
-      - name: Install Task
-        uses: arduino/setup-task@v2
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          version: 3.x
-
       - name: Build website
-        run: task website:check
+        run: |
+          go tool \
+            github.com/go-task/task/v3/cmd/task website:check

.github/workflows/check-npm-task.yml

@@ -10,13 +10,17 @@ on:
       - "**/.npmrc"
       - "**/package.json"
       - "**/package-lock.json"
+      - "go.mod"
+      - "go.sum"
       - "Taskfile.ya?ml"
   pull_request:
     paths:
       - ".github/workflows/check-npm-task.ya?ml"
       - "**/.npmrc"
       - "**/package.json"
       - "**/package-lock.json"
+      - "go.mod"
+      - "go.sum"
       - "Taskfile.ya?ml"
   schedule:
     # Run every Tuesday at 8 AM UTC to catch breakage resulting from changes to the JSON schema.
@@ -67,23 +71,23 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v5
 
+      - name: Install Go
+        uses: actions/setup-go@v6
+        with:
+          go-version-file: go.mod
+
       - name: Setup Node.js
         uses: actions/setup-node@v5
         with:
           node-version-file: package.json
 
-      - name: Install Task
-        uses: arduino/setup-task@v2
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          version: 3.x
-
       - name: Validate package.json
         run: |
-          task \
-            --silent \
-            npm:validate \
-            PROJECT_PATH="${{ matrix.project.path }}"
+          go tool \
+            github.com/go-task/task/v3/cmd/task \
+              --silent \
+              npm:validate \
+              PROJECT_PATH="${{ matrix.project.path }}"
 
   check-sync:
     name: check-sync (${{ matrix.project.path }})
@@ -103,21 +107,21 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v5
 
+      - name: Install Go
+        uses: actions/setup-go@v6
+        with:
+          go-version-file: go.mod
+
       - name: Setup Node.js
         uses: actions/setup-node@v5
         with:
           node-version-file: "${{ matrix.project.path }}/package.json"
 
-      - name: Install Task
-        uses: arduino/setup-task@v2
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          version: 3.x
-
       - name: Install npm dependencies
         run: |
-          task npm:install-deps \
-            PROJECT_PATH="${{ matrix.project.path }}"
+          go tool \
+            github.com/go-task/task/v3/cmd/task npm:install-deps \
+              PROJECT_PATH="${{ matrix.project.path }}"
 
       - name: Check package-lock.json
         run: |
@@ -144,21 +148,21 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v5
 
+      - name: Install Go
+        uses: actions/setup-go@v6
+        with:
+          go-version-file: go.mod
+
       - name: Setup Node.js
         uses: actions/setup-node@v5
         with:
           node-version-file: "${{ matrix.project.path }}/package.json"
 
-      - name: Install Task
-        uses: arduino/setup-task@v2
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          version: 3.x
-
       - name: Fix problems in npm configuration file
         run: |
-          task npm:fix-config \
-            PROJECT_PATH="${{ matrix.project.path }}"
+          go tool \
+            github.com/go-task/task/v3/cmd/task npm:fix-config \
+              PROJECT_PATH="${{ matrix.project.path }}"
 
       - name: Check if fixes are needed in npm configuration file
         run: |