Authentication token is shown when approving a remote task file

[liiight]

Description

When defining a remote taskfile using authentication the token is shown in the remote file approval message in plain text

❯ export TOKEN=REDACTED_TOKEN
❯ task
The task you are attempting to run depends on the remote Taskfile at "https://:REDACTED_TOKEN@REDACTED_URL.git//Taskfile.dist.yml?ref=master".
--- Make sure you trust the source of this Taskfile before continuing ---
Continue? [y/N]:

Version

3.43.3

Operating system

MacOS 15

Experiments Enabled

Remote Taskfiles

Example Taskfile

version: '3'
includes:
  remote: https://:{{.TOKEN}}@{{.REDACTED_URL}}.git/Taskfile.dist.yml?ref=master

[trulede]

Hi, try with v3.44.0 which has a fix for this.

[vmaerten]

Fixed in v3.44.0