chore(deps): update hermit tools

[renovate]

This PR contains the following updates:

Package	Update	Change
doppler	patch	3.75.1 → 3.75.2
task	minor	3.46.4 → 3.48.0

---

Release Notes

DopplerHQ/cli (doppler)

v3.75.2

Compare Source

Changelog

• Fix completions install on Apple silicon macs
• Handle connection failure / reconnection when using --watch
• Obfuscate Doppler token for doppler configure --all
• Bump golang.org/x/crypto from 0.36.0 to 0.45.0
• Handle broken pipe error while rapidly reading from secrets mount

Docker images

• docker pull dopplerhq/cli:3.75.2
• docker pull dopplerhq/cli:3.75
• docker pull dopplerhq/cli:3

go-task/task (task)

v3.48.0

• Fixed if: conditions when using to check dynamic variables. Also, skip
  variable prompt if task would be skipped by if: (#​2658, #​2660 by @​vmaerten).
• Fixed ROOT_TASKFILE variable pointing to directory instead of the actual
  Taskfile path when no explicit -t flag is provided (#​2635, #​1706 by
  @​trulede).
• Included Taskfiles with silent: true now properly propagate silence to their
  tasks, while still allowing individual tasks to override with silent: false
  (#​2640, #​1319 by @​trulede).
• Added TLS certificate options for Remote Taskfiles: use --cacert for
  self-signed certificates and --cert/--cert-key for mTLS authentication
  (#​2537, #​2242 by @​vmaerten).

v3.47.0

• Fixed remote git Taskfiles: cloning now works without explicit ref, and
  directory includes are properly resolved (#​2602 by @​vmaerten).
• For output: prefixed, print prefix: if set instead of task name (#​1566,
  #​2633 by @​trulede).
• Ensure no ANSI sequences are printed for --color=false (#​2560, #​2584 by
  @​trulede).
• Task aliases can now contain wildcards and will match accordingly (e.g., s-*
  as alias for start-*) (#​1900, #​2234 by @​vmaerten).
• Added conditional execution with the if field: skip tasks, commands, or task
  calls based on shell exit codes or template expressions like
  {{ eq .ENV "prod" }} (#​2564, #​608 by @​vmaerten).
• Task can now interactively prompt for missing required variables when running
  in a TTY, with support for enum selection menus. Enable with --interactive
  flag or interactive: true in .taskrc.yml (#​2579, #​2079 by @​vmaerten).

---

Configuration

📅 Schedule: Branch creation - "after 10pm every weekday,before 6am every weekday,every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.