[piekstra]

Summary

The release workflow installs GoReleaser ~> v2, which now resolves to 2.19. That version deprecates homebrew_casks.hooks.post.install, and the workflow's goreleaser check fails on any deprecated property, so the next release would fail before building.

• The cask postflight moves to install_steps with {{ .StagedPath }}. GoReleaser renders it as a postflight_steps block with the absolute {{staged_path}} token, which the shared alias job's modernizer passes through unchanged.
• GoReleaser pins in workflows move to v2.19.0, which reads install_steps.

Verification

• goreleaser check with 2.19.0 passes for .goreleaser.yaml; on main it fails with the deprecation.
• goreleaser release --snapshot --clean --skip=publish,before,sign,validate renders each cask's postflight_steps block as run "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "{{staged_path}}/<binary>"].

Model: Claude Opus 5.5 (1M context, xhigh effort) in Claude Code.

[monit-reviewer]

Automated PR Review

Reviewed commit: 3a0825435f80
Profile: claude-monit-reviewer - Posting as: monit-reviewer

Summary

Reviewer	Findings
automation:ci-release	0
harness-engineering:repo-health	0
policies:conventions	0
security:code-auditor	0

Reviewer Coverage

Complete coverage details are retained in the local coverage.json artifact.

• automation:ci-release — complete (broad); scope: 2 files; examples: .github/workflows/arch-package.yml, .goreleaser.yaml; body-inspected: 2 files; examples: .github/workflows/arch-package.yml, .goreleaser.yaml; skipped: none; constraints: Could not run goreleaser check or snapshot release; relied on PR description for verification. The shared release workflow lives outside this repo, so its GoReleaser pin was not reviewable here.
• harness-engineering:repo-health — complete (constrained); scope: 2 files; examples: .github/workflows/arch-package.yml, .goreleaser.yaml; body-inspected: 2 files; examples: .github/workflows/arch-package.yml, .goreleaser.yaml; skipped: none; constraints: Reviewed the diff only; did not run goreleaser or inspect the shared release workflow outside this repo.
• policies:conventions — complete (broad); scope: 2 files; examples: .github/workflows/arch-package.yml, .goreleaser.yaml; body-inspected: 2 files; examples: .github/workflows/arch-package.yml, .goreleaser.yaml; skipped: none; constraints: Shared cli-common docs and the release workflow's goreleaser pin were not available in context; GoReleaser 2.19 install_steps behavior relies on the PR description.
• security:code-auditor — complete (constrained); scope: 1 file; examples: .goreleaser.yaml; body-inspected: 1 file; examples: .goreleaser.yaml; skipped: none; constraints: Did not run goreleaser; rendered postflight_steps output relies on the PR description's claim.

0 PR discussion threads considered. 0 summarized; 0 resolved.

---

Completed in 1m 44s | ~$0.32 (est.) | claude-sonnet-5-5 | cr 0.10.351

Field	Value
Model	claude-sonnet-5-5
Reviewers	automation:ci-release, harness-engineering:repo-health, policies:conventions, security:code-auditor
Engine	claude_cli · claude-sonnet-5-5
Reviewed by	cr · monit-reviewer
Duration	1m 44s wall · 2m 50s compute
Cost	~$0.32 (est.)
Pricing basis	baseline-2026-10-02/pricing
Tokens	42 in / 5.4k out

Per-workstream usage

• orchestrator-selection — claude-sonnet-5-5
  • In: 6
  • Out: 1.3k
  • Cache read: 23.6k
  • Cache create: 11.7k
  • Cost: ~$0.06 (est.)
  • Duration: 18s
• automation:ci-release — claude-sonnet-5-5
  • In: 8
  • Out: 1.1k
  • Cache read: 41.0k
  • Cache create: 10.8k
  • Cost: ~$0.06 (est.)
  • Duration: 40s
• harness-engineering:repo-health — claude-sonnet-5-5
  • In: 8
  • Out: 968
  • Cache read: 42.3k
  • Cache create: 11.4k
  • Cost: ~$0.06 (est.)
  • Duration: 27s
• policies:conventions — claude-sonnet-5-5
  • In: 8
  • Out: 976
  • Cache read: 39.9k
  • Cache create: 10.2k
  • Cost: ~$0.06 (est.)
  • Duration: 31s
• security:code-auditor — claude-sonnet-5-5
  • In: 6
  • Out: 703
  • Cache read: 26.6k
  • Cache create: 10.0k
  • Cost: ~$0.05 (est.)
  • Duration: 34s
• orchestrator-rollup — claude-sonnet-5-5
  • In: 6
  • Out: 407
  • Cache read: 47.7k
  • Cache create: 2.4k
  • Cost: ~$0.02 (est.)
  • Duration: 17s