diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 8921bed..007f419 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -61,7 +61,7 @@ deploy-prod:
 check_release:
   stage: test
   image:
-    name: goreleaser/goreleaser:v2.9.0@sha256:da5dbdb1fe1c8fa9a73e152070e4a9b178c3500c3db383d8cff2f206b06ef748
+    name: goreleaser/goreleaser:v2.10.2@sha256:ebc884882268c835edd70c628dbdf830481ae23a569b343cd7d7b178c91573ac
     entrypoint: [ '' ]
   variables:
     GOTOOLCHAIN: auto
@@ -74,7 +74,7 @@ release:
   needs:
   - unbound_release_prepare_release
   image:
-    name: goreleaser/goreleaser:v2.9.0@sha256:da5dbdb1fe1c8fa9a73e152070e4a9b178c3500c3db383d8cff2f206b06ef748
+    name: goreleaser/goreleaser:v2.10.2@sha256:ebc884882268c835edd70c628dbdf830481ae23a569b343cd7d7b178c91573ac
     entrypoint: [ '' ]
   variables:
     # Disable shallow cloning so that goreleaser can diff between tags to
diff --git a/.goreleaser.yml b/.goreleaser.yml
index 39a4e65..501aebd 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -16,18 +16,23 @@ builds:
   - amd64
   - arm64
 
-brews:
+homebrew_casks:
 - name: unbound-schemas
   repository:
     owner: unboundsoftware
     name: homebrew-taps
-  directory: Formula
-  install: |
-    bin.install "schemactl"
+  directory: Casks
+  conflicts:
+    - formula: unbound-schemas
   commit_author:
     name: "Joakim Olsson"
     email: joakim@unbound.se
   homepage: "https://schemas.unbound.se/"
+  hooks:
+    post:
+      install: |
+        # replace foo with the actual binary name
+        system_command "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "#{staged_path}/schemactl"]
 
 archives:
 - id: unbound-schemas