docs: prepare the v0.2.4 release

[patramsey]

Time-sensitive

The tap PR merged ahead of the release, so patramsey/homebrew-tap is currently in the gap that PR warned about. Verified just now:

Formula/  →  plat.rb          (namecom.rb deleted)
Casks/    →  404, does not exist
tap_migrations.json  →  present

There is no namecom in the tap at all right now. A fresh brew install namecom finds nothing, and an installed user who runs brew update in this window burns their one-shot migration while cask_tokens is still empty — migrate_tap_migration only inspects names deleted in that update's diff, so it won't retry later.

Tagging v0.2.4 publishes Casks/namecom.rb and closes the window. Nothing else does.

Contents

Security — the Go toolchain moves to 1.26.6, clearing four stdlib advisories govulncheck found reachable (GO-2026-6218, GO-2026-6090, GO-2026-5972, GO-2026-5026). The v0.2.3 binaries were built with 1.26.5 and carry all four; this release is the only thing that gets the fix to anyone already installed.

Changed — Homebrew installs namecom as a cask rather than a formula. #36 configured this but no release has exercised it. It was missing from the changelog, which matters because it changes what users get.

This release is the first real test of the cask path

release.yml only runs on tags. goreleaser check passes and a snapshot build produced a valid Casks/namecom.rb (ruby -c clean, on_linux blocks present, no depends_on macos) — but that exercises generation, not publication to the tap. If it fails it fails with the tag already pushed. Recoverable, worth knowing.

Verification

• goreleaser check → 1 configuration file validated, no deprecations
• Changelog compare links updated; [Unreleased] now points at v0.2.4...HEAD

No code changes — changelog only.