diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 3f609e2..9d129d6 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -20,11 +20,10 @@ builds:
       - linux_arm64
       - windows_amd64
       - windows_arm64
-      - windows_arm64
 
 archives:
   - id: default
-    builds:
+    ids:
       - blu
     name_template: >-
       {{ .ProjectName }}-{{- if eq .Os "darwin" -}}macos{{- else if eq .Os "windows" -}}windows{{- else -}}{{ .Os }}{{- end -}}-{{ .Arch }}
@@ -33,7 +32,8 @@ archives:
       - README.md
     format_overrides:
       - goos: windows
-        format: zip
+        formats:
+          - zip
 
 checksum:
   name_template: checksums.txt
diff --git a/CHANGELOG.md b/CHANGELOG.md
index b649252..fc8cefa 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,9 @@
 
 ## 0.1.4 (Unreleased)
 
+- Release config: update GoReleaser archive fields to current v2 names so `goreleaser check` passes.
+- CI: pin Go toolchain to 1.25.10 to clear current standard-library `govulncheck` advisories.
+
 ## 0.1.3 (2025-12-17)
 
 - Device selection: accept discovery names for `--device`/`BLU_DEVICE` (no config aliases needed).
diff --git a/go.mod b/go.mod
index 8dbc345..d41f9bc 100644
--- a/go.mod
+++ b/go.mod
@@ -2,7 +2,7 @@ module github.com/steipete/blucli
 
 go 1.25.0
 
-toolchain go1.25.9
+toolchain go1.25.10
 
 require github.com/grandcat/zeroconf v1.0.0