xurl cask: postflight is deprecated, causes brew update warning

[Mirko214]

Running brew update && brew upgrade prints this warning every time because of the xurl cask:

Warning: Calling `postflight` is deprecated! Use `postflight_steps` instead.
Please report this issue to the xdevplatform/homebrew-tap tap (not Homebrew/* repositories), or even better, submit a PR to fix it:
  /opt/homebrew/Library/Taps/xdevplatform/homebrew-tap/Casks/xurl.rb:37

The offending block in Casks/xurl.rb (auto-generated by GoReleaser):

postflight do
  if OS.mac?
    system_command "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "#{staged_path}/xurl"]
  end
end

Homebrew's Cask DSL has deprecated the postflight block name in favor of postflight_steps. Since this cask file is generated by GoReleaser (per the DO NOT EDIT header), the GoReleaser Homebrew Cask template used to produce it should be updated to emit postflight_steps do ... end instead of postflight do ... end.

Environment: Homebrew on macOS (arm64), xurl 1.3.1.

[keithkeekw]

Adding detail from a separate investigation on macOS 27 / Homebrew 7.0.2-15 (main) that may help whoever picks this up:

• Deadline: Homebrew 7.0.0 (2026-09-13) deprecates the cask preflight/postflight/uninstall_postflight stanzas in favour of *_steps, with removal on 2027-12-11. After that date the stanza is refused and brew install/upgrade --cask xurl fails from this tap; an already-installed xurl binary keeps working.

• Scope: this is the only affected cask in the tap, and the reporter's local file is byte-identical to main here (last push 58d30f3), so it isn't a stale checkout.

• Root cause is upstream in GoReleaser: its homebrew_casks hook template still emits postflight — tracked as homebrew_casks: hooks emit Homebrew's deprecated postflight stanza goreleaser/goreleaser#6870 (open, no fix commit). A PR against Casks/xurl.rb alone is reverted by goreleaserbot on the next release, which is why this needs a pipeline change rather than a file edit.

• Workaround other GoReleaser projects use: emit the stanza from custom_block under homebrew_casks, e.g.

  homebrew_casks:
    - custom_block: |
        postflight_steps do
          ...
        end

  (rails-kit's .goreleaser.yml is one working example.)

• The rename is behaviour-neutral: brew's own cop (Cask/InstallSteps) mandates exactly postflight_steps, and the DSL signature is postflight_steps(steps = nil, **kwargs, &block) — the same block form, so this cask's single xattr step only needs the stanza renamed.

[PythonMalone]

Same experience here:

Warning: Calling postflight is deprecated! Use postflight_steps instead.
Please report this issue to the xdevplatform/homebrew-tap tap (not Homebrew/* repositories), or even better, submit a PR to fix it:
/opt/homebrew/Library/Taps/xdevplatform/homebrew-tap/Casks/xurl.rb:37

[crper]

Confirming the same on Homebrew 7.0.6 (macOS arm64, xurl 1.3.1), and adding a verified patch plus one caveat I did not see mentioned above.

Caveat for anyone trying a local fix: brew update resets this tap back to origin/main, so hand-editing Casks/xurl.rb is reverted on the next update (the warning comes straight back). Only a pipeline change actually sticks — which supports the custom_block approach suggested earlier.

Verified patch (applied locally, warning gone, brew audit --cask xurl clean):

-  postflight do
-    if OS.mac?
-      system_command "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "#{staged_path}/xurl"]
-    end
-  end
+  postflight_steps do
+    on_macos do
+      run "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "{{staged_path}}/xurl"]
+    end
+  end

Notes for whoever implements it:

• OS.mac? inside the old block maps to the on_macos guard, and staged_path interpolation becomes the {{staged_path}} template token (both are expanded by the install-steps runner).
• A working reference already exists: crper/homebrew-tap/Casks/tqrx.rb emits this exact form and installs/upgrades without warnings on Homebrew 7.0.6.
• So the rename is drop-in and behaviour-neutral, as noted — the real fix belongs in the release pipeline (homebrew_casks: hooks emit Homebrew's deprecated postflight stanza goreleaser/goreleaser#6870), not in this generated file.