diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 61ce9d9..59d9925 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -83,7 +83,7 @@ jobs:
         uses: goreleaser/goreleaser-action@v7.2.3
         with:
           distribution: goreleaser
-          version: v2.18.0
+          version: v2.18.1
           install-only: true
 
       - name: Release artifact smoke test
diff --git a/.github/workflows/release-legacy.yml b/.github/workflows/release-legacy.yml
index ba62d56..053041c 100644
--- a/.github/workflows/release-legacy.yml
+++ b/.github/workflows/release-legacy.yml
@@ -51,7 +51,7 @@ jobs:
         uses: goreleaser/goreleaser-action@v7.2.3
         with:
           distribution: goreleaser
-          version: v2.18.0
+          version: v2.18.1
           args: release --clean --config /tmp/.goreleaser.yaml --release-notes /tmp/release-notes.md
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 12e4444..9b4d97a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,13 @@ The first tagged release is 0.2.0; the 0.1.0 section reconstructs earlier projec
 
 ## Unreleased
 
+### Highlights
+
+Local source builds gain a portable install helper with macOS signature verification.
+
+- Added `make build` and `make install`, with a configurable destination, directory creation, and macOS signing and verification after replacement. Thanks @omarshahine.
+- Updated repository-owned GoReleaser tooling to 2.18.1 for archive-path fixes, dependency security updates, and temporary-directory cleanup improvements.
+
 ## 0.2.4 - 2026-09-05
 
 ### Highlights