goreleaser changed its config format and we're stuck pinned to an older version until we fix our goreleaser config; see https://goreleaser.com/deprecations#nfpmsfiles

i don't think we should go back to using version: latest but we should at least not be stuck on an old version.