ci(release): swap retired macos-13 runner for macos-15-intel

[hyperpolymath]

Summary

• macos-13 GitHub-hosted runner image was deprecated 2025-09-22 and fully unsupported from 2025-12-04 ([macOS] The macOS 13 Ventura based runner images will begin deprecation on September 22nd and will be fully unsupported by December 4th for GitHub and ADO actions/runner-images#13046, #13402, #13634). Any matrix entry pinning runner: macos-13 now queues forever — there is no runner.
• Swap runner: macos-13 → runner: macos-15-intel (current Intel x64 standard runner per the actions/runner-images README). macOS 15 is the safer of the two Intel-x64 options: stable GA image, vs macos-26-intel which only graduated from public beta in 2026-02 and had an arm-label regression in [ARM] macos-26 runner has Intel architecture actions/runner-images#14112 as recently as 2026-05-19.
• Asset/target naming (os: darwin, arch: x86_64) is unchanged — only the build host moves.

Estate context

Same one-line swap landed on hyperpolymath/affinescript today (PR hyperpolymath/affinescript#292, merged commit 26cdb43), where the retired-runner trap was first diagnosed after a release run sat queued ~10h with no error. Propagating the fix here.

Test plan

• Reviewer to confirm macos-15-intel is permitted under any local runner allowlist (governance.yml if present).
• Next release run picks up an Intel macOS runner and completes the darwin/x86_64 build.

Refs hyperpolymath/affinescript#292, actions/runner-images#13046.

🤖 Generated with Claude Code

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details

Scanned Manifest Files

[github-actions]

🔍 Hypatia Security Scan

Findings: 19 issues detected

Severity	Count
🔴 Critical	0
🟠 High	4
🟡 Medium	15

View findings

[
  {
    "reason": "Required file missing",
    "type": "missing",
    "file": "0-AI-MANIFEST.a2ml",
    "action": "create",
    "rule_module": "root_hygiene",
    "severity": "high"
  },
  {
    "reason": "No test directory or test files found",
    "type": "no_tests",
    "file": "/home/runner/work/casket-ssg/casket-ssg",
    "action": "flag",
    "rule_module": "honest_completion",
    "severity": "high",
    "deduction": 20
  },
  {
    "reason": "Issue in quality.yml",
    "type": "missing_workflow",
    "file": "quality.yml",
    "action": "create",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in security-policy.yml",
    "type": "missing_workflow",
    "file": "security-policy.yml",
    "action": "create",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action hyperpolymath/standards/.github/workflows/governance-reusable.yml@main needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Nominal-only SAST in casket-ssg: codeql.yml language matrix contains no language present in the repo and lacks `actions`, so CodeQL records zero results on every commit. Remediation: set the CodeQL matrix to `language: actions`.",
    "type": "StaticAnalysis",
    "file": "/home/runner/work/casket-ssg/casket-ssg",
    "action": "auto_fix",
    "rule_module": "scorecard",
    "severity": "medium",
    "remediation": "Add CodeQL or equivalent SAST workflow.",
    "scorecard_check": "SAST"
  },
  {
    "reason": "Repository has 3 non-main remote branch(es). Policy: single main branch only.",
    "type": "GS007",
    "file": ".",
    "action": "delete_remote_branches",
    "rule_module": "git_state",
    "severity": "medium"
  },
  {
    "reason": "References STATE.scm -- should be .machine_readable/6a2/STATE.a2ml",
    "type": "SD007",
    "file": ".claude/CLAUDE.md",
    "action": "update_reference",
    "rule_module": "structural_drift",
    "severity": "medium"
  },
  {
    "reason": "References META.scm -- should be .machine_readable/6a2/META.a2ml",
    "type": "SD007",
    "file": ".claude/CLAUDE.md",
    "action": "update_reference",
    "rule_module": "structural_drift",
    "severity": "medium"
  },
  {
    "reason": "References ECOSYSTEM.scm -- should be .machine_readable/6a2/ECOSYSTEM.a2ml",
    "type": "SD007",
    "file": ".claude/CLAUDE.md",
    "action": "update_reference",
    "rule_module": "structural_drift",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence