v2.8.0

What's Changed

• fix: stop baseline provenance from laundering detected authority changes by @tyza66 in #257
• fix(cli): name --unknown-authority block in the diff-gate blind warning by @tyza66 in #258
• docs: clarify GitHub Action trust boundary permissions by @HectorGuerilla in #259
• fix(cli): warn when a policy file sets the unknown-authority gate by @tyza66 in #260
• docs(credits): recognize contributors from PRs #219, #220, #239-#240, #257-#260 by @IkarusAILabs in #261
• docs(gfi): index good first issues #262-#267 by @IkarusAILabs in #268
• fix(io): read and write text files as UTF-8 regardless of the locale by @bfs2021 in #269
• test: skip wheel build when setuptools backend is unavailable by @MarioZhang420 in #272
• docs: refresh good-first-issues index against tracker counts and links by @chiragjangiir in #276
• refactor(kya): single source provenance and gateability enums with schema parity tests by @chiragjangiir in #277
• docs: fix the install and scan commands in the GitHub Actions example by @yoreva-01 in #270
• Build(deps): bump coverage from 7.16.2 to 7.17.0 by @dependabot[bot] in #280
• Build(deps): bump actions/setup-python from 7.0.0 to 7.1.0 by @dependabot[bot] in #282
• Build(deps): bump step-security/harden-runner from 2.21.1 to 2.22.2 by @dependabot[bot] in #284
• Build(deps): bump pypa/gh-action-pypi-publish from 1.14.2 to 1.14.3 by @dependabot[bot] in #285
• test: isolate telemetry state for every test by @MarioZhang420 in #287
• docs: roadmap review against external developments (2026-10-28) by @IkarusAILabs in #288
• ci: bump all github/codeql-action steps to v4.39.1 together by @IkarusAILabs in #289
• Build(deps): bump pytest from 9.1.1 to 9.2.0 by @dependabot[bot] in #290
• Build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 by @dependabot[bot] in #291
• HTML report: show v2.7 evidence metrics in the Security Brief by @LetMeSleep8h in #274
• docs(releases): implementation plan v2.8–v2.13 from the 2026-11-01 status by @IkarusAILabs in #292
• feat: v2.8 evidence hygiene and mapping (plan items 2.8-0 to 2.8-5) by @IkarusAILabs in #293
• chore(release): prepare v2.8.0 — version bump and documentation by @IkarusAILabs in #294

New Contributors

• @tyza66 made their first contribution in #257
• @HectorGuerilla made their first contribution in #259
• @bfs2021 made their first contribution in #269
• @MarioZhang420 made their first contribution in #272
• @chiragjangiir made their first contribution in #276
• @yoreva-01 made their first contribution in #270
• @LetMeSleep8h made their first contribution in #274

Full Changelog: v2.7.0...v2.8.0