v2026.2.0

ALEAPP v2026.2.0

• New artifact: C2PA Content Provenance (AI provenance), with signer certificate/signing time parsing added in phase 2, case-insensitive media path matching, and a Media State column grouping manifest rows per media file.
• Complete context-form migration across the entire codebase: six sequential batches converting Garmin family (24 files), FCM family (8 files), browsers (17 files), and bulk artifacts A-Z (over 200 files), standardizing the parser architecture project-wide.
• New Mister Skinnylegs artifact parser, alongside a Samsung Honeyboard clipboard rework (WAL recovery, SEFT support, dual-schema handling) and Samsung CMH now parsed from the files table.
• Dependency and security hardening: Pillow bumped to 12.3.0 (July 2026 security fixes), protobuf upgraded to 5.29.6 (resolving 3 high-severity Dependabot alerts), an HTML report fix escaping evidence in report cells, and a fix for missing Tabler-icons resources in compiled binaries.
• Large sample_data refresh from an updated 8-image Android test corpus plus 2 new Android 13 test images, with crash fixes surfaced during coverage testing and a memory leak fix for large dataset processing.

What's Changed

• Update version number and specs files by @Johann-PLW in #944
• Fix artifact crashes surfaced by the 8-image Android coverage run by @abrignoni in #945
• Parse Samsung CMH from the files table; document modern Garmin storage by @abrignoni in #946
• Update sample_data from the refreshed 8-image Android corpus by @abrignoni in #947
• Fix googlemapaudioTemp crash on archives with file/directory name collisions by @abrignoni in #948
• Populate sample_data from 2 new Android 13 test images by @abrignoni in #949
• Add C2PA Content Provenance (AI provenance) artifact by @abrignoni in #950
• C2PA phase 2: parse signer certificate and signing time by @abrignoni in #951
• C2PA: case-insensitive media paths (catch uppercase iOS extensions) by @abrignoni in #952
• C2PA: add Media State column (group manifest rows per media file) by @abrignoni in #953
• fix: check for empty data and source files before msg by @JamesHabben in #954
• Samsung Honeyboard clipboard: WAL recovery + SEFT + dual-schema (rework of #955) by @abrignoni in #956
• Minor improvements and bug fixes by @djangofaiola in #959
• Security: escape evidence in html_columns report cells by @abrignoni in #961
• ALEAPP context-form migration — batch 1: Garmin family (24 files) by @abrignoni in #963
• ALEAPP context-form migration — batch 2: FCM family (8 files) by @abrignoni in #964
• ALEAPP context-form migration — batch 3: browsers (17 files) by @abrignoni in #965
• ALEAPP context-form migration — batch 4: bulk A–M (110 files) by @abrignoni in #966
• ALEAPP context-form migration — batch 5: bulk N–Z (104 files) by @abrignoni in #967
• ALEAPP context-form migration — batch 6 (final): specials + tail (15 files) by @abrignoni in #968
• Update report.py - Fix missing Tabler-icons ressources from binaries by @Johann-PLW in #970
• chore: update module_info to level with ileapp by @JamesHabben in #971
• airtagAndroid: fitting icons for the four Airtag Detection artifacts by @abrignoni in #972
• Update version number to 2026.2.0 by @Johann-PLW in #973
• Add Mister Skinnylegs by @AlexC-CCL in #969
• Fix runtime-contract CI: reconcile NQ Vault path-security test with LAVA pipeline by @abrignoni in #976
• chore: bump Pillow 12.1.1 -> 12.3.0 for July 2026 security fixes by @abrignoni in #974
• chore: bump protobuf 3.10.0 -> 5.29.6, resolve 3 high Dependabot alerts by @abrignoni in #975
• ci: guard against PyPI-style blackboxprotobuf imports by @abrignoni in #978
• Memory Leak in Large Dataset Processing by @Johann-PLW in #979

New Contributors

• @AlexC-CCL made their first contribution in #969

Full Changelog: v2026.1.0...v2026.2.0