v2.7.0

What's Changed

• fix(release): generalize floater handling to vX/vX.Y tags by @IkarusAILabs in #212
• Build(deps): bump github/codeql-action/upload-sarif from 4.38.1 to 4.38.2 by @dependabot[bot] in #215
• Build(deps): bump github/codeql-action/analyze from 4.38.1 to 4.38.2 by @dependabot[bot] in #216
• fix(ci): align codeql-action init/autobuild to 4.38.2 by @IkarusAILabs in #217
• feat(reporting): security_brief layer + decision-support HTML sections by @IkarusAILabs in #218
• feat: add Microsoft Teams Integration #182 by @therealestbenji in #219
• test(exceptions): pin the scope-escape boundaries; gate unverified scope (#196) by @ARAVIND281 in #220
• docs(roadmap): re-baseline around Agent Authority Evidence research programme by @IkarusAILabs in #221
• feat(benchmark): authority evidence validation corpus + harness (v2.6) by @IkarusAILabs in #222
• docs: reference ikaruslabs.net research hub by @IkarusAILabs in #227
• fix(release): restore v2.6.0 version bump on main by @IkarusAILabs in #228
• Build(deps): bump coverage from 7.16.1 to 7.16.2 by @dependabot[bot] in #230
• Fix RecursionError in resolve_symbol for init.py re-exports by @IkarusAILabs in #231
• Build(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 by @dependabot[bot] in #232
• Build(deps-dev): bump ruff from 0.16.1 to 0.17.0 by @dependabot[bot] in #233
• Build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #236
• Build(deps): bump iniconfig from 2.3.0 to 2.3.1 by @dependabot[bot] in #234
• Improve Authority Evidence Benchmark HTML presentation by @Golden007-prog in #239
• ci: update CodeQL actions to v4.39.0 to fix version mismatch by @IkarusAILabs in #242
• fix(benchmark): bound HTML report history by @Golden007-prog in #240
• docs: credit @Golden007-prog for Authority Evidence Benchmark HTML presentation by @IkarusAILabs in #243
• ci: pin CodeQL actions by SHA (v4.39.0) to fix Scorecard Pinned-Dependencies alerts by @IkarusAILabs in #244
• Build(deps): bump github/codeql-action/analyze from 48870fdd6b42ee6474ec4207209ff87609271a5e to 6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee by @dependabot[bot] in #250
• Build(deps): bump github/codeql-action/upload-sarif from 48870fdd6b42ee6474ec4207209ff87609271a5e to 6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee by @dependabot[bot] in #249
• Build(deps): bump ossf/scorecard-action from 2.4.4 to 2.5.0 by @dependabot[bot] in #248
• Build(deps): bump github/codeql-action/autobuild from 48870fdd6b42ee6474ec4207209ff87609271a5e to 6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee by @dependabot[bot] in #247
• Build(deps): bump github/codeql-action/init from 48870fdd6b42ee6474ec4207209ff87609271a5e to 6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee by @dependabot[bot] in #246
• Build(deps): bump pluggy from 1.6.0 to 1.7.0 by @dependabot[bot] in #245
• docs: align roadmap with Blueprint Alliance and SPIFFE/SPIRE by @IkarusAILabs in #252
• feat: authority evidence metrics on every scan (v2.7 evidence metrology) by @IkarusAILabs in #253
• fix: detect CAP_subprocess_shell on multi-line calls + CI authority benchmark gate by @IkarusAILabs in #254
• Build(deps): bump certifi from 2026.7.22 to 2026.10.19 by @dependabot[bot] in #255
• chore(release): prepare v2.7.0 — version bump and documentation by @IkarusAILabs in #256

New Contributors

• @therealestbenji made their first contribution in #219
• @Golden007-prog made their first contribution in #239

Full Changelog: v2.5...v2.7.0