Highlights

🏗️ Infrastructure & Performance

• build(deps): bump the github-actions group with 3 updates @dependabot[bot] (#9057)
• build(deps): bump bridgecrewio/checkov-action from 12.3136.0 to 12.3139.0 in the github-actions group @dependabot[bot] (#9053)

📦 Dependencies

• build(deps-dev): bump org.seleniumhq.selenium:htmlunit3-driver from 4.51.0 to 4.52.0 @dependabot[bot] (#9059)
• build(deps): bump org.htmlunit:htmlunit from 5.6.0 to 5.7.0 @dependabot[bot] (#9055)
• build(deps): bump the github-actions group with 3 updates @dependabot[bot] (#9057)
• build(deps): bump com.google.guava:guava from 33.7.2-jre to 33.8.0-jre @dependabot[bot] (#9058)
• build(deps): bump com.google.errorprone:error_prone_annotations from 2.51.0 to 2.52.0 @dependabot[bot] (#9056)
• build(deps): bump org.checkerframework:checker-qual from 4.3.1 to 4.4.0 @dependabot[bot] (#9052)
• build(deps): bump io.netty:netty-bom from 4.2.19.Final to 4.2.20.Final @dependabot[bot] (#9049)
• build(deps): bump com.google.errorprone:error_prone_core from 2.51.0 to 2.52.0 @dependabot[bot] (#9050)
• build(deps): bump bridgecrewio/checkov-action from 12.3136.0 to 12.3139.0 in the github-actions group @dependabot[bot] (#9053)
• build(deps): bump org.jsoup:jsoup from 1.23.2 to 1.24.1 @dependabot[bot] (#9054)
• build(deps): bump cia.project.versions.bytebuddy from 1.18.16 to 1.18.17 @dependabot[bot] (#9048)
• build(deps): bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.3 to 3.7.0 @dependabot[bot] (#9047)

Political Analysis Enhancements

Changes in this release continue to enhance the Citizen Intelligence Agency (OSINT) platform's capabilities for monitoring political figures and institutions, providing improved insights into:

• Political performance metrics
• Institutional transparency
• Decision-making analysis
• Risk assessment

🔐 Hack23 ISMS Policies & Governance

Hack23 is committed to transparency and evidence-based security. Our complete Information Security Management System (ISMS) is publicly available:

Coverage: 32 ISMS policies • 100+ security controls • ISO 27001:2022 • NIST CSF 2.0 • CIS Controls v8.1

🛡️ Security & Compliance

SLSA Build Attestations

Artifact Attestations Available:

• DEB Package Build Provenance - SLSA Level 3 provenance for cia-dist-deb-2026.11.3.all.deb
• WAR Build Provenance - SLSA Level 3 provenance for citizen-intelligence-agency-2026.11.3.war
• DEB SBOM Attestation - Software Bill of Materials in SPDX format
• WAR SBOM Attestation - Software Bill of Materials in SPDX format

Security Posture

Security Scanning Results

📊 Quality & Testing

Code Quality Reports

Detailed Reports Available:

• Maven Site Documentation - Complete project documentation
• JaCoCo Test Coverage - Unit test coverage reports (80%+ line, 70%+ branch)
• JavaDoc API Documentation - Complete API reference
• SonarCloud Dashboard - Code quality metrics

Testing Standards

Per Secure Development Policy:

• ✅ Minimum 80% line coverage
• ✅ Minimum 70% branch coverage
• ✅ Automated security scanning (SAST/DAST)
• ✅ Dependency vulnerability checks

💻 Technology Stack

Runtime: Java 27 (Feature Release) • Source: Java 21 (LTS) • Build: Maven 3.10.x • Database: PostgreSQL 18

🙏 Contributors

Thanks to @dependabot[bot] for their contributions to this release!

Full Changelog: https://github.com/Hack23/cia/compare/2026.10.30...2026.11.3