Highlights

🏗️ Infrastructure & Performance

• build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 @dependabot[bot] (#8596)
• build(deps): bump bridgecrewio/checkov-action from 12.3100.0 to 12.3101.0 @dependabot[bot] (#8594)
• build(deps): bump release-drafter/release-drafter from 7.2.0 to 7.2.1 @dependabot[bot] (#8593)
• build(deps): bump bridgecrewio/checkov-action from 12.3099.0 to 12.3100.0 @dependabot[bot] (#8585)

📝 Documentation

• docs: rewrite README in Hack23 ecosystem style; cross-link ISMS docs @copilot-swe-agent[bot] (#8589)

📦 Dependencies

• build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 @dependabot[bot] (#8596)
• build(deps-dev): bump io.grpc:grpc-context from 1.80.0 to 1.81.0 @dependabot[bot] (#8595)
• build(deps): bump bridgecrewio/checkov-action from 12.3100.0 to 12.3101.0 @dependabot[bot] (#8594)
• build(deps): bump release-drafter/release-drafter from 7.2.0 to 7.2.1 @dependabot[bot] (#8593)
• build(deps): bump joda-time:joda-time from 2.14.1 to 2.14.2 @dependabot[bot] (#8592)
• build(deps): bump cia.project.versions.jackson from 2.21.2 to 2.21.3 @dependabot[bot] (#8591)
• build(deps): bump org.postgresql:postgresql from 42.7.10 to 42.7.11 @dependabot[bot] (#8590)
• build(deps): bump bridgecrewio/checkov-action from 12.3099.0 to 12.3100.0 @dependabot[bot] (#8585)
• build(deps): bump cia.project.versions.drools from 10.1.0 to 10.2.0 @dependabot[bot] (#8584)
• build(deps): bump commons-codec:commons-codec from 1.21.0 to 1.22.0 @dependabot[bot] (#8583)
• build(deps): bump com.google.code.gson:gson from 2.13.2 to 2.14.0 @dependabot[bot] (#8582)
• build(deps): bump commons-io:commons-io from 2.21.0 to 2.22.0 @dependabot[bot] (#8581)

Political Analysis Enhancements

Changes in this release continue to enhance the Citizen Intelligence Agency (OSINT) platform's capabilities for monitoring political figures and institutions, providing improved insights into:

• Political performance metrics
• Institutional transparency
• Decision-making analysis
• Risk assessment

🔐 Hack23 ISMS Policies & Governance

Hack23 is committed to transparency and evidence-based security. Our complete Information Security Management System (ISMS) is publicly available:

Coverage: 32 ISMS policies • 100+ security controls • ISO 27001:2022 • NIST CSF 2.0 • CIS Controls v8.1

🛡️ Security & Compliance

SLSA Build Attestations

Artifact Attestations Available:

• DEB Package Build Provenance - SLSA Level 3 provenance for cia-dist-deb-2026.5.1.all.deb
• WAR Build Provenance - SLSA Level 3 provenance for citizen-intelligence-agency-2026.5.1.war
• DEB SBOM Attestation - Software Bill of Materials in SPDX format
• WAR SBOM Attestation - Software Bill of Materials in SPDX format

Security Posture

Security Scanning Results

📊 Quality & Testing

Code Quality Reports

Detailed Reports Available:

• Maven Site Documentation - Complete project documentation
• JaCoCo Test Coverage - Unit test coverage reports (80%+ line, 70%+ branch)
• JavaDoc API Documentation - Complete API reference
• SonarCloud Dashboard - Code quality metrics

Testing Standards

Per Secure Development Policy:

• ✅ Minimum 80% line coverage
• ✅ Minimum 70% branch coverage
• ✅ Automated security scanning (SAST/DAST)
• ✅ Dependency vulnerability checks

💻 Technology Stack

Runtime: Java 26 (Feature Release) • Source: Java 21 (LTS) • Build: Maven 3.9.15 • Database: PostgreSQL 18

🙏 Contributors

Thanks to @Copilot, @dependabot[bot], copilot-swe-agent[bot] and dependabot[bot] for their contributions to this release!

Full Changelog: https://github.com/Hack23/cia/compare/2026.4.32...2026.5.1