diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0af8944..9e73d4e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.7.0] - 2026-05-13
+
+### Changed
+- Pin CORE_VERSION to 2.7.0
+
+### Fixed
+- Download timeout and checksum fail-closed (#17)
+- Add `CAPISCIO_REQUIRE_CHECKSUM` fail-closed mode
+- Binary SHA-256 checksum verification after download
+
 ## [2.6.0] - 2026-03-27
 
 ### Changed
diff --git a/pyproject.toml b/pyproject.toml
index 86917d7..ad3d138 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "capiscio"
-version = "2.6.0"
+version = "2.7.0"
 description = "The official CapiscIO CLI tool for validating A2A agents."
 readme = "README.md"
 requires-python = ">=3.10"
diff --git a/src/capiscio/manager.py b/src/capiscio/manager.py
index 00a68ff..680ce68 100644
--- a/src/capiscio/manager.py
+++ b/src/capiscio/manager.py
@@ -18,7 +18,7 @@
 logger = logging.getLogger(__name__)
 
 # Configuration
-CORE_VERSION = "2.6.0"  # The version of the core binary to download
+CORE_VERSION = "2.7.0"  # The version of the core binary to download
 GITHUB_REPO = "capiscio/capiscio-core"
 BINARY_NAME = "capiscio"