diff --git a/CHANGELOG.md b/CHANGELOG.md
index bf2ebb3..fd4bc29 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.7.0] - 2026-05-13
+
+### Changed
+- Pin default capiscio-core version to 2.7.0
+
+### Fixed
+- Checksum fail-closed and version override (#11)
+- Binary checksum verification (#10)
+
 ## [2.6.0] - 2026-03-27
 
 ### Changed
diff --git a/action.yml b/action.yml
index 0d582b4..ca2aff0 100644
--- a/action.yml
+++ b/action.yml
@@ -40,7 +40,7 @@ inputs:
   capiscio-version:
     description: 'Version of CapiscIO Core to use for validation'
     required: false
-    default: '2.6.0'
+    default: '2.7.0'
 
 outputs:
   result:
diff --git a/package.json b/package.json
index f8468bf..a4a18c6 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "validate-a2a",
-  "version": "2.6.0",
+  "version": "2.7.0",
   "description": "GitHub Action to validate A2A protocol agent cards with three-dimensional scoring",
   "main": "dist/index.js",
   "scripts": {
diff --git a/src/index.ts b/src/index.ts
index 8065a63..441e03a 100644
--- a/src/index.ts
+++ b/src/index.ts
@@ -12,7 +12,7 @@ import {
 } from './validation';
 import { verifyChecksum } from './checksum';
 
-const CAPISCIO_VERSION = core.getInput('capiscio-version') || '2.6.0';
+const CAPISCIO_VERSION = core.getInput('capiscio-version') || '2.7.0';
 
 async function setupCapiscio(): Promise<string> {
   // Determine OS and Arch