8.7.0 (2026-05-07)

Bug Fixes

• don't run subscription-aware migrations in unit tests (870ecec)
• use default-foreground ANSI so splash and spinner stay readable in light-mode terminals (c28cb23)

Features

• supply-chain monitoring + credential scanning + console settings (d686eb1), closes hi#risk