diff --git a/.github/common.env b/.github/common.env
index 152504fd6..de24cb564 100644
--- a/.github/common.env
+++ b/.github/common.env
@@ -1,6 +1,6 @@
 # Shared common variables
 
-CI_IMAGE_VERSION=master-2057058575
+CI_IMAGE_VERSION=master-2310077904
 CI_TOXENV_MAIN=py310,py311,py312,py313,py314
 CI_TOXENV_PLUGINS=py310-plugins,py311-plugins,py312-plugins,py313-plugins,py314-plugins
 CI_TOXENV_ALL="${CI_TOXENV_MAIN},${CI_TOXENV_PLUGINS}"
diff --git a/NEWS b/NEWS
index 8157115ff..0626c1732 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,27 @@
+=================
+buildstream 2.7.0
+=================
+
+  o Support defining source provenance attributes in project.conf (#2099)
+
+  o Support source provenance info for plugins with multiple sources (#2098)
+
+  o Don't require runtime deps when building with `--deps none` (#2102)
+
+  o Support artifact remote options in `bst artifact show` (#2088)
+
+  o Fix build of projects with multiple link elements with the same target (#2097)
+
+  o Fix read-only filesystem in buildtree shells (#2093)
+
+  o Artifact cache fixes (#2091)
+
+  o Fix pip plugins installed in editable mode (#2084)
+
+  o Fix error for commands without targets outside project dir (#2074)
+
+  o Drop support for Python 3.9 (#2085)
+
 =================
 buildstream 2.6.0
 =================