diff --git a/.github/common.env b/.github/common.env
index 152504fd6..de24cb564 100644
--- a/.github/common.env
+++ b/.github/common.env
@@ -1,6 +1,6 @@
 # Shared common variables
 
-CI_IMAGE_VERSION=master-2057058575
+CI_IMAGE_VERSION=master-2310077904
 CI_TOXENV_MAIN=py310,py311,py312,py313,py314
 CI_TOXENV_PLUGINS=py310-plugins,py311-plugins,py312-plugins,py313-plugins,py314-plugins
 CI_TOXENV_ALL="${CI_TOXENV_MAIN},${CI_TOXENV_PLUGINS}"
diff --git a/NEWS b/NEWS
index 8157115ff..3c18f7e02 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,26 @@
+=================
+buildstream 2.7.0
+=================
+
+  o Support defining source provenance attributes in project.conf (#2099)
+
+  o Allow multi-source plugins to provide source provenance info per source (#2098)
+
+  o Don't require runtime deps when building projects with `--deps none` (#2102)
+
+  o Add `--artifact-remote` and `--ignore-project-artifact-remotes` options to
+    `bst artifact show` (#2088)
+
+  o Fix build of projects with multiple link elements with the same target (#2097)
+
+  o Fix filesystem write access in `bst shell` with a cached build tree (#2093)
+
+  o Artifact cache fixes to support buildgrid-asset as cache server (#2091)
+
+  o Fix pip plugins installed in editable mode (#2084)
+
+  o Drop support for Python 3.9 (#2085)
+
 =================
 buildstream 2.6.0
 =================