Rev version to 2.6.3, consolidating the unpublished 2.6.2 notes

2.6.1 shipped while this PR was in flight, and the 2.6.2 version bump on
main was never published. Fold the 2.6.2 changelog entry, the Dependabot
updates, and the dev/test dependency pinning into the 2.6.3 entry.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: lelia

CHANGELOG.md

@@ -1,6 +1,6 @@
 # Changelog
 
-## 2.6.2
+## 2.6.3
 
 ### Fixed: SBOM fetch failures no longer produce empty reports
 
@@ -13,14 +13,24 @@
   instead of raising, and individual unparseable artifacts are skipped rather
   than failing the whole response.
 
-## 2.6.1
-
 ### Changed: bump pinned @coana-tech/cli to 15.10.4
 
 - Bumped the pinned reachability engine (`@coana-tech/cli`) from `15.10.3` to
   `15.10.4`. See the [Coana changelogs](https://docs.coana.tech/changelogs) for
   engine changes.
 
+### Changed: dependency updates and dev/test dependency pinning
+
+- Bumped pinned runtime dependencies: `beautifulsoup4` `4.14.3` → `4.15.0` and
+  `markdown` `3.10.2` → `3.10.3`.
+- Pinned the `test` and `dev` optional dependency groups to exact versions
+  (previously open ranges or unpinned), extending the exact-pinning policy
+  introduced in 2.6.0 to all dependency groups. This includes a major `twine`
+  bump (`6.2.0` → `7.0.0`), which only affects package publishing, not the
+  installed CLI.
+- Bumped GitHub Actions used in CI workflows (`actions/setup-python` to
+  `7.0.0`, plus minor/patch updates). No effect on the installed CLI.
+
 ## 2.6.1
 
 ### Changed: scan comparison now polls the diff-scans endpoints

pyproject.toml

@@ -6,7 +6,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "socketsecurity"
-version = "2.6.2"
+version = "2.6.3"
 requires-python = ">= 3.11"
 license = {"file" = "LICENSE"}
 dependencies = [

socketsecurity/__init__.py

@@ -1,3 +1,3 @@
 __author__ = 'socket.dev'
-__version__ = '2.6.2'
+__version__ = '2.6.3'
 USER_AGENT = f'SocketPythonCLI/{__version__}'