v2.0.2

TickTune v2.0.2 — dependencies

A maintenance release. Nothing you do in the app changes; the libraries
under it are current again.

Why

• The weekly security audit failed on 2026-10-26: a component Astro
  uses while building the site (undici, under its font resolver) had a
  high-severity advisory. It runs at build time and was never part of
  the page your browser loads, but the audit counts it, and the fix is
  a plain update.

What changed for you

• Tag reading (music-metadata 12.3.0), settings storage (Dexie 4.4.7),
  the translations engine (i18next 26.5.10) and the Svelte integration
  are each a patch or minor release newer.

Under the hood

• Every patch and minor update that was out, Vitest 5 and TypeScript
  6 for the test and type tooling, and two pinned overrides inside the
  development-only toolchain where upstream has not shipped a fix yet.
• The production dependency audit is clean. One advisory pair remains
  in Lighthouse CI's development-only tree (extract-zip), which has no
  release to move to and whose code that setup never runs.

Full notes: docs/16-ROADMAP.md, "v2.0.2 — dependencies".