v26.909.2

This release refreshes Libratory's app dependencies and includes the security hardening from the September maintenance work.

• Updated Electron, React, React Router, PDF.js, the AI SDK, Fastify, Zod and Graphile Worker, along with the test and build tools.
• Fixed HN digest builds and profile renaming after switching back to the Default profile.
• JavaScript and Pocket TTS dependency audits are clean. Five known alerts remain in the main Python ML stack (Transformers and Accelerate); they require a separate model/runtime migration and are tracked in the security maintenance documentation.

Quit the old app before opening this version so old and new background workers do not run together during the worker database upgrade.

Validation: 701 unit/integration tests, lint, typechecking, production build and all 28 browser checks, including real extraction, synthesis, audiobook assembly, read-along and PDF/EPUB export.

Security maintenance details