security(deps): update dependencies and rebuild kepubify with go 1.27.2

Bump every direct dependency to its newest same-major release and move the
node base image to 26.11.1, which invalidates the cached apk layer and picks
up tiff 4.7.2 for CVE-2026-4775. Rebuild all six kepubify binaries from the
pinned upstream commit with Go 1.27.2 for CVE-2026-78667, CVE-2026-78669 and
CVE-2026-97031, keeping v4-dev so rendition hashes stay stable.
This commit is contained in:
neon
2026-10-11 05:19:04 +00:00
parent e4843e4aa1
commit c37821782a
12 changed files with 1793 additions and 1844 deletions
Binary file not shown.