New features:

1. ZIP Output: Change the template engine used for HTML templating from templite to Mustache, for greater safety and performance. Note that this is a breaking change if you use custom templates with ZIP output (CVE-2026-25731)
2. Check library: Add an option to rebuild the annotations search index (Closes tickets: 2139555)

Bug fixes:

1. CHM Input: Ignore internal files that have paths that end up outside the container. Prevents path traversal attacks with malicious CHM files (CVE-2026-25635)
2. EPUB Input: Ensure font obfuscation processing happens only on files from the EPUB, preventing path traversal attacks from malicious EPUB files (CVE-2026-25636)
3. Windows: Workaround for bug in Qt 6.10 causing Read Aloud in the E-book viewer to crash when stopped and restarted (Closes tickets: 2139521)
4. Fix drag and drop of books into bookshelf view not working (Closes tickets: 2139529)
5. Bookshelf: Fix bookshelf view blank on some macOS systems (Closes tickets: 2139403)
6. E-book viewer: Fix a regression in calibre 9.0 that broke the Go to page function (Closes tickets: 2139576)
7. E-book viewer: Fix google dictionary lookup results not legible (Closes tickets: 2140541)
8. E-book viewer: Fix PageUp/PageDown keys needing to be pressed repeatedly at internal HTML file boundaries in flow mode
9. Bookshelf: Avoid rendering during initial show while the view is still being resized
10. Fix a regression in calibre 9.0 that caused mouse wheel to scroll a full row at a time in the Cover grid
11. News download: Fix a regression in 8.11 that broke automatic cleanup of downloaded HTML
12. Version 9.2.1 prevents the Content server from using template based searches since this is insecure when the content server is used with un-authenticated users ( – Closes tickets: 2140769)

New news sources:

Improved news sources: