Shotcut

## What's Changed

See a [nicely formatted page](https://www.shotcut.org/blog/new-release-26.9.27/) on the web site.

- Fixed security flaws in upgrade and Whisper downloads (failed HTTPS was retried over HTTP, certificate errors could be ignored, and a downloaded file could be used without a trusted digest).
- Fixed **Mask: Draw (Glaxnimate)** filter, **Operation > Subtract** for 8-bit processing mode (broke in version 25.12).
- Fixed using **Size, Position & Rotate** with **Mask: Apply** filters (broke in version 25.12).
- Improved audio quality by removing a conversion to 16-bit integer and keeping the pipeline in 32-bit float.
- Fixed LV2 external audio plugins not loading on Windows (unless `LV2_PATH` environment var set explicitly).
- Fixed VA-API HEVC hardware encoder on Linux.
- Fixed **Show in Folder** not working with non-ASCII characters on Linux.
- Fixed **Import Subtitles from File** not working on Windows.
- Fixed **Subtitles** view shows incorrect duration (broke in version 26.8).
- Fixed moving **Timeline** clip next to another with snap while zoomed out may insert 1 blank frame.
- Fixed copy and pasting a **Timeline** transition corrupt audio in the