Yes, digital products are included in GPSR, which was confirmed last week in a set of FAQs issued by the EU.
‘Digital products’ includes; PDF downloads, ebooks and courses, as well as software. You might be wondering how on earth a digital product could be unsafe, but GPSR covers ‘risks to both physical health and mental health’.