Skip to content

chore 🤖(deps): bump yt-dlp from 2025.10.22 to 2026.3.17 - #540

Merged
biodrone merged 1 commit into
stagingfrom
dependabot/uv/staging/yt-dlp-2026.3.17
Apr 13, 2026
Merged

chore 🤖(deps): bump yt-dlp from 2025.10.22 to 2026.3.17#540
biodrone merged 1 commit into
stagingfrom
dependabot/uv/staging/yt-dlp-2026.3.17

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 13, 2026 •
edited by coderabbitai Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps yt-dlp from 2025.10.22 to 2026.3.17.

Release notes

Sourced from yt-dlp's releases.

yt-dlp 2026.03.17

Installation Discord Donate Documentation Nightly Master

A description of the various files is in the README

The zipimport Unix executable contains code licensed under ISC and MIT. The PyInstaller-bundled executables are subject to these and other licenses, all of which are compiled in THIRD_PARTY_LICENSES.txt

Extractor changes

Misc. changes

yt-dlp 2026.03.13

Installation Discord Donate Documentation Nightly Master

A description of the various files is in the README

The zipimport Unix executable contains code licensed under ISC and MIT. The PyInstaller-bundled executables are subject to these and other licenses, all of which are compiled in THIRD_PARTY_LICENSES.txt

Extractor changes

... (truncated)

Changelog

Sourced from yt-dlp's changelog.

Changelog

2026.03.17

Extractor changes

Misc. changes

2026.03.13

Extractor changes

2026.03.03

Extractor changes

2026.02.21

Important changes

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

  • Chores
    • Updated core video processing dependencies to latest versions for improved reliability and compatibility.

@dependabot
chore 🤖(deps): bump yt-dlp from 2025.10.22 to 2026.3.17
f1e10ec 
Bumps [yt-dlp](https://github.com/yt-dlp/yt-dlp) from 2025.10.22 to 2026.3.17.
- [Release notes](https://github.com/yt-dlp/yt-dlp/releases)
- [Changelog](https://github.com/yt-dlp/yt-dlp/blob/master/Changelog.md)
- [Commits](yt-dlp/yt-dlp@2025.10.22...2026.03.17)

---
updated-dependencies:
- dependency-name: yt-dlp
  dependency-version: 2026.3.17
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 13, 2026
@coderabbitai

coderabbitai Bot commented Apr 13, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: ef91a3bb-f980-42f1-8527-22db4f8e1d8f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • ✅ Review completed - (🔄 Check again to review again)
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/uv/staging/yt-dlp-2026.3.17

Comment @coderabbitai help to get the list of available commands and usage tips.

coderabbitai[bot]
coderabbitai Bot reviewed Apr 13, 2026
View reviewed changes

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🧹 Nitpick comments (1)
pyproject.toml (1)

13-13: Tighten yt-dlp version constraint to prevent silent breakage from future releases.

The code directly mutates yt_dlp.utils.std_headers and yt_dlp.utils.bug_reports_message, and relies on string matching within exception messages ("Requested format is not available", "HTTP Error 429: Too Many Requests ", "currently offline"). The open-ended >=2026.3.17 range risks runtime failures if these internals or error message formats change in future yt-dlp versions. Prefer pinning to an exact version (==2026.3.17) or establishing a tested upper bound.

Suggested change 
-  "yt-dlp>=2026.3.17",
+  "yt-dlp==2026.3.17",
🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In `@pyproject.toml` at line 13, The dependency constraint for yt-dlp is too open
and risks breakage because the code mutates yt_dlp.utils.std_headers and
yt_dlp.utils.bug_reports_message and matches on specific exception text (e.g.,
"Requested format is not available", "HTTP Error 429: Too Many Requests ",
"currently offline"); update the pyproject.toml requirement from the loose
"yt-dlp>=2026.3.17" to a safer pinned or bounded version such as
"yt-dlp==2026.3.17" (or "yt-dlp>=2026.3.17,<2026.4.0") so runtime behavior of
yt_dlp.utils.std_headers / bug_reports_message and the exception message formats
remain as tested.
🤖 Prompt for all review comments with AI agents 
Verify each finding against the current code and only fix it if needed.

Nitpick comments:
In `@pyproject.toml`:
- Line 13: The dependency constraint for yt-dlp is too open and risks breakage
because the code mutates yt_dlp.utils.std_headers and
yt_dlp.utils.bug_reports_message and matches on specific exception text (e.g.,
"Requested format is not available", "HTTP Error 429: Too Many Requests ",
"currently offline"); update the pyproject.toml requirement from the loose
"yt-dlp>=2026.3.17" to a safer pinned or bounded version such as
"yt-dlp==2026.3.17" (or "yt-dlp>=2026.3.17,<2026.4.0") so runtime behavior of
yt_dlp.utils.std_headers / bug_reports_message and the exception message formats
remain as tested.
ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: c5fe3eab-42de-4cc9-8f61-69ab5ebc417d

📥 Commits

Reviewing files that changed from the base of the PR and between 1bd5ae1 and f1e10ec.

⛔ Files ignored due to path filters (1)
  • uv.lock is excluded by !**/*.lock
📒 Files selected for processing (1)
  • pyproject.toml

@biodrone biodrone mentioned this pull request Apr 13, 2026
Closed
@biodrone
biodrone merged commit 7dcb2ac into staging Apr 13, 2026
9 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/staging/yt-dlp-2026.3.17 branch April 13, 2026 17:50
@coderabbitai coderabbitai Bot mentioned this pull request Apr 14, 2026
Merged
2 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@coderabbitai coderabbitai[bot] coderabbitai[bot] left review comments

Assignees

@biodrone biodrone

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@biodrone