yt-dlp

Commit Graph

Author	SHA1	Message	Date
Simon Sawicki	ff07792676	[core] Prevent RCE when using `--exec` with `%q` (CVE-2024-22423) The shell escape function now properly escapes `%`, `\\` and `\n`. `utils.Popen` as well as `%q` output template expansion have been patched accordingly. Prior to this fix using `--exec` together with `%q` when on Windows could cause remote code to execute. See https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-hjq6-52gw-2g7p for more details. Authored by: Grub4K	8 months ago
bashonly	216f6a3cb5	[cleanup] Misc (#9426 ) Authored by: bashonly, pukkandan	8 months ago
Leo Heitmann Ruiz	df0e138fc0	[docs] Various manpage fixes Authored by: leoheitmannruiz	8 months ago
pukkandan	c305a25c1b	[cleanup] Standardize `import datetime as dt` (#8978 )	8 months ago
sepro	86e3b82261	[core] Fix `filesize_approx` calculation (#9560 ) Reverts `22e4dfacb6` Despite being documented as `Kbit/s`, the extractors/manifests were returning bitrates in SI units of kilobits/sec. Authored by: seproDev, pukkandan	8 months ago
bashonly	58dd0f8d1e	[build] Optional dependencies cleanup (#9550 ) Authored by: bashonly	8 months ago
sepro	388c979ac6	[docs] Update yt-dlp tagline (#9481 ) Authored by: seproDev, bashonly, coletdjnz, Grub4K, pukkandan	8 months ago
bashonly	17b96974a3	[build] Update changelog for tarball and sdist (#9425 ) Closes #9417 Authored by: bashonly	8 months ago
pukkandan	615a84447e	[cleanup] Misc (#8968 ) Authored by: pukkandan, bashonly, seproDev	9 months ago
pukkandan	ed3bb2b0a1	[cleanup] Remove unused code (#8968 ) Authored by: pukkandan, seproDev	9 months ago
bashonly	cf91400a1d	[build] Add `default` optional dependency group (#9295 ) Authored by: bashonly, Grub4K Co-authored-by: Simon Sawicki <contact@grub4k.xyz>	9 months ago
bashonly	b8a433aaca	[devscripts] `install_deps`: Add script and migrate to it Authored by: bashonly	10 months ago
Simon Sawicki	fd647775e2	[devscripts] `tomlparse`: Add makeshift toml parser Authored by: Grub4K	10 months ago
Simon Sawicki	f9fb3ce86e	[cleanup] Misc (#8598 ) Authored by: bashonly, pukkandan, seproDev, Grub4K Co-authored-by: bashonly <bashonly@protonmail.com> Co-authored-by: pukkandan <pukkandan.ytdlp@gmail.com> Co-authored-by: sepro <4618135+seproDev@users.noreply.github.com>	11 months ago
Simon Sawicki	225cf2b830	Fix `2d1d683a54` Authored by: Grub4K	11 months ago
Simon Sawicki	2d1d683a54	[devscripts] `run_tests`: Create Python script (#8720 ) Authored by: Grub4K	11 months ago
bashonly	a9d3f4b20a	[cleanup] Fix changelog typo Authored by: bashonly	1 year ago
Simon Sawicki	b012271d01	[cleanup] Misc (#8510 ) Authored by: bashonly, coletdjnz, dirkf, gamer191, seproDev, Grub4K	1 year ago
bashonly	a00af29853	[cleanup] Update documentation for master and nightly channels Authored by: bashonly, Grub4K Co-authored-by: Simon Sawicki <contact@grub4k.xyz>	1 year ago
bashonly	1d03633c5a	[build] Overhaul and unify release workflow Authored by: bashonly, Grub4K Co-authored-by: Simon Sawicki <contact@grub4k.xyz>	1 year ago
bashonly	700444c23d	[ci] Run core tests with dependencies Authored by: bashonly, coletdjnz	1 year ago
Simon Sawicki	de015e9307	[core] Prevent RCE when using `--exec` with `%q` (CVE-2023-40581) The shell escape function is now using `""` instead of `\"`. `utils.Popen` has been patched to properly quote commands. Prior to this fix using `--exec` together with `%q` when on Windows could cause remote code to execute. See https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-42h4-v29r-42qg for reference. Authored by: Grub4K	1 year ago
Simon Sawicki	61bdf15fc7	[core] Raise minimum recommended Python version to 3.8 (#8183 ) Authored by: Grub4K	1 year ago
bashonly	5ca095cbcd	[cleanup] Misc (#8182 ) Closes #7796, Closes #8028 Authored by: barsnick, sqrtNOT, gamer191, coletdjnz, Grub4K, bashonly	1 year ago
Simon Sawicki	30ba233d4c	[devscripts] `make_changelog`: Fix changelog grouping and add networking group (#8124 ) Authored by: Grub4K	1 year ago
Simon Sawicki	836e06d246	[core] Fix support for upcoming Python 3.12 (#8130 ) This also adds the following test runners: - `3.12-dev` on `ubuntu-latest` - `3.12-dev` on `windows-latest` - `pypy-3.10` on `ubuntu-latest` Authored by: Grub4K	1 year ago
pukkandan	62b5c94cad	[cleanup] Misc fixes Closes #7528	1 year ago
pukkandan	c365dba843	[networking] Add module (#2861 ) No actual changes - code is only moved around	1 year ago
pukkandan	b532a34810	[docs] Minor fixes Closes #7515	1 year ago
pukkandan	337734d4a8	[cleanup] Misc	1 year ago
pukkandan	fa44802809	[devscripts/make_changelog] Skip reverted commits	1 year ago
pukkandan	812cdfa06c	[cleanup] Misc	1 year ago
pukkandan	5fd8367496	[extractor] Support multiple `_VALID_URL`s (#5812 ) Authored by: nixxo	1 year ago
pukkandan	ad54c9130e	[cleanup] Misc Closes #6288, Closes #7197, Closes #7265, Closes #7353, Closes #5773 Authored by: mikf, freezboltz, pukkandan	1 year ago
pukkandan	46f1370e9a	[devscripts/cli_to_api] Add script	2 years ago
Simon Sawicki	23c39a4bea	[devscripts] `make_changelog`: Various improvements - Make single items collapse into one line - Don't hide "Important changes" in `<details>` - Move upstream merge into priority - Properly support comma separated prefixes Authored by: Grub4K	2 years ago
bashonly	c4efa0aefe	[build] Various build workflow improvements - Wait for build before publishing to PyPI - Do not run `meta_files` job if release is cancelled - Customizable channel in release workflow - Display badges above changelog Authored by: bashonly, Grub4K	2 years ago
pukkandan	392389b7df	[cleanup] Misc	2 years ago
pukkandan	7accdd9845	[devscripts] `make_changelog`: Stop at `Release ...` commit Closes #6415	2 years ago
Simon Sawicki	9344964281	Fix `d400e261cf` Authored by: Grub4K	2 years ago
pukkandan	bfc861a91e	Fix bug in `29cb20bd56`	2 years ago
pukkandan	4815bbfc41	[cleanup] Misc	2 years ago
Simon Sawicki	29cb20bd56	[build] Automated builds and nightly releases (#6220 ) Closes #1839 Authored by: Grub4K, bashonly Co-authored-by: bashonly <88596187+bashonly@users.noreply.github.com>	2 years ago
Simon Sawicki	d400e261cf	[devscripts] Script to generate changelog (#6220 ) Authored by: Grub4K	2 years ago
pukkandan	5b28cef72d	[cleanup] Misc	2 years ago
pukkandan	a538772969	[cleanup] Misc Closes #5897	2 years ago
Matthew	8e40b9d1ec	Improve plugin architecture (#5553 ) to make plugins easier to develop and use: * Plugins are now loaded as namespace packages. * Plugins can be loaded in any distribution of yt-dlp (binary, pip, source, etc.). * Plugin packages can be installed and managed via pip, or dropped into any of the documented locations. * Users do not need to edit any code files to install plugins. * Backwards-compatible with previous plugin architecture. As a side-effect, yt-dlp will now search in a few more locations for config files. Closes https://github.com/yt-dlp/yt-dlp/issues/1389 Authored by: flashdagger, coletdjnz, pukkandan, Grub4K Co-authored-by: Marcel <flashdagger@googlemail.com> Co-authored-by: pukkandan <pukkandan.ytdlp@gmail.com> Co-authored-by: Simon Sawicki <accounts@grub4k.xyz>	2 years ago
pukkandan	6368e2e639	[cleanup] Misc Closes #5541	2 years ago
Lesmiscore	7d61d2306e	[build] Replace `set-output` with `GITHUB_OUTPUT` (#5315 ) https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/ Authored by: Lesmiscore	2 years ago
pukkandan	2fa669f759	[docs] Misc improvements Closes #4987, Closes #4906, Closes #4919, Closes #4977, Closes #4979	2 years ago

1 2 3 4 5 ...

322 Commits (3e35aa32c74bc108375be8c8b6b3bfc90dfff1b4)