commit: ab889670ed3e2d0409911f0a8d0edf034c3e73c2 Author: Ionen Wolkens <ionen <AT> gentoo <DOT> org> AuthorDate: Sun Feb 22 00:29:49 2026 +0000 Commit: Ionen Wolkens <ionen <AT> gentoo <DOT> org> CommitDate: Sun Feb 22 00:33:42 2026 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ab889670
net-misc/yt-dlp: drop vuln <2026.02.21 versions Bug: https://bugs.gentoo.org/970421 Signed-off-by: Ionen Wolkens <ionen <AT> gentoo.org> net-misc/yt-dlp/Manifest | 4 - net-misc/yt-dlp/yt-dlp-2025.12.08.ebuild | 122 ------------------------------ net-misc/yt-dlp/yt-dlp-2026.01.29.ebuild | 122 ------------------------------ net-misc/yt-dlp/yt-dlp-2026.01.31.ebuild | 122 ------------------------------ net-misc/yt-dlp/yt-dlp-2026.02.04.ebuild | 124 ------------------------------- 5 files changed, 494 deletions(-) diff --git a/net-misc/yt-dlp/Manifest b/net-misc/yt-dlp/Manifest index 62a281b297e0..c16400ab6020 100644 --- a/net-misc/yt-dlp/Manifest +++ b/net-misc/yt-dlp/Manifest @@ -1,5 +1 @@ -DIST yt-dlp-2025.12.08.tar.gz 6159820 BLAKE2B a89a76120cdcaa820bb15bedbe7ab9b173209c978399a5236f05c18c43ebf9b525cb678cdf9fada00da69024d2a928cf4292520a557eb79dc5835c5ebe119674 SHA512 44d0ddb238ff53a3ba09245c41e122b53445e858b0ee3d32d139718317d30dcb3645bc36bd53065a137640f6c886ad61b0d1b0cfe132056142943c547e86bc00 -DIST yt-dlp-2026.01.29.tar.gz 6174651 BLAKE2B a2ab7672c1cbfdc6c5a6effc7aefc84515928c4b2815aaaccb59db8890734d2b2e2747ffab4173bf36371420bfd26bb879d9ca0ccb8fbb260c44bfe33c12fd9c SHA512 f695591227a5a7fff63cd64a0b18de175c37a001053d5b89b2bdbdaf9c8d732b0d515c15ca9baf1e01efc37bd988cabe3a8a5c959e8354076b02488257c76f4d -DIST yt-dlp-2026.01.31.tar.gz 6177758 BLAKE2B ec86a20e757c508aefeadb9cdd2496fbeb5700248cfdbc7df627eac18a558d09a01286080ccb0c424d428023f99d5f15a7337bddfd3475ca4e26986c8ca02bf8 SHA512 f2296cc7ced9bf1e4d1ad1cf3e7ae089599fb6c7fb608da65fbbd04e93952e26e6d41918919f5d49af9a8ddcccf1264856de847e2dd5f81dd2617755e3da4b43 -DIST yt-dlp-2026.02.04.tar.gz 6177722 BLAKE2B 9c63d39f0aea311d1770371aef4aa0f4f3a435ecd79de9fc34fc145796ded0a317d329be553588e9d688e70fd6df14dc93e73919a90621dab56c19376a161927 SHA512 a304bca363d3c7b42fca950e03c899f015061f7ca15ba7f360eb3d7fc51f906347e5cad8ede45503757fc436fc19bd90c04fdbec1a1628a0796e2ff2b5ea6b66 DIST yt-dlp-2026.02.21.tar.gz 6209777 BLAKE2B 8a2510cc902e0b9209fe12de00832d522f6383f1ee75309ee8bd7213cb727216da3fce7d267e6d838383e03532b814f802d6888729b659b239c49cc9eb8aa479 SHA512 7ac36dbf03411d738ea337a56184e84eb65423f006d040ceb51356804420beffbadeec7c9b6915cdc048565a036df9ee07afa5e81a669647867d8001282b22d2 diff --git a/net-misc/yt-dlp/yt-dlp-2025.12.08.ebuild b/net-misc/yt-dlp/yt-dlp-2025.12.08.ebuild deleted file mode 100644 index 76d76b9fcc85..000000000000 --- a/net-misc/yt-dlp/yt-dlp-2025.12.08.ebuild +++ /dev/null @@ -1,122 +0,0 @@ -# Copyright 1999-2025 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=8 - -DISTUTILS_USE_PEP517=hatchling -PYTHON_COMPAT=( pypy3_11 python3_{11..14} ) -inherit distutils-r1 optfeature shell-completion wrapper - -if [[ ${PV} == 9999 ]]; then - inherit git-r3 - EGIT_REPO_URI="https://github.com/yt-dlp/yt-dlp.git"; -else - SRC_URI=" - https://github.com/yt-dlp/yt-dlp/releases/download/${PV}/${PN}.tar.gz - -> ${P}.tar.gz - " - S=${WORKDIR}/${PN} - # note that yt-dlp bumps are typically done straight-to-stable (unless some - # major/breaking changes) given website changes breaks it on a whim - KEYWORDS="amd64 arm arm64 ~hppa ppc ppc64 ~riscv x86 ~arm64-macos ~x64-macos" -fi - -DESCRIPTION="youtube-dl fork with additional features and fixes" -HOMEPAGE="https://github.com/yt-dlp/yt-dlp/"; - -LICENSE="Unlicense" -SLOT="0" -IUSE="+deno" - -# deno is technically a optfeature, but it is needed for proper YouTube -# support and most users would expect that to work out-of-the-box -# (there are alternatives like nodejs but upstream disables support by -# default due to security concerns, users are on their own for these) -# -# yt-dlp-ejs requires pinning due to yt-dlp checking sha512sum of .js, -# live ebuild users may need to use the self-updater method if out of -# sync as there are no plans for a yt-dlp-ejs live ebuild at the moment -# (should "typically" be updated in Gentoo within 24h if willing to wait) -RDEPEND=" - dev-python/pycryptodome[${PYTHON_USEDEP}] - =dev-python/yt-dlp-ejs-0.3*[${PYTHON_USEDEP}] - deno? ( dev-lang/deno-bin ) -" -BDEPEND=" - test? ( media-video/ffmpeg[webp] ) -" - -if [[ ${PV} == 9999 ]]; then - IUSE+=" man" - BDEPEND+=" man? ( virtual/pandoc )" -fi - -EPYTEST_PLUGINS=() -distutils_enable_tests pytest - -python_compile() { - if [[ ${PV} == 9999 ]]; then - # generate missing files in live, not in compile_all nor prepare - # given need lazy before compile and it needs a usable ${PYTHON} - emake completions lazy-extractors $(usev man yt-dlp.1) - - "${EPYTHON}" devscripts/update-version.py || die - fi - - distutils-r1_python_compile -} - -python_test() { - local EPYTEST_DESELECT=( - # fails with FEATURES=network-sandbox - test/test_networking.py::TestHTTPRequestHandler::test_connect_timeout - # fails with FEATURES=distcc, bug #915614 - test/test_networking.py::TestYoutubeDLNetworking::test_proxy\[None-expected2\] - # websockets tests break easily depending on dev-python/websockets - # version and, as far as I know, most users do not use/need it -- - # thus being neither in RDEPEND nor optfeature (bug #940630,#950030) - test/test_websockets.py - ) - - epytest -m 'not download' -} - -python_install_all() { - dodoc README.md Changelog.md supportedsites.md - - if [[ ${PV} == 9999 ]]; then - use man && doman yt-dlp.1 - else - doman yt-dlp.1 - rm -r -- "${ED}"/usr/share/doc/yt_dlp || die - fi - - dobashcomp completions/bash/yt-dlp - dofishcomp completions/fish/yt-dlp.fish - dozshcomp completions/zsh/_yt-dlp - - make_wrapper youtube-dl "yt-dlp --compat-options youtube-dl" -} - -pkg_postinst() { - optfeature "various features (merging tracks, streamed content)" media-video/ffmpeg - has_version media-video/atomicparsley || # allow fallback but don't advertise - optfeature "embedding metadata thumbnails in MP4/M4A files" media-libs/mutagen - optfeature "decrypting cookies from Chromium-based browsers" dev-python/secretstorage - - if [[ ! ${REPLACING_VERSIONS} ]]; then - elog - elog 'A wrapper using "yt-dlp --compat-options youtube-dl" was installed' - elog 'as "youtube-dl". This is strictly for compatibility and it is' - elog 'recommended to use "yt-dlp" directly, it may be removed in the future.' - fi - - if use !deno; then - ewarn - ewarn "USE=deno is disabled, using ${PN} with some websites like YouTube may" - ewarn "not function properly. If your profile does not allow enabling this USE," - ewarn "can use net-libs/nodejs instead but it is disabled by default due to" - ewarn "security(!) concerns and requires manually passing '--js-runtimes node'" - ewarn "(to be permanent: echo '--js-runtimes node' >> ~/.config/yt-dlp/config)" - fi -} diff --git a/net-misc/yt-dlp/yt-dlp-2026.01.29.ebuild b/net-misc/yt-dlp/yt-dlp-2026.01.29.ebuild deleted file mode 100644 index 846089bdb604..000000000000 --- a/net-misc/yt-dlp/yt-dlp-2026.01.29.ebuild +++ /dev/null @@ -1,122 +0,0 @@ -# Copyright 1999-2026 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=8 - -DISTUTILS_USE_PEP517=hatchling -PYTHON_COMPAT=( pypy3_11 python3_{11..14} ) -inherit distutils-r1 optfeature shell-completion wrapper - -if [[ ${PV} == 9999 ]]; then - inherit git-r3 - EGIT_REPO_URI="https://github.com/yt-dlp/yt-dlp.git"; -else - SRC_URI=" - https://github.com/yt-dlp/yt-dlp/releases/download/${PV}/${PN}.tar.gz - -> ${P}.tar.gz - " - S=${WORKDIR}/${PN} - # note that yt-dlp bumps are typically done straight-to-stable (unless some - # major/breaking changes) given website changes breaks it on a whim - KEYWORDS="amd64 arm arm64 ~hppa ppc ppc64 ~riscv x86 ~arm64-macos ~x64-macos" -fi - -DESCRIPTION="youtube-dl fork with additional features and fixes" -HOMEPAGE="https://github.com/yt-dlp/yt-dlp/"; - -LICENSE="Unlicense" -SLOT="0" -IUSE="+deno" - -# deno is technically a optfeature, but it is needed for proper YouTube -# support and most users would expect that to work out-of-the-box -# (there are alternatives like nodejs but upstream disables support by -# default due to security concerns, users are on their own for these) -# -# yt-dlp-ejs requires pinning due to yt-dlp checking sha512sum of .js, -# live ebuild users may need to use the self-updater method if out of -# sync as there are no plans for a yt-dlp-ejs live ebuild at the moment -# (should "typically" be updated in Gentoo within 24h if willing to wait) -RDEPEND=" - dev-python/pycryptodome[${PYTHON_USEDEP}] - =dev-python/yt-dlp-ejs-0.4*[${PYTHON_USEDEP}] - deno? ( >=dev-lang/deno-bin-2.6.6 ) -" -BDEPEND=" - test? ( media-video/ffmpeg[webp] ) -" - -if [[ ${PV} == 9999 ]]; then - IUSE+=" man" - BDEPEND+=" man? ( virtual/pandoc )" -fi - -EPYTEST_PLUGINS=() -distutils_enable_tests pytest - -python_compile() { - if [[ ${PV} == 9999 ]]; then - # generate missing files in live, not in compile_all nor prepare - # given need lazy before compile and it needs a usable ${PYTHON} - emake completions lazy-extractors $(usev man yt-dlp.1) - - "${EPYTHON}" devscripts/update-version.py || die - fi - - distutils-r1_python_compile -} - -python_test() { - local EPYTEST_DESELECT=( - # fails with FEATURES=network-sandbox - test/test_networking.py::TestHTTPRequestHandler::test_connect_timeout - # fails with FEATURES=distcc, bug #915614 - test/test_networking.py::TestYoutubeDLNetworking::test_proxy\[None-expected2\] - # websockets tests break easily depending on dev-python/websockets - # version and, as far as I know, most users do not use/need it -- - # thus being neither in RDEPEND nor optfeature (bug #940630,#950030) - test/test_websockets.py - ) - - epytest -m 'not download' -} - -python_install_all() { - dodoc README.md Changelog.md supportedsites.md - - if [[ ${PV} == 9999 ]]; then - use man && doman yt-dlp.1 - else - doman yt-dlp.1 - rm -r -- "${ED}"/usr/share/doc/yt_dlp || die - fi - - dobashcomp completions/bash/yt-dlp - dofishcomp completions/fish/yt-dlp.fish - dozshcomp completions/zsh/_yt-dlp - - make_wrapper youtube-dl "yt-dlp --compat-options youtube-dl" -} - -pkg_postinst() { - optfeature "various features (merging tracks, streamed content)" media-video/ffmpeg - has_version media-video/atomicparsley || # allow fallback but don't advertise - optfeature "embedding metadata thumbnails in MP4/M4A files" media-libs/mutagen - optfeature "decrypting cookies from Chromium-based browsers" dev-python/secretstorage - - if [[ ! ${REPLACING_VERSIONS} ]]; then - elog - elog 'A wrapper using "yt-dlp --compat-options youtube-dl" was installed' - elog 'as "youtube-dl". This is strictly for compatibility and it is' - elog 'recommended to use "yt-dlp" directly, it may be removed in the future.' - fi - - if use !deno; then - ewarn - ewarn "USE=deno is disabled, using ${PN} with some websites like YouTube may" - ewarn "not function properly. If your profile does not allow enabling this USE," - ewarn "can use net-libs/nodejs instead but it is disabled by default due to" - ewarn "security(!) concerns and requires manually passing '--js-runtimes node'" - ewarn "(to be permanent: echo '--js-runtimes node' >> ~/.config/yt-dlp/config)" - fi -} diff --git a/net-misc/yt-dlp/yt-dlp-2026.01.31.ebuild b/net-misc/yt-dlp/yt-dlp-2026.01.31.ebuild deleted file mode 100644 index 846089bdb604..000000000000 --- a/net-misc/yt-dlp/yt-dlp-2026.01.31.ebuild +++ /dev/null @@ -1,122 +0,0 @@ -# Copyright 1999-2026 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=8 - -DISTUTILS_USE_PEP517=hatchling -PYTHON_COMPAT=( pypy3_11 python3_{11..14} ) -inherit distutils-r1 optfeature shell-completion wrapper - -if [[ ${PV} == 9999 ]]; then - inherit git-r3 - EGIT_REPO_URI="https://github.com/yt-dlp/yt-dlp.git"; -else - SRC_URI=" - https://github.com/yt-dlp/yt-dlp/releases/download/${PV}/${PN}.tar.gz - -> ${P}.tar.gz - " - S=${WORKDIR}/${PN} - # note that yt-dlp bumps are typically done straight-to-stable (unless some - # major/breaking changes) given website changes breaks it on a whim - KEYWORDS="amd64 arm arm64 ~hppa ppc ppc64 ~riscv x86 ~arm64-macos ~x64-macos" -fi - -DESCRIPTION="youtube-dl fork with additional features and fixes" -HOMEPAGE="https://github.com/yt-dlp/yt-dlp/"; - -LICENSE="Unlicense" -SLOT="0" -IUSE="+deno" - -# deno is technically a optfeature, but it is needed for proper YouTube -# support and most users would expect that to work out-of-the-box -# (there are alternatives like nodejs but upstream disables support by -# default due to security concerns, users are on their own for these) -# -# yt-dlp-ejs requires pinning due to yt-dlp checking sha512sum of .js, -# live ebuild users may need to use the self-updater method if out of -# sync as there are no plans for a yt-dlp-ejs live ebuild at the moment -# (should "typically" be updated in Gentoo within 24h if willing to wait) -RDEPEND=" - dev-python/pycryptodome[${PYTHON_USEDEP}] - =dev-python/yt-dlp-ejs-0.4*[${PYTHON_USEDEP}] - deno? ( >=dev-lang/deno-bin-2.6.6 ) -" -BDEPEND=" - test? ( media-video/ffmpeg[webp] ) -" - -if [[ ${PV} == 9999 ]]; then - IUSE+=" man" - BDEPEND+=" man? ( virtual/pandoc )" -fi - -EPYTEST_PLUGINS=() -distutils_enable_tests pytest - -python_compile() { - if [[ ${PV} == 9999 ]]; then - # generate missing files in live, not in compile_all nor prepare - # given need lazy before compile and it needs a usable ${PYTHON} - emake completions lazy-extractors $(usev man yt-dlp.1) - - "${EPYTHON}" devscripts/update-version.py || die - fi - - distutils-r1_python_compile -} - -python_test() { - local EPYTEST_DESELECT=( - # fails with FEATURES=network-sandbox - test/test_networking.py::TestHTTPRequestHandler::test_connect_timeout - # fails with FEATURES=distcc, bug #915614 - test/test_networking.py::TestYoutubeDLNetworking::test_proxy\[None-expected2\] - # websockets tests break easily depending on dev-python/websockets - # version and, as far as I know, most users do not use/need it -- - # thus being neither in RDEPEND nor optfeature (bug #940630,#950030) - test/test_websockets.py - ) - - epytest -m 'not download' -} - -python_install_all() { - dodoc README.md Changelog.md supportedsites.md - - if [[ ${PV} == 9999 ]]; then - use man && doman yt-dlp.1 - else - doman yt-dlp.1 - rm -r -- "${ED}"/usr/share/doc/yt_dlp || die - fi - - dobashcomp completions/bash/yt-dlp - dofishcomp completions/fish/yt-dlp.fish - dozshcomp completions/zsh/_yt-dlp - - make_wrapper youtube-dl "yt-dlp --compat-options youtube-dl" -} - -pkg_postinst() { - optfeature "various features (merging tracks, streamed content)" media-video/ffmpeg - has_version media-video/atomicparsley || # allow fallback but don't advertise - optfeature "embedding metadata thumbnails in MP4/M4A files" media-libs/mutagen - optfeature "decrypting cookies from Chromium-based browsers" dev-python/secretstorage - - if [[ ! ${REPLACING_VERSIONS} ]]; then - elog - elog 'A wrapper using "yt-dlp --compat-options youtube-dl" was installed' - elog 'as "youtube-dl". This is strictly for compatibility and it is' - elog 'recommended to use "yt-dlp" directly, it may be removed in the future.' - fi - - if use !deno; then - ewarn - ewarn "USE=deno is disabled, using ${PN} with some websites like YouTube may" - ewarn "not function properly. If your profile does not allow enabling this USE," - ewarn "can use net-libs/nodejs instead but it is disabled by default due to" - ewarn "security(!) concerns and requires manually passing '--js-runtimes node'" - ewarn "(to be permanent: echo '--js-runtimes node' >> ~/.config/yt-dlp/config)" - fi -} diff --git a/net-misc/yt-dlp/yt-dlp-2026.02.04.ebuild b/net-misc/yt-dlp/yt-dlp-2026.02.04.ebuild deleted file mode 100644 index dfa71364638f..000000000000 --- a/net-misc/yt-dlp/yt-dlp-2026.02.04.ebuild +++ /dev/null @@ -1,124 +0,0 @@ -# Copyright 1999-2026 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=8 - -DISTUTILS_USE_PEP517=hatchling -PYTHON_COMPAT=( pypy3_11 python3_{11..14} ) -inherit distutils-r1 optfeature shell-completion wrapper - -if [[ ${PV} == 9999 ]]; then - inherit git-r3 - EGIT_REPO_URI="https://github.com/yt-dlp/yt-dlp.git"; -else - SRC_URI=" - https://github.com/yt-dlp/yt-dlp/releases/download/${PV}/${PN}.tar.gz - -> ${P}.tar.gz - " - S=${WORKDIR}/${PN} - # note that yt-dlp bumps are typically done straight-to-stable (unless some - # major/breaking changes) given website changes breaks it on a whim - KEYWORDS="amd64 arm arm64 ~hppa ppc ppc64 ~riscv x86 ~arm64-macos ~x64-macos" -fi - -DESCRIPTION="youtube-dl fork with additional features and fixes" -HOMEPAGE="https://github.com/yt-dlp/yt-dlp/"; - -LICENSE="Unlicense" -SLOT="0" -IUSE="+deno" - -# deno is technically a optfeature, but it is needed for proper YouTube -# support and most users would expect that to work out-of-the-box -# (there are alternatives like nodejs but upstream disables support by -# default due to security concerns, users are on their own for these) -# -# yt-dlp-ejs requires pinning due to yt-dlp checking sha512sum of .js, -# live ebuild users may need to use the self-updater method if out of -# sync as there are no plans for a yt-dlp-ejs live ebuild at the moment -# (should "typically" be updated in Gentoo within 24h if willing to wait) -RDEPEND=" - dev-python/pycryptodome[${PYTHON_USEDEP}] - =dev-python/yt-dlp-ejs-0.4*[${PYTHON_USEDEP}] - deno? ( >=dev-lang/deno-bin-2.6.6 ) -" -BDEPEND=" - test? ( media-video/ffmpeg[webp] ) -" - -if [[ ${PV} == 9999 ]]; then - IUSE+=" man" - BDEPEND+=" man? ( virtual/pandoc )" -fi - -EPYTEST_PLUGINS=() -distutils_enable_tests pytest - -python_compile() { - if [[ ${PV} == 9999 ]]; then - # generate missing files in live, not in compile_all nor prepare - # given need lazy before compile and it needs a usable ${PYTHON} - emake completions lazy-extractors $(usev man yt-dlp.1) - - "${EPYTHON}" devscripts/update-version.py || die - fi - - distutils-r1_python_compile -} - -python_test() { - local EPYTEST_DESELECT=( - # fails with >=python-3.13.12, bug #969632 - test/test_cookies.py::TestLenientSimpleCookie::test_parsing - # fails with FEATURES=network-sandbox - test/test_networking.py::TestHTTPRequestHandler::test_connect_timeout - # fails with FEATURES=distcc, bug #915614 - test/test_networking.py::TestYoutubeDLNetworking::test_proxy\[None-expected2\] - # websockets tests break easily depending on dev-python/websockets - # version and, as far as I know, most users do not use/need it -- - # thus being neither in RDEPEND nor optfeature (bug #940630,#950030) - test/test_websockets.py - ) - - epytest -m 'not download' -} - -python_install_all() { - dodoc README.md Changelog.md supportedsites.md - - if [[ ${PV} == 9999 ]]; then - use man && doman yt-dlp.1 - else - doman yt-dlp.1 - rm -r -- "${ED}"/usr/share/doc/yt_dlp || die - fi - - dobashcomp completions/bash/yt-dlp - dofishcomp completions/fish/yt-dlp.fish - dozshcomp completions/zsh/_yt-dlp - - make_wrapper youtube-dl "yt-dlp --compat-options youtube-dl" -} - -pkg_postinst() { - optfeature "various features (merging tracks, streamed content)" media-video/ffmpeg - has_version media-video/atomicparsley || # allow fallback but don't advertise - optfeature "embedding metadata thumbnails in MP4/M4A files" media-libs/mutagen - optfeature "decrypting cookies from Chromium-based browsers" dev-python/secretstorage - - if [[ ! ${REPLACING_VERSIONS} ]]; then - elog - elog 'A wrapper using "yt-dlp --compat-options youtube-dl" was installed' - elog 'as "youtube-dl". This is strictly for compatibility and it is' - elog 'recommended to use "yt-dlp" directly, it may be removed in the future.' - fi - - if use !deno; then - ewarn - ewarn "USE=deno is disabled, using ${PN} with some websites like YouTube may" - ewarn "not function properly. If your profile does not allow enabling this USE," - ewarn "can use net-libs/nodejs instead but it is disabled by default due to" - ewarn "security(!) concerns and requires manually passing '--js-runtimes node'" - ewarn "(to be permanent: echo '--js-runtimes node' >> ~/.config/yt-dlp/config)" - fi -}
