[renovate]

This PR contains the following updates:

Package	Update	Change
yt-dlp/yt-dlp	minor	2026.08.19 → 2026.10.21

---

Release Notes

yt-dlp/yt-dlp

v2026.10.21

Compare Source

Important changes

• Security: Old yt-dlp executables are vulnerable to man-in-the-middle attacks
  • A man-in-the-middle/MITM attack is when your internet traffic is intercepted by an attacker that impersonates the website(s) you browse and sends you malicious data instead.
  • If you think you may be targeted by such an attack, it is strongly recommended to avoid using the self-updater (e.g. the -U, --update, --update-to command-line options), and instead manually download and install this release's executable.
  • For more details, see the certifi security advisory

Core changes

• update
  • Detect GitHub error page responses (#​17555) by bashonly
  • Remove bad advice (#​17492) by bashonly
• utils
  • Improve Content-Disposition filename parsing (#​17727) by doe1080
  • devalue: Improve binary type parsing (#​16934) by doe1080
  • download_range_func: Improve __eq__ and __repr__ (#​16393) by atsushi2965
  • setproctitle: Fix NUL termination (#​17724) by doe1080
  • subs_list_to_dict: Fix empty value handling (#​17311) by doe1080

Extractor changes

• Do not warn on intentional generic results (#​16683) by FraFraFra-LongD
• adn: Add profile_id extractor-arg (#​17522) by arobase-che
• applepodcasts: Fix token caching (#​17567) by tcely
• bandcamp: Fix extractors (#​17546) by bashonly
• globalplayer: Fix extractors (#​17442) by LillieH1000
• go: Improve error handling (#​15882) by norepro
• kick: Rework extractors (#​17322) by doe1080, InvalidUsernameException
• niconico: channel: Support channels (#​17398) by doe1080
• odnoklassniki: Fix extractor (#​17739) by InvalidUsernameException
• showroom: Fix extractor (#​17488) by doe1080, wlerin
• ted: Fix extractor (#​17510) by InvalidUsernameException
• tubitv
  • Improve extractor (#​16428) by InvalidUsernameException
  • series: Fix extractor (#​17545) by InvalidUsernameException
• twitch: clips: Fix extractor (#​17554) by bashonly
• youtube
  • Add tv_samsung client (#​17723) by error-reporting
  • Fix initial data extraction (#​17703) by InvalidUsernameException
  • Improve error messages (#​17884) by gamer191
  • Set tv_samsung as a default client (#​17805) by ruben1PvP
  • Use Safari UA for web_embedded client (#​17684) by gamer191

Networking changes

• Fix + decoding in SOCKS proxy credentials (#​17728) by doe1080
• Request Handler
  • urllib
    • Eagerly release BytesIO responses (#​17717) by doe1080
    • Fix relative redirects with dot segments (#​17712) by doe1080
  • websockets: Add legacy connect workaround for >=17.1 (#​17747) by bashonly

Misc. changes

• build
  • Bypass cooldown for deno (#​17880) by bashonly
  • Fix armv7l executable verification (#​17886) by bashonly
  • Update 2 dependencies (#​17882) by bashonly, dlp-bot
  • Update 33 dependencies (#​17581) by bashonly, dlp-bot
• ci: Update 3 actions in 3 workflows (#​17748) by bashonly, dlp-bot
• cleanup
  • Remove obsolete Python compatibility code (#​17357) by doe1080
  • Miscellaneous: 36b92b4 by bashonly, gamer191, tcely
• devscripts: update_requirements: Preserve cffi dependencies on PyPy (#​17716) by doe1080
• docs: Fix Namespace documentation (#​17324) by doe1080
• requirements: Fix locking for pycparser (#​17746) by Grub4K
• test
  • Fix handshake error matching for OpenSSL 4.x (#​17491) by mikelolasagasti
  • websockets: Update server hang workaround (#​17718) by doe1080

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.