[dependabot]

Bumps gdown from 6.1.0 to 6.4.0.

Release notes

Sourced from gdown's releases.

v6.4.0

Added

• Optional cancellation events for download() and cached_download() interrupt stalled response reads and download waits without shortening network timeouts, raising DownloadCancelled while preserving partial-file cleanup. (#525)

Changed

• An invalid --speed value now reports the accepted units instead of an internal function name. (#527)

Removed

• importlib is no longer exported from the gdown package; it was listed in __all__ by accident. (#526)

v6.3.0

Added

• Add a secretstorage installation extra for importing Chromium cookies from GNOME Keyring with pip install 'gdown[secretstorage]' or uvx --from 'gdown[secretstorage]' gdown. (#505)
• download(), download_folder(), and cached_download() accept a requests-style timeout, exposed on the command line as --timeout SECONDS, so a stalled server no longer blocks forever. (#510)
• Add opt-in --retries N and Python retries=N for automatic recovery of interrupted file and folder downloads, with bounded backoff and validated byte-range resume; --continue still controls reuse of earlier downloads. (#517)

Changed

• cached_download() verifies hash while streaming instead of reading the finished file back from disk. (#512)
• The command line reports a hit --timeout as a timeout instead of asking to file an issue. (#513)

Fixed

• Propagate progress callback exceptions unchanged instead of misreporting chunked-encoding errors as incomplete downloads. (#519)

v6.2.0

Added

• Add --cookies-from-browser BROWSER to download as your signed-in Google account using cookies read straight from a local browser, and --cookies FILE to use a cookies file other than ~/.cache/gdown/cookies.txt. The cookies file is now written owner-only and keeps session cookies. (#494)

Changed

• Continue downloading the remaining files in a folder after individual downloads fail, then report all failures together. (#495)
• Automatically detect Google Drive folder URLs, making --folder necessary only for ambiguous bare IDs. (#496)

Fixed

• Close download sessions and streamed responses on early exits, failures, and response replacement, including single-file Listing and resumed downloads. (#499)
• Remove cached-download staging directories after success or interruption, and create the cache on demand instead of during import. (#500)
• Honor an explicitly supplied user agent for file downloads within folders while retaining the existing default user agents. (#501)
• Fix folder --json export paths and preserve export extensions for dotted Google-native filenames. (#503)
• Preserve the saved cookies file when browser cookie extraction reports an error instead of replacing working session cookies with invalid decrypted values. (#504)

... (truncated)

Changelog

Sourced from gdown's changelog.

6.4.0 - 2026-09-17

Added

• Optional cancellation events for download() and cached_download() interrupt stalled response reads and download waits without shortening network timeouts, raising DownloadCancelled while preserving partial-file cleanup. (#525)

Changed

• An invalid --speed value now reports the accepted units instead of an internal function name. (#527)

Removed

• importlib is no longer exported from the gdown package; it was listed in __all__ by accident. (#526)

6.3.0 - 2026-09-16

Added

• Add a secretstorage installation extra for importing Chromium cookies from GNOME Keyring with pip install 'gdown[secretstorage]' or uvx --from 'gdown[secretstorage]' gdown. (#505)
• download(), download_folder(), and cached_download() accept a requests-style timeout, exposed on the command line as --timeout SECONDS, so a stalled server no longer blocks forever. (#510)
• Add opt-in --retries N and Python retries=N for automatic recovery of interrupted file and folder downloads, with bounded backoff and validated byte-range resume; --continue still controls reuse of earlier downloads. (#517)

Changed

• cached_download() verifies hash while streaming instead of reading the finished file back from disk. (#512)
• The command line reports a hit --timeout as a timeout instead of asking to file an issue. (#513)

Fixed

• Propagate progress callback exceptions unchanged instead of misreporting chunked-encoding errors as incomplete downloads. (#519)

6.2.0 - 2026-09-06

Added

• Add --cookies-from-browser BROWSER to download as your signed-in Google account using cookies read straight from a local browser, and --cookies FILE to use a cookies file other than ~/.cache/gdown/cookies.txt. The cookies file is now written owner-only and keeps session cookies. (#494)

Changed

• Continue downloading the remaining files in a folder after individual downloads fail, then report all failures together. (#495)
• Automatically detect Google Drive folder URLs, making --folder necessary only for ambiguous bare IDs. (#496)

Fixed

• Close download sessions and streamed responses on early exits, failures, and response replacement, including single-file Listing and resumed downloads. (#499)
• Remove cached-download staging directories after success or interruption, and create the cache on demand instead of during import. (#500)
• Honor an explicitly supplied user agent for file downloads within folders while retaining the existing default user agents. (#501)
• Fix folder --json export paths and preserve export extensions for dotted Google-native filenames. (#503)
• Preserve the saved cookies file when browser cookie extraction reports an error instead of replacing working session cookies with invalid decrypted values. (#504)

... (truncated)

Commits

• 8429f0d chore: prep 6.4.0 release
• f8e8393 Merge pull request #528 from wkentaro/ci/validate-release-notes
• f9dae03 ci: validate release notes before publishing
• bb18fac Merge pull request #525 from wkentaro/feat/prompt-download-cancellation
• 474f4d4 feat: allow cancelling stalled downloads
• 2bb699e Merge pull request #527 from wkentaro/refactor/make-file-size-non-public
• 7b67d7d Merge pull request #526 from wkentaro/fix/stop-exporting-importlib
• 1fee823 chore: add speed error message changelog fragment
• 57bfb49 refactor: make the speed size parser non-public
• 08b7f4f chore: add importlib export changelog fragment
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)