CVS commit: pkgsrc/net/yt-dlp

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun Feb 22 20:52:08 UTC 2026

Modified Files:
        pkgsrc/net/yt-dlp: Makefile PLIST distinfo

Log Message:
yt-dlp: update to 2026.2.21.

Security: [CVE-2026-26331] Arbitrary command injection with the --netrc-cmd option
The argument passed to the command in --netrc-cmd is now limited to a safe subset of characters

Changelog

Core changes

    cookies: Ignore cookies with control characters (#15862) by bashonly, syphyr
    jsinterp
        Fix bitwise operations (#15985) by bashonly
        Stringify bracket notation keys in object access (#15989) by bashonly
        Support string concatenation with + and += (#15990) by bashonly

Extractor changes

    Add browser impersonation support to more extractors (#16029) by bashonly
    Limit netrc_machine parameter to shell-safe characters by Grub4K
    1tv: Extract chapters (#15848) by hunter-gatherer8
    aenetworks: Fix extractor (#14959) by Sipherdrakon
    applepodcasts: Fix extractor (#15901) by coreywright
    dailymotion: Fix extraction (#15995) by bashonly
    facebook: ads: Fix extractor (#16002) by bashonly
    gem.cbc.ca: Support standalone, series & Olympics URLs (#15878) by 0xvd, bashonly, makew0rld
    learningonscreen: Fix extractor (#16028) by 0xvd, bashonly
    locipo: Add extractors (#15486) by doe1080, gravesducking
    matchitv: Add extractor (#15204) by gseddon
    odnoklassniki: Fix inefficient regular expression (#15974) by bashonly
    opencast: Support oc-p.uni-jena.de URLs (#16026) by LordMZTE
    pornhub: Fix extractor (#15858) by beacdeac
    saucepluschannel: Add extractor (#15830) by regulad
    soundcloud
        Fix client ID extraction (#16019) by bashonly
        Support browser impersonation (#16020) by bashonly
    spankbang
        Fix playlist title extraction (#14132) by blauerdorf
        Support browser impersonation (#14130) by blauerdorf
    steam: Fix extractor (#15028) by doe1080
    tele5: Fix extractor (#16005) by bashonly
    tver: olympic: Add extractor (#15885) by doe1080
    tvo: Add extractor (#15903) by doe1080
    twitter: Fix error handling (#15993) by bashonly (With fixes in 7722109)
    visir: Add extractor (#15811) by doe1080
    vk: Solve JS challenges using native JS interpreter (#15992) by 0xvd, bashonly
    xhamster: Fix extractor (#15831) by 0xvd
    youtube
        Add more known player JS variants (#15975) by bashonly
        Extract live adaptive incomplete formats (#15937) by bashonly, CanOfSocks
        Update ejs to 0.5.0 (#16031) by bashonly
        date, search: Remove broken ytsearchdate support (#15959) by stastix

Networking changes

    Request Handler: curl_cffi: Deprioritize unreliable impersonate targets (#16018) by bashonly

Misc. changes

    cleanup
        Bump ruff to 0.15.x (#15951) by Grub4K
        Miscellaneous: 646bb31 by Grub4K


To generate a diff of this commit:
cvs rdiff -u -r1.86 -r1.87 pkgsrc/net/yt-dlp/Makefile
cvs rdiff -u -r1.57 -r1.58 pkgsrc/net/yt-dlp/PLIST
cvs rdiff -u -r1.79 -r1.80 pkgsrc/net/yt-dlp/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/yt-dlp/Makefile
diff -u pkgsrc/net/yt-dlp/Makefile:1.86 pkgsrc/net/yt-dlp/Makefile:1.87
--- pkgsrc/net/yt-dlp/Makefile:1.86     Fri Feb  6 15:26:34 2026
+++ pkgsrc/net/yt-dlp/Makefile  Sun Feb 22 20:52:07 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.86 2026/02/06 15:26:34 wiz Exp $
+# $NetBSD: Makefile,v 1.87 2026/02/22 20:52:07 wiz Exp $
 
-DISTNAME=      yt_dlp-2026.2.4
+DISTNAME=      yt_dlp-2026.2.21
 PKGNAME=       ${DISTNAME:S/_/-/}
 CATEGORIES=    net
 MASTER_SITES=  ${MASTER_SITE_PYPI:=y/yt-dlp/}
@@ -26,8 +26,8 @@ post-install:
 ALLOW_NETWORK_ACCESS=  yes
 .endif
 
-# as of 2026.2.4
-# 2424 failed, 3849 passed, 1118 skipped, 3 warnings, 21 subtests passed
+# as of 2026.2.21
+# 2483 failed, 3819 passed, 1121 skipped, 3 warnings, 39 subtests passed
 
 .include "../../lang/python/wheel.mk"
 .include "../../mk/bsd.pkg.mk"

Index: pkgsrc/net/yt-dlp/PLIST
diff -u pkgsrc/net/yt-dlp/PLIST:1.57 pkgsrc/net/yt-dlp/PLIST:1.58
--- pkgsrc/net/yt-dlp/PLIST:1.57        Sun Feb  1 14:12:26 2026
+++ pkgsrc/net/yt-dlp/PLIST     Sun Feb 22 20:52:07 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.57 2026/02/01 14:12:26 adam Exp $
+@comment $NetBSD: PLIST,v 1.58 2026/02/22 20:52:07 wiz Exp $
 bin/yt-dlp
 ${PYSITELIB}/${WHEEL_INFODIR}/METADATA
 ${PYSITELIB}/${WHEEL_INFODIR}/RECORD
@@ -1442,6 +1442,9 @@ ${PYSITELIB}/yt_dlp/extractor/livestream
 ${PYSITELIB}/yt_dlp/extractor/lnk.py
 ${PYSITELIB}/yt_dlp/extractor/lnk.pyc
 ${PYSITELIB}/yt_dlp/extractor/lnk.pyo
+${PYSITELIB}/yt_dlp/extractor/locipo.py
+${PYSITELIB}/yt_dlp/extractor/locipo.pyc
+${PYSITELIB}/yt_dlp/extractor/locipo.pyo
 ${PYSITELIB}/yt_dlp/extractor/loco.py
 ${PYSITELIB}/yt_dlp/extractor/loco.pyc
 ${PYSITELIB}/yt_dlp/extractor/loco.pyo
@@ -1496,6 +1499,9 @@ ${PYSITELIB}/yt_dlp/extractor/massengesc
 ${PYSITELIB}/yt_dlp/extractor/masters.py
 ${PYSITELIB}/yt_dlp/extractor/masters.pyc
 ${PYSITELIB}/yt_dlp/extractor/masters.pyo
+${PYSITELIB}/yt_dlp/extractor/matchitv.py
+${PYSITELIB}/yt_dlp/extractor/matchitv.pyc
+${PYSITELIB}/yt_dlp/extractor/matchitv.pyo
 ${PYSITELIB}/yt_dlp/extractor/matchtv.py
 ${PYSITELIB}/yt_dlp/extractor/matchtv.pyc
 ${PYSITELIB}/yt_dlp/extractor/matchtv.pyo
@@ -2774,6 +2780,9 @@ ${PYSITELIB}/yt_dlp/extractor/tvn24.pyo
 ${PYSITELIB}/yt_dlp/extractor/tvnoe.py
 ${PYSITELIB}/yt_dlp/extractor/tvnoe.pyc
 ${PYSITELIB}/yt_dlp/extractor/tvnoe.pyo
+${PYSITELIB}/yt_dlp/extractor/tvo.py
+${PYSITELIB}/yt_dlp/extractor/tvo.pyc
+${PYSITELIB}/yt_dlp/extractor/tvo.pyo
 ${PYSITELIB}/yt_dlp/extractor/tvopengr.py
 ${PYSITELIB}/yt_dlp/extractor/tvopengr.pyc
 ${PYSITELIB}/yt_dlp/extractor/tvopengr.pyo
@@ -2948,6 +2957,9 @@ ${PYSITELIB}/yt_dlp/extractor/viously.py
 ${PYSITELIB}/yt_dlp/extractor/viqeo.py
 ${PYSITELIB}/yt_dlp/extractor/viqeo.pyc
 ${PYSITELIB}/yt_dlp/extractor/viqeo.pyo
+${PYSITELIB}/yt_dlp/extractor/visir.py
+${PYSITELIB}/yt_dlp/extractor/visir.pyc
+${PYSITELIB}/yt_dlp/extractor/visir.pyo
 ${PYSITELIB}/yt_dlp/extractor/viu.py
 ${PYSITELIB}/yt_dlp/extractor/viu.pyc
 ${PYSITELIB}/yt_dlp/extractor/viu.pyo

Index: pkgsrc/net/yt-dlp/distinfo
diff -u pkgsrc/net/yt-dlp/distinfo:1.79 pkgsrc/net/yt-dlp/distinfo:1.80
--- pkgsrc/net/yt-dlp/distinfo:1.79     Fri Feb  6 15:26:34 2026
+++ pkgsrc/net/yt-dlp/distinfo  Sun Feb 22 20:52:07 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.79 2026/02/06 15:26:34 wiz Exp $
+$NetBSD: distinfo,v 1.80 2026/02/22 20:52:07 wiz Exp $
 
-BLAKE2s (yt_dlp-2026.2.4.tar.gz) = f89da7059a6fc7beb03f28b9b45a0f4026794f7ef7e5b773f5e819adc89aabd6
-SHA512 (yt_dlp-2026.2.4.tar.gz) = 764f3f9e129ff5465531da25861fb7ca215fee8ffde3ba7f5072aff6c33e2be92799e34a6ea66e45f5c2b4d9d708d5e1fef8328d00695d9fe9b510a6737a9832
-Size (yt_dlp-2026.2.4.tar.gz) = 3100305 bytes
+BLAKE2s (yt_dlp-2026.2.21.tar.gz) = d59f4f35445b868228fed5255276e7c87e067c37af70184e884ba2b6b75675a6
+SHA512 (yt_dlp-2026.2.21.tar.gz) = 7a0bb3dcdf2fc9091e71194f01b17a5adcb84490629808f2041957a46065154bea795e8da2a4fbb46a3de34908ad24f1147b20bf75ec6b5e0d32d671bd69d36c
+Size (yt_dlp-2026.2.21.tar.gz) = 3116630 bytes