Skip to content

chore(backend/deps): bump yt-dlp from 2025.12.8 to 2026.2.4 in /autogpt_platform/backend#12041

Open
dependabot[bot] wants to merge 2 commits intodevfrom
dependabot/pip/autogpt_platform/backend/dev/yt-dlp-2026.2.4
Open

chore(backend/deps): bump yt-dlp from 2025.12.8 to 2026.2.4 in /autogpt_platform/backend#12041
dependabot[bot] wants to merge 2 commits intodevfrom
dependabot/pip/autogpt_platform/backend/dev/yt-dlp-2026.2.4

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 9, 2026

Bumps yt-dlp from 2025.12.8 to 2026.2.4.

Release notes

Sourced from yt-dlp's releases.

yt-dlp 2026.02.04

Installation Discord Donate Documentation Nightly Master

A description of the various files is in the README

The zipimport Unix executable contains code licensed under ISC and MIT. The PyInstaller-bundled executables are subject to these and other licenses, all of which are compiled in THIRD_PARTY_LICENSES.txt


Extractor changes

yt-dlp 2026.01.31

Installation Discord Donate Documentation Nightly Master

A description of the various files is in the README

The zipimport Unix executable contains code licensed under ISC and MIT. The PyInstaller-bundled executables are subject to these and other licenses, all of which are compiled in THIRD_PARTY_LICENSES.txt


Extractor changes

Misc. changes

yt-dlp 2026.01.29

Installation Discord Donate Documentation Nightly Master

A description of the various files is in the README

The zipimport Unix executable contains code licensed under ISC and MIT. The PyInstaller-bundled executables are subject to these and other licenses, all of which are compiled in THIRD_PARTY_LICENSES.txt

... (truncated)

Changelog

Sourced from yt-dlp's changelog.

Changelog

2026.02.04

Extractor changes

2026.01.31

Extractor changes

Misc. changes

2026.01.29

Core changes

Extractor changes

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Greptile Overview

Greptile Summary

This PR bumps yt-dlp from version 2025.12.8 to 2026.2.4, updating both pyproject.toml and poetry.lock. The update includes several improvements to the YouTube extractor (defaulting to tv player JS variant, adding web_embedded fallback, removing broken player clients) and updates to unsupported URL handling.

Key changes:

  • Version bump from 2025.12.8 to 2026.2.4
  • Updated hash checksums in poetry.lock
  • Minor updates to optional extras (new build-curl-cffi and deno extras, updated yt-dlp-ejs dependency from 0.3.2 to 0.4.0)

Impact analysis:
The yt-dlp library is used only in backend/blocks/video/download.py for the VideoDownloadBlock, which is currently disabled (line 55: disabled=True) due to security sandboxing concerns. The block uses standard yt-dlp APIs (YoutubeDL, extract_info, prepare_filename) that remain stable across versions. Since the block is disabled in production, this update carries minimal risk to the application.

Confidence Score: 5/5

  • This PR is safe to merge with minimal risk
  • The dependency update is from a well-maintained library with standard version increments. The only usage of yt-dlp in the codebase is in a disabled block, meaning this update has no immediate production impact. The changes are limited to version numbers and lock file hashes, with no breaking API changes affecting the existing implementation.
  • No files require special attention

@dependabot dependabot bot added dependencies python Pull requests that update Python code labels Feb 9, 2026
@dependabot dependabot bot requested a review from a team as a code owner February 9, 2026 21:11
@dependabot dependabot bot added dependencies python Pull requests that update Python code labels Feb 9, 2026
@dependabot dependabot bot requested review from Pwuts and Swiftyos and removed request for a team February 9, 2026 21:11
@github-project-automation github-project-automation bot moved this to 🆕 Needs initial review in AutoGPT development kanban Feb 9, 2026
@github-actions github-actions bot added platform/backend AutoGPT Platform - Back end size/m conflicts Automatically applied to PRs with merge conflicts labels Feb 9, 2026
@github-actions
Copy link
Contributor

This pull request has conflicts with the base branch, please resolve those so we can evaluate the pull request.

@dependabot dependabot bot force-pushed the dependabot/pip/autogpt_platform/backend/dev/yt-dlp-2026.2.4 branch from 39d3ac0 to d53c7a0 Compare February 10, 2026 14:01
@github-actions github-actions bot removed the conflicts Automatically applied to PRs with merge conflicts label Feb 10, 2026
@github-actions
Copy link
Contributor

Conflicts have been resolved! 🎉 A maintainer will review the pull request shortly.

@ntindle
Copy link
Member

ntindle commented Feb 10, 2026

@dependabot recreate

Bumps [yt-dlp](https://github.com/yt-dlp/yt-dlp) from 2025.12.8 to 2026.2.4.
- [Release notes](https://github.com/yt-dlp/yt-dlp/releases)
- [Changelog](https://github.com/yt-dlp/yt-dlp/blob/master/Changelog.md)
- [Commits](yt-dlp/yt-dlp@2025.12.08...2026.02.04)

---
updated-dependencies:
- dependency-name: yt-dlp
  dependency-version: 2026.2.4
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/autogpt_platform/backend/dev/yt-dlp-2026.2.4 branch from d53c7a0 to b201e07 Compare February 10, 2026 21:30
@github-actions github-actions bot added the conflicts Automatically applied to PRs with merge conflicts label Feb 10, 2026
@github-actions
Copy link
Contributor

This pull request has conflicts with the base branch, please resolve those so we can evaluate the pull request.

Otto-AGPT added a commit that referenced this pull request Feb 11, 2026
Backend:
- aiodns: 3.5.0 → 4.0.0
- yt-dlp: 2025.12.08 → 2026.2.4
- e2b-code-interpreter: 1.5.2 → 2.4.1 (major)
- stagehand: 0.5.1 → 3.5.0 (major)
- groq: 0.30.0 → 1.0.0 (major)
- todoist-api-python: 2.1.7 → 3.2.1 (major)
- supabase: 2.27.3 → 2.28.0
- isort: 5.13.2 → 7.0.0 (major, dev)
- redis: 6.2.0 → 7.1.1 (major)

Libs:
- launchdarkly-server-sdk: 9.14.1 → 9.15.0
- supabase: 2.27.2 → 2.28.0
- redis: 6.2.0 → 7.1.1 (major)
- pytest: 8.4.1 → 9.0.2 (major, dev)

Combines: #12043, #12041, #12045, #12042, #12039, #12038, #12044, #11152, #12056, #12031, #12032
@Otto-AGPT
Copy link
Contributor

Superseded by #12058 (combined Python dependency updates)

@Otto-AGPT Otto-AGPT closed this Feb 11, 2026
@github-project-automation github-project-automation bot moved this from 🆕 Needs initial review to ✅ Done in AutoGPT development kanban Feb 11, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 11, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/pip/autogpt_platform/backend/dev/yt-dlp-2026.2.4 branch February 11, 2026 02:18
@Otto-AGPT
Copy link
Contributor

@dependabot recreate

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 11, 2026

Looks like this PR is closed. If you re-open it I'll rebase it as long as no-one else has edited it (you can use @dependabot reopen if the branch has been deleted).

@ntindle
Copy link
Member

ntindle commented Feb 11, 2026

@dependabot reopen

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 11, 2026

Beginning January 27, 2026, Dependabot will no longer support the @dependabot reopen command. Please use GitHub's native pull request controls instead. Please see the changelog announcement for additional details.

@ntindle
Copy link
Member

ntindle commented Feb 11, 2026

a

@ntindle ntindle restored the dependabot/pip/autogpt_platform/backend/dev/yt-dlp-2026.2.4 branch February 11, 2026 02:30
@ntindle ntindle reopened this Feb 11, 2026
Copy link

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

2 files reviewed, no comments

Edit Code Review Agent Settings | Greptile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

conflicts Automatically applied to PRs with merge conflicts dependencies platform/backend AutoGPT Platform - Back end python Pull requests that update Python code size/m

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

2 participants