Security update for yt-dlp

This update for yt-dlp fixes the following issues:

Update to version 2026.08.19

* utils: float_or_none: Catch OverflowError
* americastestkitchen: Fix season/series extraction
* apple: Rework extractors
* ard: Remove dead extractor
* bandcamp: Support browser impersonation
* bfmtv: Fix extractor
* instagram: Fix logged-in extraction
* showroom: Rework extractors
* tiktok: Fix extractor
* tiktok: Fix formats extraction
* tiktok: Support share URLs
* twitter: broadcast: Fix events handling
* vimeo: Remove ios and macos clients
* whyp: Fix extractor
* youtube: Add visionos player client
* youtube: Add web_embedded client fallbacks
* youtube: Extract channel_follower_count for collaborators
* youtube: Fix live adaptive fragments generation
* youtube: Remove android_vr from default clients
* youtube: tab: Always extract channel metadata
* hls: Fix crash on empty fragment lists in tests

Update to version 2026.07.04

* The minimum recommended Python version has been raised to
3.11
* Security: [CVE-2026-55404] Downstream command injection via
improper sanitization of --write-link output
* Shortcut file data is now properly validated and sanitized
when the --write-link options are used
* Always include warnings in debug output
* Fix allow-unsafe-ext compat option
* Raise minimum recommended Python version to 3.11
* Validate and escape values in --write-link output
* cookies: Use ' instead of " for SQL string quoting
* utils: Deprecate make_dir in favor of make_parent_dirs
* utils: HTTPHeaderDict: Fix __ior__
* utils: parse_duration: Return int when appropriate
* utils: parse_resolution: Support fps suffixes
* utils: pkcs1pad: Fix invalid PKCS#1 v1.5 padding bytes
* utils: qualities: Avoid repeated index lookups
* utils: random_user_agent: Bump version range 143-149 =>
144-150
* Always include id in request error output
* Fix request logging
* arte: Fix playlist support
* bandcamp: weekly: Fix extractor
* bilibili: Fix API extraction
* instagram: Detect when cookies are invalidated
* instagram: Rework extractor
* linkedin: Remove broken login support
* mgtv: Fix VIP stream extraction
* mxplayer: Fix extractors
* mxplayer: Rework extractors
* niconico: Fix error detection
* niconico: Support shorts
* omnyfm: Add extractors
* openrec: Rework extractors
* patreon: Support new URL format
* peertube: Support password-protected videos
* periscope: Improve metadata extraction
* reddit: Remove broken login support
* soundcloud: Extract uploader_url for playlists
* soundcloud: Extract comments
* soundcloud: Improve metadata extraction
* streaks: Fix extractor
* svt: Fix extractor
* telewebion: Fix extractor
* trovo: Remove dead extractors
* truth: Support share URLs
* tviplayer: Fix extractor
* unsupported: Update unsupported sites
* wrestleuniverse: vod: Fix extractor
* youtube: Fix extract_relative_time for abbreviated units
* youtube: Fix detection of forced preroll wait time
* youtube: Fix minor issues
* youtube: Support live adaptive formats
* tab: Fix flat extraction of collaborators
* tab: Fix flat playlist metadata extraction
* tab: Fix metadata extraction
* tab: Fix pagination
* zan: Add extractor
* zdf: Detect livestreams
* zoom: clips: Add extractor
* external: Fix resuming downloads with aria2c
* external: curl: Support development versions
* mhtml: Fix storyboard content-length calculation
* build: Update 17 dependencies
* build: Update 6 dependencies
* cleanup: Fix invalid info dict fields
* cleanup: Fix minor mistakes
* cleanup: Remove RTSP and MMS support
* cleanup: Replace dead example/test URL
* cleanup: Miscellaneous: 997fa14
* docs: Make "No AI / No LLM Policy" abundantly clear

- Update to version 2026.06.09
* Fixed [CVE-2026-50019]: File Downloader cookie leak with curl
* Fixed [CVE-2026-50023]: Dangerous file type creation via
insufficient filename sanitization
* Fixed [CVE-2026-50574]: Arbitrary code execution via manifest
downloads with aria2c
* Added lockfile and pinned extras
* Removed url, desktop and webloc from safe extensions
* Extract supplemental codecs from DASH manifests
* abematv: Extract subtitles
* ard: Support new ardsounds domain
* monstercat: Support older URLs
* pornhub: Support browser impersonation
* reddit: Fix unauthenticated extraction
* rtp: Support multi-part episodes and --no-playlist
* s4c: Extract more metadata
* soop: Adapt extractors to new domain
* soundcloud: Support --extractor-retries for original formats
* twitch: Remove dead rechat subtitles
* twitter: Fix view_count extraction
* external: aria2c: Remove support for m3u8/dash protocols
* ffmpegmetadata: Avoid erroneous ISO 639 conversions

- Update to release 2026.03.17
* Always respect webpage_client extractor-arg
* Fix --live-from-start support

- Update to version 2026.03.13
* Extractor changes:
* tiktok: Fix challenge solving
* yt: Fix android_vr player client
* yt: Fix use_ad_playback_context extractor-arg
* yt: Fix web_embedded player client
* yt: Request web_safari & web_creator client configs
* tab: Fix album extraction
* tab: Improve description extraction
* Update ejs to 0.7.0
* ejs: Fix sig value encoding by
* ejs: Solve new player variants

- Update to version 2026.03.03
* Extractor changes:
* aenetworks: Fix extraction
* patreon: Fix extractors
* thechosen: Rework extractor
* yt: Skip webpage player response by default
* zapiks: Improve extraction

- Update to release 2026.02.21
* youtube: Add more known player JS variants
* date, search: Remove broken ytsearchdate support

- Update to release 2026.02.04
* unsupported: Update unsupported URLs
* yt: Default to tv player JS variant

- Update to release 2026.01.31
* yt: Add `web_embedded` fallback for `android_vr` client
* yt: Remove broken `ios_downgraded` and `tv_embedded` player
clients

- added quickjs recommends as a lighter alternative to deno and nodejs

- Update to release 2026.01.29
* Accept float values for command-line option `--sleep-subtitles`
* Add `--format-sort-reset` option
* yt: Support comment subthreads

- Update to release 2025.12.08
* cookies: Fix --cookies-from-browser for new installs of
Firefox 147+
* floatplane: add subtitle support
* yt: detect AI-upscaled formats

- Relax JS runtime requirement from required to recommended,
some formats can be downloaded without either runtime.
- Recommend nodejs as an alternative to deno
(Leap 15.6 has just nodejs).

- Update to release 2025.11.12
* An external JavaScript runtime is now used for full YouTube
support (e.g. deno).

- Use the pythons macro to reduce the amount of suse_version usage

- Update to version 2025.10.22
* A stopgap release with a TEMPORARY partial fix for YouTube
support. Some formats may still be unavailable, especially if
cookies are passed to yt-dlp. The NEXT release, expected very
soon, will require an external JS runtime (e.g. Deno) in
order for YouTube downloads to work properly.
* The minimum required Python version has been raised to 3.10
(Python 3.9 has reached its end-of-life as of October 2025).

- Update to release 2025.10.14
* yt: Detect experiment binding GVS PO Token to video id
* yt: Fix approximate timestamp extraction for feeds

- Use Python 3.13 in 15.7, due to lack of 3.12

- Update to release 2025.09.26
* twitch: vod: Fix live_status detection
* yt: Fix player JS overrides
* yt: Improve PO token logging
* yt: Player client maintenance
* yt: Replace tv_simply with web_safari in default clients
- Fix Leap 15.6 build

- Update to release 2025.09.23
* youtube: Force player 0004de42

- Update to version 2025.09.05
* Fix --id deprecation warning
* charlierose: Fix extractor
* googledrive: Fix subtitles extraction
* itvbtcc: Fix extractor
* kick: vod: Support ongoing livestream VODs
* lrt: Fix extractors
* tver: Extract more metadata
* vevo: Restore extractors
* build: Overhaul Linux builds and refactor release workflow

- Update to release 2025.08.27
* Add tcc player JS variant
* Deprioritize web_safari m3u8 formats
* Use alternative tv user-agent when authenticated

- Update to release 2025.08.22
* cookies: Fix --cookies-from-browser with Firefox 142+

- Update to release 2025.08.20
* Warn against use of `-f mp4`
* yt: Add es5 and es6 player JS variants
* yt: Default to main player JS variant
* yt: Extract title and description from initial data
* yt: Handle required preroll waiting period

- Update to release 2025.08.11
* yt: Add player params to mweb client
* dash: Re-extract if using --load-info-json with
--live-from-start

- Update to release 2025.07.21
* Default behaviour changed from --mtime to --no-mtime
* yt: Do not require PO Token for premium accounts
* yt: Extract global nsig helper functions
* yt: tab: Fix subscriptions feed extraction

- Update to release 2025.06.30
* youtube: Fix premium formats extraction

- Update to release 2025.06.25
* yt: Check any ios m3u8 formats prior to download
* yt: Improve player context payloads

- Update to release 2025.06.09
* adobepass: add Fubo MSO, fix Philo MSO authentication
* yt: Add tv_simply player client
* yt: Extract srt subtitles
* yt: Rework nsig function name extraction

- Update to release 2025.05.22
* yt: Add PO token support for subtitles
* yt: Add web_embedded client for age-restricted videos
* yt: Add a PO Token Provider Framework
* yt: Extract media_type for all videos
* yt: Fix --live-from-start support for premieres
* yt: Fix geo-restriction error handling

- Update to release 2025.04.30 [boo#1242186]
* New option --preset-alias/-t has been added

- Update to release 2025.03.31
* yt: add player_js_variant extractor-arg
* yt/tab: Fix playlist continuation extraction

- Update to release 2025.03.27
* youtube: Make signature and nsig extraction more robust

- Update to release 2025.03.26
* youtube: fix signature and nsig extraction for player 4fcd6e4a

- Update to release 2025.03.21
* Fix external downloader availability when using
``--ffmpeg-location``
* youtube: fix nsig and signature extraction for player 643afba4.

- Require same version between yt-dlp -> python-yt-dlp

- Update to release 2025.02.19
* NSIG workaround for tce player JS

- Update to release 2025.01.26
* bilibili: Support space video list extraction without login
* crunchyroll: Remove extractors
* youtube: Download tv client Innertube config
* youtube: Use different PO token for GVS and Player

- Update to release 2025.01.15
* youtube: Do not use web_creator as a default client

- Update to release 2025.01.12
* yt: fix DASH formats incorrectly skipped in some situations
* yt: refactor cookie auth

- Fix 15.6 build

- Update to release 2024.12.23
* yt: add age-gate workaround for some embeddable videos

- Update to release 2024.12.13
* yt: fix signature function extraction for 2f1832d2
* yt: prioritize original language over auto-dubbed audio

- Update to release 2024.12.06
* yt: fix ``n`` sig extraction for player 3bb1f723
* yt: fix signature function extraction
* yt: player client maintenance

- Update to release 2024.12.03
* bilibili: Always try to extract HD formats
* youtube: Adjust player clients for site changes

- Update to release 2024.11.18
* cloudflarestream: Avoid extraction via videodelivery.net
* youtube: remove broken OAuth support

- Update to release 2024.11.04
* Prioritize AV1
* Remove Python <= 3.8 support
* youtube: Adjust OAuth refresh token handling

- Update to release 2024.10.22
* yt: Remove broken android_producer client
* yt: Remove broken age-restriction workaround
* yt: Support logging in with OAuth

- Update to release 2024.10.07
* Fix cookie load error handling
* youtube: Change default player clients to ios,mweb
* patreon: Extract all m3u8 formats for locked posts

- Update to release 2024.09.27
* Support excluding player_clients in extractor-arg
* clip: Prioritize https formats

- Update to release 2024.08.06
* youtube: Fix `n` function name extraction for player `b12cc44b`

- Merge sh completion packages into main package
- Add yt-dlp-youtube-dl subpackage

Selected Binaries
openSUSE Build Service is sponsored by