pypi / yt-dlp
yt-dlp
What changed in yt-dlp 2026, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-20.
11 breaking3 security4 deprecations11 new APIs and options12 behavior and defaults19 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli inityt-dlp 202660 changes
Breaking changes 11
The dead ARD extractor has been removed.
The iOS and macOS clients have been removed.
Broken login support has been removed.
MMS support has been removed.
Broken login support has been removed.
RTSP support has been removed.
Support for downloading HLS and DASH formats with aria2c has been removed; use -N for concurrent fragment downloads via the native downloader.
Files with this extension may now be written only for --write-link functionality.
Command templates now allow only safe conversions; replace string conversions such as %(...)s with %(...)q. Numeric conversions are unaffected.
Files with this extension may now be written only for --write-link functionality.
Files with this extension may now be written only for --write-link functionality.
Security 3
Shortcut file data written with this option is now validated and sanitized to address downstream command injection.
Cookies are now passed with their scope respected, fixing a cookie leak on redirects for users of the curl downloader.
yt-dlp: Arbitrary Command Injection when using the
--netrc-cmdoption
Deprecations 4
The utils function number_of_digits is deprecated.
The utils function random_uuidv4 is deprecated.
The utility is deprecated in favor of
make_parent_dirs.The minimum recommended Python version is now 3.11; Python 3.10 support will be dropped soon.
New APIs and options 11
The channel_follower_count field is extracted for YouTube collaborators.
TikTok share URLs are supported.
A visionos YouTube player client is added.
YouTube adds web_embedded player client fallbacks.
Shorts are now supported.
Extractors have been added.
Password-protected videos are now supported.
Share URLs are now supported.
Live adaptive formats are now supported.
An extractor has been added.
A clips extractor has been added.
Behavior and default changes 12
android_vr is no longer among the default YouTube player clients.
Apple extractors have been reworked.
Bandcamp extraction supports browser impersonation.
The curl_cffi request handler supports curl_cffi 0.16.x.
Showroom extractors have been reworked.
Warnings are now always included in debug output.
Supports fps suffixes.
The extractor now extracts comments and
uploader_urlfor playlists, and improves metadata extraction.The extractor now detects livestreams.
Supplemental codecs are now extracted from DASH manifests, affecting the available format metadata.
This option is now supported for SoundCloud original formats.
Direct merge downloads with ffmpeg now use the info dict's HTTP headers.
Fixes and other changes 19
Season and series extraction is fixed.
The extractor is fixed.
Logged-in extraction is fixed.
Generation of live adaptive fragments is fixed.
The TikTok extractor is fixed.
TikTok format extraction is fixed.
The extractor is fixed.
The compatibility option is fixed.
Resuming downloads with aria2c is fixed.
Playlist support is fixed.
The weekly extractor is fixed.
API extraction is fixed.
The
__ior__operation is fixed.The extractor detects when cookies are invalidated and has been reworked.
VIP stream extraction is fixed.
Returns an
intwhen appropriate.The extractor supports the new URL format.
Invalid PKCS#1 v1.5 padding bytes are fixed.
Request error output now always includes the request id.