build(deps): bump yt-dlp from 2024.5.27 to 2024.7.2

[dependabot[bot]]

Bumps yt-dlp from 2024.5.27 to 2024.7.2.

Release notes

Sourced from yt-dlp's releases.

yt-dlp 2024.07.02

A description of the various files are in the README

---

Core changes

• Fix --compat-opt allow-unsafe-ext (#10336) by bashonly, rdamas

Extractor changes

• banbye: Fix extractor (#10332) by PatrykMis, seproDev
• murrtube: Fix extractor (#9249) by DrakoCpp
• zaiko: Support JWT video URLs (#10130) by pzhlkj6612

Postprocessor changes

• embedthumbnail: Fix embedding with mutagen (#10337) by bashonly

Misc. changes

• cleanup: Miscellaneous: 93d33cb by bashonly

yt-dlp 2024.07.01

A description of the various files are in the README

---

Important changes

• Security: [CVE-2024-38519] Properly sanitize file-extension to prevent file system modification and RCE
  • Unsafe extensions are now blocked from being downloaded

Core changes

• Add playlist_channel and playlist_channel_id fields (#10266) by bashonly
• Disallow unsafe extensions (CVE-2024-38519) by Grub4K
• cookies: Fix --cookies-from-browser DE detection on Linux (#10237) by peisenwang

Extractor changes

• afreecatv
  • Support browser impersonation (#10174) by hui1601
  • catchstory: Add extractor (#10235) by hui1601
• bilibili: Support legacy formats (#9117) by c-basalt, GD-Slime
• bitchute: Fix extractors (#10301) by seproDev
• brightcove: Upgrade requests to HTTPS (#10202) by bashonly

... (truncated)

Changelog

Sourced from yt-dlp's changelog.

Changelog

2024.07.02

Core changes

• Fix --compat-opt allow-unsafe-ext (#10336) by bashonly, rdamas

Extractor changes

• banbye: Fix extractor (#10332) by PatrykMis, seproDev
• murrtube: Fix extractor (#9249) by DrakoCpp
• zaiko: Support JWT video URLs (#10130) by pzhlkj6612

Postprocessor changes

• embedthumbnail: Fix embedding with mutagen (#10337) by bashonly

Misc. changes

• cleanup: Miscellaneous: 93d33cb by bashonly

2024.07.01

Important changes

• Security: [CVE-2024-38519] Properly sanitize file-extension to prevent file system modification and RCE
  • Unsafe extensions are now blocked from being downloaded

Core changes

• Add playlist_channel and playlist_channel_id fields (#10266) by bashonly
• Disallow unsafe extensions (CVE-2024-38519) by Grub4K
• cookies: Fix --cookies-from-browser DE detection on Linux (#10237) by peisenwang

Extractor changes

• afreecatv
  • Support browser impersonation (#10174) by hui1601
  • catchstory: Add extractor (#10235) by hui1601
• bilibili: Support legacy formats (#9117) by c-basalt, GD-Slime
• bitchute: Fix extractors (#10301) by seproDev
• brightcove: Upgrade requests to HTTPS (#10202) by bashonly
• cloudflarestream: Fix _VALID_URL and embed extraction (#10215) by bashonly
• cloudycdn: Fix formats extraction (#10271) by Caesim404
• digitalconcerthall: Rework extractor (#10152) by seproDev, tippfehlr
• facebook: reel: Fix extraction (#10232) by bashonly
• francetv
  • Detect and raise errors for DRM (#10165) by bashonly
  • Fix extractor (#10177) by bashonly
• generic: Add key_query extractor-arg by bashonly
• graspop: Add extractor (#10268) by Niluge-KiWi
• jiocinema: series: Fix extraction (#10139) by varunchopra

... (truncated)

Commits

• d28aa87 Release 2024.07.02
• 93d33cb [cleanup] Misc (#10330)
• 7799e51 [ie/zaiko] Support JWT video URLs (#10130)
• 7509791 [ie/banbye] Fix extractor (#10332)
• 6403530 [ie/murrtube] Fix extractor (#9249)
• d502f4c [pp/embedthumbnail] Fix embedding with mutagen (#10337)
• 773bbb1 [core] Fix --compat-opt allow-unsafe-ext (#10336)
• cd68258 Release 2024.07.01
• 5ce5824 [core] Disallow unsafe extensions (CVE-2024-38519)
• 6aaf96a [cleanup] Misc (#10075)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)