peter
452ff042ff
Since 2026-10-28 the signed-in Facebook read gives no upload date, so every Facebook file since was named 0000-00-00 in Season_0 (31 on prod, none before). The signed-out read that already titles these downloads carries the date, so it now lends that too when the signed-in read has none (backfill.public_title_info is now public_page_info). On-disk names dropped every letter outside the Latin script, so a Hebrew, Cyrillic, Greek or CJK uploader went to one shared "untitled" folder (prod asset 503). anyascii now writes them in Latin letters (Сергей Иванов -> Sergei_Ivanov); Latin and accented names are unchanged.
38 lines
2.0 KiB
Plaintext
38 lines
2.0 KiB
Plaintext
fastapi>=0.115,<1.0
|
||
uvicorn[standard]>=0.30,<1.0
|
||
sqlalchemy>=2.0,<2.1
|
||
psycopg[binary]>=3.2,<4.0
|
||
alembic>=1.13,<2.0
|
||
pydantic>=2.7,<3.0
|
||
pydantic-settings>=2.3,<3.0
|
||
authlib>=1.3,<2.0
|
||
httpx>=0.27,<1.0
|
||
feedparser>=6.0,<7.0
|
||
apscheduler>=3.10,<4.0
|
||
py3langid>=0.3,<1.0
|
||
itsdangerous>=2.1,<3.0
|
||
cryptography>=50.0.0,<51
|
||
argon2-cffi>=23.1,<26
|
||
# On-disk names are ASCII (storage._ascii_fold): a Hebrew, Cyrillic, Greek or CJK uploader name is
|
||
# written in Latin letters instead of dropped whole into one shared "untitled" folder. Pure Python,
|
||
# no dependencies of its own.
|
||
anyascii>=0.3.3,<0.4
|
||
# Download center: yt-dlp does the extraction/download; ffmpeg (OS-level in the Dockerfile)
|
||
# does the merge + postprocessing. The [default] extra pulls yt-dlp-ejs (the challenge-solver
|
||
# scripts Deno runs for YouTube's n-signature). yt-dlp is release-often (YouTube changes), so
|
||
# keep the floor loose and bump it when extraction breaks. 2026.8.19 marks the clients that need a
|
||
# stream PO token, which the shipped player clients (config.download_player_clients) rely on.
|
||
yt-dlp[default]>=2026.8.19
|
||
# Browser impersonation (`impersonate`) for Facebook downloads made with the user's cookie: some
|
||
# links answer a signed-in plain request with "Cannot parse data" and only parse as Chrome
|
||
# (measured). The range is YT-DLP's, not ours — yt-dlp 2026.07.04 imported curl_cffi only in
|
||
# 0.10.x–0.15.x and silently reported every target "unavailable" outside it (2026.08.19 takes up to
|
||
# 0.16.x; the cap stays on the measured 0.15 until a bump re-measures it). Move it when bumping
|
||
# yt-dlp; `tests/test_facebook_impersonation.py::test_the_locked_curl_cffi_can_impersonate_chrome`
|
||
# fails the gate if the locked pair can no longer impersonate.
|
||
curl_cffi>=0.10,<0.16
|
||
# PO Token provider plugin: talks to the bgutil sidecar (brainicism/bgutil-ytdlp-pot-provider)
|
||
# to mint YouTube Proof-of-Origin tokens on demand, bypassing "confirm you're not a bot" and
|
||
# unlocking high-quality formats. Pin to match the sidecar image tag (versions must align).
|
||
bgutil-ytdlp-pot-provider==1.3.1
|