[cleanup] Misc (#17569)

Closes #17566, Closes #17815
Authored by: bashonly, gamer191, tcely

Co-authored-by: tcely <tcely@users.noreply.github.com>
Co-authored-by: gamer191 <83270075+gamer191@users.noreply.github.com>

README.md

@@ -2314,7 +2314,7 @@ Features marked with a **\*** have been back-ported to youtube-dl
 Some of yt-dlp's default options are different from that of youtube-dl and youtube-dlc:
 
 * yt-dlp supports only [Python 3.10+](## "Windows 8"), and will remove support for more versions as they [become EOL](https://devguide.python.org/versions/#python-release-cycle); while [youtube-dl still supports Python 2.6+ and 3.2+](https://github.com/ytdl-org/youtube-dl/issues/30568#issue-1118238743)
-* The options `--auto-number` (`-A`), `--title` (`-t`) and `--literal` (`-l`), no longer work. See [removed options](#Removed) for details
+* Some options no longer work. See [removed options](#removed) for details
 * `avconv` is not supported as an alternative to `ffmpeg`
 * yt-dlp stores config files in slightly different locations to youtube-dl. See [CONFIGURATION](#configuration) for a list of correct locations
 * The default [output template](#output-template) is `%(title)s [%(id)s].%(ext)s`. There is no real reason for this change. This was changed before yt-dlp was ever made public and now there are no plans to change it back to `%(title)s-%(id)s.%(ext)s`. Instead, you may use `--compat-options filename`
@@ -2476,10 +2476,7 @@ These options may no longer work as intended
     --no-include-ads                 Default
     --write-annotations              No supported site has annotations now
     --no-write-annotations           Default
-    --avconv-location                Removed alias for --ffmpeg-location
     --cn-verification-proxy URL      Removed alias for --geo-verification-proxy URL
-    --dump-headers                   Removed alias for --print-traffic
-    --dump-intermediate-pages        Removed alias for --dump-pages
     --youtube-skip-dash-manifest     Removed alias for --extractor-args "youtube:skip=dash" (Alias: --no-youtube-include-dash-manifest)
     --youtube-skip-hls-manifest      Removed alias for --extractor-args "youtube:skip=hls" (Alias: --no-youtube-include-hls-manifest)
     --youtube-include-dash-manifest  Default (Alias: --no-youtube-skip-dash-manifest)
@@ -2491,10 +2488,13 @@ These options may no longer work as intended
     --compat-options no-youtube-prefer-utc-upload-date  No longer supported
 
 #### Removed
-These options were deprecated since 2014 and have now been entirely removed
+These aliases have been removed and may be reused. Please update your scripts and configuration files accordingly
 
     -A, --auto-number                -o "%(autonumber)s-%(id)s.%(ext)s"
     -t, -l, --title, --literal       -o "%(title)s-%(id)s.%(ext)s"
+    --avconv-location                --ffmpeg-location
+    --dump-headers                   --print-traffic
+    --dump-intermediate-pages        --dump-pages
 
 
 # CONTRIBUTING

devscripts/changelog_override.json

@@ -398,5 +398,16 @@
     {
         "action": "remove",
         "when": "2bf72df3deaf3dc835d2ff1c99484f01723a5d13"
+    },
+    {
+        "action": "change",
+        "when": "f1df65d5d7a97bd81b3c70bf4bc41897b0616f6e",
+        "short": "[utils] `download_range_func`: Improve `__eq__` and `__repr__` (#16393)",
+        "authors": ["atsushi2965"]
+    },
+    {
+        "action": "add",
+        "when": "70279f2f0c576e23e1ec1406317d2cb85586af3f",
+        "short": "[priority] Security: Old yt-dlp executables are vulnerable to man-in-the-middle attacks\n    - A man-in-the-middle/MITM attack is when your internet traffic is intercepted by an attacker that impersonates the website(s) you browse and sends you malicious data instead.\n    - If you think you may be targeted by such an attack, it is strongly recommended to avoid using the self-updater (e.g. the `-U`, `--update`, `--update-to` command-line options), and instead manually download and install this release's executable.\n    - For more details, see the [`certifi` security advisory](https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2)"
     }
 ]

yt_dlp/downloader/external.py

@@ -249,7 +249,7 @@ class CurlFD(ExternalFD):
         return cmd
 
     def _call_process(self, cmd, info_dict):
-        if self._curl_version > self._MIN_VERSION_FOR_STDIN_COOKIES or os.path.islink('/dev/fd/0'):
+        if self._curl_version >= self._MIN_VERSION_FOR_STDIN_COOKIES or os.path.islink('/dev/fd/0'):
             # Supports `--cookies -` or reading from device file as `--cookies /dev/fd/0`
             buffer = io.StringIO()
             self.ydl.cookiejar._really_save(buffer, True, True)