Add lockfile and pinned extras (#16421)

* Add `pin`, `pin-curl-cffi`, `pin-secretstorage` and `pin-deno` extras
* Check in a `uv.lock` for devs
* Add `devscripts/update_requirements.py` for dependency upgrades

Authored by: bashonly, Grub4K

Co-authored-by: Simon Sawicki <contact@grub4k.dev>

devscripts/utils.py

@@ -1,8 +1,17 @@
+from __future__ import annotations
+
 import argparse
+import contextlib
 import datetime as dt
 import functools
+import itertools
+import json
+import os
 import re
 import subprocess
+import urllib.parse
+import urllib.request
+import zipfile
 
 
 def read_file(fname):
@@ -64,3 +73,46 @@ def run_process(*args, **kwargs):
         kwargs.setdefault('encoding', 'utf-8')
         kwargs.setdefault('errors', 'replace')
     return subprocess.run(args, **kwargs)
+
+
+def request(url: str, *, headers: dict | None = None):
+    req = urllib.request.Request(url, headers=headers or {})
+    return contextlib.closing(urllib.request.urlopen(req))
+
+
+def call_github_api(path: str, *, query: dict | None = None) -> dict | list:
+    API_BASE_URL = 'https://api.github.com/'
+    assert not path.startswith(('https://', 'http://')) or path.startswith(API_BASE_URL)
+
+    url = urllib.parse.urlparse(urllib.parse.urljoin(API_BASE_URL, path))
+    qs = urllib.parse.urlencode({
+        **urllib.parse.parse_qs(url.query),
+        **(query or {}),
+    }, True)
+
+    headers = {
+        'Accept': 'application/vnd.github+json',
+        'User-Agent': 'yt-dlp',
+        'X-GitHub-Api-Version': '2026-03-10',
+    }
+    if gh_token := os.getenv('GH_TOKEN'):
+        headers['Authorization'] = f'Bearer {gh_token}'
+
+    with request(urllib.parse.urlunparse(url._replace(query=qs)), headers=headers) as resp:
+        return json.load(resp)
+
+
+def zipf_files_and_folders(zipf: zipfile.ZipFile, glob: str = '*') -> tuple[list[str], list[str]]:
+    files = []
+    folders = []
+
+    path = zipfile.Path(zipf)
+    for f in itertools.chain(path.glob(glob), path.rglob(glob)):
+        if not f.is_file():
+            continue
+        files.append(f.at)
+        folder = f.parent.at.rstrip('/')
+        if folder and folder not in folders:
+            folders.append(folder)
+
+    return files, folders