sunnypatell/sunnify-spotify-downloader v2.5.0 on GitHub

what's changed

one opt-in feature for networks youtube refuses, plus two web fixes that are already live.

added

youtube cookies for networks youtube gates (closes #112). when youtube asks a whole network to prove it isn't a bot, it refuses every download from it, and sunnify says so once in plain words. switching networks usually clears it. where it doesn't, you can now hand sunnify the cookies of your own logged-in youtube session with --cookies FILE, or set it once for both the cli and the desktop app with sunnify config --set cookies_file=FILE. a logged-in session only gets player variants that need a javascript challenge solved, so the builds now bundle yt-dlp's solver and run it in deno's sandbox, which you install once. sunnify only ever reads your file: every request works from a private copy that is deleted afterwards, and nothing from it reaches the logs. the setup guide covers exporting cookies safely, and sunnify doctor tells you if anything is missing.

fixed

(web) the metadata api answers bad requests with a 400 (#111). malformed json, json arrays and non-string urls got a 500; they now get a 400, and a url wrapped in a list is no longer treated as a valid one.
(web) webclient dependencies patched. next, sharp and two build-time parsers, clearing five advisories (two of them high). both web fixes have been live since they landed.

not changed, on purpose

without cookies, nothing about how sunnify talks to youtube changes. no javascript runtime is enabled on that path even if deno is installed, and the matcher and the retry clients work exactly as they did in 2.4.3.

requested by @Ryukomat44, who tested the approach on their own gated network before i built it, and the request-body fix is @coreyschafer02's. thank you both.

verifying this release: every asset is covered by SLSA build L3 provenance - gh attestation verify <asset> --repo sunnypatell/sunnify-spotify-downloader, or check checksums.txt with sha256sum -c.

install via homebrew (macos):

brew tap sunnypatell/sunnify https://github.com/sunnypatell/sunnify-spotify-downloader
brew install --cask sunnypatell/sunnify/sunnify

full changelog: v2.4.3...v2.5.0

⭐ if sunnify saved you time, star the repo - stars are how people find it.

attestations from this build

direct links to each attestation generated by the workflow run that produced these binaries (sigstore-signed, public-good rekor log entry, SLSA build L3 via the release-build.yml reusable workflow):

the *.sigstore.json assets attached above are the same attestations as offline-verifiable bundles. these get auto-refreshed on every release re-build, so the links above always correspond to the binaries currently attached to this release.