Skip to content

Bump spotdl from 4.3.1 to 4.5.2#20

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/spotdl-4.5.2
Open

Bump spotdl from 4.3.1 to 4.5.2#20
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/spotdl-4.5.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps spotdl from 4.3.1 to 4.5.2.

Release notes

Sourced from spotdl's releases.

v4.5.2 - hotfix

  • Fixes v4.5.1 crashing at startup. yt-dlp's "Python 3.10 deprecated" notice was raised as a fatal error during startup. This affected all v4.5.1 executables, and pip installs running on Python 3.10.
  • Release executables are now built with Python 3.13.

[!WARNING] If you downloaded a v4.5.1 executable, replace it with the v4.5.2 build.

Full Changelog: spotDL/spotify-downloader@v4.5.1...v4.5.2

v4.5.1

Highlights

  • Downloads are faster and smoother. The download pipeline and FFmpeg conversion now use native asyncio for non-blocking I/O, and the progress bar reports more accurate stages (searching, getting metadata, downloading, converting).
  • Several providers are working again:
    • Piped: now searches via a working API instance and downloads through yt-dlp.
    • AZLyrics: no longer blocked by a redirect loop.
    • Bandcamp: no longer crashes on malformed API responses.
    • SoundCloud: fixed a bug where result durations were compared in milliseconds, causing poor matches.
  • Web UI fixes: the web player should work again, including when launched from the prebuilt executables.
  • Docker image changes:
    • The base image moved from python:3.13-alpine to python:3.14-slim-bookworm, and Deno is now pre-installed in the image, so JavaScript-runtime-dependent downloads work out of the box.
  • For those using spotDL as a library: the downloader is now async-first. Downloader.search_and_download will raise an error if called from a running event loop — await Downloader.async_search_and_download instead.

[!CAUTION] The executables attached to this release crash on startup with AudioProviderError: Deprecated Feature: Support for Python version 3.10 has been deprecated. Use v4.5.2 instead, which fixes this. This also affects pip installs of 4.5.1 running on Python 3.10 — upgrade with pip install -U spotdl, or use Python 3.11+. The executable downloads have been removed from this release.

What's Changed

... (truncated)

Commits
  • cd4a420 Release v4.5.2 (#2749)
  • bddacd7 Fix startup crash from yt-dlp Python 3.10 deprecation notice (#2748)
  • 26833d6 Release v4.5.1 (#2745)
  • 0fceb10 Upgrade spotapi to 1.2.8, drop tls_client bundling from build script (#2747)
  • da60370 Upgrade spotapi to 1.2.8, drop tls_client handling from build script
  • d618dab Bundle spotdl web UI assets in the frozen executable
  • 6473c79 Check HTTP status before parsing Genius search response
  • 027a66c Leave BandCamp art_url empty when art_id is missing
  • 89a6b0d Document that build.py mirrors tls_client's binary selection logic
  • a576e62 Guard async_convert against readline stream limit overrun
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [spotdl](https://github.com/spotDL/spotify-downloader) from 4.3.1 to 4.5.2.
- [Release notes](https://github.com/spotDL/spotify-downloader/releases)
- [Commits](spotDL/spotify-downloader@v4.3.1...v4.5.2)

---
updated-dependencies:
- dependency-name: spotdl
  dependency-version: 4.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants