Skip to content

Verify yt-dlp temporary downloads before install - #15

Draft
Blackspirits wants to merge 1 commit into
upl/review-base-18eefrom
fix/ytdlp-part-checksum-18ee
Draft

Verify yt-dlp temporary downloads before install#15
Blackspirits wants to merge 1 commit into
upl/review-base-18eefrom
fix/ytdlp-part-checksum-18ee

Conversation

@Blackspirits

Copy link
Copy Markdown
Owner

Summary

DownloadYtDlp downloads to yt-dlp.exe.part, while checksum lookup uses the file name as its asset key. The temporary suffix therefore causes a known checksum lookup to miss and verification becomes a no-op.

This change strips only the temporary .part suffix before lookup and adds a regression proving a bad temporary binary is rejected and deleted.

Validation

  • focused YtDlpDownloadServiceTests passed
  • full solution test suite passed
  • validation run: #34524235586

AI assistance: ChatGPT was used to audit the download/verification flow and prepare this minimal fix.

@Blackspirits
Blackspirits requested a lite review from Copilot September 11, 2026 00:26

Copilot AI commented Sep 11, 2026

Copy link
Copy Markdown

@Blackspirits Thanks for sending me some feedback. Unfortunately, I hit an error while trying to use the custom Copilot setup steps configured for this repository. The error I am seeing is:

no supported setup-steps job found in your workflow file. Please ensure you have a job named copilot-code-review or copilot-setup-steps. For more details, see https://gh.io/copilot/actions-setup-steps

Once you or someone with the necessary access fixes the problem, please let me know in a comment and I'll try again. Thanks!

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No unresolved blocking issues were identified.

Pull request overview

Fixes yt-dlp checksum verification for temporary .part downloads and adds regression coverage.

Changes:

  • Normalizes .part filenames before checksum lookup.
  • Rejects and deletes invalid temporary binaries.
File summaries
File Description
tests/UI/Logic/Download/YtDlpDownloadServiceTests.cs Adds regression coverage for invalid .part files.
src/ui/Logic/Download/YtDlpDownloadService.cs Enables checksum validation for temporary downloads.
Review details
  • Files reviewed: 2/2 changed files
  • Comments generated: 0
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants