Does the yt-dlp updater validate the checksums?

[ghost]

I'm curious if the updater that Parabolic uses validates the checksum of yt-dlp every time it updates. Is it running yt-dlp -U under the hood, or does it do something different?

[nlogozzo]

Parabolic pulls the list of releases and assets from the GitHub releases API on the yt-dlp repo and downloads the appropriate asset for your operating system from the yt-dlp release. i.e., yt-dlp.exe on Windows and yt-dlp-linux on Linux.

Currently, it just downloads the file and does not verify the hash.

I’m writing a new updater service to be used by Parabolic that will validate that the correct expected number of bytes was downloaded for the file. It’d like to verify the hash but GitHub releases API doesn’t provide, for what I was able to see, an easy way to get the hash of the assets. I’m doing more investigation into it tho for the new service.