signalbot==1.1.0
# yt-dlp is kept current for site/extractor changes; bump the floor deliberately.
# 2026.8.19 restores YouTube downloads: the cookieless client the older build
# pinned (android_vr) was retired and every data transfer 403'd.
yt-dlp>=2026.8.19
# Needed for YouTube: yt-dlp wraps URLs in a JS "n-sig" challenge that a JS
# runtime must solve. Requires Node >= 22 on PATH (bot.py points at a standalone
# /opt/node22 since Debian 13 only ships Node 20) plus this package.
yt-dlp-ejs>=0.8.0