fix: bump gdown from 6.1.0 to 6.4.1

[dependabot]

Bumps gdown from 6.1.0 to 6.4.1.

Release notes

Sourced from gdown's releases.

v6.4.1

Fixed

• Support Google Drive file URLs ending in /preview or without a /view or /edit suffix. (#532)

v6.4.0

Added

• Optional cancellation events for download() and cached_download() interrupt stalled response reads and download waits without shortening network timeouts, raising DownloadCancelled while preserving partial-file cleanup. (#525)

Changed

• An invalid --speed value now reports the accepted units instead of an internal function name. (#527)

Removed

• importlib is no longer exported from the gdown package; it was listed in __all__ by accident. (#526)

v6.3.0

Added

• Add a secretstorage installation extra for importing Chromium cookies from GNOME Keyring with pip install 'gdown[secretstorage]' or uvx --from 'gdown[secretstorage]' gdown. (#505)
• download(), download_folder(), and cached_download() accept a requests-style timeout, exposed on the command line as --timeout SECONDS, so a stalled server no longer blocks forever. (#510)
• Add opt-in --retries N and Python retries=N for automatic recovery of interrupted file and folder downloads, with bounded backoff and validated byte-range resume; --continue still controls reuse of earlier downloads. (#517)

Changed

• cached_download() verifies hash while streaming instead of reading the finished file back from disk. (#512)
• The command line reports a hit --timeout as a timeout instead of asking to file an issue. (#513)

Fixed

• Propagate progress callback exceptions unchanged instead of misreporting chunked-encoding errors as incomplete downloads. (#519)

v6.2.0

Added

• Add --cookies-from-browser BROWSER to download as your signed-in Google account using cookies read straight from a local browser, and --cookies FILE to use a cookies file other than ~/.cache/gdown/cookies.txt. The cookies file is now written owner-only and keeps session cookies. (#494)

Changed

• Continue downloading the remaining files in a folder after individual downloads fail, then report all failures together. (#495)
• Automatically detect Google Drive folder URLs, making --folder necessary only for ambiguous bare IDs. (#496)

Fixed

... (truncated)

Changelog

Sourced from gdown's changelog.

6.4.1 - 2026-09-29

Fixed

• Support Google Drive file URLs ending in /preview or without a /view or /edit suffix. (#532)

6.4.0 - 2026-09-17

Added

• Optional cancellation events for download() and cached_download() interrupt stalled response reads and download waits without shortening network timeouts, raising DownloadCancelled while preserving partial-file cleanup. (#525)

Changed

• An invalid --speed value now reports the accepted units instead of an internal function name. (#527)

Removed

• importlib is no longer exported from the gdown package; it was listed in __all__ by accident. (#526)

6.3.0 - 2026-09-16

Added

• Add a secretstorage installation extra for importing Chromium cookies from GNOME Keyring with pip install 'gdown[secretstorage]' or uvx --from 'gdown[secretstorage]' gdown. (#505)
• download(), download_folder(), and cached_download() accept a requests-style timeout, exposed on the command line as --timeout SECONDS, so a stalled server no longer blocks forever. (#510)
• Add opt-in --retries N and Python retries=N for automatic recovery of interrupted file and folder downloads, with bounded backoff and validated byte-range resume; --continue still controls reuse of earlier downloads. (#517)

Changed

• cached_download() verifies hash while streaming instead of reading the finished file back from disk. (#512)
• The command line reports a hit --timeout as a timeout instead of asking to file an issue. (#513)

Fixed

• Propagate progress callback exceptions unchanged instead of misreporting chunked-encoding errors as incomplete downloads. (#519)

6.2.0 - 2026-09-06

Added

• Add --cookies-from-browser BROWSER to download as your signed-in Google account using cookies read straight from a local browser, and --cookies FILE to use a cookies file other than ~/.cache/gdown/cookies.txt. The cookies file is now written owner-only and keeps session cookies. (#494)

Changed

• Continue downloading the remaining files in a folder after individual downloads fail, then report all failures together. (#495)
• Automatically detect Google Drive folder URLs, making --folder necessary only for ambiguous bare IDs. (#496)

Fixed

... (truncated)

Commits

• e0734b3 chore: prep 6.4.1 release
• 13aca2b Merge pull request #532 from jimi18102010-commits/fix-multiline-confirmation-...
• ce0188d fix: accept trailing slash in Google Drive file URLs
• c7b6b41 fix: limit URL support to bare and preview file links
• 94c1c50 fix: handle multiline Google Drive confirmation forms and improve URL parsing
• 9764c93 Merge pull request #530 from wkentaro/dependabot/uv/soupsieve-2.9
• e070ab2 chore(deps): bump soupsieve from 2.8.4 to 2.9
• 8429f0d chore: prep 6.4.0 release
• f8e8393 Merge pull request #528 from wkentaro/ci/validate-release-notes
• f9dae03 ci: validate release notes before publishing
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)