Deno is an ejs-compatible JavaScript runtime.
As of the next yt-dlp and/or ejs release, the minimum supported version of Deno will be raised from v2.0.0 to v2.3.0.
This is being done for security reasons: Deno v2.3.0 introduced a new lockfile format that is incompatible with earlier versions. The lockfile is not used at runtime, but it is necessary to safely build the package (e.g. if the user installs ejs from source or builds their own wheel). Cooldown support, which is crucial to avoiding npm supply chain attacks, was not introduced until Deno v2.6.0. So we are unable to generate a lockfile that is both protected by cooldown enforcement and compatible with Deno versions earlier than v2.3.0. The clear solution is to raise the support floor for Deno.
See the EJS wiki article for more information about supported JavaScript runtimes, but note that it has not yet been updated to reflect the changes announced in this post.
Deno is an
ejs-compatible JavaScript runtime.As of the next yt-dlp and/or ejs release, the minimum supported version of Deno will be raised from
v2.0.0tov2.3.0.This is being done for security reasons: Deno v2.3.0 introduced a new lockfile format that is incompatible with earlier versions. The lockfile is not used at runtime, but it is necessary to safely build the package (e.g. if the user installs
ejsfrom source or builds their own wheel). Cooldown support, which is crucial to avoiding npm supply chain attacks, was not introduced until Deno v2.6.0. So we are unable to generate a lockfile that is both protected by cooldown enforcement and compatible with Deno versions earlier than v2.3.0. The clear solution is to raise the support floor for Deno.See the EJS wiki article for more information about supported JavaScript runtimes, but note that it has not yet been updated to reflect the changes announced in this post.