fix(ci): remove duplicate Authorization header in semantic-release#300
fix(ci): remove duplicate Authorization header in semantic-release#300
Conversation
Test Coverage ReportOverall Coverage: 95.77%
|
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
There was a problem hiding this comment.
Pull request overview
This PR fixes a CI/CD failure where semantic-release was encountering a "Duplicate header: Authorization" error due to multiple conflicting authentication methods. The fix removes the redundant git credential configuration step that was added in PR #298 and adds persist-credentials: false to the checkout action, allowing semantic-release to manage authentication exclusively via the GITHUB_TOKEN environment variable. The PR also includes an unrelated dependency update to @structured-world/vue-privacy.
Changes:
- Added
persist-credentials: falseto the checkout step in the semantic-release job to prevent duplicate Authorization headers - Removed the "Configure git credentials for tag push" step that was causing authentication conflicts
- Updated
@structured-world/vue-privacyfrom 1.9.0 to 1.10.0 (unrelated to the CI fix)
Reviewed changes
Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| .github/workflows/ci-cd.yml | Adds persist-credentials: false to checkout and removes the redundant git credentials configuration step that was causing duplicate Authorization headers |
| package.json | Updates @structured-world/vue-privacy dependency version from 1.9.0 to 1.10.0 |
| yarn.lock | Updates lockfile entries to reflect the new version of @structured-world/vue-privacy with updated checksums |
- Remove "Configure git credentials" step that caused duplicate headers - Add owner/repositories params to create-github-app-token - Update @structured-world/vue-privacy to 1.10.0 Closes #299
polaz
force-pushed
the
fix/299-duplicate-auth-header
branch
from
69ea808 to
1026689
Compare
## [6.58.0](v6.57.0...v6.58.0) (2026-02-05) ### Features * **logging:** add LOG_FILTER for access log noise reduction ([#295](#295)) ([d0c3d0d](d0c3d0d)), closes [#290](#290) ### Bug Fixes * **ci:** configure git credentials for semantic-release tag upload ([#298](#298)) ([6563291](6563291)), closes [#297](#297) * **ci:** remove duplicate Authorization header, add token scope ([#300](#300)) ([4032584](4032584)), closes [#299](#299)
|
🎉 This PR is included in version 6.58.0 🎉 The release is available on: Your semantic-release bot 📦🚀 |
Summary
persist-credentials: falseto checkout stepGITHUB_TOKENenv var@structured-world/vue-privacyto 1.10.0Root Cause
#298 added an Authorization header, but
actions/checkoutalready sets one. Combined with semantic-release embedding token in URL, this caused "Duplicate header" error.Test plan
Closes #299