styleproof 4.4.10 → 4.4.12

package/CHANGELOG.md

@@ -7,6 +7,24 @@ this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm
 
 ## [Unreleased]
 
+## [4.4.12] - 2026-07-13
+
+### Fixed
+
+- **Map-store publication now survives an isolated push losing Actions
+  authentication.** If the sparse temporary checkout is rejected, StyleProof
+  imports its generated commit into the original checkout and retries the push
+  through checkout-v7's authenticated Git context.
+
+## [4.4.11] - 2026-07-13
+
+### Fixed
+
+- **Map-store pushes now receive workflow authentication directly.** The final
+  `git push` uses the same explicit reset-and-token arguments as the isolated
+  clone, so temporary sparse-checkout config cannot drop the Actions token after
+  a successful cold-cache capture.
+
 ## [4.4.10] - 2026-07-13
 
 ### Fixed

package/dist/map-store.js

@@ -480,6 +480,16 @@ function checkoutMapStore(cwd, remote, branch, sparseSegment) {
         checkoutSparseSegment(tmp, branch, sparseSegment);
     return tmp;
 }
+function pushMapStoreCommit(cwd, temporaryCheckout, remote, branch, authenticationArguments) {
+    const isolatedPush = runGit(temporaryCheckout, [...authenticationArguments, 'push', '-q', 'origin', `HEAD:${branch}`], 1 << 20);
+    if (isolatedPush.status === 0)
+        return isolatedPush;
+    const mapStoreCommit = gitOutput(temporaryCheckout, ['rev-parse', 'HEAD']);
+    const importCommit = runGit(cwd, ['fetch', '-q', '--no-write-fetch-head', temporaryCheckout, mapStoreCommit], 1 << 20);
+    if (importCommit.status !== 0)
+        return isolatedPush;
+    return runGit(cwd, ['push', '-q', remote, `${mapStoreCommit}:${branch}`], 1 << 20);
+}
 export function publishMapBundle(options) {
     const cwd = options.cwd ?? process.cwd();
     const branch = options.branch ?? DEFAULT_MAP_STORE_BRANCH;
@@ -495,6 +505,10 @@ export function publishMapBundle(options) {
     const sha = safeSegment(manifest.sha, 'sha');
     const compatibilityKey = safeSegment(manifest.compatibilityKey, 'compatibility key');
     const target = `${sha}/${compatibilityKey}`;
+    const pushAuthenticationArguments = effectiveGitHttpExtraHeaders(cwd).flatMap(({ key, value }) => [
+        '-c',
+        `${key}=${value}`,
+    ]);
     let ok = false;
     let lastError = '';
     for (let attempt = 1; attempt <= 5; attempt++) {
@@ -510,7 +524,7 @@ export function publishMapBundle(options) {
             }
             runGit(tmp, ['add', '-A', '--sparse', '--', 'README.md', target]);
             runGit(tmp, ['commit', '-q', '-m', `StyleProof map ${sha.slice(0, 12)} ${compatibilityKey}`], 1 << 20);
-            const push = runGit(tmp, ['push', '-q', 'origin', `HEAD:${branch}`], 1 << 20);
+            const push = pushMapStoreCommit(cwd, tmp, remote, branch, pushAuthenticationArguments);
             if (push.status === 0) {
                 ok = true;
                 break;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "styleproof",
-  "version": "4.4.10",
+  "version": "4.4.12",
   "description": "Catch every CSS change before it ships — review PRs and certify refactors by the browser's computed styles, not pixels. Works with any styling system.",
   "keywords": [
     "playwright",