styleproof 4.4.2 → 4.4.4

package/CHANGELOG.md

@@ -9,6 +9,15 @@ this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm
 
 ### Fixed
 
+- **Map-store uploads now reuse credentials from `actions/checkout@v7`.**
+  Checkout v7 keeps its HTTP header in an included temporary config rather than
+  directly in `.git/config`; StyleProof now reads the effective Git config before
+  carrying that header into its isolated clone and push.
+- **Map-store uploads now reuse the HTTP authentication persisted by
+  `actions/checkout`.** The isolated `styleproof-maps` clone carries the
+  checkout's URL-scoped extra header through clone and push, so cache-miss
+  captures publish successfully without every consumer wiring a token into the
+  CLI step.
 - **Map-store uploads from Git hooks no longer inherit the caller repository's
   Git location variables.** A cold `styleproof-maps` upload could otherwise run
   its temporary `git init` against the consumer repository, set

package/dist/map-store.js

@@ -52,6 +52,25 @@ function gitProcessEnvironment() {
 function runGit(cwd, args, maxBuffer = 1 << 28) {
     return spawnSync('git', args, { cwd, encoding: 'utf8', maxBuffer, env: gitProcessEnvironment() });
 }
+function effectiveGitHttpExtraHeaders(cwd) {
+    const configuredHeaders = runGit(cwd, ['config', '--get-regexp', '^http\\..*\\.extraheader$'], 1 << 20);
+    if (configuredHeaders.status !== 0)
+        return [];
+    return configuredHeaders.stdout
+        .split('\n')
+        .filter(Boolean)
+        .flatMap((configuredHeader) => {
+        const separatorIndex = configuredHeader.indexOf(' ');
+        if (separatorIndex === -1)
+            return [];
+        return [
+            {
+                key: configuredHeader.slice(0, separatorIndex),
+                value: configuredHeader.slice(separatorIndex + 1),
+            },
+        ];
+    });
+}
 function gitOutput(cwd, args) {
     const r = runGit(cwd, args);
     return r.status === 0 ? r.stdout.trim() : '';
@@ -399,9 +418,11 @@ function checkoutMapStore(cwd, remote, branch) {
     if (!remoteExists(remote, cwd))
         throw new MapStoreError(`git remote ${remote} was not found`);
     const remoteUrl = gitOutput(cwd, ['remote', 'get-url', remote]);
+    const httpExtraHeaders = effectiveGitHttpExtraHeaders(cwd);
+    const authenticationArguments = httpExtraHeaders.flatMap(({ key, value }) => ['-c', `${key}=${value}`]);
     const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'styleproof-map-store-'));
     if (runGit(cwd, ['ls-remote', '--exit-code', '--heads', remote, branch], 1 << 20).status === 0) {
-        const clone = spawnSync('git', ['clone', '-q', '--depth', '1', '--branch', branch, remoteUrl, tmp], {
+        const clone = spawnSync('git', [...authenticationArguments, 'clone', '-q', '--depth', '1', '--branch', branch, remoteUrl, tmp], {
             encoding: 'utf8',
             maxBuffer: 1 << 20,
             env: gitProcessEnvironment(),
@@ -415,6 +436,8 @@ function checkoutMapStore(cwd, remote, branch) {
         runGit(tmp, ['init', '-q', '-b', branch]);
         runGit(tmp, ['remote', 'add', 'origin', remoteUrl]);
     }
+    for (const { key, value } of httpExtraHeaders)
+        runGit(tmp, ['config', '--local', key, value]);
     return tmp;
 }
 export function publishMapBundle(options) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "styleproof",
-  "version": "4.4.2",
+  "version": "4.4.4",
   "description": "Catch every CSS change before it ships — review PRs and certify refactors by the browser's computed styles, not pixels. Works with any styling system.",
   "keywords": [
     "playwright",