styleproof 4.4.20 → 4.4.21

package/CHANGELOG.md

@@ -7,6 +7,14 @@ this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm
 
 ## [Unreleased]
 
+## [4.4.21] - 2026-07-14
+
+### Fixed
+
+- **GitHub Actions map publication no longer sends duplicate authorization headers.**
+  StyleProof now resets inherited checkout headers before applying the single
+  effective credential to isolated map-store clone and push operations.
+
 ## [4.4.20] - 2026-07-14
 
 ### Fixed

package/dist/map-store.js

@@ -94,6 +94,17 @@ function parseGitHttpExtraHeaders(configuredHeaders) {
         return [{ key: configuredHeader.slice(0, separatorIndex), value: configuredHeader.slice(separatorIndex + 1) }];
     });
 }
+function resetInheritedGitHttpExtraHeaders(configuredHeaders) {
+    const resetHeaderKeys = new Set();
+    return configuredHeaders.flatMap((configuredHeader) => {
+        if (resetHeaderKeys.has(configuredHeader.key))
+            return [configuredHeader];
+        resetHeaderKeys.add(configuredHeader.key);
+        return configuredHeader.value === ''
+            ? [configuredHeader]
+            : [{ key: configuredHeader.key, value: '' }, configuredHeader];
+    });
+}
 function effectiveGitHttpExtraHeaders(cwd) {
     const mapStoreToken = process.env.STYLEPROOF_MAP_STORE_TOKEN;
     if (mapStoreToken) {
@@ -111,7 +122,7 @@ function effectiveGitHttpExtraHeaders(cwd) {
     const configuredHeaders = runGit(cwd, ['config', '--includes', '--get-regexp', '^http\\..*\\.extraheader$'], 1 << 20);
     const effectiveHeaders = parseGitHttpExtraHeaders(configuredHeaders.stdout);
     if (effectiveHeaders.length > 0)
-        return effectiveHeaders;
+        return resetInheritedGitHttpExtraHeaders(effectiveHeaders);
     const registeredIncludes = runGit(cwd, ['config', '--local', '--get-regexp', '^includeIf\\..*\\.path$'], 1 << 20);
     const includedHeaders = registeredIncludes.stdout
         .split('\n')
@@ -125,7 +136,7 @@ function effectiveGitHttpExtraHeaders(cwd) {
         return parseGitHttpExtraHeaders(includedHeaders.stdout);
     });
     if (includedHeaders.length > 0)
-        return includedHeaders;
+        return resetInheritedGitHttpExtraHeaders(includedHeaders);
     return [];
 }
 function gitOutput(cwd, args) {
@@ -507,7 +518,7 @@ function checkoutMapStore(cwd, remote, branch, sparseSegment) {
         runGit(tmp, ['remote', 'add', 'origin', remoteUrl]);
     }
     for (const { key, value } of httpExtraHeaders)
-        runGit(tmp, ['config', '--local', key, value]);
+        runGit(tmp, ['config', '--local', '--add', key, value]);
     if (sparseSegment && branchExists)
         checkoutSparseSegment(tmp, branch, sparseSegment);
     return tmp;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "styleproof",
-  "version": "4.4.20",
+  "version": "4.4.21",
   "description": "Catch every CSS change before it ships — review PRs and certify refactors by the browser's computed styles, not pixels. Works with any styling system.",
   "keywords": [
     "playwright",