From 86321d8ce4e072f8b5617029e52410e1c85e93d9 Mon Sep 17 00:00:00 2001 From: AsafMazuz1 <33402080+AsafMazuz1@users.noreply.github.com> Date: Mon, 14 Sep 2026 19:24:48 +0300 Subject: [PATCH] autobump: fix duplicate Authorization header, add job timeout Every scheduled run since #11 failed after ~3h9m on a macOS runner: the Push commits step got 'remote: Duplicate header: "Authorization"' / HTTP 400 on every push and pull, and git-try-push's nested retry loop (10 push tries x 10 pull tries, exponential backoff) burned the time. That was ~93% of the org's Actions spend this cycle. Cause: setup-homebrew (given token:) sets a global http.https://github.com/.extraheader, and git-try-push (given token:) sets a local one too, so git sends two Authorization headers. Fix: drop token: from git-try-push (setup-homebrew's token is documented to persist for the job), and add timeout-minutes: 30 so a hang can never run for hours again. Co-Authored-By: Claude Fable 5.1 Claude-Session: https://claude.ai/code/session_01Q6jN7cTpidwNCFa3FsXEba --- .github/workflows/autobump.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/autobump.yml b/.github/workflows/autobump.yml index 75b75ef..ed8919a 100644 --- a/.github/workflows/autobump.yml +++ b/.github/workflows/autobump.yml @@ -24,6 +24,7 @@ concurrency: jobs: autobump: runs-on: macos-26 + timeout-minutes: 30 permissions: contents: write steps: @@ -66,7 +67,9 @@ jobs: - name: Push commits if: steps.bump.outputs.bumped == '1' uses: Homebrew/actions/git-try-push@8f3d1ec8a696b3b9d9a6c3696b6c73033cab69e4 # 2026.08.14.1 + # No token here: setup-homebrew already installed a global git + # Authorization header for github.com. Passing one again makes git + # send two headers and GitHub rejects the push with HTTP 400. with: - token: ${{ secrets.GITHUB_TOKEN }} directory: ${{ steps.set-up-homebrew.outputs.repository-path }} branch: main