From 22d9f521d7d32d1e9fcff3f134e61ffcbf8f0ab7 Mon Sep 17 00:00:00 2001
From: Barrett Ruth <62671086+barrettruth@users.noreply.github.com>
Date: Tue, 3 Mar 2026 15:48:18 -0500
Subject: [PATCH] ci(digest): unset checkout extraheader so PAT push triggers
 CI (#59)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Problem: actions/checkout sets an http.extraheader with GITHUB_TOKEN
that overrides any credentials in the remote URL, so git push uses
GITHUB_TOKEN regardless of the URL — suppressing CI triggers.

Solution: unset the extraheader before pushing, forcing git to use
the DIGEST_PAT embedded in the remote URL.
---
 .github/workflows/upstream-digest.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/upstream-digest.yml b/.github/workflows/upstream-digest.yml
index 39a8813..ff0c23b 100644
--- a/.github/workflows/upstream-digest.yml
+++ b/.github/workflows/upstream-digest.yml
@@ -36,6 +36,7 @@ jobs:
           git checkout -b "${BRANCH}"
           git add doc/upstream.md
           git commit -m "docs(upstream): upstream digest $(date +%Y-%m-%d)"
+          git config --unset http.https://github.com/.extraheader
           git remote set-url origin "https://x-access-token:${{ secrets.DIGEST_PAT }}@github.com/barrettruth/canola.nvim.git"
           git push --force origin "${BRANCH}"
           if ! GH_TOKEN="${{ secrets.GITHUB_TOKEN }}" gh pr list --head "${BRANCH}" --state open --json number --jq '.[0].number' | grep -q .; then