microlinkhq / youtube-dl-exec / 28798430093

94%

push

github

fix: pass authorization header to fetch in postinstall (#278)

The auth headers object was passed as the first-level options argument
(fetch(url, headers) instead of fetch(url, { headers })), so the
Authorization header from GITHUB_TOKEN/GH_TOKEN was silently dropped and
the GitHub API request was always unauthenticated. On shared CI egress
IPs this hits the 60 req/hr unauthenticated rate limit and breaks
installs even when a token is configured.

Also fixes the content-type guard on the next line, which negated the
header value before comparing it to a string and was therefore always
true, breaking direct binary hosts (YOUTUBE_DL_HOST pointing straight
at an octet-stream URL).

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

18 of 26 branches covered (69.23%)

Branch coverage included in aggregate %.

137 of 139 relevant lines covered (98.56%)

3.78 hits per line