Repository navigation
fix: copy request headers before adding auth - #2595
Conversation
Assisted By: Claude Opus 5 extra_data["headers"] is usually the V2_ACCEPT_HEADERS constant, and headers.update(auth_headers) mutated it in place. The first token negotiated in a process leaked into every later request, including those to other registries.
Backport to 2.19: 💚 backport PR created✅ Backport PR branch: Backported as #2610 🤖 @patchback |
Backport to 2.26: 💚 backport PR created✅ Backport PR branch: Backported as #2609 🤖 @patchback |
Backport to 2.22: 💚 backport PR created✅ Backport PR branch: Backported as #2608 🤖 @patchback |
Backport to 2.20: 💚 backport PR created✅ Backport PR branch: Backported as #2607 🤖 @patchback |
Backport to 2.24: 💚 backport PR created✅ Backport PR branch: Backported as #2611 🤖 @patchback |
Backport to 2.27: 💚 backport PR created✅ Backport PR branch: Backported as #2612 🤖 @patchback |
Backport to 2.29: 💚 backport PR created✅ Backport PR branch: Backported as #2613 🤖 @patchback |
Assisted By: Claude Opus 5
extra_data["headers"] is usually the V2_ACCEPT_HEADERS constant, and headers.update(auth_headers) mutated it in place. The first token negotiated in a process leaked into every later request, including those to other registries.
📜 Checklist
See: Pull Request Walkthrough