From 67398e0a69bf3f5d1dba47aae6c5f5ecd674962f Mon Sep 17 00:00:00 2001
From: Danny Avila <danny@librechat.ai>
Date: Mon, 1 Jun 2026 18:32:38 -0400
Subject: [PATCH] =?UTF-8?q?=F0=9F=8F=B7=EF=B8=8F=20ci:=20Fix=20Helm=20Tag?=
 =?UTF-8?q?=20Sync=20Git=20Auth=20(#13460)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/scripts/sync-helm-chart-tags.sh    | 7 ++++++-
 .github/workflows/sync-helm-chart-tags.yml | 3 ++-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/.github/scripts/sync-helm-chart-tags.sh b/.github/scripts/sync-helm-chart-tags.sh
index 518fe1eb61..f54048a1ea 100755
--- a/.github/scripts/sync-helm-chart-tags.sh
+++ b/.github/scripts/sync-helm-chart-tags.sh
@@ -17,9 +17,14 @@ fail() {
   exit 1
 }
 
+git_auth_header() {
+  token="$(printf 'x-access-token:%s' "$GITHUB_TOKEN" | base64 | tr -d '\n')"
+  printf 'AUTHORIZATION: basic %s' "$token"
+}
+
 git_with_auth() {
   if [ -n "${GITHUB_TOKEN:-}" ]; then
-    git -c "http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION: bearer ${GITHUB_TOKEN}" "$@"
+    git -c "http.extraheader=$(git_auth_header)" "$@"
     return
   fi
 
diff --git a/.github/workflows/sync-helm-chart-tags.yml b/.github/workflows/sync-helm-chart-tags.yml
index e029a256c1..bde4c2f49a 100644
--- a/.github/workflows/sync-helm-chart-tags.yml
+++ b/.github/workflows/sync-helm-chart-tags.yml
@@ -68,7 +68,8 @@ jobs:
           git init "$REPO_DIR"
           cd "$REPO_DIR"
           git remote add origin "${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git"
-          git -c "http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION: bearer ${GITHUB_TOKEN}" \
+          AUTH_HEADER="$(printf 'x-access-token:%s' "$GITHUB_TOKEN" | base64 | tr -d '\n')"
+          git -c "http.extraheader=AUTHORIZATION: basic ${AUTH_HEADER}" \
             fetch --prune --force --tags origin \
             "+refs/heads/${DEFAULT_BRANCH}:refs/remotes/origin/${DEFAULT_BRANCH}"
           git checkout --detach "$BASE_REF"