Merge pull request #2590 from github/henrymercer/fix-empty-header

Do not pass undefined authorization header

Author: henrymercer

Diff for: CHANGELOG.md

@@ -6,7 +6,7 @@ Note that the only difference between `v2` and `v3` of the CodeQL Action is the
 
 ## [UNRELEASED]
 
-No user facing changes.
+- Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". [#2590](https://github.com/github/codeql-action/pull/2590)
 
 ## 3.27.1 - 08 Nov 2024
 

Diff for: lib/tools-download.js

@@ -178,7 +178,8 @@ async function downloadAndExtractZstdWithStreaming(
   logger: Logger,
 ): Promise<string> {
   headers = Object.assign(
-    { "User-Agent": "CodeQL Action", authorization },
+    { "User-Agent": "CodeQL Action" },
+    authorization ? { authorization } : {},
     headers,
   );
   const response = await new Promise<IncomingMessage>((resolve) =>