Fix translations workflow not opening PRs

[lancepioch]

The weekly Crowdin workflow has been failing on every run. Download + Pint both work fine, it just dies on the Create Pull Request step.

Two things were going on:

1. checkout@v6 keeps its auth header around, and create-pull-request adds its own on top, so git ends up sending the Authorization header twice and GitHub 400s with Duplicate header: "Authorization". Setting persist-credentials: false on checkout sorts it out (see remote: Duplicate header: "Authorization" error when used in conjunction with actions/checkout v6+ peter-evans/create-pull-request#4272). That's the only change in here.

2. Before it even got that far it would've hit a 403 since Actions wasn't allowed to open PRs. Already flipped that on in the org/repo settings.

Once this is merged I'll kick off a manual run to make sure it actually opens the PR now.

[coderabbitai]

📝 Walkthrough

Walkthrough

The download-translations.yml workflow's "Checkout code" step gains a with block that sets persist-credentials: false, preventing GitHub Actions from storing credentials on disk after the checkout action completes.

Changes

Download Translations Workflow

Layer / File(s)	Summary
Disable credential persistence on checkout .github/workflows/download-translations.yml	Adds with: persist-credentials: false to the actions/checkout step so GitHub credentials are not retained after the checkout completes.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title 'Fix translations workflow not opening PRs' directly describes the main issue being resolved in the changeset.
Description check	✅ Passed	The description comprehensively explains the root causes of the workflow failure and the fix applied, with clear context about the duplicate Authorization header issue.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}