[w3c/ServiceWorker] Fetch module service worker scripts with same-origin credentials (PR #1829)

Fixes #1365.

The Update algorithm passed `"omit"` as the credentials mode when fetching
module service worker scripts. HTML changed module scripts to default to
`"same-origin"` in [whatwg/html@5fabb58](https://github.com/whatwg/html/commit/5fabb5830630723a6b0db13844cacda1d17aa50a), and service workers
don't expose a way to opt back into `"omit"`.

This change updates the call to `fetch a module worker script graph` to
pass `"same-origin"`, aligning the spec with HTML and with shipping
browser behavior.


<!--
    This comment and the below content is programmatically generated.
    You may add a comma-separated list of anchors you'd like a
    direct link to below (e.g. #idl-serializers, #idl-sequence):

    Don't remove this comment or modify anything below this line.
    If you don't want a preview generated for this pull request,
    just replace the whole of this comment's content by "no preview"
    and remove what's below.
-->
***
<a href="https://pr-preview.s3.amazonaws.com/monica-ch/ServiceWorker/pull/1829.html" title="Last updated on Jun 19, 2026, 4:57 PM UTC (d951274)">Preview</a> | <a href="https://pr-preview.s3.amazonaws.com/w3c/ServiceWorker/1829/28e78e7...monica-ch:d951274.html" title="Last updated on Jun 19, 2026, 4:57 PM UTC (d951274)">Diff</a>
You can view, comment on, or merge this pull request online at:

  https://github.com/w3c/ServiceWorker/pull/1829

-- Commit Summary --

  * Fetch module service worker scripts with same-origin credentials

-- File Changes --

    M index.bs (2)

-- Patch Links --

https://github.com/w3c/ServiceWorker/pull/1829.patch
https://github.com/w3c/ServiceWorker/pull/1829.diff

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/ServiceWorker/pull/1829
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/ServiceWorker/pull/1829@github.com>