Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
TelemetryArea: what it touches
Internal ChangesKind: in v2.1.246,
Internal ChangesSection of the release
What
The internal BigQuery metrics exporter now checks that its credential actually belongs to the host it is about to contact. If not it skips the export, skips the organisation opt-out check, and sends with no authentication headers rather than failing.
Details
A mismatch is classified as misrouted_credential with the message "credential withheld: this telemetry endpoint is not the host it belongs to".
There is a bypass field, isAntEndpointOverride, but the constructor sets it to false unconditionally, so it cannot be taken in this build.
The opt-out request switched from fetching a credential asynchronously to sending none, relying on headers supplied by the router, and reports "Auth error: no credential usable for the metrics opt-out check" when none is usable.
Evidence
BigQuery metrics export: credential does not belong to the metrics endpoint host, skipping
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
