shouldSkipAuthForSend now short-circuits to skip auth whenever the target endpoint isn't allow-listed or first-party HTTPS, before falling into the existing trust and token checks. A new shouldAttachAuthWithoutProfileScope path also covers stored, env, and fd credential lanes.
Telemetry auth-send gate tightened with an endpoint check
Telemetry auth-sending logic was tightened with an endpoint allowlist check.
Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
TelemetryArea: what it touches
Internal ChangesKind: in v2.1.261,
Internal ChangesSection of the release