3.70.3

(fix): Honor the auth scheme prefix for HeaderAuthScheme when generating HeaderAuthProvider. Previously, the generator emitted the raw header value into the configured header (e.g. Authorization) and dropped any prefix declared in the API definition (e.g. Bearer). The provider now emits a HEADER_PREFIX constant and prepends it to the header value, matching the behavior of the Java, Python, Go, C#, PHP, Rust, and Ruby v2 generators.

3.70.2

(chore): Bump the typescript-sdk-validator container’s node:20-slim base image to node:22.22-bookworm-slim. Node 20 went EOL March 24, 2026, and the container was carrying the Node 20 EOL alert plus CVE-2025-55130 (Node 20 permission-model symlink bypass).