3.83.2
(fix): Global headers declared with an env now fall back to that environment
variable at runtime. The resolution order for a global header is the
explicit option, then the environment variable, then the client default.
3.83.1
(fix): Scope the passthrough client.fetch() auth headers to the configured base URL.
Auth headers are now only attached when the resolved request URL has the same
origin as the configured base URL (or environment), so passing an absolute
cross-origin URL into the passthrough fetch escape hatch no longer leaks the
SDK’s credentials to an unrelated host. Relative paths and same-origin absolute
URLs are unaffected. Passthrough debug logs now redact credentials in the
request URL, matching the main fetcher.