✓ No known CVEs patched in this version
Topics
+12 more
Affected surfaces
Summary
AI summaryUpdates Chores, api, and sessions across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds metadata filtering on v4 sessions. Adds metadata filtering on v4 sessions. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Medium |
Adds base64 payload style for huge data-URI IO in seeder. Adds base64 payload style for huge data-URI IO in seeder. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Medium |
Adds dashboard & widget CRUD to Public API and MCP (unstable). Adds dashboard & widget CRUD to Public API and MCP (unstable). Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Dependency | Low |
Bumps nodemailer dependency to version 9.0.3. Bumps nodemailer dependency to version 9.0.3. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Performance | Low |
Replaces lossless-json parser with native JSON.parse for faster parsing. Replaces lossless-json parser with native JSON.parse for faster parsing. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes force events_full for truncation‑sensitive filters. Fixes force events_full for truncation‑sensitive filters. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Suppresses spurious 404 toast on automation delete and adds instant not‑found detection. Suppresses spurious 404 toast on automation delete and adds instant not‑found detection. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Improves tool call styling in agent component. Improves tool call styling in agent component. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Budgets aggregated graph layout so dense traces cannot freeze the tab. Budgets aggregated graph layout so dense traces cannot freeze the tab. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Handles legacy traces widgets on unstable dashboard‑widgets API. Handles legacy traces widgets on unstable dashboard‑widgets API. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Fixes guard callback‑url redirect against malformed URLs (prevents 500 errors). Fixes guard callback‑url redirect against malformed URLs (prevents 500 errors). Source: llm_adapter@2026-07-16 Confidence: low |
— |
Full changelog
What's Changed
Features
- feat(sessions): allow metadata filtering on v4 by @nimarb in https://github.com/langfuse/langfuse/pull/15138
- feat(worker): write deprecation notice into blob export for legacy sources (LFE-10896) by @niklassemmler in https://github.com/langfuse/langfuse/pull/15068
- feat(seeder): add base64 payload style for huge data-URI IO (LFE-10152) by @nkabardin in https://github.com/langfuse/langfuse/pull/15054
- feat(api, mcp): Add dashboard & widget CRUD to Public API & MCP (unstable) by @LysanderKie in https://github.com/langfuse/langfuse/pull/15080
Fixes
- fix(auth): guard callback-url redirect against malformed callbackUrl (500s) by @Steffen911 in https://github.com/langfuse/langfuse/pull/15132
- fix(events): force events_full for truncation-sensitive filters (LFE-10779) by @niklassemmler in https://github.com/langfuse/langfuse/pull/15069
- fix(automations): suppress spurious 404 toast on delete, instant not-found detection by @wochinge in https://github.com/langfuse/langfuse/pull/15147
- fix(agent): Improve tool call styling by @bezbac in https://github.com/langfuse/langfuse/pull/15084
- fix(trace): budget aggregated graph layout so dense traces can't freeze the tab (LFE-10988) by @nkabardin in https://github.com/langfuse/langfuse/pull/15153
- fix(api): handle legacy traces widgets on unstable dashboard-widgets API by @LysanderKie in https://github.com/langfuse/langfuse/pull/15154
Chores
- chore(deps): bump nodemailer to 9.0.3 by @nimarb in https://github.com/langfuse/langfuse/pull/15102
- perf(shared): replace lossless-json parser with native JSON.parse source reviver by @Steffen911 in https://github.com/langfuse/langfuse/pull/15104
Full Changelog: https://github.com/langfuse/langfuse/compare/v3.215.0...v3.216.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About langfuse
🪢 Open source LLM engineering platform: LLM Observability, metrics, evals, prompt management, playground, datasets. Integrates with OpenTelemetry, Langchain, OpenAI SDK, LiteLLM, and more. YC W23
Related context
Related tools
Beta — feedback welcome: [email protected]