Release langwatch: v3.11.0 · langwatch/langwatch

3.11.0 (2026-08-09)

spend: POST /api/gateway/v1/virtual-keys refuses an organization- or team-scoped key, and a key scoped to more than one project, when it does not carry trace_project_id and the organization has projects to choose from. Send trace_project_id, or scope the key to exactly one project. Existing keys are unaffected until they are next edited.
gateway: POST /api/gateway/v1/virtual-keys refuses an organization- or team-scoped key, and a key scoped to more than one project, when it does not carry trace_project_id and the organization has projects to choose from. Send trace_project_id, or scope the key to exactly one project. Existing keys are unaffected until they are next edited.
evaluators: evaluations, monitors and experiments referencing a legacy/ragas_* evaluator type stop working. Their current equivalents in the ragas/* family remain available.
mcp-server: three behaviors change for callers of the HTTP server. A client that authenticated once at initialize and then sent only the session id must now send Authorization: Bearer on every request. GET /sse?apiKey= no longer authenticates; use the Authorization header. A deployment relying on the implicit 0.0.0.0 bind must pass --host 0.0.0.0, which the published container image already does.

agent-plugin: first-class LangWatch plugin for Claude Code and Agent Plugins 1.0 (#6747) (25625c4)
cli: keep the LangWatch Claude Code plugin up to date from every wrapped run (#6751) (b64a584)
codex: capture the conversation for a plain codex, not just the wrapper (#6433) (38931b4)
coding-agent: session economics, and the repositories and pull requests behind them (#6435) (6430813)
evaluators: remove the legacy Ragas evaluators (#6600) (ef9ea90)
gateway: make a budget reach the traffic it names, and every route say which key it wants (#6647) (eaf6573)
governance: copilot capture across three surfaces — CLI wrapper, app login agent, VS Code Chat (ADR-039) (#5605) (fd6a3b3)
langy: show a data-use notice under the composer (#6755) (98395a4)
model-providers: test a credential you have already saved (#6657) (223f6f4)
spend: one filter vocabulary on both reads, and a grouping that refuses to lie (#6656) (dd3be46)
traces: trace edit overlay and annotation queue to dataset workflow (#6565) (33d55ee)

aigateway: propagate routing-policy and cache-rule edits through the change feed (#6737) (b2377ca)
charts: unpin the clickhouse-serverless subchart and resync the lock (#6745) (0e2c9c7)
ci: the release-scope guard recognizes its own pin remediation (#6759) (bdde347)
cli: survive orphaned member rows when resolving the bootstrap admin email (#6738) (f2149eb)
dev: count the checks that go around the package scripts (#6733) (824a297)
dev: identify a dev lane by its command line, not by ps comm alone (#6753) (38e1e34)
dev: take a dev stack down with whoever started it (#6749) (474c7a0)
mcp-server: authorize every request to the standalone HTTP server (#6641) (af324de)
model-providers: an extra header no longer deletes the stored Azure credentials (#6730) (11f4736)
observability: default ClickHouse backup metrics ON, opt out where there are no backups (#6756) (8f1c021)
tests: read the annotations column as the text it is, and stop the queue overlap test racing its holder (#6764) (d79fe54)
traces: default the oversized-span S3 spool on so configured storage means no truncation (#6729) (6bf9ec8)
traces: gate coding-agent log content by canonical event and per key (#6743) (157eb0e)