chore: release v2.93.2

.env.prod.example

@@ -28,9 +28,6 @@ ENCRYPTION_KEY="0000000000000000000000000000000000000000000000000000000000000000
 # Use CSP headers to enforce HTTPS, optional
 # LANGFUSE_CSP_ENFORCE_HTTPS="true"
 
-# Optionally, disable CSP headers
-# LANGFUSE_CSP_DISABLE="true"
-
 # Configure base path for self-hosting, optional
 # Note: You need to build the docker image with the base path set and cannot use the pre-built docker image if you set this.
 # NEXT_PUBLIC_BASE_PATH="/app"

package.json

@@ -1,6 +1,6 @@
 {
   "name": "langfuse",
-  "version": "2.93.1",
+  "version": "2.93.2",
   "author": "engineering@langfuse.com",
   "license": "MIT",
   "private": true,

web/next.config.mjs

@@ -98,19 +98,26 @@ const nextConfig = {
         ],
       },
       // CSP header
-      ...(env.LANGFUSE_CSP_DISABLE !== "true"
-        ? [
+      {
+        source: "/:path((?!api).*)*",
+        headers: [
           {
-            source: "/:path((?!api).*)*",
-            headers: [
-              {
-                key: "Content-Security-Policy",
-                value: cspHeader.replace(/\n/g, ""),
-              },
-            ],
+            key: "Content-Security-Policy",
+            value: cspHeader.replace(/\n/g, ""),
           },
-        ]
-        : []),
+        ],
+        // Disable CSP on Hugging Face to allow for embedded use of Langfuse
+        missing: [
+          {
+            type: "host",
+            value: "huggingface.co",
+          },
+          {
+            type: "host",
+            value: ".*\\.hf\\.space$", // *.hf.space
+          },
+        ],
+      },
       // Required to check authentication status from langfuse.com
       ...(env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION !== undefined
         ? [

web/package.json

@@ -1,6 +1,6 @@
 {
   "name": "web",
-  "version": "2.93.1",
+  "version": "2.93.2",
   "private": true,
   "license": "MIT",
   "engines": {

web/src/constants/VERSION.ts

@@ -1 +1 @@
-export const VERSION = "v2.93.1";
+export const VERSION = "v2.93.2";

web/src/env.mjs

@@ -47,7 +47,6 @@ export const env = createEnv({
       .enum(["OWNER", "ADMIN", "MEMBER", "VIEWER"])
       .optional(),
     LANGFUSE_CSP_ENFORCE_HTTPS: z.enum(["true", "false"]).optional().default("false"),
-    LANGFUSE_CSP_DISABLE: z.enum(["true", "false"]).optional().default("false"),
     // Telemetry
     TELEMETRY_ENABLED: z.enum(["true", "false"]).optional(),
     // AUTH
@@ -276,7 +275,6 @@ export const env = createEnv({
       process.env.LANGFUSE_NEW_USER_SIGNUP_WEBHOOK,
     SALT: process.env.SALT,
     LANGFUSE_CSP_ENFORCE_HTTPS: process.env.LANGFUSE_CSP_ENFORCE_HTTPS,
-    LANGFUSE_CSP_DISABLE: process.env.LANGFUSE_CSP_DISABLE,
     TELEMETRY_ENABLED: process.env.TELEMETRY_ENABLED,
     // Default org, project and role
     LANGFUSE_DEFAULT_ORG_ID: process.env.LANGFUSE_DEFAULT_ORG_ID,

worker/package.json

@@ -1,6 +1,6 @@
 {
   "name": "worker",
-  "version": "2.93.1",
+  "version": "2.93.2",
   "description": "",
   "license": "MIT",
   "private": true,

worker/src/constants/VERSION.ts

@@ -1 +1 @@
-export const VERSION = "v2.93.1";
+export const VERSION = "v2.93.2";