Commit Graph
6797 Commits
Author SHA1 Message Date
Mike Cao 06f8f37836 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-09-09 21:54:48 -07:00
Mike Cao 1d7874b7d9 Remove obsolete OAuth migration files 2026-09-09 15:26:29 -07:00
Mike Cao 2b7eb29a0e Gate MCP endpoint behind MCP_ENABLED flag 2026-09-09 15:24:51 -07:00
Mike Cao b185837063 Remove OAuth authorization flows and use API key authentication for MCP 2026-09-09 15:22:15 -07:00
Francis Cao 819e1c7256 feat: require explicit opt-in for MCP and OAuth registration 2026-09-09 15:16:30 -07:00
Mike Cao 15a1f0918d Update dependencies and lockfile versions 2026-09-08 11:52:18 -07:00
Francis Cao 16acac5530 fix website select error and delete board website errors. 2026-09-08 10:28:54 -07:00
Francis Cao 4580cb6179 preserve tooltip css 2026-09-08 09:46:51 -07:00
Mike Cao 9fb7bacee6 Rename package scripts to colon-based conventions and update build, seed, and API client references 2026-09-07 17:47:36 -07:00
Mike Cao 6156387251 Generate OpenAPI field descriptions and validate generated clients in CI 2026-09-07 17:30:56 -07:00
Mike Cao 9eef6f22c9 Prevent event details from wrapping in table rows 2026-09-07 10:37:22 -07:00
Mike Cao 9ff1ecb6dd Migrate UI styles to Zen theme tokens and preserve brand colors 2026-09-07 10:28:16 -07:00
Mike Cao 0f187dcac1 Document API operations with concise endpoint descriptions 2026-09-06 23:36:53 -07:00
Mike Cao e2f7cd9488 Fix MCP CLI packaging and update React UI dependencies 2026-09-06 21:33:22 -07:00
Mike Cao 9c78131671 Update API version to 3.3.1 and replace classnames with cn 2026-09-06 20:58:02 -07:00
Mike Cao 8b9ba7cce9 Merge pull request #4519 from umami-software/testing
Add API integration test suite with Postgres and ClickHouse coverage
2026-09-06 20:49:39 -07:00
Mike Cao 7627c36642 Guard API tests against destructive non-loopback targets 2026-09-06 20:41:22 -07:00
Mike Cao 4e47e350bf Run API tests serially and support external targets without stale coverage logs 2026-09-06 20:11:15 -07:00
Mike Cao e18769e8cf Add API integration test suite with Postgres and ClickHouse coverage 2026-09-06 16:42:53 -07:00
Mike Cao 42c5a53650 Merge pull request #4490 from justadityaraj/fix/page-selector-dev
Keep typed page paths selectable in reports
2026-09-05 22:41:30 -07:00
Mike Cao d7bf253363 Merge pull request #4515 from umami-software/feat/mcp-api-client
Add OAuth-protected MCP server with generated API client and OpenAPI contracts
2026-09-05 19:41:58 -07:00
Mike Cao 162487eca1 Remove rate limiting from OAuth registration and MCP endpoints
Drop the per-IP registration limiter and the per-user MCP limiter along
with the shared in-memory/Redis helper. Request throttling is an
infrastructure concern (reverse proxy, CDN) rather than something each
endpoint should reimplement.
2026-09-05 19:20:56 -07:00
Mike Cao d2b4aa174e Rate limit dynamic client registration per source address
Replace the process-wide registration counter used without Redis with a
shared per-key fixed-window limiter, so one requester can no longer
exhaust the registration budget for every other client on the process.
The in-memory fallback is bounded (expired windows are swept, then the
oldest keys are shed) so memory stays constant under key churn.

Also fixes checkMcpRateLimit inverting redis.rateLimit's result: it
resolves true once the counter reaches its threshold, so with Redis the
MCP endpoint was denying requests below the limit and allowing those
above it. Both call sites now share the same limiter and semantics.
2026-09-05 17:57:20 -07:00
Mike Cao 67449d76ef Harden OAuth metadata fetching and make token rotation transactional 2026-09-05 14:09:33 -07:00
Mike Cao 950ae63f87 Merge pull request #4511 from GroophyLifefor/change-url-icon
replace Waypoints icon with Link for URL
2026-09-05 00:36:28 -07:00
Mike Cao 774125a5ee Support CommonJS imports and clarify Cloud MCP authentication setup 2026-09-04 23:31:57 -07:00
Francis Cao 15a57f9e34 Merge branch 'analytics' of https://github.com/umami-software/umami into dev 2026-09-04 09:23:04 -07:00
Mike Cao 9c44a3cbbf Fix mobile date filter fullscreen dropdown 2026-09-03 17:14:22 -07:00
Mike Cao 65bf19e067 Add OAuth-protected MCP server with generated API client packages 2026-09-03 16:58:47 -07:00
Francis Cao 336fbcb3c5 Annotations workflow, UI/UX polish 2026-09-03 12:59:56 -07:00
Murat Kirazkaya 4044986e8a refactor(website-menu): replace Waypoints icon with Link icon in expanded menu 2026-09-03 16:27:43 +03:00
Francis Cao 26e236c95c Fix Goal/Funnel wildcard UI bug 2026-09-02 14:56:35 -07:00
Francis Cao 2709d8e8ea Merge pull request #4502 from nicolas2601/fix/manage-teams-base-path
fix(teams): respect basePath in Manage teams menu link
2026-09-02 14:40:29 -07:00
Mike Cao f1c5b4f7bb Add account API key management 2026-09-01 21:50:07 -07:00
Mike Cao 98b824ce48 Update Next.js and related dependencies 2026-09-01 17:47:03 -07:00
Mike Cao 8d0229b598 Remove autogenerated operation descriptions from OpenAPI contracts 2026-09-01 16:07:08 -07:00
Mike Cao e1a4934038 Generate explicit OpenAPI contracts for API routes 2026-09-01 15:09:10 -07:00
Mike Cao cc5d71d39f Generate OpenAPI from App Router handlers with inferred contracts and source analysis 2026-09-01 13:09:40 -07:00
Nicolas Moreno 054c365504 fix(teams): respect basePath in Manage teams menu link 2026-09-01 06:59:38 -05:00
Mike Cao 5ce5664b29 Add OpenAPI schema generation and validation for API routes 2026-08-31 19:37:37 -07:00
Mike Cao 5d822e6c7e Add annotation modal headings and restore row button styling 2026-08-27 00:17:25 -07:00
Mike Cao 64e4cc1c3b Add website annotations with chart markers and CRUD management 2026-08-27 00:09:03 -07:00
Aditya de7c06c0a5 Fix page selector custom values 2026-08-26 18:22:15 +05:30
Mike Cao eea124bbf8 Migrate UI theme variables to react-zen tokens and update dependency package 2026-08-24 17:02:57 -07:00
Mike Cao ca661c7057 Merge branch 'dev' 2026-08-20 10:38:48 -07:00
Mike Cao ac4e6c9160 Bump version to v3.3.1. 2026-08-20 10:38:27 -07:00
Mike Cao 4a01463b64 Merge pull request #4467 from umami-software/dev
v3.3.1
2026-08-20 13:06:53 -04:00
Francis Cao af542569bf fix realtime search bar css 2026-08-19 22:25:41 -07:00
Francis Cao cb9cb27fbe fix(send): reset visit state on session drift and add missing 2FA translations 2026-08-19 22:06:19 -07:00
Francis Cao c3a70b123d fix(relational): prevent orphaned website_event sessions and keep event pagination stable. Closes #4462. 2026-08-18 14:16:03 -07:00