Federico D'Eredità
19fcde2c9c
refactor(queries): replace hardcoded event types with constants
...
Replaced hardcoded `event_type` values with named constants from
`EVENT_TYPE`, as in #3614 . Added the `BOUNCE_THRESHOLD` constant and
documented it in `docker-compose.yml`.
2026-07-26 18:49:58 +02:00
Mike Cao
fb56a8f922
Merge branch 'dev' into fix/improve-ir-fa-support
2026-07-25 10:42:33 -07:00
Mike Cao
7bbf3f8ff6
Merge pull request #4302 from m0sth8/manifest-crossorigin-use-credentials
...
Send credentials when fetching the web app manifest (crossorigin="use-credentials")
2026-07-24 21:27:12 -07:00
Mike Cao
0714ebdbe3
Merge pull request #4397 from Sagittarius/codex/clickhouse-22-date-format
...
fix: support ClickHouse 22 date formats
2026-07-24 21:26:39 -07:00
Mike Cao
08030db836
Merge branch 'dev' of https://github.com/umami-software/umami into dev
2026-07-24 18:49:23 -07:00
Mike Cao
dab6180056
Escape channel metrics literals and bypass website transfer lookup for admins
2026-07-24 18:49:02 -07:00
Francis Cao
44eb78f553
Merge branch 'dev' of https://github.com/umami-software/umami into dev
2026-07-24 15:47:05 -07:00
Francis Cao
f9850f02b3
add session delete feature to relational only. add test, share conditions, and permissions. Closes #2940
2026-07-24 15:47:01 -07:00
Mike Cao
8148d775b0
Add coverage for send route and core permission and query logic
2026-07-24 15:27:17 -07:00
Mike Cao
0b31d3a274
Mark Hebrew locale as RTL
2026-07-24 14:36:54 -07:00
Mike Cao
65e810ec79
Add coverage for core utility behavior
2026-07-24 13:52:37 -07:00
Francis Cao
3b4d5b9575
2FA reset feature
2026-07-24 10:46:19 -07:00
Francis Cao
896d63df94
add new test files and fix migration
2026-07-24 08:45:17 -07:00
Mike Cao
b70eda56e6
Merge pull request #4394 from luca-seemann/fix/client-ip-header-xff-chain
...
Fix client IP resolution when CLIENT_IP_HEADER is set to x-forwarded-for
2026-07-23 15:27:51 -07:00
Mike Cao
c573a2bdb3
Merge pull request #4374 from brantsrasmus/fix/session-modal-dismiss-outside-click
...
fix: dismiss session modals when clicking the side margins
2026-07-23 14:59:38 -07:00
Mike Cao
33ac648d1f
Merge pull request #4402 from sarmah-rup/fix/format-long-number-billions
...
fix: formatLongNumber shows billions ~1000x too large on metric tiles
2026-07-23 14:21:08 -07:00
Francis Cao
32170eed00
2FA migration and schema clean-up
2026-07-23 12:46:55 -07:00
Francis Cao
13d18c0880
Merge branch 'dev' of https://github.com/umami-software/umami into dev
2026-07-23 11:50:39 -07:00
Francis Cao
d05d9c4f34
Session and event property filtering. Closes #2945 . Closes #4008 .
2026-07-23 11:50:35 -07:00
Mike Cao
36bd9d33b8
Merge pull request #4205 from boutterudy/feat-2FA
...
feat(login): add 2FA
2026-07-23 11:45:20 -07:00
Mike Cao
aafe068bc1
Merge branch 'dev' into feat-2FA
2026-07-23 11:14:59 -07:00
Francis Cao
78346795eb
Fix revenue query filtering. Closes #4286
2026-07-23 09:41:59 -07:00
Francis Cao
03ef78724b
add design translations. Fix empty-dashboard message. Closes #4398
2026-07-22 12:56:11 -07:00
Francis Cao
7db8c1e979
Merge pull request #4404 from shubhamOrgpathak1/fix/website-backend-validation
...
Validate website name and domain input on server side
2026-07-22 12:27:47 -07:00
Francis Cao
58ee28a55e
remove session recalculate and related queries
2026-07-21 12:33:41 -07:00
Shubham Pathak
715f306a48
Validate website name and domain input on server side
2026-07-21 21:25:14 +05:45
Rup Sarmah
0715aef477
fix(format): divide by 1e9 in formatLongNumber billions branch
...
The billions branch of formatLongNumber divided by 1000000 while
appending the 'b' suffix, so values >= 1e9 rendered about 1000x too
large (1000000000 became '1000.0b' instead of '1.0b'). Divide by
1000000000 to match the 'b' unit, consistent with the sibling
formatLongCurrency. Add regression tests for the billions branch.
2026-07-21 17:52:40 +05:30
Mike Cao
eb9a77ea64
Return 404 when session is not found and add test coverage for GET session route
2026-07-20 17:15:52 -07:00
Francis Cao
9bf95ef112
updaet session stitching model for post-identify reads. fix fullPath search
2026-07-20 12:21:07 -07:00
Mike Cao
5911ddaa93
Convert tracker build to TypeScript and add type checks
2026-07-19 22:04:49 -07:00
Mike Cao
cb801230cc
Fix identified session ID generation
2026-07-19 10:43:21 -07:00
Mike Cao
4691a344c5
Merge branch 'dev' of https://github.com/umami-software/umami into dev
2026-07-18 01:35:25 -07:00
Mike Cao
bc97f9f439
Enforce a per-plan team limit when creating teams in cloud mode
2026-07-18 01:35:13 -07:00
Vincent Chan
e7c18860f1
fix: support ClickHouse 22 date formats
2026-07-18 03:23:54 +08:00
Francis Cao
8004afe63d
Punycode support. Closes #2170
2026-07-17 10:22:37 -07:00
Luca Seemann
65b508c22a
Fix custom CLIENT_IP_HEADER not parsing x-forwarded-for/forwarded chains
2026-07-17 16:31:06 +02:00
Francis Cao
b47847958a
fix code-textarea css
2026-07-16 11:58:49 -07:00
Francis Cao
f7b94c259b
add tracking code workflow for Add website. Add linked ID to session modal.
2026-07-16 11:32:32 -07:00
Francis Cao
7afc4ccf6b
session activity identify stitching
2026-07-15 11:20:27 -07:00
Francis Cao
8a75208d5b
fix permissions loop for charts route
2026-07-14 15:23:32 -07:00
Francis Cao
712b32c7bf
sparkline performance
2026-07-14 14:58:11 -07:00
Mike Cao
e030faf236
Merge pull request #4377 from leonacostaok/fix/kafka-verify-tls
...
verify Kafka broker TLS certificate by default
2026-07-13 17:49:45 -07:00
Francis Cao
31c479cf5e
Fix board funnel/goal preview
2026-07-08 11:11:55 -07:00
Francis Cao
28230ee471
sync bucket labeling
2026-07-08 10:32:16 -07:00
Francis Cao
86b35475c0
Add sparklines to Website, Pixel, Link tables
2026-07-08 10:03:08 -07:00
Francis Cao
e47d1570b9
fix iframe viewport clipping
2026-07-06 11:24:19 -07:00
Francis Cao
7bdc2f215e
harden report references in boards
2026-07-06 10:58:43 -07:00
Francis Cao
a4a0167515
enforce minimum 8 character slug on create/update. Closes #4376
2026-07-04 08:44:23 -07:00
Leon Acosta
2771abc6a7
verify Kafka broker TLS certificate by default
...
When SASL credentials are present, getClient() connected with
`rejectUnauthorized: false`, so the SASL password was sent over a TLS
connection whose broker certificate was never verified — a MITM could
present any certificate and capture the credentials.
Verify by default; set KAFKA_SSL_ALLOW_UNAUTHORIZED=true to opt out for
self-signed brokers.
2026-07-04 18:45:45 +07:00
brantsrasmus
3c467e54d5
address review feedback
...
- SessionModal: merge caller-provided className with styles.modal instead
of letting it be clobbered by the {...props} spread (matches ReplayModal).
- e2e test: narrow boundingBox()/viewport nullability without non-null
assertions (keeps biome's noNonNullAssertion happy) via a getSheetBox
helper and a shared VIEWPORT constant.
2026-07-03 11:56:13 +02:00