Francis Cao
b47847958a
fix code-textarea css
2026-07-16 11:58:49 -07:00
Francis Cao
f7b94c259b
add tracking code workflow for Add website. Add linked ID to session modal.
2026-07-16 11:32:32 -07:00
Francis Cao
7afc4ccf6b
session activity identify stitching
2026-07-15 11:20:27 -07:00
Francis Cao
8a75208d5b
fix permissions loop for charts route
2026-07-14 15:23:32 -07:00
Francis Cao
712b32c7bf
sparkline performance
2026-07-14 14:58:11 -07:00
Mike Cao
e030faf236
Merge pull request #4377 from leonacostaok/fix/kafka-verify-tls
...
verify Kafka broker TLS certificate by default
2026-07-13 17:49:45 -07:00
Francis Cao
31c479cf5e
Fix board funnel/goal preview
2026-07-08 11:11:55 -07:00
Francis Cao
28230ee471
sync bucket labeling
2026-07-08 10:32:16 -07:00
Francis Cao
86b35475c0
Add sparklines to Website, Pixel, Link tables
2026-07-08 10:03:08 -07:00
Francis Cao
e47d1570b9
fix iframe viewport clipping
2026-07-06 11:24:19 -07:00
Francis Cao
7bdc2f215e
harden report references in boards
2026-07-06 10:58:43 -07:00
Francis Cao
a4a0167515
enforce minimum 8 character slug on create/update. Closes #4376
2026-07-04 08:44:23 -07:00
Leon Acosta
2771abc6a7
verify Kafka broker TLS certificate by default
...
When SASL credentials are present, getClient() connected with
`rejectUnauthorized: false`, so the SASL password was sent over a TLS
connection whose broker certificate was never verified — a MITM could
present any certificate and capture the credentials.
Verify by default; set KAFKA_SSL_ALLOW_UNAUTHORIZED=true to opt out for
self-signed brokers.
2026-07-04 18:45:45 +07:00
Francis Cao
735d85c7af
fix channel attribution for organic Facebook traffic. Closes #4297
2026-07-02 11:51:46 -07:00
Francis Cao
0d7503a320
remove event property mock data
2026-07-02 11:12:26 -07:00
Francis Cao
8b177f1a21
Fix ComboBox/MultiSelect issues. Closes #4355
2026-07-02 11:11:53 -07:00
Francis Cao
22176eb76d
Fix: Session modal issues on mobile: scroll jumps to top on close, avatar overflow causes horizontal scroll. Closes #4358
2026-07-02 10:41:57 -07:00
Francis Cao
952143ba5e
match order by with clickhouse queries
2026-07-02 10:32:43 -07:00
Francis Cao
2575f11d26
Merge pull request #4365 from PeterUstinox/fix/eventdata-events-groupby-postgres
...
fix(events): add GROUP BY to getEventDataEvents no-event relational branch (PostgreSQL 42803)
2026-07-02 10:30:27 -07:00
Francis Cao
0b0a784c76
fix: improve 100vh heatmap iframe alignment
2026-07-02 09:52:51 -07:00
Francis Cao
4c4071b270
keep createSession raw writes on primary when replicas are enabled
2026-07-01 09:53:08 -07:00
Francis Cao
7a176e10bc
share component column wrapping. link/pixel card mode. website table formatting. Closes #4372
2026-07-01 09:15:50 -07:00
Francis Cao
2efe6297be
implement board clone feature
2026-06-30 08:50:33 -07:00
Francis Cao
ab5b1bf354
Board component, security, test updates
2026-06-29 18:17:57 -07:00
PeterUstinox
7b2a235741
fix(events): add GROUP BY to getEventDataEvents no-event relational branch
...
The no-event branch selects event_name, data_key and data_type alongside
count(*) without a GROUP BY, which throws on PostgreSQL (42803) and on MySQL
with ONLY_FULL_GROUP_BY. The event-filtered branch and both ClickHouse
branches already group correctly. Fixes #4359 .
2026-06-28 23:38:00 +02:00
Francis Cao
42765249ee
remove shouldSkipSnapshot rule
2026-06-23 15:10:27 -07:00
Francis Cao
8a0bdc2727
heatmap migration/code clean-up
2026-06-23 15:01:00 -07:00
Francis Cao
3888ec6f4f
Allow legacy stateless tokens that were minted without a password fingerprint.
2026-06-23 13:24:55 -07:00
Francis Cao
9defe7e3e0
Only enforce password-change invalidation for sessions that include a password fingerprint.
2026-06-23 00:27:44 -07:00
Francis Cao
d4b6f3d25f
Merge branch 'dev' of https://github.com/umami-software/umami into dev
2026-06-22 23:31:16 -07:00
Francis Cao
727490269b
Invalidate auth sessions after password changes
2026-06-22 23:31:12 -07:00
Mike Cao
ec56e58567
Merge branch 'dev' of https://github.com/umami-software/umami into dev
2026-06-22 23:26:10 -07:00
Mike Cao
ced1107261
Use sunken styling for heatmap page buttons
2026-06-22 23:26:01 -07:00
Francis Cao
2e74b3ebae
sanitize logging of sensitive info.
2026-06-22 23:03:01 -07:00
Mike Cao
527ef9d769
Merge branch 'dev' of https://github.com/umami-software/umami into dev
2026-06-22 22:34:21 -07:00
Mike Cao
ce3d928f77
Keep heatmap depth labels readable while scaling overlay
2026-06-22 22:32:05 -07:00
Francis Cao
86485e8b52
fix paths to orphaned team-owner
2026-06-22 22:13:55 -07:00
Francis Cao
129681ebd7
fix: harden analytics writes and hide internal server errors from client
2026-06-22 22:07:07 -07:00
Francis Cao
770b4d59d2
Merge pull request #4341 from Kyzenkms/fix/session-distinct-id-wrap
...
fix: wrap long distinct ids in session info
2026-06-22 21:59:39 -07:00
Francis Cao and greptile-apps[bot]
9fafd0cfd4
Apply suggestion from @greptile-apps[bot]
...
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
2026-06-22 21:58:39 -07:00
Mike Cao
7d84c84d9a
Clip outlier heatmap clicks without stretching canvas
2026-06-22 21:48:29 -07:00
Mike Cao
a53996575e
Keep website filter dialog content within viewport
2026-06-22 21:34:38 -07:00
Mike Cao
eb2e271a08
Constrain filter edit tabs to scroll within the modal
2026-06-22 21:22:41 -07:00
Mike Cao
30ca4d6680
Merge branch 'dev' of https://github.com/umami-software/umami into dev
2026-06-22 17:27:05 -07:00
Mike Cao
5ebb49a8f1
Group heatmap overlays by screen width
2026-06-22 17:26:51 -07:00
Francis Cao
bf886d6224
Merge pull request #4348 from KadirFiratFTW/fix/4347-information-disclosure-returned-in-response
...
fix: Information Disclosure: Internal Prisma & Database Errors Return…
2026-06-22 16:39:10 -07:00
kadirfiratftw
173f28c677
fix: Information Disclosure: Internal Prisma & Database Errors Returned in API Response
2026-06-23 01:51:44 +03:00
Mike Cao
cced845be1
Always render heatmap snapshots with their captured page URL
2026-06-22 11:56:25 -07:00
Mike Cao
1d71f9d069
Group heatmap clicks by selectable screen width
2026-06-22 09:57:00 -07:00
Mike Cao
beb4881c24
Fit heatmap canvases to viewport
2026-06-21 14:23:05 -07:00
Francis Cao