sankalp/umami
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,668 Commits 1 Branch 0 Tags
25d6c14f5afff0a5e3cdb2919e43e5a9ce38e87f
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mike Cao 25d6c14f5a Enable Next.js TypeScript CLI and prune unused dependencies 2026-07-28 21:56:58 -07:00
Mike Cao ed39aa1942 Upgrade Prisma, jsdom, and jest-dom dependencies 2026-07-28 21:36:55 -07:00
Mike Cao 3ad1e3ee9a Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-07-28 20:57:18 -07:00
Mike Cao ac446b9b00 Upgrade app dependencies and lockfile 2026-07-28 20:57:04 -07:00
Mike Cao f84635b7a5 Merge pull request #4408 from maxiride/feature/bounce-calculation-v3 
Feat: Improve bounce calculations with configurable threshold v3
 2026-07-28 20:55:12 -07:00
Mike Cao 59aa5f22eb Merge pull request #4413 from sushant-kataria/fix/dashboard-edit-label 
fix(dashboard): use Edit label to match empty-state copy
 2026-07-28 17:03:19 -07:00
Mike Cao 1fcbf67af6 Merge branch 'dev' into fix/dashboard-edit-label 2026-07-28 17:03:03 -07:00
Mike Cao b5d27620e7 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-07-28 14:07:19 -07:00
Mike Cao adba113b04 Load subscription data from API before rendering replay and heatmap views 2026-07-28 14:07:09 -07:00
Mike Cao 00faf04d5c Merge pull request #4356 from Niki2k1/runtime-allowed-frame-urls 
Resolve ALLOWED_FRAME_URLS from the runtime environment in Docker
 2026-07-27 21:05:12 -07:00
Mike Cao 385088d53a Tighten navigation section header spacing 2026-07-27 16:02:27 -07:00
Mike Cao 4d7930060c Move timezone selection to query parameters 2026-07-27 02:24:59 -07:00
Mike Cao 9b41053d47 Merge pull request #4312 from mamal72/fix/improve-ir-fa-support 
Add IRR currency and improve Persian (fa-IR) support
 2026-07-25 10:43:02 -07:00
Mike Cao fb56a8f922 Merge branch 'dev' into fix/improve-ir-fa-support 2026-07-25 10:42:33 -07:00
Mike Cao 7bbf3f8ff6 Merge pull request #4302 from m0sth8/manifest-crossorigin-use-credentials 
Send credentials when fetching the web app manifest (crossorigin="use-credentials")
 2026-07-24 21:27:12 -07:00
Mike Cao 0714ebdbe3 Merge pull request #4397 from Sagittarius/codex/clickhouse-22-date-format 
fix: support ClickHouse 22 date formats
 2026-07-24 21:26:39 -07:00
Mike Cao 08030db836 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-07-24 18:49:23 -07:00
Mike Cao dab6180056 Escape channel metrics literals and bypass website transfer lookup for admins 2026-07-24 18:49:02 -07:00
Mike Cao 8148d775b0 Add coverage for send route and core permission and query logic 2026-07-24 15:27:17 -07:00
Mike Cao 3a8f268d21 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-07-24 14:37:09 -07:00
Mike Cao 0b31d3a274 Mark Hebrew locale as RTL 2026-07-24 14:36:54 -07:00
Mike Cao 65e810ec79 Add coverage for core utility behavior 2026-07-24 13:52:37 -07:00
Mike Cao b70eda56e6 Merge pull request #4394 from luca-seemann/fix/client-ip-header-xff-chain 
Fix client IP resolution when CLIENT_IP_HEADER is set to x-forwarded-for
 2026-07-23 15:27:51 -07:00
Mike Cao c573a2bdb3 Merge pull request #4374 from brantsrasmus/fix/session-modal-dismiss-outside-click 
fix: dismiss session modals when clicking the side margins
 2026-07-23 14:59:38 -07:00
Mike Cao 5188b18cc4 Merge pull request #4392 from imparpaulo01/i18n/pt-pt-missing-strings 
i18n: add missing pt-PT (European Portuguese) strings
 2026-07-23 14:58:50 -07:00
Mike Cao 33ac648d1f Merge pull request #4402 from sarmah-rup/fix/format-long-number-billions 
fix: formatLongNumber shows billions ~1000x too large on metric tiles
 2026-07-23 14:21:08 -07:00
Mike Cao 8187bb3336 Update lockfile for auth and test dependency upgrades 2026-07-23 12:06:41 -07:00
Mike Cao 36bd9d33b8 Merge pull request #4205 from boutterudy/feat-2FA 
feat(login): add 2FA
 2026-07-23 11:45:20 -07:00
Mike Cao aafe068bc1 Merge branch 'dev' into feat-2FA 2026-07-23 11:14:59 -07:00
Mike Cao 5911ddaa93 Convert tracker build to TypeScript and add type checks 2026-07-19 22:04:49 -07:00
Mike Cao cb801230cc Fix identified session ID generation 2026-07-19 10:43:21 -07:00
Mike Cao 4691a344c5 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-07-18 01:35:25 -07:00
Mike Cao bc97f9f439 Enforce a per-plan team limit when creating teams in cloud mode 2026-07-18 01:35:13 -07:00
Mike Cao e030faf236 Merge pull request #4377 from leonacostaok/fix/kafka-verify-tls 
verify Kafka broker TLS certificate by default
 2026-07-13 17:49:45 -07:00
Mike Cao a8c275ec61 Merge pull request #4382 from Kopaev/fix/ru-ru-missing-translations 
i18n(ru-RU): add 21 missing Russian translations
 2026-07-13 17:47:41 -07:00
Mike Cao 889b2b7952 Merge pull request #4381 from daeho-ro/i18n-ko-KR 
Add Korean translations to sync english keys
 2026-07-09 16:36:25 -07:00
Mike Cao f525898b79 Merge pull request #4354 from sebiweise/master 
Update de-DE.json
 2026-06-26 20:29:39 -04:00
Mike Cao 0e598fb040 Merge pull request #4343 from anvme/fix/docker-exec-server-single-process 
Run server as PID 1 in Docker to drop idle launcher processes. -30% RAM Usage
 2026-06-26 20:28:39 -04:00
Mike Cao af1b6c6efc Merge pull request #4349 from umami-software/dev 
v3.2.0
 2026-06-24 14:58:05 -04:00
Mike Cao 0862518ec7 Align Docker image Prisma version with package.json 2026-06-19 20:49:47 -07:00
Mike Cao 03fe19a3ca Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-06-19 20:14:51 -07:00
Mike Cao 8e36f2e822 Bump version to v3.2. 2026-06-19 20:14:31 -07:00
Mike Cao 10dced1049 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-06-16 13:19:04 -07:00
Mike Cao 212ea2d509 Handle rrweb full snapshots as separate replay chunks 2026-06-16 13:18:12 -07:00
Mike Cao 05cce05a11 Batch Kafka messages and drop oversized payloads 2026-06-15 22:02:08 -07:00
Mike Cao 5744f04833 Reduce side nav height and unify replay modal corners 2026-06-15 21:00:22 -07:00
Mike Cao 0130db32ac Refine replay modal sheet styling 2026-06-15 20:14:53 -07:00
Mike Cao 95ece5ba56 Normalize replay events for rrweb-player playback 2026-06-15 20:08:53 -07:00
Mike Cao a5f78e3e3d Hardcode recorder API endpoints in build and runtime 2026-06-15 14:50:13 -07:00
Mike Cao 15038b09d9 Handle fragmented replay events in recording and playback 2026-06-15 13:46:24 -07:00
Mike Cao 4987e0ca01 Bump runtime and tooling dependencies 2026-06-14 23:09:33 -07:00
Mike Cao f69f76b3b1 Handle invalid IPs and localhost lookup failures in location detection 2026-06-11 19:01:04 -07:00
Mike Cao fa4318fb87 Tighten side nav spacing and remove extra bottom margin 2026-06-11 17:55:44 -07:00
Mike Cao 475d9548de Reject oversized replay payloads and chunk recorder flushes 2026-06-10 23:18:50 -07:00
Mike Cao 1118f4b28e Upgrade rrweb and rrweb-player to 2.0.1 2026-06-10 21:41:24 -07:00
Mike Cao c80e35efd7 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-06-10 20:26:09 -07:00
Mike Cao 38b5a8d25b Flush replay events on pagehide with a shorter interval 2026-06-10 20:25:19 -07:00
Mike Cao 8227589ad9 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-06-09 23:07:24 -07:00
Mike Cao db01e3a1bb Lower cloud free website limit to 1 2026-06-09 14:58:10 -07:00
Mike Cao 0c0a3aee65 Propagate unlimited website entitlement through subscription checks 2026-06-09 13:32:52 -07:00
Mike Cao d2eafd68f7 Allow unlimited cloud websites for subscribed accounts 2026-06-08 17:20:20 -07:00
Mike Cao f09df3cf14 Remove unused config property. 2026-06-04 20:15:57 -07:00
Mike Cao de487e572e Merge branch 'analytics' into dev 2026-06-04 19:56:02 -07:00
Mike Cao 7de662a71e Revert to external API url. 2026-06-04 17:32:25 -07:00
Mike Cao a52f32604a Fixed channel metrics queries. 2026-06-04 02:08:01 -07:00
Mike Cao 8a39e98961 Merge pull request #4283 from mturac/fix/3549-runtime-login-env 
fix: evaluate login mode env at runtime
 2026-06-03 23:51:21 -04:00
Mike Cao dc7c4f0246 Merge pull request #4292 from umami-software/blacksmith-migration-c0ea3ae 
.github/workflows: Migrate workflows to Blacksmith runners
 2026-06-03 23:47:25 -04:00
Mike Cao d659c5746b Merge pull request #4317 from umami-software/opencode/nimble-planet 
Fix board share entity authorization
 2026-06-03 23:43:48 -04:00
Mike Cao c0193ad7cd Address board share review feedback 2026-06-03 20:29:08 -07:00
Mike Cao a5f4a39f2b Fix board share entity authorization 2026-06-03 00:02:54 -07:00
Mike Cao e9925f2e4e Sanitize CSV exports against formula injection 2026-06-03 00:00:37 -07:00
Mike Cao 0c08a27a81 Updated lock file. 2026-06-02 23:24:07 -07:00
Mike Cao 306ca4a435 Lint format files. Updated rng function. 2026-06-02 22:35:07 -07:00
Mike Cao 5bf1792b38 Restrict team owner assignment to admins 2026-06-02 22:17:10 -07:00
Mike Cao 44c6b4427f Add schema to realtime route. 2026-06-02 22:07:46 -07:00
Mike Cao 46819a4443 Enforce team role hierarchy on user updates and removals 2026-06-02 21:32:34 -07:00
Mike Cao 0f36990040 Merge branch 'analytics' into dev 2026-06-02 20:22:32 -07:00
Mike Cao fded75f940 Use authenticated Redis key on logout 2026-06-02 17:46:08 -07:00
Mike Cao a9beebf1a9 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-06-02 17:26:59 -07:00
Mike Cao d44592ddb5 Validate SSO redirect URLs before setting auth token 2026-06-02 17:26:48 -07:00
Mike Cao 72611027b7 Merge pull request #4316 from umami-software/codex/umami-GHSA-w7hf-qxh9-2cm3 
Limit batch API payloads to 500 items
 2026-06-02 19:59:21 -04:00
Mike Cao 7161d83382 Merge pull request #4315 from umami-software/codex/umami-GHSA-jmch-5jr7-62q9 
Tighten API access checks by website section and share permissions
 2026-06-02 19:55:55 -04:00
Mike Cao 9ba5fb7c1b Limit batch API payloads to 500 items 2026-06-02 16:54:35 -07:00
Mike Cao f366d946e8 Allow unrestricted access when share token has no section flags 2026-06-02 16:28:30 -07:00
Mike Cao ade0819be1 Tighten API access checks by website section and share permissions 2026-06-02 15:29:23 -07:00
Mike Cao 8bc49a29e3 Fix share token confusion vulnerability 
Cache tokens from /api/send and share tokens were both signed with the same secret and parsed without distinguishing claim types, allowing a public cache token to be replayed as x-umami-share-token to read any website's analytics. Add explicit token type claims (share/cache) and require the matching type when parsing each.
 2026-06-02 14:45:21 -07:00
Mike Cao 9ced9ac85a Fixed API_URL handling. 2026-06-02 11:19:33 -07:00
Mike Cao f985b4f9a5 Use next rewrites for API_URL. 2026-06-02 11:12:48 -07:00
Mike Cao 4772c702b5 Merge pull request #4294 from swayam-mishra/dev 
fix: update broken demo link from analytics.umami.is to cloud.umami.is
 2026-05-29 14:11:14 -04:00
Mike Cao 18b72d3008 fix(tracker): restore link navigation when tracking fails 
Use .finally() instead of .then() so internal link navigation is
always restored after e.preventDefault(), even if the tracking
request rejects (e.g. server down or a throwing beforeSend callback).

Fixes #4304
 2026-05-29 10:58:11 -07:00
Mike Cao 10f6ee27da Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-29 10:54:25 -07:00
Mike Cao 8ddc959b3f Merge pull request #4018 from ip00/patch-1 
Update hr-HR.json
 2026-05-29 13:48:07 -04:00
Mike Cao e28309f8f7 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-28 13:37:42 -07:00
Mike Cao 1d91b81f24 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-27 10:14:44 -07:00
Mike Cao f145b75cb3 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-26 20:48:54 -07:00
Mike Cao 77886a32cc Merge pull request #4300 from yancat160/feat/datagrid-view-toggle-i18n 
i18n: translate DataGrid view-toggle tooltips
 2026-05-26 23:48:46 -04:00
Mike Cao aba1fea238 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-26 20:45:25 -07:00
Mike Cao c41bf7c93e Enforce cloud website limits by subscription tier 2026-05-26 20:45:07 -07:00
Mike Cao 7d4c68cebe Remove obsolete dist dependencies from lockfile 2026-05-25 02:51:30 -07:00
Mike Cao 454e53dd48 Rename website chart board component 2026-05-25 02:49:13 -07:00