Commit Graph
100 Commits
Author SHA1 Message Date
Mike Cao 33ac648d1f Merge pull request #4402 from sarmah-rup/fix/format-long-number-billions
fix: formatLongNumber shows billions ~1000x too large on metric tiles
2026-07-23 14:21:08 -07:00
Mike Cao 8187bb3336 Update lockfile for auth and test dependency upgrades 2026-07-23 12:06:41 -07:00
Mike Cao 36bd9d33b8 Merge pull request #4205 from boutterudy/feat-2FA
feat(login): add 2FA
2026-07-23 11:45:20 -07:00
Mike Cao aafe068bc1 Merge branch 'dev' into feat-2FA 2026-07-23 11:14:59 -07:00
Mike Cao 5911ddaa93 Convert tracker build to TypeScript and add type checks 2026-07-19 22:04:49 -07:00
Mike Cao cb801230cc Fix identified session ID generation 2026-07-19 10:43:21 -07:00
Mike Cao 4691a344c5 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-07-18 01:35:25 -07:00
Mike Cao bc97f9f439 Enforce a per-plan team limit when creating teams in cloud mode 2026-07-18 01:35:13 -07:00
Mike Cao e030faf236 Merge pull request #4377 from leonacostaok/fix/kafka-verify-tls
verify Kafka broker TLS certificate by default
2026-07-13 17:49:45 -07:00
Mike Cao a8c275ec61 Merge pull request #4382 from Kopaev/fix/ru-ru-missing-translations
i18n(ru-RU): add 21 missing Russian translations
2026-07-13 17:47:41 -07:00
Mike Cao 889b2b7952 Merge pull request #4381 from daeho-ro/i18n-ko-KR
Add Korean translations to sync english keys
2026-07-09 16:36:25 -07:00
Mike Cao f525898b79 Merge pull request #4354 from sebiweise/master
Update de-DE.json
2026-06-26 20:29:39 -04:00
Mike Cao 0e598fb040 Merge pull request #4343 from anvme/fix/docker-exec-server-single-process
Run server as PID 1 in Docker to drop idle launcher processes. -30% RAM Usage
2026-06-26 20:28:39 -04:00
Mike Cao af1b6c6efc Merge pull request #4349 from umami-software/dev
v3.2.0
2026-06-24 14:58:05 -04:00
Mike Cao 0862518ec7 Align Docker image Prisma version with package.json 2026-06-19 20:49:47 -07:00
Mike Cao 03fe19a3ca Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-06-19 20:14:51 -07:00
Mike Cao 8e36f2e822 Bump version to v3.2. 2026-06-19 20:14:31 -07:00
Mike Cao 10dced1049 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-06-16 13:19:04 -07:00
Mike Cao 212ea2d509 Handle rrweb full snapshots as separate replay chunks 2026-06-16 13:18:12 -07:00
Mike Cao 05cce05a11 Batch Kafka messages and drop oversized payloads 2026-06-15 22:02:08 -07:00
Mike Cao 5744f04833 Reduce side nav height and unify replay modal corners 2026-06-15 21:00:22 -07:00
Mike Cao 0130db32ac Refine replay modal sheet styling 2026-06-15 20:14:53 -07:00
Mike Cao 95ece5ba56 Normalize replay events for rrweb-player playback 2026-06-15 20:08:53 -07:00
Mike Cao a5f78e3e3d Hardcode recorder API endpoints in build and runtime 2026-06-15 14:50:13 -07:00
Mike Cao 15038b09d9 Handle fragmented replay events in recording and playback 2026-06-15 13:46:24 -07:00
Mike Cao 4987e0ca01 Bump runtime and tooling dependencies 2026-06-14 23:09:33 -07:00
Mike Cao f69f76b3b1 Handle invalid IPs and localhost lookup failures in location detection 2026-06-11 19:01:04 -07:00
Mike Cao fa4318fb87 Tighten side nav spacing and remove extra bottom margin 2026-06-11 17:55:44 -07:00
Mike Cao 475d9548de Reject oversized replay payloads and chunk recorder flushes 2026-06-10 23:18:50 -07:00
Mike Cao 1118f4b28e Upgrade rrweb and rrweb-player to 2.0.1 2026-06-10 21:41:24 -07:00
Mike Cao c80e35efd7 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-06-10 20:26:09 -07:00
Mike Cao 38b5a8d25b Flush replay events on pagehide with a shorter interval 2026-06-10 20:25:19 -07:00
Mike Cao 8227589ad9 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-06-09 23:07:24 -07:00
Mike Cao db01e3a1bb Lower cloud free website limit to 1 2026-06-09 14:58:10 -07:00
Mike Cao 0c0a3aee65 Propagate unlimited website entitlement through subscription checks 2026-06-09 13:32:52 -07:00
Mike Cao d2eafd68f7 Allow unlimited cloud websites for subscribed accounts 2026-06-08 17:20:20 -07:00
Mike Cao f09df3cf14 Remove unused config property. 2026-06-04 20:15:57 -07:00
Mike Cao de487e572e Merge branch 'analytics' into dev 2026-06-04 19:56:02 -07:00
Mike Cao 7de662a71e Revert to external API url. 2026-06-04 17:32:25 -07:00
Mike Cao a52f32604a Fixed channel metrics queries. 2026-06-04 02:08:01 -07:00
Mike Cao 8a39e98961 Merge pull request #4283 from mturac/fix/3549-runtime-login-env
fix: evaluate login mode env at runtime
2026-06-03 23:51:21 -04:00
Mike Cao dc7c4f0246 Merge pull request #4292 from umami-software/blacksmith-migration-c0ea3ae
.github/workflows: Migrate workflows to Blacksmith runners
2026-06-03 23:47:25 -04:00
Mike Cao d659c5746b Merge pull request #4317 from umami-software/opencode/nimble-planet
Fix board share entity authorization
2026-06-03 23:43:48 -04:00
Mike Cao c0193ad7cd Address board share review feedback 2026-06-03 20:29:08 -07:00
Mike Cao a5f4a39f2b Fix board share entity authorization 2026-06-03 00:02:54 -07:00
Mike Cao e9925f2e4e Sanitize CSV exports against formula injection 2026-06-03 00:00:37 -07:00
Mike Cao 0c08a27a81 Updated lock file. 2026-06-02 23:24:07 -07:00
Mike Cao 306ca4a435 Lint format files. Updated rng function. 2026-06-02 22:35:07 -07:00
Mike Cao 5bf1792b38 Restrict team owner assignment to admins 2026-06-02 22:17:10 -07:00
Mike Cao 44c6b4427f Add schema to realtime route. 2026-06-02 22:07:46 -07:00
Mike Cao 46819a4443 Enforce team role hierarchy on user updates and removals 2026-06-02 21:32:34 -07:00
Mike Cao 0f36990040 Merge branch 'analytics' into dev 2026-06-02 20:22:32 -07:00
Mike Cao fded75f940 Use authenticated Redis key on logout 2026-06-02 17:46:08 -07:00
Mike Cao a9beebf1a9 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-06-02 17:26:59 -07:00
Mike Cao d44592ddb5 Validate SSO redirect URLs before setting auth token 2026-06-02 17:26:48 -07:00
Mike Cao 72611027b7 Merge pull request #4316 from umami-software/codex/umami-GHSA-w7hf-qxh9-2cm3
Limit batch API payloads to 500 items
2026-06-02 19:59:21 -04:00
Mike Cao 7161d83382 Merge pull request #4315 from umami-software/codex/umami-GHSA-jmch-5jr7-62q9
Tighten API access checks by website section and share permissions
2026-06-02 19:55:55 -04:00
Mike Cao 9ba5fb7c1b Limit batch API payloads to 500 items 2026-06-02 16:54:35 -07:00
Mike Cao f366d946e8 Allow unrestricted access when share token has no section flags 2026-06-02 16:28:30 -07:00
Mike Cao ade0819be1 Tighten API access checks by website section and share permissions 2026-06-02 15:29:23 -07:00
Mike Cao 8bc49a29e3 Fix share token confusion vulnerability
Cache tokens from /api/send and share tokens were both signed with the same secret and parsed without distinguishing claim types, allowing a public cache token to be replayed as x-umami-share-token to read any website's analytics. Add explicit token type claims (share/cache) and require the matching type when parsing each.
2026-06-02 14:45:21 -07:00
Mike Cao 9ced9ac85a Fixed API_URL handling. 2026-06-02 11:19:33 -07:00
Mike Cao f985b4f9a5 Use next rewrites for API_URL. 2026-06-02 11:12:48 -07:00
Mike Cao 4772c702b5 Merge pull request #4294 from swayam-mishra/dev
fix: update broken demo link from analytics.umami.is to cloud.umami.is
2026-05-29 14:11:14 -04:00
Mike Cao 18b72d3008 fix(tracker): restore link navigation when tracking fails
Use .finally() instead of .then() so internal link navigation is
always restored after e.preventDefault(), even if the tracking
request rejects (e.g. server down or a throwing beforeSend callback).

Fixes #4304
2026-05-29 10:58:11 -07:00
Mike Cao 10f6ee27da Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-29 10:54:25 -07:00
Mike Cao 8ddc959b3f Merge pull request #4018 from ip00/patch-1
Update hr-HR.json
2026-05-29 13:48:07 -04:00
Mike Cao e28309f8f7 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-28 13:37:42 -07:00
Mike Cao 1d91b81f24 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-27 10:14:44 -07:00
Mike Cao f145b75cb3 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-26 20:48:54 -07:00
Mike Cao 77886a32cc Merge pull request #4300 from yancat160/feat/datagrid-view-toggle-i18n
i18n: translate DataGrid view-toggle tooltips
2026-05-26 23:48:46 -04:00
Mike Cao aba1fea238 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-26 20:45:25 -07:00
Mike Cao c41bf7c93e Enforce cloud website limits by subscription tier 2026-05-26 20:45:07 -07:00
Mike Cao 7d4c68cebe Remove obsolete dist dependencies from lockfile 2026-05-25 02:51:30 -07:00
Mike Cao 454e53dd48 Rename website chart board component 2026-05-25 02:49:13 -07:00
Mike Cao b0cfaca4d7 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-22 17:18:23 -07:00
Mike Cao e0d4b9df3f Updated dependencies for security. 2026-05-22 17:18:01 -07:00
Mike Cao ca9bb1ef34 Merge pull request #4279 from Maxime-J/pnpm-11
Support pnpm 11
2026-05-22 20:17:00 -04:00
Mike Cao 3815a218ca Merge branch 'dev' into pnpm-11 2026-05-22 20:16:48 -04:00
Mike Cao 29c73de265 Updated packages. 2026-05-19 19:19:38 -07:00
Mike Cao b6a4c70a7a Fix IntersectionObserver mock for updated lib.dom.d.ts 2026-05-17 22:34:47 -07:00
Mike Cao 790e2ec644 Updated packaegs. 2026-05-17 22:09:28 -07:00
Mike Cao 89499038f9 Updated packages. 2026-05-17 22:07:41 -07:00
Mike Cao 5bcbdc8ced Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-17 21:04:46 -07:00
Mike Cao d3d26bb9f4 Merge branch 'ElfenB-fix-4123' into dev 2026-05-17 21:04:37 -07:00
Mike Cao 0fff8fbb86 Merge branch 'fix-4123' of https://github.com/ElfenB/umami into ElfenB-fix-4123 2026-05-17 21:04:17 -07:00
Mike Cao cee7884a94 Merge pull request #4129 from gputier/fix/website-select-page-size
fix: increase website selector dropdown limit from 10 to 100
2026-05-16 02:26:47 -04:00
Mike Cao 72fb239566 Merge branch 'dev' into fix/website-select-page-size 2026-05-16 02:26:38 -04:00
Mike Cao 7621717d7f Merge pull request #3944 from AymanAlSuleihi/master
Fix datagrid dropping query params on pagination
2026-05-15 02:18:39 -04:00
Mike Cao bd7b794307 Merge branch 'dev' into master 2026-05-15 02:18:29 -04:00
Mike Cao c99ab3102d Fix DataGrid JSX nesting 2026-05-14 23:00:49 -07:00
Mike Cao 5306413bdb Merge pull request #4262 from yancat160/feat/datagrid-view-toggle
feat: add a manual table / card view toggle to DataGrid
2026-05-15 00:29:09 -04:00
Mike Cao be1161b32e Merge branch 'dev' into feat/datagrid-view-toggle 2026-05-15 00:28:51 -04:00
Mike Cao caa200db29 Merge pull request #4259 from yancat160/feat/persist-hidden-events-across-range
fix: keep hidden events hidden across date-range changes
2026-05-15 00:15:40 -04:00
Mike Cao 1dda7bddcd Merge pull request #4142 from nielskaspers/fix/issue-3981-case-insensitive-login
fix: make username login case-insensitive
2026-05-14 23:49:04 -04:00
Mike Cao a48f5aad5f Merge pull request #4140 from seojcarlos/fix/firefox-events-nan
fix: prevent NaN timestamps from breaking event charts in Firefox
2026-05-14 23:28:51 -04:00
Mike Cao 5e39485313 Merge pull request #4236 from SAYOUNCDR/fix/firefox-autofill-login-fields
fix: normalize autofill styles across browsers
2026-05-14 23:23:53 -04:00
Mike Cao bbe105524d Merge pull request #4257 from yancat160/fix/stable-event-chart-colors
fix: stabilize event chart colors per label
2026-05-14 23:18:07 -04:00
Mike Cao c7515ff230 fix: merge DataGrid layout + add min width to sessions location column 2026-05-14 20:10:10 -07:00
Mike Cao a1c73fc959 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-14 20:05:29 -07:00