Mike Cao
d1cf63d04b
Upgrade pnpm and refresh core React dependencies
2026-09-11 22:00:45 -07:00
Mike Cao
889cc3bf3a
Merge branch 'dev' of https://github.com/umami-software/umami into dev
2026-09-11 21:33:38 -07:00
Mike Cao
a3a7d4914b
Harden API test Docker setup and stabilize coverage fixtures
2026-09-11 19:22:28 -07:00
Francis Cao
e7eb543ca2
bump Dockerfile prisma
2026-09-11 12:13:01 -07:00
Mike Cao
9fb7bacee6
Rename package scripts to colon-based conventions and update build, seed, and API client references
2026-09-07 17:47:36 -07:00
Mike Cao
e2f7cd9488
Fix MCP CLI packaging and update React UI dependencies
2026-09-06 21:33:22 -07:00
Mike Cao
8b9ba7cce9
Merge pull request #4519 from umami-software/testing
...
Add API integration test suite with Postgres and ClickHouse coverage
2026-09-06 20:49:39 -07:00
Mike Cao
e18769e8cf
Add API integration test suite with Postgres and ClickHouse coverage
2026-09-06 16:42:53 -07:00
Mike Cao
65bf19e067
Add OAuth-protected MCP server with generated API client packages
2026-09-03 16:58:47 -07:00
Mike Cao
3447438c49
Upgrade pnpm and verify Prisma engines are installed during build
2026-08-11 15:49:18 -04:00
Mike Cao
823fd0e607
Pin pnpm version and remove deprecated dev indicator config
2026-08-04 22:23:23 -07:00
Francis Cao
21fe2d8e75
Merge branch 'dev' into security/trivy-cve-patches
2026-07-22 13:12:25 -07:00
Roger Hoem-Martinsen and Claude Opus 4.8
413448037c
fix(docker): drop bundled npm from runtime image to clear base-image CVEs
...
The runner stage ships the npm CLI bundled in node:22-alpine, whose
vendored dependencies carry known vulnerabilities that trivy flags on the
published postgresql-latest image:
usr/local/lib/node_modules/npm/node_modules/...
- sigstore 3.1.0 CVE-2026-48815 (HIGH)
- picomatch 4.0.3 CVE-2026-33671 (HIGH)
- @sigstore/core 2.0.0 CVE-2026-48758
- brace-expansion 2.0.2 CVE-2026-33750
- ip-address 10.1.0 CVE-2026-42338
- tar 7.5.11 CVE-2026-53655
npm is only a build-time bootstrap for pnpm; it is not needed at runtime.
Install pnpm with it, then remove npm in the same layer so none of these
vendored packages are present in the final image, and run the container
via pnpm instead of npm. pnpm (and corepack) remain and were never flagged.
The curl/libcurl/c-ares HIGH findings are resolved by rebuilding alone,
since Alpine 3.24 already serves curl 8.21.0-r0 / c-ares 1.34.8-r0 (the
published image is simply stale).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-15 11:30:18 +02:00
Stanislaw
d13085fdd6
Run server as PID 1 in Docker to drop idle launcher processes
...
The container CMD ran `npm run start-docker`, i.e. `npm-run-all check-db
update-tracker start-server`. After the one-shot tasks exit, three Node VMs
stay resident for the container lifetime (npm -> npm-run-all -> npm ->
node server.js), each holding tens of MiB of anonymous memory for nothing.
Replace it with a small start script that runs the one-shot steps and then
`exec node server.js`, so the server becomes PID 1 and no launcher wrappers
remain. On a dev 3.2.0 build under realistic load the container RSS dropped
~28% (memory.stat anon 255 MiB -> 183 MiB); migrations still apply and
/api/heartbeat serves normally.
2026-06-20 13:13:39 +02:00
Mike Cao
0862518ec7
Align Docker image Prisma version with package.json
2026-06-19 20:49:47 -07:00
Francis Cao
824b3ff966
update playwright as seperate service
2026-05-27 15:35:07 -07:00
Francis Cao
bb31fc7388
implement fix for playwright docker build
2026-05-27 13:46:14 -07:00
Francis Cao
e068471f9c
install heatmaps image
2026-05-27 09:26:24 -07:00
Mike Cao
3815a218ca
Merge branch 'dev' into pnpm-11
2026-05-22 20:16:48 -04:00
Francis Cao
7d687479a9
use deps node_modules in runner image
2026-05-20 11:37:33 -07:00
Francis Cao
9df89b746e
Revert "fix cloud docker runtime dependency install"
...
This reverts commit 6e8660c397
2026-05-20 11:23:44 -07:00
Francis Cao
bf06a33c79
Revert "reorder script dependency order"
...
This reverts commit 75a9041fad
2026-05-20 11:17:39 -07:00
Francis Cao
75a9041fad
reorder script dependency order
2026-05-20 10:46:41 -07:00
Francis Cao
6e8660c397
fix cloud docker runtime dependency install
2026-05-20 10:40:13 -07:00
Francis Cao
850fc192c9
remove pnpm field. deprecated
2026-05-20 10:24:53 -07:00
Francis Cao
d65d6670f7
remove allowed-build config
2026-05-20 10:14:13 -07:00
Francis Cao
4883f1e630
add strictDepBuilds config
2026-05-20 10:11:23 -07:00
Francis Cao
7f907f63e9
resolve docker image failed build
2026-05-20 09:50:55 -07:00
Francis Cao
dc50bae5a1
Fix docker image failed build errors
2026-05-20 09:36:10 -07:00
Maxime-J
65cf5665e7
Support pnpm 11
2026-05-15 11:57:44 +02:00
Mike Cao
7b8403c0cc
Updated nextjs. Changed middleware to proxy.
2026-04-15 18:25:14 -07:00
Mike Cao
f41c0221c4
fix docker prisma migrate and remove stray query log
2026-04-15 14:22:04 -07:00
Mike Cao
fa81b02a33
Fix Docker build: add missing @prisma/client and update Prisma version to 7.3.0
2026-03-23 13:35:21 -07:00
Francis Cao
ee823acf8a
revert docker base build
2026-03-10 09:58:59 -07:00
Francis Cao
31caa0d62e
Revert "BASE_PATH build stage only, added label"
...
This reverts commit 2309f407f2
2026-03-05 10:47:52 -08:00
Francis Cao
2309f407f2
BASE_PATH build stage only, added label
2026-03-04 21:30:17 -08:00
Yash
2e10ceee0e
feat: Add BASE_PATH support with -base image variant
2026-01-29 00:15:19 +05:30
Mike Cao
60271779de
Fixed Docker build.
2025-12-03 23:53:22 -08:00
Mike Cao
64767b1896
Updated next. Fixed link RSC fetch.
2025-12-03 15:11:40 -08:00
Maxime-J
46388f8b41
Include prisma engine in Docker image
2025-11-15 15:32:06 +01:00
Mike Cao
79e324aace
Updated Dockerfile to match current Prisma version.
2025-11-03 16:54:58 -08:00
Mike Cao
767b373484
Fixed issue with read replica initialization.
2025-10-06 14:49:36 -07:00
Mike Cao
dbc9525c9c
Fixed docker build.
2025-10-06 02:12:57 -07:00
Mike Cao
3847e32f39
More work on reports. Added Funnel page.
2025-06-05 22:19:35 -07:00
Mike Cao
97381f300a
Fixed wrong Prisma version in Docker.
2025-05-09 17:16:24 -07:00
Mike Cao
340cdce1dc
Dockerfile tweaks.
2025-04-24 19:23:10 -07:00
Mike Cao
5be38adf7a
Switched to pnpm from yarn.
2025-04-23 16:38:52 -07:00
Maxime-J
b88432fcf4
Change Docker handling of custom rewrites
2025-04-21 12:42:36 +02:00
Maxime-J
3b5e1da39e
Replace deprecated Docker config
2025-04-21 08:58:35 +02:00
Maxime-J
b542dc265a
Remove unnecessary Dockerfile steps
2025-04-21 08:55:51 +02:00
Mike Cao