Mike Cao
aafe068bc1
Merge branch 'dev' into feat-2FA
2026-07-23 11:14:59 -07:00
Francis Cao
03ef78724b
add design translations. Fix empty-dashboard message. Closes #4398
2026-07-22 12:56:11 -07:00
Francis Cao
7db8c1e979
Merge pull request #4404 from shubhamOrgpathak1/fix/website-backend-validation
...
Validate website name and domain input on server side
2026-07-22 12:27:47 -07:00
Francis Cao
58ee28a55e
remove session recalculate and related queries
2026-07-21 12:33:41 -07:00
Shubham Pathak
715f306a48
Validate website name and domain input on server side
2026-07-21 21:25:14 +05:45
Mike Cao
eb9a77ea64
Return 404 when session is not found and add test coverage for GET session route
2026-07-20 17:15:52 -07:00
Francis Cao
9bf95ef112
updaet session stitching model for post-identify reads. fix fullPath search
2026-07-20 12:21:07 -07:00
Mike Cao
5911ddaa93
Convert tracker build to TypeScript and add type checks
2026-07-19 22:04:49 -07:00
Mike Cao
cb801230cc
Fix identified session ID generation
2026-07-19 10:43:21 -07:00
Mike Cao
4691a344c5
Merge branch 'dev' of https://github.com/umami-software/umami into dev
2026-07-18 01:35:25 -07:00
Mike Cao
bc97f9f439
Enforce a per-plan team limit when creating teams in cloud mode
2026-07-18 01:35:13 -07:00
Francis Cao
8004afe63d
Punycode support. Closes #2170
2026-07-17 10:22:37 -07:00
Francis Cao
b47847958a
fix code-textarea css
2026-07-16 11:58:49 -07:00
Francis Cao
f7b94c259b
add tracking code workflow for Add website. Add linked ID to session modal.
2026-07-16 11:32:32 -07:00
Francis Cao
7afc4ccf6b
session activity identify stitching
2026-07-15 11:20:27 -07:00
Francis Cao
8a75208d5b
fix permissions loop for charts route
2026-07-14 15:23:32 -07:00
Francis Cao
712b32c7bf
sparkline performance
2026-07-14 14:58:11 -07:00
Mike Cao
e030faf236
Merge pull request #4377 from leonacostaok/fix/kafka-verify-tls
...
verify Kafka broker TLS certificate by default
2026-07-13 17:49:45 -07:00
Francis Cao
31c479cf5e
Fix board funnel/goal preview
2026-07-08 11:11:55 -07:00
Francis Cao
28230ee471
sync bucket labeling
2026-07-08 10:32:16 -07:00
Francis Cao
86b35475c0
Add sparklines to Website, Pixel, Link tables
2026-07-08 10:03:08 -07:00
Francis Cao
e47d1570b9
fix iframe viewport clipping
2026-07-06 11:24:19 -07:00
Francis Cao
7bdc2f215e
harden report references in boards
2026-07-06 10:58:43 -07:00
Francis Cao
a4a0167515
enforce minimum 8 character slug on create/update. Closes #4376
2026-07-04 08:44:23 -07:00
Leon Acosta
2771abc6a7
verify Kafka broker TLS certificate by default
...
When SASL credentials are present, getClient() connected with
`rejectUnauthorized: false`, so the SASL password was sent over a TLS
connection whose broker certificate was never verified — a MITM could
present any certificate and capture the credentials.
Verify by default; set KAFKA_SSL_ALLOW_UNAUTHORIZED=true to opt out for
self-signed brokers.
2026-07-04 18:45:45 +07:00
Francis Cao
735d85c7af
fix channel attribution for organic Facebook traffic. Closes #4297
2026-07-02 11:51:46 -07:00
Francis Cao
0d7503a320
remove event property mock data
2026-07-02 11:12:26 -07:00
Francis Cao
8b177f1a21
Fix ComboBox/MultiSelect issues. Closes #4355
2026-07-02 11:11:53 -07:00
Francis Cao
22176eb76d
Fix: Session modal issues on mobile: scroll jumps to top on close, avatar overflow causes horizontal scroll. Closes #4358
2026-07-02 10:41:57 -07:00
Francis Cao
952143ba5e
match order by with clickhouse queries
2026-07-02 10:32:43 -07:00
Francis Cao
2575f11d26
Merge pull request #4365 from PeterUstinox/fix/eventdata-events-groupby-postgres
...
fix(events): add GROUP BY to getEventDataEvents no-event relational branch (PostgreSQL 42803)
2026-07-02 10:30:27 -07:00
Francis Cao
0b0a784c76
fix: improve 100vh heatmap iframe alignment
2026-07-02 09:52:51 -07:00
Francis Cao
4c4071b270
keep createSession raw writes on primary when replicas are enabled
2026-07-01 09:53:08 -07:00
Francis Cao
7a176e10bc
share component column wrapping. link/pixel card mode. website table formatting. Closes #4372
2026-07-01 09:15:50 -07:00
Francis Cao
2efe6297be
implement board clone feature
2026-06-30 08:50:33 -07:00
Francis Cao
ab5b1bf354
Board component, security, test updates
2026-06-29 18:17:57 -07:00
PeterUstinox
7b2a235741
fix(events): add GROUP BY to getEventDataEvents no-event relational branch
...
The no-event branch selects event_name, data_key and data_type alongside
count(*) without a GROUP BY, which throws on PostgreSQL (42803) and on MySQL
with ONLY_FULL_GROUP_BY. The event-filtered branch and both ClickHouse
branches already group correctly. Fixes #4359 .
2026-06-28 23:38:00 +02:00
Francis Cao
42765249ee
remove shouldSkipSnapshot rule
2026-06-23 15:10:27 -07:00
Francis Cao
8a0bdc2727
heatmap migration/code clean-up
2026-06-23 15:01:00 -07:00
Francis Cao
3888ec6f4f
Allow legacy stateless tokens that were minted without a password fingerprint.
2026-06-23 13:24:55 -07:00
Francis Cao
9defe7e3e0
Only enforce password-change invalidation for sessions that include a password fingerprint.
2026-06-23 00:27:44 -07:00
Francis Cao
d4b6f3d25f
Merge branch 'dev' of https://github.com/umami-software/umami into dev
2026-06-22 23:31:16 -07:00
Francis Cao
727490269b
Invalidate auth sessions after password changes
2026-06-22 23:31:12 -07:00
Mike Cao
ec56e58567
Merge branch 'dev' of https://github.com/umami-software/umami into dev
2026-06-22 23:26:10 -07:00
Mike Cao
ced1107261
Use sunken styling for heatmap page buttons
2026-06-22 23:26:01 -07:00
Francis Cao
2e74b3ebae
sanitize logging of sensitive info.
2026-06-22 23:03:01 -07:00
Mike Cao
527ef9d769
Merge branch 'dev' of https://github.com/umami-software/umami into dev
2026-06-22 22:34:21 -07:00
Mike Cao
ce3d928f77
Keep heatmap depth labels readable while scaling overlay
2026-06-22 22:32:05 -07:00
Francis Cao
86485e8b52
fix paths to orphaned team-owner
2026-06-22 22:13:55 -07:00
Francis Cao
129681ebd7
fix: harden analytics writes and hide internal server errors from client
2026-06-22 22:07:07 -07:00
Mike Cao