lly/umami
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
6,454 Commits 1 Branch 0 Tags
68378255129a5a7c90f0f48e470c881a138754ee
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mike Cao 8227589ad9 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-06-09 23:07:24 -07:00
Mike Cao db01e3a1bb Lower cloud free website limit to 1 2026-06-09 14:58:10 -07:00
Mike Cao 0c0a3aee65 Propagate unlimited website entitlement through subscription checks 2026-06-09 13:32:52 -07:00
Mike Cao d2eafd68f7 Allow unlimited cloud websites for subscribed accounts 2026-06-08 17:20:20 -07:00
Mike Cao f09df3cf14 Remove unused config property. 2026-06-04 20:15:57 -07:00
Mike Cao de487e572e Merge branch 'analytics' into dev 2026-06-04 19:56:02 -07:00
Mike Cao 7de662a71e Revert to external API url. 2026-06-04 17:32:25 -07:00
Mike Cao a52f32604a Fixed channel metrics queries. 2026-06-04 02:08:01 -07:00
Mike CaoandGitHub 8a39e98961 Merge pull request #4283 from mturac/fix/3549-runtime-login-env 
fix: evaluate login mode env at runtime
 2026-06-03 23:51:21 -04:00
Mike CaoandGitHub dc7c4f0246 Merge pull request #4292 from umami-software/blacksmith-migration-c0ea3ae 
.github/workflows: Migrate workflows to Blacksmith runners
 2026-06-03 23:47:25 -04:00
Mike CaoandGitHub d659c5746b Merge pull request #4317 from umami-software/opencode/nimble-planet 
Fix board share entity authorization
 2026-06-03 23:43:48 -04:00
Mike Cao c0193ad7cd Address board share review feedback 2026-06-03 20:29:08 -07:00
Mike Cao a5f4a39f2b Fix board share entity authorization 2026-06-03 00:02:54 -07:00
Mike Cao e9925f2e4e Sanitize CSV exports against formula injection 2026-06-03 00:00:37 -07:00
Mike Cao 0c08a27a81 Updated lock file. 2026-06-02 23:24:07 -07:00
Mike Cao 306ca4a435 Lint format files. Updated rng function. 2026-06-02 22:35:07 -07:00
Mike Cao 5bf1792b38 Restrict team owner assignment to admins 2026-06-02 22:17:10 -07:00
Mike Cao 44c6b4427f Add schema to realtime route. 2026-06-02 22:07:46 -07:00
Mike Cao 46819a4443 Enforce team role hierarchy on user updates and removals 2026-06-02 21:32:34 -07:00
Mike Cao 0f36990040 Merge branch 'analytics' into dev 2026-06-02 20:22:32 -07:00
Mike Cao fded75f940 Use authenticated Redis key on logout 2026-06-02 17:46:08 -07:00
Mike Cao a9beebf1a9 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-06-02 17:26:59 -07:00
Mike Cao d44592ddb5 Validate SSO redirect URLs before setting auth token 2026-06-02 17:26:48 -07:00
Mike CaoandGitHub 72611027b7 Merge pull request #4316 from umami-software/codex/umami-GHSA-w7hf-qxh9-2cm3 
Limit batch API payloads to 500 items
 2026-06-02 19:59:21 -04:00
Mike CaoandGitHub 7161d83382 Merge pull request #4315 from umami-software/codex/umami-GHSA-jmch-5jr7-62q9 
Tighten API access checks by website section and share permissions
 2026-06-02 19:55:55 -04:00
Mike Cao 9ba5fb7c1b Limit batch API payloads to 500 items 2026-06-02 16:54:35 -07:00
Mike Cao f366d946e8 Allow unrestricted access when share token has no section flags 2026-06-02 16:28:30 -07:00
Mike Cao ade0819be1 Tighten API access checks by website section and share permissions 2026-06-02 15:29:23 -07:00
Mike Cao 8bc49a29e3 Fix share token confusion vulnerability 
Cache tokens from /api/send and share tokens were both signed with the same secret and parsed without distinguishing claim types, allowing a public cache token to be replayed as x-umami-share-token to read any website's analytics. Add explicit token type claims (share/cache) and require the matching type when parsing each.
 2026-06-02 14:45:21 -07:00
Mike Cao 9ced9ac85a Fixed API_URL handling. 2026-06-02 11:19:33 -07:00
Mike Cao f985b4f9a5 Use next rewrites for API_URL. 2026-06-02 11:12:48 -07:00
Mike CaoandGitHub 4772c702b5 Merge pull request #4294 from swayam-mishra/dev 
fix: update broken demo link from analytics.umami.is to cloud.umami.is
 2026-05-29 14:11:14 -04:00
Mike Cao 18b72d3008 fix(tracker): restore link navigation when tracking fails 
Use .finally() instead of .then() so internal link navigation is
always restored after e.preventDefault(), even if the tracking
request rejects (e.g. server down or a throwing beforeSend callback).

Fixes #4304
 2026-05-29 10:58:11 -07:00
Mike Cao 10f6ee27da Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-29 10:54:25 -07:00
Mike CaoandGitHub 8ddc959b3f Merge pull request #4018 from ip00/patch-1 
Update hr-HR.json
 2026-05-29 13:48:07 -04:00
Mike Cao e28309f8f7 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-28 13:37:42 -07:00
Mike Cao 1d91b81f24 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-27 10:14:44 -07:00
Mike Cao f145b75cb3 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-26 20:48:54 -07:00
Mike CaoandGitHub 77886a32cc Merge pull request #4300 from yancat160/feat/datagrid-view-toggle-i18n 
i18n: translate DataGrid view-toggle tooltips
 2026-05-26 23:48:46 -04:00
Mike Cao aba1fea238 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-26 20:45:25 -07:00
Mike Cao c41bf7c93e Enforce cloud website limits by subscription tier 2026-05-26 20:45:07 -07:00
Mike Cao 7d4c68cebe Remove obsolete dist dependencies from lockfile 2026-05-25 02:51:30 -07:00
Mike Cao 454e53dd48 Rename website chart board component 2026-05-25 02:49:13 -07:00
Mike Cao b0cfaca4d7 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-22 17:18:23 -07:00
Mike Cao e0d4b9df3f Updated dependencies for security. 2026-05-22 17:18:01 -07:00
Mike CaoandGitHub ca9bb1ef34 Merge pull request #4279 from Maxime-J/pnpm-11 
Support pnpm 11
 2026-05-22 20:17:00 -04:00
Mike CaoandGitHub 3815a218ca Merge branch 'dev' into pnpm-11 2026-05-22 20:16:48 -04:00
Mike Cao 29c73de265 Updated packages. 2026-05-19 19:19:38 -07:00
Mike Cao b6a4c70a7a Fix IntersectionObserver mock for updated lib.dom.d.ts 2026-05-17 22:34:47 -07:00
Mike Cao 790e2ec644 Updated packaegs. 2026-05-17 22:09:28 -07:00
Mike Cao 89499038f9 Updated packages. 2026-05-17 22:07:41 -07:00
Mike Cao 5bcbdc8ced Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-17 21:04:46 -07:00
Mike Cao d3d26bb9f4 Merge branch 'ElfenB-fix-4123' into dev 2026-05-17 21:04:37 -07:00
Mike Cao 0fff8fbb86 Merge branch 'fix-4123' of https://github.com/ElfenB/umami into ElfenB-fix-4123 2026-05-17 21:04:17 -07:00
Mike CaoandGitHub cee7884a94 Merge pull request #4129 from gputier/fix/website-select-page-size 
fix: increase website selector dropdown limit from 10 to 100
 2026-05-16 02:26:47 -04:00
Mike CaoandGitHub 72fb239566 Merge branch 'dev' into fix/website-select-page-size 2026-05-16 02:26:38 -04:00
Mike CaoandGitHub 7621717d7f Merge pull request #3944 from AymanAlSuleihi/master 
Fix datagrid dropping query params on pagination
 2026-05-15 02:18:39 -04:00
Mike CaoandGitHub bd7b794307 Merge branch 'dev' into master 2026-05-15 02:18:29 -04:00
Mike Cao c99ab3102d Fix DataGrid JSX nesting 2026-05-14 23:00:49 -07:00
Mike CaoandGitHub 5306413bdb Merge pull request #4262 from yancat160/feat/datagrid-view-toggle 
feat: add a manual table / card view toggle to DataGrid
 2026-05-15 00:29:09 -04:00
Mike CaoandGitHub be1161b32e Merge branch 'dev' into feat/datagrid-view-toggle 2026-05-15 00:28:51 -04:00
Mike CaoandGitHub caa200db29 Merge pull request #4259 from yancat160/feat/persist-hidden-events-across-range 
fix: keep hidden events hidden across date-range changes
 2026-05-15 00:15:40 -04:00
Mike CaoandGitHub 1dda7bddcd Merge pull request #4142 from nielskaspers/fix/issue-3981-case-insensitive-login 
fix: make username login case-insensitive
 2026-05-14 23:49:04 -04:00
Mike CaoandGitHub a48f5aad5f Merge pull request #4140 from seojcarlos/fix/firefox-events-nan 
fix: prevent NaN timestamps from breaking event charts in Firefox
 2026-05-14 23:28:51 -04:00
Mike CaoandGitHub 5e39485313 Merge pull request #4236 from SAYOUNCDR/fix/firefox-autofill-login-fields 
fix: normalize autofill styles across browsers
 2026-05-14 23:23:53 -04:00
Mike CaoandGitHub bbe105524d Merge pull request #4257 from yancat160/fix/stable-event-chart-colors 
fix: stabilize event chart colors per label
 2026-05-14 23:18:07 -04:00
Mike Cao c7515ff230 fix: merge DataGrid layout + add min width to sessions location column 2026-05-14 20:10:10 -07:00
Mike Cao a1c73fc959 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-14 20:05:29 -07:00
Mike CaoandGitHub c3c38d279c Merge pull request #4261 from yancat160/fix/datatable-horizontal-scroll-on-overflow 
fix: keep DataGrid tables inside their card with horizontal scroll (eg sessions)
 2026-05-14 23:05:17 -04:00
Mike CaoandGitHub 06caccbadb Merge branch 'dev' into fix/datatable-horizontal-scroll-on-overflow 2026-05-14 22:59:03 -04:00
Mike Cao 24d05f9329 Merge branch 'master' into dev 2026-05-14 19:44:00 -07:00
Mike CaoandGitHub cbe4d79b3c Merge pull request #4260 from yancat160/fix/chart-canvas-overflow-on-resize 
fix: keep charts responsive when the viewport resizes
 2026-05-14 22:43:38 -04:00
Mike CaoandGitHub c20aede586 Merge pull request #4248 from anvme/fix/tracker-bugs 
fix(tracker): track clicks on annotated containers + handle invalid pushState URLs
 2026-05-14 22:26:34 -04:00
Mike Cao a22274bbbc Updated packages. 2026-05-14 10:37:08 -07:00
Mike Cao 7c6ee3d5b1 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-14 09:56:42 -07:00
Mike Cao 29eba8b272 Merge branch 'master' into dev 2026-05-14 09:56:38 -07:00
Mike CaoandGitHub 5e773bd9c7 Merge pull request #4272 from umami-software/dependabot/npm_and_yarn/next-16.2.6 
Bump next from 16.2.4 to 16.2.6
 2026-05-14 12:54:19 -04:00
Mike CaoandGitHub f2b6064b52 Merge pull request #4265 from umami-software/dependabot/npm_and_yarn/fast-uri-3.1.2 
Bump fast-uri from 3.1.0 to 3.1.2
 2026-05-14 12:52:26 -04:00
Mike CaoandGitHub bbde258dba Merge pull request #4258 from umami-software/dependabot/npm_and_yarn/hono-4.12.18 
Bump hono from 4.12.9 to 4.12.18
 2026-05-14 12:52:04 -04:00
Mike CaoandGitHub c3c10f4262 Merge pull request #4253 from umami-software/dependabot/npm_and_yarn/next-intl-4.9.2 
Bump next-intl from 4.8.3 to 4.9.2
 2026-05-14 12:51:43 -04:00
Mike CaoandGitHub 995186b3c5 Merge pull request #4252 from umami-software/dependabot/npm_and_yarn/icu-minify-4.11.0 
Bump icu-minify from 4.8.4 to 4.11.0
 2026-05-14 12:50:20 -04:00
Mike CaoandGitHub 56e3ea6f14 Merge pull request #4238 from umami-software/dependabot/npm_and_yarn/uuid-14.0.0 
Bump uuid from 13.0.0 to 14.0.0
 2026-05-14 12:48:58 -04:00
Mike CaoandGitHub 55dcf45d24 Merge pull request #4206 from umami-software/dependabot/npm_and_yarn/postcss-8.5.10 
Bump postcss from 8.5.8 to 8.5.10
 2026-05-14 12:48:38 -04:00
Mike Cao a9a4ad0f68 Reset event property state when event changes 2026-05-14 09:45:34 -07:00
Mike Cao c6733897b4 Fetch recorder settings from website config endpoint 2026-05-14 03:26:24 -07:00
Mike Cao c724f42daf Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-14 03:02:48 -07:00
Mike CaoandGitHub 1b898ed0d8 Merge pull request #4182 from avasis-ai/fix/links-table-truncate-urls 
fix: truncate long URLs in Links table
 2026-05-14 06:02:24 -04:00
Mike CaoandGitHub a47b32718d Merge branch 'dev' into fix/links-table-truncate-urls 2026-05-14 06:02:14 -04:00
Mike Cao 0157c23922 Merge branch 'master' into dev 2026-05-14 02:56:13 -07:00
Mike CaoandGitHub 9c1db27218 Merge pull request #4099 from sputnik-mac/fix/redirect-logged-in-user-from-login-4094 
fix: redirect logged-in users from login page to dashboard
 2026-05-14 05:55:33 -04:00
Mike CaoandGitHub 985aa285b2 Merge pull request #4039 from God-2077/umami-v3-dev-2 
fix: Optimize IP detection logic and add error handling
 2026-05-14 05:53:05 -04:00
Mike Cao 0be5b5aa26 Route /auth and /config to local API; everything else uses API_URL 2026-05-13 00:07:30 -07:00
Mike Cao 1063980b43 Reverted headers. 2026-05-12 23:35:49 -07:00
Mike Cao bfb72a7890 Set CORS allow-origin to CLOUD_URL when API_URL is absolute 2026-05-12 23:08:56 -07:00
Mike Cao 3a78c4900d Updated lock file. 2026-05-12 20:49:44 -07:00
Mike CaoandGitHub b062484798 Merge pull request #4192 from tairosonloa/patch-1 
fix: fixes #4186
 2026-05-04 19:42:54 -04:00
Mike CaoandGitHub a9508e7aae Merge pull request #4200 from yhyasyrian/syrian-flag 
The Syrian flag has changed
 2026-05-04 19:40:36 -04:00
Mike CaoandGitHub 76bef132e6 Merge pull request #4231 from umami-software/dependabot/npm_and_yarn/uuid-14.0.0 
Bump uuid from 13.0.0 to 14.0.0
 2026-05-04 19:40:02 -04:00
Mike CaoandGitHub 75e6b2461b Merge branch 'dev' into dependabot/npm_and_yarn/uuid-14.0.0 2026-05-04 19:39:55 -04:00
Mike CaoandGitHub 2ffa655097 Merge pull request #4224 from JLUpengjiaji/V2.0 
Flatten JSON data
 2026-05-04 19:38:47 -04:00