lly/umami
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
6,424 Commits 1 Branch 0 Tags
fded75f940640435a7158b18b6b8dece78e77cb0
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mike Cao fded75f940 Use authenticated Redis key on logout 2026-06-02 17:46:08 -07:00
Mike Cao a9beebf1a9 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-06-02 17:26:59 -07:00
Mike Cao d44592ddb5 Validate SSO redirect URLs before setting auth token 2026-06-02 17:26:48 -07:00
Mike CaoandGitHub 72611027b7 Merge pull request #4316 from umami-software/codex/umami-GHSA-w7hf-qxh9-2cm3 
Limit batch API payloads to 500 items
 2026-06-02 19:59:21 -04:00
Mike CaoandGitHub 7161d83382 Merge pull request #4315 from umami-software/codex/umami-GHSA-jmch-5jr7-62q9 
Tighten API access checks by website section and share permissions
 2026-06-02 19:55:55 -04:00
Mike Cao 9ba5fb7c1b Limit batch API payloads to 500 items 2026-06-02 16:54:35 -07:00
Mike Cao f366d946e8 Allow unrestricted access when share token has no section flags 2026-06-02 16:28:30 -07:00
Mike Cao ade0819be1 Tighten API access checks by website section and share permissions 2026-06-02 15:29:23 -07:00
Mike Cao 8bc49a29e3 Fix share token confusion vulnerability 
Cache tokens from /api/send and share tokens were both signed with the same secret and parsed without distinguishing claim types, allowing a public cache token to be replayed as x-umami-share-token to read any website's analytics. Add explicit token type claims (share/cache) and require the matching type when parsing each.
 2026-06-02 14:45:21 -07:00
Mike CaoandGitHub 4772c702b5 Merge pull request #4294 from swayam-mishra/dev 
fix: update broken demo link from analytics.umami.is to cloud.umami.is
 2026-05-29 14:11:14 -04:00
Mike Cao 18b72d3008 fix(tracker): restore link navigation when tracking fails 
Use .finally() instead of .then() so internal link navigation is
always restored after e.preventDefault(), even if the tracking
request rejects (e.g. server down or a throwing beforeSend callback).

Fixes #4304
 2026-05-29 10:58:11 -07:00
Mike Cao 10f6ee27da Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-29 10:54:25 -07:00
Mike CaoandGitHub 8ddc959b3f Merge pull request #4018 from ip00/patch-1 
Update hr-HR.json
 2026-05-29 13:48:07 -04:00
Mike Cao e28309f8f7 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-28 13:37:42 -07:00
Mike Cao 1d91b81f24 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-27 10:14:44 -07:00
Mike Cao f145b75cb3 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-26 20:48:54 -07:00
Mike CaoandGitHub 77886a32cc Merge pull request #4300 from yancat160/feat/datagrid-view-toggle-i18n 
i18n: translate DataGrid view-toggle tooltips
 2026-05-26 23:48:46 -04:00
Mike Cao aba1fea238 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-26 20:45:25 -07:00
Mike Cao c41bf7c93e Enforce cloud website limits by subscription tier 2026-05-26 20:45:07 -07:00
Mike Cao 7d4c68cebe Remove obsolete dist dependencies from lockfile 2026-05-25 02:51:30 -07:00
Mike Cao 454e53dd48 Rename website chart board component 2026-05-25 02:49:13 -07:00
Mike Cao b0cfaca4d7 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-22 17:18:23 -07:00
Mike Cao e0d4b9df3f Updated dependencies for security. 2026-05-22 17:18:01 -07:00
Mike CaoandGitHub ca9bb1ef34 Merge pull request #4279 from Maxime-J/pnpm-11 
Support pnpm 11
 2026-05-22 20:17:00 -04:00
Mike CaoandGitHub 3815a218ca Merge branch 'dev' into pnpm-11 2026-05-22 20:16:48 -04:00
Mike Cao 29c73de265 Updated packages. 2026-05-19 19:19:38 -07:00
Mike Cao b6a4c70a7a Fix IntersectionObserver mock for updated lib.dom.d.ts 2026-05-17 22:34:47 -07:00
Mike Cao 790e2ec644 Updated packaegs. 2026-05-17 22:09:28 -07:00
Mike Cao 89499038f9 Updated packages. 2026-05-17 22:07:41 -07:00
Mike Cao 5bcbdc8ced Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-17 21:04:46 -07:00
Mike Cao d3d26bb9f4 Merge branch 'ElfenB-fix-4123' into dev 2026-05-17 21:04:37 -07:00
Mike Cao 0fff8fbb86 Merge branch 'fix-4123' of https://github.com/ElfenB/umami into ElfenB-fix-4123 2026-05-17 21:04:17 -07:00
Mike CaoandGitHub cee7884a94 Merge pull request #4129 from gputier/fix/website-select-page-size 
fix: increase website selector dropdown limit from 10 to 100
 2026-05-16 02:26:47 -04:00
Mike CaoandGitHub 72fb239566 Merge branch 'dev' into fix/website-select-page-size 2026-05-16 02:26:38 -04:00
Mike CaoandGitHub 7621717d7f Merge pull request #3944 from AymanAlSuleihi/master 
Fix datagrid dropping query params on pagination
 2026-05-15 02:18:39 -04:00
Mike CaoandGitHub bd7b794307 Merge branch 'dev' into master 2026-05-15 02:18:29 -04:00
Mike Cao c99ab3102d Fix DataGrid JSX nesting 2026-05-14 23:00:49 -07:00
Mike CaoandGitHub 5306413bdb Merge pull request #4262 from yancat160/feat/datagrid-view-toggle 
feat: add a manual table / card view toggle to DataGrid
 2026-05-15 00:29:09 -04:00
Mike CaoandGitHub be1161b32e Merge branch 'dev' into feat/datagrid-view-toggle 2026-05-15 00:28:51 -04:00
Mike CaoandGitHub caa200db29 Merge pull request #4259 from yancat160/feat/persist-hidden-events-across-range 
fix: keep hidden events hidden across date-range changes
 2026-05-15 00:15:40 -04:00
Mike CaoandGitHub 1dda7bddcd Merge pull request #4142 from nielskaspers/fix/issue-3981-case-insensitive-login 
fix: make username login case-insensitive
 2026-05-14 23:49:04 -04:00
Mike CaoandGitHub a48f5aad5f Merge pull request #4140 from seojcarlos/fix/firefox-events-nan 
fix: prevent NaN timestamps from breaking event charts in Firefox
 2026-05-14 23:28:51 -04:00
Mike CaoandGitHub 5e39485313 Merge pull request #4236 from SAYOUNCDR/fix/firefox-autofill-login-fields 
fix: normalize autofill styles across browsers
 2026-05-14 23:23:53 -04:00
Mike CaoandGitHub bbe105524d Merge pull request #4257 from yancat160/fix/stable-event-chart-colors 
fix: stabilize event chart colors per label
 2026-05-14 23:18:07 -04:00
Mike Cao c7515ff230 fix: merge DataGrid layout + add min width to sessions location column 2026-05-14 20:10:10 -07:00
Mike Cao a1c73fc959 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-14 20:05:29 -07:00
Mike CaoandGitHub c3c38d279c Merge pull request #4261 from yancat160/fix/datatable-horizontal-scroll-on-overflow 
fix: keep DataGrid tables inside their card with horizontal scroll (eg sessions)
 2026-05-14 23:05:17 -04:00
Mike CaoandGitHub 06caccbadb Merge branch 'dev' into fix/datatable-horizontal-scroll-on-overflow 2026-05-14 22:59:03 -04:00
Mike Cao 24d05f9329 Merge branch 'master' into dev 2026-05-14 19:44:00 -07:00
Mike CaoandGitHub cbe4d79b3c Merge pull request #4260 from yancat160/fix/chart-canvas-overflow-on-resize 
fix: keep charts responsive when the viewport resizes
 2026-05-14 22:43:38 -04:00
Mike CaoandGitHub c20aede586 Merge pull request #4248 from anvme/fix/tracker-bugs 
fix(tracker): track clicks on annotated containers + handle invalid pushState URLs
 2026-05-14 22:26:34 -04:00
Mike Cao a22274bbbc Updated packages. 2026-05-14 10:37:08 -07:00
Mike Cao 7c6ee3d5b1 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-14 09:56:42 -07:00
Mike Cao 29eba8b272 Merge branch 'master' into dev 2026-05-14 09:56:38 -07:00
Mike CaoandGitHub 5e773bd9c7 Merge pull request #4272 from umami-software/dependabot/npm_and_yarn/next-16.2.6 
Bump next from 16.2.4 to 16.2.6
 2026-05-14 12:54:19 -04:00
Mike CaoandGitHub f2b6064b52 Merge pull request #4265 from umami-software/dependabot/npm_and_yarn/fast-uri-3.1.2 
Bump fast-uri from 3.1.0 to 3.1.2
 2026-05-14 12:52:26 -04:00
Mike CaoandGitHub bbde258dba Merge pull request #4258 from umami-software/dependabot/npm_and_yarn/hono-4.12.18 
Bump hono from 4.12.9 to 4.12.18
 2026-05-14 12:52:04 -04:00
Mike CaoandGitHub c3c10f4262 Merge pull request #4253 from umami-software/dependabot/npm_and_yarn/next-intl-4.9.2 
Bump next-intl from 4.8.3 to 4.9.2
 2026-05-14 12:51:43 -04:00
Mike CaoandGitHub 995186b3c5 Merge pull request #4252 from umami-software/dependabot/npm_and_yarn/icu-minify-4.11.0 
Bump icu-minify from 4.8.4 to 4.11.0
 2026-05-14 12:50:20 -04:00
Mike CaoandGitHub 56e3ea6f14 Merge pull request #4238 from umami-software/dependabot/npm_and_yarn/uuid-14.0.0 
Bump uuid from 13.0.0 to 14.0.0
 2026-05-14 12:48:58 -04:00
Mike CaoandGitHub 55dcf45d24 Merge pull request #4206 from umami-software/dependabot/npm_and_yarn/postcss-8.5.10 
Bump postcss from 8.5.8 to 8.5.10
 2026-05-14 12:48:38 -04:00
Mike Cao a9a4ad0f68 Reset event property state when event changes 2026-05-14 09:45:34 -07:00
Mike Cao c6733897b4 Fetch recorder settings from website config endpoint 2026-05-14 03:26:24 -07:00
Mike Cao c724f42daf Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-14 03:02:48 -07:00
Mike CaoandGitHub 1b898ed0d8 Merge pull request #4182 from avasis-ai/fix/links-table-truncate-urls 
fix: truncate long URLs in Links table
 2026-05-14 06:02:24 -04:00
Mike CaoandGitHub a47b32718d Merge branch 'dev' into fix/links-table-truncate-urls 2026-05-14 06:02:14 -04:00
Mike Cao 0157c23922 Merge branch 'master' into dev 2026-05-14 02:56:13 -07:00
Mike CaoandGitHub 9c1db27218 Merge pull request #4099 from sputnik-mac/fix/redirect-logged-in-user-from-login-4094 
fix: redirect logged-in users from login page to dashboard
 2026-05-14 05:55:33 -04:00
Mike CaoandGitHub 985aa285b2 Merge pull request #4039 from God-2077/umami-v3-dev-2 
fix: Optimize IP detection logic and add error handling
 2026-05-14 05:53:05 -04:00
Mike Cao 0be5b5aa26 Route /auth and /config to local API; everything else uses API_URL 2026-05-13 00:07:30 -07:00
Mike Cao 1063980b43 Reverted headers. 2026-05-12 23:35:49 -07:00
Mike Cao bfb72a7890 Set CORS allow-origin to CLOUD_URL when API_URL is absolute 2026-05-12 23:08:56 -07:00
Mike Cao 3a78c4900d Updated lock file. 2026-05-12 20:49:44 -07:00
Mike CaoandGitHub b062484798 Merge pull request #4192 from tairosonloa/patch-1 
fix: fixes #4186
 2026-05-04 19:42:54 -04:00
Mike CaoandGitHub a9508e7aae Merge pull request #4200 from yhyasyrian/syrian-flag 
The Syrian flag has changed
 2026-05-04 19:40:36 -04:00
Mike CaoandGitHub 76bef132e6 Merge pull request #4231 from umami-software/dependabot/npm_and_yarn/uuid-14.0.0 
Bump uuid from 13.0.0 to 14.0.0
 2026-05-04 19:40:02 -04:00
Mike CaoandGitHub 75e6b2461b Merge branch 'dev' into dependabot/npm_and_yarn/uuid-14.0.0 2026-05-04 19:39:55 -04:00
Mike CaoandGitHub 2ffa655097 Merge pull request #4224 from JLUpengjiaji/V2.0 
Flatten JSON data
 2026-05-04 19:38:47 -04:00
Mike CaoandGitHub 0e586dc2f9 Merge pull request #4223 from JLUpengjiaji/V1.0 
Remove redundant search logic
 2026-05-04 19:37:17 -04:00
Mike CaoandGitHub 3136660588 Merge pull request #4197 from umami-software/dependabot/npm_and_yarn/uuid-14.0.0 
Bump uuid from 13.0.0 to 14.0.0
 2026-05-02 03:12:18 -04:00
Mike CaoandGitHub e5e8a7ccc2 Merge branch 'dev' into dependabot/npm_and_yarn/uuid-14.0.0 2026-05-02 03:12:04 -04:00
Mike CaoandGitHub 8723cf3307 Merge pull request #4228 from manuelfesantos/feat/auto-pageview-attribute 
feat: add data-auto-pageview attribute to tracker script
 2026-05-02 03:09:54 -04:00
Mike CaoandGitHub b3c4b70991 Merge pull request #4126 from Maxime-J/fix-retention 
Fix incomplete retention report
 2026-04-18 21:45:33 -04:00
Mike CaoandGitHub a4fdd9ad0a Merge pull request #4153 from IEBqp/turkiye-name-update 
fix(i18n): update country name from Turkey to Türkiye
 2026-04-18 21:42:49 -04:00
Mike CaoandGitHub de46ef9aab Merge pull request #4169 from nurlennart/fix/active-users-link 
fix: restore realtime link on active users indicator
 2026-04-18 21:28:50 -04:00
Mike CaoandGitHub c78ff36db0 Merge pull request #4162 from umami-software/dev 
v3.1.0
 2026-04-16 18:57:37 -04:00
Mike CaoandGitHub f15547e92b Merge pull request #4147 from lawrence3699/fix/postgres-implicit-alias-syntax-error 
fix: add explicit AS for column alias in session and event queries (Postgres syntax error)
 2026-04-16 15:44:38 -04:00
Mike CaoandGitHub b16b30ca9f Merge branch 'dev' into fix/postgres-implicit-alias-syntax-error 2026-04-16 15:44:26 -04:00
Mike CaoandGitHub 6ae3ed5b19 Merge pull request #4158 from Mravuri96/patch-1 
Update build-docker script to include recorder
 2026-04-16 15:41:41 -04:00
Mike Cao 8b04be48de Revert next config. 2026-04-15 22:02:48 -07:00
Mike Cao 5f314b9a95 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-04-15 21:04:24 -07:00
Mike Cao 002a50ce8b Changed output for Vercel. 2026-04-15 21:04:05 -07:00
Mike Cao 80fee9f321 fix blank screen by using router.replace instead of redirect in useEffect 2026-04-15 20:04:30 -07:00
Mike Cao 7b8403c0cc Updated nextjs. Changed middleware to proxy. 2026-04-15 18:25:14 -07:00
Mike Cao f41c0221c4 fix docker prisma migrate and remove stray query log 2026-04-15 14:22:04 -07:00
Mike Cao 1b6fc1bd51 Use local Link wrapper with cloud-mode prefetch default 2026-04-15 11:21:49 -07:00
Mike CaoandGitHub 4ca7d53f81 Merge pull request #3642 from hilja/tracker-fetch-priority-low 
Set tracker’s fetch call priority to low
 2026-04-04 17:13:20 -04:00
Mike CaoandGitHub f8f86d72aa Merge branch 'dev' into tracker-fetch-priority-low 2026-04-04 17:12:29 -04:00
Mike CaoandGitHub b6341596bf Merge pull request #4048 from AlejandroGispert/fix/3981-login-email-case 
fix: make signin email case-insensitive
 2026-04-01 23:25:56 -04:00
Mike CaoandGitHub 3f673557a9 Merge pull request #4112 from sputnik-mac/fix/revenue-chart-timezone-4107 
fix: use settings timezone in revenue chart date range
 2026-03-29 20:25:10 -07:00