{"full_name":"umami-software/umami","owner":"umami-software","name":"umami","url":"https://github.com/umami-software/umami","description":"Umami is a privacy-first web and product analytics platform. Traffic, campaigns, behavior, conversions, and revenue in one place. No cookies, no surveillance, self-hosted or in the cloud.","homepage":"https://umami.is","topics":[],"language":"TypeScript","license":"MIT","avatar":"https://avatars.githubusercontent.com/u/105618662?v=4","created_at":"2020-07-17T07:59:00Z","pushed_at":"2026-11-10T07:56:23Z","metrics":{"stars":40034,"forks":8516,"watchers":135,"issues":2331,"prs":1579,"releases":112,"issues_open":null,"issues_closed":null,"prs_open":null,"prs_closed":null,"prs_merged":null,"discussions":775},"growth":{"day":{"stars":28,"forks":9,"base_day":"2026-11-09"}},"history":{"dates":["2026-11-09","2026-11-10"],"stars":[40006,40034],"forks":[8507,8516],"watchers":[135,135],"issues_open":[null,null],"prs_open":[null,null]},"boards":{},"same_owner":[],"issues":[{"number":3163,"title":"External auth/OIDC","comments":29,"created_at":"2025-01-07T20:30:49Z"},{"number":3518,"title":"Accurate Bounce & Time-on-Site Metrics for Long Single-Page Visits (Heartbeat & Engagement Events Support)","comments":7,"created_at":"2025-07-19T11:54:54Z"},{"number":4583,"title":"3.4.0: `umami.identify()` splits a visitor into two sessions","comments":6,"created_at":"2026-09-29T19:45:09Z"},{"number":3267,"title":"Umami breaks client side navigation when paired with anchors. Forces full page reload.","comments":6,"created_at":"2025-02-23T23:04:58Z"},{"number":4448,"title":"Duplicate visitor/session entries when country is Singapore","comments":5,"created_at":"2026-08-13T14:57:44Z"},{"number":4368,"title":"The heatmap is very inaccurate","comments":5,"created_at":"2026-06-30T11:47:39Z"},{"number":4233,"title":"Feature request: Saving filters for a board","comments":5,"created_at":"2026-05-04T11:59:12Z"},{"number":3120,"title":"Allow API to set browser, os, device, country, etc.","comments":4,"created_at":"2024-12-18T18:56:11Z"}],"discussions":[{"number":4728,"title":"Website is down.","comments":0,"category":"General","created_at":"2026-11-02T03:25:56Z"},{"number":4693,"title":"Proposal: a Zapier integration for Umami","comments":0,"category":"Ideas","created_at":"2026-10-26T10:02:38Z"},{"number":4689,"title":"Session replays: filter by rage clicks and dead clicks","comments":0,"category":"Ideas","created_at":"2026-10-25T18:44:33Z"},{"number":4642,"title":"Hash routing + Heatmaps + Performance metrics","comments":1,"category":"Q&A","created_at":"2026-10-19T12:15:56Z"},{"number":4641,"title":"Best way to tell subdomains apart in one website?","comments":1,"category":"Q&A","created_at":"2026-10-19T11:35:27Z"},{"number":4628,"title":"Verceltics: a native iPhone, iPad and Android app that works with self-hosted Umami","comments":0,"category":"Show and tell","created_at":"2026-10-15T00:18:45Z"},{"number":4590,"title":"SiteGlance — native iOS and Android client for Umami, with home screen widgets","comments":0,"category":"Show and tell","created_at":"2026-10-01T07:27:11Z"},{"number":4582,"title":"Will event filters become available everywhere?","comments":0,"category":"Q&A","created_at":"2026-09-29T10:30:17Z"}],"latest_release":{"name":"v3.4.1","tag":"v3.4.1","published_at":"2026-10-23T08:26:44Z","body":"Umami `v3.4.1` is mainly a **security hotfix**. It updates vulnerable dependencies and the Docker base image. All self-hosted users should upgrade.\n\n## Security\n\n- Upgraded Next.js to `16.4.2` (from `16.3.4` in v3.4.0). This fixes a critical RCE in `next/og`, SSRF in image optimization, cache poisoning, and an information disclosure issue. #4645\n- Upgraded React and React DOM to `19.3.1`.\n- Pinned the Docker base image to Node `22.23.4-alpine`, which includes the October 2026 Node.js security fixes. Rebuild or re-pull your images to pick this up. #4657\n- Upgraded `@modelcontextprotocol/server` to `2.3.1` and `@modelcontextprotocol/client` to `^2.3.1`. This fixes an OAuth credential leak (GHSA-6qxp-vccf-f47h) along with other advisories. #4645 #4661\n- Raised the security floors for vulnerable transitive dependencies: `vite`, `undici`, `sharp`, `shell-quote`, `brace-expansion`, `fast-uri`, `postcss-selector-parser`, and `source-map-js`. #4645 #4661\n\n## Other\n\n- CI now runs the required checks for pull requests from forks, and the Gitleaks scan still works when the previous commit is not available. #4663\n\n## Migrations\n\nNone.\n\n## Thanks\n\n@LJC-god\n\n**Full Changelog**: https://github.com/umami-software/umami/compare/v3.4.0...v3.4.1\n"},"readme":true,"readme_zh":false,"news":[],"stale":false,"snapshot_at":"2026-11-10T09:35:25Z","history_start":"2026-09-06"}