Starstruk Logo MarkStarstruk

v3.0.2

umami-software/umamiv3.0.2Dec 4, 2025by mikecao

AI Summary

Patch release addressing the Next.js CVE-2025-66478 critical vulnerability and fixing numerous bugs. This release includes multiple bug fixes and dependency updates.

Key Highlights

  • Next.js/RSC critical vulnerability fix (CVE-2025-66478)
  • Multiple bug fixes (time range, chart legend, team switching, revenue, UTM params, etc.)
  • Next.js updated to 15.5.7
  • Prisma updated to 6.19.0

New Features

  • Next.js CVE security fix
  • Time range selection arrow navigation fix
  • Links and Pixels prefetching fix
  • Chart legend overflow fix
  • Team account switching fix
  • Revenue table reset fix
  • Team workspace selection fix
  • UTM parameters and click IDs fix
  • Direct visitors missing fix
  • Last seen/First seen fields fix
  • Test failures fix
  • Revenue sums display fix
  • Read-only team join fix
  • URL theme and lang parameters fix for share links
  • Next.js 15.5.7 update
  • Prisma 6.19.0 update

Full Release Notes

This is a patch release to address the Next.js [CVE](https://nextjs.org/blog/CVE-2025-66478) and fixes many bugs.

## Fixes
- Nextjs/RSC critical vulnerability #3829
- Time range selection back and forward arrows not jumping with correct steps #3828
- Links and Pixels are prefetched on dashboard #3814
- In the chart legend, when the URL is too long, the legend extends beyond the container boundaries, disrupting the page layout. #3813
- User is not able to switch back to My Account after switching to the Team #3802
- Reset of website stats is not possible after entries in Revenue table #3798
- Team workspace is not selectable after login #3796
- Error with long UTM parameters and click IDs #3790
- Direct visitors are missing on Channels (3.0.1) #3789
- "Last seen" - "First seen" fields broken since 3.0.1 #3775
- Tests are failing in 3.0.1 #3773
- Revenue sums not showing in 3.0.1 #3769
- Read-only prevents user from joining team #3764
- Regression: URL theme and lang parameters no longer work for public share links #3754

## Updates
- Next.js `15.5.7`
- Prisma `6.19.0`

## Thanks
@Lokimorty @imsyedabdullah @RaenonX @IndraGunawan