Simply Analytics for Umami 1.1.3

Simply Analytics for Umami 1.1.3, previously Simply Umami.

All reported dependency vulnerabilities are removed from the development toolchain.

• Rename the plugin and text domain, update directory artwork, and preserve existing settings and developer hooks. Deactivate Simply Umami before enabling this renamed plugin.
• Replace wp-env with an isolated Docker Compose environment using official WordPress, WP-CLI, and MariaDB images.
• Preserve the WP-CLI commands and existing tracking, recorder, migration, access-control, and password tests.
• Require npm and Composer audits, PHP coding standards, and browser tests before release packaging.
• Include the implementation and release plan in IMPLEMENTATION_PLAN.md.

Validation: npm and Composer audits report zero vulnerabilities. Eleven browser tests pass on WordPress 7.1.3 with PHP 8.3. The production plugin passes WordPress Plugin Check with zero errors and two intentional warnings for service-managed Umami script versions.

WordPress.org has not approved the submission. Its review requires a distinctive public name and ownership/affiliation clarification. The author chose the name Simply Analytics for Umami and proposed slug simply-analytics-for-umami. The directory release gate remains disabled until the reviewer approves the submission.

Simply Umami 1.1.2

Fixes analytics widget access and self-hosted API authentication.

• Restrict dashboard analytics to users who can manage plugin settings.
• Preserve spaces and special characters when saving and sending API passwords.
• Update PHP and JavaScript development tooling, remove an unused test dependency, and move CI to Node.js 24.
• Include the settings layout and artwork improvements from 1.1.1.

Validation: PHP coding standards, Composer validation, and eleven Playwright integration tests, including password preservation and subscriber access regressions.

All PHP dependency advisories and all high/critical npm advisories are cleared. Seven moderate advisories remain in development-only tooling. The plugin has no production package dependencies.

Install the attached simply-umami.zip in WordPress. WordPress.org deployment remains gated pending approval.

Simply Umami 1.1.0

Changes

• Current Umami tracker controls, including events, event data, identity, revenue, and performance.
• Opt-in recorder.js support for heatmaps and session replay. Recording is off by default.
• Umami v3 dashboard/API compatibility and corrected active-visitor reporting.
• Preserve configuration on deactivation.
• WordPress script-queue integration and complete installable ZIP packaging.

Verification

Verified against a real self-hosted Umami 3.4.0 instance using an isolated synthetic WordPress website: pageviews, custom/declarative/comment events, revenue, identities, performance, click/scroll heatmaps, stored replay playback, and nonzero dashboard metrics. Also exercised Do Not Track, domain restrictions, before-send modification/cancellation, and independent automatic-pageview controls. The temporary website and its data were deleted afterward.

Eight browser regressions passed. PHP 7.4 syntax checks and Plugin Check passed with zero errors; two intentional external-script version warnings remain.

Authenticated Umami Cloud and every configuration permutation were not tested. Server-side recording must also be enabled. Apply appropriate consent and exclusions; do not record sensitive pages.

Installation

Download simply-umami.zip and upload it through WordPress Plugins > Add New > Upload Plugin. WordPress.org submission has not been performed.