Umami v3.3.1 is a maintenance release focused on safer upgrades, tracking correctness, analytics accuracy, and UI fixes.
Highlights
- Hardened two-factor authentication when TWO_FACTOR_ENCRYPTION_KEY is missing or invalid, with safer API enforcement and clearer configuration feedback. #4443
- Preserved the root path when REMOVE_TRAILING_SLASH is enabled and reset tracker visit state when a session drifts. #4152
- Fixed event property filtering so fields and values respect the selected event name. #4461
- Preserved events without matching session records and stabilized relational event pagination. #4462
- Improved expanded metrics query performance and fixed funnel steps containing null event values.
- Preserved zero and false values in website value responses.
Authentication and migration
- Added prisma/migrations/24_lowercase_username to normalize usernames from pre-3.2 installations while safely handling conflicts with soft-deleted accounts.
- Improved handling of username conflicts involving deleted users.
- Added broader coverage for 2FA status, setup, verification, disable, admin, team, and login flows.
Migrations run automatically during the build process.
UI and translations
- Preserved menu item actions in admin dropdowns. #4453
- Fixed expanded-menu spacing and realtime search bar styling.
- Added missing 2FA translations and polished Traditional Chinese 2FA copy.
Thanks
@nrps9909 @tomazic89 @NoiceHax
Full Changelog: v3.3.0...v3.3.1
Contributors
tomazic89, nrps9909, and NoiceHax