Ackee - Package Updates

[nebulon]

[1.4.2]

• Update Ackee to 3.4.2
• Update Cloudron base image to 4.0.0
• Full changelog
• Rendering issue in Safari

[girish]

[1.4.3]

• Update base image to 4.2.0

[Package Updates]

[1.5.0]

• checklist added to manifest

[Package Updates]

[1.6.0]

• update base image to 5.0.0

[Package Updates]

[1.6.1]

• Added additional screenshots

[Package Updates]

[1.6.2]

• fixed screenshot duplicate

[Package Updates]

[1.7.0]

• Update Ackee to 3.5.0
• Full Changelog
• Ackee now requires Node.js 22 or newer (fixes #343)
• URLs without protocols (e.g., example.com) are now rejected by the API. The official ackee-tracker client sends window.location.href with protocol, so this only affects custom API clients sending malformed URLs as siteReferrer and siteLocation.
• ReDOS vulnerability of is_js, the request-ip dependency (thanks @marek629, #392)

[Package Updates]

[1.7.1]

• Update Ackee to 3.5.1
• Full Changelog
• Several dependencies have been updated to their latest versions to bring in security patches and improvements
• ackee-tracker has been updated to fix an issue where visits were not recorded when the website had an empty document.referrer. You might have seen lower visit counts since version 3.5.0 when your website had no referrer, e.g., when visiting it directly or via bookmarks.

[Package Updates]

[1.8.0]

• Update Ackee to 3.6.0
• Full Changelog
• Ackee now requires Node.js 24 or newer
• Vercel deployments and serverless functions (#​401, #​385)

[Package Updates]

[1.8.1]

• Update Ackee to 3.6.1
• Full Changelog
• Action values can now be omitted or set to null when creating actions, matching the existing support for resetting values on update
• HTTP responses now include security headers (X-Content-Type-Options, X-Frame-Options, Referrer-Policy, etc.) via helmet
• The Time-Zone request header is now validated before use; invalid values fall back to the server timezone silently
• Free-text fields in the database (source, deviceName, deviceManufacturer, osName, osVersion, browserName, browserVersion, title, key, details) now enforce maximum length limits to prevent storage abuse