Matomo 3.13.6

We are proud to announce Matomo 3.13.6: a new release of Matomo Analytics.

What’s new?

Our focus has been on improving stability and performance. A few minor bugs were fixed and some small improvements made: see the full changelog below.

In the spirit of making Matomo Privacy by default, we’re making a change in the way tracking works which will improve privacy for everyone tracked in Matomo when tracking cookies are disabled (cookieless). The server-side fingerprint (used to recognise visitors when cookies are disabled) will now be anonymised and randomly change every 24 hours. This does not impact the accuracy of tracking because Matomo only looks back for 30 minutes anyway, so it wasn’t needed to keep an actual fingerprint that would be identical for a same visitor across days. This helps you avoid the cookie banner or asking for user consent when you follow these guidelines.

Device detection was also improved further in this release, keeping up with the ever growing set of devices, new browsers and bots.

We are grateful for all community members who reported feedback and suggestions, our awesome team of translators for their work, and our Premium features customers and Matomo Cloud hosting customers for their amazing support.

83 tickets have been closed by more than 12 contributors!

After You Update

  • Please help us spread the word! Maybe you can write about the project on your blog, website, twitter, talk at conferences or let your friends and colleagues know what is Matomo. Already 1,000,000+ websites are keeping full control of their web analytics with Matomo!
  • Use the forums if you have any question or feedback (free support),
    or purchase a Support Plan to get professional support and guidance.
  • To improve Matomo in your language consider contributing to translations.
  • You can also support our efforts by purchasing valuable Premium Features for Matomo or try our Matomo Cloud solution.

Security release

In this release we have fixed an non-critical issue in the LDAP plugin. We would like to thank Paolo Serracino for his responsible disclosure and work in helping keep the Matomo platform secure.

As always, make sure you upgrade to the latest Matomo release to benefit from the best security and reliability.

We’ve also increased our critical bug bounty to 5,000 USD. Our security bug bounty program welcomes & rewards researchers who discover and responsibly report to us any security issues found in Matomo or any of the plugins created by Matomo/InnoCraft.

Database upgrade

This release does not contain any major database upgrade.

Platform Changes

Matomo is an open analytics platform. In an effort to help Matomo developers learn about improvements and changes in the core APIs, we document the changes since the last release.

In this 3.13.6 release there are minor API changes. Read more in Platform Changelog for Developers to see all changes to the platform and APIs.

Note: the Marketplace showcases more than 100 plugins already compatible with Matomo 3 and this is just the beginning. Matomo is your universal data analytics platform!

New and updated SDKs (Tracking API Clients)

The Matomo team offers official SDKs (Tracking API Clients) for measuring your mobile apps and any other kind of apps.

New and updated guides and FAQs

New:

Updated:

New plugins

By third party developers:

Need help upgrading Matomo?

Read the Updating Matomo user guide.

List of 83 tickets closed in Matomo 3.13.6

matomo-org/matomo
    • #13655 Limit visitor fingerprint by default for even better privacy [by @tsteur]
    • #15930 Archive Blob Tables bloating in size
    • #13151 Improve config file and configuration overview in admin
    • #14579 JS Tracker: add rtf to list of downloads
    • #15853 Make sure to increase time limit when archiving [by @tsteur, @sgiehl]
    • #15862 Queue content tracking request [by @tsteur]
    • #15869 Update visit only when needed [by @tsteur, @diosmosis]
    • #15870 Reexpire archive lock less often [by @diosmosis]
    • #15902 Instagram generates heaps of different referrer urls causing out of memory issues [by @sgiehl]
    • #15954 Fix a plugin that enriches the tracker needed to mark plugin as tracker [by @tsteur]
    • #15978 Real-time visitors live widget don’t refresh after live_widget_refresh_after_seconds « timed out » without new visits/actions on websites
    • #13783 title-text of JavaScript Tracking option help box shows HTML [by @sgiehl]
    • #15982 Fix: Logo being displayed too small on IE 11 [by @sgiehl, @tsteur]
    • #15894 Send onboarding email during installation [by @tsteur]
    • #15901 Fix Javascript error in JS global template causing side effects [by @tsteur, @sgiehl]
    • #15910 Add link to shopify tracking installation guide when no data tracked yet [by @tsteur, @sgiehl]
    • #12685 Change widget category of Realtime Map to Live!
    • #1931 Translation file cleanups (refactor all html code, commands to type etc.) [by @sgiehl]
    • #13398 undefined method createTestConfig() in BenchmarkTestCase
    • #15883 Updates device detector to 3.12.5 [by @sgiehl]
    • #15980 require category and action in logEvent [by @Findus23, @tsteur]
    • #16015 Fixes some date comparison issues [by @tassoman, @tsteur]
    • #15111 Load more in Visitor Profile doesn’t load actions
    • #15876 Warning while upgrading « Warning – array_merge(): Argument 2 is not an array » [by @sgiehl]
    • #15881 No Visitors shown in Brandenburg (state of Germany) on the Map [by @sgiehl]
    • #15923 Search engines are displayed in the wrong channel type [by @tsteur]
    • #15270 Skip password min length checks when disable_checks_usernames_attributes=1 [by @lab-at-nohl, @tsteur]
    • #15854 Keep last 100 characters of archive error message when error is too long [by @tsteur, @sgiehl]
    • #15865 Cron – Filesystem.php(430): Warning – filesize(): stat failed for […] archive.sharedsiteids.pid
    • #15867 Fix plugins/Live/Controller.php(99): Notice – Undefined variable: visitors [by @tsteur, @sgiehl]
    • #15879 Minor performance improvement when invalidating archives [by @tsteur, @diosmosis]
    • #15915 Search for links on page load as well, not just on ready [by @tsteur]
    • #15937 Baidu not considered as a search engine? [by @sgiehl]
    • #15965 Fix theme rewrite removes src attribute when custom plugin directory is used [by @tsteur]
    • #15997 Fix min archive time not correctly respected [by @tsteur, @diosmosis]
    • #16010 Optional userLogin in getUserPreference API [by @tsteur]
matomo-org/device-detector
matomo-org/referrer-spam-blacklist
matomo-org/searchengine-and-social-list
  • #73 Adds detection for baidu.com (without subdomain) [by @sgiehl]

 

We are together creating the best open analytics platform in the world. You can help make Matomo even more awesome by getting involved in Matomo!