runlight 0.4.1

Bug fixes

Fixed
- The module works with the Redirect module's "Enforce clean and canonical URLs" option. With it on, Redirect sent every request under /runlight, such as the script at /runlight/s.js, to /runlight itself, so the script, the dashboard, and visit counting answered "Not found". Runlight's paths are now left out of that check, and the rest of the site keeps it. Thanks to xmacinfo for the report: https://www.drupal.org/project/runlight/issues/3636637

runlight 0.4.0

Bug fixes
New features

Added
- AI agents are checked against the addresses their companies publish (OpenAI, Anthropic, Perplexity, Mistral, DuckDuckGo, and Common Crawl). A fetch from a listed address shows under the agent's name, and any other shows as claimed, such as "GPTBot (claimed)". The module now sends the agent's address with each fetch it reports; Runlight compares it, then drops it, keeping only whether it matched.
- With filters applied, the dashboard keeps them in a bar along the top once you scroll past the numbers, so you can change or clear them without scrolling back up.

runlight 0.3.3

Bug fixes

- In the dashboard's Account sheet, the Sign out everywhere section now has space and a line above it, like Two-factor sign-in, and its button is styled like the others.

The other fixes in Runlight 0.3.3 are for the Go and Ruby packages and don't change this module. The full changelog is at https://github.com/runlightsh/runlight/blob/main/CHANGELOG.md

runlight 0.3.0

Bug fixes
New features

Changed

  • Updated the Runlight library to 0.3.0. Outbound link and File download events keep the link without its query string or fragment, and a funnel over more than 100,000 visits counts the newest 100,000.

Fixed

  • A hit tried again after the database was busy no longer counts twice in its visit.

Security

  • Fetches that must reach the public internet refuse more IPv6 forms of private addresses.

runlight 0.2.0

New features

This release moves the module to Runlight 0.2.0, the version every Runlight package now shares. Nothing in the module itself changed: it counts visits, keeps them in Drupal's own database, and shows the same reports as 0.1.8. There are no database updates and no configuration changes, so updating is all there is to do.

The headline of Runlight 0.2.0 is ClickHouse support, for the standalone server and for Node apps with millions of visits a month. It does not apply to this module.

runlight 0.1.8

Bug fixes

Changed
- A day's salt, which a day's visitor ids are made from, is kept only while it is that day in the site's timezone, and after midnight only while a visit begun that day is still going.
- New password hashes cost more (scrypt at N=32768, r=8, p=3) and record their cost. A password hashed before is checked as before and hashed again at the new cost the next time it signs in.

runlight 0.1.7

runlight-0.1.7-source.zip is a source archive for reference. It is not a Composer dependency bundle or a replacement for Drupal.org's generated package. Runlight's PHP library must be installed through Composer.

For an existing Composer-managed site after the Drupal.org release is available:
composer require drupal/runlight:^0.1.7 --with-all-dependencies
drush updb -y
drush cr

runlight 0.1.6

Bug fixes

This release includes the improvements from 0.1.5 and fixes Java API documentation generation for the coordinated package release.

Updated the Runlight library dependency to ^0.1.6.

runlight 0.1.4

Bug fixes
New features

New features

- The optional AI assistant can prepare goals, funnels, email reports, and share links. It asks for missing details and requires confirmation before saving, using the current user's permissions. Drupal users remain managed through Drupal. MCP tools remain read-only.
- A synchronous data-before-send tracker hook lets custom integrations scrub URLs, referrers, titles, and event properties before transmission. A configured hook that is missing, throws, or returns an invalid result sends nothing.

Dashboard improvements

runlight 0.1.3

Bug fixes

Security
- A mail service, mail webhook, or AI assistant that redirects to another address is refused before anything is sent there, so its key and the message never leave for a server you didn't choose.
- Those requests connect to the address Runlight checked, so a name that changes between the check and the connection can't lead them to a cloud metadata address.
- The AI assistant's limits hold when questions are sent all at once, so a viewer can't go past the daily limit.

runlight 0.1.1

Bug fixes

Security and reliability fixes from a full review of Runlight.

runlight 0.1.0

New features

First release of Runlight for Drupal. It counts your site's visitors with Runlight: privacy friendly analytics with no cookies, kept in your own database.

Subscribe with RSS Subscribe to Releases for Runlight