release: promote staging to main by izadoesdev · Pull Request #587 · databuddy-analytics/Databuddy

izadoesdev · 2026-08-02T15:01:48Z

Summary

Promote the current staging release train to main.
This release contains 134 commits across 333 files, including Intelligence recommendations and investigations, Links delivery/redirect reliability, ingestion and worker hardening, SDK/tracker improvements, ClickHouse delivery-deduplication migrations, and dashboard/docs updates.
The production promotion also includes the recent Basket retry safeguards, durable Uptime relays, and service-deployment context fixes.

Validation

The changes were integrated through the existing staging PR flow.
This promotion PR will run the main-targeted CI checks before merge.

Release notes

Review the included database and ClickHouse migration changes as part of the production rollout.

Summary by cubic

Promotes the current staging release to main with deep‑link redirects, a dedicated Insights Recommendations view, and hardened ingest with stable delivery IDs, API‑key admission gates, and retryable pixel delivery. Includes CI health checks for links/vector and new LINKS_URL/NEXT_PUBLIC_LINKS_URL environment variables.

New Features
- Split Insights into Investigations and Recommendations with measurement drafts (goals, funnels, instrumentation), actionable flows, counts, a shared shell, and only the current published recommendation per signal; diversified scheduled coverage.
- Added deep‑link redirects and public link URL helpers with app‑specific HTTPS validation, public‑slug guards, cached lookups, per‑IP rate limits using trusted client IPs, queued visit delivery, and health checks; updated OG, QR/preview, and navigation.
Bug Fixes
- Ingest delivery hardening: bounded Kafka operations and health probes, shutdown budget, ClickHouse direct fallback keyed by delivery IDs with pending/ambiguous reservations, accept eventId to keep stable span/custom‑event identities, CORS‑safe JSON for unload beacons, and a retryable tracking pixel with Retry-After.
- API admission: per‑key rate limits and in‑flight gates with retryable responses; auth dependency outages return 503 with Retry-After without exposing keys; consistent not‑found and webhook 4xx/401/404 responses with structured errors.
- Links and image proxy safety: bounded queue admission and cached lookups, per‑IP rate limiting using trusted client IPs, and a safer image proxy with SSRF guard and protocol‑relative checks.
- Dashboard polish and accessibility: preserve onboarding attribution through signup and setup, enforce @databuddy/ui usage, improve badges/labels and ARIA, and refine navigation with clearer Insights tabs.

^{Written for commit cf830f7. Summary will update on new commits.}

greptile-apps · 2026-08-02T15:01:52Z

Too many files changed for review. (333 files found, 100 file limit)

Bypass the limit by tagging @greptile-apps to review.

cursor · 2026-08-02T15:01:52Z

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

vercel · 2026-08-02T15:01:54Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
dashboard (staging)	Ready	Preview	Aug 4, 2026 12:43pm
databuddy-status	Ready	Preview	Aug 4, 2026 12:43pm
documentation (staging)	Ready	Preview	Aug 4, 2026 12:43pm

coderabbitai · 2026-08-02T15:01:56Z

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 7445cd89-e3b1-43ba-98b8-9113a7f4e978

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dosubot · 2026-08-02T15:01:59Z

📄 Knowledge review

Dosu skipped reviewing this PR because your organization has used its 200 included credits for the month. Your usage will reset on 2026-09-01. To have Dosu review this PR before then, ask your organization admin to upgrade to a pro account.

unkey-deploy · 2026-08-02T15:04:11Z

The latest updates on your projects. Learn more about Unkey Deploy

Name	Status	Preview	Inspect	Updated (UTC)
links (preview)	Ready	Visit Preview	Inspect	Aug 4, 2026 12:42pm

socket-security · 2026-08-02T15:06:55Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@remotion/fonts@4.0.502
	@remotion/media@4.0.502
	@remotion/cli@4.0.502
	remotion@4.0.502

View full report

#589) * fix(basket): log geo resolution source on maxmind and unresolved paths * perf(basket): drop redis geoip cache in favor of in-process maxmind lookup

* fix(basket): classify expected client errors as warn in axiom drain Expected 4xx conditions (quota exceeded, rate limits, invalid client IDs) were logged at error level because the evlog elysia plugin logs every thrown error as error and drops the status. Derive the client error message set from the error catalog and downgrade those events to warn in the drain, keyed on http_status or the catalog message. * fix(basket): log redpanda to clickhouse fallback as warn, not error The fallback recovers the delivery via direct ClickHouse insert, so a connection failure that is handled should not surface as an error in Axiom. Log it via log.warn and assert the new channel in the test. * refactor(basket): extract axiom drain helpers to @databuddy/shared/evlog-axiom Move the batched Axiom drain, HTTP enrichers, string/duration normalization, and the client-error downgrade into a shared module so basket (and future services) reuse them. Basket keeps its catalog-driven client-error detection and delegates the mechanics to the shared helpers.

… before CI (#592)

unkey-deploy Bot deployed to links - preview August 2, 2026 15:04 View deployment

railway-app Bot temporarily deployed to Databuddy / production August 2, 2026 15:04 Inactive

vercel Bot deployed to Preview – databuddy-status August 2, 2026 15:04 View deployment

izadoesdev added 6 commits August 2, 2026 18:05

feat(links): add deep link redirects

60e13db

test(links): cover deep link delivery

00c89f8

chore(deps): sync link validation dependency

682110b

fix(db): restore elastic postgres pool

fedd3e6

fix(db): raise postgres pool ceiling

f5d43b6

docs(agents): document postgres pooling

e8777fc

vercel Bot deployed to staging – documentation August 2, 2026 15:05 View deployment

izadoesdev added 14 commits August 2, 2026 18:05

fix(dashboard): preserve onboarding ad attribution

afd4504

fix(basket): harden ingestion error handling

a52fc9f

feat(insights): recommend measurement drafts

9536848

chore(lint): enforce dashboard and error policies

e96a4c0

ci(links): add readiness health coverage

a9cb88d

feat(video): add intelligence launch composition

6ccf38e

docs(agents): capture insights and lint guardrails

63a7f01

fix(insights): diversify coverage planning

3960cf0

style(insights): format analysis settings state

b63efa6

refactor(insights): reuse run identity condition

03c4764

refactor(insights): simplify frozen candidate plans

e1608e4

refactor(insights): require valid run observations

a01b49e

style(insights): format candidate plan import

9f37f67

fix(basket): use current producer send api

9ec5bf3

vercel Bot deployed to Preview – databuddy-status August 2, 2026 15:06 View deployment

vercel Bot deployed to staging – documentation August 2, 2026 15:07 View deployment

vercel Bot deployed to staging – dashboard August 2, 2026 15:07 View deployment

fix(basket): correct geo resolution telemetry + drop redis geoip cache (

d80410d

#589) * fix(basket): log geo resolution source on maxmind and unresolved paths * perf(basket): drop redis geoip cache in favor of in-process maxmind lookup

unkey-deploy Bot deployed to links - preview August 4, 2026 11:51 View deployment

vercel Bot temporarily deployed to staging – documentation August 4, 2026 11:51 Inactive

vercel Bot temporarily deployed to staging – dashboard August 4, 2026 11:51 Inactive

railway-app Bot temporarily deployed to Databuddy / production August 4, 2026 11:51 Inactive

vercel Bot deployed to Preview – databuddy-status August 4, 2026 11:52 View deployment

unkey-deploy Bot deployed to links - preview August 4, 2026 12:22 View deployment

railway-app Bot temporarily deployed to Databuddy / production August 4, 2026 12:22 Inactive

vercel Bot deployed to Preview – databuddy-status August 4, 2026 12:22 View deployment

vercel Bot deployed to staging – documentation August 4, 2026 12:23 View deployment

vercel Bot deployed to staging – dashboard August 4, 2026 12:23 View deployment

izadoesdev mentioned this pull request Aug 4, 2026

style(basket): fix structured-errors formatting to unblock release lint #591

Merged

style(basket): wrap defineErrorCatalog call to satisfy formatter (#591)

ade008d

vercel Bot temporarily deployed to staging – dashboard August 4, 2026 12:29 Inactive

vercel Bot temporarily deployed to staging – documentation August 4, 2026 12:29 Inactive

railway-app Bot deployed to Databuddy / production August 4, 2026 12:29 View deployment

unkey-deploy Bot deployed to links - preview August 4, 2026 12:29 View deployment

vercel Bot deployed to Preview – databuddy-status August 4, 2026 12:29 View deployment

izadoesdev mentioned this pull request Aug 4, 2026

chore(repo): catch formatting in pre-commit before CI #592

Merged

chore(repo): run ultracite check in pre-commit to catch format issues…

cf830f7

… before CI (#592)

unkey-deploy Bot deployed to links - preview August 4, 2026 12:42 View deployment

railway-app Bot temporarily deployed to Databuddy / production August 4, 2026 12:42 Inactive

vercel Bot deployed to Preview – databuddy-status August 4, 2026 12:42 View deployment

vercel Bot deployed to staging – documentation August 4, 2026 12:43 View deployment

vercel Bot deployed to staging – dashboard August 4, 2026 12:43 View deployment

Navigation Menu

Uh oh!

release: promote staging to main - #587

release: promote staging to main#587
izadoesdev wants to merge 131 commits into
mainfrom
staging

izadoesdev commented Aug 2, 2026 •

edited by cubic-dev-ai Bot

Loading

Uh oh!

greptile-apps Bot commented Aug 2, 2026

Uh oh!

cursor Bot commented Aug 2, 2026

Uh oh!

vercel Bot commented Aug 2, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Aug 2, 2026 •

edited

Loading

Review skipped

Uh oh!

dosubot Bot commented Aug 2, 2026

Uh oh!

unkey-deploy Bot commented Aug 2, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 2, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

izadoesdev commented Aug 2, 2026 • edited by cubic-dev-ai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Validation

Release notes

Summary by cubic

Uh oh!

greptile-apps Bot commented Aug 2, 2026

Uh oh!

cursor Bot commented Aug 2, 2026

Uh oh!

vercel Bot commented Aug 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

coderabbitai Bot commented Aug 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

dosubot Bot commented Aug 2, 2026

📄 Knowledge review

Uh oh!

unkey-deploy Bot commented Aug 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Aug 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

izadoesdev commented Aug 2, 2026 •

edited by cubic-dev-ai Bot

Loading

vercel Bot commented Aug 2, 2026 •

edited

Loading

coderabbitai Bot commented Aug 2, 2026 •

edited

Loading

unkey-deploy Bot commented Aug 2, 2026 •

edited

Loading

socket-security Bot commented Aug 2, 2026 •

edited

Loading