release: promote staging to main

[izadoesdev]

Summary

• Promote the current staging release train to main.
• This release contains 134 commits across 333 files, including Intelligence recommendations and investigations, Links delivery/redirect reliability, ingestion and worker hardening, SDK/tracker improvements, ClickHouse delivery-deduplication migrations, and dashboard/docs updates.
• The production promotion also includes the recent Basket retry safeguards, durable Uptime relays, and service-deployment context fixes.

Validation

• The changes were integrated through the existing staging PR flow.
• This promotion PR will run the main-targeted CI checks before merge.

Release notes

• Review the included database and ClickHouse migration changes as part of the production rollout.

---

Summary by cubic

Promotes the current staging release to main with deep‑link redirects and app‑validated targets, a dedicated Insights Recommendations view with measurement drafts and counts, and hardened analytics delivery with stable event IDs, API‑key admission gates, and retryable pixel responses. Adds CI canaries for links/vector and new LINKS_URL/NEXT_PUBLIC_LINKS_URL environment variables.

• New Features

  • Split Insights into Investigations and Recommendations with measurement drafts (goals, funnels, instrumentation), actionable flows, counts, a shared shell, and only the current published recommendation per signal; diversified scheduled coverage and clearer run status.
  • Added deep‑link redirects and public link URL helpers with per‑app HTTPS validation, public‑slug guards, cached lookups, per‑IP rate limits using trusted client IPs, queued visit delivery, and health checks; updated OG to LINKS_BASE_URL, QR/preview, and navigation/search.

• Bug Fixes

  • Ingest delivery hardening: bounded Kafka operations and health probes with a shutdown budget; ClickHouse direct fallback keyed by delivery IDs with pending/ambiguous reservations; accept eventId for stable span/custom‑event identities; CORS‑safe JSON for unload beacons; retryable tracking pixel with Retry-After.
  • API admission: per‑key rate limits and in‑flight gates with retryable responses; auth dependency outages return 503 with Retry-After without exposing keys; consistent not‑found and webhook 4xx/401/404 responses with structured errors.
  • Links and image proxy safety: bounded redirect queue admission and cached lookups, per‑IP rate limiting using trusted client IPs, and a safer image proxy with SSRF guard and protocol‑relative handling.
  • Dashboard polish and accessibility: preserve onboarding attribution through signup and setup, enforce @databuddy/ui usage, improve badges/labels and ARIA (including breadcrumbs and collapsed badges), and refine navigation with clearer Insights tabs.

^{Written for commit 7b819ac. Summary will update on new commits.}

[greptile-apps]

Too many files changed for review. (333 files found, 100 file limit)

Bypass the limit by tagging @greptile-apps to review.

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
databuddy-status	Ready	Preview	Aug 6, 2026 2:18pm

2 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
dashboard (staging)	Skipped		Aug 6, 2026 2:18pm
documentation (staging)	Skipped		Aug 6, 2026 2:18pm

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 94ff0930-de1f-4666-a774-d15544794ef0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[dosubot]

📄 Knowledge review

Dosu skipped reviewing this PR because your organization has used its 200 included credits for the month. Your usage will reset on 2026-09-01. To have Dosu review this PR before then, ask your organization admin to upgrade to a pro account.

---

[unkey-deploy]

The latest updates on your projects. Learn more about Unkey Deploy

Name	Status	Preview	Inspect	Updated (UTC)
links (preview)	Ready	Visit Preview	Inspect	Aug 6, 2026 2:18pm