Changelog: https://matomo.org/?post_type=changelog&p=42959&preview=true
Matomo 4.0.0 has been in the making since January 2020 and we're proud to finally release this first public Beta. (it is called beta2 because we have skipped the beta1 release). There are many changes, including security and privacy improvements and other breaking changes, most notably:
- Matomo 4.0.0 requires PHP 7.2.5 (better security and performance)
- Log importer now requires Python 3.x (Log analytics)
- Auth tokens used to authenticate API calls now need to be generated, and can be revoked. Any existing token_auth in Matomo 3.x will be migrated so any
token_authyou already use will still work) - Page generation time metrics are now deprecated and replaced by new Page Performance reports
- Older browsers like IE6 or IE7 are not tracked anymore by the JS Tracker (browsers that don't support JSON API)
- IE 10 browser is not longer supported in the Matomo App user interface (IE 10 is still supported and tracked in JS Tracking)
- LoginHttpAuth plugin is no longer supported (we welcome someone to fork & maintain the plugin in the future)
- Page titles, event names, event category, page URL, etc. are now truncated after 4096 characters (more info)
- Security: More secure storage of tokens: the
token_authand session ID are no longer stored in plain text in the database. - Security: When embedding reports (widgets) into a different site, it is no longer possible to use authentication tokens of users with at least write access (more info)
- Segments: "Not contains" and "Not equals" segment comparison now behave differently (more info)
- PHP tracker client: exceptions are now thrown on errors (more info)
- If you use the JavaScript API, or the Reporting API, or if you build plugins for Matomo, please check the developer changelog for a full list of changes in the platform that may affect you.