chore(deps): update immich to v2.7.0 #5674
Reference in New Issue
Block a user
Delete Branch "renovate/unified-immich"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
v2.6.3→v2.7.02.6.3→2.7.0Release Notes
immich-app/immich (ghcr.io/immich-app/immich-server)
v2.7.0Compare Source
v2.7.0
Welcome to Immich
v2.7.0!This release includes enhancements to the asset viewer, security improvements, changes to the duplicate APIs and viewer, and a bunch of bug fixes. Keep reading below for the complete highlights and a note on the upcoming
v3.0.0release.Highlights
Remove from album
The web has a new action, "Remove from album," available in the asset viewer that makes it easier to remove an asset from an album. This action is available to both album and asset owners.
Move to locked folder in the Folder view
Similarly, the folder view now includes the "Move to locked folder" action.
Editor shortcuts
Users on the web can now edit with keyboard shortcuts. Press
eto open the editor. Once in the editor, press[or]to rotate the asset +/- 90 degrees. Finally, save any changes and close the editor withENTER.https://github.com/user-attachments/assets/969de104-b02d-41a6-830b-3e1a49541d14
Create a new face on-the-fly in the face tag editor
You can now create a new face/person on the fly from the face tagging editor interface
Deduplication improvements
The duplicate screen has gone through a bunch of iterations since it was first introduced all the way back in May, 2024. The latest release moves a bunch of logic from the client to the server, which now automatically suggests which asset to keep based on image size and EXIF data. Additionally, the new server implementation will automatically synchronize metadata, including albums, favorite status, rating, description, visibility, location, and tags. For more information about this process, see the new documentation.
Helmet configuration
You can now opt in to using a Content Security Policy (CSP) in Immich. The new environment variant
IMMICH_HELMET_FILEaccepts a boolean or a path to a helmet configuration file.Recommend action: The team recommends setting
IMMICH_HELMET_FILE=trueto enable the default policy. Then, please let us know if you run into any issues with it.Background and details
Since Immich is deployed in so many different ways, it has been hard to figure out how to enable a CSP that would not conflict with or break existing installs that might use 3rd party map providers, custom CSS, embed Immich in an iframe, or other such features. In this release, we have added the ability to both opt in to a default policy and configure a custom one. To use the default policy, simply set the environment variable
IMMICH_HELMET_FILE=true. To use a custom policy, set the environment variable to a path on disk (within the immich-server) that contains a valid helmet configuration (e.g.IMMICH_HELMET_FILE=/opt/immich/helmet.json). CSP can be used to control what scripts are allowed to run on the page, which domains to load images from, etc. Additionally, it can be used to configure headers for Referrer-Policy, X-Powered-By, X-Frame-Options, and others.New version check infrastructure
Prior to this release, instances that used the automatic version check feature would send HTTP requests to
github.com. Now, we have set up a small service atversion.immich.cloudto handle these types of requests. This avoids any privacy implications of connecting togithub.com, as well as moves the request load to our own infrastructure.Notable fix: live photo and video download in Safari
When downloading files in Safari with the same name, it will simply overwrite the file instead of automatically renaming it. In this release, the still and motion parts of a live photo are now named differently to prevent this from happening.
Notable fix: escape HTML in panorama photo viewer
In
v2.6.0, we added the ability to show/view clip text in the panorama viewer, but introduced an XSS vulnerability, which has been fixed in this release. Interestingly, this was XSS using text in the image, which would then get read by OCR.Notable fix: Immich User Agent for external requests
Similar to the mobile app, the server now sends a custom User Agent header. The format for the User Agent is
immich-server/{version}. For example,immich-server/2.7.0.v3.0.0Just a heads up that this is the likely to be the last release before
v3.0.0. Being a major release there will be a handful of breaking changes, although it's worth noting that nothing is currently planned that requires user intervention. It is mainly changes that impact 3rd party developers. More information and details should be available in the coming weeks.Support Immich
If you find the project helpful, you can support Immich by purchasing a product key at https://buy.immich.app or our merchandise at https://immich.store
What's Changed
🚀 Features
🌟 Enhancements
🐛 Bug fixes
📚 Documentation
🌐 Translations
New Contributors
Full Changelog: https://github.com/immich-app/immich/compare/v2.6.3...v2.7.0
Configuration
📅 Schedule: (in timezone America/Chicago)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Renovate Bot.
6edfde5401to655a3e1f19