v3.4.0

Welcome to Immich v3.4.0!

This release adds workflow improvements, JPEG XL support, tags on mobile (finally?!), a plethora of security fixes and other improvements and bug fixes.

Highlights

• Make/model display changes
• Workflow improvements
• Security fixes
• Performance improvements

Make/model display changes

Manufacturer names are sometimes duplicated in the camera make, but many of these have now been fixed.

Workflows improvements

There are two new match types for the EXIF metadata filter, missing and present. Use these properties instead of a pattern when you only need to know if the property is present or not.

Further, there is a new trigger to run a workflow once OCR processing has finished.

This is particularly useful in combination with the new OCR text filter.

In combination, you can for instance build a workflow that automatically adds receipts to an album, based on typical keywords one would find on a receipt.

Security fixes

Thanks to @bo0tzz for a whole batch of security fixes and improvements, including a CSP change which now no longer ships with unsafe-inline.

As always, please consider supporting the project.

🎉 Cheers! 🎉

Support Immich

If you find the project helpful, you can support Immich by purchasing a product key at https://buy.immich.app or our merchandise at https://immich.store

And as always, bugs are fixed, and many other improvements also come with this release.

What's Changed

🔒 Security

• fix(server): apply shared link metadata visibility in asset mapper by @bo0tzz in #32561
• fix(server): anchor plugin allowedHosts matching by @bo0tzz in #32560
• fix(server): require upload access for checksum duplicate check by @bo0tzz in #32559
• fix(server): escape template variables in custom email templates by @bo0tzz in #32563
• fix(cli): only act on files that were sent in the bulk upload check by @bo0tzz in #32564
• fix(server): restrict partner timeline requests to timeline assets by @bo0tzz in #32565
• fix(server): sanitize EXIF template variables and tighten storage path check by @bo0tzz in #32566
• fix(server): only serve edited assets to shared links in archive downloads by @bo0tzz in #32562
• fix(server): only set OAuth cookies for server-generated state by @bo0tzz in #32600
• fix(server): do not expose album members to shared link viewers by @bo0tzz in #32607
• fix(server): dont follow symlinks by @etnoy in #32614
• fix(server): exclude partners' locked assets from legacy search by @bo0tzz in #32604
• feat(server): remove deprecated password field from update-me by @bo0tzz in #32623
• fix(server): require update access on the motion video when linking a live photo by @bo0tzz in #32606
• feat: inline hashes in helmet CSP by @bo0tzz in #30529
• fix(server): scope duplicate group resolution to the caller's assets by @bo0tzz in #32603

🚀 Features

• feat: option for mobile smooth timeline scrubbing by @TiDeane in #32552
• feat(mobile): jxl decoder by @mertalev in #32592
• feat(server): add jxl as target format by @mertalev in #32732
• feat: backups by @insertish in #32268

🌟 Enhancements

• feat(mobile): mobile tags by @staticdog in #30753
• feat(mobile): limit max zoom by image pixel size by @LeLunZ in #32423
• feat(mobile): share logs from the startup error screen by @santoshakil in #32288
• perf(web): reduce favicon assets by @cevdetch in #32594
• perf: RKNN half RAM model usage + no weight duplication in multi-core by @todorangrg in #23958
• feat: workflow filter by missing EXIF property by @austinmdillow in #32713
• feat(server): add OCR extraction workflow filter by @avaly in #32464
• fix: avoid duplicate manufacturer in camera name by @brent20 in #32657
• feat(web): enable the shortcut "f" to favorite/unfavorite in multiselection mode by @Bautrell12 in #31411
• feat(server): compress database backups with pigz when it is installed by @zackpollard in #32806
• feat: futo backups 1.12.1 with restic's parallel scan by @zackpollard in #32830
• feat: keyboard shortcuts for person page by @enVolt in #31679

🐛 Bug fixes

• fix(mobile): stop playing video when dismissing on iOS by @agg23 in #31772
• fix(mobile): sort timeline assets by the date their headers group on by @santoshakil in #30262
• fix(mobile): cancel the iOS background uploads when the foreground backup starts by @santoshakil in #31944
• fix(server): offline live photo motion deletion by @zackpollard in #32077
• fix(mobile): decouple delete action messages from context by @PeterOmbodi in #31093
• fix(mobile): start the session when a link opens the app by @santoshakil in #32181
• fix(mobile): prevent timeline bucket selection provider leak by @PeterOmbodi in #32100
• fix(mobile): format year filter chip without thousands separator by @devyourown in #32159
• fix(ml): move logging config to code by @bo0tzz in #32220
• fix(mobile): stop long images squishing on android by @santoshakil in #32213
• fix(logging): avoid multiline logging of feature flags in server service by @brandon1024 in #32275
• fix(ml): Round OCR max resolution up to a multiple of 32 by @murarustefaan in #32263
• fix(web): don't swallow Escape in sidebar by @ChocolateChipKookie in #32364
• fix(web): event manager forgetting subscribed callbacks by @meesfrensel in #32217
• fix(web): update album start date when the album changes by @DawidKrynski in #32242
• perf(server): check shared link asset access without scanning the album by @bo0tzz in #32411
• perf(server): stop loading every album asset to build album responses by @bo0tzz in #32413
• perf(server): stop aggregating every album asset when loading a shared link by @bo0tzz in #32412
• fix(mobile): show play instead of replay button for unplayed videos by @LeLunZ in #32307
• fix(mobile): render random widget images at the widget's display resolution by @devyourown in #32215
• fix(mobile): save typed coordinates in the location picker by @santoshakil in #32460
• fix(mobile): sort time zones by name within the same offset by @devyourown in #32087
• fix(mobile): Keep asset viewer controls hidden if they were hidden before zooming. by @dagstuan in #31832
• fix: user admin actions by @jrasm91 in #32491
• fix: smpt email visibility by @jrasm91 in #32492
• fix(web): update FaceEditor to handle HLS video elements correctly by @T-Zaid in #32538
• fix: unsupported locale for date format by @shenlong-tanwen in #32267
• fix(mobile): fallback localizations for unsupported locales by @santoshakil in #32452
• fix(mobile): hide server addresses and tokens in shared logs by @santoshakil in #32287
• fix: locking around concurrency-1 jobs by @bo0tzz in #28410
• fix(mobile): hide server addresses in upload error logs by @santoshakil in #32550
• perf(server): index updateId on asset_face, stack and workflow by @bo0tzz in #32432
• fix(ml): preloaded model loaded twice by @YarosMallorca in #32610
• fix(mobile): keep header image when starting selection by @clementdelestre in #32356
• fix(mobile): bump sqlite3_connection_pool to 0.2.13 by @santoshakil in #32662
• fix(mobile): stop trashing assets after deletion cancellation by @DustinOnGithub in #32522
• fix(mobile): cancel cronet image requests only between reads by @santoshakil in #32659
• perf(server): use a createdAt range for "recently added" time buckets by @bo0tzz in #32434
• fix: watch asset delete/archive in search by @YarosMallorca in #31343
• fix(server): index edited assets in smart search by @MaxRink in #32300
• fix(web): show metadata field if it is missing for one duplicate asset by @meesfrensel in #32601
• fix(web): downloads aborted when switching assets in the viewer by @antoniosarro in #32663
• fix: preserve stack primary asset selection by @KairuiLiu in #31380
• fix: permission for admin notification endpoints by @YarosMallorca in #32567
• fix(server): add album-shared assets to albums by @YarosMallorca in #32609
• perf(server): index asset (ownerId, updateId) for sync by @bo0tzz in #32624
• fix(server): anchor the folder view path match by @bo0tzz in #32612
• feat: cluster group admin permission for regenerate people by @danieldietzler in #32787
• fix: include partner shared assets for people even without showInTimeline by @shenlong-tanwen in #32675
• perf(server): only serialize exif for returned search rows by @bo0tzz in #32620
• fix(mobile): ocr delete by asset by @F-Ethan in #32611
• fix(mobile): use context search once server features are loaded by @DawidKrynski in #31800
• fix(server): normalize bounding boxes when matching detected faces to existing faces by @pauverblom in #32486
• fix(mobile): don't block startup when offline by @YarosMallorca in #32652
• fix(server): live photo match library by @zackpollard in #32080
• fix(server): keep user motion files on embedded motion replace by @zackpollard in #32079
• fix(server): single library exclusion matcher by @zackpollard in #32081
• fix(mobile): show 10-bit heic and avif originals on ios by @santoshakil in #32821
• fix(server): keep ocr search text after edits and thumbnail regeneration by @Shadi-Alrashoodi in #32577
• fix: font loading by @danieldietzler in #32873
• fix: remove asset from album doesn't resize the timeline by @alextran1502 in #32856
• fix: web worker import by @danieldietzler in #32876
• fix: oauth regressions by @danieldietzler in #32934
• fix: web error handler by @danieldietzler in #32935
• fix: people page websockets by @danieldietzler in #32940
• fix(server): read only valid ISO values by @Snowknight26 in #32938
• fix(server): validate motion photo video range before extraction by @bo0tzz in #32931
• fix(web): scroll memory by @danieldietzler in #32964
• fix(mobile): log out before resetting the local database by @santoshakil in #32928
• fix: asset viewer reactivity by @danieldietzler in #32978
• fix(mobile): update sqlite_async to 0.14.8 by @santoshakil in #33099
• fix(web): handle album users being empty for shared links by @danieldietzler in #33105
• fix: download archive filename handling for edited assets by @danieldietzler in #33126
• fix(web): more reactivity issues around @const by @danieldietzler in #33106
• fix: truncate filename in detail panel by @danieldietzler in #33104
• fix(web): stale caches by @danieldietzler in #33131

📚 Documentation

• fix: clarify PUT to PATCH migration by @danieldietzler in #32010
• docs: add Polish README translation by @jakksoft in #32745
• fix(docs): update README_ca_ES.md to match the English version by @Ereza in #30300

🌐 Translations

• fix(i18n): remove unused load preview translations by @LeLunZ in #32343
• fix(mobile): update share quality option text from "Thumbnail" to "Preview" by @LeLunZ in #32340
• chore(web): update translations by @weblate in #32256

New Contributors

• @devyourown made their first contribution in #32159
• @brandon1024 made their first contribution in #32275
• @murarustefaan made their first contribution in #32263
• @staticdog made their first contribution in #30753
• @T-Zaid made their first contribution in #32538
• @MateusNavarro77 made their first contribution in #32503
• @TiDeane made their first contribution in #32552
• @DustinOnGithub made their first contribution in #32522
• @jakksoft made their first contribution in #32745
• @MaxRink made their first contribution in #32300
• @KairuiLiu made their first contribution in #31380
• @Ereza made their first contribution in #30300
• @todorangrg made their first contribution in #23958
• @austinmdillow made their first contribution in #32713
• @yuee3 made their first contribution in #32549
• @brent20 made their first contribution in #32657
• @F-Ethan made their first contribution in #32611
• @Bautrell12 made their first contribution in #31411
• @pauverblom made their first contribution in #32486
• @Shadi-Alrashoodi made their first contribution in #32577
• @medienbaecker made their first contribution in #32946
• @enVolt made their first contribution in #31679

Full Changelog: v3.3.6...v3.4.0