github immich-app/immich v3.4.0-rc.1

pre-release4 hours ago

v3.4.0-rc.1

Warning

Disclaimer

This is a release candidate, not a stable release. It is subject to change and may contain bugs or breaking changes. As always, make sure you have a backup of your database and library before upgrading to this version.

Welcome to the first release candidate of v3.4; v3.4.0-rc.1 (yeah yeah, we had to sacrifice a release again)! Keep reading below for the draft release notes and instructions on how to run this release candidate.

Release notes

Work-in-progress release notes can be found here:

https://pr-934.dev.immich.app/blog/v3.4.0-release

Server

To use this RC version on the server, update the IMMICH_VERSION in your .env file:

IMMICH_VERSION=v3.4.0-rc.1

or

IMMICH_VERSION=v3-rc

Then pull and restart:

docker compose pull && docker compose up -d

Mobile

To use this RC version on the mobile app, follow the appropriate link for your platform:

Android

You can download the APK in the release note below, or tap on "Join the beta" from the Google Play Immich page

image

iOS

The iOS app is available via Testflight: https://testflight.apple.com/join/JTSTucBd

image

If you run into any issues, please report them on GitHub so we can address them before the final release. Thank you for helping us test!

And as always, bugs are fixed, and many other improvements also come with this release.

What's Changed

🔒 Security

  • fix(server): apply shared link metadata visibility in asset mapper by @bo0tzz in #32561
  • fix(server): anchor plugin allowedHosts matching by @bo0tzz in #32560
  • fix(server): require upload access for checksum duplicate check by @bo0tzz in #32559
  • fix(server): escape template variables in custom email templates by @bo0tzz in #32563
  • fix(cli): only act on files that were sent in the bulk upload check by @bo0tzz in #32564
  • fix(server): restrict partner timeline requests to timeline assets by @bo0tzz in #32565
  • fix(server): sanitize EXIF template variables and tighten storage path check by @bo0tzz in #32566
  • fix(server): only serve edited assets to shared links in archive downloads by @bo0tzz in #32562
  • fix(server): only set OAuth cookies for server-generated state by @bo0tzz in #32600
  • fix(server): do not expose album members to shared link viewers by @bo0tzz in #32607
  • fix(server): dont follow symlinks by @etnoy in #32614
  • fix(server): exclude partners' locked assets from legacy search by @bo0tzz in #32604
  • feat(server): remove deprecated password field from update-me by @bo0tzz in #32623
  • fix(server): require update access on the motion video when linking a live photo by @bo0tzz in #32606
  • feat: inline hashes in helmet CSP by @bo0tzz in #30529
  • fix(server): scope duplicate group resolution to the caller's assets by @bo0tzz in #32603

🚀 Features

🌟 Enhancements

🐛 Bug fixes

📚 Documentation

🌐 Translations

  • fix(i18n): remove unused load preview translations by @LeLunZ in #32343
  • fix(mobile): update share quality option text from "Thumbnail" to "Preview" by @LeLunZ in #32340
  • chore(web): update translations by @weblate in #32256

New Contributors

Full Changelog: v3.3.5...v3.4.0-rc.1

Don't miss a new immich release

NewReleases is sending notifications on new releases.