v3.4.0

[immich-push-o-matic[bot]]

v3.4.0

Welcome to Immich v3.4.0!

This release adds workflow improvements, JPEG XL support, tags on mobile (finally?!), a plethora of security fixes and other improvements and bug fixes.

Highlights

• Make/model display changes
• Workflow improvements
• Security fixes
• Performance improvements

Make/model display changes

Manufacturer names are sometimes duplicated in the camera make, but many of these have now been fixed.

Workflows improvements

There are two new match types for the EXIF metadata filter, missing and present. Use these properties instead of a pattern when you only need to know if the property is present or not.

Further, there is a new trigger to run a workflow once OCR processing has finished.

This is particularly useful in combination with the new OCR text filter.

In combination, you can for instance build a workflow that automatically adds receipts to an album, based on typical keywords one would find on a receipt.

Security fixes

Thanks to @bo0tzz for a whole batch of security fixes and improvements, including a CSP change which now no longer ships with unsafe-inline.

As always, please consider supporting the project.

🎉 Cheers! 🎉

Support Immich

If you find the project helpful, you can support Immich by purchasing a product key at https://buy.immich.app or our merchandise at https://immich.store

---

And as always, bugs are fixed, and many other improvements also come with this release.

What's Changed

🔒 Security

• fix(server): apply shared link metadata visibility in asset mapper by @bo0tzz in fix(server): apply shared link metadata visibility in asset mapper #32561
• fix(server): anchor plugin allowedHosts matching by @bo0tzz in fix(server): anchor plugin allowedHosts matching #32560
• fix(server): require upload access for checksum duplicate check by @bo0tzz in fix(server): require upload access for checksum duplicate check #32559
• fix(server): escape template variables in custom email templates by @bo0tzz in fix(server): escape template variables in custom email templates #32563
• fix(cli): only act on files that were sent in the bulk upload check by @bo0tzz in fix(cli): only act on files that were sent in the bulk upload check #32564
• fix(server): restrict partner timeline requests to timeline assets by @bo0tzz in fix(server): restrict partner timeline requests to timeline assets #32565
• fix(server): sanitize EXIF template variables and tighten storage path check by @bo0tzz in fix(server): sanitize EXIF template variables and tighten storage path check #32566
• fix(server): only serve edited assets to shared links in archive downloads by @bo0tzz in fix(server): only serve edited assets to shared links in archive downloads #32562
• fix(server): only set OAuth cookies for server-generated state by @bo0tzz in fix(server): only set OAuth cookies for server-generated state #32600
• fix(server): do not expose album members to shared link viewers by @bo0tzz in fix(server): do not expose album members to shared link viewers #32607
• fix(server): dont follow symlinks by @etnoy in fix(server): dont follow symlinks #32614
• fix(server): exclude partners' locked assets from legacy search by @bo0tzz in fix(server): exclude partners' locked assets from legacy search #32604
• feat(server): remove deprecated password field from update-me by @bo0tzz in feat(server): remove deprecated password field from update-me #32623
• fix(server): require update access on the motion video when linking a live photo by @bo0tzz in fix(server): require update access on the motion video when linking a live photo #32606
• feat: inline hashes in helmet CSP by @bo0tzz in feat: inline hashes in helmet CSP #30529
• fix(server): scope duplicate group resolution to the caller's assets by @bo0tzz in fix(server): scope duplicate group resolution to the caller's assets #32603

🚀 Features

• feat: option for mobile smooth timeline scrubbing by @TiDeane in feat: option for mobile smooth timeline scrubbing #32552
• feat(mobile): jxl decoder by @mertalev in feat(mobile): jxl decoder #32592
• feat(server): add jxl as target format by @mertalev in feat(server): add jxl as target format #32732
• feat: backups by @insertish in feat: backups #32268

🌟 Enhancements

• feat(mobile): mobile tags by @staticdog in feat(mobile): mobile tags #30753
• feat(mobile): limit max zoom by image pixel size by @LeLunZ in feat(mobile): limit max zoom by image pixel size #32423
• feat(mobile): share logs from the startup error screen by @santoshakil in feat(mobile): share logs from the startup error screen #32288
• perf(web): reduce favicon assets by @cevdetch in perf(web): reduce favicon assets #32594
• perf: RKNN half RAM model usage + no weight duplication in multi-core by @todorangrg in perf: RKNN half RAM model usage + no weight duplication in multi-core #23958
• feat: workflow filter by missing EXIF property by @austinmdillow in feat: workflow filter by missing EXIF property #32713
• feat(server): add OCR extraction workflow filter by @avaly in feat(server): add OCR extraction workflow filter #32464
• fix: avoid duplicate manufacturer in camera name by @brent20 in fix: avoid duplicate manufacturer in camera name #32657
• feat(web): enable the shortcut "f" to favorite/unfavorite in multiselection mode by @Bautrell12 in feat(web): enable the shortcut "f" to favorite/unfavorite in multiselection mode #31411
• feat(server): compress database backups with pigz when it is installed by @zackpollard in feat(server): compress database backups with pigz when it is installed #32806
• feat: futo backups 1.12.1 with restic's parallel scan by @zackpollard in feat: futo backups 1.12.1 with restic's parallel scan #32830
• feat: keyboard shortcuts for person page by @enVolt in feat: keyboard shortcuts for person page #31679

🐛 Bug fixes

• fix(mobile): stop playing video when dismissing on iOS by @agg23 in fix(mobile): stop playing video when dismissing on iOS #31772
• fix(mobile): sort timeline assets by the date their headers group on by @santoshakil in fix(mobile): sort timeline assets by the date their headers group on #30262
• fix(mobile): cancel the iOS background uploads when the foreground backup starts by @santoshakil in fix(mobile): cancel the iOS background uploads when the foreground backup starts #31944
• fix(server): offline live photo motion deletion by @zackpollard in fix(server): offline live photo motion deletion #32077
• fix(mobile): decouple delete action messages from context by @PeterOmbodi in fix(mobile): decouple delete action messages from context #31093
• fix(mobile): start the session when a link opens the app by @santoshakil in fix(mobile): start the session when a link opens the app #32181
• fix(mobile): prevent timeline bucket selection provider leak by @PeterOmbodi in fix(mobile): prevent timeline bucket selection provider leak #32100
• fix(mobile): format year filter chip without thousands separator by @devyourown in fix(mobile): format year filter chip without thousands separator #32159
• fix(ml): move logging config to code by @bo0tzz in fix(ml): move logging config to code #32220
• fix(mobile): stop long images squishing on android by @santoshakil in fix(mobile): stop long images squishing on android #32213
• fix(logging): avoid multiline logging of feature flags in server service by @brandon1024 in fix(logging): avoid multiline logging of feature flags in server service #32275
• fix(ml): Round OCR max resolution up to a multiple of 32 by @murarustefaan in fix(ml): Round OCR max resolution up to a multiple of 32 #32263
• fix(web): don't swallow Escape in sidebar by @ChocolateChipKookie in fix(web): don't swallow Escape in sidebar #32364
• fix(web): event manager forgetting subscribed callbacks by @meesfrensel in fix(web): event manager forgetting subscribed callbacks #32217
• fix(web): update album start date when the album changes by @DawidKrynski in fix(web): update album start date when the album changes #32242
• perf(server): check shared link asset access without scanning the album by @bo0tzz in perf(server): check shared link asset access without scanning the album #32411
• perf(server): stop loading every album asset to build album responses by @bo0tzz in perf(server): stop loading every album asset to build album responses #32413
• perf(server): stop aggregating every album asset when loading a shared link by @bo0tzz in perf(server): stop aggregating every album asset when loading a shared link #32412
• fix(mobile): show play instead of replay button for unplayed videos by @LeLunZ in fix(mobile): show play instead of replay button for unplayed videos #32307
• fix(mobile): render random widget images at the widget's display resolution by @devyourown in fix(mobile): render random widget images at the widget's display resolution #32215
• fix(mobile): save typed coordinates in the location picker by @santoshakil in fix(mobile): save typed coordinates in the location picker #32460
• fix(mobile): sort time zones by name within the same offset by @devyourown in fix(mobile): sort time zones by name within the same offset #32087
• fix(mobile): Keep asset viewer controls hidden if they were hidden before zooming. by @dagstuan in fix(mobile): Keep asset viewer controls hidden if they were hidden before zooming. #31832
• fix: user admin actions by @jrasm91 in fix: user admin actions #32491
• fix: smpt email visibility by @jrasm91 in fix: smpt email visibility #32492
• fix(web): update FaceEditor to handle HLS video elements correctly by @T-Zaid in fix(web): update FaceEditor to handle HLS video elements correctly #32538
• fix: unsupported locale for date format by @shenlong-tanwen in fix: unsupported locale for date format #32267
• fix(mobile): fallback localizations for unsupported locales by @santoshakil in fix(mobile): fallback localizations for unsupported locales #32452
• fix(mobile): hide server addresses and tokens in shared logs by @santoshakil in fix(mobile): hide server addresses and tokens in shared logs #32287
• fix: locking around concurrency-1 jobs by @bo0tzz in fix: locking around concurrency-1 jobs #28410
• fix(mobile): hide server addresses in upload error logs by @santoshakil in fix(mobile): hide server addresses in upload error logs #32550
• perf(server): index updateId on asset_face, stack and workflow by @bo0tzz in perf(server): index updateId on asset_face, stack and workflow #32432
• fix(ml): preloaded model loaded twice by @YarosMallorca in fix(ml): preloaded model loaded twice #32610
• fix(mobile): keep header image when starting selection by @clementdelestre in fix(mobile): keep header image when starting selection #32356
• fix(mobile): bump sqlite3_connection_pool to 0.2.13 by @santoshakil in fix(mobile): bump sqlite3_connection_pool to 0.2.13 #32662
• fix(mobile): stop trashing assets after deletion cancellation by @DustinOnGithub in fix(mobile): stop trashing assets after deletion cancellation #32522
• fix(mobile): cancel cronet image requests only between reads by @santoshakil in fix(mobile): cancel cronet image requests only between reads #32659
• perf(server): use a createdAt range for "recently added" time buckets by @bo0tzz in perf(server): use a createdAt range for "recently added" time buckets #32434
• fix: watch asset delete/archive in search by @YarosMallorca in fix: watch asset delete/archive in search #31343
• fix(server): index edited assets in smart search by @MaxRink in fix(server): index edited assets in smart search #32300
• fix(web): show metadata field if it is missing for one duplicate asset by @meesfrensel in fix(web): show metadata field if it is missing for one duplicate asset #32601
• fix(web): downloads aborted when switching assets in the viewer by @antoniosarro in fix(web): downloads aborted when switching assets in the viewer #32663
• fix: preserve stack primary asset selection by @KairuiLiu in fix: preserve stack primary asset selection #31380
• fix: permission for admin notification endpoints by @YarosMallorca in fix: permission for admin notification endpoints #32567
• fix(server): add album-shared assets to albums by @YarosMallorca in fix(server): add album-shared assets to albums #32609
• perf(server): index asset (ownerId, updateId) for sync by @bo0tzz in perf(server): index asset (ownerId, updateId) for sync #32624
• fix(server): anchor the folder view path match by @bo0tzz in fix(server): anchor the folder view path match #32612
• feat: cluster group admin permission for regenerate people by @danieldietzler in feat: cluster group admin permission for regenerate people #32787
• fix: include partner shared assets for people even without showInTimeline by @shenlong-tanwen in fix: include partner shared assets for people even without showInTimeline #32675
• perf(server): only serialize exif for returned search rows by @bo0tzz in perf(server): only serialize exif for returned search rows #32620
• fix(mobile): ocr delete by asset by @F-Ethan in fix(mobile): ocr delete by asset #32611
• fix(mobile): use context search once server features are loaded by @DawidKrynski in fix(mobile): use context search once server features are loaded #31800
• fix(server): normalize bounding boxes when matching detected faces to existing faces by @pauverblom in fix(server): normalize bounding boxes when matching detected faces to existing faces #32486
• fix(mobile): don't block startup when offline by @YarosMallorca in fix(mobile): don't block startup when offline #32652
• fix(server): live photo match library by @zackpollard in fix(server): live photo match library #32080
• fix(server): keep user motion files on embedded motion replace by @zackpollard in fix(server): keep user motion files on embedded motion replace #32079
• fix(server): single library exclusion matcher by @zackpollard in fix(server): single library exclusion matcher #32081
• fix(mobile): show 10-bit heic and avif originals on ios by @santoshakil in fix(mobile): show 10-bit heic and avif originals on ios #32821
• fix(server): keep ocr search text after edits and thumbnail regeneration by @Shadi-Alrashoodi in fix(server): keep ocr search text after edits and thumbnail regeneration #32577
• fix: font loading by @danieldietzler in fix: font loading #32873
• fix: remove asset from album doesn't resize the timeline by @alextran1502 in fix: remove asset from album doesn't resize the timeline #32856
• fix: web worker import by @danieldietzler in fix: web worker import #32876
• fix: oauth regressions by @danieldietzler in fix: oauth regressions #32934
• fix: web error handler by @danieldietzler in fix: web error handler #32935
• fix: people page websockets by @danieldietzler in fix: people page websockets #32940
• fix(server): read only valid ISO values by @Snowknight26 in fix(server): read only valid ISO values #32938
• fix(server): validate motion photo video range before extraction by @bo0tzz in fix(server): validate motion photo video range before extraction #32931
• fix(web): scroll memory by @danieldietzler in fix(web): scroll memory #32964
• fix(mobile): log out before resetting the local database by @santoshakil in fix(mobile): log out before resetting the local database #32928
• fix: asset viewer reactivity by @danieldietzler in fix: asset viewer reactivity #32978
• fix(mobile): update sqlite_async to 0.14.8 by @santoshakil in fix(mobile): update sqlite_async to 0.14.8 #33099
• fix(web): handle album users being empty for shared links by @danieldietzler in fix(web): handle album users being empty for shared links #33105
• fix: download archive filename handling for edited assets by @danieldietzler in fix: download archive filename handling for edited assets #33126
• fix(web): more reactivity issues around @const by @danieldietzler in fix(web): more reactivity issues around @const #33106
• fix: truncate filename in detail panel by @danieldietzler in fix: truncate filename in detail panel #33104
• fix(web): stale caches by @danieldietzler in fix(web): stale caches #33131

📚 Documentation

• fix: clarify PUT to PATCH migration by @danieldietzler in fix: clarify PUT to PATCH migration #32010
• docs: add Polish README translation by @jakksoft in docs: add Polish README translation #32745
• fix(docs): update README_ca_ES.md to match the English version by @Ereza in fix(docs): update README_ca_ES.md to match the English version #30300

🌐 Translations

• fix(i18n): remove unused load preview translations by @LeLunZ in fix(i18n): remove unused load preview translations #32343
• fix(mobile): update share quality option text from "Thumbnail" to "Preview" by @LeLunZ in fix(mobile): update share quality option text from "Thumbnail" to "Preview" #32340
• chore(web): update translations by @weblate in chore(web): update translations #32256

New Contributors

• @devyourown made their first contribution in fix(mobile): format year filter chip without thousands separator #32159
• @brandon1024 made their first contribution in fix(logging): avoid multiline logging of feature flags in server service #32275
• @murarustefaan made their first contribution in fix(ml): Round OCR max resolution up to a multiple of 32 #32263
• @staticdog made their first contribution in feat(mobile): mobile tags #30753
• @T-Zaid made their first contribution in fix(web): update FaceEditor to handle HLS video elements correctly #32538
• @MateusNavarro77 made their first contribution in fix(mobile): border radius on list tiles in library page (#32476) #32503
• @TiDeane made their first contribution in feat: option for mobile smooth timeline scrubbing #32552
• @DustinOnGithub made their first contribution in fix(mobile): stop trashing assets after deletion cancellation #32522
• @jakksoft made their first contribution in docs: add Polish README translation #32745
• @MaxRink made their first contribution in fix(server): index edited assets in smart search #32300
• @KairuiLiu made their first contribution in fix: preserve stack primary asset selection #31380
• @Ereza made their first contribution in fix(docs): update README_ca_ES.md to match the English version #30300
• @todorangrg made their first contribution in perf: RKNN half RAM model usage + no weight duplication in multi-core #23958
• @austinmdillow made their first contribution in feat: workflow filter by missing EXIF property #32713
• @yuee3 made their first contribution in docs(i18n): remove the deleted star-history chart from the remaining 16 translated READMEs #32549
• @brent20 made their first contribution in fix: avoid duplicate manufacturer in camera name #32657
• @F-Ethan made their first contribution in fix(mobile): ocr delete by asset #32611
• @Bautrell12 made their first contribution in feat(web): enable the shortcut "f" to favorite/unfavorite in multiselection mode #31411
• @pauverblom made their first contribution in fix(server): normalize bounding boxes when matching detected faces to existing faces #32486
• @Shadi-Alrashoodi made their first contribution in fix(server): keep ocr search text after edits and thumbnail regeneration #32577
• @medienbaecker made their first contribution in fix(web): smoother asset viewer gradients #32946
• @enVolt made their first contribution in feat: keyboard shortcuts for person page #31679

Full Changelog: v3.3.6...v3.4.0

---

This discussion was created from the release v3.4.0.

[Hakuin123]

I was wondering why Passkey support was disabled before the v3.4.0 release and whether it will be re-enabled 🤔

[mertalev]

There were some awkward aspects to it on mobile because the expectation is to bake the domain into the app, which obviously doesn't work for self-hosted apps. The approach we tried to remedy this had security concerns and there is a general UX issue of needing separate passkeys for web and mobile. We didn't feel confident shipping it in its current state.

As for when it can be re-enabled, we're revisiting this to see what the best approach is. A webview is one of the options to solve the security aspect, but it makes for a clunky UX. There is some debate about whether the feature is worth having if it doesn't provide a good UX.

[Hakuin123]

There were some awkward aspects to it on mobile because the expectation is to bake the domain into the app, which obviously doesn't work for self-hosted apps. The approach we tried to remedy this had security concerns and there is a general UX issue of needing separate passkeys for web and mobile. We didn't feel confident shipping it in its current state.

As for when it can be re-enabled, we're revisiting this to see what the best approach is. A webview is one of the options to solve the security aspect, but it makes for a clunky UX. There is some debate about whether the feature is worth having if it doesn't provide a good UX.

Thanks for explaining! Looking forward to seeing Passkeys come back