Skip to content

chore(deps): update dependency immich-app/immich to v2.7.5#1502

Merged
renovate[bot] merged 1 commit intomainfrom
renovate/immich
Apr 14, 2026
Merged

chore(deps): update dependency immich-app/immich to v2.7.5#1502
renovate[bot] merged 1 commit intomainfrom
renovate/immich

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Apr 14, 2026

This PR contains the following updates:

Package Update Change
immich-app/immich minor v2.6.3v2.7.5

Release Notes

immich-app/immich (immich-app/immich)

v2.7.5

Compare Source

v2.7.4

Compare Source

v2.7.4

This release addresses some issues with image rendering on the mobile app

What's Changed
🐛 Bug fixes

Full Changelog: immich-app/immich@v2.7.3...v2.7.4

v2.7.3

Compare Source

v2.7.3
What's Changed
🐛 Bug fixes
📚 Documentation
New Contributors

Full Changelog: immich-app/immich@v2.7.2...v2.7.3

v2.7.2

Compare Source

You knew it was coming 😅

This release addresses the following issues:

  • Fix an issue with the default helmet.json file
  • Fix an issue with ML containers not working on some older CPUs
  • Fix an issue with importing external libraries
What's Changed
🐛 Bug fixes

Full Changelog: immich-app/immich@v2.7.0...v2.7.2

v2.7.0

Compare Source

v2.7.0

Welcome to Immich v2.7.0!

This release includes enhancements to the asset viewer, security improvements, changes to the duplicate APIs and viewer, and a bunch of bug fixes. Keep reading below for the complete highlights and a note on the upcoming v3.0.0 release.

[!NOTE]
We're working on a managed backup service for Immich with end-to-end encrypted backups of your library to a remote datacentre where only you hold the keys.

We've put together a quick survey (~5 mins) to get a better idea of how you're backing things up today and what you'd actually want from something like this. Your answers help us figure out what to prioritise, so we'd really appreciate it if you took a few minutes to fill it out.

Leave your email at the end if you're interested in joining our free closed beta when it's ready.

https://futo-backups-survey.immich.app/

Known limitations
  • The machine learning service on amd64 currently requires the >= x86-64-v2 microarchitecture. This will be patched in an upcoming patch release for backward compatibility with very old processors (before ~2010), but it will become a minimum requirement in 3.0. arm64 is not affected by this change.
Highlights
  • Remove from album (asset viewer)
  • Move to locked folder (folder page)
  • Editor shortcuts
  • Create a new face on-the-fly in the face tag editor
  • Resolve duplicates
  • Helmet configuration
  • Version check infrastructure
  • Notable fix: live photo and video download in Safari
  • Notable fix: escape HTML in the Panorama Photo Viewer
Remove from album

The web has a new action, "Remove from album," available in the asset viewer that makes it easier to remove an asset from an album. This action is available to both album and asset owners.

image
Move to locked folder in the Folder view

Similarly, the folder view now includes the "Move to locked folder" action.

image
Editor shortcuts

Users on the web can now edit with keyboard shortcuts. Press e to open the editor. Once in the editor, press [ or ] to rotate the asset +/- 90 degrees. Finally, save any changes and close the editor with ENTER.

slice.mp4
Create a new face on-the-fly in the face tag editor

You can now create a new face/person on the fly from the face tagging editor interface

image image
Deduplication improvements

The duplicate screen has gone through a bunch of iterations since it was first introduced all the way back in May, 2024. The latest release moves a bunch of logic from the client to the server, which now automatically suggests which asset to keep based on image size and EXIF data. Additionally, the new server implementation will automatically synchronize metadata, including albums, favorite status, rating, description, visibility, location, and tags. For more information about this process, see the new documentation.

Helmet configuration

You can now opt in to using a Content Security Policy (CSP) in Immich. The new environment variant IMMICH_HELMET_FILE accepts a boolean or a path to a helmet configuration file.

Recommend action: The team recommends setting IMMICH_HELMET_FILE=true to enable the default policy. Then, please let us know if you run into any issues with it.

Background and details

Since Immich is deployed in so many different ways, it has been hard to figure out how to enable a CSP that would not conflict with or break existing installs that might use 3rd party map providers, custom CSS, embed Immich in an iframe, or other such features. In this release, we have added the ability to both opt in to a default policy and configure a custom one. To use the default policy, simply set the environment variable IMMICH_HELMET_FILE=true. To use a custom policy, set the environment variable to a path on disk (within the immich-server) that contains a valid helmet configuration (e.g. IMMICH_HELMET_FILE=/opt/immich/helmet.json). CSP can be used to control what scripts are allowed to run on the page, which domains to load images from, etc. Additionally, it can be used to configure headers for Referrer-Policy, X-Powered-By, X-Frame-Options, and others.

New version check infrastructure

Prior to this release, instances that used the automatic version check feature would send HTTP requests to github.com. Now, we have set up a small service at version.immich.cloud to handle these types of requests. This avoids any privacy implications of connecting to github.com , as well as moves the request load to our own infrastructure.

Notable fix: live photo and video download in Safari

When downloading files in Safari with the same name, it will simply overwrite the file instead of automatically renaming it. In this release, the still and motion parts of a live photo are now named differently to prevent this from happening.

Notable fix: escape HTML in panorama photo viewer

In v2.6.0, we added the ability to show/view clip text in the panorama viewer, but introduced an XSS vulnerability, which has been fixed in this release. Interestingly, this was XSS using text in the image, which would then get read by OCR.

Notable fix: Immich User Agent for external requests

Similar to the mobile app, the server now sends a custom User Agent header. The format for the User Agent is immich-server/{version}. For example, immich-server/2.7.0.

v3.0.0

Just a heads up that this is the likely to be the last release before v3.0.0. Being a major release there will be a handful of breaking changes, although it's worth noting that nothing is currently planned that requires user intervention. It is mainly changes that impact 3rd party developers. More information and details should be available in the coming weeks.

Support Immich

If you find the project helpful, you can support Immich by purchasing a product key at https://buy.immich.app or our merchandise at https://immich.store


What's Changed
🚀 Features
🌟 Enhancements
🐛 Bug fixes
📚 Documentation
🌐 Translations
New Contributors

Full Changelog: immich-app/immich@v2.6.3...v2.7.0


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 9am on tuesday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner April 14, 2026 05:13
@renovate renovate bot enabled auto-merge (squash) April 14, 2026 05:13
@github-actions
Copy link
Copy Markdown

--- kubernetes/apps/preview/github-previews/app Kustomization: flux-system/github-previews ResourceSet: preview/immich-github-previews

+++ kubernetes/apps/preview/github-previews/app Kustomization: flux-system/github-previews ResourceSet: preview/immich-github-previews

@@ -8,13 +8,13 @@

     kustomize.toolkit.fluxcd.io/namespace: flux-system
   name: immich-github-previews
   namespace: preview
 spec:
   inputs:
   - branch: release
-    tag: v2.6.3
+    tag: v2.7.5
   inputsFrom:
   - apiVersion: fluxcd.controlplane.io/v1
     kind: ResourceSetInputProvider
     name: immich-github-prs
   - apiVersion: fluxcd.controlplane.io/v1
     kind: ResourceSetInputProvider

@renovate renovate bot merged commit ac6360c into main Apr 14, 2026
16 checks passed
@renovate renovate bot deleted the renovate/immich branch April 14, 2026 11:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant