recipe-maintainers/immich
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: upgrade immich-server + immich-machine-learning to v3.3.5 #6

Merged
trav merged 3 commits from upgrade-9c3bf2a into main 2026-10-26 16:30:03 +00:00
Conversation 6 Commits 3 Files Changed 1
+2 -2
autonomic-bot commented 2026-10-02 03:47:55 +00:00
Owner
Copy Link
Copy Source

Upgrade immich v3.3.4 → v3.3.5 on top of the current upstream main (1.12.0+v3.3.4, 6b294fce).

This extends the existing upgrade PR #6 (branch upgrade-9c3bf2a) rather than opening a parallel one; the earlier v3.3.1 bump on that branch is superseded by this newer stable.

Image changes

service image current (upstream main) new
app ghcr.io/immich-app/immich-server v3.3.4 v3.3.5
immich-machine-learning ghcr.io/immich-app/immich-machine-learning v3.3.4 v3.3.5
redis docker.io/valkey/valkey:9@sha256:418652cf… unchanged unchanged
database ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357… unchanged unchanged

The DB and valkey digest pins are untouched. immich v3.3.5's own docker/docker-compose.yml pins the exact same
postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357… and valkey:9@sha256:c123e371… combo, so the
PostgreSQL major/extension scheme remains in lockstep with the server. docker/example.env @ v3.3.5 is
byte-identical to v3.3.4.

Upstream release notes: immich-server v3.3.4→v3.3.5: https://github.com/immich-app/immich/releases/tag/v3.3.5
Upstream release notes: immich-machine-learning v3.3.4→v3.3.5: https://github.com/immich-app/immich/releases/tag/v3.3.5

What changed (v3.3.4 → v3.3.5)

Security patch release: dependency digest updates (certifi 2026.10.19 for the CA-trust fix) and the
October 2026 Node.js security patches. No schema migration, no new/renamed env var, no volume or routing
change. TypeORM migrations auto-run on start.

Operator Action Required

None. The version label is deliberately left untouched. After merge, publish with:

abra recipe release immich -z

(new upstream patch → patch bump; no --dry-run — this bumps the label, tags and pushes).

Verification

  • Live dev-immich.ci.commoninternet.net --chaos deploy of this exact tree: all 4 services 1/1;
    immich-server + immich-machine-learning running v3.3.5; /api/server/version → 3.3.5,
    /api/server/ping → pong, web root HTTP 200; migrations finished successfully; DB healthy with the
    vector/vchord extensions present (72 tables) — no pgvectors drop/panic. Dev deploy torn down
    (0 dev-immich stacks/volumes remain).
  • Advisory scan (3.3.4 → 3.3.5): 0 CVEs identified as fixed by this window. CVE-2026-104867 is fixed
    in v3.2.0 (before this window); the valkey CVEs relate to an unchanged sidecar. GitHub advisory API
    sources were rate-limited on the last pass (noted in the run log).

Nothing is merged — for operator review.

Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.

cc @trav @notplants

Upgrade **immich v3.3.4 → v3.3.5** on top of the current upstream main (`1.12.0+v3.3.4`, `6b294fce`). This extends the existing upgrade PR #6 (branch `upgrade-9c3bf2a`) rather than opening a parallel one; the earlier v3.3.1 bump on that branch is superseded by this newer stable. ### Image changes | service | image | current (upstream main) | new | |---|---|---|---| | app | `ghcr.io/immich-app/immich-server` | `v3.3.4` | **`v3.3.5`** | | immich-machine-learning | `ghcr.io/immich-app/immich-machine-learning` | `v3.3.4` | **`v3.3.5`** | | redis | `docker.io/valkey/valkey:9@sha256:418652cf…` | unchanged | unchanged | | database | `ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357…` | unchanged | unchanged | The DB and valkey digest pins are untouched. immich v3.3.5's own `docker/docker-compose.yml` pins the exact same `postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357…` and `valkey:9@sha256:c123e371…` combo, so the PostgreSQL major/extension scheme remains in lockstep with the server. `docker/example.env` @ v3.3.5 is byte-identical to v3.3.4. **Upstream release notes:** immich-server v3.3.4→v3.3.5: https://github.com/immich-app/immich/releases/tag/v3.3.5 **Upstream release notes:** immich-machine-learning v3.3.4→v3.3.5: https://github.com/immich-app/immich/releases/tag/v3.3.5 ### What changed (v3.3.4 → v3.3.5) Security patch release: dependency digest updates (`certifi` 2026.10.19 for the CA-trust fix) and the October 2026 Node.js security patches. No schema migration, no new/renamed env var, no volume or routing change. TypeORM migrations auto-run on start. ### Operator Action Required **None.** The version label is deliberately left untouched. After merge, publish with: `abra recipe release immich -z` (new upstream patch → patch bump; no `--dry-run` — this bumps the label, tags and pushes). ### Verification - Live `dev-immich.ci.commoninternet.net --chaos` deploy of this exact tree: all 4 services **1/1**; `immich-server` + `immich-machine-learning` running **v3.3.5**; `/api/server/version` → 3.3.5, `/api/server/ping` → pong, web root HTTP 200; migrations finished successfully; DB healthy with the `vector`/`vchord` extensions present (72 tables) — no pgvectors drop/panic. Dev deploy torn down (0 `dev-immich` stacks/volumes remain). - Advisory scan (3.3.4 → 3.3.5): 0 CVEs identified as fixed by this window. CVE-2026-104867 is fixed in v3.2.0 (before this window); the valkey CVEs relate to an unchanged sidecar. GitHub advisory API sources were rate-limited on the last pass (noted in the run log). Nothing is merged — for operator review. Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review. cc @trav @notplants
autonomic-bot added 1 commit 2026-10-02 03:47:55 +00:00
chore: upgrade immich-server + immich-machine-learning to v3.2.4
cc-ci/testme cc-ci: success
Details
9c3bf2a035
autonomic-bot requested review from trav 2026-10-02 03:47:55 +00:00
autonomic-bot requested review from notplants 2026-10-02 03:47:55 +00:00
autonomic-bot commented 2026-10-02 03:48:03 +00:00
Author
Owner
Copy Link
Copy Source

!testme

!testme
autonomic-bot commented 2026-10-02 03:48:32 +00:00
Author
Owner
Copy Link
Copy Source

🌻 cc-ci — immich @ 9c3bf2a0 ✅ passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `immich` @ `9c3bf2a0` ✅ **passed** [![cc-ci result card](https://ci.autonomic.zone/runs/30/summary.png)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/30) [![level](https://ci.autonomic.zone/runs/30/badge.svg)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/30) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/30) · [dashboard](https://ci.autonomic.zone/)
autonomic-bot changed title from chore: upgrade immich-server + immich-machine-learning to v3.2.4 to chore: upgrade immich-server + immich-machine-learning to v3.3.1 2026-10-09 02:51:09 +00:00
autonomic-bot added 1 commit 2026-10-09 02:51:10 +00:00
chore: upgrade immich-server + immich-machine-learning to v3.3.1
cc-ci/testme cc-ci: success
Details
b48645377c
autonomic-bot commented 2026-10-09 02:51:22 +00:00
Author
Owner
Copy Link
Copy Source

!testme

!testme
autonomic-bot commented 2026-10-09 02:51:23 +00:00
Author
Owner
Copy Link
Copy Source

🌻 cc-ci — immich @ b4864537 ✅ passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `immich` @ `b4864537` ✅ **passed** [![cc-ci result card](https://ci.autonomic.zone/runs/45/summary.png)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/45) [![level](https://ci.autonomic.zone/runs/45/badge.svg)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/45) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/45) · [dashboard](https://ci.autonomic.zone/)
autonomic-bot changed title from chore: upgrade immich-server + immich-machine-learning to v3.3.1 to chore: upgrade immich-server + immich-machine-learning to v3.3.5 2026-10-23 03:09:07 +00:00
autonomic-bot added 1 commit 2026-10-23 03:09:07 +00:00
chore: upgrade immich-server + immich-machine-learning to v3.3.5
cc-ci/testme cc-ci: success
Details
be7f7106ca
autonomic-bot commented 2026-10-23 03:09:12 +00:00
Author
Owner
Copy Link
Copy Source

!testme

!testme
autonomic-bot commented 2026-10-23 03:09:15 +00:00
Author
Owner
Copy Link
Copy Source

🌻 cc-ci — immich @ be7f7106 ✅ passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `immich` @ `be7f7106` ✅ **passed** [![cc-ci result card](https://ci.autonomic.zone/runs/78/summary.png)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/78) [![level](https://ci.autonomic.zone/runs/78/badge.svg)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/78) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/78) · [dashboard](https://ci.autonomic.zone/)
trav merged commit 6dbaab0457 into main 2026-10-26 16:30:03 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
trav
notplants
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
autonomic autonomic-bot kawaiipunk (KawaiiPunk) notplants trav (Trav Fryer)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: recipe-maintainers/immich#6