fix(deps): bump sharp (#5509)

* fix(deps): bump sharp

* fixed sharp dependencies

* chore: use date tag

---------

Co-authored-by: mertalev <101130780+mertalev@users.noreply.github.com>

server/Dockerfile

@@ -1,9 +1,13 @@
 # dev build
-FROM ghcr.io/immich-app/base-server-dev:20231201@sha256:4701c0c5920c78e73040dd2b74d22042ffce393f1a9d3453d90a0ecf81ff8649 as dev
+FROM ghcr.io/immich-app/base-server-dev:20231207 as dev
 
 WORKDIR /usr/src/app
 COPY server/package.json server/package-lock.json ./
-RUN npm ci
+RUN npm ci && \
+    # sharp-linux-x64 and sharp-linux-arm64 are the only ones we need
+    # they're marked as optional dependencies, so we need to copy them manually after pruning
+    rm -rf node_modules/@img/sharp-libvips* && \
+    rm -rf node_modules/@img/sharp-linuxmusl-x64
 COPY server .
 
 
@@ -11,6 +15,7 @@ FROM dev AS prod
 
 RUN npm run build
 RUN npm prune --omit=dev --omit=optional
+COPY --from=dev /usr/src/app/node_modules/@img ./node_modules/@img
 
 # web build
 FROM node:iron-alpine3.18 as web
@@ -23,7 +28,7 @@ RUN npm run build
 
 
 # prod build
-FROM ghcr.io/immich-app/base-server-prod:20231201@sha256:b8e86cf4c3cad872f54bab25a83f7503480049eea5c0ae36a8b8460b13cad3b5
+FROM ghcr.io/immich-app/base-server-prod:20231207
 
 WORKDIR /usr/src/app
 ENV NODE_ENV=production