chore: version v1.133.0

guard minor version

.github/.nvmrc

@@ -1 +1 @@
-22.14.0
+22.15.1

.github/actions/image-build/action.yml

@@ -0,0 +1,118 @@
+name: 'Single arch image build'
+description: 'Build single-arch image on platform appropriate runner'
+inputs:
+  image:
+    description: 'Name of the image to build'
+    required: true
+  ghcr-token:
+    description: 'GitHub Container Registry token'
+    required: true
+  platform:
+    description: 'Platform to build for'
+    required: true
+  artifact-key-base:
+    description: 'Base key for artifact name'
+    required: true
+  context:
+    description: 'Path to build context'
+    required: true
+  dockerfile:
+    description: 'Path to Dockerfile'
+    required: true
+  build-args:
+    description: 'Docker build arguments'
+    required: false
+runs:
+  using: 'composite'
+  steps:
+    - name: Prepare
+      id: prepare
+      shell: bash
+      env:
+        PLATFORM: ${{ inputs.platform }}
+      run: |
+        echo "platform-pair=${PLATFORM//\//-}" >> $GITHUB_OUTPUT
+
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
+
+    - name: Login to GitHub Container Registry
+      uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
+      if: ${{ !github.event.pull_request.head.repo.fork }}
+      with:
+        registry: ghcr.io
+        username: ${{ github.repository_owner }}
+        password: ${{ inputs.ghcr-token }}
+
+    - name: Generate cache key suffix
+      id: cache-key-suffix
+      shell: bash
+      env:
+        REF: ${{ github.ref_name }}
+      run: |
+        if [[ "${{ github.event_name }}" == "pull_request" ]]; then
+          echo "cache-key-suffix=pr-${{ github.event.number }}" >> $GITHUB_OUTPUT
+        else
+          SUFFIX=$(echo "${REF}" | sed 's/[^a-zA-Z0-9]/-/g')
+          echo "suffix=${SUFFIX}" >> $GITHUB_OUTPUT
+        fi
+
+    - name: Generate cache target
+      id: cache-target
+      shell: bash
+      env:
+        BUILD_ARGS: ${{ inputs.build-args }}
+        IMAGE: ${{ inputs.image }}
+        SUFFIX: ${{ steps.cache-key-suffix.outputs.suffix }}
+        PLATFORM_PAIR: ${{ steps.prepare.outputs.platform-pair }}
+      run: |
+        HASH=$(sha256sum <<< "${BUILD_ARGS}" | cut -d' ' -f1)
+        CACHE_KEY="${PLATFORM_PAIR}-${HASH}"
+        echo "cache-key-base=${CACHE_KEY}" >> $GITHUB_OUTPUT
+        if [[ "${{ github.event.pull_request.head.repo.fork }}" == "true" ]]; then
+          # Essentially just ignore the cache output (forks can't write to registry cache)
+          echo "cache-to=type=local,dest=/tmp/discard,ignore-error=true" >> $GITHUB_OUTPUT
+        else
+          echo "cache-to=type=registry,ref=${IMAGE}-build-cache:${CACHE_KEY}-${SUFFIX},mode=max,compression=zstd" >> $GITHUB_OUTPUT
+        fi
+
+    - name: Generate docker image tags
+      id: meta
+      uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5
+      env:
+        DOCKER_METADATA_PR_HEAD_SHA: 'true'
+
+    - name: Build and push image
+      id: build
+      uses: docker/build-push-action@1dc73863535b631f98b2378be8619f83b136f4a0 # v6.17.0
+      with:
+        context: ${{ inputs.context }}
+        file: ${{ inputs.dockerfile }}
+        platforms: ${{ inputs.platform }}
+        labels: ${{ steps.meta.outputs.labels }}
+        cache-to: ${{ steps.cache-target.outputs.cache-to }}
+        cache-from: |
+          type=registry,ref=${{ inputs.image }}-build-cache:${{ steps.cache-target.outputs.cache-key-base }}-${{ steps.cache-key-suffix.outputs.suffix }}
+          type=registry,ref=${{ inputs.image }}-build-cache:${{ steps.cache-target.outputs.cache-key-base }}-main
+        outputs: type=image,"name=${{ inputs.image }}",push-by-digest=true,name-canonical=true,push=${{ !github.event.pull_request.head.repo.fork }}
+        build-args: |
+          BUILD_ID=${{ github.run_id }}
+          BUILD_IMAGE=${{ github.event_name == 'release' && github.ref_name || steps.meta.outputs.tags }}
+          BUILD_SOURCE_REF=${{ github.ref_name }}
+          BUILD_SOURCE_COMMIT=${{ github.sha }}
+          ${{ inputs.build-args }}
+
+    - name: Export digest
+      shell: bash
+      run: | # zizmor: ignore[template-injection]
+        mkdir -p ${{ runner.temp }}/digests
+        digest="${{ steps.build.outputs.digest }}"
+        touch "${{ runner.temp }}/digests/${digest#sha256:}"
+
+    - name: Upload digest
+      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+      with:
+        name: ${{ inputs.artifact-key-base }}-${{ steps.cache-target.outputs.cache-key-base }}
+        path: ${{ runner.temp }}/digests/*
+        if-no-files-found: error
+        retention-days: 1

.github/workflows/build-mobile.yml

@@ -35,12 +35,12 @@ jobs:
       should_run: ${{ steps.found_paths.outputs.mobile == 'true' || steps.should_force.outputs.should_force == 'true' }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       - id: found_paths
-        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3
+        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
         with:
           filters: |
             mobile:
@@ -61,19 +61,19 @@ jobs:
     runs-on: macos-14
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{ inputs.ref || github.sha }}
           persist-credentials: false
 
-      - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4
+      - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
         with:
           distribution: 'zulu'
           java-version: '17'
           cache: 'gradle'
 
       - name: Setup Flutter SDK
-        uses: subosito/flutter-action@e938fdf56512cc96ef2f93601a5a40bde3801046 # v2
+        uses: subosito/flutter-action@e938fdf56512cc96ef2f93601a5a40bde3801046 # v2.19.0
         with:
           channel: 'stable'
           flutter-version-file: ./mobile/pubspec.yaml
@@ -104,7 +104,7 @@ jobs:
           flutter build apk --release --split-per-abi --target-platform android-arm,android-arm64,android-x64
 
       - name: Publish Android Artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: release-apk-signed
           path: mobile/build/app/outputs/flutter-apk/*.apk

.github/workflows/cache-cleanup.yml

@@ -19,7 +19,7 @@ jobs:
       actions: write
     steps:
       - name: Check out code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 

.github/workflows/cli.yml

@@ -29,12 +29,12 @@ jobs:
         working-directory: ./cli
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       # Setup .npmrc file to publish to npm
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: './cli/.nvmrc'
           registry-url: 'https://registry.npmjs.org'
@@ -59,7 +59,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
@@ -70,7 +70,7 @@ jobs:
         uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
         if: ${{ !github.event.pull_request.head.repo.fork }}
         with:
           registry: ghcr.io
@@ -85,7 +85,7 @@ jobs:
 
       - name: Generate docker image tags
         id: metadata
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5
+        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
         with:
           flavor: |
             latest=false
@@ -96,7 +96,7 @@ jobs:
             type=raw,value=latest,enable=${{ github.event_name == 'release' }}
 
       - name: Build and push image
-        uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
+        uses: docker/build-push-action@1dc73863535b631f98b2378be8619f83b136f4a0 # v6.17.0
         with:
           file: cli/Dockerfile
           platforms: linux/amd64,linux/arm64

.github/workflows/codeql-analysis.yml

@@ -44,13 +44,13 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@45775bd8235c68ba998cffa5171334d58593da47 # v3
+        uses: github/codeql-action/init@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -63,7 +63,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@45775bd8235c68ba998cffa5171334d58593da47 # v3
+        uses: github/codeql-action/autobuild@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -76,6 +76,6 @@ jobs:
       #   ./location_of_script_within_repo/buildscript.sh
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@45775bd8235c68ba998cffa5171334d58593da47 # v3
+        uses: github/codeql-action/analyze@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
         with:
           category: '/language:${{matrix.language}}'

.github/workflows/docker.yml

@@ -24,11 +24,11 @@ jobs:
       should_run_ml: ${{ steps.found_paths.outputs.machine-learning == 'true' || steps.should_force.outputs.should_force == 'true' }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
       - id: found_paths
-        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3
+        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
         with:
           filters: |
             server:
@@ -40,6 +40,8 @@ jobs:
               - 'machine-learning/**'
             workflow:
               - '.github/workflows/docker.yml'
+              - '.github/workflows/multi-runner-build.yml'
+              - '.github/actions/image-build'
 
       - name: Check if we should force jobs to run
         id: should_force
@@ -58,7 +60,7 @@ jobs:
         suffix: ['', '-cuda', '-rocm', '-openvino', '-armnn', '-rknn']
     steps:
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -87,7 +89,7 @@ jobs:
         suffix: ['']
     steps:
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -103,429 +105,74 @@ jobs:
           docker buildx imagetools create -t "${REGISTRY_NAME}/${REPOSITORY}:${TAG_PR}" "${REGISTRY_NAME}/${REPOSITORY}:${TAG_OLD}"
           docker buildx imagetools create -t "${REGISTRY_NAME}/${REPOSITORY}:${TAG_COMMIT}" "${REGISTRY_NAME}/${REPOSITORY}:${TAG_OLD}"
 
-  build_and_push_ml:
+  machine-learning:
     name: Build and Push ML
     needs: pre-job
-    permissions:
-      contents: read
-      packages: write
     if: ${{ needs.pre-job.outputs.should_run_ml == 'true' }}
-    runs-on: ${{ matrix.runner }}
-    env:
-      image: immich-machine-learning
-      context: machine-learning
-      file: machine-learning/Dockerfile
-      GHCR_REPO: ghcr.io/${{ github.repository_owner }}/immich-machine-learning
     strategy:
-      # Prevent a failure in one image from stopping the other builds
       fail-fast: false
-      matrix:
-        include:
-          - platform: linux/amd64
-            runner: ubuntu-latest
-            device: cpu
-
-          - platform: linux/arm64
-            runner: ubuntu-24.04-arm
-            device: cpu
-
-          - platform: linux/amd64
-            runner: ubuntu-latest
-            device: cuda
-            suffix: -cuda
-
-          - platform: linux/amd64
-            runner: mich
-            device: rocm
-            suffix: -rocm
-
-          - platform: linux/amd64
-            runner: ubuntu-latest
-            device: openvino
-            suffix: -openvino
-
-          - platform: linux/arm64
-            runner: ubuntu-24.04-arm
-            device: armnn
-            suffix: -armnn
-
-          - platform: linux/arm64
-            runner: ubuntu-24.04-arm
-            device: rknn
-            suffix: -rknn
-
-    steps:
-      - name: Prepare
-        run: |
-          platform=${{ matrix.platform }}
-          echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV
-
-      - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
-        with:
-          persist-credentials: false
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
-
-      - name: Login to GitHub Container Registry
-        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
-        if: ${{ !github.event.pull_request.head.repo.fork }}
-        with:
-          registry: ghcr.io
-          username: ${{ github.repository_owner }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Generate cache key suffix
-        env:
-          REF: ${{ github.ref_name }}
-        run: |
-          if [[ "${{ github.event_name }}" == "pull_request" ]]; then
-            echo "CACHE_KEY_SUFFIX=pr-${{ github.event.number }}" >> $GITHUB_ENV
-          else
-            SUFFIX=$(echo "${REF}" | sed 's/[^a-zA-Z0-9]/-/g')
-            echo "CACHE_KEY_SUFFIX=${SUFFIX}" >> $GITHUB_ENV
-          fi
-
-      - name: Generate cache target
-        id: cache-target
-        run: |
-          if [[ "${{ github.event.pull_request.head.repo.fork }}" == "true" ]]; then
-            # Essentially just ignore the cache output (forks can't write to registry cache)
-            echo "cache-to=type=local,dest=/tmp/discard,ignore-error=true" >> $GITHUB_OUTPUT
-          else
-            echo "cache-to=type=registry,ref=${GHCR_REPO}-build-cache:${PLATFORM_PAIR}-${{ matrix.device }}-${CACHE_KEY_SUFFIX},mode=max,compression=zstd" >> $GITHUB_OUTPUT
-          fi
-
-      - name: Generate docker image tags
-        id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5
-        env:
-          DOCKER_METADATA_PR_HEAD_SHA: 'true'
-
-      - name: Build and push image
-        id: build
-        uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
-        with:
-          context: ${{ env.context }}
-          file: ${{ env.file }}
-          platforms: ${{ matrix.platforms }}
-          labels: ${{ steps.meta.outputs.labels }}
-          cache-to: ${{ steps.cache-target.outputs.cache-to }}
-          cache-from: |
-            type=registry,ref=${{ env.GHCR_REPO }}-build-cache:${{ env.PLATFORM_PAIR }}-${{ matrix.device }}-${{ env.CACHE_KEY_SUFFIX }}
-            type=registry,ref=${{ env.GHCR_REPO }}-build-cache:${{ env.PLATFORM_PAIR }}-${{ matrix.device }}-main
-          outputs: type=image,"name=${{ env.GHCR_REPO }}",push-by-digest=true,name-canonical=true,push=${{ !github.event.pull_request.head.repo.fork }}
-          build-args: |
-            DEVICE=${{ matrix.device }}
-            BUILD_ID=${{ github.run_id }}
-            BUILD_IMAGE=${{ github.event_name == 'release' && github.ref_name || steps.metadata.outputs.tags }}
-            BUILD_SOURCE_REF=${{ github.ref_name }}
-            BUILD_SOURCE_COMMIT=${{ github.sha }}
-
-      - name: Export digest
-        run: |
-          mkdir -p ${{ runner.temp }}/digests
-          digest="${{ steps.build.outputs.digest }}"
-          touch "${{ runner.temp }}/digests/${digest#sha256:}"
-
-      - name: Upload digest
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
-        with:
-          name: ml-digests-${{ matrix.device }}-${{ env.PLATFORM_PAIR }}
-          path: ${{ runner.temp }}/digests/*
-          if-no-files-found: error
-          retention-days: 1
-
-  merge_ml:
-    name: Merge & Push ML
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      actions: read
-      packages: write
-    if: ${{ needs.pre-job.outputs.should_run_ml == 'true' && !github.event.pull_request.head.repo.fork }}
-    env:
-      GHCR_REPO: ghcr.io/${{ github.repository_owner }}/immich-machine-learning
-      DOCKER_REPO: altran1502/immich-machine-learning
-    strategy:
       matrix:
         include:
           - device: cpu
+            tag-suffix: ''
           - device: cuda
-            suffix: -cuda
-          - device: rocm
-            suffix: -rocm
+            tag-suffix: '-cuda'
+            platforms: linux/amd64
           - device: openvino
-            suffix: -openvino
+            tag-suffix: '-openvino'
+            platforms: linux/amd64
           - device: armnn
-            suffix: -armnn
+            tag-suffix: '-armnn'
+            platforms: linux/arm64
           - device: rknn
-            suffix: -rknn
-    needs:
-      - build_and_push_ml
-    steps:
-      - name: Download digests
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
-        with:
-          path: ${{ runner.temp }}/digests
-          pattern: ml-digests-${{ matrix.device }}-*
-          merge-multiple: true
-
-      - name: Login to Docker Hub
-        if: ${{ github.event_name == 'release' }}
-        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Login to GHCR
-        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
-        with:
-          registry: ghcr.io
-          username: ${{ github.repository_owner }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3
-
-      - name: Generate docker image tags
-        id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5
-        env:
-          DOCKER_METADATA_PR_HEAD_SHA: 'true'
-        with:
-          flavor: |
-            # Disable latest tag
-            latest=false
-            suffix=${{ matrix.suffix }}
-          images: |
-            name=${{ env.GHCR_REPO }}
-            name=${{ env.DOCKER_REPO }},enable=${{ github.event_name == 'release' }}
-          tags: |
-            # Tag with branch name
-            type=ref,event=branch
-            # Tag with pr-number
-            type=ref,event=pr
-            # Tag with long commit sha hash
-            type=sha,format=long,prefix=commit-
-            # Tag with git tag on release
-            type=ref,event=tag
-            type=raw,value=release,enable=${{ github.event_name == 'release' }}
-
-      - name: Create manifest list and push
-        working-directory: ${{ runner.temp }}/digests
-        run: |
-          # Process annotations
-          declare -a ANNOTATIONS=()
-          if [[ -n "$DOCKER_METADATA_OUTPUT_JSON" ]]; then
-            while IFS= read -r annotation; do
-              # Extract key and value by removing the manifest: prefix
-              if [[ "$annotation" =~ ^manifest:(.+)=(.+)$ ]]; then
-                key="${BASH_REMATCH[1]}"
-                value="${BASH_REMATCH[2]}"
-                # Use array to properly handle arguments with spaces
-                ANNOTATIONS+=(--annotation "index:$key=$value")
-              fi
-            done < <(jq -r '.annotations[]' <<< "$DOCKER_METADATA_OUTPUT_JSON")
-          fi
-
-          TAGS=$(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
-          SOURCE_ARGS=$(printf "${GHCR_REPO}@sha256:%s " *)
-
-          docker buildx imagetools create $TAGS "${ANNOTATIONS[@]}" $SOURCE_ARGS
-
-  build_and_push_server:
-    name: Build and Push Server
-    runs-on: ${{ matrix.runner }}
-    permissions:
-      contents: read
-      packages: write
-    needs: pre-job
-    if: ${{ needs.pre-job.outputs.should_run_server == 'true' }}
-    env:
-      image: immich-server
-      context: .
-      file: server/Dockerfile
-      GHCR_REPO: ghcr.io/${{ github.repository_owner }}/immich-server
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - platform: linux/amd64
-            runner: ubuntu-latest
-          - platform: linux/arm64
-            runner: ubuntu-24.04-arm
-    steps:
-      - name: Prepare
-        run: |
-          platform=${{ matrix.platform }}
-          echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV
-
-      - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
-        with:
-          persist-credentials: false
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3
-
-      - name: Login to GitHub Container Registry
-        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
-        if: ${{ !github.event.pull_request.head.repo.fork }}
-        with:
-          registry: ghcr.io
-          username: ${{ github.repository_owner }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Generate cache key suffix
-        env:
-          REF: ${{ github.ref_name }}
-        run: |
-          if [[ "${{ github.event_name }}" == "pull_request" ]]; then
-            echo "CACHE_KEY_SUFFIX=pr-${{ github.event.number }}" >> $GITHUB_ENV
-          else
-            SUFFIX=$(echo "${REF}" | sed 's/[^a-zA-Z0-9]/-/g')
-            echo "CACHE_KEY_SUFFIX=${SUFFIX}" >> $GITHUB_ENV
-          fi
-
-      - name: Generate cache target
-        id: cache-target
-        run: |
-          if [[ "${{ github.event.pull_request.head.repo.fork }}" == "true" ]]; then
-            # Essentially just ignore the cache output (forks can't write to registry cache)
-            echo "cache-to=type=local,dest=/tmp/discard,ignore-error=true" >> $GITHUB_OUTPUT
-          else
-            echo "cache-to=type=registry,ref=${GHCR_REPO}-build-cache:${PLATFORM_PAIR}-${CACHE_KEY_SUFFIX},mode=max,compression=zstd" >> $GITHUB_OUTPUT
-          fi
-
-      - name: Generate docker image tags
-        id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5
-        env:
-          DOCKER_METADATA_PR_HEAD_SHA: 'true'
-
-      - name: Build and push image
-        id: build
-        uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
-        with:
-          context: ${{ env.context }}
-          file: ${{ env.file }}
-          platforms: ${{ matrix.platform }}
-          labels: ${{ steps.meta.outputs.labels }}
-          cache-to: ${{ steps.cache-target.outputs.cache-to }}
-          cache-from: |
-            type=registry,ref=${{ env.GHCR_REPO }}-build-cache:${{ env.PLATFORM_PAIR }}-${{ env.CACHE_KEY_SUFFIX }}
-            type=registry,ref=${{ env.GHCR_REPO }}-build-cache:${{ env.PLATFORM_PAIR }}-main
-          outputs: type=image,"name=${{ env.GHCR_REPO }}",push-by-digest=true,name-canonical=true,push=${{ !github.event.pull_request.head.repo.fork }}
-          build-args: |
-            DEVICE=cpu
-            BUILD_ID=${{ github.run_id }}
-            BUILD_IMAGE=${{ github.event_name == 'release' && github.ref_name || steps.metadata.outputs.tags }}
-            BUILD_SOURCE_REF=${{ github.ref_name }}
-            BUILD_SOURCE_COMMIT=${{ github.sha }}
-
-      - name: Export digest
-        run: |
-          mkdir -p ${{ runner.temp }}/digests
-          digest="${{ steps.build.outputs.digest }}"
-          touch "${{ runner.temp }}/digests/${digest#sha256:}"
-
-      - name: Upload digest
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
-        with:
-          name: server-digests-${{ env.PLATFORM_PAIR }}
-          path: ${{ runner.temp }}/digests/*
-          if-no-files-found: error
-          retention-days: 1
-
-  merge_server:
-    name: Merge & Push Server
-    runs-on: ubuntu-latest
+            tag-suffix: '-rknn'
+            platforms: linux/arm64
+          - device: rocm
+            tag-suffix: '-rocm'
+            platforms: linux/amd64
+            runner-mapping: '{"linux/amd64": "mich"}'
+    uses: ./.github/workflows/multi-runner-build.yml
     permissions:
       contents: read
       actions: read
       packages: write
-    if: ${{ needs.pre-job.outputs.should_run_server == 'true' && !github.event.pull_request.head.repo.fork }}
-    env:
-      GHCR_REPO: ghcr.io/${{ github.repository_owner }}/immich-server
-      DOCKER_REPO: altran1502/immich-server
-    needs:
-      - build_and_push_server
-    steps:
-      - name: Download digests
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
-        with:
-          path: ${{ runner.temp }}/digests
-          pattern: server-digests-*
-          merge-multiple: true
+    secrets:
+      DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
+      DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
+    with:
+      image: immich-machine-learning
+      context: machine-learning
+      dockerfile: machine-learning/Dockerfile
+      platforms: ${{ matrix.platforms }}
+      runner-mapping: ${{ matrix.runner-mapping }}
+      tag-suffix: ${{ matrix.tag-suffix }}
+      dockerhub-push: ${{ github.event_name == 'release' }}
+      build-args: |
+        DEVICE=${{ matrix.device }}
 
-      - name: Login to Docker Hub
-        if: ${{ github.event_name == 'release' }}
-        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Login to GHCR
-        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
-        with:
-          registry: ghcr.io
-          username: ${{ github.repository_owner }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3
-
-      - name: Generate docker image tags
-        id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5
-        env:
-          DOCKER_METADATA_PR_HEAD_SHA: 'true'
-        with:
-          flavor: |
-            # Disable latest tag
-            latest=false
-            suffix=${{ matrix.suffix }}
-          images: |
-            name=${{ env.GHCR_REPO }}
-            name=${{ env.DOCKER_REPO }},enable=${{ github.event_name == 'release' }}
-          tags: |
-            # Tag with branch name
-            type=ref,event=branch
-            # Tag with pr-number
-            type=ref,event=pr
-            # Tag with long commit sha hash
-            type=sha,format=long,prefix=commit-
-            # Tag with git tag on release
-            type=ref,event=tag
-            type=raw,value=release,enable=${{ github.event_name == 'release' }}
-
-      - name: Create manifest list and push
-        working-directory: ${{ runner.temp }}/digests
-        run: |
-          # Process annotations
-          declare -a ANNOTATIONS=()
-          if [[ -n "$DOCKER_METADATA_OUTPUT_JSON" ]]; then
-            while IFS= read -r annotation; do
-              # Extract key and value by removing the manifest: prefix
-              if [[ "$annotation" =~ ^manifest:(.+)=(.+)$ ]]; then
-                key="${BASH_REMATCH[1]}"
-                value="${BASH_REMATCH[2]}"
-                # Use array to properly handle arguments with spaces
-                ANNOTATIONS+=(--annotation "index:$key=$value")
-              fi
-            done < <(jq -r '.annotations[]' <<< "$DOCKER_METADATA_OUTPUT_JSON")
-          fi
-
-          TAGS=$(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
-          SOURCE_ARGS=$(printf "${GHCR_REPO}@sha256:%s " *)
-
-          docker buildx imagetools create $TAGS "${ANNOTATIONS[@]}" $SOURCE_ARGS
+  server:
+    name: Build and Push Server
+    needs: pre-job
+    if: ${{ needs.pre-job.outputs.should_run_server == 'true' }}
+    uses: ./.github/workflows/multi-runner-build.yml
+    permissions:
+      contents: read
+      actions: read
+      packages: write
+    secrets:
+      DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
+      DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
+    with:
+      image: immich-server
+      context: .
+      dockerfile: server/Dockerfile
+      dockerhub-push: ${{ github.event_name == 'release' }}
+      build-args: |
+        DEVICE=cpu
 
   success-check-server:
     name: Docker Build & Push Server Success
-    needs: [merge_server, retag_server]
+    needs: [server, retag_server]
     permissions: {}
     runs-on: ubuntu-latest
     if: always()
@@ -535,11 +182,12 @@ jobs:
         run: exit 1
       - name: All jobs passed or skipped
         if: ${{ !(contains(needs.*.result, 'failure')) }}
+        # zizmor: ignore[template-injection]
         run: echo "All jobs passed or skipped" && echo "${{ toJSON(needs.*.result) }}"
 
   success-check-ml:
     name: Docker Build & Push ML Success
-    needs: [merge_ml, retag_ml]
+    needs: [machine-learning, retag_ml]
     permissions: {}
     runs-on: ubuntu-latest
     if: always()
@@ -549,4 +197,5 @@ jobs:
         run: exit 1
       - name: All jobs passed or skipped
         if: ${{ !(contains(needs.*.result, 'failure')) }}
+        # zizmor: ignore[template-injection]
         run: echo "All jobs passed or skipped" && echo "${{ toJSON(needs.*.result) }}"

.github/workflows/docs-build.yml

@@ -21,11 +21,11 @@ jobs:
       should_run: ${{ steps.found_paths.outputs.docs == 'true' ||  steps.should_force.outputs.should_force == 'true' }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
       - id: found_paths
-        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3
+        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
         with:
           filters: |
             docs:
@@ -49,12 +49,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       - name: Setup Node
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: './docs/.nvmrc'
 
@@ -68,8 +68,9 @@ jobs:
         run: npm run build
 
       - name: Upload build output
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: docs-build-output
           path: docs/build/
+          include-hidden-files: true
           retention-days: 1

.github/workflows/docs-deploy.yml

@@ -1,6 +1,6 @@
 name: Docs deploy
 on:
-  workflow_run:
+  workflow_run: # zizmor: ignore[dangerous-triggers] no attacker inputs are used here
     workflows: ['Docs build']
     types:
       - completed
@@ -20,7 +20,7 @@ jobs:
         run: echo 'The triggering workflow did not succeed' && exit 1
       - name: Get artifact
         id: get-artifact
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           script: |
             let allArtifacts = await github.rest.actions.listWorkflowRunArtifacts({
@@ -38,7 +38,7 @@ jobs:
             return { found: true, id: matchArtifact.id };
       - name: Determine deploy parameters
         id: parameters
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         env:
           HEAD_SHA: ${{ github.event.workflow_run.head_sha }}
         with:
@@ -108,29 +108,29 @@ jobs:
     if: ${{ fromJson(needs.checks.outputs.artifact).found && fromJson(needs.checks.outputs.parameters).shouldDeploy }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       - name: Load parameters
         id: parameters
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        env:
+          PARAM_JSON: ${{ needs.checks.outputs.parameters }}
         with:
           script: |
-            const json = `${{ needs.checks.outputs.parameters }}`;
-            const parameters = JSON.parse(json);
+            const parameters = JSON.parse(process.env.PARAM_JSON);
             core.setOutput("event", parameters.event);
             core.setOutput("name", parameters.name);
             core.setOutput("shouldDeploy", parameters.shouldDeploy);
 
-      - run: |
-          echo "Starting docs deployment for ${{ steps.parameters.outputs.event }} ${{ steps.parameters.outputs.name }}"
-
       - name: Download artifact
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        env:
+          ARTIFACT_JSON: ${{ needs.checks.outputs.artifact }}
         with:
           script: |
-            let artifact = ${{ needs.checks.outputs.artifact }};
+            let artifact = JSON.parse(process.env.ARTIFACT_JSON);
             let download = await github.rest.actions.downloadArtifact({
                owner: context.repo.owner,
                repo: context.repo.repo,
@@ -150,7 +150,7 @@ jobs:
           CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           TF_STATE_POSTGRES_CONN_STR: ${{ secrets.TF_STATE_POSTGRES_CONN_STR }}
-        uses: gruntwork-io/terragrunt-action@9559e51d05873b0ea467c42bbabcb5c067642ccc # v2
+        uses: gruntwork-io/terragrunt-action@aee21a7df999be8b471c2a8564c6cd853cb674e1 # v2.1.8
         with:
           tg_version: '0.58.12'
           tofu_version: '1.7.1'
@@ -165,7 +165,7 @@ jobs:
           CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           TF_STATE_POSTGRES_CONN_STR: ${{ secrets.TF_STATE_POSTGRES_CONN_STR }}
-        uses: gruntwork-io/terragrunt-action@9559e51d05873b0ea467c42bbabcb5c067642ccc # v2
+        uses: gruntwork-io/terragrunt-action@aee21a7df999be8b471c2a8564c6cd853cb674e1 # v2.1.8
         with:
           tg_version: '0.58.12'
           tofu_version: '1.7.1'
@@ -181,7 +181,8 @@ jobs:
           echo "output=$CLEANED" >> $GITHUB_OUTPUT
 
       - name: Publish to Cloudflare Pages
-        uses: cloudflare/pages-action@f0a1cd58cd66095dee69bfa18fa5efd1dde93bca # v1
+        # TODO: Action is deprecated
+        uses: cloudflare/pages-action@f0a1cd58cd66095dee69bfa18fa5efd1dde93bca # v1.5.0
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN_PAGES_UPLOAD }}
           accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
@@ -198,7 +199,7 @@ jobs:
           CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           TF_STATE_POSTGRES_CONN_STR: ${{ secrets.TF_STATE_POSTGRES_CONN_STR }}
-        uses: gruntwork-io/terragrunt-action@9559e51d05873b0ea467c42bbabcb5c067642ccc # v2
+        uses: gruntwork-io/terragrunt-action@aee21a7df999be8b471c2a8564c6cd853cb674e1 # v2.1.8
         with:
           tg_version: '0.58.12'
           tofu_version: '1.7.1'
@@ -206,7 +207,7 @@ jobs:
           tg_command: 'apply'
 
       - name: Comment
-        uses: actions-cool/maintain-one-comment@4b2dbf086015f892dcb5e8c1106f5fccd6c1476b # v3
+        uses: actions-cool/maintain-one-comment@4b2dbf086015f892dcb5e8c1106f5fccd6c1476b # v3.2.0
         if: ${{ steps.parameters.outputs.event == 'pr' }}
         with:
           number: ${{ fromJson(needs.checks.outputs.parameters).pr_number }}

.github/workflows/docs-destroy.yml

@@ -1,6 +1,6 @@
 name: Docs destroy
 on:
-  pull_request_target:
+  pull_request_target: # zizmor: ignore[dangerous-triggers] no attacker inputs are used here
     types: [closed]
 
 permissions: {}
@@ -14,7 +14,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
@@ -25,7 +25,7 @@ jobs:
           CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           TF_STATE_POSTGRES_CONN_STR: ${{ secrets.TF_STATE_POSTGRES_CONN_STR }}
-        uses: gruntwork-io/terragrunt-action@9559e51d05873b0ea467c42bbabcb5c067642ccc # v2
+        uses: gruntwork-io/terragrunt-action@aee21a7df999be8b471c2a8564c6cd853cb674e1 # v2.1.8
         with:
           tg_version: '0.58.12'
           tofu_version: '1.7.1'
@@ -33,7 +33,7 @@ jobs:
           tg_command: 'destroy -refresh=false'
 
       - name: Comment
-        uses: actions-cool/maintain-one-comment@4b2dbf086015f892dcb5e8c1106f5fccd6c1476b # v3
+        uses: actions-cool/maintain-one-comment@4b2dbf086015f892dcb5e8c1106f5fccd6c1476b # v3.2.0
         with:
           number: ${{ github.event.number }}
           delete: true

.github/workflows/fix-format.yml

@@ -16,20 +16,20 @@ jobs:
     steps:
       - name: Generate a token
         id: generate-token
-        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2
+        uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2.0.6
         with:
           app-id: ${{ secrets.PUSH_O_MATIC_APP_ID }}
           private-key: ${{ secrets.PUSH_O_MATIC_APP_KEY }}
 
       - name: 'Checkout'
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{ github.event.pull_request.head.ref }}
           token: ${{ steps.generate-token.outputs.token }}
           persist-credentials: true
 
       - name: Setup Node
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: './server/.nvmrc'
 
@@ -37,13 +37,13 @@ jobs:
         run: make install-all && make format-all
 
       - name: Commit and push
-        uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9
+        uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9.1.4
         with:
           default_author: github_actions
           message: 'chore: fix formatting'
 
       - name: Remove label
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         if: always()
         with:
           script: |

.github/workflows/multi-runner-build.yml

@@ -0,0 +1,185 @@
+name: 'Multi-runner container image build'
+on:
+  workflow_call:
+    inputs:
+      image:
+        description: 'Name of the image'
+        type: string
+        required: true
+      context:
+        description: 'Path to build context'
+        type: string
+        required: true
+      dockerfile:
+        description: 'Path to Dockerfile'
+        type: string
+        required: true
+      tag-suffix:
+        description: 'Suffix to append to the image tag'
+        type: string
+        default: ''
+      dockerhub-push:
+        description: 'Push to Docker Hub'
+        type: boolean
+        default: false
+      build-args:
+        description: 'Docker build arguments'
+        type: string
+        required: false
+      platforms:
+        description: 'Platforms to build for'
+        type: string
+      runner-mapping:
+        description: 'Mapping from platforms to runners'
+        type: string
+    secrets:
+      DOCKERHUB_USERNAME:
+        required: false
+      DOCKERHUB_TOKEN:
+        required: false
+
+env:
+  GHCR_IMAGE: ghcr.io/${{ github.repository_owner }}/${{ inputs.image }}
+  DOCKERHUB_IMAGE: altran1502/${{ inputs.image }}
+
+jobs:
+  matrix:
+    name: 'Generate matrix'
+    runs-on: ubuntu-latest
+    outputs:
+      matrix: ${{ steps.matrix.outputs.matrix }}
+      key: ${{ steps.artifact-key.outputs.base }}
+    steps:
+      - name: Generate build matrix
+        id: matrix
+        shell: bash
+        env:
+          PLATFORMS: ${{ inputs.platforms || 'linux/amd64,linux/arm64' }}
+          RUNNER_MAPPING: ${{ inputs.runner-mapping || '{"linux/amd64":"ubuntu-latest","linux/arm64":"ubuntu-24.04-arm"}' }}
+        run: |
+          matrix=$(jq -R -c \
+            --argjson runner_mapping "${RUNNER_MAPPING}" \
+            'split(",") | map({platform: ., runner: $runner_mapping[.]})' \
+            <<< "${PLATFORMS}")
+          echo "${matrix}"
+          echo "matrix=${matrix}" >> $GITHUB_OUTPUT
+
+      - name: Determine artifact key
+        id: artifact-key
+        shell: bash
+        env:
+          IMAGE: ${{ inputs.image }}
+          SUFFIX: ${{ inputs.tag-suffix }}
+        run: |
+          if [[ -n "${SUFFIX}" ]]; then
+              base="${IMAGE}${SUFFIX}-digests"
+          else
+              base="${IMAGE}-digests"
+          fi
+          echo "${base}"
+          echo "base=${base}" >> $GITHUB_OUTPUT
+
+  build:
+    needs: matrix
+    runs-on: ${{ matrix.runner }}
+    permissions:
+      contents: read
+      packages: write
+    strategy:
+      fail-fast: false
+      matrix:
+        include: ${{ fromJson(needs.matrix.outputs.matrix) }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
+
+      - uses: ./.github/actions/image-build
+        with:
+          context: ${{ inputs.context }}
+          dockerfile: ${{ inputs.dockerfile }}
+          image: ${{ env.GHCR_IMAGE }}
+          ghcr-token: ${{ secrets.GITHUB_TOKEN }}
+          platform: ${{ matrix.platform }}
+          artifact-key-base: ${{ needs.matrix.outputs.key }}
+          build-args: ${{ inputs.build-args }}
+
+  merge:
+    needs: [matrix, build]
+    runs-on: ubuntu-latest
+    if: ${{ !github.event.pull_request.head.repo.fork }}
+    permissions:
+      contents: read
+      actions: read
+      packages: write
+    steps:
+      - name: Download digests
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          path: ${{ runner.temp }}/digests
+          pattern: ${{ needs.matrix.outputs.key }}-*
+          merge-multiple: true
+
+      - name: Login to Docker Hub
+        if: ${{ inputs.dockerhub-push }}
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Login to GHCR
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3
+
+      - name: Generate docker image tags
+        id: meta
+        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5
+        env:
+          DOCKER_METADATA_PR_HEAD_SHA: 'true'
+        with:
+          flavor: |
+            # Disable latest tag
+            latest=false
+            suffix=${{ inputs.tag-suffix }}
+          images: |
+            name=${{ env.GHCR_IMAGE }}
+            name=${{ env.DOCKERHUB_IMAGE }},enable=${{ inputs.dockerhub-push }}
+          tags: |
+            # Tag with branch name
+            type=ref,event=branch
+            # Tag with pr-number
+            type=ref,event=pr
+            # Tag with long commit sha hash
+            type=sha,format=long,prefix=commit-
+            # Tag with git tag on release
+            type=ref,event=tag
+            type=raw,value=release,enable=${{ github.event_name == 'release' }}
+
+      - name: Create manifest list and push
+        working-directory: ${{ runner.temp }}/digests
+        run: |
+          # Process annotations
+          declare -a ANNOTATIONS=()
+          if [[ -n "$DOCKER_METADATA_OUTPUT_JSON" ]]; then
+            while IFS= read -r annotation; do
+              # Extract key and value by removing the manifest: prefix
+              if [[ "$annotation" =~ ^manifest:(.+)=(.+)$ ]]; then
+                key="${BASH_REMATCH[1]}"
+                value="${BASH_REMATCH[2]}"
+                # Use array to properly handle arguments with spaces
+                ANNOTATIONS+=(--annotation "index:$key=$value")
+              fi
+            done < <(jq -r '.annotations[]' <<< "$DOCKER_METADATA_OUTPUT_JSON")
+          fi
+
+          TAGS=$(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
+          SOURCE_ARGS=$(printf "${GHCR_IMAGE}@sha256:%s " *)
+
+          docker buildx imagetools create $TAGS "${ANNOTATIONS[@]}" $SOURCE_ARGS

.github/workflows/pr-label-validation.yml

@@ -1,7 +1,7 @@
 name: PR Label Validation
 
 on:
-  pull_request_target:
+  pull_request_target: # zizmor: ignore[dangerous-triggers] no attacker inputs are used here
     types: [opened, labeled, unlabeled, synchronize]
 
 permissions: {}
@@ -14,7 +14,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Require PR to have a changelog label
-        uses: mheap/github-action-required-labels@388fd6af37b34cdfe5a23b37060e763217e58b03 # v5
+        uses: mheap/github-action-required-labels@388fd6af37b34cdfe5a23b37060e763217e58b03 # v5.5.0
         with:
           mode: exactly
           count: 1

.github/workflows/pr-labeler.yml

@@ -1,6 +1,6 @@
 name: 'Pull Request Labeler'
 on:
-  - pull_request_target
+  - pull_request_target # zizmor: ignore[dangerous-triggers] no attacker inputs are used here
 
 permissions: {}
 
@@ -11,4 +11,4 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5
+      - uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5.0.0

.github/workflows/prepare-release.yml

@@ -32,26 +32,29 @@ jobs:
     steps:
       - name: Generate a token
         id: generate-token
-        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2
+        uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2.0.6
         with:
           app-id: ${{ secrets.PUSH_O_MATIC_APP_ID }}
           private-key: ${{ secrets.PUSH_O_MATIC_APP_KEY }}
 
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           token: ${{ steps.generate-token.outputs.token }}
           persist-credentials: true
 
       - name: Install uv
-        uses: astral-sh/setup-uv@0c5e2b8115b80b4c7c5ddf6ffdd634974642d182 # v5
+        uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5.4.2
 
       - name: Bump version
-        run: misc/release/pump-version.sh -s "${{ inputs.serverBump }}" -m "${{ inputs.mobileBump }}"
+        env:
+          SERVER_BUMP: ${{ inputs.serverBump }}
+          MOBILE_BUMP: ${{ inputs.mobileBump }}
+        run: misc/release/pump-version.sh -s "${SERVER_BUMP}" -m "${MOBILE_BUMP}"
 
       - name: Commit and tag
         id: push-tag
-        uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9
+        uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9.1.4
         with:
           default_author: github_actions
           message: 'chore: version ${{ env.IMMICH_VERSION }}'
@@ -61,6 +64,8 @@ jobs:
   build_mobile:
     uses: ./.github/workflows/build-mobile.yml
     needs: bump_version
+    permissions:
+      contents: read
     secrets:
       KEY_JKS: ${{ secrets.KEY_JKS }}
       ALIAS: ${{ secrets.ALIAS }}
@@ -78,24 +83,24 @@ jobs:
     steps:
       - name: Generate a token
         id: generate-token
-        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2
+        uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2.0.6
         with:
           app-id: ${{ secrets.PUSH_O_MATIC_APP_ID }}
           private-key: ${{ secrets.PUSH_O_MATIC_APP_KEY }}
 
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           token: ${{ steps.generate-token.outputs.token }}
           persist-credentials: false
 
       - name: Download APK
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
           name: release-apk-signed
 
       - name: Create draft release
-        uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2
+        uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 # v2.2.2
         with:
           draft: true
           tag_name: ${{ env.IMMICH_VERSION }}

.github/workflows/preview-label.yaml

@@ -13,7 +13,7 @@ jobs:
     permissions:
       pull-requests: write
     steps:
-      - uses: mshick/add-pr-comment@b8f338c590a895d50bcbfa6c5859251edc8952fc # v2
+      - uses: mshick/add-pr-comment@b8f338c590a895d50bcbfa6c5859251edc8952fc # v2.8.2
         with:
           message-id: 'preview-status'
           message: 'Deploying preview environment to https://pr-${{ github.event.pull_request.number }}.preview.internal.immich.cloud/'
@@ -24,7 +24,7 @@ jobs:
     permissions:
       pull-requests: write
     steps:
-      - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
+      - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           script: |
             github.rest.issues.removeLabel({

.github/workflows/sdk.yml

@@ -16,12 +16,12 @@ jobs:
       run:
         working-directory: ./open-api/typescript-sdk
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       # Setup .npmrc file to publish to npm
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: './open-api/typescript-sdk/.nvmrc'
           registry-url: 'https://registry.npmjs.org'

.github/workflows/static_analysis.yml

@@ -20,11 +20,11 @@ jobs:
       should_run: ${{ steps.found_paths.outputs.mobile == 'true' || steps.should_force.outputs.should_force == 'true' }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
       - id: found_paths
-        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3
+        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
         with:
           filters: |
             mobile:
@@ -44,12 +44,12 @@ jobs:
       contents: read
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       - name: Setup Flutter SDK
-        uses: subosito/flutter-action@e938fdf56512cc96ef2f93601a5a40bde3801046 # v2
+        uses: subosito/flutter-action@e938fdf56512cc96ef2f93601a5a40bde3801046 # v2.19.0
         with:
           channel: 'stable'
           flutter-version-file: ./mobile/pubspec.yaml
@@ -67,7 +67,7 @@ jobs:
         working-directory: ./mobile
 
       - name: Find file changes
-        uses: tj-actions/verify-changed-files@a1c6acee9df209257a246f2cc6ae8cb6581c1edf # v20
+        uses: tj-actions/verify-changed-files@a1c6acee9df209257a246f2cc6ae8cb6581c1edf # v20.0.4
         id: verify-changed-files
         with:
           files: |
@@ -95,3 +95,30 @@ jobs:
       - name: Run dart custom_lint
         run: dart run custom_lint
         working-directory: ./mobile
+
+  zizmor:
+    name: zizmor
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+      contents: read
+      actions: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
+
+      - name: Install the latest version of uv
+        uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5.4.2
+
+      - name: Run zizmor 🌈
+        run: uvx zizmor --format=sarif . > results.sarif
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Upload SARIF file
+        uses: github/codeql-action/upload-sarif@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
+        with:
+          sarif_file: results.sarif
+          category: zizmor

.github/workflows/test.yml

@@ -17,6 +17,7 @@ jobs:
     permissions:
       contents: read
     outputs:
+      should_run_i18n: ${{ steps.found_paths.outputs.i18n == 'true' || steps.should_force.outputs.should_force == 'true' }}
       should_run_web: ${{ steps.found_paths.outputs.web == 'true' || steps.should_force.outputs.should_force == 'true' }}
       should_run_server: ${{ steps.found_paths.outputs.server == 'true' || steps.should_force.outputs.should_force == 'true' }}
       should_run_cli: ${{ steps.found_paths.outputs.cli == 'true' || steps.should_force.outputs.should_force == 'true' }}
@@ -28,14 +29,16 @@ jobs:
       should_run_.github: ${{ steps.found_paths.outputs['.github'] == 'true' || steps.should_force.outputs.should_force == 'true' }} # redundant to have should_force but if someone changes the trigger then this won't have to be changed
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       - id: found_paths
-        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3
+        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
         with:
           filters: |
+            i18n:
+              - 'i18n/**'
             web:
               - 'web/**'
               - 'i18n/**'
@@ -73,12 +76,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       - name: Setup Node
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: './server/.nvmrc'
 
@@ -114,12 +117,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       - name: Setup Node
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: './cli/.nvmrc'
 
@@ -159,12 +162,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       - name: Setup Node
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: './cli/.nvmrc'
 
@@ -184,11 +187,11 @@ jobs:
         run: npm run test:cov
         if: ${{ !cancelled() }}
 
-  web-unit-tests:
-    name: Test & Lint Web
+  web-lint:
+    name: Lint Web
     needs: pre-job
     if: ${{ needs.pre-job.outputs.should_run_web == 'true' }}
-    runs-on: ubuntu-latest
+    runs-on: mich
     permissions:
       contents: read
     defaults:
@@ -197,12 +200,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       - name: Setup Node
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: './web/.nvmrc'
 
@@ -214,7 +217,7 @@ jobs:
         run: npm ci
 
       - name: Run linter
-        run: npm run lint
+        run: npm run lint:p
         if: ${{ !cancelled() }}
 
       - name: Run formatter
@@ -225,6 +228,35 @@ jobs:
         run: npm run check:svelte
         if: ${{ !cancelled() }}
 
+  web-unit-tests:
+    name: Test Web
+    needs: pre-job
+    if: ${{ needs.pre-job.outputs.should_run_web == 'true' }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    defaults:
+      run:
+        working-directory: ./web
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
+
+      - name: Setup Node
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version-file: './web/.nvmrc'
+
+      - name: Run setup typescript-sdk
+        run: npm ci && npm run build
+        working-directory: ./open-api/typescript-sdk
+
+      - name: Run npm install
+        run: npm ci
+
       - name: Run tsc
         run: npm run check:typescript
         if: ${{ !cancelled() }}
@@ -233,6 +265,46 @@ jobs:
         run: npm run test:cov
         if: ${{ !cancelled() }}
 
+  i18n-tests:
+    name: Test i18n
+    needs: pre-job
+    if: ${{ needs.pre-job.outputs.should_run_i18n == 'true' }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
+
+      - name: Setup Node
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version-file: './web/.nvmrc'
+
+      - name: Install dependencies
+        run: npm --prefix=web ci
+
+      - name: Format
+        run: npm --prefix=web run format:i18n
+
+      - name: Find file changes
+        uses: tj-actions/verify-changed-files@a1c6acee9df209257a246f2cc6ae8cb6581c1edf # v20.0.4
+        id: verify-changed-files
+        with:
+          files: |
+            i18n/**
+
+      - name: Verify files have not changed
+        if: steps.verify-changed-files.outputs.files_changed == 'true'
+        env:
+          CHANGED_FILES: ${{ steps.verify-changed-files.outputs.changed_files }}
+        run: |
+          echo "ERROR: i18n files not up to date!"
+          echo "Changed files: ${CHANGED_FILES}"
+          exit 1
+
   e2e-tests-lint:
     name: End-to-End Lint
     needs: pre-job
@@ -246,12 +318,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       - name: Setup Node
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: './e2e/.nvmrc'
 
@@ -289,12 +361,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       - name: Setup Node
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: './server/.nvmrc'
 
@@ -309,22 +381,25 @@ jobs:
     name: End-to-End Tests (Server & CLI)
     needs: pre-job
     if: ${{ needs.pre-job.outputs.should_run_e2e_server_cli == 'true' }}
-    runs-on: mich
+    runs-on: ${{ matrix.runner }}
     permissions:
       contents: read
     defaults:
       run:
         working-directory: ./e2e
+    strategy:
+      matrix:
+        runner: [ubuntu-latest, ubuntu-24.04-arm]
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
           submodules: 'recursive'
 
       - name: Setup Node
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: './e2e/.nvmrc'
 
@@ -354,22 +429,25 @@ jobs:
     name: End-to-End Tests (Web)
     needs: pre-job
     if: ${{ needs.pre-job.outputs.should_run_e2e_web == 'true' }}
-    runs-on: mich
+    runs-on: ${{ matrix.runner }}
     permissions:
       contents: read
     defaults:
       run:
         working-directory: ./e2e
+    strategy:
+      matrix:
+        runner: [ubuntu-latest, ubuntu-24.04-arm]
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
           submodules: 'recursive'
 
       - name: Setup Node
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: './e2e/.nvmrc'
 
@@ -394,6 +472,21 @@ jobs:
         run: npx playwright test
         if: ${{ !cancelled() }}
 
+  success-check-e2e:
+    name: End-to-End Tests Success
+    needs: [e2e-tests-server-cli, e2e-tests-web]
+    permissions: {}
+    runs-on: ubuntu-latest
+    if: always()
+    steps:
+      - name: Any jobs failed?
+        if: ${{ contains(needs.*.result, 'failure') }}
+        run: exit 1
+      - name: All jobs passed or skipped
+        if: ${{ !(contains(needs.*.result, 'failure')) }}
+        # zizmor: ignore[template-injection]
+        run: echo "All jobs passed or skipped" && echo "${{ toJSON(needs.*.result) }}"
+
   mobile-unit-tests:
     name: Unit Test Mobile
     needs: pre-job
@@ -402,12 +495,12 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       - name: Setup Flutter SDK
-        uses: subosito/flutter-action@e938fdf56512cc96ef2f93601a5a40bde3801046 # v2
+        uses: subosito/flutter-action@e938fdf56512cc96ef2f93601a5a40bde3801046 # v2.19.0
         with:
           channel: 'stable'
           flutter-version-file: ./mobile/pubspec.yaml
@@ -426,13 +519,13 @@ jobs:
       run:
         working-directory: ./machine-learning
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@0c5e2b8115b80b4c7c5ddf6ffdd634974642d182 # v5
-      - uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # v5
+        uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5.4.2
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
         # TODO: add caching when supported (https://github.com/actions/setup-python/pull/818)
         # with:
         #   python-version: 3.11
@@ -466,12 +559,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       - name: Setup Node
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: './.github/.nvmrc'
 
@@ -488,7 +581,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
@@ -507,12 +600,12 @@ jobs:
       contents: read
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       - name: Setup Node
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: './server/.nvmrc'
 
@@ -526,7 +619,7 @@ jobs:
         run: make open-api
 
       - name: Find file changes
-        uses: tj-actions/verify-changed-files@a1c6acee9df209257a246f2cc6ae8cb6581c1edf # v20
+        uses: tj-actions/verify-changed-files@a1c6acee9df209257a246f2cc6ae8cb6581c1edf # v20.0.4
         id: verify-changed-files
         with:
           files: |
@@ -543,14 +636,14 @@ jobs:
           echo "Changed files: ${CHANGED_FILES}"
           exit 1
 
-  generated-typeorm-migrations-up-to-date:
-    name: TypeORM Checks
+  sql-schema-up-to-date:
+    name: SQL Schema Checks
     runs-on: ubuntu-latest
     permissions:
       contents: read
     services:
       postgres:
-        image: tensorchord/pgvecto-rs:pg14-v0.2.0@sha256:739cdd626151ff1f796dc95a6591b55a714f341c737e27f045019ceabf8e8c52
+        image: ghcr.io/immich-app/postgres:14-vectorchord0.3.0@sha256:14bec5d02e8704081eafd566029204a4eb6bb75f3056cfb34e81c5ab1657a490
         env:
           POSTGRES_PASSWORD: postgres
           POSTGRES_USER: postgres
@@ -568,12 +661,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
       - name: Setup Node
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: './server/.nvmrc'
 
@@ -591,10 +684,10 @@ jobs:
 
       - name: Generate new migrations
         continue-on-error: true
-        run: npm run migrations:generate TestMigration
+        run: npm run migrations:generate src/TestMigration
 
       - name: Find file changes
-        uses: tj-actions/verify-changed-files@a1c6acee9df209257a246f2cc6ae8cb6581c1edf # v20
+        uses: tj-actions/verify-changed-files@a1c6acee9df209257a246f2cc6ae8cb6581c1edf # v20.0.4
         id: verify-changed-files
         with:
           files: |
@@ -615,7 +708,7 @@ jobs:
           DB_URL: postgres://postgres:postgres@localhost:5432/immich
 
       - name: Find file changes
-        uses: tj-actions/verify-changed-files@a1c6acee9df209257a246f2cc6ae8cb6581c1edf # v20
+        uses: tj-actions/verify-changed-files@a1c6acee9df209257a246f2cc6ae8cb6581c1edf # v20.0.4
         id: verify-changed-sql-files
         with:
           files: |

.github/workflows/weblate-lock.yml

@@ -15,11 +15,11 @@ jobs:
       should_run: ${{ steps.found_paths.outputs.i18n == 'true' && github.head_ref != 'chore/translations'}}
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
       - id: found_paths
-        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3
+        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
         with:
           filters: |
             i18n:
@@ -38,7 +38,7 @@ jobs:
             exit 1
           fi
       - name: Find Pull Request
-        uses: juliangruber/find-pull-request-action@48b6133aa6c826f267ebd33aa2d29470f9d9e7d0 # v1
+        uses: juliangruber/find-pull-request-action@48b6133aa6c826f267ebd33aa2d29470f9d9e7d0 # v1.9.0
         id: find-pr
         with:
           branch: chore/translations
@@ -57,4 +57,5 @@ jobs:
         run: exit 1
       - name: All jobs passed or skipped
         if: ${{ !(contains(needs.*.result, 'failure')) }}
+        # zizmor: ignore[template-injection]
         run: echo "All jobs passed or skipped" && echo "${{ toJSON(needs.*.result) }}"

.vscode/settings.json

@@ -1,45 +1,63 @@
 {
-  "editor.formatOnSave": true,
-  "[javascript]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode",
-    "editor.tabSize": 2,
-    "editor.formatOnSave": true
-  },
-  "[typescript]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode",
-    "editor.tabSize": 2,
-    "editor.formatOnSave": true
-  },
   "[css]": {
     "editor.defaultFormatter": "esbenp.prettier-vscode",
-    "editor.tabSize": 2,
-    "editor.formatOnSave": true
-  },
-  "[svelte]": {
-    "editor.defaultFormatter": "svelte.svelte-vscode",
+    "editor.formatOnSave": true,
     "editor.tabSize": 2
   },
-  "svelte.enable-ts-plugin": true,
-  "eslint.validate": [
-    "javascript",
-    "svelte"
-  ],
-  "typescript.preferences.importModuleSpecifier": "non-relative",
   "[dart]": {
+    "editor.defaultFormatter": "Dart-Code.dart-code",
     "editor.formatOnSave": true,
     "editor.selectionHighlight": false,
     "editor.suggest.snippetsPreventQuickSuggestions": false,
     "editor.suggestSelection": "first",
     "editor.tabCompletion": "onlySnippets",
-    "editor.wordBasedSuggestions": "off",
-    "editor.defaultFormatter": "Dart-Code.dart-code"
+    "editor.wordBasedSuggestions": "off"
   },
-  "cSpell.words": [
-    "immich"
-  ],
+  "[javascript]": {
+    "editor.codeActionsOnSave": {
+      "source.organizeImports": "explicit",
+      "source.removeUnusedImports": "explicit"
+    },
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "editor.formatOnSave": true,
+    "editor.tabSize": 2
+  },
+  "[json]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "editor.formatOnSave": true,
+    "editor.tabSize": 2
+  },
+  "[jsonc]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "editor.formatOnSave": true,
+    "editor.tabSize": 2
+  },
+  "[svelte]": {
+    "editor.codeActionsOnSave": {
+      "source.organizeImports": "explicit",
+      "source.removeUnusedImports": "explicit"
+    },
+    "editor.defaultFormatter": "svelte.svelte-vscode",
+    "editor.formatOnSave": true,
+    "editor.tabSize": 2
+  },
+  "[typescript]": {
+    "editor.codeActionsOnSave": {
+      "source.organizeImports": "explicit",
+      "source.removeUnusedImports": "explicit"
+    },
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "editor.formatOnSave": true,
+    "editor.tabSize": 2
+  },
+  "cSpell.words": ["immich"],
+  "editor.formatOnSave": true,
+  "eslint.validate": ["javascript", "svelte"],
   "explorer.fileNesting.enabled": true,
   "explorer.fileNesting.patterns": {
-    "*.ts": "${capture}.spec.ts,${capture}.mock.ts",
-    "*.dart": "${capture}.g.dart,${capture}.gr.dart,${capture}.drift.dart"
-  }
-}
+    "*.dart": "${capture}.g.dart,${capture}.gr.dart,${capture}.drift.dart",
+    "*.ts": "${capture}.spec.ts,${capture}.mock.ts"
+  },
+  "svelte.enable-ts-plugin": true,
+  "typescript.preferences.importModuleSpecifier": "non-relative"
+}

Makefile

@@ -17,6 +17,9 @@ e2e:
 prod:
 	docker compose -f ./docker/docker-compose.prod.yml up --build -V --remove-orphans
 
+prod-down:
+	docker compose -f ./docker/docker-compose.prod.yml down --remove-orphans
+
 prod-scale:
 	docker compose -f ./docker/docker-compose.prod.yml up --build -V --scale immich-server=3 --scale immich-microservices=3 --remove-orphans
 

cli/.nvmrc

@@ -1 +1 @@
-22.14.0
+22.15.1

cli/Dockerfile

@@ -1,4 +1,4 @@
-FROM node:22.14.0-alpine3.20@sha256:40be979442621049f40b1d51a26b55e281246b5de4e5f51a18da7beb6e17e3f9 AS core
+FROM node:22.15.0-alpine3.20@sha256:686b8892b69879ef5bfd6047589666933508f9a5451c67320df3070ba0e9807b AS core
 
 WORKDIR /usr/src/open-api/typescript-sdk
 COPY open-api/typescript-sdk/package*.json open-api/typescript-sdk/tsconfig*.json ./

cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@immich/cli",
-  "version": "2.2.61",
+  "version": "2.2.66",
   "description": "Command Line Interface (CLI) for Immich",
   "type": "module",
   "exports": "./dist/index.js",
@@ -21,7 +21,7 @@
     "@types/lodash-es": "^4.17.12",
     "@types/micromatch": "^4.0.9",
     "@types/mock-fs": "^4.13.1",
-    "@types/node": "^22.14.0",
+    "@types/node": "^22.15.18",
     "@vitest/coverage-v8": "^3.0.0",
     "byte-size": "^9.0.0",
     "cli-progress": "^3.12.0",
@@ -69,6 +69,6 @@
     "micromatch": "^4.0.8"
   },
   "volta": {
-    "node": "22.14.0"
+    "node": "22.15.1"
   }
 }

docker/docker-compose.dev.yml

@@ -116,13 +116,13 @@ services:
 
   redis:
     container_name: immich_redis
-    image: docker.io/valkey/valkey:8-bookworm@sha256:42cba146593a5ea9a622002c1b7cba5da7be248650cbb64ecb9c6c33d29794b1
+    image: docker.io/valkey/valkey:8-bookworm@sha256:ff21bc0f8194dc9c105b769aeabf9585fea6a8ed649c0781caeac5cb3c247884
     healthcheck:
       test: redis-cli ping || exit 1
 
   database:
     container_name: immich_postgres
-    image: tensorchord/pgvecto-rs:pg14-v0.2.0@sha256:739cdd626151ff1f796dc95a6591b55a714f341c737e27f045019ceabf8e8c52
+    image: ghcr.io/immich-app/postgres:14-vectorchord0.3.0-pgvectors0.2.0
     env_file:
       - .env
     environment:
@@ -134,24 +134,6 @@ services:
       - ${UPLOAD_LOCATION}/postgres:/var/lib/postgresql/data
     ports:
       - 5432:5432
-    healthcheck:
-      test: >-
-        pg_isready --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" || exit 1;
-        Chksum="$$(psql --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" --tuples-only --no-align
-        --command='SELECT COALESCE(SUM(checksum_failures), 0) FROM pg_stat_database')";
-        echo "checksum failure count is $$Chksum";
-        [ "$$Chksum" = '0' ] || exit 1
-      interval: 5m
-      start_interval: 30s
-      start_period: 5m
-    command: >-
-      postgres
-      -c shared_preload_libraries=vectors.so
-      -c 'search_path="$$user", public, vectors'
-      -c logging_collector=on
-      -c max_wal_size=2GB
-      -c shared_buffers=512MB
-      -c wal_compression=on
 
   # set IMMICH_TELEMETRY_INCLUDE=all in .env to enable metrics
   # immich-prometheus:

docker/docker-compose.prod.yml

@@ -56,14 +56,14 @@ services:
 
   redis:
     container_name: immich_redis
-    image: docker.io/valkey/valkey:8-bookworm@sha256:42cba146593a5ea9a622002c1b7cba5da7be248650cbb64ecb9c6c33d29794b1
+    image: docker.io/valkey/valkey:8-bookworm@sha256:ff21bc0f8194dc9c105b769aeabf9585fea6a8ed649c0781caeac5cb3c247884
     healthcheck:
       test: redis-cli ping || exit 1
     restart: always
 
   database:
     container_name: immich_postgres
-    image: tensorchord/pgvecto-rs:pg14-v0.2.0@sha256:739cdd626151ff1f796dc95a6591b55a714f341c737e27f045019ceabf8e8c52
+    image: ghcr.io/immich-app/postgres:14-vectorchord0.3.0-pgvectors0.2.0
     env_file:
       - .env
     environment:
@@ -75,14 +75,6 @@ services:
       - ${UPLOAD_LOCATION}/postgres:/var/lib/postgresql/data
     ports:
       - 5432:5432
-    healthcheck:
-      test: >-
-        pg_isready --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" || exit 1; Chksum="$$(psql --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" --tuples-only --no-align --command='SELECT COALESCE(SUM(checksum_failures), 0) FROM pg_stat_database')"; echo "checksum failure count is $$Chksum"; [ "$$Chksum" = '0' ] || exit 1
-      interval: 5m
-      start_interval: 30s
-      start_period: 5m
-    command: >-
-      postgres -c shared_preload_libraries=vectors.so -c 'search_path="$$user", public, vectors' -c logging_collector=on -c max_wal_size=2GB -c shared_buffers=512MB -c wal_compression=on
     restart: always
 
   # set IMMICH_TELEMETRY_INCLUDE=all in .env to enable metrics
@@ -90,7 +82,7 @@ services:
     container_name: immich_prometheus
     ports:
       - 9090:9090
-    image: prom/prometheus@sha256:502ad90314c7485892ce696cb14a99fceab9fc27af29f4b427f41bd39701a199
+    image: prom/prometheus@sha256:78ed1f9050eb9eaf766af6e580230b1c4965728650e332cd1ee918c0c4699775
     volumes:
       - ./prometheus.yml:/etc/prometheus/prometheus.yml
       - prometheus-data:/prometheus
@@ -102,7 +94,7 @@ services:
     command: [ './run.sh', '-disable-reporting' ]
     ports:
       - 3000:3000
-    image: grafana/grafana:11.6.0-ubuntu@sha256:fd8fa48213c624e1a95122f1d93abbf1cf1cbe85fc73212c1e599dbd76c63ff8
+    image: grafana/grafana:11.6.1-ubuntu@sha256:6fc273288470ef499dd3c6b36aeade093170d4f608f864c5dd3a7fabeae77b50
     volumes:
       - grafana-data:/var/lib/grafana
 

docker/docker-compose.yml

@@ -49,30 +49,24 @@ services:
 
   redis:
     container_name: immich_redis
-    image: docker.io/valkey/valkey:8-bookworm@sha256:42cba146593a5ea9a622002c1b7cba5da7be248650cbb64ecb9c6c33d29794b1
+    image: docker.io/valkey/valkey:8-bookworm@sha256:ff21bc0f8194dc9c105b769aeabf9585fea6a8ed649c0781caeac5cb3c247884
     healthcheck:
       test: redis-cli ping || exit 1
     restart: always
 
   database:
     container_name: immich_postgres
-    image: docker.io/tensorchord/pgvecto-rs:pg14-v0.2.0@sha256:739cdd626151ff1f796dc95a6591b55a714f341c737e27f045019ceabf8e8c52
+    image: ghcr.io/immich-app/postgres:14-vectorchord0.3.0-pgvectors0.2.0
     environment:
       POSTGRES_PASSWORD: ${DB_PASSWORD}
       POSTGRES_USER: ${DB_USERNAME}
       POSTGRES_DB: ${DB_DATABASE_NAME}
       POSTGRES_INITDB_ARGS: '--data-checksums'
+      # Uncomment the DB_STORAGE_TYPE: 'HDD' var if your database isn't stored on SSDs
+      # DB_STORAGE_TYPE: 'HDD'
     volumes:
       # Do not edit the next line. If you want to change the database storage location on your system, edit the value of DB_DATA_LOCATION in the .env file
       - ${DB_DATA_LOCATION}:/var/lib/postgresql/data
-    healthcheck:
-      test: >-
-        pg_isready --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" || exit 1; Chksum="$$(psql --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" --tuples-only --no-align --command='SELECT COALESCE(SUM(checksum_failures), 0) FROM pg_stat_database')"; echo "checksum failure count is $$Chksum"; [ "$$Chksum" = '0' ] || exit 1
-      interval: 5m
-      start_interval: 30s
-      start_period: 5m
-    command: >-
-      postgres -c shared_preload_libraries=vectors.so -c 'search_path="$$user", public, vectors' -c logging_collector=on -c max_wal_size=2GB -c shared_buffers=512MB -c wal_compression=on
     restart: always
 
 volumes:

docs/.nvmrc

@@ -1 +1 @@
-22.14.0
+22.15.1

docs/docs/administration/backup-and-restore.md

@@ -23,23 +23,32 @@ Refer to the official [postgres documentation](https://www.postgresql.org/docs/c
 It is not recommended to directly backup the `DB_DATA_LOCATION` folder. Doing so while the database is running can lead to a corrupted backup that cannot be restored.
 :::
 
-### Automatic Database Backups
+### Automatic Database Dumps
 
-For convenience, Immich will automatically create database backups by default. The backups are stored in `UPLOAD_LOCATION/backups`.  
-As mentioned above, you should make your own backup of these together with the asset folders as noted below.  
-You can adjust the schedule and amount of kept backups in the [admin settings](http://my.immich.app/admin/system-settings?isOpen=backup).  
-By default, Immich will keep the last 14 backups and create a new backup every day at 2:00 AM.
+:::warning
+The automatic database dumps can be used to restore the database in the event of damage to the Postgres database files.
+There is no monitoring for these dumps and you will not be notified if they are unsuccessful.
+:::
 
-#### Trigger Backup
+:::caution
+The database dumps do **NOT** contain any pictures or videos, only metadata. They are only usable with a copy of the other files in `UPLOAD_LOCATION` as outlined below.
+:::
 
-You are able to trigger a backup in the [admin job status page](http://my.immich.app/admin/jobs-status).
-Visit the page, open the "Create job" modal from the top right, select "Backup Database" and click "Confirm".
-A job will run and trigger a backup, you can verify this worked correctly by checking the logs or the backup folder.
-This backup will count towards the last X backups that will be kept based on your settings.
+For disaster-recovery purposes, Immich will automatically create database dumps. The dumps are stored in `UPLOAD_LOCATION/backups`.
+Please be sure to make your own, independent backup of the database together with the asset folders as noted below.
+You can adjust the schedule and amount of kept database dumps in the [admin settings](http://my.immich.app/admin/system-settings?isOpen=backup).
+By default, Immich will keep the last 14 database dumps and create a new dump every day at 2:00 AM.
+
+#### Trigger Dump
+
+You are able to trigger a database dump in the [admin job status page](http://my.immich.app/admin/jobs-status).
+Visit the page, open the "Create job" modal from the top right, select "Create Database Dump" and click "Confirm".
+A job will run and trigger a dump, you can verify this worked correctly by checking the logs or the `backups/` folder.
+This dumps will count towards the last `X` dumps that will be kept based on your settings.
 
 #### Restoring
 
-We hope to make restoring simpler in future versions, for now you can find the backups in the `UPLOAD_LOCATION/backups` folder on your host.  
+We hope to make restoring simpler in future versions, for now you can find the database dumps in the `UPLOAD_LOCATION/backups` folder on your host.
 Then please follow the steps in the following section for restoring the database.
 
 ### Manual Backup and Restore

docs/docs/administration/postgres-standalone.md

@@ -10,12 +10,16 @@ Running with a pre-existing Postgres server can unlock powerful administrative f
 
 ## Prerequisites
 
-You must install pgvecto.rs into your instance of Postgres using their [instructions][vectors-install]. After installation, add `shared_preload_libraries = 'vectors.so'` to your `postgresql.conf`. If you already have some `shared_preload_libraries` set, you can separate each extension with a comma. For example, `shared_preload_libraries = 'pg_stat_statements, vectors.so'`.
+You must install `pgvector` (`>= 0.7.0, < 1.0.0`), as it is a prerequisite for `vchord`.
+The easiest way to do this on Debian/Ubuntu is by adding the [PostgreSQL Apt repository][pg-apt] and then
+running `apt install postgresql-NN-pgvector`, where `NN` is your Postgres version (e.g., `16`).
+
+You must install VectorChord into your instance of Postgres using their [instructions][vchord-install]. After installation, add `shared_preload_libraries = 'vchord.so'` to your `postgresql.conf`. If you already have some `shared_preload_libraries` set, you can separate each extension with a comma. For example, `shared_preload_libraries = 'pg_stat_statements, vchord.so'`.
 
 :::note
-Immich is known to work with Postgres versions 14, 15, and 16. Earlier versions are unsupported. Postgres 17 is nominally compatible, but pgvecto.rs does not have prebuilt images or packages for it as of writing.
+Immich is known to work with Postgres versions `>= 14, < 18`.
 
-Make sure the installed version of pgvecto.rs is compatible with your version of Immich. The current accepted range for pgvecto.rs is `>= 0.2.0, < 0.4.0`.
+Make sure the installed version of VectorChord is compatible with your version of Immich. The current accepted range for VectorChord is `>= 0.3.0, < 0.4.0`.
 :::
 
 ## Specifying the connection URL
@@ -53,16 +57,77 @@ CREATE DATABASE <immichdatabasename>;
 \c <immichdatabasename>
 BEGIN;
 ALTER DATABASE <immichdatabasename> OWNER TO <immichdbusername>;
-CREATE EXTENSION vectors;
+CREATE EXTENSION vchord CASCADE;
 CREATE EXTENSION earthdistance CASCADE;
-ALTER DATABASE <immichdatabasename> SET search_path TO "$user", public, vectors;
-ALTER SCHEMA vectors OWNER TO <immichdbusername>;
 COMMIT;
 ```
 
-### Updating pgvecto.rs
+### Updating VectorChord
 
-When installing a new version of pgvecto.rs, you will need to manually update the extension by connecting to the Immich database and running `ALTER EXTENSION vectors UPDATE;`.
+When installing a new version of VectorChord, you will need to manually update the extension by connecting to the Immich database and running `ALTER EXTENSION vchord UPDATE;`.
+
+## Migrating to VectorChord
+
+VectorChord is the successor extension to pgvecto.rs, allowing for higher performance, lower memory usage and higher quality results for smart search and facial recognition.
+
+### Migrating from pgvecto.rs
+
+Support for pgvecto.rs will be dropped in a later release, hence we recommend all users currently using pgvecto.rs to migrate to VectorChord at their convenience. There are two primary approaches to do so.
+
+The easiest option is to have both extensions installed during the migration:
+
+1. Ensure you still have pgvecto.rs installed
+2. Install `pgvector` (`>= 0.7.0, < 1.0.0`). The easiest way to do this is on Debian/Ubuntu by adding the [PostgreSQL Apt repository][pg-apt] and then running `apt install postgresql-NN-pgvector`, where `NN` is your Postgres version (e.g., `16`)
+3. [Install VectorChord][vchord-install]
+4. Add `shared_preload_libraries= 'vchord.so, vectors.so'` to your `postgresql.conf`, making sure to include _both_ `vchord.so` and `vectors.so`. You may include other libraries here as well if needed
+5. If Immich does not have superuser permissions, run the SQL command `CREATE EXTENSION vchord CASCADE;` using psql or your choice of database client
+6. Start Immich and wait for the logs `Reindexed face_index` and `Reindexed clip_index` to be output
+7. If Immich does not have superuser permissions, run the SQL command `DROP EXTENSION vectors;`
+8. Remove the `vectors.so` entry from the `shared_preload_libraries` setting
+9. Uninstall pgvecto.rs (e.g. `apt-get purge vectors-pg14` on Debian-based environments, replacing `pg14` as appropriate). `pgvector` must remain install as it provides the data types used by `vchord`
+
+If it is not possible to have both VectorChord and pgvecto.rs installed at the same time, you can perform the migration with more manual steps:
+
+1. While pgvecto.rs is still installed, run the following SQL command using psql or your choice of database client. Take note of the number outputted by this command as you will need it later
+
+```sql
+SELECT atttypmod as dimsize
+    FROM pg_attribute f
+    JOIN pg_class c ON c.oid = f.attrelid
+    WHERE c.relkind = 'r'::char
+    AND f.attnum > 0
+    AND c.relname = 'smart_search'::text
+    AND f.attname = 'embedding'::text;
+```
+
+2. Remove references to pgvecto.rs using the below SQL commands
+
+```sql
+DROP INDEX IF EXISTS clip_index;
+DROP INDEX IF EXISTS face_index;
+ALTER TABLE smart_search ALTER COLUMN embedding SET DATA TYPE real[];
+ALTER TABLE face_search ALTER COLUMN embedding SET DATA TYPE real[];
+```
+
+3. [Install VectorChord][vchord-install]
+4. Change the columns back to the appropriate vector types, replacing `<number>` with the number from step 1
+
+```sql
+CREATE EXTENSION IF NOT EXISTS vchord CASCADE;
+ALTER TABLE smart_search ALTER COLUMN embedding SET DATA TYPE vector(<number>);
+ALTER TABLE face_search ALTER COLUMN embedding SET DATA TYPE vector(512);
+```
+
+5. Start Immich and let it create new indices using VectorChord
+
+### Migrating from pgvector
+
+1. Ensure you have at least 0.7.0 of pgvector installed. If it is below that, please upgrade it and run the SQL command `ALTER EXTENSION vector UPDATE;` using psql or your choice of database client
+2. Follow the Prerequisites to install VectorChord
+3. If Immich does not have superuser permissions, run the SQL command `CREATE EXTENSION vchord CASCADE;`
+4. Start Immich and let it create new indices using VectorChord
+
+Note that VectorChord itself uses pgvector types, so you should not uninstall pgvector after following these steps.
 
 ### Common errors
 
@@ -70,4 +135,5 @@ When installing a new version of pgvecto.rs, you will need to manually update th
 
 If you get the error `driverError: error: permission denied for view pg_vector_index_stat`, you can fix this by connecting to the Immich database and running `GRANT SELECT ON TABLE pg_vector_index_stat TO <immichdbusername>;`.
 
-[vectors-install]: https://docs.vectorchord.ai/getting-started/installation.html
+[vchord-install]: https://docs.vectorchord.ai/vectorchord/getting-started/installation.html
+[pg-apt]: https://www.postgresql.org/download/linux/#generic

docs/docs/administration/reverse-proxy.md

@@ -22,7 +22,7 @@ server {
     client_max_body_size 50000M;
 
     # Set headers
-    proxy_set_header Host              $http_host;
+    proxy_set_header Host              $host;
     proxy_set_header X-Real-IP         $remote_addr;
     proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
     proxy_set_header X-Forwarded-Proto $scheme;

docs/docs/developer/setup.md

@@ -75,11 +75,12 @@ npm run dev
 To see local changes to `@immich/ui` in Immich, do the following:
 
 1. Install `@immich/ui` as a sibling to `immich/`, for example `/home/user/immich` and `/home/user/ui`
-1. Build the `@immich/ui` project via `npm run build`
-1. Uncomment the corresponding volume in web service of the `docker/docker-compose.dev.yaml` file (`../../ui:/usr/ui`)
-1. Uncomment the corresponding alias in the `web/vite.config.js` file (`'@immich/ui': path.resolve(\_\_dirname, '../../ui')`)
-1. Start up the stack via `make dev`
-1. After making changes in `@immich/ui`, rebuild it (`npm run build`)
+2. Build the `@immich/ui` project via `npm run build`
+3. Uncomment the corresponding volume in web service of the `docker/docker-compose.dev.yaml` file (`../../ui:/usr/ui`)
+4. Uncomment the corresponding alias in the `web/vite.config.js` file (`'@immich/ui': path.resolve(\_\_dirname, '../../ui')`)
+5. Uncomment the import statement in `web/src/app.css` file `@import '/usr/ui/dist/theme/default.css';` and comment out `@import '@immich/ui/theme/default.css';`
+6. Start up the stack via `make dev`
+7. After making changes in `@immich/ui`, rebuild it (`npm run build`)
 
 ### Mobile app
 

docs/docs/features/casting.md

@@ -0,0 +1,11 @@
+# Chromecast support
+
+Immich supports the Google's Cast protocol so that photos and videos can be cast to devices such as a Chromecast and a Nest Hub. This feature is considered experimental and has several important limitations listed below. Currently, this feature is only supported by the web client, support on Android and iOS is planned for the future.
+
+## Limitations
+
+To use casting with Immich, there are a few prerequisites:
+
+1. Your instance must be accessed via an HTTPS connection in order for the casting menu to show.
+2. Your instance must be publicly accessible via HTTPS and a DNS record for the server must be accessible via Google's DNS servers (`8.8.8.8` and `8.8.4.4`)
+3. Videos must be in a format that is compatible with Google Cast. For more info, check out [Google's documentation](https://developers.google.com/cast/docs/media)

docs/docs/features/hardware-transcoding.md

@@ -121,6 +121,6 @@ Once this is done, you can continue to step 3 of "Basic Setup".
 
 [hw-file]: https://github.com/immich-app/immich/releases/latest/download/hwaccel.transcoding.yml
 [nvct]: https://docs.nvidia.com/datacenter/cloud-native/container-toolkit/latest/install-guide.html
-[jellyfin-lp]: https://jellyfin.org/docs/general/administration/hardware-acceleration/intel/#configure-and-verify-lp-mode-on-linux
-[jellyfin-kernel-bug]: https://jellyfin.org/docs/general/administration/hardware-acceleration/intel/#known-issues-and-limitations
+[jellyfin-lp]: https://jellyfin.org/docs/general/post-install/transcoding/hardware-acceleration/intel#low-power-encoding
+[jellyfin-kernel-bug]: https://jellyfin.org/docs/general/post-install/transcoding/hardware-acceleration/intel#known-issues-and-limitations-on-linux
 [libmali-rockchip]: https://github.com/tsukumijima/libmali-rockchip/releases

docs/docs/features/libraries.md

@@ -72,7 +72,7 @@ In rare cases, the library watcher can hang, preventing Immich from starting up.
 
 ### Nightly job
 
-There is an automatic scan job that is scheduled to run once a day. This job also cleans up any libraries stuck in deletion. It is possible to trigger the cleanup by clicking "Scan all libraries" in the library managment page.
+There is an automatic scan job that is scheduled to run once a day. This job also cleans up any libraries stuck in deletion. It is possible to trigger the cleanup by clicking "Scan all libraries" in the library management page.
 
 ## Usage
 

docs/docs/features/ml-hardware-acceleration.md

@@ -42,7 +42,7 @@ You do not need to redo any machine learning jobs after enabling hardware accele
 
 - The GPU must have compute capability 5.2 or greater.
 - The server must have the official NVIDIA driver installed.
-- The installed driver must be >= 535 (it must support CUDA 12.2).
+- The installed driver must be >= 545 (it must support CUDA 12.3).
 - On Linux (except for WSL2), you also need to have [NVIDIA Container Toolkit][nvct] installed.
 
 #### ROCm

docs/docs/features/searching.md

@@ -5,7 +5,7 @@ import TabItem from '@theme/TabItem';
 
 Immich uses Postgres as its search database for both metadata and contextual CLIP search.
 
-Contextual CLIP search is powered by the [pgvecto.rs](https://github.com/tensorchord/pgvecto.rs) extension, utilizing machine learning models like [CLIP](https://openai.com/research/clip) to provide relevant search results. This allows for freeform searches without requiring specific keywords in the image or video metadata.
+Contextual CLIP search is powered by the [VectorChord](https://github.com/tensorchord/VectorChord) extension, utilizing machine learning models like [CLIP](https://openai.com/research/clip) to provide relevant search results. This allows for freeform searches without requiring specific keywords in the image or video metadata.
 
 ## Advanced Search Filters
 
@@ -92,7 +92,7 @@ Memory and execution time estimates were obtained without acceleration on a 7800
 
 **Execution Time (ms)**: After warming up the model with one pass, the mean execution time of 100 passes with the same input.
 
-**Memory (MiB)**: The peak RSS usage of the process afer performing the above timing benchmark. Does not include image decoding, concurrent processing, the web server, etc., which are relatively constant factors.
+**Memory (MiB)**: The peak RSS usage of the process after performing the above timing benchmark. Does not include image decoding, concurrent processing, the web server, etc., which are relatively constant factors.
 
 **Recall (%)**: Evaluated on Crossmodal-3600, the average of the recall@1, recall@5 and recall@10 results for zeroshot image retrieval. Chinese (Simplified), English, French, German, Italian, Japanese, Korean, Polish, Russian, Spanish and Turkish are additionally tested on XTD-10. Chinese (Simplified) and English are additionally tested on Flickr30k. The recall metrics are the average across all tested datasets.
 

docs/docs/guides/custom-map-styles.md

@@ -14,14 +14,14 @@ online generators you can use.
 2. Paste the link to your JSON style in either the **Light Style** or **Dark Style**. (You can add different styles which will help make the map style more appropriate depending on whether you set **Immich** to Light or Dark mode.)
 3. Save your selections. Reload the map, and enjoy your custom map style!
 
-## Use Maptiler to build a custom style
+## Use MapTiler to build a custom style
 
-Customizing the map style can be done easily using Maptiler, if you do not want to write an entire JSON document by hand.
+Customizing the map style can be done easily using MapTiler, if you do not want to write an entire JSON document by hand.
 
 1. Create a free account at https://cloud.maptiler.com
 2. Once logged in, you can either create a brand new map by clicking on **New Map**, selecting a starter map, and then clicking **Customize**, OR by selecting a **Standard Map** and customizing it from there.
 3. The **editor** interface is self-explanatory. You can change colors, remove visible layers, or add optional layers (e.g., administrative, topo, hydro, etc.) in the composer.
 4. Once you have your map composed, click on **Save** at the top right. Give it a unique name to save it to your account.
-5. Next, **Publish** your style using the **Publish** button at the top right. This will deploy it to production, which means it is able to be exposed over the Internet. Maptiler will present an interactive side-by-side map with the original and your changes prior to publication.<br/>![Maptiler Publication Settings](img/immich_map_styles_publish.webp)
-6. Maptiler will warn you that changing the map will change it across all apps using the map. Since no apps are using the map yet, this is okay.
-7. Clicking on the name of your new map at the top left will bring you to the item's **details** page. From here, copy the link to the JSON style under **Use vector style**. This link will automatically contain your personal API key to Maptiler.
+5. Next, **Publish** your style using the **Publish** button at the top right. This will deploy it to production, which means it is able to be exposed over the Internet. MapTiler will present an interactive side-by-side map with the original and your changes prior to publication.<br/>![MapTiler Publication Settings](img/immich_map_styles_publish.webp)
+6. MapTiler will warn you that changing the map will change it across all apps using the map. Since no apps are using the map yet, this is okay.
+7. Clicking on the name of your new map at the top left will bring you to the item's **details** page. From here, copy the link to the JSON style under **Use vector style**. This link will automatically contain your personal API key to MapTiler.

docs/docs/guides/database-queries.md

@@ -1,7 +1,7 @@
 # Database Queries
 
 :::danger
-Keep in mind that mucking around in the database might set the moon on fire. Avoid modifying the database directly when possible, and always have current backups.
+Keep in mind that mucking around in the database might set the Moon on fire. Avoid modifying the database directly when possible, and always have current backups.
 :::
 
 :::tip

docs/docs/install/docker-compose.mdx

@@ -2,53 +2,13 @@
 sidebar_position: 30
 ---
 
-import CodeBlock from '@theme/CodeBlock';
-import ExampleEnv from '!!raw-loader!../../../docker/example.env';
-
 # Docker Compose [Recommended]
 
 Docker Compose is the recommended method to run Immich in production. Below are the steps to deploy Immich with Docker Compose.
 
-## Step 1 - Download the required files
+import DockerComposeSteps from '/docs/partials/_docker-compose-install-steps.mdx';
 
-Create a directory of your choice (e.g. `./immich-app`) to hold the `docker-compose.yml` and `.env` files.
-
-```bash title="Move to the directory you created"
-mkdir ./immich-app
-cd ./immich-app
-```
-
-Download [`docker-compose.yml`][compose-file] and [`example.env`][env-file] by running the following commands:
-
-```bash title="Get docker-compose.yml file"
-wget -O docker-compose.yml https://github.com/immich-app/immich/releases/latest/download/docker-compose.yml
-```
-
-```bash title="Get .env file"
-wget -O .env https://github.com/immich-app/immich/releases/latest/download/example.env
-```
-
-You can alternatively download these two files from your browser and move them to the directory that you created, in which case ensure that you rename `example.env` to `.env`.
-
-## Step 2 - Populate the .env file with custom values
-
-<CodeBlock language="bash" title="Default environmental variable content">
-  {ExampleEnv}
-</CodeBlock>
-
-- Populate `UPLOAD_LOCATION` with your preferred location for storing backup assets. It should be a new directory on the server with enough free space.
-- Consider changing `DB_PASSWORD` to a custom value. Postgres is not publicly exposed, so this password is only used for local authentication.
-  To avoid issues with Docker parsing this value, it is best to use only the characters `A-Za-z0-9`. `pwgen` is a handy utility for this.
-- Set your timezone by uncommenting the `TZ=` line.
-- Populate custom database information if necessary.
-
-## Step 3 - Start the containers
-
-From the directory you created in Step 1 (which should now contain your customized `docker-compose.yml` and `.env` files), run the following command to start Immich as a background service:
-
-```bash title="Start the containers"
-docker compose up -d
-```
+<DockerComposeSteps />
 
 :::info Docker version
 If you get an error such as `unknown shorthand flag: 'd' in -d` or `open <location of your .env file>: permission denied`, you are probably running the wrong Docker version. (This happens, for example, with the docker.io package in Ubuntu 22.04.3 LTS.) You can correct the problem by following the complete [Docker Engine install](https://docs.docker.com/engine/install/) procedure for your distribution, crucially the "Uninstall old versions" and "Install using the apt/rpm repository" sections. These replace the distro's Docker packages with Docker's official ones.
@@ -70,6 +30,3 @@ If you get an error `can't set healthcheck.start_interval as feature require Doc
 ## Next Steps
 
 Read the [Post Installation](/docs/install/post-install.mdx) steps and [upgrade instructions](/docs/install/upgrading.md).
-
-[compose-file]: https://github.com/immich-app/immich/releases/latest/download/docker-compose.yml
-[env-file]: https://github.com/immich-app/immich/releases/latest/download/example.env

docs/docs/install/environment-variables.md

@@ -72,20 +72,21 @@ Information on the current workers can be found [here](/docs/administration/jobs
 
 ## Database
 
-| Variable                            | Description                                                              |   Default    | Containers                     |
-| :---------------------------------- | :----------------------------------------------------------------------- | :----------: | :----------------------------- |
-| `DB_URL`                            | Database URL                                                             |              | server                         |
-| `DB_HOSTNAME`                       | Database host                                                            |  `database`  | server                         |
-| `DB_PORT`                           | Database port                                                            |    `5432`    | server                         |
-| `DB_USERNAME`                       | Database user                                                            |  `postgres`  | server, database<sup>\*1</sup> |
-| `DB_PASSWORD`                       | Database password                                                        |  `postgres`  | server, database<sup>\*1</sup> |
-| `DB_DATABASE_NAME`                  | Database name                                                            |   `immich`   | server, database<sup>\*1</sup> |
-| `DB_VECTOR_EXTENSION`<sup>\*2</sup> | Database vector extension (one of [`pgvector`, `pgvecto.rs`])            | `pgvecto.rs` | server                         |
-| `DB_SKIP_MIGRATIONS`                | Whether to skip running migrations on startup (one of [`true`, `false`]) |   `false`    | server                         |
+| Variable                            | Description                                                                  |  Default   | Containers                     |
+| :---------------------------------- | :--------------------------------------------------------------------------- | :--------: | :----------------------------- |
+| `DB_URL`                            | Database URL                                                                 |            | server                         |
+| `DB_HOSTNAME`                       | Database host                                                                | `database` | server                         |
+| `DB_PORT`                           | Database port                                                                |   `5432`   | server                         |
+| `DB_USERNAME`                       | Database user                                                                | `postgres` | server, database<sup>\*1</sup> |
+| `DB_PASSWORD`                       | Database password                                                            | `postgres` | server, database<sup>\*1</sup> |
+| `DB_DATABASE_NAME`                  | Database name                                                                |  `immich`  | server, database<sup>\*1</sup> |
+| `DB_SSL_MODE`                       | Database SSL mode                                                            |            | server                         |
+| `DB_VECTOR_EXTENSION`<sup>\*2</sup> | Database vector extension (one of [`vectorchord`, `pgvector`, `pgvecto.rs`]) |            | server                         |
+| `DB_SKIP_MIGRATIONS`                | Whether to skip running migrations on startup (one of [`true`, `false`])     |  `false`   | server                         |
 
 \*1: The values of `DB_USERNAME`, `DB_PASSWORD`, and `DB_DATABASE_NAME` are passed to the Postgres container as the variables `POSTGRES_USER`, `POSTGRES_PASSWORD`, and `POSTGRES_DB` in `docker-compose.yml`.
 
-\*2: This setting cannot be changed after the server has successfully started up.
+\*2: If not provided, the appropriate extension to use is auto-detected at startup by introspecting the database. When multiple extensions are installed, the order of preference is VectorChord, pgvecto.rs, pgvector.
 
 :::info
 
@@ -148,31 +149,30 @@ Redis (Sentinel) URL example JSON before encoding:
 
 ## Machine Learning
 
-| Variable                                                    | Description                                                                                         |           Default            | Containers       |
-| :---------------------------------------------------------- | :-------------------------------------------------------------------------------------------------- | :--------------------------: | :--------------- |
-| `MACHINE_LEARNING_MODEL_TTL`                                | Inactivity time (s) before a model is unloaded (disabled if \<= 0)                                  |            `300`             | machine learning |
-| `MACHINE_LEARNING_MODEL_TTL_POLL_S`                         | Interval (s) between checks for the model TTL (disabled if \<= 0)                                   |             `10`             | machine learning |
-| `MACHINE_LEARNING_CACHE_FOLDER`                             | Directory where models are downloaded                                                               |           `/cache`           | machine learning |
-| `MACHINE_LEARNING_REQUEST_THREADS`<sup>\*1</sup>            | Thread count of the request thread pool (disabled if \<= 0)                                         |     number of CPU cores      | machine learning |
-| `MACHINE_LEARNING_MODEL_INTER_OP_THREADS`                   | Number of parallel model operations                                                                 |             `1`              | machine learning |
-| `MACHINE_LEARNING_MODEL_INTRA_OP_THREADS`                   | Number of threads for each model operation                                                          |             `2`              | machine learning |
-| `MACHINE_LEARNING_MODEL_ARENA`                              | Pre-allocates CPU memory to avoid memory fragmentation                                              |             true             | machine learning |
-| `MACHINE_LEARNING_WORKERS`<sup>\*2</sup>                    | Number of worker processes to spawn                                                                 |             `1`              | machine learning |
-| `MACHINE_LEARNING_HTTP_KEEPALIVE_TIMEOUT_S`<sup>\*3</sup>   | HTTP Keep-alive time in seconds                                                                     |             `2`              | machine learning |
-| `MACHINE_LEARNING_WORKER_TIMEOUT`                           | Maximum time (s) of unresponsiveness before a worker is killed                                      |            `300`             | machine learning |
-| `MACHINE_LEARNING_PRELOAD__CLIP__TEXTUAL`                   | Comma-separated list of (textual) CLIP model(s) to preload and cache                                |                              | machine learning |
-| `MACHINE_LEARNING_PRELOAD__CLIP__VISUAL`                    | Comma-separated list of (visual) CLIP model(s) to preload and cache                                 |                              | machine learning |
-| `MACHINE_LEARNING_PRELOAD__FACIAL_RECOGNITION__RECOGNITION` | Comma-separated list of (recognition) facial recognition model(s) to preload and cache              |                              | machine learning |
-| `MACHINE_LEARNING_PRELOAD__FACIAL_RECOGNITION__DETECTION`   | Comma-separated list of (detection) facial recognition model(s) to preload and cache                |                              | machine learning |
-| `MACHINE_LEARNING_ANN`                                      | Enable ARM-NN hardware acceleration if supported                                                    |            `True`            | machine learning |
-| `MACHINE_LEARNING_ANN_FP16_TURBO`                           | Execute operations in FP16 precision: increasing speed, reducing precision (applies only to ARM-NN) |           `False`            | machine learning |
-| `MACHINE_LEARNING_ANN_TUNING_LEVEL`                         | ARM-NN GPU tuning level (1: rapid, 2: normal, 3: exhaustive)                                        |             `2`              | machine learning |
-| `MACHINE_LEARNING_DEVICE_IDS`<sup>\*4</sup>                 | Device IDs to use in multi-GPU environments                                                         |             `0`              | machine learning |
-| `MACHINE_LEARNING_MAX_BATCH_SIZE__FACIAL_RECOGNITION`       | Set the maximum number of faces that will be processed at once by the facial recognition model      | None (`1` if using OpenVINO) | machine learning |
-| `MACHINE_LEARNING_PING_TIMEOUT`                             | How long (ms) to wait for a PING response when checking if an ML server is available                |            `2000`            | server           |
-| `MACHINE_LEARNING_AVAILABILITY_BACKOFF_TIME`                | How long to ignore ML servers that are offline before trying again                                  |           `30000`            | server           |
-| `MACHINE_LEARNING_RKNN`                                     | Enable RKNN hardware acceleration if supported                                                      |            `True`            | machine learning |
-| `MACHINE_LEARNING_RKNN_THREADS`                             | How many threads of RKNN runtime should be spinned up while inferencing.                            |             `1`              | machine learning |
+| Variable                                                    | Description                                                                                         |             Default             | Containers       |
+| :---------------------------------------------------------- | :-------------------------------------------------------------------------------------------------- | :-----------------------------: | :--------------- |
+| `MACHINE_LEARNING_MODEL_TTL`                                | Inactivity time (s) before a model is unloaded (disabled if \<= 0)                                  |              `300`              | machine learning |
+| `MACHINE_LEARNING_MODEL_TTL_POLL_S`                         | Interval (s) between checks for the model TTL (disabled if \<= 0)                                   |              `10`               | machine learning |
+| `MACHINE_LEARNING_CACHE_FOLDER`                             | Directory where models are downloaded                                                               |            `/cache`             | machine learning |
+| `MACHINE_LEARNING_REQUEST_THREADS`<sup>\*1</sup>            | Thread count of the request thread pool (disabled if \<= 0)                                         |       number of CPU cores       | machine learning |
+| `MACHINE_LEARNING_MODEL_INTER_OP_THREADS`                   | Number of parallel model operations                                                                 |               `1`               | machine learning |
+| `MACHINE_LEARNING_MODEL_INTRA_OP_THREADS`                   | Number of threads for each model operation                                                          |               `2`               | machine learning |
+| `MACHINE_LEARNING_WORKERS`<sup>\*2</sup>                    | Number of worker processes to spawn                                                                 |               `1`               | machine learning |
+| `MACHINE_LEARNING_HTTP_KEEPALIVE_TIMEOUT_S`<sup>\*3</sup>   | HTTP Keep-alive time in seconds                                                                     |               `2`               | machine learning |
+| `MACHINE_LEARNING_WORKER_TIMEOUT`                           | Maximum time (s) of unresponsiveness before a worker is killed                                      | `120` (`300` if using OpenVINO) | machine learning |
+| `MACHINE_LEARNING_PRELOAD__CLIP__TEXTUAL`                   | Comma-separated list of (textual) CLIP model(s) to preload and cache                                |                                 | machine learning |
+| `MACHINE_LEARNING_PRELOAD__CLIP__VISUAL`                    | Comma-separated list of (visual) CLIP model(s) to preload and cache                                 |                                 | machine learning |
+| `MACHINE_LEARNING_PRELOAD__FACIAL_RECOGNITION__RECOGNITION` | Comma-separated list of (recognition) facial recognition model(s) to preload and cache              |                                 | machine learning |
+| `MACHINE_LEARNING_PRELOAD__FACIAL_RECOGNITION__DETECTION`   | Comma-separated list of (detection) facial recognition model(s) to preload and cache                |                                 | machine learning |
+| `MACHINE_LEARNING_ANN`                                      | Enable ARM-NN hardware acceleration if supported                                                    |             `True`              | machine learning |
+| `MACHINE_LEARNING_ANN_FP16_TURBO`                           | Execute operations in FP16 precision: increasing speed, reducing precision (applies only to ARM-NN) |             `False`             | machine learning |
+| `MACHINE_LEARNING_ANN_TUNING_LEVEL`                         | ARM-NN GPU tuning level (1: rapid, 2: normal, 3: exhaustive)                                        |               `2`               | machine learning |
+| `MACHINE_LEARNING_DEVICE_IDS`<sup>\*4</sup>                 | Device IDs to use in multi-GPU environments                                                         |               `0`               | machine learning |
+| `MACHINE_LEARNING_MAX_BATCH_SIZE__FACIAL_RECOGNITION`       | Set the maximum number of faces that will be processed at once by the facial recognition model      |  None (`1` if using OpenVINO)   | machine learning |
+| `MACHINE_LEARNING_PING_TIMEOUT`                             | How long (ms) to wait for a PING response when checking if an ML server is available                |             `2000`              | server           |
+| `MACHINE_LEARNING_AVAILABILITY_BACKOFF_TIME`                | How long to ignore ML servers that are offline before trying again                                  |             `30000`             | server           |
+| `MACHINE_LEARNING_RKNN`                                     | Enable RKNN hardware acceleration if supported                                                      |             `True`              | machine learning |
+| `MACHINE_LEARNING_RKNN_THREADS`                             | How many threads of RKNN runtime should be spinned up while inferencing.                            |               `1`               | machine learning |
 
 \*1: It is recommended to begin with this parameter when changing the concurrency levels of the machine learning service and then tune the other ones.
 

docs/docs/install/synology.md

@@ -29,7 +29,7 @@ Download [`docker-compose.yml`](https://github.com/immich-app/immich/releases/la
 
 ## Step 2 - Populate the .env file with custom values
 
-Follow [Step 2 in Docker Compose](./docker-compose#step-2---populate-the-env-file-with-custom-values) for instructions on customizing the `.env` file, and then return back to this guide to continue.
+Follow [Step 2 in Docker Compose](/docs/install/docker-compose#step-2---populate-the-env-file-with-custom-values) for instructions on customizing the `.env` file, and then return back to this guide to continue.
 
 ## Step 3 - Create a new project in Container Manager
 

docs/docs/install/truenas.md

@@ -2,7 +2,7 @@
 sidebar_position: 80
 ---
 
-# TrueNAS SCALE [Community]
+# TrueNAS [Community]
 
 :::note
 This is a community contribution and not officially supported by the Immich team, but included here for convenience.
@@ -12,17 +12,17 @@ Community support can be found in the dedicated channel on the [Discord Server](
 **Please report app issues to the corresponding [Github Repository](https://github.com/truenas/charts/tree/master/community/immich).**
 :::
 
-Immich can easily be installed on TrueNAS SCALE via the **Community** train application.
-Consider reviewing the TrueNAS [Apps tutorial](https://www.truenas.com/docs/scale/scaletutorials/apps/) if you have not previously configured applications on your system.
+Immich can easily be installed on TrueNAS Community Edition via the **Community** train application.
+Consider reviewing the TrueNAS [Apps resources](https://apps.truenas.com/getting-started/) if you have not previously configured applications on your system.
 
-TrueNAS SCALE makes installing and updating Immich easy, but you must use the Immich web portal and mobile app to configure accounts and access libraries.
+TrueNAS Community Edition makes installing and updating Immich easy, but you must use the Immich web portal and mobile app to configure accounts and access libraries.
 
 ## First Steps
 
-The Immich app in TrueNAS SCALE installs, completes the initial configuration, then starts the Immich web portal.
-When updates become available, SCALE alerts and provides easy updates.
+The Immich app in TrueNAS Community Edition installs, completes the initial configuration, then starts the Immich web portal.
+When updates become available, TrueNAS alerts and provides easy updates.
 
-Before installing the Immich app in SCALE, review the [Environment Variables](#environment-variables) documentation to see if you want to configure any during installation.
+Before installing the Immich app in TrueNAS, review the [Environment Variables](#environment-variables) documentation to see if you want to configure any during installation.
 You may also configure environment variables at any time after deploying the application.
 
 ### Setting up Storage Datasets
@@ -126,9 +126,9 @@ className="border rounded-xl"
 
 Accept the default port `30041` in **WebUI Port** or enter a custom port number.
 :::info Allowed Port Numbers
-Only numbers within the range 9000-65535 may be used on SCALE versions below TrueNAS Scale 24.10 Electric Eel.
+Only numbers within the range 9000-65535 may be used on TrueNAS versions below TrueNAS Community Edition 24.10 Electric Eel.
 
-Regardless of version, to avoid port conflicts, don't use [ports on this list](https://www.truenas.com/docs/references/defaultports/).
+Regardless of version, to avoid port conflicts, don't use [ports on this list](https://www.truenas.com/docs/solutions/optimizations/security/#truenas-default-ports).
 :::
 
 ### Storage Configuration
@@ -173,7 +173,7 @@ className="border rounded-xl"
 
 You may configure [External Libraries](/docs/features/libraries) by mounting them using **Additional Storage**.
 The **Mount Path** is the location you will need to copy and paste into the External Library settings within Immich.
-The **Host Path** is the location on the TrueNAS SCALE server where your external library is located.
+The **Host Path** is the location on the TrueNAS Community Edition server where your external library is located.
 
 <!-- A section for Labels would go here but I don't know what they do. -->
 
@@ -188,17 +188,17 @@ className="border rounded-xl"
 
 Accept the default **CPU** limit of `2` threads or specify the number of threads (CPUs with Multi-/Hyper-threading have 2 threads per core).
 
-Accept the default **Memory** limit of `4096` MB or specify the number of MB of RAM. If you're using Machine Learning you should probably set this above 8000 MB.
+Specify the **Memory** limit in MB of RAM. Immich recommends at least 6000 MB (6GB). If you selected **Enable Machine Learning** in **Immich Configuration**, you should probably set this above 8000 MB.
 
-:::info Older SCALE Versions
-Before TrueNAS SCALE version 24.10 Electric Eel:
+:::info Older TrueNAS Versions
+Before TrueNAS Community Edition version 24.10 Electric Eel:
 
 The **CPU** value was specified in a different format with a default of `4000m` which is 4 threads.
 
 The **Memory** value was specified in a different format with a default of `8Gi` which is 8 GiB of RAM. The value was specified in bytes or a number with a measurement suffix. Examples: `129M`, `123Mi`, `1000000000`
 :::
 
-Enable **GPU Configuration** options if you have a GPU that you will use for [Hardware Transcoding](/docs/features/hardware-transcoding) and/or [Hardware-Accelerated Machine Learning](/docs/features/ml-hardware-acceleration.md). More info: [GPU Passthrough Docs for TrueNAS Apps](https://www.truenas.com/docs/truenasapps/#gpu-passthrough)
+Enable **GPU Configuration** options if you have a GPU that you will use for [Hardware Transcoding](/docs/features/hardware-transcoding) and/or [Hardware-Accelerated Machine Learning](/docs/features/ml-hardware-acceleration.md). More info: [GPU Passthrough Docs for TrueNAS Apps](https://apps.truenas.com/managing-apps/installing-apps/#gpu-passthrough)
 
 ### Install
 
@@ -240,7 +240,7 @@ className="border rounded-xl"
 />
 
 :::info
-Some Environment Variables are not available for the TrueNAS SCALE app. This is mainly because they can be configured through GUI options in the [Edit Immich screen](#edit-app-settings).
+Some Environment Variables are not available for the TrueNAS Community Edition app. This is mainly because they can be configured through GUI options in the [Edit Immich screen](#edit-app-settings).
 
 Some examples are: `IMMICH_VERSION`, `UPLOAD_LOCATION`, `DB_DATA_LOCATION`, `TZ`, `IMMICH_LOG_LEVEL`, `DB_PASSWORD`, `REDIS_PASSWORD`.
 :::
@@ -251,7 +251,7 @@ Some examples are: `IMMICH_VERSION`, `UPLOAD_LOCATION`, `DB_DATA_LOCATION`, `TZ`
 Make sure to read the general [upgrade instructions](/docs/install/upgrading.md).
 :::
 
-When updates become available, SCALE alerts and provides easy updates.
+When updates become available, TrueNAS alerts and provides easy updates.
 To update the app to the latest version:
 
 - Go to the **Installed Applications** screen and select Immich from the list of installed applications.

docs/docs/overview/comparison.md

@@ -1,5 +1,5 @@
 ---
-sidebar_position: 2
+sidebar_position: 3
 ---
 
 # Comparison

docs/docs/overview/quick-start.mdx

@@ -1,5 +1,5 @@
 ---
-sidebar_position: 3
+sidebar_position: 2
 ---
 
 # Quick start
@@ -10,11 +10,20 @@ to install and use it.
 
 ## Requirements
 
-Check the [requirements page](/docs/install/requirements) to get started.
+- A system with at least 4GB of RAM and 2 CPU cores.
+- [Docker](https://docs.docker.com/engine/install/)
+
+> For a more detailed list of requirements, see the [requirements page](/docs/install/requirements).
+
+---
 
 ## Set up the server
 
-Follow the [Docker Compose (Recommended)](/docs/install/docker-compose) instructions to install the server.
+import DockerComposeSteps from '/docs/partials/_docker-compose-install-steps.mdx';
+
+<DockerComposeSteps />
+
+---
 
 ## Try the web app
 
@@ -26,6 +35,8 @@ Try uploading a picture from your browser.
 
 <img src={require('./img/upload-button.webp').default} title="Upload button" />
 
+---
+
 ## Try the mobile app
 
 ### Download the Mobile App
@@ -56,6 +67,8 @@ You can select the **Jobs** tab to see Immich processing your photos.
 
 <img src={require('/docs/guides/img/jobs-tab.webp').default} title="Jobs tab" width={300} />
 
+---
+
 ## Review the database backup and restore process
 
 Immich has built-in database backups. You can refer to the
@@ -65,6 +78,8 @@ Immich has built-in database backups. You can refer to the
 The database only contains metadata and user information. You must setup manual backups of the images and videos stored in `UPLOAD_LOCATION`.
 :::
 
+---
+
 ## Where to go from here?
 
 You may decide you'd like to install the server a different way; the Install category on the left menu provides many options.

docs/docs/overview/welcome.mdx

@@ -2,9 +2,13 @@
 sidebar_position: 1
 ---
 
-# Introduction
+# Welcome to Immich
 
-<img src={require('./img/feature-panel.webp').default} alt="Immich - Self-hosted photos and videos backup tool" />
+<img
+  src={require('./img/social-preview-light.webp').default}
+  alt="Immich - Self-hosted photos and videos backup tool"
+  data-theme="light"
+/>
 
 ## Welcome!
 

docs/docs/partials/_docker-compose-install-steps.mdx

@@ -0,0 +1,43 @@
+import CodeBlock from '@theme/CodeBlock';
+import ExampleEnv from '!!raw-loader!../../../docker/example.env';
+
+### Step 1 - Download the required files
+
+Create a directory of your choice (e.g. `./immich-app`) to hold the `docker-compose.yml` and `.env` files.
+
+```bash title="Move to the directory you created"
+mkdir ./immich-app
+cd ./immich-app
+```
+
+Download [`docker-compose.yml`](https://github.com/immich-app/immich/releases/latest/download/docker-compose.yml) and [`example.env`](https://github.com/immich-app/immich/releases/latest/download/example.env) by running the following commands:
+
+```bash title="Get docker-compose.yml file"
+wget -O docker-compose.yml https://github.com/immich-app/immich/releases/latest/download/docker-compose.yml
+```
+
+```bash title="Get .env file"
+wget -O .env https://github.com/immich-app/immich/releases/latest/download/example.env
+```
+
+You can alternatively download these two files from your browser and move them to the directory that you created, in which case ensure that you rename `example.env` to `.env`.
+
+### Step 2 - Populate the .env file with custom values
+
+<CodeBlock language="bash" title="Default environmental variable content">
+  {ExampleEnv}
+</CodeBlock>
+
+- Populate `UPLOAD_LOCATION` with your preferred location for storing backup assets. It should be a new directory on the server with enough free space.
+- Consider changing `DB_PASSWORD` to a custom value. Postgres is not publicly exposed, so this password is only used for local authentication.
+  To avoid issues with Docker parsing this value, it is best to use only the characters `A-Za-z0-9`. `pwgen` is a handy utility for this.
+- Set your timezone by uncommenting the `TZ=` line.
+- Populate custom database information if necessary.
+
+### Step 3 - Start the containers
+
+From the directory you created in Step 1 (which should now contain your customized `docker-compose.yml` and `.env` files), run the following command to start Immich as a background service:
+
+```bash title="Start the containers"
+docker compose up -d
+```

docs/docusaurus.config.js

@@ -95,7 +95,7 @@ const config = {
             position: 'right',
           },
           {
-            to: '/docs/overview/introduction',
+            to: '/docs/overview/welcome',
             position: 'right',
             label: 'Docs',
           },
@@ -124,6 +124,12 @@ const config = {
             label: 'Discord',
             position: 'right',
           },
+          {
+            type: 'html',
+            position: 'right',
+            value:
+              '<a href="https://buy.immich.app" target="_blank" class="no-underline hover:no-underline"><button class="buy-button bg-immich-primary dark:bg-immich-dark-primary text-white dark:text-black rounded-xl">Buy Immich</button></a>',
+          },
         ],
       },
       footer: {
@@ -134,7 +140,7 @@ const config = {
             items: [
               {
                 label: 'Welcome',
-                to: '/docs/overview/introduction',
+                to: '/docs/overview/welcome',
               },
               {
                 label: 'Installation',

docs/package.json

@@ -57,6 +57,6 @@
     "node": ">=20"
   },
   "volta": {
-    "node": "22.14.0"
+    "node": "22.15.1"
   }
 }

docs/src/components/community-projects.tsx

@@ -40,13 +40,9 @@ const projects: CommunityProjectProps[] = [
   },
   {
     title: 'Lightroom Immich Plugin: lrc-immich-plugin',
-    description: 'Another Lightroom plugin to publish or export photos from Lightroom to Immich.',
-    url: 'https://github.com/bmachek/lrc-immich-plugin',
-  },
-  {
-    title: 'Immich Duplicate Finder',
-    description: 'Webapp that uses machine learning to identify near-duplicate images.',
-    url: 'https://github.com/vale46n1/immich_duplicate_finder',
+    description:
+      'Lightroom plugin to publish, export photos from Lightroom to Immich. Import from Immich to Lightroom is also supported.',
+    url: 'https://blog.fokuspunk.de/lrc-immich-plugin/',
   },
   {
     title: 'Immich-Tiktok-Remover',

docs/src/css/custom.css

@@ -7,14 +7,22 @@
 @tailwind components;
 @tailwind utilities;
 
-@import url('https://fonts.googleapis.com/css2?family=Be+Vietnam+Pro:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap');
-
-body {
-  font-family: 'Be Vietnam Pro', serif;
-  font-optical-sizing: auto;
-  /* font-size: 1.125rem;
+@font-face {
+  font-family: 'Overpass';
+  src: url('/fonts/overpass/Overpass.ttf') format('truetype-variations');
+  font-weight: 1 999;
+  font-style: normal;
   ascent-override: 106.25%;
-  size-adjust: 106.25%; */
+  size-adjust: 106.25%;
+}
+
+@font-face {
+  font-family: 'Overpass Mono';
+  src: url('/fonts/overpass/OverpassMono.ttf') format('truetype-variations');
+  font-weight: 1 999;
+  font-style: normal;
+  ascent-override: 106.25%;
+  size-adjust: 106.25%;
 }
 
 .breadcrumbs__link {
@@ -29,6 +37,7 @@ img {
 
 /* You can override the default Infima variables here. */
 :root {
+  font-family: 'Overpass', sans-serif;
   --ifm-color-primary: #4250af;
   --ifm-color-primary-dark: #4250af;
   --ifm-color-primary-darker: #4250af;
@@ -59,14 +68,12 @@ div[class^='announcementBar_'] {
 }
 
 .menu__link {
-  padding: 10px;
-  padding-left: 16px;
+  padding: 10px 10px 10px 16px;
   border-radius: 24px;
   margin-right: 16px;
 }
 
 .menu__list-item-collapsible {
-  border-radius: 10px;
   margin-right: 16px;
   border-radius: 24px;
 }
@@ -83,3 +90,12 @@ div[class*='navbar__items'] > li:has(a[class*='version-switcher-34ab39']) {
 code {
   font-weight: 600;
 }
+
+.buy-button {
+  padding: 8px 14px;
+  border: 1px solid transparent;
+  font-family: 'Overpass', sans-serif;
+  font-weight: 500;
+  cursor: pointer;
+  box-shadow: 0 0 5px 2px rgba(181, 206, 254, 0.4);
+}

docs/src/pages/cursed-knowledge.tsx

@@ -2,6 +2,7 @@ import {
   mdiBug,
   mdiCalendarToday,
   mdiCrosshairsOff,
+  mdiCrop,
   mdiDatabase,
   mdiLeadPencil,
   mdiLockOff,
@@ -22,6 +23,18 @@ const withLanguage = (date: Date) => (language: string) => date.toLocaleDateStri
 type Item = Omit<TimelineItem, 'done' | 'getDateLabel'> & { date: Date };
 
 const items: Item[] = [
+  {
+    icon: mdiCrop,
+    iconColor: 'tomato',
+    title: 'Image dimensions in EXIF metadata are cursed',
+    description:
+      'The dimensions in EXIF metadata can be different from the actual dimensions of the image, causing issues with cropping and resizing.',
+    link: {
+      url: 'https://github.com/immich-app/immich/pull/17974',
+      text: '#17974',
+    },
+    date: new Date(2025, 5, 5),
+  },
   {
     icon: mdiMicrosoftWindows,
     iconColor: '#357EC7',

docs/src/pages/index.tsx

@@ -4,6 +4,7 @@ import Layout from '@theme/Layout';
 import { discordPath, discordViewBox } from '@site/src/components/svg-paths';
 import ThemedImage from '@theme/ThemedImage';
 import Icon from '@mdi/react';
+
 function HomepageHeader() {
   return (
     <header>
@@ -12,11 +13,14 @@ function HomepageHeader() {
         <div className="w-full h-[120vh] absolute left-0 top-0 backdrop-blur-3xl bg-immich-bg/40 dark:bg-transparent"></div>
       </div>
       <section className="text-center pt-12 sm:pt-24 bg-immich-bg/50 dark:bg-immich-dark-bg/80">
-        <ThemedImage
-          sources={{ dark: 'img/logomark-dark.svg', light: 'img/logomark-light.svg' }}
-          className="h-[115px] w-[115px] mb-2 antialiased rounded-none"
-          alt="Immich logo"
-        />
+        <a href="https://futo.org" target="_blank" rel="noopener noreferrer">
+          <ThemedImage
+            sources={{ dark: 'img/logomark-dark-with-futo.svg', light: 'img/logomark-light-with-futo.svg' }}
+            className="h-[125px] w-[125px] mb-2 antialiased rounded-none"
+            alt="Immich logo"
+          />
+        </a>
+
         <div className="mt-8">
           <p className="text-3xl md:text-5xl sm:leading-tight mb-1 font-extrabold text-black/90 dark:text-white px-4">
             Self-hosted{' '}
@@ -27,7 +31,7 @@ function HomepageHeader() {
             solution<span className="block"></span>
           </p>
 
-          <p className="max-w-1/4 m-auto mt-4 px-4">
+          <p className="max-w-1/4 m-auto mt-4 px-4 text-lg text-gray-700 dark:text-gray-100">
             Easily back up, organize, and manage your photos on your own server. Immich helps you
             <span className="sm:block"></span> browse, search and organize your photos and videos with ease, without
             sacrificing your privacy.
@@ -35,27 +39,21 @@ function HomepageHeader() {
         </div>
         <div className="flex flex-col sm:flex-row place-items-center place-content-center mt-9 gap-4 ">
           <Link
-            className="flex place-items-center place-content-center py-3 px-8 border bg-immich-primary dark:bg-immich-dark-primary rounded-xl no-underline hover:no-underline text-white hover:text-gray-50 dark:text-immich-dark-bg font-bold uppercase"
-            to="docs/overview/introduction"
+            className="flex place-items-center place-content-center py-3 px-8 border bg-immich-primary dark:bg-immich-dark-primary rounded-xl no-underline hover:no-underline text-white hover:text-gray-50 dark:text-immich-dark-bg font-bold"
+            to="docs/overview/quick-start"
           >
-            Get started
+            Get Started
           </Link>
 
           <Link
-            className="flex place-items-center place-content-center py-3 px-8 border bg-immich-primary/10 dark:bg-gray-300  rounded-xl hover:no-underline text-immich-primary dark:text-immich-dark-bg font-bold uppercase"
+            className="flex place-items-center place-content-center py-3 px-8 border bg-white/90 dark:bg-gray-300  rounded-xl hover:no-underline text-immich-primary dark:text-immich-dark-bg font-bold"
             to="https://demo.immich.app/"
           >
-            Demo
-          </Link>
-
-          <Link
-            className="flex place-items-center place-content-center py-3 px-8 border bg-immich-primary/10 dark:bg-gray-300  rounded-xl hover:no-underline text-immich-primary dark:text-immich-dark-bg font-bold uppercase"
-            to="https://immich.store"
-          >
-            Buy Merch
+            Open Demo
           </Link>
         </div>
-        <div className="my-12 flex gap-1 font-medium place-items-center place-content-center text-immich-primary dark:text-immich-dark-primary">
+
+        <div className="my-8 flex gap-1 font-medium place-items-center place-content-center text-immich-primary dark:text-immich-dark-primary">
           <Icon
             path={discordPath}
             viewBox={discordViewBox} /* viewBox may show an error in your IDE but it is normal. */
@@ -88,11 +86,18 @@ function HomepageHeader() {
               <img className="h-24" alt="Get it on Google Play" src="/img/google-play-badge.png" />
             </a>
           </div>
+
           <div className="h-24">
             <a href="https://apps.apple.com/sg/app/immich/id1613945652">
               <img className="h-24 sm:p-3.5 p-3" alt="Download on the App Store" src="/img/ios-app-store-badge.svg" />
             </a>
           </div>
+
+          <div className="h-24">
+            <a href="https://github.com/immich-app/immich/releases/latest">
+              <img className="h-24 sm:p-3.5 p-3" alt="Download APK" src="/img/download-apk-github.svg" />
+            </a>
+          </div>
         </div>
         <ThemedImage
           sources={{ dark: '/img/app-qr-code-dark.svg', light: '/img/app-qr-code-light.svg' }}
@@ -111,7 +116,7 @@ export default function Home(): JSX.Element {
       <HomepageHeader />
       <div className="flex flex-col place-items-center text-center place-content-center dark:bg-immich-dark-bg py-8">
         <p>This project is available under GNU AGPL v3 license.</p>
-        <p className="text-xs">Privacy should not be a luxury</p>
+        <p className="text-sm">Privacy should not be a luxury</p>
       </div>
     </Layout>
   );

docs/src/pages/privacy-policy.tsx

@@ -1,5 +1,4 @@
 import React from 'react';
-import Link from '@docusaurus/Link';
 import Layout from '@theme/Layout';
 function HomepageHeader() {
   return (

docs/src/pages/roadmap.tsx

@@ -76,13 +76,18 @@ import {
   mdiWeb,
   mdiDatabaseOutline,
   mdiLinkEdit,
+  mdiTagFaces,
   mdiMovieOpenPlayOutline,
+  mdiCast,
 } from '@mdi/js';
 import Layout from '@theme/Layout';
 import React from 'react';
 import { Item, Timeline } from '../components/timeline';
 
 const releases = {
+  'v1.133.0': new Date(2025, 4, 21),
+  'v1.130.0': new Date(2025, 2, 25),
+  'v1.127.0': new Date(2025, 1, 26),
   'v1.122.0': new Date(2024, 11, 5),
   'v1.120.0': new Date(2024, 10, 6),
   'v1.114.0': new Date(2024, 8, 6),
@@ -215,14 +220,6 @@ const roadmap: Item[] = [
     description: 'Immich goes stable',
     getDateLabel: () => 'Planned for early 2025',
   },
-  {
-    done: false,
-    icon: mdiLockOutline,
-    iconColor: 'sandybrown',
-    title: 'Private/locked photos',
-    description: 'Private assets with extra protections',
-    getDateLabel: () => 'Planned for 2025',
-  },
   {
     done: false,
     icon: mdiCloudUploadOutline,
@@ -242,6 +239,27 @@ const roadmap: Item[] = [
 ];
 
 const milestones: Item[] = [
+  withRelease({
+    icon: mdiCast,
+    iconColor: 'aqua',
+    title: 'Google Cast (web)',
+    description: 'Cast assets to Google Cast/Chromecast compatible devices',
+    release: 'v1.133.0',
+  }),
+  withRelease({
+    icon: mdiLockOutline,
+    iconColor: 'sandybrown',
+    title: 'Private/locked photos',
+    description: 'Private assets with extra protections',
+    release: 'v1.133.0',
+  }),
+  withRelease({
+    icon: mdiFolderMultiple,
+    iconColor: 'brown',
+    title: 'Folders view in the mobile app',
+    description: 'Browse your photos and videos in their folder structure inside the mobile app',
+    release: 'v1.130.0',
+  }),
   {
     icon: mdiStar,
     iconColor: 'gold',
@@ -249,6 +267,14 @@ const milestones: Item[] = [
     description: 'Reached 60K Stars on GitHub!',
     getDateLabel: withLanguage(new Date(2025, 2, 4)),
   },
+  withRelease({
+    icon: mdiTagFaces,
+    iconColor: 'teal',
+    title: 'Manual face tagging',
+    description:
+      'Manually tag or remove faces in photos and videos, even when automatic detection misses or misidentifies them.',
+    release: 'v1.127.0',
+  }),
   withRelease({
     icon: mdiLinkEdit,
     iconColor: 'crimson',
@@ -266,8 +292,8 @@ const milestones: Item[] = [
   withRelease({
     icon: mdiDatabaseOutline,
     iconColor: 'brown',
-    title: 'Automatic database backups',
-    description: 'Database backups are now integrated into the Immich server',
+    title: 'Automatic database dumps',
+    description: 'Database dumps are now integrated into the Immich server',
     release: 'v1.120.0',
   }),
   {
@@ -300,7 +326,7 @@ const milestones: Item[] = [
   withRelease({
     icon: mdiFolderMultiple,
     iconColor: 'brown',
-    title: 'Folders',
+    title: 'Folders view',
     description: 'Browse your photos and videos in their folder structure',
     release: 'v1.113.0',
   }),

docs/static/.well-known/security.txt

@@ -0,0 +1,5 @@
+Policy: https://github.com/immich-app/immich/blob/main/SECURITY.md
+Contact: mailto:security@immich.app
+Preferred-Languages: en
+Expires: 2026-05-01T23:59:00.000Z
+Canonical: https://immich.app/.well-known/security.txt

docs/static/_redirects

@@ -30,3 +30,4 @@
 /docs/guides/api-album-sync /docs/community-projects 307
 /docs/guides/remove-offline-files /docs/community-projects 307
 /milestones /roadmap 307
+/docs/overview/introduction /docs/overview/welcome 307

docs/static/archived-versions.json

@@ -1,36 +1,20 @@
 [
+  {
+    "label": "v1.133.0",
+    "url": "https://v1.133.0.archive.immich.app"
+  },
+  {
+    "label": "v1.132.3",
+    "url": "https://v1.132.3.archive.immich.app"
+  },
   {
     "label": "v1.131.3",
     "url": "https://v1.131.3.archive.immich.app"
   },
-  {
-    "label": "v1.131.2",
-    "url": "https://v1.131.2.archive.immich.app"
-  },
-  {
-    "label": "v1.131.1",
-    "url": "https://v1.131.1.archive.immich.app"
-  },
-  {
-    "label": "v1.131.0",
-    "url": "https://v1.131.0.archive.immich.app"
-  },
   {
     "label": "v1.130.3",
     "url": "https://v1.130.3.archive.immich.app"
   },
-  {
-    "label": "v1.130.2",
-    "url": "https://v1.130.2.archive.immich.app"
-  },
-  {
-    "label": "v1.130.1",
-    "url": "https://v1.130.1.archive.immich.app"
-  },
-  {
-    "label": "v1.130.0",
-    "url": "https://v1.130.0.archive.immich.app"
-  },
   {
     "label": "v1.129.0",
     "url": "https://v1.129.0.archive.immich.app"
@@ -47,46 +31,14 @@
     "label": "v1.126.1",
     "url": "https://v1.126.1.archive.immich.app"
   },
-  {
-    "label": "v1.126.0",
-    "url": "https://v1.126.0.archive.immich.app"
-  },
   {
     "label": "v1.125.7",
     "url": "https://v1.125.7.archive.immich.app"
   },
-  {
-    "label": "v1.125.6",
-    "url": "https://v1.125.6.archive.immich.app"
-  },
-  {
-    "label": "v1.125.5",
-    "url": "https://v1.125.5.archive.immich.app"
-  },
-  {
-    "label": "v1.125.3",
-    "url": "https://v1.125.3.archive.immich.app"
-  },
-  {
-    "label": "v1.125.2",
-    "url": "https://v1.125.2.archive.immich.app"
-  },
-  {
-    "label": "v1.125.1",
-    "url": "https://v1.125.1.archive.immich.app"
-  },
   {
     "label": "v1.124.2",
     "url": "https://v1.124.2.archive.immich.app"
   },
-  {
-    "label": "v1.124.1",
-    "url": "https://v1.124.1.archive.immich.app"
-  },
-  {
-    "label": "v1.124.0",
-    "url": "https://v1.124.0.archive.immich.app"
-  },
   {
     "label": "v1.123.0",
     "url": "https://v1.123.0.archive.immich.app"
@@ -95,18 +47,6 @@
     "label": "v1.122.3",
     "url": "https://v1.122.3.archive.immich.app"
   },
-  {
-    "label": "v1.122.2",
-    "url": "https://v1.122.2.archive.immich.app"
-  },
-  {
-    "label": "v1.122.1",
-    "url": "https://v1.122.1.archive.immich.app"
-  },
-  {
-    "label": "v1.122.0",
-    "url": "https://v1.122.0.archive.immich.app"
-  },
   {
     "label": "v1.121.0",
     "url": "https://v1.121.0.archive.immich.app"
@@ -115,34 +55,14 @@
     "label": "v1.120.2",
     "url": "https://v1.120.2.archive.immich.app"
   },
-  {
-    "label": "v1.120.1",
-    "url": "https://v1.120.1.archive.immich.app"
-  },
-  {
-    "label": "v1.120.0",
-    "url": "https://v1.120.0.archive.immich.app"
-  },
   {
     "label": "v1.119.1",
     "url": "https://v1.119.1.archive.immich.app"
   },
-  {
-    "label": "v1.119.0",
-    "url": "https://v1.119.0.archive.immich.app"
-  },
   {
     "label": "v1.118.2",
     "url": "https://v1.118.2.archive.immich.app"
   },
-  {
-    "label": "v1.118.1",
-    "url": "https://v1.118.1.archive.immich.app"
-  },
-  {
-    "label": "v1.118.0",
-    "url": "https://v1.118.0.archive.immich.app"
-  },
   {
     "label": "v1.117.0",
     "url": "https://v1.117.0.archive.immich.app"
@@ -151,14 +71,6 @@
     "label": "v1.116.2",
     "url": "https://v1.116.2.archive.immich.app"
   },
-  {
-    "label": "v1.116.1",
-    "url": "https://v1.116.1.archive.immich.app"
-  },
-  {
-    "label": "v1.116.0",
-    "url": "https://v1.116.0.archive.immich.app"
-  },
   {
     "label": "v1.115.0",
     "url": "https://v1.115.0.archive.immich.app"
@@ -171,18 +83,10 @@
     "label": "v1.113.1",
     "url": "https://v1.113.1.archive.immich.app"
   },
-  {
-    "label": "v1.113.0",
-    "url": "https://v1.113.0.archive.immich.app"
-  },
   {
     "label": "v1.112.1",
     "url": "https://v1.112.1.archive.immich.app"
   },
-  {
-    "label": "v1.112.0",
-    "url": "https://v1.112.0.archive.immich.app"
-  },
   {
     "label": "v1.111.0",
     "url": "https://v1.111.0.archive.immich.app"
@@ -195,14 +99,6 @@
     "label": "v1.109.2",
     "url": "https://v1.109.2.archive.immich.app"
   },
-  {
-    "label": "v1.109.1",
-    "url": "https://v1.109.1.archive.immich.app"
-  },
-  {
-    "label": "v1.109.0",
-    "url": "https://v1.109.0.archive.immich.app"
-  },
   {
     "label": "v1.108.0",
     "url": "https://v1.108.0.archive.immich.app"
@@ -211,38 +107,14 @@
     "label": "v1.107.2",
     "url": "https://v1.107.2.archive.immich.app"
   },
-  {
-    "label": "v1.107.1",
-    "url": "https://v1.107.1.archive.immich.app"
-  },
-  {
-    "label": "v1.107.0",
-    "url": "https://v1.107.0.archive.immich.app"
-  },
   {
     "label": "v1.106.4",
     "url": "https://v1.106.4.archive.immich.app"
   },
-  {
-    "label": "v1.106.3",
-    "url": "https://v1.106.3.archive.immich.app"
-  },
-  {
-    "label": "v1.106.2",
-    "url": "https://v1.106.2.archive.immich.app"
-  },
-  {
-    "label": "v1.106.1",
-    "url": "https://v1.106.1.archive.immich.app"
-  },
   {
     "label": "v1.105.1",
     "url": "https://v1.105.1.archive.immich.app"
   },
-  {
-    "label": "v1.105.0",
-    "url": "https://v1.105.0.archive.immich.app"
-  },
   {
     "label": "v1.104.0",
     "url": "https://v1.104.0.archive.immich.app"
@@ -251,26 +123,10 @@
     "label": "v1.103.1",
     "url": "https://v1.103.1.archive.immich.app"
   },
-  {
-    "label": "v1.103.0",
-    "url": "https://v1.103.0.archive.immich.app"
-  },
   {
     "label": "v1.102.3",
     "url": "https://v1.102.3.archive.immich.app"
   },
-  {
-    "label": "v1.102.2",
-    "url": "https://v1.102.2.archive.immich.app"
-  },
-  {
-    "label": "v1.102.1",
-    "url": "https://v1.102.1.archive.immich.app"
-  },
-  {
-    "label": "v1.102.0",
-    "url": "https://v1.102.0.archive.immich.app"
-  },
   {
     "label": "v1.101.0",
     "url": "https://v1.101.0.archive.immich.app"

e2e/.nvmrc

@@ -1 +1 @@
-22.14.0
+22.15.1

e2e/docker-compose.yml

@@ -34,11 +34,11 @@ services:
       - 2285:2285
 
   redis:
-    image: redis:6.2-alpine@sha256:148bb5411c184abd288d9aaed139c98123eeb8824c5d3fce03cf721db58066d8
+    image: redis:6.2-alpine@sha256:3211c33a618c457e5d241922c975dbc4f446d0bdb2dc75694f5573ef8e2d01fa
 
   database:
-    image: tensorchord/pgvecto-rs:pg14-v0.2.0@sha256:739cdd626151ff1f796dc95a6591b55a714f341c737e27f045019ceabf8e8c52
-    command: -c fsync=off -c shared_preload_libraries=vectors.so
+    image: ghcr.io/immich-app/postgres:14-vectorchord0.3.0
+    command: -c fsync=off -c shared_preload_libraries=vchord.so -c config_file=/var/lib/postgresql/data/postgresql.conf
     environment:
       POSTGRES_PASSWORD: postgres
       POSTGRES_USER: postgres

e2e/package.json

@@ -1,6 +1,6 @@
 {
   "name": "immich-e2e",
-  "version": "1.131.3",
+  "version": "1.133.0",
   "description": "",
   "main": "index.js",
   "type": "module",
@@ -25,9 +25,9 @@
     "@immich/sdk": "file:../open-api/typescript-sdk",
     "@playwright/test": "^1.44.1",
     "@types/luxon": "^3.4.2",
-    "@types/node": "^22.14.0",
+    "@types/node": "^22.15.18",
     "@types/oidc-provider": "^8.5.1",
-    "@types/pg": "^8.11.0",
+    "@types/pg": "^8.15.1",
     "@types/pngjs": "^6.0.4",
     "@types/supertest": "^6.0.2",
     "@vitest/coverage-v8": "^3.0.0",
@@ -52,6 +52,6 @@
     "vitest": "^3.0.0"
   },
   "volta": {
-    "node": "22.14.0"
+    "node": "22.15.1"
   }
 }

e2e/src/api/specs/activity.e2e-spec.ts

@@ -46,38 +46,6 @@ describe('/activities', () => {
   });
 
   describe('GET /activities', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get('/activities');
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
-    it('should require an albumId', async () => {
-      const { status, body } = await request(app)
-        .get('/activities')
-        .set('Authorization', `Bearer ${admin.accessToken}`);
-      expect(status).toEqual(400);
-      expect(body).toEqual(errorDto.badRequest(expect.arrayContaining(['albumId must be a UUID'])));
-    });
-
-    it('should reject an invalid albumId', async () => {
-      const { status, body } = await request(app)
-        .get('/activities')
-        .query({ albumId: uuidDto.invalid })
-        .set('Authorization', `Bearer ${admin.accessToken}`);
-      expect(status).toEqual(400);
-      expect(body).toEqual(errorDto.badRequest(expect.arrayContaining(['albumId must be a UUID'])));
-    });
-
-    it('should reject an invalid assetId', async () => {
-      const { status, body } = await request(app)
-        .get('/activities')
-        .query({ albumId: uuidDto.notFound, assetId: uuidDto.invalid })
-        .set('Authorization', `Bearer ${admin.accessToken}`);
-      expect(status).toEqual(400);
-      expect(body).toEqual(errorDto.badRequest(expect.arrayContaining(['assetId must be a UUID'])));
-    });
-
     it('should start off empty', async () => {
       const { status, body } = await request(app)
         .get('/activities')
@@ -192,30 +160,6 @@ describe('/activities', () => {
   });
 
   describe('POST /activities', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).post('/activities');
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
-    it('should require an albumId', async () => {
-      const { status, body } = await request(app)
-        .post('/activities')
-        .set('Authorization', `Bearer ${admin.accessToken}`)
-        .send({ albumId: uuidDto.invalid });
-      expect(status).toEqual(400);
-      expect(body).toEqual(errorDto.badRequest(expect.arrayContaining(['albumId must be a UUID'])));
-    });
-
-    it('should require a comment when type is comment', async () => {
-      const { status, body } = await request(app)
-        .post('/activities')
-        .set('Authorization', `Bearer ${admin.accessToken}`)
-        .send({ albumId: uuidDto.notFound, type: 'comment', comment: null });
-      expect(status).toEqual(400);
-      expect(body).toEqual(errorDto.badRequest(['comment must be a string', 'comment should not be empty']));
-    });
-
     it('should add a comment to an album', async () => {
       const { status, body } = await request(app)
         .post('/activities')
@@ -330,20 +274,6 @@ describe('/activities', () => {
   });
 
   describe('DELETE /activities/:id', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).delete(`/activities/${uuidDto.notFound}`);
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
-    it('should require a valid uuid', async () => {
-      const { status, body } = await request(app)
-        .delete(`/activities/${uuidDto.invalid}`)
-        .set('Authorization', `Bearer ${admin.accessToken}`);
-      expect(status).toBe(400);
-      expect(body).toEqual(errorDto.badRequest(['id must be a UUID']));
-    });
-
     it('should remove a comment from an album', async () => {
       const reaction = await createActivity({
         albumId: album.id,

e2e/src/api/specs/album.e2e-spec.ts

@@ -9,7 +9,7 @@ import {
   LoginResponseDto,
   SharedLinkType,
 } from '@immich/sdk';
-import { createUserDto, uuidDto } from 'src/fixtures';
+import { createUserDto } from 'src/fixtures';
 import { errorDto } from 'src/responses';
 import { app, asBearerAuth, utils } from 'src/utils';
 import request from 'supertest';
@@ -128,28 +128,6 @@ describe('/albums', () => {
   });
 
   describe('GET /albums', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get('/albums');
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
-    it('should reject an invalid shared param', async () => {
-      const { status, body } = await request(app)
-        .get('/albums?shared=invalid')
-        .set('Authorization', `Bearer ${user1.accessToken}`);
-      expect(status).toEqual(400);
-      expect(body).toEqual(errorDto.badRequest(['shared must be a boolean value']));
-    });
-
-    it('should reject an invalid assetId param', async () => {
-      const { status, body } = await request(app)
-        .get('/albums?assetId=invalid')
-        .set('Authorization', `Bearer ${user1.accessToken}`);
-      expect(status).toEqual(400);
-      expect(body).toEqual(errorDto.badRequest(['assetId must be a UUID']));
-    });
-
     it("should not show other users' favorites", async () => {
       const { status, body } = await request(app)
         .get(`/albums/${user1Albums[0].id}?withoutAssets=false`)
@@ -323,12 +301,6 @@ describe('/albums', () => {
   });
 
   describe('GET /albums/:id', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get(`/albums/${user1Albums[0].id}`);
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should return album info for own album', async () => {
       const { status, body } = await request(app)
         .get(`/albums/${user1Albums[0].id}?withoutAssets=false`)
@@ -421,12 +393,6 @@ describe('/albums', () => {
   });
 
   describe('GET /albums/statistics', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get('/albums/statistics');
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should return total count of albums the user has access to', async () => {
       const { status, body } = await request(app)
         .get('/albums/statistics')
@@ -438,12 +404,6 @@ describe('/albums', () => {
   });
 
   describe('POST /albums', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).post('/albums').send({ albumName: 'New album' });
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should create an album', async () => {
       const { status, body } = await request(app)
         .post('/albums')
@@ -471,12 +431,6 @@ describe('/albums', () => {
   });
 
   describe('PUT /albums/:id/assets', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).put(`/albums/${user1Albums[0].id}/assets`);
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should be able to add own asset to own album', async () => {
       const asset = await utils.createAsset(user1.accessToken);
       const { status, body } = await request(app)
@@ -526,14 +480,6 @@ describe('/albums', () => {
   });
 
   describe('PATCH /albums/:id', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app)
-        .patch(`/albums/${uuidDto.notFound}`)
-        .send({ albumName: 'New album name' });
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should update an album', async () => {
       const album = await utils.createAlbum(user1.accessToken, {
         albumName: 'New album',
@@ -576,15 +522,6 @@ describe('/albums', () => {
   });
 
   describe('DELETE /albums/:id/assets', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app)
-        .delete(`/albums/${user1Albums[0].id}/assets`)
-        .send({ ids: [user1Asset1.id] });
-
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should require authorization', async () => {
       const { status, body } = await request(app)
         .delete(`/albums/${user1Albums[1].id}/assets`)
@@ -679,13 +616,6 @@ describe('/albums', () => {
       });
     });
 
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).put(`/albums/${user1Albums[0].id}/users`).send({ sharedUserIds: [] });
-
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should be able to add user to own album', async () => {
       const { status, body } = await request(app)
         .put(`/albums/${album.id}/users`)

e2e/src/api/specs/api-key.e2e-spec.ts

@@ -1,5 +1,5 @@
 import { LoginResponseDto, Permission, createApiKey } from '@immich/sdk';
-import { createUserDto, uuidDto } from 'src/fixtures';
+import { createUserDto } from 'src/fixtures';
 import { errorDto } from 'src/responses';
 import { app, asBearerAuth, utils } from 'src/utils';
 import request from 'supertest';
@@ -24,12 +24,6 @@ describe('/api-keys', () => {
   });
 
   describe('POST /api-keys', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).post('/api-keys').send({ name: 'API Key' });
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should not work without permission', async () => {
       const { secret } = await create(user.accessToken, [Permission.ApiKeyRead]);
       const { status, body } = await request(app).post('/api-keys').set('x-api-key', secret).send({ name: 'API Key' });
@@ -99,12 +93,6 @@ describe('/api-keys', () => {
   });
 
   describe('GET /api-keys', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get('/api-keys');
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should start off empty', async () => {
       const { status, body } = await request(app).get('/api-keys').set('Authorization', `Bearer ${admin.accessToken}`);
       expect(body).toEqual([]);
@@ -125,12 +113,6 @@ describe('/api-keys', () => {
   });
 
   describe('GET /api-keys/:id', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get(`/api-keys/${uuidDto.notFound}`);
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should require authorization', async () => {
       const { apiKey } = await create(user.accessToken, [Permission.All]);
       const { status, body } = await request(app)
@@ -140,14 +122,6 @@ describe('/api-keys', () => {
       expect(body).toEqual(errorDto.badRequest('API Key not found'));
     });
 
-    it('should require a valid uuid', async () => {
-      const { status, body } = await request(app)
-        .get(`/api-keys/${uuidDto.invalid}`)
-        .set('Authorization', `Bearer ${admin.accessToken}`);
-      expect(status).toBe(400);
-      expect(body).toEqual(errorDto.badRequest(['id must be a UUID']));
-    });
-
     it('should get api key details', async () => {
       const { apiKey } = await create(user.accessToken, [Permission.All]);
       const { status, body } = await request(app)
@@ -165,12 +139,6 @@ describe('/api-keys', () => {
   });
 
   describe('PUT /api-keys/:id', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).put(`/api-keys/${uuidDto.notFound}`).send({ name: 'new name' });
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should require authorization', async () => {
       const { apiKey } = await create(user.accessToken, [Permission.All]);
       const { status, body } = await request(app)
@@ -181,15 +149,6 @@ describe('/api-keys', () => {
       expect(body).toEqual(errorDto.badRequest('API Key not found'));
     });
 
-    it('should require a valid uuid', async () => {
-      const { status, body } = await request(app)
-        .put(`/api-keys/${uuidDto.invalid}`)
-        .send({ name: 'new name' })
-        .set('Authorization', `Bearer ${admin.accessToken}`);
-      expect(status).toBe(400);
-      expect(body).toEqual(errorDto.badRequest(['id must be a UUID']));
-    });
-
     it('should update api key details', async () => {
       const { apiKey } = await create(user.accessToken, [Permission.All]);
       const { status, body } = await request(app)
@@ -208,12 +167,6 @@ describe('/api-keys', () => {
   });
 
   describe('DELETE /api-keys/:id', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).delete(`/api-keys/${uuidDto.notFound}`);
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should require authorization', async () => {
       const { apiKey } = await create(user.accessToken, [Permission.All]);
       const { status, body } = await request(app)
@@ -223,14 +176,6 @@ describe('/api-keys', () => {
       expect(body).toEqual(errorDto.badRequest('API Key not found'));
     });
 
-    it('should require a valid uuid', async () => {
-      const { status, body } = await request(app)
-        .delete(`/api-keys/${uuidDto.invalid}`)
-        .set('Authorization', `Bearer ${admin.accessToken}`);
-      expect(status).toBe(400);
-      expect(body).toEqual(errorDto.badRequest(['id must be a UUID']));
-    });
-
     it('should delete an api key', async () => {
       const { apiKey } = await create(user.accessToken, [Permission.All]);
       const { status } = await request(app)

e2e/src/api/specs/asset.e2e-spec.ts

@@ -3,6 +3,7 @@ import {
   AssetMediaStatus,
   AssetResponseDto,
   AssetTypeEnum,
+  AssetVisibility,
   getAssetInfo,
   getMyUser,
   LoginResponseDto,
@@ -22,27 +23,9 @@ import { app, asBearerAuth, tempDir, TEN_TIMES, testAssetDir, utils } from 'src/
 import request from 'supertest';
 import { afterAll, beforeAll, describe, expect, it } from 'vitest';
 
-const makeUploadDto = (options?: { omit: string }): Record<string, any> => {
-  const dto: Record<string, any> = {
-    deviceAssetId: 'example-image',
-    deviceId: 'TEST',
-    fileCreatedAt: new Date().toISOString(),
-    fileModifiedAt: new Date().toISOString(),
-    isFavorite: 'testing',
-    duration: '0:00:00.000000',
-  };
-
-  const omit = options?.omit;
-  if (omit) {
-    delete dto[omit];
-  }
-
-  return dto;
-};
-
 const locationAssetFilepath = `${testAssetDir}/metadata/gps-position/thompson-springs.jpg`;
 const ratingAssetFilepath = `${testAssetDir}/metadata/rating/mongolels.jpg`;
-const facesAssetFilepath = `${testAssetDir}/metadata/faces/portrait.jpg`;
+const facesAssetDir = `${testAssetDir}/metadata/faces`;
 
 const readTags = async (bytes: Buffer, filename: string) => {
   const filepath = join(tempDir, filename);
@@ -137,9 +120,9 @@ describe('/asset', () => {
       // stats
       utils.createAsset(statsUser.accessToken),
       utils.createAsset(statsUser.accessToken, { isFavorite: true }),
-      utils.createAsset(statsUser.accessToken, { isArchived: true }),
+      utils.createAsset(statsUser.accessToken, { visibility: AssetVisibility.Archive }),
       utils.createAsset(statsUser.accessToken, {
-        isArchived: true,
+        visibility: AssetVisibility.Archive,
         isFavorite: true,
         assetData: { filename: 'example.mp4' },
       }),
@@ -160,13 +143,6 @@ describe('/asset', () => {
   });
 
   describe('GET /assets/:id/original', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get(`/assets/${uuidDto.notFound}/original`);
-
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should download the file', async () => {
       const response = await request(app)
         .get(`/assets/${user1Assets[0].id}/original`)
@@ -178,20 +154,6 @@ describe('/asset', () => {
   });
 
   describe('GET /assets/:id', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get(`/assets/${uuidDto.notFound}`);
-      expect(body).toEqual(errorDto.unauthorized);
-      expect(status).toBe(401);
-    });
-
-    it('should require a valid id', async () => {
-      const { status, body } = await request(app)
-        .get(`/assets/${uuidDto.invalid}`)
-        .set('Authorization', `Bearer ${user1.accessToken}`);
-      expect(status).toBe(400);
-      expect(body).toEqual(errorDto.badRequest(['id must be a UUID']));
-    });
-
     it('should require access', async () => {
       const { status, body } = await request(app)
         .get(`/assets/${user2Assets[0].id}`)
@@ -224,31 +186,22 @@ describe('/asset', () => {
       });
     });
 
-    it('should get the asset faces', async () => {
-      const config = await utils.getSystemConfig(admin.accessToken);
-      config.metadata.faces.import = true;
-      await updateConfig({ systemConfigDto: config }, { headers: asBearerAuth(admin.accessToken) });
-
-      // asset faces
-      const facesAsset = await utils.createAsset(admin.accessToken, {
-        assetData: {
+    describe('faces', () => {
+      const metadataFaceTests = [
+        {
+          description: 'without orientation',
           filename: 'portrait.jpg',
-          bytes: await readFile(facesAssetFilepath),
         },
-      });
-
-      await utils.waitForWebsocketEvent({ event: 'assetUpload', id: facesAsset.id });
-
-      const { status, body } = await request(app)
-        .get(`/assets/${facesAsset.id}`)
-        .set('Authorization', `Bearer ${admin.accessToken}`);
-      expect(status).toBe(200);
-      expect(body.id).toEqual(facesAsset.id);
-      expect(body.people).toMatchObject([
+        {
+          description: 'adjusting face regions to orientation',
+          filename: 'portrait-orientation-6.jpg',
+        },
+      ];
+      // should produce same resulting face region coordinates for any orientation
+      const expectedFaces = [
         {
           name: 'Marie Curie',
           birthDate: null,
-          thumbnailPath: '',
           isHidden: false,
           faces: [
             {
@@ -265,7 +218,6 @@ describe('/asset', () => {
         {
           name: 'Pierre Curie',
           birthDate: null,
-          thumbnailPath: '',
           isHidden: false,
           faces: [
             {
@@ -279,7 +231,30 @@ describe('/asset', () => {
             },
           ],
         },
-      ]);
+      ];
+
+      it.each(metadataFaceTests)('should get the asset faces from $filename $description', async ({ filename }) => {
+        const config = await utils.getSystemConfig(admin.accessToken);
+        config.metadata.faces.import = true;
+        await updateConfig({ systemConfigDto: config }, { headers: asBearerAuth(admin.accessToken) });
+
+        const facesAsset = await utils.createAsset(admin.accessToken, {
+          assetData: {
+            filename,
+            bytes: await readFile(`${facesAssetDir}/${filename}`),
+          },
+        });
+
+        await utils.waitForWebsocketEvent({ event: 'assetUpload', id: facesAsset.id });
+
+        const { status, body } = await request(app)
+          .get(`/assets/${facesAsset.id}`)
+          .set('Authorization', `Bearer ${admin.accessToken}`);
+
+        expect(status).toBe(200);
+        expect(body.id).toEqual(facesAsset.id);
+        expect(body.people).toMatchObject(expectedFaces);
+      });
     });
 
     it('should work with a shared link', async () => {
@@ -333,7 +308,7 @@ describe('/asset', () => {
       });
 
       it('disallows viewing archived assets', async () => {
-        const asset = await utils.createAsset(user1.accessToken, { isArchived: true });
+        const asset = await utils.createAsset(user1.accessToken, { visibility: AssetVisibility.Archive });
 
         const { status } = await request(app)
           .get(`/assets/${asset.id}`)
@@ -354,13 +329,6 @@ describe('/asset', () => {
   });
 
   describe('GET /assets/statistics', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get('/assets/statistics');
-
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should return stats of all assets', async () => {
       const { status, body } = await request(app)
         .get('/assets/statistics')
@@ -384,7 +352,7 @@ describe('/asset', () => {
       const { status, body } = await request(app)
         .get('/assets/statistics')
         .set('Authorization', `Bearer ${statsUser.accessToken}`)
-        .query({ isArchived: true });
+        .query({ visibility: AssetVisibility.Archive });
 
       expect(status).toBe(200);
       expect(body).toEqual({ images: 1, videos: 1, total: 2 });
@@ -394,7 +362,7 @@ describe('/asset', () => {
       const { status, body } = await request(app)
         .get('/assets/statistics')
         .set('Authorization', `Bearer ${statsUser.accessToken}`)
-        .query({ isFavorite: true, isArchived: true });
+        .query({ isFavorite: true, visibility: AssetVisibility.Archive });
 
       expect(status).toBe(200);
       expect(body).toEqual({ images: 0, videos: 1, total: 1 });
@@ -404,7 +372,7 @@ describe('/asset', () => {
       const { status, body } = await request(app)
         .get('/assets/statistics')
         .set('Authorization', `Bearer ${statsUser.accessToken}`)
-        .query({ isFavorite: false, isArchived: false });
+        .query({ isFavorite: false, visibility: AssetVisibility.Timeline });
 
       expect(status).toBe(200);
       expect(body).toEqual({ images: 1, videos: 0, total: 1 });
@@ -425,13 +393,6 @@ describe('/asset', () => {
       await utils.waitForQueueFinish(admin.accessToken, 'thumbnailGeneration');
     });
 
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get('/assets/random');
-
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it.each(TEN_TIMES)('should return 1 random assets', async () => {
       const { status, body } = await request(app)
         .get('/assets/random')
@@ -467,31 +428,9 @@ describe('/asset', () => {
       expect(status).toBe(200);
       expect(body).toEqual([expect.objectContaining({ id: user2Assets[0].id })]);
     });
-
-    it('should return error', async () => {
-      const { status } = await request(app)
-        .get('/assets/random?count=ABC')
-        .set('Authorization', `Bearer ${user1.accessToken}`);
-
-      expect(status).toBe(400);
-    });
   });
 
   describe('PUT /assets/:id', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).put(`/assets/:${uuidDto.notFound}`);
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
-    it('should require a valid id', async () => {
-      const { status, body } = await request(app)
-        .put(`/assets/${uuidDto.invalid}`)
-        .set('Authorization', `Bearer ${user1.accessToken}`);
-      expect(status).toBe(400);
-      expect(body).toEqual(errorDto.badRequest(['id must be a UUID']));
-    });
-
     it('should require access', async () => {
       const { status, body } = await request(app)
         .put(`/assets/${user2Assets[0].id}`)
@@ -519,7 +458,7 @@ describe('/asset', () => {
       const { status, body } = await request(app)
         .put(`/assets/${user1Assets[0].id}`)
         .set('Authorization', `Bearer ${user1.accessToken}`)
-        .send({ isArchived: true });
+        .send({ visibility: AssetVisibility.Archive });
       expect(body).toMatchObject({ id: user1Assets[0].id, isArchived: true });
       expect(status).toEqual(200);
     });
@@ -619,28 +558,6 @@ describe('/asset', () => {
       expect(status).toEqual(200);
     });
 
-    it('should reject invalid gps coordinates', async () => {
-      for (const test of [
-        { latitude: 12 },
-        { longitude: 12 },
-        { latitude: 12, longitude: 'abc' },
-        { latitude: 'abc', longitude: 12 },
-        { latitude: null, longitude: 12 },
-        { latitude: 12, longitude: null },
-        { latitude: 91, longitude: 12 },
-        { latitude: -91, longitude: 12 },
-        { latitude: 12, longitude: -181 },
-        { latitude: 12, longitude: 181 },
-      ]) {
-        const { status, body } = await request(app)
-          .put(`/assets/${user1Assets[0].id}`)
-          .send(test)
-          .set('Authorization', `Bearer ${user1.accessToken}`);
-        expect(status).toBe(400);
-        expect(body).toEqual(errorDto.badRequest());
-      }
-    });
-
     it('should update gps data', async () => {
       const { status, body } = await request(app)
         .put(`/assets/${user1Assets[0].id}`)
@@ -712,17 +629,6 @@ describe('/asset', () => {
       expect(status).toEqual(200);
     });
 
-    it('should reject invalid rating', async () => {
-      for (const test of [{ rating: 7 }, { rating: 3.5 }, { rating: null }]) {
-        const { status, body } = await request(app)
-          .put(`/assets/${user1Assets[0].id}`)
-          .send(test)
-          .set('Authorization', `Bearer ${user1.accessToken}`);
-        expect(status).toBe(400);
-        expect(body).toEqual(errorDto.badRequest());
-      }
-    });
-
     it('should return tagged people', async () => {
       const { status, body } = await request(app)
         .put(`/assets/${user1Assets[0].id}`)
@@ -746,25 +652,6 @@ describe('/asset', () => {
   });
 
   describe('DELETE /assets', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app)
-        .delete(`/assets`)
-        .send({ ids: [uuidDto.notFound] });
-
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
-    it('should require a valid uuid', async () => {
-      const { status, body } = await request(app)
-        .delete(`/assets`)
-        .send({ ids: [uuidDto.invalid] })
-        .set('Authorization', `Bearer ${admin.accessToken}`);
-
-      expect(status).toBe(400);
-      expect(body).toEqual(errorDto.badRequest(['each value in ids must be a UUID']));
-    });
-
     it('should throw an error when the id is not found', async () => {
       const { status, body } = await request(app)
         .delete(`/assets`)
@@ -877,13 +764,6 @@ describe('/asset', () => {
   });
 
   describe('GET /assets/:id/thumbnail', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get(`/assets/${locationAsset.id}/thumbnail`);
-
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should not include gps data for webp thumbnails', async () => {
       await utils.waitForWebsocketEvent({
         event: 'assetUpload',
@@ -919,13 +799,6 @@ describe('/asset', () => {
   });
 
   describe('GET /assets/:id/original', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get(`/assets/${locationAsset.id}/original`);
-
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should download the original', async () => {
       const { status, body, type } = await request(app)
         .get(`/assets/${locationAsset.id}/original`)
@@ -946,43 +819,9 @@ describe('/asset', () => {
     });
   });
 
-  describe('PUT /assets', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).put('/assets');
-
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-  });
-
   describe('POST /assets', () => {
     beforeAll(setupTests, 30_000);
 
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).post(`/assets`);
-      expect(body).toEqual(errorDto.unauthorized);
-      expect(status).toBe(401);
-    });
-
-    it.each([
-      { should: 'require `deviceAssetId`', dto: { ...makeUploadDto({ omit: 'deviceAssetId' }) } },
-      { should: 'require `deviceId`', dto: { ...makeUploadDto({ omit: 'deviceId' }) } },
-      { should: 'require `fileCreatedAt`', dto: { ...makeUploadDto({ omit: 'fileCreatedAt' }) } },
-      { should: 'require `fileModifiedAt`', dto: { ...makeUploadDto({ omit: 'fileModifiedAt' }) } },
-      { should: 'require `duration`', dto: { ...makeUploadDto({ omit: 'duration' }) } },
-      { should: 'throw if `isFavorite` is not a boolean', dto: { ...makeUploadDto(), isFavorite: 'not-a-boolean' } },
-      { should: 'throw if `isVisible` is not a boolean', dto: { ...makeUploadDto(), isVisible: 'not-a-boolean' } },
-      { should: 'throw if `isArchived` is not a boolean', dto: { ...makeUploadDto(), isArchived: 'not-a-boolean' } },
-    ])('should $should', async ({ dto }) => {
-      const { status, body } = await request(app)
-        .post('/assets')
-        .set('Authorization', `Bearer ${user1.accessToken}`)
-        .attach('assetData', makeRandomImage(), 'example.png')
-        .field(dto);
-      expect(status).toBe(400);
-      expect(body).toEqual(errorDto.badRequest());
-    });
-
     const tests = [
       {
         input: 'formats/avif/8bit-sRGB.avif',
@@ -1244,31 +1083,21 @@ describe('/asset', () => {
       },
     ];
 
-    it(`should upload and generate a thumbnail for different file types`, async () => {
-      // upload in parallel
-      const assets = await Promise.all(
-        tests.map(async ({ input }) => {
-          const filepath = join(testAssetDir, input);
-          return utils.createAsset(admin.accessToken, {
-            assetData: { bytes: await readFile(filepath), filename: basename(filepath) },
-          });
-        }),
-      );
+    it.each(tests)(`should upload and generate a thumbnail for different file types`, async ({ input, expected }) => {
+      const filepath = join(testAssetDir, input);
+      const response = await utils.createAsset(admin.accessToken, {
+        assetData: { bytes: await readFile(filepath), filename: basename(filepath) },
+      });
 
-      for (const { id, status } of assets) {
-        expect(status).toBe(AssetMediaStatus.Created);
-        // longer timeout as the thumbnail generation from full-size raw files can take a while
-        await utils.waitForWebsocketEvent({ event: 'assetUpload', id });
-      }
+      expect(response.status).toBe(AssetMediaStatus.Created);
+      const id = response.id;
+      // longer timeout as the thumbnail generation from full-size raw files can take a while
+      await utils.waitForWebsocketEvent({ event: 'assetUpload', id });
 
-      for (const [i, { id }] of assets.entries()) {
-        const { expected } = tests[i];
-        const asset = await utils.getAssetInfo(admin.accessToken, id);
-
-        expect(asset.exifInfo).toBeDefined();
-        expect(asset.exifInfo).toMatchObject(expected.exifInfo);
-        expect(asset).toMatchObject(expected);
-      }
+      const asset = await utils.getAssetInfo(admin.accessToken, id);
+      expect(asset.exifInfo).toBeDefined();
+      expect(asset.exifInfo).toMatchObject(expected.exifInfo);
+      expect(asset).toMatchObject(expected);
     });
 
     it('should handle a duplicate', async () => {

e2e/src/api/specs/audit.e2e-spec.ts

@@ -1,43 +0,0 @@
-import { deleteAssets, getAuditFiles, updateAsset, type LoginResponseDto } from '@immich/sdk';
-import { asBearerAuth, utils } from 'src/utils';
-import { beforeAll, describe, expect, it } from 'vitest';
-
-describe('/audits', () => {
-  let admin: LoginResponseDto;
-
-  beforeAll(async () => {
-    await utils.resetDatabase();
-    await utils.resetFilesystem();
-
-    admin = await utils.adminSetup();
-  });
-
-  // TODO: Enable these tests again once #7436 is resolved as these were flaky
-  describe.skip('GET :/file-report', () => {
-    it('excludes assets without issues from report', async () => {
-      const [trashedAsset, archivedAsset] = await Promise.all([
-        utils.createAsset(admin.accessToken),
-        utils.createAsset(admin.accessToken),
-        utils.createAsset(admin.accessToken),
-      ]);
-
-      await Promise.all([
-        deleteAssets({ assetBulkDeleteDto: { ids: [trashedAsset.id] } }, { headers: asBearerAuth(admin.accessToken) }),
-        updateAsset(
-          {
-            id: archivedAsset.id,
-            updateAssetDto: { isArchived: true },
-          },
-          { headers: asBearerAuth(admin.accessToken) },
-        ),
-      ]);
-
-      const body = await getAuditFiles({
-        headers: asBearerAuth(admin.accessToken),
-      });
-
-      expect(body.orphans).toHaveLength(0);
-      expect(body.extras).toHaveLength(0);
-    });
-  });
-});

e2e/src/api/specs/auth.e2e-spec.ts

@@ -19,17 +19,6 @@ describe(`/auth/admin-sign-up`, () => {
       expect(body).toEqual(signupResponseDto.admin);
     });
 
-    it('should sign up the admin with a local domain', async () => {
-      const { status, body } = await request(app)
-        .post('/auth/admin-sign-up')
-        .send({ ...signupDto.admin, email: 'admin@local' });
-      expect(status).toEqual(201);
-      expect(body).toEqual({
-        ...signupResponseDto.admin,
-        email: 'admin@local',
-      });
-    });
-
     it('should not allow a second admin to sign up', async () => {
       await signUpAdmin({ signUpDto: signupDto.admin });
 
@@ -57,22 +46,6 @@ describe('/auth/*', () => {
       expect(body).toEqual(errorDto.incorrectLogin);
     });
 
-    for (const key of Object.keys(loginDto.admin)) {
-      it(`should not allow null ${key}`, async () => {
-        const { status, body } = await request(app)
-          .post('/auth/login')
-          .send({ ...loginDto.admin, [key]: null });
-        expect(status).toBe(400);
-        expect(body).toEqual(errorDto.badRequest());
-      });
-
-      it('should reject an invalid email', async () => {
-        const { status, body } = await request(app).post('/auth/login').send({ email: [], password });
-        expect(status).toBe(400);
-        expect(body).toEqual(errorDto.invalidEmail);
-      });
-    }
-
     it('should accept a correct password', async () => {
       const { status, body, headers } = await request(app).post('/auth/login').send({ email, password });
       expect(status).toBe(201);
@@ -127,14 +100,6 @@ describe('/auth/*', () => {
   });
 
   describe('POST /auth/change-password', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app)
-        .post(`/auth/change-password`)
-        .send({ password, newPassword: 'Password1234' });
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should require the current password', async () => {
       const { status, body } = await request(app)
         .post(`/auth/change-password`)

e2e/src/api/specs/download.e2e-spec.ts

@@ -1,6 +1,5 @@
 import { AssetMediaResponseDto, LoginResponseDto } from '@immich/sdk';
 import { readFile, writeFile } from 'node:fs/promises';
-import { errorDto } from 'src/responses';
 import { app, tempDir, utils } from 'src/utils';
 import request from 'supertest';
 import { beforeAll, describe, expect, it } from 'vitest';
@@ -17,15 +16,6 @@ describe('/download', () => {
   });
 
   describe('POST /download/info', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app)
-        .post(`/download/info`)
-        .send({ assetIds: [asset1.id] });
-
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should download info', async () => {
       const { status, body } = await request(app)
         .post('/download/info')
@@ -42,15 +32,6 @@ describe('/download', () => {
   });
 
   describe('POST /download/archive', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app)
-        .post(`/download/archive`)
-        .send({ assetIds: [asset1.id, asset2.id] });
-
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should download an archive', async () => {
       const { status, body } = await request(app)
         .post('/download/archive')

e2e/src/api/specs/map.e2e-spec.ts

@@ -1,4 +1,4 @@
-import { LoginResponseDto } from '@immich/sdk';
+import { AssetVisibility, LoginResponseDto } from '@immich/sdk';
 import { readFile } from 'node:fs/promises';
 import { basename, join } from 'node:path';
 import { Socket } from 'socket.io-client';
@@ -44,7 +44,7 @@ describe('/map', () => {
     it('should get map markers for all non-archived assets', async () => {
       const { status, body } = await request(app)
         .get('/map/markers')
-        .query({ isArchived: false })
+        .query({ visibility: AssetVisibility.Timeline })
         .set('Authorization', `Bearer ${admin.accessToken}`);
 
       expect(status).toBe(200);

e2e/src/api/specs/oauth.e2e-spec.ts

@@ -6,6 +6,7 @@ import {
   startOAuth,
   updateConfig,
 } from '@immich/sdk';
+import { createHash, randomBytes } from 'node:crypto';
 import { errorDto } from 'src/responses';
 import { OAuthClient, OAuthUser } from 'src/setup/auth-server';
 import { app, asBearerAuth, baseUrl, utils } from 'src/utils';
@@ -21,18 +22,30 @@ const mobileOverrideRedirectUri = 'https://photos.immich.app/oauth/mobile-redire
 
 const redirect = async (url: string, cookies?: string[]) => {
   const { headers } = await request(url)
-    .get('/')
+    .get('')
     .set('Cookie', cookies || []);
   return { cookies: (headers['set-cookie'] as unknown as string[]) || [], location: headers.location };
 };
 
+// Function to generate a code challenge from the verifier
+const generateCodeChallenge = async (codeVerifier: string): Promise<string> => {
+  const hashed = createHash('sha256').update(codeVerifier).digest();
+  return hashed.toString('base64url');
+};
+
 const loginWithOAuth = async (sub: OAuthUser | string, redirectUri?: string) => {
-  const { url } = await startOAuth({ oAuthConfigDto: { redirectUri: redirectUri ?? `${baseUrl}/auth/login` } });
+  const state = randomBytes(16).toString('base64url');
+  const codeVerifier = randomBytes(64).toString('base64url');
+  const codeChallenge = await generateCodeChallenge(codeVerifier);
+
+  const { url } = await startOAuth({
+    oAuthConfigDto: { redirectUri: redirectUri ?? `${baseUrl}/auth/login`, state, codeChallenge },
+  });
 
   // login
   const response1 = await redirect(url.replace(authServer.internal, authServer.external));
   const response2 = await request(authServer.external + response1.location)
-    .post('/')
+    .post('')
     .set('Cookie', response1.cookies)
     .type('form')
     .send({ prompt: 'login', login: sub, password: 'password' });
@@ -40,7 +53,7 @@ const loginWithOAuth = async (sub: OAuthUser | string, redirectUri?: string) =>
   // approve
   const response3 = await redirect(response2.header.location, response1.cookies);
   const response4 = await request(authServer.external + response3.location)
-    .post('/')
+    .post('')
     .type('form')
     .set('Cookie', response3.cookies)
     .send({ prompt: 'consent' });
@@ -51,9 +64,9 @@ const loginWithOAuth = async (sub: OAuthUser | string, redirectUri?: string) =>
   expect(redirectUrl).toBeDefined();
   const params = new URL(redirectUrl).searchParams;
   expect(params.get('code')).toBeDefined();
-  expect(params.get('state')).toBeDefined();
+  expect(params.get('state')).toBe(state);
 
-  return redirectUrl;
+  return { url: redirectUrl, state, codeVerifier };
 };
 
 const setupOAuth = async (token: string, dto: Partial<SystemConfigOAuthDto>) => {
@@ -119,9 +132,42 @@ describe(`/oauth`, () => {
       expect(body).toEqual(errorDto.badRequest(['url should not be empty']));
     });
 
-    it('should auto register the user by default', async () => {
-      const url = await loginWithOAuth('oauth-auto-register');
+    it(`should throw an error if the state is not provided`, async () => {
+      const { url } = await loginWithOAuth('oauth-auto-register');
       const { status, body } = await request(app).post('/oauth/callback').send({ url });
+      expect(status).toBe(400);
+      expect(body).toEqual(errorDto.badRequest('OAuth state is missing'));
+    });
+
+    it(`should throw an error if the state mismatches`, async () => {
+      const callbackParams = await loginWithOAuth('oauth-auto-register');
+      const { state } = await loginWithOAuth('oauth-auto-register');
+      const { status } = await request(app)
+        .post('/oauth/callback')
+        .send({ ...callbackParams, state });
+      expect(status).toBeGreaterThanOrEqual(400);
+    });
+
+    it(`should throw an error if the codeVerifier is not provided`, async () => {
+      const { url, state } = await loginWithOAuth('oauth-auto-register');
+      const { status, body } = await request(app).post('/oauth/callback').send({ url, state });
+      expect(status).toBe(400);
+      expect(body).toEqual(errorDto.badRequest('OAuth code verifier is missing'));
+    });
+
+    it(`should throw an error if the codeVerifier doesn't match the challenge`, async () => {
+      const callbackParams = await loginWithOAuth('oauth-auto-register');
+      const { codeVerifier } = await loginWithOAuth('oauth-auto-register');
+      const { status, body } = await request(app)
+        .post('/oauth/callback')
+        .send({ ...callbackParams, codeVerifier });
+      console.log(body);
+      expect(status).toBeGreaterThanOrEqual(400);
+    });
+
+    it('should auto register the user by default', async () => {
+      const callbackParams = await loginWithOAuth('oauth-auto-register');
+      const { status, body } = await request(app).post('/oauth/callback').send(callbackParams);
       expect(status).toBe(201);
       expect(body).toMatchObject({
         accessToken: expect.any(String),
@@ -132,16 +178,30 @@ describe(`/oauth`, () => {
       });
     });
 
+    it('should allow passing state and codeVerifier via cookies', async () => {
+      const { url, state, codeVerifier } = await loginWithOAuth('oauth-auto-register');
+      const { status, body } = await request(app)
+        .post('/oauth/callback')
+        .set('Cookie', [`immich_oauth_state=${state}`, `immich_oauth_code_verifier=${codeVerifier}`])
+        .send({ url });
+      expect(status).toBe(201);
+      expect(body).toMatchObject({
+        accessToken: expect.any(String),
+        userId: expect.any(String),
+        userEmail: 'oauth-auto-register@immich.app',
+      });
+    });
+
     it('should handle a user without an email', async () => {
-      const url = await loginWithOAuth(OAuthUser.NO_EMAIL);
-      const { status, body } = await request(app).post('/oauth/callback').send({ url });
+      const callbackParams = await loginWithOAuth(OAuthUser.NO_EMAIL);
+      const { status, body } = await request(app).post('/oauth/callback').send(callbackParams);
       expect(status).toBe(400);
       expect(body).toEqual(errorDto.badRequest('OAuth profile does not have an email address'));
     });
 
     it('should set the quota from a claim', async () => {
-      const url = await loginWithOAuth(OAuthUser.WITH_QUOTA);
-      const { status, body } = await request(app).post('/oauth/callback').send({ url });
+      const callbackParams = await loginWithOAuth(OAuthUser.WITH_QUOTA);
+      const { status, body } = await request(app).post('/oauth/callback').send(callbackParams);
       expect(status).toBe(201);
       expect(body).toMatchObject({
         accessToken: expect.any(String),
@@ -154,8 +214,8 @@ describe(`/oauth`, () => {
     });
 
     it('should set the storage label from a claim', async () => {
-      const url = await loginWithOAuth(OAuthUser.WITH_USERNAME);
-      const { status, body } = await request(app).post('/oauth/callback').send({ url });
+      const callbackParams = await loginWithOAuth(OAuthUser.WITH_USERNAME);
+      const { status, body } = await request(app).post('/oauth/callback').send(callbackParams);
       expect(status).toBe(201);
       expect(body).toMatchObject({
         accessToken: expect.any(String),
@@ -176,8 +236,8 @@ describe(`/oauth`, () => {
         buttonText: 'Login with Immich',
         signingAlgorithm: 'RS256',
       });
-      const url = await loginWithOAuth('oauth-RS256-token');
-      const { status, body } = await request(app).post('/oauth/callback').send({ url });
+      const callbackParams = await loginWithOAuth('oauth-RS256-token');
+      const { status, body } = await request(app).post('/oauth/callback').send(callbackParams);
       expect(status).toBe(201);
       expect(body).toMatchObject({
         accessToken: expect.any(String),
@@ -196,8 +256,8 @@ describe(`/oauth`, () => {
         buttonText: 'Login with Immich',
         profileSigningAlgorithm: 'RS256',
       });
-      const url = await loginWithOAuth('oauth-signed-profile');
-      const { status, body } = await request(app).post('/oauth/callback').send({ url });
+      const callbackParams = await loginWithOAuth('oauth-signed-profile');
+      const { status, body } = await request(app).post('/oauth/callback').send(callbackParams);
       expect(status).toBe(201);
       expect(body).toMatchObject({
         userId: expect.any(String),
@@ -213,8 +273,8 @@ describe(`/oauth`, () => {
         buttonText: 'Login with Immich',
         signingAlgorithm: 'something-that-does-not-work',
       });
-      const url = await loginWithOAuth('oauth-signed-bad');
-      const { status, body } = await request(app).post('/oauth/callback').send({ url });
+      const callbackParams = await loginWithOAuth('oauth-signed-bad');
+      const { status, body } = await request(app).post('/oauth/callback').send(callbackParams);
       expect(status).toBe(500);
       expect(body).toMatchObject({
         error: 'Internal Server Error',
@@ -235,8 +295,8 @@ describe(`/oauth`, () => {
       });
 
       it('should not auto register the user', async () => {
-        const url = await loginWithOAuth('oauth-no-auto-register');
-        const { status, body } = await request(app).post('/oauth/callback').send({ url });
+        const callbackParams = await loginWithOAuth('oauth-no-auto-register');
+        const { status, body } = await request(app).post('/oauth/callback').send(callbackParams);
         expect(status).toBe(400);
         expect(body).toEqual(errorDto.badRequest('User does not exist and auto registering is disabled.'));
       });
@@ -247,8 +307,8 @@ describe(`/oauth`, () => {
           email: 'oauth-user3@immich.app',
           password: 'password',
         });
-        const url = await loginWithOAuth('oauth-user3');
-        const { status, body } = await request(app).post('/oauth/callback').send({ url });
+        const callbackParams = await loginWithOAuth('oauth-user3');
+        const { status, body } = await request(app).post('/oauth/callback').send(callbackParams);
         expect(status).toBe(201);
         expect(body).toMatchObject({
           userId,
@@ -286,13 +346,15 @@ describe(`/oauth`, () => {
     });
 
     it('should auto register the user by default', async () => {
-      const url = await loginWithOAuth('oauth-mobile-override', 'app.immich:///oauth-callback');
-      expect(url).toEqual(expect.stringContaining(mobileOverrideRedirectUri));
+      const callbackParams = await loginWithOAuth('oauth-mobile-override', 'app.immich:///oauth-callback');
+      expect(callbackParams.url).toEqual(expect.stringContaining(mobileOverrideRedirectUri));
 
       // simulate redirecting back to mobile app
-      const redirectUri = url.replace(mobileOverrideRedirectUri, 'app.immich:///oauth-callback');
+      const url = callbackParams.url.replace(mobileOverrideRedirectUri, 'app.immich:///oauth-callback');
 
-      const { status, body } = await request(app).post('/oauth/callback').send({ url: redirectUri });
+      const { status, body } = await request(app)
+        .post('/oauth/callback')
+        .send({ ...callbackParams, url });
       expect(status).toBe(201);
       expect(body).toMatchObject({
         accessToken: expect.any(String),

e2e/src/api/specs/person.e2e-spec.ts

@@ -5,22 +5,6 @@ import { app, asBearerAuth, utils } from 'src/utils';
 import request from 'supertest';
 import { beforeAll, beforeEach, describe, expect, it } from 'vitest';
 
-const invalidBirthday = [
-  {
-    birthDate: 'false',
-    response: ['birthDate must be a string in the format yyyy-MM-dd', 'Birth date cannot be in the future'],
-  },
-  {
-    birthDate: '123567',
-    response: ['birthDate must be a string in the format yyyy-MM-dd', 'Birth date cannot be in the future'],
-  },
-  {
-    birthDate: 123_567,
-    response: ['birthDate must be a string in the format yyyy-MM-dd', 'Birth date cannot be in the future'],
-  },
-  { birthDate: '9999-01-01', response: ['Birth date cannot be in the future'] },
-];
-
 describe('/people', () => {
   let admin: LoginResponseDto;
   let visiblePerson: PersonResponseDto;
@@ -58,14 +42,6 @@ describe('/people', () => {
 
   describe('GET /people', () => {
     beforeEach(async () => {});
-
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get('/people');
-
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should return all people (including hidden)', async () => {
       const { status, body } = await request(app)
         .get('/people')
@@ -117,13 +93,6 @@ describe('/people', () => {
   });
 
   describe('GET /people/:id', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get(`/people/${uuidDto.notFound}`);
-
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should throw error if person with id does not exist', async () => {
       const { status, body } = await request(app)
         .get(`/people/${uuidDto.notFound}`)
@@ -144,13 +113,6 @@ describe('/people', () => {
   });
 
   describe('GET /people/:id/statistics', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get(`/people/${multipleAssetsPerson.id}/statistics`);
-
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should throw error if person with id does not exist', async () => {
       const { status, body } = await request(app)
         .get(`/people/${uuidDto.notFound}/statistics`)
@@ -171,23 +133,6 @@ describe('/people', () => {
   });
 
   describe('POST /people', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).post(`/people`);
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
-    for (const { birthDate, response } of invalidBirthday) {
-      it(`should not accept an invalid birth date [${birthDate}]`, async () => {
-        const { status, body } = await request(app)
-          .post(`/people`)
-          .set('Authorization', `Bearer ${admin.accessToken}`)
-          .send({ birthDate });
-        expect(status).toBe(400);
-        expect(body).toEqual(errorDto.badRequest(response));
-      });
-    }
-
     it('should create a person', async () => {
       const { status, body } = await request(app)
         .post(`/people`)
@@ -223,39 +168,6 @@ describe('/people', () => {
   });
 
   describe('PUT /people/:id', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).put(`/people/${uuidDto.notFound}`);
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
-    for (const { key, type } of [
-      { key: 'name', type: 'string' },
-      { key: 'featureFaceAssetId', type: 'string' },
-      { key: 'isHidden', type: 'boolean value' },
-      { key: 'isFavorite', type: 'boolean value' },
-    ]) {
-      it(`should not allow null ${key}`, async () => {
-        const { status, body } = await request(app)
-          .put(`/people/${visiblePerson.id}`)
-          .set('Authorization', `Bearer ${admin.accessToken}`)
-          .send({ [key]: null });
-        expect(status).toBe(400);
-        expect(body).toEqual(errorDto.badRequest([`${key} must be a ${type}`]));
-      });
-    }
-
-    for (const { birthDate, response } of invalidBirthday) {
-      it(`should not accept an invalid birth date [${birthDate}]`, async () => {
-        const { status, body } = await request(app)
-          .put(`/people/${visiblePerson.id}`)
-          .set('Authorization', `Bearer ${admin.accessToken}`)
-          .send({ birthDate });
-        expect(status).toBe(400);
-        expect(body).toEqual(errorDto.badRequest(response));
-      });
-    }
-
     it('should update a date of birth', async () => {
       const { status, body } = await request(app)
         .put(`/people/${visiblePerson.id}`)
@@ -312,12 +224,6 @@ describe('/people', () => {
   });
 
   describe('POST /people/:id/merge', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).post(`/people/${uuidDto.notFound}/merge`);
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should not supporting merging a person into themselves', async () => {
       const { status, body } = await request(app)
         .post(`/people/${visiblePerson.id}/merge`)

e2e/src/api/specs/search.e2e-spec.ts

@@ -1,9 +1,15 @@
-import { AssetMediaResponseDto, AssetResponseDto, deleteAssets, LoginResponseDto, updateAsset } from '@immich/sdk';
+import {
+  AssetMediaResponseDto,
+  AssetResponseDto,
+  AssetVisibility,
+  deleteAssets,
+  LoginResponseDto,
+  updateAsset,
+} from '@immich/sdk';
 import { DateTime } from 'luxon';
 import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { Socket } from 'socket.io-client';
-import { errorDto } from 'src/responses';
 import { app, asBearerAuth, TEN_TIMES, testAssetDir, utils } from 'src/utils';
 import request from 'supertest';
 import { afterAll, beforeAll, describe, expect, it } from 'vitest';
@@ -50,7 +56,7 @@ describe('/search', () => {
       { filename: '/formats/motionphoto/samsung-one-ui-6.heic' },
       { filename: '/formats/motionphoto/samsung-one-ui-5.jpg' },
 
-      { filename: '/metadata/gps-position/thompson-springs.jpg', dto: { isArchived: true } },
+      { filename: '/metadata/gps-position/thompson-springs.jpg', dto: { visibility: AssetVisibility.Archive } },
 
       // used for search suggestions
       { filename: '/formats/png/density_plot.png' },
@@ -141,65 +147,6 @@ describe('/search', () => {
   });
 
   describe('POST /search/metadata', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).post('/search/metadata');
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
-    const badTests = [
-      {
-        should: 'should reject page as a string',
-        dto: { page: 'abc' },
-        expected: ['page must not be less than 1', 'page must be an integer number'],
-      },
-      {
-        should: 'should reject page as a decimal',
-        dto: { page: 1.5 },
-        expected: ['page must be an integer number'],
-      },
-      {
-        should: 'should reject page as a negative number',
-        dto: { page: -10 },
-        expected: ['page must not be less than 1'],
-      },
-      {
-        should: 'should reject page as 0',
-        dto: { page: 0 },
-        expected: ['page must not be less than 1'],
-      },
-      {
-        should: 'should reject size as a string',
-        dto: { size: 'abc' },
-        expected: [
-          'size must not be greater than 1000',
-          'size must not be less than 1',
-          'size must be an integer number',
-        ],
-      },
-      {
-        should: 'should reject an invalid size',
-        dto: { size: -1.5 },
-        expected: ['size must not be less than 1', 'size must be an integer number'],
-      },
-      ...['isArchived', 'isFavorite', 'isEncoded', 'isOffline', 'isMotion', 'isVisible'].map((value) => ({
-        should: `should reject ${value} not a boolean`,
-        dto: { [value]: 'immich' },
-        expected: [`${value} must be a boolean value`],
-      })),
-    ];
-
-    for (const { should, dto, expected } of badTests) {
-      it(should, async () => {
-        const { status, body } = await request(app)
-          .post('/search/metadata')
-          .set('Authorization', `Bearer ${admin.accessToken}`)
-          .send(dto);
-        expect(status).toBe(400);
-        expect(body).toEqual(errorDto.badRequest(expected));
-      });
-    }
-
     const searchTests = [
       {
         should: 'should get my assets',
@@ -231,12 +178,12 @@ describe('/search', () => {
         deferred: () => ({ dto: { size: 1, isFavorite: false }, assets: [assetLast] }),
       },
       {
-        should: 'should search by isArchived (true)',
-        deferred: () => ({ dto: { isArchived: true }, assets: [assetSprings] }),
+        should: 'should search by visibility (AssetVisibility.Archive)',
+        deferred: () => ({ dto: { visibility: AssetVisibility.Archive }, assets: [assetSprings] }),
       },
       {
-        should: 'should search by isArchived (false)',
-        deferred: () => ({ dto: { size: 1, isArchived: false }, assets: [assetLast] }),
+        should: 'should search by visibility (AssetVisibility.Timeline)',
+        deferred: () => ({ dto: { size: 1, visibility: AssetVisibility.Timeline }, assets: [assetLast] }),
       },
       {
         should: 'should search by type (image)',
@@ -245,7 +192,7 @@ describe('/search', () => {
       {
         should: 'should search by type (video)',
         deferred: () => ({
-          dto: { type: 'VIDEO' },
+          dto: { type: 'VIDEO', visibility: AssetVisibility.Hidden },
           assets: [
             // the three live motion photos
             { id: expect.any(String) },
@@ -289,13 +236,6 @@ describe('/search', () => {
         should: 'should search by takenAfter (no results)',
         deferred: () => ({ dto: { takenAfter: today.plus({ hour: 1 }).toJSDate() }, assets: [] }),
       },
-      //   {
-      //     should: 'should search by originalPath',
-      //     deferred: () => ({
-      //       dto: { originalPath: asset1.originalPath },
-      //       assets: [asset1],
-      //     }),
-      //   },
       {
         should: 'should search by originalFilename',
         deferred: () => ({
@@ -325,7 +265,7 @@ describe('/search', () => {
         deferred: () => ({
           dto: {
             city: '',
-            isVisible: true,
+            visibility: AssetVisibility.Timeline,
             includeNull: true,
           },
           assets: [assetLast],
@@ -336,7 +276,7 @@ describe('/search', () => {
         deferred: () => ({
           dto: {
             city: null,
-            isVisible: true,
+            visibility: AssetVisibility.Timeline,
             includeNull: true,
           },
           assets: [assetLast],
@@ -357,7 +297,7 @@ describe('/search', () => {
         deferred: () => ({
           dto: {
             state: '',
-            isVisible: true,
+            visibility: AssetVisibility.Timeline,
             withExif: true,
             includeNull: true,
           },
@@ -369,7 +309,7 @@ describe('/search', () => {
         deferred: () => ({
           dto: {
             state: null,
-            isVisible: true,
+            visibility: AssetVisibility.Timeline,
             includeNull: true,
           },
           assets: [assetLast, assetNotocactus],
@@ -390,7 +330,7 @@ describe('/search', () => {
         deferred: () => ({
           dto: {
             country: '',
-            isVisible: true,
+            visibility: AssetVisibility.Timeline,
             includeNull: true,
           },
           assets: [assetLast],
@@ -401,7 +341,7 @@ describe('/search', () => {
         deferred: () => ({
           dto: {
             country: null,
-            isVisible: true,
+            visibility: AssetVisibility.Timeline,
             includeNull: true,
           },
           assets: [assetLast],
@@ -454,14 +394,6 @@ describe('/search', () => {
     }
   });
 
-  describe('POST /search/smart', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).post('/search/smart');
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-  });
-
   describe('POST /search/random', () => {
     beforeAll(async () => {
       await Promise.all([
@@ -476,13 +408,6 @@ describe('/search', () => {
       await utils.waitForQueueFinish(admin.accessToken, 'thumbnailGeneration');
     });
 
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).post('/search/random').send({ size: 1 });
-
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it.each(TEN_TIMES)('should return 1 random assets', async () => {
       const { status, body } = await request(app)
         .post('/search/random')
@@ -512,12 +437,6 @@ describe('/search', () => {
   });
 
   describe('GET /search/explore', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get('/search/explore');
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should get explore data', async () => {
       const { status, body } = await request(app)
         .get('/search/explore')
@@ -528,12 +447,6 @@ describe('/search', () => {
   });
 
   describe('GET /search/places', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get('/search/places');
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should get relevant places', async () => {
       const name = 'Paris';
 
@@ -552,12 +465,6 @@ describe('/search', () => {
   });
 
   describe('GET /search/cities', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get('/search/cities');
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should get all cities', async () => {
       const { status, body } = await request(app)
         .get('/search/cities')
@@ -576,12 +483,6 @@ describe('/search', () => {
   });
 
   describe('GET /search/suggestions', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get('/search/suggestions');
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should get suggestions for country (including null)', async () => {
       const { status, body } = await request(app)
         .get('/search/suggestions?type=country&includeNull=true')

e2e/src/api/specs/timeline.e2e-spec.ts

@@ -1,4 +1,4 @@
-import { AssetMediaResponseDto, LoginResponseDto, SharedLinkType, TimeBucketSize } from '@immich/sdk';
+import { AssetMediaResponseDto, AssetVisibility, LoginResponseDto, SharedLinkType } from '@immich/sdk';
 import { DateTime } from 'luxon';
 import { createUserDto } from 'src/fixtures';
 import { errorDto } from 'src/responses';
@@ -52,7 +52,7 @@ describe('/timeline', () => {
 
   describe('GET /timeline/buckets', () => {
     it('should require authentication', async () => {
-      const { status, body } = await request(app).get('/timeline/buckets').query({ size: TimeBucketSize.Month });
+      const { status, body } = await request(app).get('/timeline/buckets');
       expect(status).toBe(401);
       expect(body).toEqual(errorDto.unauthorized);
     });
@@ -60,8 +60,7 @@ describe('/timeline', () => {
     it('should get time buckets by month', async () => {
       const { status, body } = await request(app)
         .get('/timeline/buckets')
-        .set('Authorization', `Bearer ${timeBucketUser.accessToken}`)
-        .query({ size: TimeBucketSize.Month });
+        .set('Authorization', `Bearer ${timeBucketUser.accessToken}`);
 
       expect(status).toBe(200);
       expect(body).toEqual(
@@ -78,33 +77,17 @@ describe('/timeline', () => {
         assetIds: userAssets.map(({ id }) => id),
       });
 
-      const { status, body } = await request(app)
-        .get('/timeline/buckets')
-        .query({ key: sharedLink.key, size: TimeBucketSize.Month });
+      const { status, body } = await request(app).get('/timeline/buckets').query({ key: sharedLink.key });
 
       expect(status).toBe(400);
       expect(body).toEqual(errorDto.noPermission);
     });
 
-    it('should get time buckets by day', async () => {
-      const { status, body } = await request(app)
-        .get('/timeline/buckets')
-        .set('Authorization', `Bearer ${timeBucketUser.accessToken}`)
-        .query({ size: TimeBucketSize.Day });
-
-      expect(status).toBe(200);
-      expect(body).toEqual([
-        { count: 2, timeBucket: '1970-02-11T00:00:00.000Z' },
-        { count: 1, timeBucket: '1970-02-10T00:00:00.000Z' },
-        { count: 1, timeBucket: '1970-01-01T00:00:00.000Z' },
-      ]);
-    });
-
     it('should return error if time bucket is requested with partners asset and archived', async () => {
       const req1 = await request(app)
         .get('/timeline/buckets')
         .set('Authorization', `Bearer ${timeBucketUser.accessToken}`)
-        .query({ size: TimeBucketSize.Month, withPartners: true, isArchived: true });
+        .query({ withPartners: true, visibility: AssetVisibility.Archive });
 
       expect(req1.status).toBe(400);
       expect(req1.body).toEqual(errorDto.badRequest());
@@ -112,7 +95,7 @@ describe('/timeline', () => {
       const req2 = await request(app)
         .get('/timeline/buckets')
         .set('Authorization', `Bearer ${user.accessToken}`)
-        .query({ size: TimeBucketSize.Month, withPartners: true, isArchived: undefined });
+        .query({ withPartners: true, visibility: undefined });
 
       expect(req2.status).toBe(400);
       expect(req2.body).toEqual(errorDto.badRequest());
@@ -122,7 +105,7 @@ describe('/timeline', () => {
       const req1 = await request(app)
         .get('/timeline/buckets')
         .set('Authorization', `Bearer ${timeBucketUser.accessToken}`)
-        .query({ size: TimeBucketSize.Month, withPartners: true, isFavorite: true });
+        .query({ withPartners: true, isFavorite: true });
 
       expect(req1.status).toBe(400);
       expect(req1.body).toEqual(errorDto.badRequest());
@@ -130,7 +113,7 @@ describe('/timeline', () => {
       const req2 = await request(app)
         .get('/timeline/buckets')
         .set('Authorization', `Bearer ${timeBucketUser.accessToken}`)
-        .query({ size: TimeBucketSize.Month, withPartners: true, isFavorite: false });
+        .query({ withPartners: true, isFavorite: false });
 
       expect(req2.status).toBe(400);
       expect(req2.body).toEqual(errorDto.badRequest());
@@ -140,7 +123,7 @@ describe('/timeline', () => {
       const req = await request(app)
         .get('/timeline/buckets')
         .set('Authorization', `Bearer ${user.accessToken}`)
-        .query({ size: TimeBucketSize.Month, withPartners: true, isTrashed: true });
+        .query({ withPartners: true, isTrashed: true });
 
       expect(req.status).toBe(400);
       expect(req.body).toEqual(errorDto.badRequest());
@@ -150,7 +133,6 @@ describe('/timeline', () => {
   describe('GET /timeline/bucket', () => {
     it('should require authentication', async () => {
       const { status, body } = await request(app).get('/timeline/bucket').query({
-        size: TimeBucketSize.Month,
         timeBucket: '1900-01-01',
       });
 
@@ -161,11 +143,27 @@ describe('/timeline', () => {
     it('should handle 5 digit years', async () => {
       const { status, body } = await request(app)
         .get('/timeline/bucket')
-        .query({ size: TimeBucketSize.Month, timeBucket: '012345-01-01' })
+        .query({ timeBucket: '012345-01-01' })
         .set('Authorization', `Bearer ${timeBucketUser.accessToken}`);
 
       expect(status).toBe(200);
-      expect(body).toEqual([]);
+      expect(body).toEqual({
+        city: [],
+        country: [],
+        duration: [],
+        id: [],
+        visibility: [],
+        isFavorite: [],
+        isImage: [],
+        isTrashed: [],
+        livePhotoVideoId: [],
+        localDateTime: [],
+        ownerId: [],
+        projectionType: [],
+        ratio: [],
+        status: [],
+        thumbhash: [],
+      });
     });
 
     // TODO enable date string validation while still accepting 5 digit years
@@ -173,7 +171,7 @@ describe('/timeline', () => {
     //   const { status, body } = await request(app)
     //     .get('/timeline/bucket')
     //     .set('Authorization', `Bearer ${user.accessToken}`)
-    //     .query({ size: TimeBucketSize.Month, timeBucket: 'foo' });
+    //     .query({  timeBucket: 'foo' });
 
     //   expect(status).toBe(400);
     //   expect(body).toEqual(errorDto.badRequest);
@@ -183,10 +181,26 @@ describe('/timeline', () => {
       const { status, body } = await request(app)
         .get('/timeline/bucket')
         .set('Authorization', `Bearer ${timeBucketUser.accessToken}`)
-        .query({ size: TimeBucketSize.Month, timeBucket: '1970-02-10' });
+        .query({ timeBucket: '1970-02-10' });
 
       expect(status).toBe(200);
-      expect(body).toEqual([]);
+      expect(body).toEqual({
+        city: [],
+        country: [],
+        duration: [],
+        id: [],
+        visibility: [],
+        isFavorite: [],
+        isImage: [],
+        isTrashed: [],
+        livePhotoVideoId: [],
+        localDateTime: [],
+        ownerId: [],
+        projectionType: [],
+        ratio: [],
+        status: [],
+        thumbhash: [],
+      });
     });
   });
 });

e2e/src/api/specs/user-admin.e2e-spec.ts

@@ -215,6 +215,19 @@ describe('/admin/users', () => {
       const user = await getMyUser({ headers: asBearerAuth(token.accessToken) });
       expect(user).toMatchObject({ email: nonAdmin.userEmail });
     });
+
+    it('should update the avatar color', async () => {
+      const { status, body } = await request(app)
+        .put(`/admin/users/${admin.userId}`)
+        .send({ avatarColor: 'orange' })
+        .set('Authorization', `Bearer ${admin.accessToken}`);
+
+      expect(status).toBe(200);
+      expect(body).toMatchObject({ avatarColor: 'orange' });
+
+      const after = await getUserAdmin({ id: admin.userId }, { headers: asBearerAuth(admin.accessToken) });
+      expect(after).toMatchObject({ avatarColor: 'orange' });
+    });
   });
 
   describe('PUT /admin/users/:id/preferences', () => {
@@ -240,19 +253,6 @@ describe('/admin/users', () => {
       expect(after).toMatchObject({ memories: { enabled: false } });
     });
 
-    it('should update the avatar color', async () => {
-      const { status, body } = await request(app)
-        .put(`/admin/users/${admin.userId}/preferences`)
-        .send({ avatar: { color: 'orange' } })
-        .set('Authorization', `Bearer ${admin.accessToken}`);
-
-      expect(status).toBe(200);
-      expect(body).toMatchObject({ avatar: { color: 'orange' } });
-
-      const after = await getUserPreferencesAdmin({ id: admin.userId }, { headers: asBearerAuth(admin.accessToken) });
-      expect(after).toMatchObject({ avatar: { color: 'orange' } });
-    });
-
     it('should update download archive size', async () => {
       const { status, body } = await request(app)
         .put(`/admin/users/${admin.userId}/preferences`)

e2e/src/api/specs/user.e2e-spec.ts

@@ -139,6 +139,19 @@ describe('/users', () => {
         profileChangedAt: expect.anything(),
       });
     });
+
+    it('should update avatar color', async () => {
+      const { status, body } = await request(app)
+        .put(`/users/me`)
+        .send({ avatarColor: 'blue' })
+        .set('Authorization', `Bearer ${admin.accessToken}`);
+
+      expect(status).toBe(200);
+      expect(body).toMatchObject({ avatarColor: 'blue' });
+
+      const after = await getMyUser({ headers: asBearerAuth(admin.accessToken) });
+      expect(after).toMatchObject({ avatarColor: 'blue' });
+    });
   });
 
   describe('PUT /users/me/preferences', () => {
@@ -158,19 +171,6 @@ describe('/users', () => {
       expect(after).toMatchObject({ memories: { enabled: false } });
     });
 
-    it('should update avatar color', async () => {
-      const { status, body } = await request(app)
-        .put(`/users/me/preferences`)
-        .send({ avatar: { color: 'blue' } })
-        .set('Authorization', `Bearer ${admin.accessToken}`);
-
-      expect(status).toBe(200);
-      expect(body).toMatchObject({ avatar: { color: 'blue' } });
-
-      const after = await getMyPreferences({ headers: asBearerAuth(admin.accessToken) });
-      expect(after).toMatchObject({ avatar: { color: 'blue' } });
-    });
-
     it('should require an integer for download archive size', async () => {
       const { status, body } = await request(app)
         .put(`/users/me/preferences`)

e2e/src/utils.ts

@@ -3,6 +3,7 @@ import {
   AssetMediaCreateDto,
   AssetMediaResponseDto,
   AssetResponseDto,
+  AssetVisibility,
   CheckExistingAssetsDto,
   CreateAlbumDto,
   CreateLibraryDto,
@@ -429,7 +430,10 @@ export const utils = {
   },
 
   archiveAssets: (accessToken: string, ids: string[]) =>
-    updateAssets({ assetBulkUpdateDto: { ids, isArchived: true } }, { headers: asBearerAuth(accessToken) }),
+    updateAssets(
+      { assetBulkUpdateDto: { ids, visibility: AssetVisibility.Archive } },
+      { headers: asBearerAuth(accessToken) },
+    ),
 
   deleteAssets: (accessToken: string, ids: string[]) =>
     deleteAssets({ assetBulkDeleteDto: { ids } }, { headers: asBearerAuth(accessToken) }),

e2e/src/web/specs/auth.e2e-spec.ts

@@ -25,7 +25,7 @@ test.describe('Registration', () => {
 
     // login
     await expect(page).toHaveTitle(/Login/);
-    await page.goto('/auth/login');
+    await page.goto('/auth/login?autoLaunch=0');
     await page.getByLabel('Email').fill('admin@immich.app');
     await page.getByLabel('Password').fill('password');
     await page.getByRole('button', { name: 'Login' }).click();
@@ -59,7 +59,7 @@ test.describe('Registration', () => {
     await context.clearCookies();
 
     // login
-    await page.goto('/auth/login');
+    await page.goto('/auth/login?autoLaunch=0');
     await page.getByLabel('Email').fill('user@immich.cloud');
     await page.getByLabel('Password').fill('password');
     await page.getByRole('button', { name: 'Login' }).click();
@@ -72,7 +72,7 @@ test.describe('Registration', () => {
     await page.getByRole('button', { name: 'Change password' }).click();
 
     // login with new password
-    await expect(page).toHaveURL('/auth/login');
+    await expect(page).toHaveURL('/auth/login?autoLaunch=0');
     await page.getByLabel('Email').fill('user@immich.cloud');
     await page.getByLabel('Password').fill('new-password');
     await page.getByRole('button', { name: 'Login' }).click();

e2e/src/web/specs/photo-viewer.e2e-spec.ts

@@ -21,23 +21,9 @@ test.describe('Photo Viewer', () => {
   test.beforeEach(async ({ context, page }) => {
     // before each test, login as user
     await utils.setAuthCookies(context, admin.accessToken);
-    await page.goto('/photos');
     await page.waitForLoadState('networkidle');
   });
 
-  test('initially shows a loading spinner', async ({ page }) => {
-    await page.route(`/api/assets/${asset.id}/thumbnail**`, async (route) => {
-      // slow down the request for thumbnail, so spinner has chance to show up
-      await new Promise((f) => setTimeout(f, 2000));
-      await route.continue();
-    });
-    await page.goto(`/photos/${asset.id}`);
-    await page.waitForLoadState('load');
-    // this is the spinner
-    await page.waitForSelector('svg[role=status]');
-    await expect(page.getByTestId('loading-spinner')).toBeVisible();
-  });
-
   test('loads original photo when zoomed', async ({ page }) => {
     await page.goto(`/photos/${asset.id}`);
     await expect.poll(async () => await imageLocator(page).getAttribute('src')).toContain('thumbnail');

e2e/src/web/specs/shared-link.e2e-spec.ts

@@ -47,16 +47,13 @@ test.describe('Shared Links', () => {
     await page.locator(`[data-asset-id="${asset.id}"]`).hover();
     await page.waitForSelector('[data-group] svg');
     await page.getByRole('checkbox').click();
-    await page.getByRole('button', { name: 'Download' }).click();
-    await page.waitForEvent('download');
+    await Promise.all([page.waitForEvent('download'), page.getByRole('button', { name: 'Download' }).click()]);
   });
 
   test('download all from shared link', async ({ page }) => {
     await page.goto(`/share/${sharedLink.key}`);
     await page.getByRole('heading', { name: 'Test Album' }).waitFor();
-    await page.getByRole('button', { name: 'Download' }).click();
-    await page.getByText('DOWNLOADING', { exact: true }).waitFor();
-    await page.waitForEvent('download');
+    await Promise.all([page.waitForEvent('download'), page.getByRole('button', { name: 'Download' }).click()]);
   });
 
   test('enter password for a shared link', async ({ page }) => {

i18n/ar.json

@@ -187,20 +187,13 @@
     "oauth_auto_register": "التسجيل التلقائي",
     "oauth_auto_register_description": "التسجيل التلقائي للمستخدمين الجدد بعد تسجيل الدخول باستخدام OAuth",
     "oauth_button_text": "نص الزر",
-    "oauth_client_id": "معرف العميل",
-    "oauth_client_secret": "الرمز السري للعميل",
     "oauth_enable_description": "تسجيل الدخول باستخدام OAuth",
-    "oauth_issuer_url": "عنوان URL الخاص بجهة الإصدار",
     "oauth_mobile_redirect_uri": "عنوان URI لإعادة التوجيه على الهاتف",
     "oauth_mobile_redirect_uri_override": "تجاوز عنوان URI لإعادة التوجيه على الهاتف",
     "oauth_mobile_redirect_uri_override_description": "قم بتفعيله عندما لا يسمح موفر OAuth بمعرف URI للجوال، مثل '{callback}'",
-    "oauth_profile_signing_algorithm": "خوارزمية توقيع الملف الشخصي",
-    "oauth_profile_signing_algorithm_description": "الخوارزمية المستخدمة للتوقيع على ملف تعريف المستخدم.",
-    "oauth_scope": "النطاق",
     "oauth_settings": "OAuth",
     "oauth_settings_description": "إدارة إعدادات تسجيل الدخول OAuth",
     "oauth_settings_more_details": "لمزيد من التفاصيل حول هذه الميزة، يرجى الرجوع إلى <link>الوثائق</link>.",
-    "oauth_signing_algorithm": "خوارزمية التوقيع",
     "oauth_storage_label_claim": "المطالبة بتصنيف التخزين",
     "oauth_storage_label_claim_description": "قم تلقائيًا بتعيين تصنيف التخزين الخاص بالمستخدم على قيمة هذه المطالبة.",
     "oauth_storage_quota_claim": "المطالبة بحصة التخزين",
@@ -605,6 +598,7 @@
   "change_password_form_new_password": "كلمة المرور الجديدة",
   "change_password_form_password_mismatch": "كلمة المرور غير مطابقة",
   "change_password_form_reenter_new_password": "أعد إدخال كلمة مرور جديدة",
+  "change_pin_code": "تغيير الرقم السري",
   "change_your_password": "غير كلمة المرور الخاصة بك",
   "changed_visibility_successfully": "تم تغيير الرؤية بنجاح",
   "check_all": "تحقق من الكل",
@@ -645,6 +639,7 @@
   "confirm_delete_face": "هل أنت متأكد من حذف وجه {name} من الأصول؟",
   "confirm_delete_shared_link": "هل أنت متأكد أنك تريد حذف هذا الرابط المشترك؟",
   "confirm_keep_this_delete_others": "سيتم حذف جميع الأصول الأخرى في المجموعة باستثناء هذا الأصل. هل أنت متأكد من أنك تريد المتابعة؟",
+  "confirm_new_pin_code": "ثبت الرقم السري الجديد",
   "confirm_password": "تأكيد كلمة المرور",
   "contain": "محتواة",
   "context": "السياق",
@@ -690,6 +685,7 @@
   "crop": "Crop",
   "curated_object_page_title": "أشياء",
   "current_device": "الجهاز الحالي",
+  "current_pin_code": "الرقم السري الحالي",
   "current_server_address": "Current server address",
   "custom_locale": "لغة مخصصة",
   "custom_locale_description": "تنسيق التواريخ والأرقام بناءً على اللغة والمنطقة",
@@ -1228,6 +1224,7 @@
   "new_api_key": "مفتاح API جديد",
   "new_password": "كلمة المرور الجديدة",
   "new_person": "شخص جديد",
+  "new_pin_code": "الرقم السري الجديد",
   "new_user_created": "تم إنشاء مستخدم جديد",
   "new_version_available": "إصدار جديد متاح",
   "newest_first": "الأحدث أولاً",
@@ -1345,6 +1342,9 @@
   "photos_count": "{count, plural, one {{count, number} صورة} other {{count, number} صور}}",
   "photos_from_previous_years": "صور من السنوات السابقة",
   "pick_a_location": "اختر موقعًا",
+  "pin_code_changed_successfully": "تم تغير الرقم السري",
+  "pin_code_reset_successfully": "تم اعادة تعيين الرقم السري",
+  "pin_code_setup_successfully": "تم انشاء رقم سري",
   "place": "مكان",
   "places": "الأماكن",
   "places_count": "{count, plural, one {{count, number} مكان} other {{count, number} أماكن}}",
@@ -1375,7 +1375,7 @@
   "public_share": "مشاركة عامة",
   "purchase_account_info": "داعم",
   "purchase_activated_subtitle": "شكرًا لك على دعمك لـ Immich والبرمجيات مفتوحة المصدر",
-  "purchase_activated_time": "تم التفعيل في {date, date}",
+  "purchase_activated_time": "تم التفعيل في {date}",
   "purchase_activated_title": "لقد تم تفعيل مفتاحك بنجاح",
   "purchase_button_activate": "تنشيط",
   "purchase_button_buy": "شراء",
@@ -1601,6 +1601,7 @@
   "settings": "الإعدادات",
   "settings_require_restart": "يرجى إعادة تشغيل لتطبيق هذا الإعداد",
   "settings_saved": "تم حفظ الإعدادات",
+  "setup_pin_code": "تحديد رقم سري",
   "share": "مشاركة",
   "share_add_photos": "إضافة الصور",
   "share_assets_selected": "{} selected",
@@ -1785,6 +1786,8 @@
   "trash_page_title": "Trash ({})",
   "trashed_items_will_be_permanently_deleted_after": "سيتم حذفُ العناصر المحذوفة نِهائيًا بعد {days, plural, one {# يوم} other {# أيام }}.",
   "type": "النوع",
+  "unable_to_change_pin_code": "تفيير الرقم السري غير ممكن",
+  "unable_to_setup_pin_code": "انشاء الرقم السري غير ممكن",
   "unarchive": "أخرج من الأرشيف",
   "unarchived_count": "{count, plural, other {غير مؤرشفة #}}",
   "unfavorite": "أزل التفضيل",
@@ -1829,6 +1832,8 @@
   "user": "مستخدم",
   "user_id": "معرف المستخدم",
   "user_liked": "قام {user} بالإعجاب {type, select, photo {بهذه الصورة} video {بهذا الفيديو} asset {بهذا المحتوى} other {بها}}",
+  "user_pin_code_settings": "الرقم السري",
+  "user_pin_code_settings_description": "تغير الرقم السري",
   "user_purchase_settings": "الشراء",
   "user_purchase_settings_description": "إدارة عملية الشراء الخاصة بك",
   "user_role_set": "قم بتعيين {user} كـ {role}",

i18n/az.json

@@ -76,7 +76,6 @@
     "library_watching_settings_description": "Dəyişdirilən faylları avtomatik olaraq yoxla",
     "logging_enable_description": "Jurnalı aktivləşdir",
     "logging_level_description": "Aktiv edildikdə hansı jurnal səviyyəsi istifadə olunur.",
-    "logging_settings": "",
     "machine_learning_clip_model": "CLIP modeli",
     "machine_learning_clip_model_description": "<link>Burada</link>qeyd olunan CLIP modelinin adı. Modeli dəyişdirdikdən sonra bütün şəkillər üçün 'Ağıllı Axtarış' funksiyasını yenidən işə salmalısınız.",
     "machine_learning_duplicate_detection": "Dublikat Aşkarlama",

i18n/be.json

@@ -4,6 +4,7 @@
   "account_settings": "Налады ўліковага запісу",
   "acknowledge": "Пацвердзіць",
   "action": "Дзеянне",
+  "action_common_update": "Абнавіць",
   "actions": "Дзеянні",
   "active": "Актыўны",
   "activity": "Актыўнасць",
@@ -13,6 +14,7 @@
   "add_a_location": "Дадаць месца",
   "add_a_name": "Дадаць імя",
   "add_a_title": "Дадаць загаловак",
+  "add_endpoint": "Дадаць кропку доступу",
   "add_exclusion_pattern": "Дадаць шаблон выключэння",
   "add_import_path": "Дадаць шлях імпарту",
   "add_location": "Дадайце месца",
@@ -20,8 +22,10 @@
   "add_partner": "Дадаць партнёра",
   "add_path": "Дадаць шлях",
   "add_photos": "Дадаць фота",
-  "add_to": "Дадаць у...",
+  "add_to": "Дадаць у…",
   "add_to_album": "Дадаць у альбом",
+  "add_to_album_bottom_sheet_added": "Дададзена да {album}",
+  "add_to_album_bottom_sheet_already_exists": "Ужо знаходзіцца ў {album}",
   "add_to_shared_album": "Дадаць у агульны альбом",
   "add_url": "Дадаць URL",
   "added_to_archive": "Дададзена ў архіў",
@@ -39,8 +43,9 @@
     "backup_database_enable_description": "Уключыць рэзерваванне базы даных",
     "backup_keep_last_amount": "Колькасць папярэдніх рэзервовых копій для захавання",
     "backup_settings": "Налады рэзервовага капіявання",
-    "backup_settings_description": "Кіраванне наладкамі рэзервовага капіявання базы даных",
+    "backup_settings_description": "Кіраванне наладамі дампа базы дадзеных. Заўвага: гэтыя задачы не кантралююцца, і ў выпадку няўдачы паведамленне адпраўлена не будзе.",
     "check_all": "Праверыць усе",
+    "cleanup": "Ачыстка",
     "cleared_jobs": "Ачышчаны заданні для: {job}",
     "config_set_by_file": "Канфігурацыя ў зараз усталявана праз файл канфігурацыі",
     "confirm_delete_library": "Вы ўпэўнены што жадаеце выдаліць {library} бібліятэку?",
@@ -58,8 +63,18 @@
     "external_library_created_at": "Знешняя бібліятэка (створана {date})",
     "external_library_management": "Кіраванне знешняй бібліятэкай",
     "face_detection": "Выяўленне твараў",
+    "face_detection_description": "Выяўляць твары на фотаздымках і відэа з дапамогай машыннага навучання. Для відэа ўлічваецца толькі мініяцюра. \"Абнавіць\" (пера)апрацоўвае ўсе медыя. \"Скінуць\" дадаткова ачышчае ўсе бягучыя дадзеныя пра твары. \"Адсутнічае\" ставіць у чаргу медыя, якія яшчэ не былі апрацаваныя. Выяўленыя твары будуць пастаўлены ў чаргу для распазнавання асоб пасля завяршэння выяўлення твараў, з групаваннем іх па існуючых або новых людзях.",
+    "facial_recognition_job_description": "Групаваць выяўленыя твары па асобах. Гэты этап выконваецца пасля завяршэння выяўлення твараў. \"Скінуць\" (паўторна) перагрупоўвае ўсе твары. \"Адсутнічае\" ставіць у чаргу твары, якія яшчэ не прыпісаныя да якой-небудзь асобы.",
+    "failed_job_command": "Каманда {command} не выканалася для задання: {job}",
     "force_delete_user_warning": "ПАПЯРЭДЖАННЕ: Гэта дзеянне неадкладна выдаліць карыстальніка і ўсе аб'екты. Гэта дзеянне не можа быць адроблена і файлы немагчыма будзе аднавіць.",
+    "forcing_refresh_library_files": "Прымусовае абнаўленне ўсіх файлаў бібліятэкі",
     "image_format": "Фармат",
+    "image_format_description": "WebP стварае меншыя файлы, чым JPEG, але павольней кадуе.",
+    "image_fullsize_description": "Выява ў поўным памеры без метаданых, выкарыстоўваецца пры павелічэнні",
+    "image_fullsize_enabled": "Уключыць стварэнне выявы ў поўным памеры",
+    "image_fullsize_enabled_description": "Ствараць выяву ў поўным памеры для фарматаў, што не прыдатныя для вэб. Калі ўключана опцыя \"Аддаваць перавагу ўбудаванай праяве\", прагляды выкарыстоўваюцца непасрэдна без канвертацыі. Не ўплывае на вэб-прыдатныя фарматы, такія як JPEG.",
+    "image_fullsize_quality_description": "Якасць выявы ў поўным памеры ад 1 да 100. Больш высокае значэнне лепшае, але прыводзіць да павелічэння памеру файла.",
+    "image_fullsize_title": "Налады выявы ў поўным памеры",
     "image_preview_title": "Налады папярэдняга прагляду",
     "image_quality": "Якасць",
     "image_resolution": "Раздзяляльнасць",

i18n/bg.json

@@ -183,20 +183,13 @@
     "oauth_auto_register": "Автоматична регистрация",
     "oauth_auto_register_description": "Автоматично регистриране на нови потребители след влизане с OAuth",
     "oauth_button_text": "Текст на бутона",
-    "oauth_client_id": "Клиентски ID",
-    "oauth_client_secret": "Клиентска тайна",
     "oauth_enable_description": "Влизане с OAuth",
-    "oauth_issuer_url": "URL на издателя",
     "oauth_mobile_redirect_uri": "URI за мобилно пренасочване",
     "oauth_mobile_redirect_uri_override": "URI пренасочване за мобилни устройства",
     "oauth_mobile_redirect_uri_override_description": "Разреши когато доставчика за OAuth удостоверяване не позволява за мобилни URI идентификатори, като '{callback}'",
-    "oauth_profile_signing_algorithm": "Алгоритъм за създаване на профили",
-    "oauth_profile_signing_algorithm_description": "Алгоритъм използван за вписване на потребителски профил.",
-    "oauth_scope": "Област/обхват на приложение",
     "oauth_settings": "OAuth",
     "oauth_settings_description": "Управление на настройките за вход с OAuth",
     "oauth_settings_more_details": "За повече информация за функционалността, се потърсете в <link>docs</link>.",
-    "oauth_signing_algorithm": "Алгоритъм за вписване",
     "oauth_storage_label_claim": "Заявка за етикет за съхранение",
     "oauth_storage_label_claim_description": "Автоматично задайте етикета за съхранение на потребителя със стойността от тази заявка.",
     "oauth_storage_quota_claim": "Заявка за квота за съхранение",
@@ -1013,7 +1006,7 @@
   "public_share": "Публично споделяне",
   "purchase_account_info": "Поддръжник",
   "purchase_activated_subtitle": "Благодарим ви, че подкрепяте Immich и софтуера с отворен код",
-  "purchase_activated_time": "Активиран на {date, date}",
+  "purchase_activated_time": "Активиран на {date}",
   "purchase_activated_title": "Вашият ключ беше успешно активиран",
   "purchase_button_activate": "Активирай",
   "purchase_button_buy": "Купи",

i18n/bi.json

@@ -3,8 +3,6 @@
   "account": "Akaont",
   "account_settings": "Seting blo Akaont",
   "acknowledge": "Akcept",
-  "action": "",
-  "actions": "",
   "active": "Stap Mekem",
   "activity": "Wanem hemi Mekem",
   "activity_changed": "WAnem hemi Mekem hemi",
@@ -16,850 +14,5 @@
   "add_exclusion_pattern": "Putem wan paten wae hemi karem aot",
   "add_import_path": "Putem wan pat blo import",
   "add_location": "Putem wan place blo hem",
-  "add_more_users": "Putem mor man",
-  "add_partner": "",
-  "add_path": "",
-  "add_photos": "",
-  "add_to": "",
-  "add_to_album": "",
-  "add_to_shared_album": "",
-  "admin": {
-    "add_exclusion_pattern_description": "",
-    "authentication_settings": "",
-    "authentication_settings_description": "",
-    "background_task_job": "",
-    "check_all": "",
-    "config_set_by_file": "",
-    "confirm_delete_library": "",
-    "confirm_delete_library_assets": "",
-    "confirm_email_below": "",
-    "confirm_reprocess_all_faces": "",
-    "confirm_user_password_reset": "",
-    "disable_login": "",
-    "duplicate_detection_job_description": "",
-    "exclusion_pattern_description": "",
-    "external_library_created_at": "",
-    "external_library_management": "",
-    "face_detection": "",
-    "face_detection_description": "",
-    "facial_recognition_job_description": "",
-    "force_delete_user_warning": "",
-    "forcing_refresh_library_files": "",
-    "image_format_description": "",
-    "image_prefer_embedded_preview": "",
-    "image_prefer_embedded_preview_setting_description": "",
-    "image_prefer_wide_gamut": "",
-    "image_prefer_wide_gamut_setting_description": "",
-    "image_quality": "",
-    "image_settings": "",
-    "image_settings_description": "",
-    "job_concurrency": "",
-    "job_not_concurrency_safe": "",
-    "job_settings": "",
-    "job_settings_description": "",
-    "job_status": "",
-    "jobs_delayed": "",
-    "jobs_failed": "",
-    "library_created": "",
-    "library_deleted": "",
-    "library_import_path_description": "",
-    "library_scanning": "",
-    "library_scanning_description": "",
-    "library_scanning_enable_description": "",
-    "library_settings": "",
-    "library_settings_description": "",
-    "library_tasks_description": "",
-    "library_watching_enable_description": "",
-    "library_watching_settings": "",
-    "library_watching_settings_description": "",
-    "logging_enable_description": "",
-    "logging_level_description": "",
-    "logging_settings": "",
-    "machine_learning_clip_model": "",
-    "machine_learning_duplicate_detection": "",
-    "machine_learning_duplicate_detection_enabled_description": "",
-    "machine_learning_duplicate_detection_setting_description": "",
-    "machine_learning_enabled_description": "",
-    "machine_learning_facial_recognition": "",
-    "machine_learning_facial_recognition_description": "",
-    "machine_learning_facial_recognition_model": "",
-    "machine_learning_facial_recognition_model_description": "",
-    "machine_learning_facial_recognition_setting_description": "",
-    "machine_learning_max_detection_distance": "",
-    "machine_learning_max_detection_distance_description": "",
-    "machine_learning_max_recognition_distance": "",
-    "machine_learning_max_recognition_distance_description": "",
-    "machine_learning_min_detection_score": "",
-    "machine_learning_min_detection_score_description": "",
-    "machine_learning_min_recognized_faces": "",
-    "machine_learning_min_recognized_faces_description": "",
-    "machine_learning_settings": "",
-    "machine_learning_settings_description": "",
-    "machine_learning_smart_search": "",
-    "machine_learning_smart_search_description": "",
-    "machine_learning_smart_search_enabled_description": "",
-    "machine_learning_url_description": "",
-    "manage_concurrency": "",
-    "manage_log_settings": "",
-    "map_dark_style": "",
-    "map_enable_description": "",
-    "map_light_style": "",
-    "map_reverse_geocoding": "",
-    "map_reverse_geocoding_enable_description": "",
-    "map_reverse_geocoding_settings": "",
-    "map_settings": "",
-    "map_settings_description": "",
-    "map_style_description": "",
-    "metadata_extraction_job": "",
-    "metadata_extraction_job_description": "",
-    "migration_job": "",
-    "migration_job_description": "",
-    "no_paths_added": "",
-    "no_pattern_added": "",
-    "note_apply_storage_label_previous_assets": "",
-    "note_cannot_be_changed_later": "",
-    "notification_email_from_address": "",
-    "notification_email_from_address_description": "",
-    "notification_email_host_description": "",
-    "notification_email_ignore_certificate_errors": "",
-    "notification_email_ignore_certificate_errors_description": "",
-    "notification_email_password_description": "",
-    "notification_email_port_description": "",
-    "notification_email_sent_test_email_button": "",
-    "notification_email_setting_description": "",
-    "notification_email_test_email_failed": "",
-    "notification_email_test_email_sent": "",
-    "notification_email_username_description": "",
-    "notification_enable_email_notifications": "",
-    "notification_settings": "",
-    "notification_settings_description": "",
-    "oauth_auto_launch": "",
-    "oauth_auto_launch_description": "",
-    "oauth_auto_register": "",
-    "oauth_auto_register_description": "",
-    "oauth_button_text": "",
-    "oauth_client_id": "",
-    "oauth_client_secret": "",
-    "oauth_enable_description": "",
-    "oauth_issuer_url": "",
-    "oauth_mobile_redirect_uri": "",
-    "oauth_mobile_redirect_uri_override": "",
-    "oauth_mobile_redirect_uri_override_description": "",
-    "oauth_scope": "",
-    "oauth_settings": "",
-    "oauth_settings_description": "",
-    "oauth_signing_algorithm": "",
-    "oauth_storage_label_claim": "",
-    "oauth_storage_label_claim_description": "",
-    "oauth_storage_quota_claim": "",
-    "oauth_storage_quota_claim_description": "",
-    "oauth_storage_quota_default": "",
-    "oauth_storage_quota_default_description": "",
-    "offline_paths": "",
-    "offline_paths_description": "",
-    "password_enable_description": "",
-    "password_settings": "",
-    "password_settings_description": "",
-    "paths_validated_successfully": "",
-    "quota_size_gib": "",
-    "refreshing_all_libraries": "",
-    "repair_all": "",
-    "repair_matched_items": "",
-    "repaired_items": "",
-    "require_password_change_on_login": "",
-    "reset_settings_to_default": "",
-    "reset_settings_to_recent_saved": "",
-    "send_welcome_email": "",
-    "server_external_domain_settings": "",
-    "server_external_domain_settings_description": "",
-    "server_settings": "",
-    "server_settings_description": "",
-    "server_welcome_message": "",
-    "server_welcome_message_description": "",
-    "sidecar_job": "",
-    "sidecar_job_description": "",
-    "slideshow_duration_description": "",
-    "smart_search_job_description": "",
-    "storage_template_enable_description": "",
-    "storage_template_hash_verification_enabled": "",
-    "storage_template_hash_verification_enabled_description": "",
-    "storage_template_migration": "",
-    "storage_template_migration_job": "",
-    "storage_template_settings": "",
-    "storage_template_settings_description": "",
-    "system_settings": "",
-    "theme_custom_css_settings": "",
-    "theme_custom_css_settings_description": "",
-    "theme_settings": "",
-    "theme_settings_description": "",
-    "these_files_matched_by_checksum": "",
-    "thumbnail_generation_job": "",
-    "thumbnail_generation_job_description": "",
-    "transcoding_acceleration_api": "",
-    "transcoding_acceleration_api_description": "",
-    "transcoding_acceleration_nvenc": "",
-    "transcoding_acceleration_qsv": "",
-    "transcoding_acceleration_rkmpp": "",
-    "transcoding_acceleration_vaapi": "",
-    "transcoding_accepted_audio_codecs": "",
-    "transcoding_accepted_audio_codecs_description": "",
-    "transcoding_accepted_video_codecs": "",
-    "transcoding_accepted_video_codecs_description": "",
-    "transcoding_advanced_options_description": "",
-    "transcoding_audio_codec": "",
-    "transcoding_audio_codec_description": "",
-    "transcoding_bitrate_description": "",
-    "transcoding_constant_quality_mode": "",
-    "transcoding_constant_quality_mode_description": "",
-    "transcoding_constant_rate_factor": "",
-    "transcoding_constant_rate_factor_description": "",
-    "transcoding_disabled_description": "",
-    "transcoding_hardware_acceleration": "",
-    "transcoding_hardware_acceleration_description": "",
-    "transcoding_hardware_decoding": "",
-    "transcoding_hardware_decoding_setting_description": "",
-    "transcoding_hevc_codec": "",
-    "transcoding_max_b_frames": "",
-    "transcoding_max_b_frames_description": "",
-    "transcoding_max_bitrate": "",
-    "transcoding_max_bitrate_description": "",
-    "transcoding_max_keyframe_interval": "",
-    "transcoding_max_keyframe_interval_description": "",
-    "transcoding_optimal_description": "",
-    "transcoding_preferred_hardware_device": "",
-    "transcoding_preferred_hardware_device_description": "",
-    "transcoding_preset_preset": "",
-    "transcoding_preset_preset_description": "",
-    "transcoding_reference_frames": "",
-    "transcoding_reference_frames_description": "",
-    "transcoding_required_description": "",
-    "transcoding_settings": "",
-    "transcoding_settings_description": "",
-    "transcoding_target_resolution": "",
-    "transcoding_target_resolution_description": "",
-    "transcoding_temporal_aq": "",
-    "transcoding_temporal_aq_description": "",
-    "transcoding_threads": "",
-    "transcoding_threads_description": "",
-    "transcoding_tone_mapping": "",
-    "transcoding_tone_mapping_description": "",
-    "transcoding_transcode_policy": "",
-    "transcoding_transcode_policy_description": "",
-    "transcoding_two_pass_encoding": "",
-    "transcoding_two_pass_encoding_setting_description": "",
-    "transcoding_video_codec": "",
-    "transcoding_video_codec_description": "",
-    "trash_enabled_description": "",
-    "trash_number_of_days": "",
-    "trash_number_of_days_description": "",
-    "trash_settings": "",
-    "trash_settings_description": "",
-    "untracked_files": "",
-    "untracked_files_description": "",
-    "user_delete_delay_settings": "",
-    "user_delete_delay_settings_description": "",
-    "user_management": "",
-    "user_password_has_been_reset": "",
-    "user_password_reset_description": "",
-    "user_settings": "",
-    "user_settings_description": "",
-    "user_successfully_removed": "",
-    "version_check_enabled_description": "",
-    "version_check_settings": "",
-    "version_check_settings_description": "",
-    "video_conversion_job": "",
-    "video_conversion_job_description": ""
-  },
-  "admin_email": "",
-  "admin_password": "",
-  "administration": "",
-  "advanced": "",
-  "album_added": "",
-  "album_added_notification_setting_description": "",
-  "album_cover_updated": "",
-  "album_info_updated": "",
-  "album_name": "",
-  "album_options": "",
-  "album_updated": "",
-  "album_updated_setting_description": "",
-  "albums": "",
-  "albums_count": "",
-  "all": "",
-  "all_people": "",
-  "allow_dark_mode": "",
-  "allow_edits": "",
-  "api_key": "",
-  "api_keys": "",
-  "app_settings": "",
-  "appears_in": "",
-  "archive": "",
-  "archive_or_unarchive_photo": "",
-  "asset_offline": "",
-  "assets": "",
-  "authorized_devices": "",
-  "back": "",
-  "backward": "",
-  "blurred_background": "",
-  "camera": "",
-  "camera_brand": "",
-  "camera_model": "",
-  "cancel": "",
-  "cancel_search": "",
-  "cannot_merge_people": "",
-  "cannot_update_the_description": "",
-  "change_date": "",
-  "change_expiration_time": "",
-  "change_location": "",
-  "change_name": "",
-  "change_name_successfully": "",
-  "change_password": "",
-  "change_your_password": "",
-  "changed_visibility_successfully": "",
-  "check_all": "",
-  "check_logs": "",
-  "choose_matching_people_to_merge": "",
-  "city": "",
-  "clear": "",
-  "clear_all": "",
-  "clear_message": "",
-  "clear_value": "",
-  "close": "",
-  "collapse_all": "",
-  "color_theme": "",
-  "comment_options": "",
-  "comments_are_disabled": "",
-  "confirm": "",
-  "confirm_admin_password": "",
-  "confirm_delete_shared_link": "",
-  "confirm_password": "",
-  "contain": "",
-  "context": "",
-  "continue": "",
-  "copied_image_to_clipboard": "",
-  "copied_to_clipboard": "",
-  "copy_error": "",
-  "copy_file_path": "",
-  "copy_image": "",
-  "copy_link": "",
-  "copy_link_to_clipboard": "",
-  "copy_password": "",
-  "copy_to_clipboard": "",
-  "country": "",
-  "cover": "",
-  "covers": "",
-  "create": "",
-  "create_album": "",
-  "create_library": "",
-  "create_link": "",
-  "create_link_to_share": "",
-  "create_new_person": "",
-  "create_new_user": "",
-  "create_user": "",
-  "created": "",
-  "current_device": "",
-  "custom_locale": "",
-  "custom_locale_description": "",
-  "dark": "",
-  "date_after": "",
-  "date_and_time": "",
-  "date_before": "",
-  "date_range": "",
-  "day": "",
-  "default_locale": "",
-  "default_locale_description": "",
-  "delete": "",
-  "delete_album": "",
-  "delete_api_key_prompt": "",
-  "delete_key": "",
-  "delete_library": "",
-  "delete_link": "",
-  "delete_shared_link": "",
-  "delete_user": "",
-  "deleted_shared_link": "",
-  "description": "",
-  "details": "",
-  "direction": "",
-  "disabled": "",
-  "disallow_edits": "",
-  "discover": "",
-  "dismiss_all_errors": "",
-  "dismiss_error": "",
-  "display_options": "",
-  "display_order": "",
-  "display_original_photos": "",
-  "display_original_photos_setting_description": "",
-  "done": "",
-  "download": "",
-  "downloading": "",
-  "duration": "",
-  "edit_album": "",
-  "edit_avatar": "",
-  "edit_date": "",
-  "edit_date_and_time": "",
-  "edit_exclusion_pattern": "",
-  "edit_faces": "",
-  "edit_import_path": "",
-  "edit_import_paths": "",
-  "edit_key": "",
-  "edit_link": "",
-  "edit_location": "",
-  "edit_name": "",
-  "edit_people": "",
-  "edit_title": "",
-  "edit_user": "",
-  "edited": "",
-  "editor": "",
-  "email": "",
-  "empty_trash": "",
-  "enable": "",
-  "enabled": "",
-  "end_date": "",
-  "error": "",
-  "error_loading_image": "",
-  "errors": {
-    "cleared_jobs": "",
-    "exclusion_pattern_already_exists": "",
-    "failed_job_command": "",
-    "import_path_already_exists": "",
-    "paths_validation_failed": "",
-    "quota_higher_than_disk_size": "",
-    "repair_unable_to_check_items": "",
-    "unable_to_add_album_users": "",
-    "unable_to_add_comment": "",
-    "unable_to_add_exclusion_pattern": "",
-    "unable_to_add_import_path": "",
-    "unable_to_add_partners": "",
-    "unable_to_change_album_user_role": "",
-    "unable_to_change_date": "",
-    "unable_to_change_location": "",
-    "unable_to_change_password": "",
-    "unable_to_copy_to_clipboard": "",
-    "unable_to_create_api_key": "",
-    "unable_to_create_library": "",
-    "unable_to_create_user": "",
-    "unable_to_delete_album": "",
-    "unable_to_delete_asset": "",
-    "unable_to_delete_exclusion_pattern": "",
-    "unable_to_delete_import_path": "",
-    "unable_to_delete_shared_link": "",
-    "unable_to_delete_user": "",
-    "unable_to_edit_exclusion_pattern": "",
-    "unable_to_edit_import_path": "",
-    "unable_to_empty_trash": "",
-    "unable_to_enter_fullscreen": "",
-    "unable_to_exit_fullscreen": "",
-    "unable_to_hide_person": "",
-    "unable_to_link_oauth_account": "",
-    "unable_to_load_album": "",
-    "unable_to_load_asset_activity": "",
-    "unable_to_load_items": "",
-    "unable_to_load_liked_status": "",
-    "unable_to_play_video": "",
-    "unable_to_refresh_user": "",
-    "unable_to_remove_album_users": "",
-    "unable_to_remove_api_key": "",
-    "unable_to_remove_deleted_assets": "",
-    "unable_to_remove_library": "",
-    "unable_to_remove_partner": "",
-    "unable_to_remove_reaction": "",
-    "unable_to_repair_items": "",
-    "unable_to_reset_password": "",
-    "unable_to_resolve_duplicate": "",
-    "unable_to_restore_assets": "",
-    "unable_to_restore_trash": "",
-    "unable_to_restore_user": "",
-    "unable_to_save_album": "",
-    "unable_to_save_api_key": "",
-    "unable_to_save_name": "",
-    "unable_to_save_profile": "",
-    "unable_to_save_settings": "",
-    "unable_to_scan_libraries": "",
-    "unable_to_scan_library": "",
-    "unable_to_set_profile_picture": "",
-    "unable_to_submit_job": "",
-    "unable_to_trash_asset": "",
-    "unable_to_unlink_account": "",
-    "unable_to_update_library": "",
-    "unable_to_update_location": "",
-    "unable_to_update_settings": "",
-    "unable_to_update_timeline_display_status": "",
-    "unable_to_update_user": ""
-  },
-  "exit_slideshow": "",
-  "expand_all": "",
-  "expire_after": "",
-  "expired": "",
-  "explore": "",
-  "export": "",
-  "export_as_json": "",
-  "extension": "",
-  "external": "",
-  "external_libraries": "",
-  "favorite": "",
-  "favorite_or_unfavorite_photo": "",
-  "favorites": "",
-  "feature_photo_updated": "",
-  "file_name": "",
-  "file_name_or_extension": "",
-  "filename": "",
-  "filetype": "",
-  "filter_people": "",
-  "find_them_fast": "",
-  "fix_incorrect_match": "",
-  "forward": "",
-  "general": "",
-  "get_help": "",
-  "getting_started": "",
-  "go_back": "",
-  "go_to_search": "",
-  "group_albums_by": "",
-  "has_quota": "",
-  "hide_gallery": "",
-  "hide_password": "",
-  "hide_person": "",
-  "host": "",
-  "hour": "",
-  "image": "",
-  "immich_logo": "",
-  "import_from_json": "",
-  "import_path": "",
-  "in_archive": "",
-  "include_archived": "",
-  "include_shared_albums": "",
-  "include_shared_partner_assets": "",
-  "individual_share": "",
-  "info": "",
-  "interval": {
-    "day_at_onepm": "",
-    "hours": "",
-    "night_at_midnight": "",
-    "night_at_twoam": ""
-  },
-  "invite_people": "",
-  "invite_to_album": "",
-  "jobs": "",
-  "keep": "",
-  "keyboard_shortcuts": "",
-  "language": "",
-  "language_setting_description": "",
-  "last_seen": "",
-  "leave": "",
-  "let_others_respond": "",
-  "level": "",
-  "library": "",
-  "library_options": "",
-  "light": "",
-  "link_options": "",
-  "link_to_oauth": "",
-  "linked_oauth_account": "",
-  "list": "",
-  "loading": "",
-  "loading_search_results_failed": "",
-  "log_out": "",
-  "log_out_all_devices": "",
-  "login_has_been_disabled": "",
-  "look": "",
-  "loop_videos": "",
-  "loop_videos_description": "",
-  "make": "",
-  "manage_shared_links": "",
-  "manage_sharing_with_partners": "",
-  "manage_the_app_settings": "",
-  "manage_your_account": "",
-  "manage_your_api_keys": "",
-  "manage_your_devices": "",
-  "manage_your_oauth_connection": "",
-  "map": "",
-  "map_marker_with_image": "",
-  "map_settings": "",
-  "matches": "",
-  "media_type": "",
-  "memories": "",
-  "memories_setting_description": "",
-  "menu": "",
-  "merge": "",
-  "merge_people": "",
-  "merge_people_successfully": "",
-  "minimize": "",
-  "minute": "",
-  "missing": "",
-  "model": "",
-  "month": "",
-  "more": "",
-  "moved_to_trash": "",
-  "my_albums": "",
-  "name": "",
-  "name_or_nickname": "",
-  "never": "",
-  "new_api_key": "",
-  "new_password": "",
-  "new_person": "",
-  "new_user_created": "",
-  "newest_first": "",
-  "next": "",
-  "next_memory": "",
-  "no": "",
-  "no_albums_message": "",
-  "no_archived_assets_message": "",
-  "no_assets_message": "",
-  "no_duplicates_found": "",
-  "no_exif_info_available": "",
-  "no_explore_results_message": "",
-  "no_favorites_message": "",
-  "no_libraries_message": "",
-  "no_name": "",
-  "no_places": "",
-  "no_results": "",
-  "no_shared_albums_message": "",
-  "not_in_any_album": "",
-  "note_apply_storage_label_to_previously_uploaded assets": "",
-  "notes": "",
-  "notification_toggle_setting_description": "",
-  "notifications": "",
-  "notifications_setting_description": "",
-  "oauth": "",
-  "offline": "",
-  "offline_paths": "",
-  "offline_paths_description": "",
-  "ok": "",
-  "oldest_first": "",
-  "online": "",
-  "only_favorites": "",
-  "open_the_search_filters": "",
-  "options": "",
-  "organize_your_library": "",
-  "other": "",
-  "other_devices": "",
-  "other_variables": "",
-  "owned": "",
-  "owner": "",
-  "partner_can_access": "",
-  "partner_can_access_assets": "",
-  "partner_can_access_location": "",
-  "partner_sharing": "",
-  "partners": "",
-  "password": "",
-  "password_does_not_match": "",
-  "password_required": "",
-  "password_reset_success": "",
-  "past_durations": {
-    "days": "",
-    "hours": "",
-    "years": ""
-  },
-  "path": "",
-  "pattern": "",
-  "pause": "",
-  "pause_memories": "",
-  "paused": "",
-  "pending": "",
-  "people": "",
-  "people_sidebar_description": "",
-  "permanent_deletion_warning": "",
-  "permanent_deletion_warning_setting_description": "",
-  "permanently_delete": "",
-  "permanently_deleted_asset": "",
-  "photos": "",
-  "photos_count": "",
-  "photos_from_previous_years": "",
-  "pick_a_location": "",
-  "place": "",
-  "places": "",
-  "play": "",
-  "play_memories": "",
-  "play_motion_photo": "",
-  "play_or_pause_video": "",
-  "port": "",
-  "preset": "",
-  "preview": "",
-  "previous": "",
-  "previous_memory": "",
-  "previous_or_next_photo": "",
-  "primary": "",
-  "profile_picture_set": "",
-  "public_share": "",
-  "reaction_options": "",
-  "read_changelog": "",
-  "recent": "",
-  "recent_searches": "",
-  "refresh": "",
-  "refreshed": "",
-  "refreshes_every_file": "",
-  "remove": "",
-  "remove_deleted_assets": "",
-  "remove_from_album": "",
-  "remove_from_favorites": "",
-  "remove_from_shared_link": "",
-  "removed_api_key": "",
-  "rename": "",
-  "repair": "",
-  "repair_no_results_message": "",
-  "replace_with_upload": "",
-  "require_password": "",
-  "require_user_to_change_password_on_first_login": "",
-  "reset": "",
-  "reset_password": "",
-  "reset_people_visibility": "",
-  "restore": "",
-  "restore_all": "",
-  "restore_user": "",
-  "resume": "",
-  "retry_upload": "",
-  "review_duplicates": "",
-  "role": "",
-  "save": "",
-  "saved_api_key": "",
-  "saved_profile": "",
-  "saved_settings": "",
-  "say_something": "",
-  "scan_all_libraries": "",
-  "scan_settings": "",
-  "search": "",
-  "search_albums": "",
-  "search_by_context": "",
-  "search_camera_make": "",
-  "search_camera_model": "",
-  "search_city": "",
-  "search_country": "",
-  "search_for_existing_person": "",
-  "search_people": "",
-  "search_places": "",
-  "search_state": "",
-  "search_timezone": "",
-  "search_type": "",
-  "search_your_photos": "",
-  "searching_locales": "",
-  "second": "",
-  "select_album_cover": "",
-  "select_all": "",
-  "select_avatar_color": "",
-  "select_face": "",
-  "select_featured_photo": "",
-  "select_keep_all": "",
-  "select_library_owner": "",
-  "select_new_face": "",
-  "select_photos": "",
-  "select_trash_all": "",
-  "selected": "",
-  "send_message": "",
-  "send_welcome_email": "",
-  "server_stats": "",
-  "set": "",
-  "set_as_album_cover": "",
-  "set_as_profile_picture": "",
-  "set_date_of_birth": "",
-  "set_profile_picture": "",
-  "set_slideshow_to_fullscreen": "",
-  "settings": "",
-  "settings_saved": "",
-  "share": "",
-  "shared": "",
-  "shared_by": "",
-  "shared_by_you": "",
-  "shared_from_partner": "",
-  "shared_links": "",
-  "shared_with_partner": "",
-  "sharing": "",
-  "sharing_sidebar_description": "",
-  "show_album_options": "",
-  "show_and_hide_people": "",
-  "show_file_location": "",
-  "show_gallery": "",
-  "show_hidden_people": "",
-  "show_in_timeline": "",
-  "show_in_timeline_setting_description": "",
-  "show_keyboard_shortcuts": "",
-  "show_metadata": "",
-  "show_or_hide_info": "",
-  "show_password": "",
-  "show_person_options": "",
-  "show_progress_bar": "",
-  "show_search_options": "",
-  "shuffle": "",
-  "sign_out": "",
-  "sign_up": "",
-  "size": "",
-  "skip_to_content": "",
-  "slideshow": "",
-  "slideshow_settings": "",
-  "sort_albums_by": "",
-  "stack": "",
-  "stack_selected_photos": "",
-  "stacktrace": "",
-  "start": "",
-  "start_date": "",
-  "state": "",
-  "status": "",
-  "stop_motion_photo": "",
-  "stop_photo_sharing": "",
-  "stop_photo_sharing_description": "",
-  "stop_sharing_photos_with_user": "",
-  "storage": "",
-  "storage_label": "",
-  "storage_usage": "",
-  "submit": "",
-  "suggestions": "",
-  "sunrise_on_the_beach": "",
-  "swap_merge_direction": "",
-  "sync": "",
-  "template": "",
-  "theme": "",
-  "theme_selection": "",
-  "theme_selection_description": "",
-  "time_based_memories": "",
-  "timezone": "",
-  "to_archive": "",
-  "to_favorite": "",
-  "toggle_settings": "",
-  "toggle_theme": "",
-  "total_usage": "",
-  "trash": "",
-  "trash_all": "",
-  "trash_no_results_message": "",
-  "trashed_items_will_be_permanently_deleted_after": "",
-  "type": "",
-  "unarchive": "",
-  "unfavorite": "",
-  "unhide_person": "",
-  "unknown": "",
-  "unknown_year": "",
-  "unlimited": "",
-  "unlink_oauth": "",
-  "unlinked_oauth_account": "",
-  "unselect_all": "",
-  "unstack": "",
-  "untracked_files": "",
-  "untracked_files_decription": "",
-  "up_next": "",
-  "updated_password": "",
-  "upload": "",
-  "upload_concurrency": "",
-  "url": "",
-  "usage": "",
-  "user": "",
-  "user_id": "",
-  "user_usage_detail": "",
-  "username": "",
-  "users": "",
-  "utilities": "",
-  "validate": "",
-  "variables": "",
-  "version": "",
-  "video": "",
-  "video_hover_setting": "",
-  "video_hover_setting_description": "",
-  "videos": "",
-  "videos_count": "",
-  "view_all": "",
-  "view_all_users": "",
-  "view_links": "",
-  "view_next_asset": "",
-  "view_previous_asset": "",
-  "waiting": "",
-  "week": "",
-  "welcome_to_immich": "",
-  "year": "",
-  "yes": "",
-  "you_dont_have_any_shared_links": "",
-  "zoom_image": ""
+  "add_more_users": "Putem mor man"
 }

i18n/bn.json

@@ -1 +1,17 @@
-{}
+{
+  "about": "সম্পর্কে",
+  "account": "অ্যাকাউন্ট",
+  "account_settings": "অ্যাকাউন্ট সেটিংস",
+  "acknowledge": "স্বীকৃতি",
+  "action": "কার্য",
+  "action_common_update": "আপডেট",
+  "actions": "কর্ম",
+  "active": "সচল",
+  "activity": "কার্যকলাপ",
+  "add": "যোগ করুন",
+  "add_a_description": "একটি বিবরণ যোগ করুন",
+  "add_a_location": "একটি অবস্থান যোগ করুন",
+  "add_a_name": "একটি নাম যোগ করুন",
+  "add_a_title": "একটি শিরোনাম যোগ করুন",
+  "add_endpoint": "এন্ডপয়েন্ট যোগ করুন"
+}

i18n/ca.json

@@ -39,11 +39,11 @@
     "authentication_settings_disable_all": "Estàs segur que vols desactivar tots els mètodes d'inici de sessió? L'inici de sessió quedarà completament desactivat.",
     "authentication_settings_reenable": "Per a tornar a habilitar, empra una <link>Comanda de Servidor</link>.",
     "background_task_job": "Tasques en segon pla",
-    "backup_database": "Còpia de la base de dades",
-    "backup_database_enable_description": "Habilitar còpies de la base de dades",
-    "backup_keep_last_amount": "Quantitat de còpies de seguretat anteriors per conservar",
-    "backup_settings": "Ajustes de les còpies de seguretat",
-    "backup_settings_description": "Gestionar la configuració de la còpia de seguretat de la base de dades",
+    "backup_database": "Fer un bolcat de la base de dades",
+    "backup_database_enable_description": "Habilitar bolcat de la base de dades",
+    "backup_keep_last_amount": "Quantitat de bolcats anteriors per conservar",
+    "backup_settings": "Configuració dels bolcats",
+    "backup_settings_description": "Gestionar la configuració bolcats de la base de dades. Nota: els treballs no es monitoritzen ni es notifiquen les fallades.",
     "check_all": "Marca-ho tot",
     "cleanup": "Neteja",
     "cleared_jobs": "Tasques esborrades per a: {job}",
@@ -53,6 +53,7 @@
     "confirm_email_below": "Per a confirmar, escriviu \"{email}\" a sota",
     "confirm_reprocess_all_faces": "Esteu segur que voleu reprocessar totes les cares? Això també esborrarà la gent que heu anomenat.",
     "confirm_user_password_reset": "Esteu segur que voleu reinicialitzar la contrasenya de l'usuari {user}?",
+    "confirm_user_pin_code_reset": "Esteu segur que voleu restablir el codi PIN de {user}?",
     "create_job": "Crear tasca",
     "cron_expression": "Expressió Cron",
     "cron_expression_description": "Estableix l'interval d'escaneig amb el format cron. Per obtenir més informació, consulteu, p.e <link>Crontab Guru</link>",
@@ -192,26 +193,22 @@
     "oauth_auto_register": "Registre automàtic",
     "oauth_auto_register_description": "Registra nous usuaris automàticament després d'iniciar sessió amb OAuth",
     "oauth_button_text": "Text del botó",
-    "oauth_client_id": "ID Client",
-    "oauth_client_secret": "Secret de Client",
+    "oauth_client_secret_description": "Requerit si PKCE (Proof Key for Code Exchange) no està suportat pel proveïdor OAuth",
     "oauth_enable_description": "Iniciar sessió amb OAuth",
-    "oauth_issuer_url": "URL de l'emissor",
     "oauth_mobile_redirect_uri": "URI de redirecció mòbil",
     "oauth_mobile_redirect_uri_override": "Sobreescriu l'URI de redirecció mòbil",
     "oauth_mobile_redirect_uri_override_description": "Habilita quan el proveïdor d'OAuth no permet una URI mòbil, com ara '{callback}'",
-    "oauth_profile_signing_algorithm": "Algoritme de signatura del perfil",
-    "oauth_profile_signing_algorithm_description": "Algoritme utilitzat per signar el perfil d’usuari.",
-    "oauth_scope": "Abast",
     "oauth_settings": "OAuth",
     "oauth_settings_description": "Gestiona la configuració de l'inici de sessió OAuth",
     "oauth_settings_more_details": "Per a més detalls sobre aquesta funcionalitat, consulteu la <link>documentació</link>.",
-    "oauth_signing_algorithm": "Algorisme de signatura",
     "oauth_storage_label_claim": "Petició d'etiquetatge d'emmagatzematge",
     "oauth_storage_label_claim_description": "Estableix automàticament l'etiquetatge d'emmagatzematge de l'usuari a aquest valor.",
     "oauth_storage_quota_claim": "Quota d'emmagatzematge reclamada",
     "oauth_storage_quota_claim_description": "Estableix automàticament la quota d'emmagatzematge de l'usuari al valor d'aquest paràmetre.",
     "oauth_storage_quota_default": "Quota d'emmagatzematge predeterminada (GiB)",
     "oauth_storage_quota_default_description": "Quota disponible en GB quan no s'estableixi cap valor (Entreu 0 per a quota il·limitada).",
+    "oauth_timeout": "Solicitud caducada",
+    "oauth_timeout_description": "Timeout per a sol·licituds en mil·lisegons",
     "offline_paths": "Rutes sense connexió",
     "offline_paths_description": "Aquests resultats poden ser deguts a l'eliminació manual de fitxers que no formen part d'una llibreria externa.",
     "password_enable_description": "Inicia sessió amb correu electrònic i contrasenya",
@@ -352,6 +349,7 @@
     "user_delete_delay_settings_description": "Nombre de dies després de la supressió per eliminar permanentment el compte i els elements d'un usuari. El treball de supressió d'usuaris s'executa a mitjanit per comprovar si hi ha usuaris preparats per eliminar. Els canvis en aquesta configuració s'avaluaran en la propera execució.",
     "user_delete_immediately": "El compte i els recursos de <b>{user}</b> es posaran a la cua per suprimir-los permanentment <b>immediatament</b>.",
     "user_delete_immediately_checkbox": "Posa en cua l'usuari i els recursos per suprimir-los immediatament",
+    "user_details": "Detalls d'usuari",
     "user_management": "Gestió d'usuaris",
     "user_password_has_been_reset": "La contrasenya de l'usuari ha estat restablida:",
     "user_password_reset_description": "Si us plau, proporcioneu la contrasenya temporal a l'usuari i informeu-los que haurà de canviar la contrasenya en el proper inici de sessió.",
@@ -371,13 +369,17 @@
   "admin_password": "Contrasenya de l'administrador",
   "administration": "Administrador",
   "advanced": "Avançat",
-  "advanced_settings_log_level_title": "Nivell de registre: {}",
+  "advanced_settings_enable_alternate_media_filter_subtitle": "Feu servir aquesta opció per filtrar els continguts multimèdia durant la sincronització segons criteris alternatius. Només proveu-ho si teniu problemes amb l'aplicació per detectar tots els àlbums.",
+  "advanced_settings_enable_alternate_media_filter_title": "Utilitza el filtre de sincronització d'àlbums de dispositius alternatius",
+  "advanced_settings_log_level_title": "Nivell de registre: {level}",
   "advanced_settings_prefer_remote_subtitle": "Alguns dispositius són molt lents en carregar miniatures dels elements del dispositiu. Activeu aquest paràmetre per carregar imatges remotes en el seu lloc.",
   "advanced_settings_prefer_remote_title": "Prefereix imatges remotes",
   "advanced_settings_proxy_headers_subtitle": "Definiu les capçaleres de proxy que Immich per enviar amb cada sol·licitud de xarxa",
   "advanced_settings_proxy_headers_title": "Capçaleres de proxy",
   "advanced_settings_self_signed_ssl_subtitle": "Omet la verificació del certificat SSL del servidor. Requerit per a certificats autosignats.",
   "advanced_settings_self_signed_ssl_title": "Permet certificats SSL autosignats",
+  "advanced_settings_sync_remote_deletions_subtitle": "Suprimeix o restaura automàticament un actiu en aquest dispositiu quan es realitzi aquesta acció al web",
+  "advanced_settings_sync_remote_deletions_title": "Sincronitza les eliminacions remotes",
   "advanced_settings_tile_subtitle": "Configuració avançada de l'usuari",
   "advanced_settings_troubleshooting_subtitle": "Habilita funcions addicionals per a la resolució de problemes",
   "advanced_settings_troubleshooting_title": "Resolució de problemes",
@@ -400,9 +402,9 @@
   "album_remove_user_confirmation": "Esteu segurs que voleu eliminar {user}?",
   "album_share_no_users": "Sembla que has compartit aquest àlbum amb tots els usuaris o no tens cap usuari amb qui compartir-ho.",
   "album_thumbnail_card_item": "1 element",
-  "album_thumbnail_card_items": "{} elements",
+  "album_thumbnail_card_items": "{count} elements",
   "album_thumbnail_card_shared": " · Compartit",
-  "album_thumbnail_shared_by": "Compartit per {}",
+  "album_thumbnail_shared_by": "Compartit per {user}",
   "album_updated": "Àlbum actualitzat",
   "album_updated_setting_description": "Rep una notificació per correu electrònic quan un àlbum compartit tingui recursos nous",
   "album_user_left": "Surt de {album}",
@@ -440,7 +442,7 @@
   "archive": "Arxiu",
   "archive_or_unarchive_photo": "Arxivar o desarxivar fotografia",
   "archive_page_no_archived_assets": "No s'ha trobat res arxivat",
-  "archive_page_title": "Arxiu({})",
+  "archive_page_title": "Arxiu({count})",
   "archive_size": "Mida de l'arxiu",
   "archive_size_description": "Configureu la mida de l'arxiu de les descàrregues (en GiB)",
   "archived": "Arxivat",
@@ -477,18 +479,18 @@
   "assets_added_to_album_count": "{count, plural, one {Afegit un element} other {Afegits # elements}} a l'àlbum",
   "assets_added_to_name_count": "{count, plural, one {S'ha afegit # recurs} other {S'han afegit # recursos}} a {hasName, select, true {<b>{name}</b>} other {new album}}",
   "assets_count": "{count, plural, one {# recurs} other {# recursos}}",
-  "assets_deleted_permanently": "{} element(s) esborrats permanentment",
-  "assets_deleted_permanently_from_server": "{} element(s) esborrats permanentment del servidor d'Immich",
+  "assets_deleted_permanently": "{count} element(s) esborrats permanentment",
+  "assets_deleted_permanently_from_server": "{count} element(s) esborrats permanentment del servidor d'Immich",
   "assets_moved_to_trash_count": "{count, plural, one {# recurs mogut} other {# recursos moguts}} a la paperera",
   "assets_permanently_deleted_count": "{count, plural, one {# recurs esborrat} other {# recursos esborrats}} permanentment",
   "assets_removed_count": "{count, plural, one {# element eliminat} other {# elements eliminats}}",
-  "assets_removed_permanently_from_device": "{} element(s) esborrat permanentment del dispositiu",
+  "assets_removed_permanently_from_device": "{count} element(s) esborrat permanentment del dispositiu",
   "assets_restore_confirmation": "Esteu segurs que voleu restaurar tots els teus actius? Aquesta acció no es pot desfer! Tingueu en compte que els recursos fora de línia no es poden restaurar d'aquesta manera.",
   "assets_restored_count": "{count, plural, one {# element restaurat} other {# elements restaurats}}",
-  "assets_restored_successfully": "{} element(s) recuperats correctament",
-  "assets_trashed": "{} element(s) enviat a la paperera",
+  "assets_restored_successfully": "{count} element(s) recuperats correctament",
+  "assets_trashed": "{count} element(s) enviat a la paperera",
   "assets_trashed_count": "{count, plural, one {# element enviat} other {# elements enviats}} a la paperera",
-  "assets_trashed_from_server": "{} element(s) enviat a la paperera del servidor d'Immich",
+  "assets_trashed_from_server": "{count} element(s) enviat a la paperera del servidor d'Immich",
   "assets_were_part_of_album_count": "{count, plural, one {L'element ja és} other {Els elements ja són}} part de l'àlbum",
   "authorized_devices": "Dispositius autoritzats",
   "automatic_endpoint_switching_subtitle": "Connecteu-vos localment a través de la Wi-Fi designada quan estigui disponible i utilitzeu connexions alternatives en altres llocs",
@@ -497,7 +499,7 @@
   "back_close_deselect": "Tornar, tancar o anul·lar la selecció",
   "background_location_permission": "Permís d'ubicació en segon pla",
   "background_location_permission_content": "Per canviar de xarxa quan s'executa en segon pla, Immich ha de *sempre* tenir accés a la ubicació precisa perquè l'aplicació pugui llegir el nom de la xarxa Wi-Fi",
-  "backup_album_selection_page_albums_device": "Àlbums al dispositiu ({})",
+  "backup_album_selection_page_albums_device": "Àlbums al dispositiu ({count})",
   "backup_album_selection_page_albums_tap": "Un toc per incloure, doble toc per excloure",
   "backup_album_selection_page_assets_scatter": "Els elements poden dispersar-se en diversos àlbums. Per tant, els àlbums es poden incloure o excloure durant el procés de còpia de seguretat.",
   "backup_album_selection_page_select_albums": "Selecciona àlbums",
@@ -506,37 +508,37 @@
   "backup_all": "Tots",
   "backup_background_service_backup_failed_message": "No s'ha pogut copiar els elements. Tornant a intentar…",
   "backup_background_service_connection_failed_message": "No s'ha pogut connectar al servidor. Tornant a intentar…",
-  "backup_background_service_current_upload_notification": "Pujant {}",
-  "backup_background_service_default_notification": "Cercant nous elements...",
+  "backup_background_service_current_upload_notification": "Pujant {filename}",
+  "backup_background_service_default_notification": "Cercant nous elements…",
   "backup_background_service_error_title": "Error copiant",
-  "backup_background_service_in_progress_notification": "Copiant els teus elements",
-  "backup_background_service_upload_failure_notification": "Error al pujar {}",
+  "backup_background_service_in_progress_notification": "Copiant els teus elements…",
+  "backup_background_service_upload_failure_notification": "Error en pujar {filename}",
   "backup_controller_page_albums": "Copia els àlbums",
   "backup_controller_page_background_app_refresh_disabled_content": "Activa l'actualització en segon pla de l'aplicació a Configuració > General > Actualització en segon pla per utilitzar la copia de seguretat en segon pla.",
   "backup_controller_page_background_app_refresh_disabled_title": "Actualització en segon pla desactivada",
   "backup_controller_page_background_app_refresh_enable_button_text": "Vés a configuració",
   "backup_controller_page_background_battery_info_link": "Mostra'm com",
-  "backup_controller_page_background_battery_info_message": "Per obtenir la millor experiència de copia de seguretat en segon pla, desactiveu qualsevol optimització de bateria que restringeixi l'activitat en segon pla per a Immich.\n\nAtès que això és específic del dispositiu, busqueu la informació necessària per al fabricant del vostre dispositiu",
+  "backup_controller_page_background_battery_info_message": "Per obtenir la millor experiència de còpia de seguretat en segon pla, desactiveu qualsevol optimització de bateria que restringeixi l'activitat en segon pla per a Immich.\n\nAtès que això és específic del dispositiu, busqueu la informació necessària per al fabricant del vostre dispositiu.",
   "backup_controller_page_background_battery_info_ok": "D'acord",
   "backup_controller_page_background_battery_info_title": "Optimitzacions de bateria",
   "backup_controller_page_background_charging": "Només mentre es carrega",
   "backup_controller_page_background_configure_error": "No s'ha pogut configurar el servei en segon pla",
-  "backup_controller_page_background_delay": "Retard en la copia de seguretat de nous elements: {}",
-  "backup_controller_page_background_description": "Activeu el servei en segon pla per copiar automàticament tots els nous elements sense haver d'obrir l'aplicació.",
+  "backup_controller_page_background_delay": "Retard en la còpia de seguretat de nous elements: {duration}",
+  "backup_controller_page_background_description": "Activeu el servei en segon pla per copiar automàticament tots els nous elements sense haver d'obrir l'aplicació",
   "backup_controller_page_background_is_off": "La còpia automàtica en segon pla està desactivada",
   "backup_controller_page_background_is_on": "La còpia automàtica en segon pla està activada",
   "backup_controller_page_background_turn_off": "Desactiva el servei en segon pla",
   "backup_controller_page_background_turn_on": "Activa el servei en segon pla",
-  "backup_controller_page_background_wifi": "Només amb WiFi",
+  "backup_controller_page_background_wifi": "Només amb Wi-Fi",
   "backup_controller_page_backup": "Còpia",
   "backup_controller_page_backup_selected": "Seleccionat: ",
   "backup_controller_page_backup_sub": "Fotografies i vídeos copiats",
-  "backup_controller_page_created": "Creat el: {}",
+  "backup_controller_page_created": "Creat el: {date}",
   "backup_controller_page_desc_backup": "Activeu la còpia de seguretat per pujar automàticament els nous elements al servidor en obrir l'aplicació.",
-  "backup_controller_page_excluded": "Exclosos:",
-  "backup_controller_page_failed": "Fallats ({})",
-  "backup_controller_page_filename": "Nom de l'arxiu: {} [{}]",
-  "backup_controller_page_id": "ID: {}",
+  "backup_controller_page_excluded": "Exclosos: ",
+  "backup_controller_page_failed": "Fallats ({count})",
+  "backup_controller_page_filename": "Nom de l'arxiu: {filename} [{size}]",
+  "backup_controller_page_id": "ID: {id}",
   "backup_controller_page_info": "Informació de la còpia",
   "backup_controller_page_none_selected": "Cap seleccionat",
   "backup_controller_page_remainder": "Restant",
@@ -545,7 +547,7 @@
   "backup_controller_page_start_backup": "Inicia la còpia",
   "backup_controller_page_status_off": "La copia de seguretat està desactivada",
   "backup_controller_page_status_on": "La copia de seguretat està activada",
-  "backup_controller_page_storage_format": "{} de {} utilitzats",
+  "backup_controller_page_storage_format": "{used} de {total} utilitzats",
   "backup_controller_page_to_backup": "Àlbums a copiar",
   "backup_controller_page_total_sub": "Totes les fotografies i vídeos dels àlbums seleccionats",
   "backup_controller_page_turn_off": "Desactiva la còpia de seguretat",
@@ -570,21 +572,21 @@
   "bulk_keep_duplicates_confirmation": "Esteu segur que voleu mantenir {count, plural, one {# recurs duplicat} other {# recursos duplicats}}? Això resoldrà tots els grups duplicats sense eliminar res.",
   "bulk_trash_duplicates_confirmation": "Esteu segur que voleu enviar a les escombraries {count, plural, one {# recurs duplicat} other {# recursos duplicats}}? Això mantindrà el recurs més gran de cada grup i eliminarà la resta de duplicats.",
   "buy": "Comprar Immich",
-  "cache_settings_album_thumbnails": "Miniatures de la pàgina de la biblioteca ({} elements)",
+  "cache_settings_album_thumbnails": "Miniatures de la pàgina de la biblioteca ({count} elements)",
   "cache_settings_clear_cache_button": "Neteja la memòria cau",
   "cache_settings_clear_cache_button_title": "Neteja la memòria cau de l'aplicació. Això impactarà significativament el rendiment fins que la memòria cau es torni a reconstruir.",
   "cache_settings_duplicated_assets_clear_button": "NETEJA",
-  "cache_settings_duplicated_assets_subtitle": "Fotos i vídeos que estan a la llista negra de l'aplicació.",
-  "cache_settings_duplicated_assets_title": "Elements duplicats ({})",
-  "cache_settings_image_cache_size": "Mida de la memòria cau de imatges ({} elements)",
+  "cache_settings_duplicated_assets_subtitle": "Fotos i vídeos que estan a la llista negra de l'aplicació",
+  "cache_settings_duplicated_assets_title": "Elements duplicats ({count})",
+  "cache_settings_image_cache_size": "Mida de la memòria cau d'imatges ({count} elements)",
   "cache_settings_statistics_album": "Miniatures de la biblioteca",
-  "cache_settings_statistics_assets": "{} elements ({})",
+  "cache_settings_statistics_assets": "{count} elements ({size})",
   "cache_settings_statistics_full": "Imatges completes",
   "cache_settings_statistics_shared": "Miniatures d'àlbums compartits",
   "cache_settings_statistics_thumbnail": "Miniatures",
   "cache_settings_statistics_title": "Ús de memòria cau",
   "cache_settings_subtitle": "Controla el comportament de la memòria cau de l'aplicació mòbil Immich",
-  "cache_settings_thumbnail_size": "Mida de la memòria cau de les miniatures ({} elements)",
+  "cache_settings_thumbnail_size": "Mida de la memòria cau de les miniatures ({count} elements)",
   "cache_settings_tile_subtitle": "Controla el comportament de l'emmagatzematge local",
   "cache_settings_tile_title": "Emmagatzematge local",
   "cache_settings_title": "Configuració de la memòria cau",
@@ -610,6 +612,7 @@
   "change_password_form_new_password": "Nova contrasenya",
   "change_password_form_password_mismatch": "Les contrasenyes no coincideixen",
   "change_password_form_reenter_new_password": "Torna a introduir la nova contrasenya",
+  "change_pin_code": "Canviar el codi PIN",
   "change_your_password": "Canvia la teva contrasenya",
   "changed_visibility_successfully": "Visibilitat canviada amb èxit",
   "check_all": "Marqueu-ho tot",
@@ -650,11 +653,12 @@
   "confirm_delete_face": "Estàs segur que vols eliminar la cara de {name} de les cares reconegudes?",
   "confirm_delete_shared_link": "Esteu segurs que voleu eliminar aquest enllaç compartit?",
   "confirm_keep_this_delete_others": "Excepte aquest element, tots els altres de la pila se suprimiran. Esteu segur que voleu continuar?",
+  "confirm_new_pin_code": "Confirma el nou codi PIN",
   "confirm_password": "Confirmació de contrasenya",
   "contain": "Contingut",
   "context": "Context",
   "continue": "Continuar",
-  "control_bottom_app_bar_album_info_shared": "{} elements - Compartits",
+  "control_bottom_app_bar_album_info_shared": "{count} elements - Compartits",
   "control_bottom_app_bar_create_new_album": "Crea un àlbum nou",
   "control_bottom_app_bar_delete_from_immich": "Suprimeix del Immich",
   "control_bottom_app_bar_delete_from_local": "Suprimeix del dispositiu",
@@ -692,9 +696,11 @@
   "create_tag_description": "Crear una nova etiqueta. Per les etiquetes aniuades, escriu la ruta comperta de l'etiqueta, incloses les barres diagonals.",
   "create_user": "Crea un usuari",
   "created": "Creat",
+  "created_at": "Creat",
   "crop": "Retalla",
   "curated_object_page_title": "Coses",
   "current_device": "Dispositiu actual",
+  "current_pin_code": "Codi PIN actual",
   "current_server_address": "Adreça actual del servidor",
   "custom_locale": "Localització personalitzada",
   "custom_locale_description": "Format de dates i números segons la llengua i regió",
@@ -718,7 +724,7 @@
   "delete": "Esborra",
   "delete_album": "Esborra l'àlbum",
   "delete_api_key_prompt": "Esteu segurs que voleu eliminar aquesta clau API?",
-  "delete_dialog_alert": "Aquests elements seran eliminats de manera permanent d'Immich i del vostre dispositiu.",
+  "delete_dialog_alert": "Aquests elements seran eliminats de manera permanent d'Immich i del vostre dispositiu",
   "delete_dialog_alert_local": "Aquests elements s'eliminaran permanentment del vostre dispositiu, però encara estaran disponibles al servidor Immich",
   "delete_dialog_alert_local_non_backed_up": "Alguns dels elements no tenen còpia de seguretat a Immich i s'eliminaran permanentment del dispositiu",
   "delete_dialog_alert_remote": "Aquests elements s'eliminaran permanentment del servidor Immich",
@@ -763,7 +769,7 @@
   "download_enqueue": "Descàrrega en cua",
   "download_error": "Error de descàrrega",
   "download_failed": "Descàrrega ha fallat",
-  "download_filename": "arxiu: {}",
+  "download_filename": "arxiu: {filename}",
   "download_finished": "Descàrrega acabada",
   "download_include_embedded_motion_videos": "Vídeos incrustats",
   "download_include_embedded_motion_videos_description": "Incloure vídeos incrustats en fotografies en moviment com un arxiu separat",
@@ -807,6 +813,7 @@
   "editor_crop_tool_h2_aspect_ratios": "Relació d'aspecte",
   "editor_crop_tool_h2_rotation": "Rotació",
   "email": "Correu electrònic",
+  "email_notifications": "Correu electrònic de notificacions",
   "empty_folder": "Aquesta carpeta és buida",
   "empty_trash": "Buidar la paperera",
   "empty_trash_confirmation": "Esteu segur que voleu buidar la paperera? Això eliminarà tots els recursos a la paperera permanentment d'Immich.\nNo podeu desfer aquesta acció!",
@@ -814,12 +821,12 @@
   "enabled": "Activat",
   "end_date": "Data final",
   "enqueued": "En cua",
-  "enter_wifi_name": "Introdueix el nom de WiFi",
+  "enter_wifi_name": "Introdueix el nom de Wi-Fi",
   "error": "Error",
   "error_change_sort_album": "No s'ha pogut canviar l'ordre d'ordenació dels àlbums",
   "error_delete_face": "Error esborrant cara de les cares reconegudes",
   "error_loading_image": "Error carregant la imatge",
-  "error_saving_image": "Error: {}",
+  "error_saving_image": "Error: {error}",
   "error_title": "Error - Quelcom ha anat malament",
   "errors": {
     "cannot_navigate_next_asset": "No es pot navegar a l'element següent",
@@ -849,10 +856,12 @@
     "failed_to_keep_this_delete_others": "No s'ha pogut conservar aquest element i suprimir els altres",
     "failed_to_load_asset": "No s'ha pogut carregar l'element",
     "failed_to_load_assets": "No s'han pogut carregar els elements",
+    "failed_to_load_notifications": "Error en carregar les notificacions",
     "failed_to_load_people": "No s'han pogut carregar les persones",
     "failed_to_remove_product_key": "No s'ha pogut eliminar la clau del producte",
     "failed_to_stack_assets": "No s'han pogut apilar els elements",
     "failed_to_unstack_assets": "No s'han pogut desapilar els elements",
+    "failed_to_update_notification_status": "Error en actualitzar l'estat de les notificacions",
     "import_path_already_exists": "Aquesta ruta d'importació ja existeix.",
     "incorrect_email_or_password": "Correu electrònic o contrasenya incorrectes",
     "paths_validation_failed": "{paths, plural, one {# ruta} other {# rutes}} no ha pogut validar",
@@ -920,6 +929,7 @@
     "unable_to_remove_reaction": "No es pot eliminar la reacció",
     "unable_to_repair_items": "No es poden reparar els elements",
     "unable_to_reset_password": "No es pot restablir la contrasenya",
+    "unable_to_reset_pin_code": "No es pot restablir el codi PIN",
     "unable_to_resolve_duplicate": "No es pot resoldre el duplicat",
     "unable_to_restore_assets": "No es poden restaurar els recursos",
     "unable_to_restore_trash": "No es pot restaurar la paperera",
@@ -948,15 +958,15 @@
     "unable_to_upload_file": "No es pot carregar el fitxer"
   },
   "exif": "Exif",
-  "exif_bottom_sheet_description": "Afegeix descripció",
+  "exif_bottom_sheet_description": "Afegeix descripció...",
   "exif_bottom_sheet_details": "DETALLS",
   "exif_bottom_sheet_location": "UBICACIÓ",
   "exif_bottom_sheet_people": "PERSONES",
   "exif_bottom_sheet_person_add_person": "Afegir nom",
-  "exif_bottom_sheet_person_age": "Edat {}",
-  "exif_bottom_sheet_person_age_months": "Edat {} mesos",
-  "exif_bottom_sheet_person_age_year_months": "Edat 1 any, {} mesos",
-  "exif_bottom_sheet_person_age_years": "Edat {}",
+  "exif_bottom_sheet_person_age": "Edat {age}",
+  "exif_bottom_sheet_person_age_months": "Edat {months} mesos",
+  "exif_bottom_sheet_person_age_year_months": "Edat 1 any, {months} mesos",
+  "exif_bottom_sheet_person_age_years": "Edat {years}",
   "exit_slideshow": "Surt de la presentació de diapositives",
   "expand_all": "Ampliar-ho tot",
   "experimental_settings_new_asset_list_subtitle": "Treball en curs",
@@ -974,7 +984,7 @@
   "external": "Extern",
   "external_libraries": "Llibreries externes",
   "external_network": "Xarxa externa",
-  "external_network_sheet_info": "Quan no estigui a la xarxa WiFi preferida, l'aplicació es connectarà al servidor mitjançant el primer dels URL següents a què pot arribar, començant de dalt a baix.",
+  "external_network_sheet_info": "Quan no estigui a la xarxa Wi-Fi preferida, l'aplicació es connectarà al servidor mitjançant el primer dels URL següents a què pot arribar, començant de dalt a baix",
   "face_unassigned": "Sense assignar",
   "failed": "Fallat",
   "failed_to_load_assets": "Error carregant recursos",
@@ -992,6 +1002,7 @@
   "filetype": "Tipus d'arxiu",
   "filter": "Filtrar",
   "filter_people": "Filtra persones",
+  "filter_places": "Filtrar per llocs",
   "find_them_fast": "Trobeu-los ràpidament pel nom amb la cerca",
   "fix_incorrect_match": "Corregiu la coincidència incorrecta",
   "folder": "Carpeta",
@@ -1040,11 +1051,12 @@
   "home_page_delete_remote_err_local": "Elements locals a la selecció d'eliminació remota, ometent",
   "home_page_favorite_err_local": "Encara no es pot afegir a preferits elements locals, ometent",
   "home_page_favorite_err_partner": "Encara no es pot afegir a preferits elements de companys, ometent",
-  "home_page_first_time_notice": "Si és la primera vegada que utilitzes l'app, si us plau, assegura't d'escollir un àlbum de còpia de seguretat perquè la línia de temps pugui carregar fotos i vídeos als àlbums.",
+  "home_page_first_time_notice": "Si és la primera vegada que utilitzes l'app, si us plau, assegura't d'escollir un àlbum de còpia de seguretat perquè la línia de temps pugui carregar fotos i vídeos als àlbums",
   "home_page_share_err_local": "No es poden compartir els elements locals a través d'un enllaç, ometent",
   "home_page_upload_err_limit": "Només es poden pujar un màxim de 30 elements alhora, ometent",
   "host": "Amfitrió",
   "hour": "Hora",
+  "id": "ID",
   "ignore_icloud_photos": "Ignora fotos d'iCloud",
   "ignore_icloud_photos_description": "Les fotos emmagatzemades a iCloud no es penjaran al servidor Immich",
   "image": "Imatge",
@@ -1120,7 +1132,7 @@
   "local_network": "Xarxa local",
   "local_network_sheet_info": "L'aplicació es connectarà al servidor mitjançant aquest URL quan utilitzeu la xarxa Wi-Fi especificada",
   "location_permission": "Permís d'ubicació",
-  "location_permission_content": "Per utilitzar la funció de canvi automàtic, Immich necessita un permís de ubicació precisa perquè pugui llegir el nom de la xarxa WiFi actual",
+  "location_permission_content": "Per utilitzar la funció de canvi automàtic, Immich necessita un permís d'ubicació precisa perquè pugui llegir el nom de la xarxa Wi-Fi actual",
   "location_picker_choose_on_map": "Escollir en el mapa",
   "location_picker_latitude_error": "Introdueix una latitud vàlida",
   "location_picker_latitude_hint": "Introdueix aquí la latitud",
@@ -1144,7 +1156,7 @@
   "login_form_err_trailing_whitespace": "Espai en blanc al final",
   "login_form_failed_get_oauth_server_config": "Error en iniciar sessió amb OAuth, comprova l'URL del servidor",
   "login_form_failed_get_oauth_server_disable": "La funcionalitat OAuth no està disponible en aquest servidor",
-  "login_form_failed_login": "Error en iniciar sessió, comprova l'URL del servidor, el correu electrònic i la contrasenya.",
+  "login_form_failed_login": "Error en iniciar sessió, comprova l'URL del servidor, el correu electrònic i la contrasenya",
   "login_form_handshake_exception": "S'ha produït una excepció de handshake amb el servidor. Activa el suport per certificats autofirmats a la configuració si estàs fent servir un certificat autofirmat.",
   "login_form_password_hint": "contrasenya",
   "login_form_save_login": "Mantingues identificat",
@@ -1170,8 +1182,8 @@
   "manage_your_devices": "Gestioneu els vostres dispositius connectats",
   "manage_your_oauth_connection": "Gestioneu la vostra connexió OAuth",
   "map": "Mapa",
-  "map_assets_in_bound": "{} foto",
-  "map_assets_in_bounds": "{} fotos",
+  "map_assets_in_bound": "{count} foto",
+  "map_assets_in_bounds": "{count} fotos",
   "map_cannot_get_user_location": "No es pot obtenir la ubicació de l'usuari",
   "map_location_dialog_yes": "Sí",
   "map_location_picker_page_use_location": "Utilitzar aquesta ubicació",
@@ -1185,15 +1197,18 @@
   "map_settings": "Paràmetres de mapa",
   "map_settings_dark_mode": "Mode fosc",
   "map_settings_date_range_option_day": "Últimes 24 hores",
-  "map_settings_date_range_option_days": "Darrers {} dies",
+  "map_settings_date_range_option_days": "Darrers {days} dies",
   "map_settings_date_range_option_year": "Any passat",
-  "map_settings_date_range_option_years": "Darrers {} anys",
+  "map_settings_date_range_option_years": "Darrers {years} anys",
   "map_settings_dialog_title": "Configuració del mapa",
   "map_settings_include_show_archived": "Incloure arxivats",
   "map_settings_include_show_partners": "Incloure companys",
   "map_settings_only_show_favorites": "Mostra només preferits",
   "map_settings_theme_settings": "Tema del Mapa",
   "map_zoom_to_see_photos": "Allunya per veure fotos",
+  "mark_all_as_read": "Marcar-ho tot com a llegit",
+  "mark_as_read": "Marcar com ha llegit",
+  "marked_all_as_read": "Marcat tot com a llegit",
   "matches": "Coincidències",
   "media_type": "Tipus de mitjà",
   "memories": "Records",
@@ -1203,7 +1218,7 @@
   "memories_start_over": "Torna a començar",
   "memories_swipe_to_close": "Llisca per tancar",
   "memories_year_ago": "Fa un any",
-  "memories_years_ago": "Fa {} anys",
+  "memories_years_ago": "Fa {years, plural, other {# years}} anys",
   "memory": "Record",
   "memory_lane_title": "Línia de records {title}",
   "menu": "Menú",
@@ -1220,9 +1235,11 @@
   "month": "Mes",
   "monthly_title_text_date_format": "MMMM y",
   "more": "Més",
+  "moved_to_archive": "S'han mogut {count, plural, one {# asset} other {# assets}} a l'arxiu",
+  "moved_to_library": "S'ha mogut {count, plural, one {# asset} other {# assets}} a la llibreria",
   "moved_to_trash": "S'ha mogut a la paperera",
   "multiselect_grid_edit_date_time_err_read_only": "No es pot canviar la data del fitxer(s) de només lectura, ometent",
-  "multiselect_grid_edit_gps_err_read_only": "No es pot canviar la localització de fitxers de només lectura. Saltant.",
+  "multiselect_grid_edit_gps_err_read_only": "No es pot canviar la localització de fitxers de només lectura, saltant",
   "mute_memories": "Silenciar records",
   "my_albums": "Els meus àlbums",
   "name": "Nom",
@@ -1234,6 +1251,7 @@
   "new_api_key": "Nova clau de l'API",
   "new_password": "Nova contrasenya",
   "new_person": "Persona nova",
+  "new_pin_code": "Nou codi PIN",
   "new_user_created": "Nou usuari creat",
   "new_version_available": "NOVA VERSIÓ DISPONIBLE",
   "newest_first": "El més nou primer",
@@ -1252,6 +1270,8 @@
   "no_favorites_message": "Afegiu preferits per trobar les millors fotos i vídeos a l'instant",
   "no_libraries_message": "Creeu una llibreria externa per veure les vostres fotos i vídeos",
   "no_name": "Sense nom",
+  "no_notifications": "No hi ha notificacions",
+  "no_people_found": "No s'han trobat coincidències de persones",
   "no_places": "No hi ha llocs",
   "no_results": "Sense resultats",
   "no_results_description": "Proveu un sinònim o una paraula clau més general",
@@ -1282,6 +1302,7 @@
   "onboarding_welcome_user": "Benvingut, {user}",
   "online": "En línia",
   "only_favorites": "Només preferits",
+  "open": "Obrir",
   "open_in_map_view": "Obrir a la vista del mapa",
   "open_in_openstreetmap": "Obre a OpenStreetMap",
   "open_the_search_filters": "Obriu els filtres de cerca",
@@ -1305,7 +1326,7 @@
   "partner_page_partner_add_failed": "No s'ha pogut afegir el company",
   "partner_page_select_partner": "Escull company",
   "partner_page_shared_to_title": "Compartit amb",
-  "partner_page_stop_sharing_content": "{} ja no podrà accedir a les teves fotos.",
+  "partner_page_stop_sharing_content": "{partner} ja no podrà accedir a les teves fotos.",
   "partner_sharing": "Compartició amb companys",
   "partners": "Companys",
   "password": "Contrasenya",
@@ -1351,6 +1372,9 @@
   "photos_count": "{count, plural, one {{count, number} Foto} other {{count, number} Fotos}}",
   "photos_from_previous_years": "Fotos d'anys anteriors",
   "pick_a_location": "Triar una ubicació",
+  "pin_code_changed_successfully": "Codi PIN canviat correctament",
+  "pin_code_reset_successfully": "S'ha restablert correctament el codi PIN",
+  "pin_code_setup_successfully": "S'ha configurat correctament un codi PIN",
   "place": "Lloc",
   "places": "Llocs",
   "places_count": "{count, plural, one {{count, number} Lloc} other {{count, number} Llocs}}",
@@ -1368,6 +1392,7 @@
   "previous_or_next_photo": "Foto anterior o següent",
   "primary": "Primària",
   "privacy": "Privacitat",
+  "profile": "Perfil",
   "profile_drawer_app_logs": "Registres",
   "profile_drawer_client_out_of_date_major": "L'aplicació mòbil està desactualitzada. Si us plau, actualitzeu a l'última versió major.",
   "profile_drawer_client_out_of_date_minor": "L'aplicació mòbil està desactualitzada. Si us plau, actualitzeu a l'última versió menor.",
@@ -1381,7 +1406,7 @@
   "public_share": "Compartit públicament",
   "purchase_account_info": "Contribuent",
   "purchase_activated_subtitle": "Gràcies per donar suport a Immich i al programari de codi obert",
-  "purchase_activated_time": "Activat el {date, date}",
+  "purchase_activated_time": "Activat el {date}",
   "purchase_activated_title": "La teva clau s'ha activat correctament",
   "purchase_button_activate": "Activar",
   "purchase_button_buy": "Comprar",
@@ -1426,6 +1451,8 @@
   "recent_searches": "Cerques recents",
   "recently_added": "Afegit recentment",
   "recently_added_page_title": "Afegit recentment",
+  "recently_taken": "Fet recentment",
+  "recently_taken_page_title": "Fet recentment",
   "refresh": "Actualitzar",
   "refresh_encoded_videos": "Actualitza vídeos codificats",
   "refresh_faces": "Actualitzar cares",
@@ -1468,6 +1495,7 @@
   "reset": "Restablir",
   "reset_password": "Restablir contrasenya",
   "reset_people_visibility": "Restablir la visibilitat de les persones",
+  "reset_pin_code": "Restablir el codi PIN",
   "reset_to_default": "Restableix els valors predeterminats",
   "resolve_duplicates": "Resoldre duplicats",
   "resolved_all_duplicates": "Tots els duplicats resolts",
@@ -1560,6 +1588,7 @@
   "select_keep_all": "Mantén tota la selecció",
   "select_library_owner": "Selecciona el propietari de la bilbioteca",
   "select_new_face": "Selecciona nova cara",
+  "select_person_to_tag": "Selecciona una persona per etiquetar",
   "select_photos": "Tria fotografies",
   "select_trash_all": "Envia la selecció a la paperera",
   "select_user_for_sharing_page_err_album": "Error al crear l'àlbum",
@@ -1590,12 +1619,12 @@
   "setting_languages_apply": "Aplicar",
   "setting_languages_subtitle": "Canvia el llenguatge de l'aplicació",
   "setting_languages_title": "Idiomes",
-  "setting_notifications_notify_failures_grace_period": "Notifica les fallades de la còpia de seguretat en segon pla: {}",
-  "setting_notifications_notify_hours": "{} hores",
+  "setting_notifications_notify_failures_grace_period": "Notifica les fallades de la còpia de seguretat en segon pla: {duration}",
+  "setting_notifications_notify_hours": "{count} hores",
   "setting_notifications_notify_immediately": "immediatament",
-  "setting_notifications_notify_minutes": "{} minuts",
+  "setting_notifications_notify_minutes": "{count} minuts",
   "setting_notifications_notify_never": "mai",
-  "setting_notifications_notify_seconds": "{} segons",
+  "setting_notifications_notify_seconds": "{count} segons",
   "setting_notifications_single_progress_subtitle": "Informació detallada del progrés de la pujada de cada fitxer",
   "setting_notifications_single_progress_title": "Mostra el progrés detallat de la còpia de seguretat en segon pla",
   "setting_notifications_subtitle": "Ajusta les preferències de notificació",
@@ -1607,9 +1636,10 @@
   "settings": "Configuració",
   "settings_require_restart": "Si us plau, reinicieu Immich per a aplicar aquest canvi",
   "settings_saved": "Configuració desada",
+  "setup_pin_code": "Configurar un codi PIN",
   "share": "Comparteix",
   "share_add_photos": "Afegeix fotografies",
-  "share_assets_selected": "{} seleccionats",
+  "share_assets_selected": "{count} seleccionats",
   "share_dialog_preparing": "S'està preparant...",
   "shared": "Compartit",
   "shared_album_activities_input_disable": "Els comentaris estan desactivats",
@@ -1623,32 +1653,32 @@
   "shared_by_user": "Compartit per {user}",
   "shared_by_you": "Compartit per tu",
   "shared_from_partner": "Fotos de {partner}",
-  "shared_intent_upload_button_progress_text": "{} / {} Pujat",
+  "shared_intent_upload_button_progress_text": "{current} / {total} Pujat",
   "shared_link_app_bar_title": "Enllaços compartits",
   "shared_link_clipboard_copied_massage": "S'ha copiat al porta-retalls",
-  "shared_link_clipboard_text": "Enllaç: {}\nContrasenya: {}",
+  "shared_link_clipboard_text": "Enllaç: {link}\nContrasenya: {password}",
   "shared_link_create_error": "S'ha produït un error en crear l'enllaç compartit",
   "shared_link_edit_description_hint": "Introduïu la descripció de compartició",
   "shared_link_edit_expire_after_option_day": "1 dia",
-  "shared_link_edit_expire_after_option_days": "{} dies",
+  "shared_link_edit_expire_after_option_days": "{count} dies",
   "shared_link_edit_expire_after_option_hour": "1 hora",
-  "shared_link_edit_expire_after_option_hours": "{} hores",
+  "shared_link_edit_expire_after_option_hours": "{count} hores",
   "shared_link_edit_expire_after_option_minute": "1 minut",
-  "shared_link_edit_expire_after_option_minutes": "{} minuts",
-  "shared_link_edit_expire_after_option_months": "{} mesos",
-  "shared_link_edit_expire_after_option_year": "any {}",
+  "shared_link_edit_expire_after_option_minutes": "{count} minuts",
+  "shared_link_edit_expire_after_option_months": "{count} mesos",
+  "shared_link_edit_expire_after_option_year": "any {count}",
   "shared_link_edit_password_hint": "Introduïu la contrasenya de compartició",
   "shared_link_edit_submit_button": "Actualitza l'enllaç",
   "shared_link_error_server_url_fetch": "No s'ha pogut obtenir l'URL del servidor",
-  "shared_link_expires_day": "Caduca d'aquí a {} dia",
-  "shared_link_expires_days": "Caduca d'aquí a {} dies",
-  "shared_link_expires_hour": "Caduca d'aquí a {} hora",
-  "shared_link_expires_hours": "Caduca d'aquí a {} hores",
-  "shared_link_expires_minute": "Caduca d'aquí a {} minut",
-  "shared_link_expires_minutes": "Caduca d'aquí a {} minuts",
+  "shared_link_expires_day": "Caduca d'aquí a {count} dia",
+  "shared_link_expires_days": "Caduca d'aquí a {count} dies",
+  "shared_link_expires_hour": "Caduca d'aquí a {count} hora",
+  "shared_link_expires_hours": "Caduca d'aquí a {count} hores",
+  "shared_link_expires_minute": "Caduca d'aquí a {count} minut",
+  "shared_link_expires_minutes": "Caduca d'aquí a {count} minuts",
   "shared_link_expires_never": "Caduca ∞",
-  "shared_link_expires_second": "Caduca d'aquí a {} segon",
-  "shared_link_expires_seconds": "Caduca d'aquí a {} segons",
+  "shared_link_expires_second": "Caduca d'aquí a {count} segon",
+  "shared_link_expires_seconds": "Caduca d'aquí a {count} segons",
   "shared_link_individual_shared": "Individual compartit",
   "shared_link_info_chip_metadata": "EXIF",
   "shared_link_manage_links": "Gestiona els enllaços compartits",
@@ -1723,6 +1753,7 @@
   "stop_sharing_photos_with_user": "Deixa de compartir les fotos amb aquest usuari",
   "storage": "Emmagatzematge",
   "storage_label": "Etiquetatge d'emmagatzematge",
+  "storage_quota": "Quota d'emmagatzematge",
   "storage_usage": "{used} de {available} en ús",
   "submit": "Envia",
   "suggestions": "Suggeriments",
@@ -1749,7 +1780,7 @@
   "theme_selection": "Selecció de tema",
   "theme_selection_description": "Activa automàticament el tema fosc o clar en funció de les preferències del sistema del navegador",
   "theme_setting_asset_list_storage_indicator_title": "Mostra l'indicador d'emmagatzematge als títols dels elements",
-  "theme_setting_asset_list_tiles_per_row_title": "Nombre d'elements per fila ({})",
+  "theme_setting_asset_list_tiles_per_row_title": "Nombre d'elements per fila ({count})",
   "theme_setting_colorful_interface_subtitle": "Apliqueu color primari a les superfícies de fons.",
   "theme_setting_colorful_interface_title": "Interfície colorida",
   "theme_setting_image_viewer_quality_subtitle": "Ajusta la qualitat del visor de detalls d'imatges",
@@ -1784,13 +1815,15 @@
   "trash_no_results_message": "Les imatges i vídeos que s'enviïn a la paperera es mostraran aquí.",
   "trash_page_delete_all": "Eliminar-ho tot",
   "trash_page_empty_trash_dialog_content": "Segur que voleu eliminar els elements? Aquests elements seran eliminats permanentment de Immich",
-  "trash_page_info": "Els elements que s'enviïn a la paperera s'eliminaran permanentment després de {} dies",
+  "trash_page_info": "Els elements que s'enviïn a la paperera s'eliminaran permanentment després de {days} dies",
   "trash_page_no_assets": "No hi ha elements a la paperera",
   "trash_page_restore_all": "Restaura-ho tot",
   "trash_page_select_assets_btn": "Selecciona elements",
-  "trash_page_title": "Paperera ({})",
+  "trash_page_title": "Paperera ({count})",
   "trashed_items_will_be_permanently_deleted_after": "Els elements que s'enviïn a la paperera s'eliminaran permanentment després de {days, plural, one {# dia} other {# dies}}.",
   "type": "Tipus",
+  "unable_to_change_pin_code": "No es pot canviar el codi PIN",
+  "unable_to_setup_pin_code": "No s'ha pogut configurar el codi PIN",
   "unarchive": "Desarxivar",
   "unarchived_count": "{count, plural, other {# elements desarxivats}}",
   "unfavorite": "Reverteix preferit",
@@ -1814,6 +1847,7 @@
   "untracked_files": "Fitxers no monitoritzats",
   "untracked_files_decription": "Aquests fitxers no estan monitoritzats per l'aplicació. Poden ser el resultat de moviments errats, descàrregues interrompudes o deixats enrere per error",
   "up_next": "Pròxim",
+  "updated_at": "Actualitzat",
   "updated_password": "Contrasenya actualitzada",
   "upload": "Pujar",
   "upload_concurrency": "Concurrència de pujades",
@@ -1826,15 +1860,18 @@
   "upload_status_errors": "Errors",
   "upload_status_uploaded": "Carregat",
   "upload_success": "Pujada correcta, actualitza la pàgina per veure nous recursos de pujada.",
-  "upload_to_immich": "Puja a Immich ({})",
+  "upload_to_immich": "Puja a Immich ({count})",
   "uploading": "Pujant",
   "url": "URL",
   "usage": "Ús",
   "use_current_connection": "utilitzar la connexió actual",
   "use_custom_date_range": "Fes servir un rang de dates personalitzat",
   "user": "Usuari",
+  "user_has_been_deleted": "Aquest usuari ha sigut eliminat.",
   "user_id": "ID d'usuari",
   "user_liked": "A {user} li ha agradat {type, select, photo {aquesta foto} video {aquest vídeo} asset {aquest recurs} other {}}",
+  "user_pin_code_settings": "Codi PIN",
+  "user_pin_code_settings_description": "Gestiona el teu codi PIN",
   "user_purchase_settings": "Compra",
   "user_purchase_settings_description": "Gestiona la teva compra",
   "user_role_set": "Establir {user} com a {role}",
@@ -1883,11 +1920,11 @@
   "week": "Setmana",
   "welcome": "Benvingut",
   "welcome_to_immich": "Benvingut a immich",
-  "wifi_name": "Nom WiFi",
+  "wifi_name": "Nom Wi-Fi",
   "year": "Any",
   "years_ago": "Fa {years, plural, one {# any} other {# anys}}",
   "yes": "Sí",
   "you_dont_have_any_shared_links": "No tens cap enllaç compartit",
-  "your_wifi_name": "El teu nom WiFi",
+  "your_wifi_name": "Nom del teu Wi-Fi",
   "zoom_image": "Ampliar Imatge"
 }

i18n/cs.json

@@ -39,11 +39,11 @@
     "authentication_settings_disable_all": "Opravdu chcete zakázat všechny metody přihlášení? Přihlašování bude úplně zakázáno.",
     "authentication_settings_reenable": "Pro opětovné povolení použijte příkaz <link>Příkaz serveru</link>.",
     "background_task_job": "Úkoly na pozadí",
-    "backup_database": "Zálohování databáze",
-    "backup_database_enable_description": "Povolit zálohování databáze",
-    "backup_keep_last_amount": "Počet předchozích záloh k uchování",
-    "backup_settings": "Nastavení zálohování",
-    "backup_settings_description": "Správa nastavení zálohování databáze",
+    "backup_database": "Vytvořit výpis databáze",
+    "backup_database_enable_description": "Povolit výpisy z databáze",
+    "backup_keep_last_amount": "Počet předchozích výpisů, které se mají ponechat",
+    "backup_settings": "Nastavení výpisu databáze",
+    "backup_settings_description": "Správa nastavení výpisu databáze. Poznámka: Tyto úlohy nejsou monitorovány a nebudete upozorněni na jejich selhání.",
     "check_all": "Vše zkontrolovat",
     "cleanup": "Vyčištění",
     "cleared_jobs": "Hotové úlohy pro: {job}",
@@ -53,6 +53,7 @@
     "confirm_email_below": "Pro potvrzení zadejte níže \"{email}\"",
     "confirm_reprocess_all_faces": "Opravdu chcete znovu zpracovat všechny obličeje? Tím se vymažou i pojmenované osoby.",
     "confirm_user_password_reset": "Opravdu chcete obnovit heslo uživatele {user}?",
+    "confirm_user_pin_code_reset": "Opravdu chcete resetovat PIN kód uživatele {user}?",
     "create_job": "Vytvořit úlohu",
     "cron_expression": "Výraz cron",
     "cron_expression_description": "Nastavte interval prohledávání pomocí cron formátu. Další informace naleznete např. v <link>Crontab Guru</link>",
@@ -192,26 +193,22 @@
     "oauth_auto_register": "Automatická registrace",
     "oauth_auto_register_description": "Automaticky registrovat nové uživatele po přihlášení pomocí OAuth",
     "oauth_button_text": "Text tlačítka",
-    "oauth_client_id": "Client ID",
-    "oauth_client_secret": "Client Secret",
+    "oauth_client_secret_description": "Vyžaduje se, pokud poskytovatel OAuth nepodporuje PKCE (Proof Key for Code Exchange)",
     "oauth_enable_description": "Přihlásit pomocí OAuth",
-    "oauth_issuer_url": "URL vydavatele",
     "oauth_mobile_redirect_uri": "Mobilní přesměrování URI",
     "oauth_mobile_redirect_uri_override": "Přepsat mobilní přesměrování URI",
     "oauth_mobile_redirect_uri_override_description": "Povolit, pokud poskytovatel OAuth nepovoluje mobilní URI, například '{callback}'",
-    "oauth_profile_signing_algorithm": "Algoritmus podepisování profilu",
-    "oauth_profile_signing_algorithm_description": "Algoritmus použitý k podepsání profilu uživatele.",
-    "oauth_scope": "Rozsah",
     "oauth_settings": "OAuth",
     "oauth_settings_description": "Správa nastavení OAuth přihlášení",
     "oauth_settings_more_details": "Další podrobnosti o této funkci naleznete v <link>dokumentaci</link>.",
-    "oauth_signing_algorithm": "Algoritmus podepisování",
     "oauth_storage_label_claim": "Deklarace štítku úložiště",
     "oauth_storage_label_claim_description": "Automaticky nastavit štítek úložiště uživatele na hodnotu této deklarace.",
     "oauth_storage_quota_claim": "Deklarace kvóty úložiště",
     "oauth_storage_quota_claim_description": "Automaticky nastavit kvótu úložiště uživatele na hodnotu této deklarace.",
     "oauth_storage_quota_default": "Výchozí kvóta úložiště (GiB)",
     "oauth_storage_quota_default_description": "Kvóta v GiB, která se použije, pokud není poskytnuta žádná deklarace (pro neomezenou kvótu zadejte 0).",
+    "oauth_timeout": "Časový limit požadavku",
+    "oauth_timeout_description": "Časový limit pro požadavky v milisekundách",
     "offline_paths": "Cesty offline",
     "offline_paths_description": "Tyto výsledky mohou být způsobeny ručním odstraněním souborů, které nejsou součástí externí knihovny.",
     "password_enable_description": "Přihlášení pomocí e-mailu a hesla",
@@ -352,6 +349,7 @@
     "user_delete_delay_settings_description": "Počet dní po odstranění, po kterých bude odstraněn účet a položky uživatele. Úloha odstraňování uživatelů se spouští o půlnoci a kontroluje uživatele, kteří jsou připraveni k odstranění. Změny tohoto nastavení se vyhodnotí při dalším spuštění.",
     "user_delete_immediately": "Účet a položky uživatele <b>{user}</b> budou zařazeny do fronty k trvalému smazání <b>okamžitě</b>.",
     "user_delete_immediately_checkbox": "Uživatele a položky zařadit do fronty k okamžitému smazání",
+    "user_details": "Podrobnosti o uživateli",
     "user_management": "Správa uživatelů",
     "user_password_has_been_reset": "Heslo uživatele bylo obnoveno:",
     "user_password_reset_description": "Poskytněte uživateli dočasné heslo a informujte ho, že si ho bude muset při příštím přihlášení změnit.",
@@ -371,18 +369,22 @@
   "admin_password": "Heslo správce",
   "administration": "Administrace",
   "advanced": "Pokročilé",
-  "advanced_settings_log_level_title": "Úroveň protokolování: {}",
+  "advanced_settings_enable_alternate_media_filter_subtitle": "Tuto možnost použijte k filtrování médií během synchronizace na základě alternativních kritérií. Tuto možnost vyzkoušejte pouze v případě, že máte problémy s detekcí všech alb v aplikaci.",
+  "advanced_settings_enable_alternate_media_filter_title": "[EXPERIMENTÁLNÍ] Použít alternativní filtr pro synchronizaci alb zařízení",
+  "advanced_settings_log_level_title": "Úroveň protokolování: {level}",
   "advanced_settings_prefer_remote_subtitle": "U některých zařízení je načítání miniatur z prostředků v zařízení velmi pomalé. Aktivujte toto nastavení, aby se místo toho načítaly vzdálené obrázky.",
   "advanced_settings_prefer_remote_title": "Preferovat vzdálené obrázky",
   "advanced_settings_proxy_headers_subtitle": "Definice hlaviček proxy serveru, které by měl Immich odesílat s každým síťovým požadavkem",
   "advanced_settings_proxy_headers_title": "Proxy hlavičky",
   "advanced_settings_self_signed_ssl_subtitle": "Vynechá ověření SSL certifikátu serveru. Vyžadováno pro self-signed certifikáty.",
   "advanced_settings_self_signed_ssl_title": "Povolit self-signed SSL certifikáty",
+  "advanced_settings_sync_remote_deletions_subtitle": "Automaticky odstranit nebo obnovit položku v tomto zařízení, když je tato akce provedena na webu",
+  "advanced_settings_sync_remote_deletions_title": "Synchronizace vzdáleného mazání [EXPERIMENTÁLNÍ]",
   "advanced_settings_tile_subtitle": "Pokročilé uživatelské nastavení",
   "advanced_settings_troubleshooting_subtitle": "Zobrazit dodatečné vlastnosti pro řešení problémů",
   "advanced_settings_troubleshooting_title": "Řešení problémů",
-  "age_months": "{months, plural, one {# měsíc} few {# měsíce} other {# měsíců}}",
-  "age_year_months": "1 rok a {months, plural, one {# měsíc} few {# měsíce} other {# měsíců}}",
+  "age_months": "Věk {months, plural, one {# měsíc} few {# měsíce} other {# měsíců}}",
+  "age_year_months": "Věk 1 rok, {months, plural, one {# měsíc} other {# měsíce}}",
   "age_years": "{years, plural, one {# rok} few {# roky} other {# let}}",
   "album_added": "Přidáno album",
   "album_added_notification_setting_description": "Dostávat e-mailové oznámení, když jste přidáni do sdíleného alba",
@@ -400,9 +402,9 @@
   "album_remove_user_confirmation": "Opravdu chcete odebrat uživatele {user}?",
   "album_share_no_users": "Zřejmě jste toto album sdíleli se všemi uživateli, nebo nemáte žádného uživatele, se kterým byste ho mohli sdílet.",
   "album_thumbnail_card_item": "1 položka",
-  "album_thumbnail_card_items": "{} položek",
+  "album_thumbnail_card_items": "{count} položek",
   "album_thumbnail_card_shared": " · Sdíleno",
-  "album_thumbnail_shared_by": "Sdílel(a) {}",
+  "album_thumbnail_shared_by": "Sdílel(a) {user}",
   "album_updated": "Album aktualizováno",
   "album_updated_setting_description": "Dostávat e-mailová oznámení o nových položkách sdíleného alba",
   "album_user_left": "Opustil {album}",
@@ -410,7 +412,7 @@
   "album_viewer_appbar_delete_confirm": "Opravdu chcete toto album odstranit ze svého účtu?",
   "album_viewer_appbar_share_err_delete": "Nepodařilo se smazat album",
   "album_viewer_appbar_share_err_leave": "Nepodařilo se opustit album",
-  "album_viewer_appbar_share_err_remove": "Při odstraňování položek z alba se vyskytly problémy.",
+  "album_viewer_appbar_share_err_remove": "Při odstraňování položek z alba se vyskytly problémy",
   "album_viewer_appbar_share_err_title": "Nepodařilo se změnit název alba",
   "album_viewer_appbar_share_leave": "Opustit album",
   "album_viewer_appbar_share_to": "Sdílet na",
@@ -440,7 +442,7 @@
   "archive": "Archiv",
   "archive_or_unarchive_photo": "Archivovat nebo odarchivovat fotku",
   "archive_page_no_archived_assets": "Nebyla nalezena žádná archivovaná média",
-  "archive_page_title": "Archiv ({})",
+  "archive_page_title": "Archiv ({count})",
   "archive_size": "Velikost archivu",
   "archive_size_description": "Nastavte velikost archivu pro stahování (v GiB)",
   "archived": "Archiv",
@@ -477,18 +479,18 @@
   "assets_added_to_album_count": "Do alba {count, plural, one {byla přidána # položka} few {byly přidány # položky} other {bylo přidáno # položek}}",
   "assets_added_to_name_count": "{count, plural, one {Přidána # položka} few {Přidány # položky} other {Přidáno # položek}} do {hasName, select, true {alba <b>{name}</b>} other {nového alba}}",
   "assets_count": "{count, plural, one {# položka} few {# položky} other {# položek}}",
-  "assets_deleted_permanently": "{} položek trvale odstraněno",
-  "assets_deleted_permanently_from_server": "{} položek trvale odstraněno z Immich serveru",
+  "assets_deleted_permanently": "{count} položek trvale odstraněno",
+  "assets_deleted_permanently_from_server": "{count} položek trvale odstraněno z Immich serveru",
   "assets_moved_to_trash_count": "Do koše {count, plural, one {přesunuta # položka} few {přesunuty # položky} other {přesunuto # položek}}",
   "assets_permanently_deleted_count": "Trvale {count, plural, one {smazána # položka} few {smazány # položky} other {smazáno # položek}}",
   "assets_removed_count": "{count, plural, one {Odstraněna # položka} few {Odstraněny # položky} other {Odstraněno # položek}}",
-  "assets_removed_permanently_from_device": "{} položek trvale odstraněno z vašeho zařízení",
+  "assets_removed_permanently_from_device": "{count} položek trvale odstraněno z vašeho zařízení",
   "assets_restore_confirmation": "Opravdu chcete obnovit všechny vyhozené položky? Tuto akci nelze vrátit zpět! Upozorňujeme, že tímto způsobem nelze obnovit žádné offline položky.",
   "assets_restored_count": "{count, plural, one {Obnovena # položka} few {Obnoveny # položky} other {Obnoveno # položek}}",
-  "assets_restored_successfully": "{} položek úspěšně obnoveno",
-  "assets_trashed": "{} položek vyhozeno do koše",
+  "assets_restored_successfully": "{count} položek úspěšně obnoveno",
+  "assets_trashed": "{count} položek vyhozeno do koše",
   "assets_trashed_count": "{count, plural, one {Vyhozena # položka} few {Vyhozeny # položky} other {Vyhozeno # položek}}",
-  "assets_trashed_from_server": "{} položek vyhozeno do koše na Immich serveru",
+  "assets_trashed_from_server": "{count} položek vyhozeno do koše na Immich serveru",
   "assets_were_part_of_album_count": "{count, plural, one {Položka byla} other {Položky byly}} součástí alba",
   "authorized_devices": "Autorizovaná zařízení",
   "automatic_endpoint_switching_subtitle": "Připojit se místně přes určenou Wi-Fi, pokud je k dispozici, a používat alternativní připojení jinde",
@@ -497,23 +499,23 @@
   "back_close_deselect": "Zpět, zavřít nebo zrušit výběr",
   "background_location_permission": "Povolení polohy na pozadí",
   "background_location_permission_content": "Aby bylo možné přepínat sítě při běhu na pozadí, musí mít Immich *vždy* přístup k přesné poloze, aby mohl zjistit název Wi-Fi sítě",
-  "backup_album_selection_page_albums_device": "Alba v zařízení ({})",
+  "backup_album_selection_page_albums_device": "Alba v zařízení ({count})",
   "backup_album_selection_page_albums_tap": "Klepnutím na položku ji zahrnete, opětovným klepnutím ji vyloučíte",
   "backup_album_selection_page_assets_scatter": "Položky mohou být roztroušeny ve více albech. To umožňuje zahrnout nebo vyloučit alba během procesu zálohování.",
   "backup_album_selection_page_select_albums": "Vybraná alba",
   "backup_album_selection_page_selection_info": "Informace o výběru",
   "backup_album_selection_page_total_assets": "Celkový počet jedinečných položek",
   "backup_all": "Vše",
-  "backup_background_service_backup_failed_message": "Zálohování médií selhalo. Zkouším to znovu...",
-  "backup_background_service_connection_failed_message": "Nepodařilo se připojit k serveru. Zkouším to znovu...",
-  "backup_background_service_current_upload_notification": "Nahrávání {}",
+  "backup_background_service_backup_failed_message": "Zálohování médií selhalo. Zkouším to znovu…",
+  "backup_background_service_connection_failed_message": "Nepodařilo se připojit k serveru. Zkouším to znovu…",
+  "backup_background_service_current_upload_notification": "Nahrávání {filename}",
   "backup_background_service_default_notification": "Kontrola nových médií…",
   "backup_background_service_error_title": "Chyba zálohování",
-  "backup_background_service_in_progress_notification": "Zálohování vašich médií...",
-  "backup_background_service_upload_failure_notification": "Nepodařilo se nahrát {}",
+  "backup_background_service_in_progress_notification": "Zálohování vašich médií…",
+  "backup_background_service_upload_failure_notification": "Nepodařilo se nahrát {filename}",
   "backup_controller_page_albums": "Zálohovaná alba",
   "backup_controller_page_background_app_refresh_disabled_content": "Povolte obnovení aplikace na pozadí v Nastavení > Obecné > Obnovení aplikace na pozadí, abyste mohli používat zálohování na pozadí.",
-  "backup_controller_page_background_app_refresh_disabled_title": " Obnovování aplikací na pozadí je vypnuté",
+  "backup_controller_page_background_app_refresh_disabled_title": "Obnovování aplikací na pozadí je vypnuté",
   "backup_controller_page_background_app_refresh_enable_button_text": "Přejít do nastavení",
   "backup_controller_page_background_battery_info_link": "Ukaž mi jak",
   "backup_controller_page_background_battery_info_message": "Chcete-li dosáhnout nejlepších výsledků při zálohování na pozadí, vypněte všechny optimalizace baterie, které omezují aktivitu na pozadí pro Immich ve vašem zařízení. \n\nJelikož je to závislé na typu zařízení, vyhledejte požadované informace pro výrobce vašeho zařízení.",
@@ -521,7 +523,7 @@
   "backup_controller_page_background_battery_info_title": "Optimalizace baterie",
   "backup_controller_page_background_charging": "Pouze během nabíjení",
   "backup_controller_page_background_configure_error": "Nepodařilo se nakonfigurovat službu na pozadí",
-  "backup_controller_page_background_delay": "Zpoždění zálohování nových médií: {}",
+  "backup_controller_page_background_delay": "Zpoždění zálohování nových médií: {duration}",
   "backup_controller_page_background_description": "Povolte službu na pozadí pro automatické zálohování všech nových položek bez nutnosti otevření aplikace",
   "backup_controller_page_background_is_off": "Automatické zálohování na pozadí je vypnuto",
   "backup_controller_page_background_is_on": "Automatické zálohování na pozadí je zapnuto",
@@ -531,12 +533,12 @@
   "backup_controller_page_backup": "Zálohování",
   "backup_controller_page_backup_selected": "Vybrané: ",
   "backup_controller_page_backup_sub": "Zálohované fotografie a videa",
-  "backup_controller_page_created": "Vytvořeno: {}",
+  "backup_controller_page_created": "Vytvořeno: {date}",
   "backup_controller_page_desc_backup": "Zapněte zálohování na popředí, aby se nové položky automaticky nahrávaly na server při otevření aplikace.",
   "backup_controller_page_excluded": "Vyloučeno: ",
-  "backup_controller_page_failed": "Nepodařilo se ({})",
-  "backup_controller_page_filename": "Název souboru: {} [{}]",
-  "backup_controller_page_id": "ID: {}",
+  "backup_controller_page_failed": "Nepodařilo se ({count})",
+  "backup_controller_page_filename": "Název souboru: {filename} [{size}]",
+  "backup_controller_page_id": "ID: {id}",
   "backup_controller_page_info": "Informace o zálohování",
   "backup_controller_page_none_selected": "Žádné vybrané",
   "backup_controller_page_remainder": "Zbývá",
@@ -545,7 +547,7 @@
   "backup_controller_page_start_backup": "Spustit zálohování",
   "backup_controller_page_status_off": "Automatické zálohování na popředí je vypnuto",
   "backup_controller_page_status_on": "Automatické zálohování na popředí je zapnuto",
-  "backup_controller_page_storage_format": "{} z {} použitých",
+  "backup_controller_page_storage_format": "{used} z {total} použitých",
   "backup_controller_page_to_backup": "Alba, která mají být zálohována",
   "backup_controller_page_total_sub": "Všechny jedinečné fotografie a videa z vybraných alb",
   "backup_controller_page_turn_off": "Vypnout zálohování na popředí",
@@ -570,21 +572,21 @@
   "bulk_keep_duplicates_confirmation": "Opravdu si chcete ponechat {count, plural, one {# duplicitní položku} few {# duplicitní položky} other {# duplicitních položek}}? Tím se vyřeší všechny duplicitní skupiny, aniž by se cokoli odstranilo.",
   "bulk_trash_duplicates_confirmation": "Opravdu chcete hromadně vyhodit {count, plural, one {# duplicitní položku} few {# duplicitní položky} other {# duplicitních položek}}? Tím se zachová největší položka z každé skupiny a všechny ostatní duplikáty se vyhodí.",
   "buy": "Zakoupit Immich",
-  "cache_settings_album_thumbnails": "Náhledy stránek knihovny (položek {})",
+  "cache_settings_album_thumbnails": "Náhledy stránek knihovny ({count} položek)",
   "cache_settings_clear_cache_button": "Vymazat vyrovnávací paměť",
   "cache_settings_clear_cache_button_title": "Vymaže vyrovnávací paměť aplikace. To výrazně ovlivní výkon aplikace, dokud se vyrovnávací paměť neobnoví.",
   "cache_settings_duplicated_assets_clear_button": "VYMAZAT",
   "cache_settings_duplicated_assets_subtitle": "Fotografie a videa, které aplikace zařadila na černou listinu",
-  "cache_settings_duplicated_assets_title": "Duplicitní položky ({})",
-  "cache_settings_image_cache_size": "Velikost vyrovnávací paměti (položek {})",
+  "cache_settings_duplicated_assets_title": "Duplicitní položky ({count})",
+  "cache_settings_image_cache_size": "Velikost vyrovnávací paměti ({count} položek)",
   "cache_settings_statistics_album": "Knihovna náhledů",
-  "cache_settings_statistics_assets": "{} položky ({})",
+  "cache_settings_statistics_assets": "{count, plural, one {# položka} few {# položky} other {# položek}} ({size})",
   "cache_settings_statistics_full": "Kompletní fotografie",
   "cache_settings_statistics_shared": "Sdílené náhledy alb",
   "cache_settings_statistics_thumbnail": "Náhledy",
   "cache_settings_statistics_title": "Použití vyrovnávací paměti",
   "cache_settings_subtitle": "Ovládání chování mobilní aplikace Immich v mezipaměti",
-  "cache_settings_thumbnail_size": "Velikost vyrovnávací paměti náhledů (položek {})",
+  "cache_settings_thumbnail_size": "Velikost vyrovnávací paměti náhledů ({count, plural, one {# položka} few {# položky} other {# položek}})",
   "cache_settings_tile_subtitle": "Ovládání chování místního úložiště",
   "cache_settings_tile_title": "Místní úložiště",
   "cache_settings_title": "Nastavení vyrovnávací paměti",
@@ -610,6 +612,7 @@
   "change_password_form_new_password": "Nové heslo",
   "change_password_form_password_mismatch": "Hesla se neshodují",
   "change_password_form_reenter_new_password": "Znovu zadejte nové heslo",
+  "change_pin_code": "Změnit PIN kód",
   "change_your_password": "Změna vašeho hesla",
   "changed_visibility_successfully": "Změna viditelnosti proběhla úspěšně",
   "check_all": "Zkontrolovat vše",
@@ -650,11 +653,12 @@
   "confirm_delete_face": "Opravdu chcete z položky odstranit obličej osoby {name}?",
   "confirm_delete_shared_link": "Opravdu chcete odstranit tento sdílený odkaz?",
   "confirm_keep_this_delete_others": "Všechny ostatní položky v tomto uskupení mimo této budou odstraněny. Opravdu chcete pokračovat?",
+  "confirm_new_pin_code": "Potvrzení nového PIN kódu",
   "confirm_password": "Potvrzení hesla",
   "contain": "Obsah",
   "context": "Kontext",
   "continue": "Pokračovat",
-  "control_bottom_app_bar_album_info_shared": "{} položky – sdílené",
+  "control_bottom_app_bar_album_info_shared": "{count, plural, one {# položka – sdílená} few {# položky – sdílené} other {# položek – sdílených}}",
   "control_bottom_app_bar_create_new_album": "Vytvořit nové album",
   "control_bottom_app_bar_delete_from_immich": "Smazat ze serveru Immich",
   "control_bottom_app_bar_delete_from_local": "Smazat ze zařízení",
@@ -692,9 +696,11 @@
   "create_tag_description": "Vytvoření nové značky. U vnořených značek zadejte celou cestu ke značce včetně dopředných lomítek.",
   "create_user": "Vytvořit uživatele",
   "created": "Vytvořeno",
+  "created_at": "Vytvořeno",
   "crop": "Oříznout",
   "curated_object_page_title": "Věci",
   "current_device": "Současné zařízení",
+  "current_pin_code": "Aktuální PIN kód",
   "current_server_address": "Aktuální adresa serveru",
   "custom_locale": "Vlastní lokalizace",
   "custom_locale_description": "Formátovat datumy a čísla podle jazyka a oblasti",
@@ -721,7 +727,7 @@
   "delete_dialog_alert": "Tyto položky budou trvale smazány z aplikace Immich i z vašeho zařízení",
   "delete_dialog_alert_local": "Tyto položky budou z vašeho zařízení trvale smazány, ale budou stále k dispozici na Immich serveru",
   "delete_dialog_alert_local_non_backed_up": "Některé položky nejsou zálohovány na Immich server a budou ze zařízení trvale smazány",
-  "delete_dialog_alert_remote": "Tyto položky budou trvale smazány z Immich serveru ",
+  "delete_dialog_alert_remote": "Tyto položky budou trvale smazány z Immich serveru",
   "delete_dialog_ok_force": "Přesto smazat",
   "delete_dialog_title": "Smazat trvale",
   "delete_duplicates_confirmation": "Opravdu chcete tyto duplicity trvale odstranit?",
@@ -763,7 +769,7 @@
   "download_enqueue": "Stahování ve frontě",
   "download_error": "Chyba při stahování",
   "download_failed": "Stahování selhalo",
-  "download_filename": "soubor: {}",
+  "download_filename": "soubor: {filename}",
   "download_finished": "Stahování dokončeno",
   "download_include_embedded_motion_videos": "Vložená videa",
   "download_include_embedded_motion_videos_description": "Zahrnout videa vložená do pohyblivých fotografií jako samostatný soubor",
@@ -807,6 +813,7 @@
   "editor_crop_tool_h2_aspect_ratios": "Poměr stran",
   "editor_crop_tool_h2_rotation": "Otočení",
   "email": "E-mail",
+  "email_notifications": "E-mailová oznámení",
   "empty_folder": "Tato složka je prázdná",
   "empty_trash": "Vyprázdnit koš",
   "empty_trash_confirmation": "Opravdu chcete vysypat koš? Tím se z Immiche trvale odstraní všechny položky v koši.\nTuto akci nelze vrátit zpět!",
@@ -814,12 +821,12 @@
   "enabled": "Povoleno",
   "end_date": "Konečné datum",
   "enqueued": "Ve frontě",
-  "enter_wifi_name": "Zadejte název WiFi",
+  "enter_wifi_name": "Zadejte název Wi-Fi",
   "error": "Chyba",
   "error_change_sort_album": "Nepodařilo se změnit pořadí alba",
   "error_delete_face": "Chyba při odstraňování obličeje z položky",
   "error_loading_image": "Chyba při načítání obrázku",
-  "error_saving_image": "Chyba: {}",
+  "error_saving_image": "Chyba: {error}",
   "error_title": "Chyba - Něco se pokazilo",
   "errors": {
     "cannot_navigate_next_asset": "Nelze přejít na další položku",
@@ -849,10 +856,12 @@
     "failed_to_keep_this_delete_others": "Nepodařilo se zachovat tuto položku a odstranit ostatní položky",
     "failed_to_load_asset": "Nepodařilo se načíst položku",
     "failed_to_load_assets": "Nepodařilo se načíst položky",
+    "failed_to_load_notifications": "Nepodařilo se načíst oznámení",
     "failed_to_load_people": "Chyba načítání osob",
     "failed_to_remove_product_key": "Nepodařilo se odebrat klíč produktu",
     "failed_to_stack_assets": "Nepodařilo se seskupit položky",
     "failed_to_unstack_assets": "Nepodařilo se rozložit položky",
+    "failed_to_update_notification_status": "Nepodařilo se aktualizovat stav oznámení",
     "import_path_already_exists": "Tato cesta importu již existuje.",
     "incorrect_email_or_password": "Nesprávný e-mail nebo heslo",
     "paths_validation_failed": "{paths, plural, one {# cesta neprošla} few {# cesty neprošly} other {# cest neprošlo}} kontrolou",
@@ -920,6 +929,7 @@
     "unable_to_remove_reaction": "Nelze odstranit reakci",
     "unable_to_repair_items": "Nelze opravit položky",
     "unable_to_reset_password": "Nelze obnovit heslo",
+    "unable_to_reset_pin_code": "Nelze resetovat PIN kód",
     "unable_to_resolve_duplicate": "Nelze vyřešit duplicitu",
     "unable_to_restore_assets": "Nelze obnovit položky",
     "unable_to_restore_trash": "Nelze obnovit koš",
@@ -953,10 +963,10 @@
   "exif_bottom_sheet_location": "POLOHA",
   "exif_bottom_sheet_people": "LIDÉ",
   "exif_bottom_sheet_person_add_person": "Přidat jméno",
-  "exif_bottom_sheet_person_age": "{} let",
-  "exif_bottom_sheet_person_age_months": "{} měsíců",
-  "exif_bottom_sheet_person_age_year_months": "1 rok a {} měsíců",
-  "exif_bottom_sheet_person_age_years": "{} let",
+  "exif_bottom_sheet_person_age": "Věk {age, plural, one {# rok} few {# roky} other {# let}}",
+  "exif_bottom_sheet_person_age_months": "Věk {months, plural, one {# měsíc} few {# měsíce} other {# měsíců}}",
+  "exif_bottom_sheet_person_age_year_months": "Věk 1 rok, {months, plural, one {# měsíc} other {# měsíce}}",
+  "exif_bottom_sheet_person_age_years": "Věk {years, plural, one {# rok} few {# roky} other {# let}}",
   "exit_slideshow": "Ukončit prezentaci",
   "expand_all": "Rozbalit vše",
   "experimental_settings_new_asset_list_subtitle": "Zpracovávám",
@@ -974,7 +984,7 @@
   "external": "Externí",
   "external_libraries": "Externí knihovny",
   "external_network": "Externí síť",
-  "external_network_sheet_info": "Pokud nejste v preferované síti WiFi, aplikace se připojí k serveru prostřednictvím první z níže uvedených adres URL, které může dosáhnout, počínaje shora dolů",
+  "external_network_sheet_info": "Pokud nejste v preferované síti Wi-Fi, aplikace se připojí k serveru prostřednictvím první z níže uvedených adres URL, které může dosáhnout, počínaje shora dolů",
   "face_unassigned": "Nepřiřazena",
   "failed": "Selhalo",
   "failed_to_load_assets": "Nepodařilo se načíst položky",
@@ -992,6 +1002,7 @@
   "filetype": "Typ souboru",
   "filter": "Filtr",
   "filter_people": "Filtrovat lidi",
+  "filter_places": "Filtrovat místa",
   "find_them_fast": "Najděte je rychle vyhledáním jejich jména",
   "fix_incorrect_match": "Opravit nesprávnou shodu",
   "folder": "Složka",
@@ -1040,11 +1051,12 @@
   "home_page_delete_remote_err_local": "Místní položky ve vzdáleném výběru pro smazání, přeskakuji",
   "home_page_favorite_err_local": "Zatím není možné zařadit lokální média mezi oblíbená, přeskakuji",
   "home_page_favorite_err_partner": "Položky partnera nelze označit jako oblíbené, přeskakuji",
-  "home_page_first_time_notice": "Pokud aplikaci používáte poprvé, nezapomeňte si vybrat zálohovaná alba, aby se na časové ose mohly nacházet fotografie a videa z vybraných alb.",
+  "home_page_first_time_notice": "Pokud aplikaci používáte poprvé, nezapomeňte si vybrat zálohovaná alba, aby se na časové ose mohly nacházet fotografie a videa z vybraných alb",
   "home_page_share_err_local": "Nelze sdílet místní položky prostřednictvím odkazu, přeskakuji",
   "home_page_upload_err_limit": "Lze nahrát nejvýše 30 položek najednou, přeskakuji",
   "host": "Hostitel",
   "hour": "Hodina",
+  "id": "ID",
   "ignore_icloud_photos": "Ignorovat fotografie na iCloudu",
   "ignore_icloud_photos_description": "Fotografie uložené na iCloudu se nebudou nahrávat na Immich server",
   "image": "Obrázek",
@@ -1120,7 +1132,7 @@
   "local_network": "Místní síť",
   "local_network_sheet_info": "Aplikace se při použití zadané sítě Wi-Fi připojí k serveru prostřednictvím tohoto URL",
   "location_permission": "Oprávnění polohy",
-  "location_permission_content": "Aby bylo možné používat funkci automatického přepínání, potřebuje Immich oprávnění k přesné poloze, aby mohl přečíst název aktuální WiFi sítě",
+  "location_permission_content": "Aby bylo možné používat funkci automatického přepínání, potřebuje Immich oprávnění k přesné poloze, aby mohl přečíst název aktuální sítě Wi-Fi",
   "location_picker_choose_on_map": "Vyberte na mapě",
   "location_picker_latitude_error": "Zadejte platnou zeměpisnou šířku",
   "location_picker_latitude_hint": "Zadejte vlastní zeměpisnou šířku",
@@ -1144,7 +1156,7 @@
   "login_form_err_trailing_whitespace": "Koncová mezera",
   "login_form_failed_get_oauth_server_config": "Chyba přihlášení pomocí OAuth, zkontrolujte adresu URL serveru",
   "login_form_failed_get_oauth_server_disable": "Funkce OAuth není na tomto serveru dostupná",
-  "login_form_failed_login": "Chyba přihlášení, zkontrolujte URL adresu serveru, e-mail a heslo.",
+  "login_form_failed_login": "Chyba přihlášení, zkontrolujte URL adresu serveru, e-mail a heslo",
   "login_form_handshake_exception": "Došlo k výjimce Handshake se serverem. Pokud používáte self-signed certifikát, povolte v nastavení podporu self-signed certifikátu.",
   "login_form_password_hint": "heslo",
   "login_form_save_login": "Zůstat přihlášen",
@@ -1170,8 +1182,8 @@
   "manage_your_devices": "Správa přihlášených zařízení",
   "manage_your_oauth_connection": "Správa OAuth propojení",
   "map": "Mapa",
-  "map_assets_in_bound": "{} fotka",
-  "map_assets_in_bounds": "{} fotek",
+  "map_assets_in_bound": "{count, plural, one {# fotka} few {# fotky} other {# fotek}}",
+  "map_assets_in_bounds": "{count, plural, one {# fotka} few {# fotky} other {# fotek}}",
   "map_cannot_get_user_location": "Nelze zjistit polohu uživatele",
   "map_location_dialog_yes": "Ano",
   "map_location_picker_page_use_location": "Použít tuto polohu",
@@ -1185,15 +1197,18 @@
   "map_settings": "Nastavení mapy",
   "map_settings_dark_mode": "Tmavý režim",
   "map_settings_date_range_option_day": "Posledních 24 hodin",
-  "map_settings_date_range_option_days": "Posledních {} dní",
+  "map_settings_date_range_option_days": "Posledních {days, plural, one {# den} few {# dny} other {# dní}}",
   "map_settings_date_range_option_year": "Poslední rok",
-  "map_settings_date_range_option_years": "Poslední {} roky",
+  "map_settings_date_range_option_years": "Poslední {years, plural, one {# rok} few {# roky} other {# roky}}",
   "map_settings_dialog_title": "Nastavení map",
   "map_settings_include_show_archived": "Zahrnout archivované",
   "map_settings_include_show_partners": "Včetně partnerů",
   "map_settings_only_show_favorites": "Zobrazit pouze oblíbené",
   "map_settings_theme_settings": "Motiv mapy",
   "map_zoom_to_see_photos": "Oddálit pro zobrazení fotografií",
+  "mark_all_as_read": "Označit vše jako přečtené",
+  "mark_as_read": "Označit jako přečtené",
+  "marked_all_as_read": "Vše označeno jako přečtené",
   "matches": "Shody",
   "media_type": "Typ média",
   "memories": "Vzpomínky",
@@ -1203,7 +1218,7 @@
   "memories_start_over": "Začít znovu",
   "memories_swipe_to_close": "Přejetím nahoru zavřete",
   "memories_year_ago": "Před rokem",
-  "memories_years_ago": "Před {} lety",
+  "memories_years_ago": "Před {years, plural, one {# rokem} few {# roky} other {# lety}}",
   "memory": "Vzpomínka",
   "memory_lane_title": "Řada vzpomínek {title}",
   "menu": "Nabídka",
@@ -1220,6 +1235,8 @@
   "month": "Měsíc",
   "monthly_title_text_date_format": "LLLL y",
   "more": "Více",
+  "moved_to_archive": "{count, plural, one {Přesunuta # položka} few {Přesunuty # položky} other {Přesunuto # položek}} do archivu",
+  "moved_to_library": "{count, plural, one {Přesunuta # položka} few {Přesunuty # položky} other {Přesunuto # položek}} do knihovny",
   "moved_to_trash": "Přesunuto do koše",
   "multiselect_grid_edit_date_time_err_read_only": "Nelze upravit datum položek pouze pro čtení, přeskakuji",
   "multiselect_grid_edit_gps_err_read_only": "Nelze upravit polohu položek pouze pro čtení, přeskakuji",
@@ -1234,6 +1251,7 @@
   "new_api_key": "Nový API klíč",
   "new_password": "Nové heslo",
   "new_person": "Nová osoba",
+  "new_pin_code": "Nový PIN kód",
   "new_user_created": "Vytvořen nový uživatel",
   "new_version_available": "NOVÁ VERZE K DISPOZICI",
   "newest_first": "Nejnovější první",
@@ -1252,6 +1270,8 @@
   "no_favorites_message": "Přidejte si oblíbené položky a rychle najděte své nejlepší obrázky a videa",
   "no_libraries_message": "Vytvořte si externí knihovnu pro zobrazení fotografií a videí",
   "no_name": "Bez jména",
+  "no_notifications": "Žádná oznámení",
+  "no_people_found": "Nebyli nalezeni žádní odpovídající lidé",
   "no_places": "Žádná místa",
   "no_results": "Žádné výsledky",
   "no_results_description": "Zkuste použít synonymum nebo obecnější klíčové slovo",
@@ -1282,6 +1302,7 @@
   "onboarding_welcome_user": "Vítej, {user}",
   "online": "Online",
   "only_favorites": "Pouze oblíbené",
+  "open": "Otevřít",
   "open_in_map_view": "Otevřít v zobrazení mapy",
   "open_in_openstreetmap": "Otevřít v OpenStreetMap",
   "open_the_search_filters": "Otevřít vyhledávací filtry",
@@ -1305,7 +1326,7 @@
   "partner_page_partner_add_failed": "Nepodařilo se přidat partnera",
   "partner_page_select_partner": "Vyberte partnera",
   "partner_page_shared_to_title": "Sdíleno",
-  "partner_page_stop_sharing_content": "{} již nebude mít přístup k vašim fotografiím.",
+  "partner_page_stop_sharing_content": "{partner} již nebude mít přístup k vašim fotografiím.",
   "partner_sharing": "Sdílení mezi partnery",
   "partners": "Partneři",
   "password": "Heslo",
@@ -1351,6 +1372,9 @@
   "photos_count": "{count, plural, one {{count, number} fotka} few {{count, number} fotky} other {{count, number} fotek}}",
   "photos_from_previous_years": "Fotky z předchozích let",
   "pick_a_location": "Vyberte polohu",
+  "pin_code_changed_successfully": "PIN kód byl úspěšně změněn",
+  "pin_code_reset_successfully": "PIN kód úspěšně resetován",
+  "pin_code_setup_successfully": "PIN kód úspěšně nastaven",
   "place": "Místo",
   "places": "Místa",
   "places_count": "{count, plural, one {{count, number} místo} few {{count, number} místa} other {{count, number} míst}}",
@@ -1368,6 +1392,7 @@
   "previous_or_next_photo": "Předchozí nebo další fotka",
   "primary": "Primární",
   "privacy": "Soukromí",
+  "profile": "Profil",
   "profile_drawer_app_logs": "Logy",
   "profile_drawer_client_out_of_date_major": "Mobilní aplikace je zastaralá. Aktualizujte ji na nejnovější hlavní verzi.",
   "profile_drawer_client_out_of_date_minor": "Mobilní aplikace je zastaralá. Aktualizujte ji na nejnovější verzi.",
@@ -1381,7 +1406,7 @@
   "public_share": "Veřejné sdílení",
   "purchase_account_info": "Podporovatel",
   "purchase_activated_subtitle": "Děkujeme vám za podporu aplikace Immich a softwaru s otevřeným zdrojovým kódem",
-  "purchase_activated_time": "Aktivováno dne {date, date}",
+  "purchase_activated_time": "Aktivováno dne {date}",
   "purchase_activated_title": "Váš klíč byl úspěšně aktivován",
   "purchase_button_activate": "Aktivovat",
   "purchase_button_buy": "Koupit",
@@ -1426,6 +1451,8 @@
   "recent_searches": "Nedávná vyhledávání",
   "recently_added": "Nedávno přidané",
   "recently_added_page_title": "Nedávno přidané",
+  "recently_taken": "Nedávno pořízené",
+  "recently_taken_page_title": "Nedávno pořízené",
   "refresh": "Obnovit",
   "refresh_encoded_videos": "Obnovit kódovaná videa",
   "refresh_faces": "Obnovit obličeje",
@@ -1468,6 +1495,7 @@
   "reset": "Výchozí",
   "reset_password": "Obnovit heslo",
   "reset_people_visibility": "Obnovit viditelnost lidí",
+  "reset_pin_code": "Resetovat PIN kód",
   "reset_to_default": "Obnovit výchozí nastavení",
   "resolve_duplicates": "Vyřešit duplicity",
   "resolved_all_duplicates": "Vyřešeny všechny duplicity",
@@ -1560,6 +1588,7 @@
   "select_keep_all": "Vybrat ponechat vše",
   "select_library_owner": "Vyberte vlastníka knihovny",
   "select_new_face": "Výběr nového obličeje",
+  "select_person_to_tag": "Vyberte osobu, kterou chcete označit",
   "select_photos": "Vybrat fotky",
   "select_trash_all": "Vybrat vyhodit vše",
   "select_user_for_sharing_page_err_album": "Nepodařilo se vytvořit album",
@@ -1590,12 +1619,12 @@
   "setting_languages_apply": "Použít",
   "setting_languages_subtitle": "Změna jazyka aplikace",
   "setting_languages_title": "Jazyk",
-  "setting_notifications_notify_failures_grace_period": "Oznámení o selhání zálohování na pozadí: {}",
-  "setting_notifications_notify_hours": "{} hodin",
+  "setting_notifications_notify_failures_grace_period": "Oznámení o selhání zálohování na pozadí: {duration}",
+  "setting_notifications_notify_hours": "{count, plural, one {# hodina} few {# hodiny} other {# hodin}}",
   "setting_notifications_notify_immediately": "okamžitě",
-  "setting_notifications_notify_minutes": "{} minut",
+  "setting_notifications_notify_minutes": "{count, plural, one {# minuta} few {# minuty} other {# minut}}",
   "setting_notifications_notify_never": "nikdy",
-  "setting_notifications_notify_seconds": "{} sekundy",
+  "setting_notifications_notify_seconds": "{count, plural, one {# sekunda} few {# sekundy} other {# sekund}}",
   "setting_notifications_single_progress_subtitle": "Podrobné informace o průběhu nahrávání položky",
   "setting_notifications_single_progress_title": "Zobrazit průběh detailů zálohování na pozadí",
   "setting_notifications_subtitle": "Přizpůsobení předvoleb oznámení",
@@ -1607,9 +1636,10 @@
   "settings": "Nastavení",
   "settings_require_restart": "Pro použití tohoto nastavení restartujte Immich",
   "settings_saved": "Nastavení uloženo",
+  "setup_pin_code": "Nastavení PIN kódu",
   "share": "Sdílet",
   "share_add_photos": "Přidat fotografie",
-  "share_assets_selected": "{} vybráno",
+  "share_assets_selected": "{count} vybráno",
   "share_dialog_preparing": "Připravuji...",
   "shared": "Sdílené",
   "shared_album_activities_input_disable": "Komentář je vypnutý",
@@ -1623,32 +1653,32 @@
   "shared_by_user": "Sdílel(a) {user}",
   "shared_by_you": "Sdíleli jste",
   "shared_from_partner": "Fotky od {partner}",
-  "shared_intent_upload_button_progress_text": "{} / {} nahráno",
+  "shared_intent_upload_button_progress_text": "{current} / {total} nahráno",
   "shared_link_app_bar_title": "Sdílené odkazy",
   "shared_link_clipboard_copied_massage": "Zkopírováno do schránky",
-  "shared_link_clipboard_text": "Odkaz: {}\nHeslo: {}",
+  "shared_link_clipboard_text": "Odkaz: {link}\nHeslo: {password}",
   "shared_link_create_error": "Chyba při vytváření sdíleného odkazu",
   "shared_link_edit_description_hint": "Zadejte popis sdílení",
   "shared_link_edit_expire_after_option_day": "1 den",
-  "shared_link_edit_expire_after_option_days": "{} dní",
+  "shared_link_edit_expire_after_option_days": "{count, plural, one {# den} few {# dny} other {# dní}}",
   "shared_link_edit_expire_after_option_hour": "1 hodina",
-  "shared_link_edit_expire_after_option_hours": "{} hodin",
+  "shared_link_edit_expire_after_option_hours": "{count, plural, one {# hodina} few {# hodiny} other {# hodin}}",
   "shared_link_edit_expire_after_option_minute": "1 minuta",
-  "shared_link_edit_expire_after_option_minutes": "{} minut",
-  "shared_link_edit_expire_after_option_months": "{} měsíce",
-  "shared_link_edit_expire_after_option_year": "{} rok",
+  "shared_link_edit_expire_after_option_minutes": "{count, plural, one {# minuta} few {# minuty} other {# minut}}",
+  "shared_link_edit_expire_after_option_months": "{count, plural, one {# měsíc} few {# měsíce} other {# měsíců}}",
+  "shared_link_edit_expire_after_option_year": "{count, plural, one {# rok} few {# roky} other {# let}}",
   "shared_link_edit_password_hint": "Zadejte heslo pro sdílení",
   "shared_link_edit_submit_button": "Aktualizovat odkaz",
   "shared_link_error_server_url_fetch": "Nelze načíst url serveru",
-  "shared_link_expires_day": "Vyprší za {} den",
-  "shared_link_expires_days": "Vyprší za {} dní",
-  "shared_link_expires_hour": "Vyprší za {} hodinu",
-  "shared_link_expires_hours": "Vyprší za {} hodin",
-  "shared_link_expires_minute": "Vyprší za {} minutu",
-  "shared_link_expires_minutes": "Vyprší za {} minut",
+  "shared_link_expires_day": "Vyprší za {count, plural, one {# den} few {# dny} other {# dní}}",
+  "shared_link_expires_days": "Vyprší za {count, plural, one {# den} few {# dny} other {# dní}}",
+  "shared_link_expires_hour": "Vyprší za {count, plural, one {# hodina} few {# hodiny} other {# hodin}}",
+  "shared_link_expires_hours": "Vyprší za {count, plural, one {# hodina} few {# hodiny} other {# hodin}}",
+  "shared_link_expires_minute": "Vyprší za {count, plural, one {# minuta} few {# minuty} other {# minut}}",
+  "shared_link_expires_minutes": "Vyprší za {count, plural, one {# minuta} few {# minuty} other {# minut}}",
   "shared_link_expires_never": "Platnost ∞",
-  "shared_link_expires_second": "Vyprší za {} sekundu",
-  "shared_link_expires_seconds": "Vyprší za {} sekund",
+  "shared_link_expires_second": "Vyprší za {count, plural, one {# sekunda} few {# sekundy} other {# sekund}}",
+  "shared_link_expires_seconds": "Vyprší za {count, plural, one {# sekunda} few {# sekundy} other {# sekund}}",
   "shared_link_individual_shared": "Individuální sdílení",
   "shared_link_info_chip_metadata": "EXIF",
   "shared_link_manage_links": "Spravovat sdílené odkazy",
@@ -1723,6 +1753,7 @@
   "stop_sharing_photos_with_user": "Přestat sdílet své fotky s tímto uživatelem",
   "storage": "Velikost úložiště",
   "storage_label": "Štítek úložiště",
+  "storage_quota": "Kvóta úložiště",
   "storage_usage": "Využito {used} z {available}",
   "submit": "Odeslat",
   "suggestions": "Návrhy",
@@ -1749,7 +1780,7 @@
   "theme_selection": "Výběr motivu",
   "theme_selection_description": "Automatické nastavení světlého nebo tmavého motivu podle systémových preferencí prohlížeče",
   "theme_setting_asset_list_storage_indicator_title": "Zobrazit indikátor úložiště na dlaždicích položek",
-  "theme_setting_asset_list_tiles_per_row_title": "Počet položek na řádek ({})",
+  "theme_setting_asset_list_tiles_per_row_title": "Počet položek na řádek ({count})",
   "theme_setting_colorful_interface_subtitle": "Použít hlavní barvu na povrchy pozadí.",
   "theme_setting_colorful_interface_title": "Barevné rozhraní",
   "theme_setting_image_viewer_quality_subtitle": "Přizpůsobení kvality detailů prohlížeče obrázků",
@@ -1759,7 +1790,7 @@
   "theme_setting_system_primary_color_title": "Použití systémové barvy",
   "theme_setting_system_theme_switch": "Automaticky (podle systemového nastavení)",
   "theme_setting_theme_subtitle": "Vyberte nastavení tématu aplikace",
-  "theme_setting_three_stage_loading_subtitle": "Třístupňové načítání může zvýšit výkonnost načítání, ale vede k výrazně vyššímu zatížení sítě.",
+  "theme_setting_three_stage_loading_subtitle": "Třístupňové načítání může zvýšit výkonnost načítání, ale vede k výrazně vyššímu zatížení sítě",
   "theme_setting_three_stage_loading_title": "Povolení třístupňového načítání",
   "they_will_be_merged_together": "Budou sloučeny dohromady",
   "third_party_resources": "Zdroje třetích stran",
@@ -1784,13 +1815,15 @@
   "trash_no_results_message": "Zde se zobrazí odstraněné fotky a videa.",
   "trash_page_delete_all": "Smazat všechny",
   "trash_page_empty_trash_dialog_content": "Chcete vyprázdnit svoje vyhozené položky? Tyto položky budou trvale odstraněny z aplikace",
-  "trash_page_info": "Vyhozené položky budou trvale smazány po {} dnech",
+  "trash_page_info": "Vyhozené položky budou trvale smazány po {count, plural, one {# dni} other {# dnech}}",
   "trash_page_no_assets": "Žádné vyhozené položky",
   "trash_page_restore_all": "Obnovit všechny",
   "trash_page_select_assets_btn": "Vybrat položky",
-  "trash_page_title": "Koš ({})",
+  "trash_page_title": "Koš ({count})",
   "trashed_items_will_be_permanently_deleted_after": "Smazané položky budou trvale odstraněny po {days, plural, one {# dni} other {# dnech}}.",
   "type": "Typ",
+  "unable_to_change_pin_code": "Nelze změnit PIN kód",
+  "unable_to_setup_pin_code": "Nelze nastavit PIN kód",
   "unarchive": "Odarchivovat",
   "unarchived_count": "{count, plural, one {Odarchivována #} few {Odarchivovány #} other {Odarchivováno #}}",
   "unfavorite": "Zrušit oblíbení",
@@ -1814,6 +1847,7 @@
   "untracked_files": "Nesledované soubory",
   "untracked_files_decription": "Tyto soubory nejsou aplikaci známy. Mohou být výsledkem neúspěšných přesunů, přerušeného nahrávání nebo mohou zůstat pozadu kvůli chybě",
   "up_next": "To je prozatím vše",
+  "updated_at": "Aktualizováno",
   "updated_password": "Heslo aktualizováno",
   "upload": "Nahrát",
   "upload_concurrency": "Souběžnost nahrávání",
@@ -1826,15 +1860,18 @@
   "upload_status_errors": "Chyby",
   "upload_status_uploaded": "Nahráno",
   "upload_success": "Nahrání proběhlo úspěšně, obnovením stránky se zobrazí nově nahrané položky.",
-  "upload_to_immich": "Nahrát do Immiche ({})",
+  "upload_to_immich": "Nahrát do Immich ({count})",
   "uploading": "Nahrávání",
   "url": "URL",
   "usage": "Využití",
   "use_current_connection": "použít aktuální připojení",
   "use_custom_date_range": "Použít vlastní rozsah dat",
   "user": "Uživatel",
+  "user_has_been_deleted": "Tento uživatel byl smazán.",
   "user_id": "ID uživatele",
   "user_liked": "Uživateli {user} se {type, select, photo {líbila tato fotka} video {líbilo toto video} asset {líbila tato položka} other {to líbilo}}",
+  "user_pin_code_settings": "PIN kód",
+  "user_pin_code_settings_description": "Správa vašeho PIN kódu",
   "user_purchase_settings": "Nákup",
   "user_purchase_settings_description": "Správa vašeho nákupu",
   "user_role_set": "Uživatel {user} nastaven jako {role}",
@@ -1883,11 +1920,11 @@
   "week": "Týden",
   "welcome": "Vítejte",
   "welcome_to_immich": "Vítejte v Immichi",
-  "wifi_name": "Název WiFi",
+  "wifi_name": "Název Wi-Fi",
   "year": "Rok",
   "years_ago": "Před {years, plural, one {rokem} other {# lety}}",
   "yes": "Ano",
   "you_dont_have_any_shared_links": "Nemáte žádné sdílené odkazy",
-  "your_wifi_name": "Váš název WiFi",
+  "your_wifi_name": "Název vaší Wi-Fi",
   "zoom_image": "Zvětšit obrázek"
 }

i18n/da.json

@@ -70,8 +70,13 @@
     "forcing_refresh_library_files": "Tvinger genopfriskning af alle biblioteksfiler",
     "image_format": "Format",
     "image_format_description": "WebP producerer mindre filer end JPEG, men er langsommere at komprimere.",
+    "image_fullsize_description": "Fuld størrelses billede uden metadata, brugt når zoomet ind",
+    "image_fullsize_enabled": "Aktiver fuld størrelses billede generering",
+    "image_fullsize_enabled_description": "Generer fuld-størrelses billede for ikke-web-venlige formater. Når \"Foretræk indlejret forhåndsvisning\" er slået til, bliver indlejrede forhåndsvisninger brugt direkte uden konvertering. Påvirker ikke web-venlige formater såsom JPEG.",
+    "image_fullsize_quality_description": "Fuld-størrelses billede kvalitet fra 1-100. Højere er bedre, men producerer større filer.",
+    "image_fullsize_title": "Full-størrelses billede indstillinger",
     "image_prefer_embedded_preview": "Foretræk indlejret forhåndsvisning",
-    "image_prefer_embedded_preview_setting_description": "Brug indlejrede forhåndsvisninger i RAW fotos som input til billedbehandling, når det er tilgængeligt. Dette kan give mere nøjagtige farver for nogle billeder, men kvaliteten af forhåndsvisningen er kameraafhængig, og billedet kan have flere komprimeringsartefakter.",
+    "image_prefer_embedded_preview_setting_description": "Brug indlejrede forhåndsvisninger i RAW fotos som input til billedbehandling og når det er tilgængeligt. Dette kan give mere nøjagtige farver for nogle billeder, men kvaliteten af forhåndsvisningen er kameraafhængig, og billedet kan have flere komprimeringsartefakter.",
     "image_prefer_wide_gamut": "Foretrækker bred farveskala",
     "image_prefer_wide_gamut_setting_description": "Brug Display P3 til miniaturebilleder. Dette bevarer billeder med brede farveskalaers dynamik bedre, men billeder kan komme til at se anderledes ud på gamle enheder med en gammel browserversion. sRGB-billeder bliver beholdt som sRGB for at undgå farveskift.",
     "image_preview_description": "Mellemstørrelse billede med fjernet metadata, der bruges, når du ser en enkelt mediefil og til machine learning",
@@ -187,20 +192,13 @@
     "oauth_auto_register": "Autoregistrér",
     "oauth_auto_register_description": "Registrér automatisk nye brugere efter at have logget ind med OAuth",
     "oauth_button_text": "Knaptekst",
-    "oauth_client_id": "Kunde-ID",
-    "oauth_client_secret": "Kundehemmelighed",
     "oauth_enable_description": "Log ind med OAuth",
-    "oauth_issuer_url": "Udsteder-URL",
     "oauth_mobile_redirect_uri": "Mobilomdiregerings-URL",
     "oauth_mobile_redirect_uri_override": "Tilsidesættelse af mobil omdiregerings-URL",
     "oauth_mobile_redirect_uri_override_description": "Aktiver, når OAuth-udbyderen ikke tillader en mobil URI, som '{callback}'",
-    "oauth_profile_signing_algorithm": "Log-ind-algoritme",
-    "oauth_profile_signing_algorithm_description": "Algoritme til signering af brugerprofilen.",
-    "oauth_scope": "Omfang",
     "oauth_settings": "OAuth",
     "oauth_settings_description": "Administrer OAuth login-indstillinger",
     "oauth_settings_more_details": "Læs flere detaljer om funktionen i <link>dokumentationen</link>.",
-    "oauth_signing_algorithm": "Signeringsalgoritme",
     "oauth_storage_label_claim": "Lagringsmærkat fordring",
     "oauth_storage_label_claim_description": "Sæt automatisk brugerens lagringsmærkat til denne fordrings værdi.",
     "oauth_storage_quota_claim": "Lagringskvotefordring",
@@ -366,6 +364,7 @@
   "admin_password": "Administratoradgangskode",
   "administration": "Administration",
   "advanced": "Avanceret",
+  "advanced_settings_enable_alternate_media_filter_subtitle": "Brug denne valgmulighed for at filtrere media under synkronisering baseret på alternative kriterier. Prøv kun denne hvis du har problemer med at appen ikke opdager alle albums.",
   "advanced_settings_log_level_title": "Logniveau: {}",
   "advanced_settings_prefer_remote_subtitle": "Nogle enheder tager meget lang tid om at indlæse miniaturebilleder af elementer på enheden. Aktiver denne indstilling for i stedetat indlæse elementer fra serveren.",
   "advanced_settings_prefer_remote_title": "Foretræk elementer på serveren",
@@ -1375,7 +1374,7 @@
   "public_share": "Offentlig deling",
   "purchase_account_info": "Supporter",
   "purchase_activated_subtitle": "Tak fordi du støtter Immich og open source-software",
-  "purchase_activated_time": "Aktiveret den {date, date}",
+  "purchase_activated_time": "Aktiveret den {date}",
   "purchase_activated_title": "Din nøgle er blevet aktiveret",
   "purchase_button_activate": "Aktiver",
   "purchase_button_buy": "Køb",

i18n/de.json

@@ -39,11 +39,11 @@
     "authentication_settings_disable_all": "Bist du sicher, dass du alle Anmeldemethoden deaktivieren willst? Die Anmeldung wird vollständig deaktiviert.",
     "authentication_settings_reenable": "Nutze einen <link>Server-Befehl</link> zur Reaktivierung.",
     "background_task_job": "Hintergrundaufgaben",
-    "backup_database": "Datenbank sichern",
-    "backup_database_enable_description": "Sicherung der Datenbank aktivieren",
-    "backup_keep_last_amount": "Anzahl der aufzubewahrenden früheren Sicherungen",
-    "backup_settings": "Datensicherungs-Einstellungen",
-    "backup_settings_description": "Datensicherungs-Einstellungen verwalten",
+    "backup_database": "Datenbankabbild erstellen",
+    "backup_database_enable_description": "Erstellen von Datenbankabbildern aktivieren",
+    "backup_keep_last_amount": "Anzahl der aufzubewahrenden früheren Abbilder",
+    "backup_settings": "Datenbankabbild-Einstellungen",
+    "backup_settings_description": "Einstellungen zum Datenbankabbild verwalten. Hinweis: Diese Jobs werden nicht überwacht und du wirst nicht über Fehlschläge informiert.",
     "check_all": "Alle überprüfen",
     "cleanup": "Aufräumen",
     "cleared_jobs": "Folgende Aufgaben zurückgesetzt: {job}",
@@ -53,6 +53,7 @@
     "confirm_email_below": "Bestätige, indem du unten \"{email}\" eingibst",
     "confirm_reprocess_all_faces": "Bist du sicher, dass du alle Gesichter erneut verarbeiten möchtest? Dies löscht auch alle bereits benannten Personen.",
     "confirm_user_password_reset": "Bist du sicher, dass du das Passwort für {user} zurücksetzen möchtest?",
+    "confirm_user_pin_code_reset": "Bist du sicher, dass du den PIN Code von {user} zurücksetzen möchtest?",
     "create_job": "Aufgabe erstellen",
     "cron_expression": "Cron-Ausdruck",
     "cron_expression_description": "Stellen Sie das Scanintervall im Cron-Format ein. Weitere Informationen finden Sie beispielsweise unter <link>Crontab Guru</link>",
@@ -106,7 +107,7 @@
     "library_scanning_enable_description": "Regelmäßiges Scannen der Bibliothek aktivieren",
     "library_settings": "Externe Bibliothek",
     "library_settings_description": "Einstellungen externer Bibliotheken verwalten",
-    "library_tasks_description": "Überprüfe externe Bibliotheken auf neue oder veränderte Medien",
+    "library_tasks_description": "Überprüfe externe Bibliotheken auf neue und/oder veränderte Medien",
     "library_watching_enable_description": "Überwache externe Bibliotheken auf Dateiänderungen",
     "library_watching_settings": "Bibliotheksüberwachung (EXPERIMENTELL)",
     "library_watching_settings_description": "Automatisch auf geänderte Dateien prüfen",
@@ -192,32 +193,28 @@
     "oauth_auto_register": "Automatische Registrierung",
     "oauth_auto_register_description": "Automatische Registrierung neuer Benutzer nach der OAuth-Anmeldung",
     "oauth_button_text": "Button-Text",
-    "oauth_client_id": "Client-ID",
-    "oauth_client_secret": "Client-Geheimnis",
+    "oauth_client_secret_description": "Erforderlich wenn PKCE (Proof Key for Code Exchange) nicht vom OAuth- Anbieter unterstützt wird",
     "oauth_enable_description": "Anmeldung mit OAuth",
-    "oauth_issuer_url": "Aussteller-URL",
     "oauth_mobile_redirect_uri": "Mobile Umleitungs-URI",
     "oauth_mobile_redirect_uri_override": "Mobile Umleitungs-URI überschreiben",
     "oauth_mobile_redirect_uri_override_description": "Einschalten, wenn der OAuth-Anbieter keine mobile URI wie '{callback}' erlaubt",
-    "oauth_profile_signing_algorithm": "Algorithmus zur Profilsignierung",
-    "oauth_profile_signing_algorithm_description": "Dieser Algorithmus wird für die Signatur des Benutzerprofils verwendet.",
-    "oauth_scope": "Umfang",
     "oauth_settings": "OAuth",
     "oauth_settings_description": "OAuth-Anmeldeeinstellungen verwalten",
     "oauth_settings_more_details": "Weitere Informationen zu dieser Funktion findest du in der <link>Dokumentation</link>.",
-    "oauth_signing_algorithm": "Signier-Algorithmus",
     "oauth_storage_label_claim": "Speicherpfadbezeichnung",
     "oauth_storage_label_claim_description": "Die Speicherpfadbezeichnung des Benutzers automatisch auf den Wert dieser Eingabe setzen.",
     "oauth_storage_quota_claim": "Speicherkontingentangabe",
     "oauth_storage_quota_claim_description": "Setzen Sie das Speicherkontingent des Benutzers automatisch auf den angegebenen Wert.",
     "oauth_storage_quota_default": "Standard-Speicherplatzkontingent (GiB)",
     "oauth_storage_quota_default_description": "Kontingent in GiB, das verwendet werden soll, wenn keines übermittelt wird (gib 0 für ein unbegrenztes Kontingent ein).",
+    "oauth_timeout": "Zeitüberschreitung bei Anfrage",
+    "oauth_timeout_description": "Zeitüberschreitung für Anfragen in Millisekunden",
     "offline_paths": "Offline-Pfade",
-    "offline_paths_description": "Die Ergebnisse könnten durch manuelles Löschen von Dateien, die nicht Teil einer externen Bibliothek sind, verursacht sein.",
-    "password_enable_description": "Login mit E-Mail und Passwort",
-    "password_settings": "Passwort-Login",
+    "offline_paths_description": "Dies könnte durch manuelles Löschen von Dateien, die nicht Teil einer externen Bibliothek sind, verursacht sein.",
+    "password_enable_description": "Mit E-Mail und Passwort anmelden",
+    "password_settings": "Passwort-Anmeldung",
     "password_settings_description": "Passwort-Anmeldeeinstellungen verwalten",
-    "paths_validated_successfully": "Alle Pfade wurden erfolgreich validiert",
+    "paths_validated_successfully": "Alle Pfade erfolgreich überprüft",
     "person_cleanup_job": "Personen aufräumen",
     "quota_size_gib": "Kontingent (GiB)",
     "refreshing_all_libraries": "Alle Bibliotheken aktualisieren",
@@ -251,7 +248,7 @@
     "storage_template_hash_verification_enabled_description": "Aktiviert die Hash-Verifizierung. Deaktiviere diese Option nur, wenn du dir über die damit verbundenen Auswirkungen im Klaren bist",
     "storage_template_migration": "Migration von Speichervorlagen",
     "storage_template_migration_description": "Diese Aufgabe wendet die aktuelle <link>{template}</link> auf zuvor hochgeladene Dateien an",
-    "storage_template_migration_info": "Die Vorlage wird alle Dateierweiterungen in Kleinbuchstaben umwandeln. Vorlagenänderungen gelten nur für neue Dateien. Um die Vorlage rückwirkend auf bereits hochgeladene Assets anzuwenden, führe den <link>{job}</link> aus.",
+    "storage_template_migration_info": "Die Speichervorlage wird alle Dateierweiterungen in Kleinbuchstaben umwandeln. Vorlagenänderungen gelten nur für neue Dateien. Um die Vorlage rückwirkend auf bereits hochgeladene Assets anzuwenden, führe den <link>{job}</link> aus.",
     "storage_template_migration_job": "Speichervorlagenmigrations-Aufgabe",
     "storage_template_more_details": "Weitere Details zu dieser Funktion findest du unter <template-link>Speichervorlage</template-link> und dessen <implications-link>Implikationen</implications-link>",
     "storage_template_onboarding_description": "Wenn aktiviert, sortiert diese Funktion Dateien automatisch basierend auf einer benutzerdefinierten Vorlage. Aufgrund von Stabilitätsproblemen ist die Funktion standardmäßig deaktiviert. Weitere Informationen findest du in der <link>Dokumentation</link>.",
@@ -352,6 +349,7 @@
     "user_delete_delay_settings_description": "Gibt die Anzahl der Tage bis zur endgültigen Löschung eines Kontos und seiner Dateien an. Der Benutzerlöschauftrag wird täglich um Mitternacht ausgeführt, um zu überprüfen, ob Nutzer zur Löschung bereit sind. Änderungen an dieser Einstellung werden erst bei der nächsten Ausführung berücksichtigt.",
     "user_delete_immediately": "Das Konto und die Dateien von <b>{user}</b> werden <b>sofort</b> für eine permanente Löschung in die Warteschlange gestellt.",
     "user_delete_immediately_checkbox": "Benutzer und Dateien zur sofortigen Löschung in die Warteschlange stellen",
+    "user_details": "Benutzerdetails",
     "user_management": "Benutzerverwaltung",
     "user_password_has_been_reset": "Das Passwort des Benutzers wurde zurückgesetzt:",
     "user_password_reset_description": "Bitte gib dem Benutzer das temporäre Passwort und informiere ihn, dass das Passwort beim nächsten Login geändert werden muss.",
@@ -371,13 +369,17 @@
   "admin_password": "Administrator Passwort",
   "administration": "Verwaltung",
   "advanced": "Erweitert",
-  "advanced_settings_log_level_title": "Log-Level: {}",
+  "advanced_settings_enable_alternate_media_filter_subtitle": "Verwende diese Option, um Medien während der Synchronisierung nach anderen Kriterien zu filtern. Versuchen dies nur, wenn Probleme mit der Erkennung aller Alben durch die App auftreten.",
+  "advanced_settings_enable_alternate_media_filter_title": "[EXPERIMENTELL] Benutze alternativen Filter für Synchronisierung der Gerätealben",
+  "advanced_settings_log_level_title": "Log-Level: {level}",
   "advanced_settings_prefer_remote_subtitle": "Einige Geräte sind sehr langsam beim Laden von Miniaturbildern direkt aus dem Gerät. Aktivieren Sie diese Einstellung, um stattdessen die Server-Bilder zu laden.",
   "advanced_settings_prefer_remote_title": "Server-Bilder bevorzugen",
   "advanced_settings_proxy_headers_subtitle": "Definiere einen Proxy-Header, den Immich bei jeder Netzwerkanfrage mitschicken soll",
   "advanced_settings_proxy_headers_title": "Proxy-Headers",
   "advanced_settings_self_signed_ssl_subtitle": "Verifizierung von SSL-Zertifikaten vom Server überspringen. Notwendig bei selbstsignierten Zertifikaten.",
   "advanced_settings_self_signed_ssl_title": "Selbstsignierte SSL-Zertifikate erlauben",
+  "advanced_settings_sync_remote_deletions_subtitle": "Automatisches Löschen oder Wiederherstellen einer Datei auf diesem Gerät, wenn diese Aktion im Web durchgeführt wird",
+  "advanced_settings_sync_remote_deletions_title": "Synchrone Remote-Löschungen [Experimentell]",
   "advanced_settings_tile_subtitle": "Erweiterte Benutzereinstellungen",
   "advanced_settings_troubleshooting_subtitle": "Erweiterte Funktionen zur Fehlersuche aktivieren",
   "advanced_settings_troubleshooting_title": "Fehlersuche",
@@ -400,9 +402,9 @@
   "album_remove_user_confirmation": "Bist du sicher, dass du {user} entfernen willst?",
   "album_share_no_users": "Es sieht so aus, als hättest du dieses Album mit allen Benutzern geteilt oder du hast keine Benutzer, mit denen du teilen kannst.",
   "album_thumbnail_card_item": "1 Element",
-  "album_thumbnail_card_items": "{} Elemente",
+  "album_thumbnail_card_items": "{count} Elemente",
   "album_thumbnail_card_shared": " · Geteilt",
-  "album_thumbnail_shared_by": "Geteilt von {}",
+  "album_thumbnail_shared_by": "Geteilt von {user}",
   "album_updated": "Album aktualisiert",
   "album_updated_setting_description": "Erhalte eine E-Mail-Benachrichtigung, wenn ein freigegebenes Album neue Dateien enthält",
   "album_user_left": "{album} verlassen",
@@ -440,15 +442,15 @@
   "archive": "Archiv",
   "archive_or_unarchive_photo": "Foto archivieren bzw. Archivierung aufheben",
   "archive_page_no_archived_assets": "Keine archivierten Inhalte gefunden",
-  "archive_page_title": "Archiv ({})",
+  "archive_page_title": "Archiv ({count})",
   "archive_size": "Archivgröße",
   "archive_size_description": "Archivgröße für Downloads konfigurieren (in GiB)",
   "archived": "Archiviert",
   "archived_count": "{count, plural, other {# archiviert}}",
   "are_these_the_same_person": "Ist das dieselbe Person?",
   "are_you_sure_to_do_this": "Bist du sicher, dass du das tun willst?",
-  "asset_action_delete_err_read_only": "Schreibgeschützte Inhalte können nicht gelöscht werden, überspringen...",
-  "asset_action_share_err_offline": "Die Offline-Inhalte konnten nicht gelesen werden, überspringen...",
+  "asset_action_delete_err_read_only": "Schreibgeschützte Inhalte können nicht gelöscht werden, überspringen",
+  "asset_action_share_err_offline": "Die Offline-Inhalte konnten nicht gelesen werden, überspringen",
   "asset_added_to_album": "Zum Album hinzugefügt",
   "asset_adding_to_album": "Hinzufügen zum Album…",
   "asset_description_updated": "Die Beschreibung der Datei wurde aktualisiert",
@@ -477,43 +479,43 @@
   "assets_added_to_album_count": "{count, plural, one {# Datei} other {# Dateien}} zum Album hinzugefügt",
   "assets_added_to_name_count": "{count, plural, one {# Element} other {# Elemente}} zu {hasName, select, true {<b>{name}</b>} other {neuem Album}} hinzugefügt",
   "assets_count": "{count, plural, one {# Datei} other {# Dateien}}",
-  "assets_deleted_permanently": "{} Datei/en permanent gelöscht",
-  "assets_deleted_permanently_from_server": "{} Datei/en wurden permanent vom Immich Server gelöscht",
+  "assets_deleted_permanently": "{count} Element(e) permanent gelöscht",
+  "assets_deleted_permanently_from_server": "{count} Element(e) permanent vom Immich-Server gelöscht",
   "assets_moved_to_trash_count": "{count, plural, one {# Datei} other {# Dateien}} in den Papierkorb verschoben",
   "assets_permanently_deleted_count": "{count, plural, one {# Datei} other {# Dateien}} endgültig gelöscht",
   "assets_removed_count": "{count, plural, one {# Datei} other {# Dateien}} entfernt",
-  "assets_removed_permanently_from_device": "{} Datei/en wurden permanent vom Gerät gelöscht",
+  "assets_removed_permanently_from_device": "{count} Element(e) permanent von Ihrem Gerät gelöscht",
   "assets_restore_confirmation": "Bist du sicher, dass du alle Dateien aus dem Papierkorb wiederherstellen willst? Diese Aktion kann nicht rückgängig gemacht werden! Beachte, dass Offline-Dateien auf diese Weise nicht wiederhergestellt werden können.",
   "assets_restored_count": "{count, plural, one {# Datei} other {# Dateien}} wiederhergestellt",
-  "assets_restored_successfully": "{} Datei/en erfolgreich wiederhergestellt",
-  "assets_trashed": "{} Datei/en gelöscht",
+  "assets_restored_successfully": "{count} Element(e) erfolgreich wiederhergestellt",
+  "assets_trashed": "{count} Element(e) gelöscht",
   "assets_trashed_count": "{count, plural, one {# Datei} other {# Dateien}} in den Papierkorb verschoben",
-  "assets_trashed_from_server": "{} Datei/en vom Immich-Server gelöscht",
+  "assets_trashed_from_server": "{count} Element(e) vom Immich-Server gelöscht",
   "assets_were_part_of_album_count": "{count, plural, one {# Datei ist} other {# Dateien sind}} bereits im Album vorhanden",
   "authorized_devices": "Verwendete Geräte",
-  "automatic_endpoint_switching_subtitle": "Verbinden Sie sich lokal über ein bestimmtes WLAN, wenn es verfügbar ist, und verwenden Sie andere Verbindungsmöglichkeiten anderswo.",
+  "automatic_endpoint_switching_subtitle": "Verbinden Sie sich lokal über ein bestimmtes WLAN, wenn es verfügbar ist, und verwenden Sie andere Verbindungsmöglichkeiten anderswo",
   "automatic_endpoint_switching_title": "Automatische URL-Umschaltung",
   "back": "Zurück",
   "back_close_deselect": "Zurück, Schließen oder Abwählen",
   "background_location_permission": "Hintergrund Standortfreigabe",
   "background_location_permission_content": "Um im Hintergrund zwischen den Netzwerken wechseln zu können, muss Immich *immer* Zugriff auf den genauen Standort haben, damit die App den Namen des WLAN-Netzwerks ermitteln kann",
-  "backup_album_selection_page_albums_device": "Alben auf dem Gerät ({})",
-  "backup_album_selection_page_albums_tap": "Einmalig das Album antippen um es zu sichern, doppelt antippen um es nicht mehr zu sichern.",
+  "backup_album_selection_page_albums_device": "Alben auf dem Gerät ({count})",
+  "backup_album_selection_page_albums_tap": "Einmalig das Album antippen um es zu sichern, doppelt antippen um es nicht mehr zu sichern",
   "backup_album_selection_page_assets_scatter": "Elemente (Fotos / Videos) können sich über mehrere Alben verteilen. Daher können diese vor der Sicherung eingeschlossen oder ausgeschlossen werden.",
   "backup_album_selection_page_select_albums": "Alben auswählen",
   "backup_album_selection_page_selection_info": "Information",
   "backup_album_selection_page_total_assets": "Elemente",
   "backup_all": "Alle",
-  "backup_background_service_backup_failed_message": "Es trat ein Fehler bei der Sicherung auf. Erneuter Versuch...",
-  "backup_background_service_connection_failed_message": "Es konnte keine Verbindung zum Server hergestellt werden. Erneuter Versuch...",
-  "backup_background_service_current_upload_notification": "Lädt {} hoch",
+  "backup_background_service_backup_failed_message": "Es trat ein Fehler bei der Sicherung auf. Erneuter Versuch…",
+  "backup_background_service_connection_failed_message": "Es konnte keine Verbindung zum Server hergestellt werden. Erneuter Versuch…",
+  "backup_background_service_current_upload_notification": "Lädt {filename} hoch",
   "backup_background_service_default_notification": "Suche nach neuen Elementen…",
   "backup_background_service_error_title": "Fehler bei der Sicherung",
-  "backup_background_service_in_progress_notification": "Elemente werden gesichert...",
-  "backup_background_service_upload_failure_notification": "Konnte {} nicht hochladen",
+  "backup_background_service_in_progress_notification": "Elemente werden gesichert…",
+  "backup_background_service_upload_failure_notification": "Konnte {filename} nicht hochladen",
   "backup_controller_page_albums": "Gesicherte Alben",
-  "backup_controller_page_background_app_refresh_disabled_content": "Aktiviere Hintergrundaktualisierungen in Einstellungen -> Allgemein -> Hintergrundaktualisierungen um Sicherungen im Hintergrund zu ermöglichen. ",
-  "backup_controller_page_background_app_refresh_disabled_title": "Hintergrundaktualisierungen sind deaktiviert.",
+  "backup_controller_page_background_app_refresh_disabled_content": "Aktiviere Hintergrundaktualisierungen in Einstellungen -> Allgemein -> Hintergrundaktualisierungen um Sicherungen im Hintergrund zu ermöglichen.",
+  "backup_controller_page_background_app_refresh_disabled_title": "Hintergrundaktualisierungen sind deaktiviert",
   "backup_controller_page_background_app_refresh_enable_button_text": "Gehe zu Einstellungen",
   "backup_controller_page_background_battery_info_link": "Zeige mir wie",
   "backup_controller_page_background_battery_info_message": "Für die besten Ergebnisse für Sicherungen im Hintergrund, deaktiviere alle Batterieoptimierungen und Einschränkungen für die Hintergrundaktivitäten von Immich.\n\nDa dies gerätespezifisch ist, schlage diese Informationen für deinen Gerätehersteller nach.",
@@ -521,7 +523,7 @@
   "backup_controller_page_background_battery_info_title": "Batterieoptimierungen",
   "backup_controller_page_background_charging": "Nur während des Ladens",
   "backup_controller_page_background_configure_error": "Konnte Hintergrundservice nicht konfigurieren",
-  "backup_controller_page_background_delay": "Sicherung neuer Elemente verzögern um: {}",
+  "backup_controller_page_background_delay": "Sicherung neuer Elemente verzögern um: {duration}",
   "backup_controller_page_background_description": "Schalte den Hintergrundservice ein, um neue Elemente automatisch im Hintergrund zu sichern ohne die App zu öffnen",
   "backup_controller_page_background_is_off": "Automatische Sicherung im Hintergrund ist deaktiviert",
   "backup_controller_page_background_is_on": "Automatische Sicherung im Hintergrund ist aktiviert",
@@ -531,12 +533,12 @@
   "backup_controller_page_backup": "Sicherung",
   "backup_controller_page_backup_selected": "Ausgewählt: ",
   "backup_controller_page_backup_sub": "Gesicherte Fotos und Videos",
-  "backup_controller_page_created": "Erstellt: {}",
+  "backup_controller_page_created": "Erstellt am: {date}",
   "backup_controller_page_desc_backup": "Aktiviere die Sicherung, um Elemente immer automatisch auf den Server zu laden, während du die App benutzt.",
   "backup_controller_page_excluded": "Ausgeschlossen: ",
-  "backup_controller_page_failed": "Fehlgeschlagen ({})",
-  "backup_controller_page_filename": "Dateiname: {} [{}]",
-  "backup_controller_page_id": "ID: {}",
+  "backup_controller_page_failed": "Fehlgeschlagen ({count})",
+  "backup_controller_page_filename": "Dateiname: {filename} [{size}]",
+  "backup_controller_page_id": "ID: {id}",
   "backup_controller_page_info": "Informationen zur Sicherung",
   "backup_controller_page_none_selected": "Keine ausgewählt",
   "backup_controller_page_remainder": "Verbleibend",
@@ -545,7 +547,7 @@
   "backup_controller_page_start_backup": "Sicherung starten",
   "backup_controller_page_status_off": "Sicherung im Vordergrund ist inaktiv",
   "backup_controller_page_status_on": "Sicherung im Vordergrund ist aktiv",
-  "backup_controller_page_storage_format": "{} von {} genutzt",
+  "backup_controller_page_storage_format": "{used} von {total} genutzt",
   "backup_controller_page_to_backup": "Zu sichernde Alben",
   "backup_controller_page_total_sub": "Alle Fotos und Videos",
   "backup_controller_page_turn_off": "Sicherung im Vordergrund ausschalten",
@@ -554,7 +556,7 @@
   "backup_err_only_album": "Das einzige Album kann nicht entfernt werden",
   "backup_info_card_assets": "Elemente",
   "backup_manual_cancelled": "Abgebrochen",
-  "backup_manual_in_progress": "Sicherung läuft bereits. Bitte versuche es später erneut.",
+  "backup_manual_in_progress": "Sicherung läuft bereits. Bitte versuche es später erneut",
   "backup_manual_success": "Erfolgreich",
   "backup_manual_title": "Sicherungsstatus",
   "backup_options_page_title": "Sicherungsoptionen",
@@ -570,21 +572,21 @@
   "bulk_keep_duplicates_confirmation": "Bist du sicher, dass du {count, plural, one {# duplizierte Datei} other {# duplizierte Dateien}} behalten möchtest? Dies wird alle Duplikat-Gruppen auflösen ohne etwas zu löschen.",
   "bulk_trash_duplicates_confirmation": "Bist du sicher, dass du {count, plural, one {# duplizierte Datei} other {# duplizierte Dateien gemeinsam}} in den Papierkorb verschieben möchtest? Dies wird die größte Datei jeder Gruppe behalten und alle anderen Duplikate in den Papierkorb verschieben.",
   "buy": "Immich erwerben",
-  "cache_settings_album_thumbnails": "Vorschaubilder der Bibliothek ({} Elemente)",
+  "cache_settings_album_thumbnails": "Vorschaubilder der Bibliothek ({count} Elemente)",
   "cache_settings_clear_cache_button": "Zwischenspeicher löschen",
   "cache_settings_clear_cache_button_title": "Löscht den Zwischenspeicher der App. Dies wird die Leistungsfähigkeit der App deutlich einschränken, bis der Zwischenspeicher wieder aufgebaut wurde.",
   "cache_settings_duplicated_assets_clear_button": "LEEREN",
   "cache_settings_duplicated_assets_subtitle": "Fotos und Videos, die von der App blockiert werden",
-  "cache_settings_duplicated_assets_title": "Duplikate ({})",
-  "cache_settings_image_cache_size": "{} Bilder im Zwischenspeicher",
+  "cache_settings_duplicated_assets_title": "Duplikate ({count})",
+  "cache_settings_image_cache_size": "Bilder im Zwischenspeicher ({count} Bilder)",
   "cache_settings_statistics_album": "Vorschaubilder der Bibliothek",
-  "cache_settings_statistics_assets": "{} Elemente ({})",
+  "cache_settings_statistics_assets": "{count} Elemente ({size})",
   "cache_settings_statistics_full": "Originalbilder",
   "cache_settings_statistics_shared": "Vorschaubilder geteilter Alben",
   "cache_settings_statistics_thumbnail": "Vorschaubilder",
   "cache_settings_statistics_title": "Zwischenspeicher-Nutzung",
   "cache_settings_subtitle": "Kontrollieren, wie Immich den Zwischenspeicher nutzt",
-  "cache_settings_thumbnail_size": "{} Vorschaubilder im Zwischenspeicher",
+  "cache_settings_thumbnail_size": "Vorschaubilder im Zwischenspeicher ({count} Bilder)",
   "cache_settings_tile_subtitle": "Lokalen Speicher verwalten",
   "cache_settings_tile_title": "Lokaler Speicher",
   "cache_settings_title": "Zwischenspeicher Einstellungen",
@@ -610,6 +612,7 @@
   "change_password_form_new_password": "Neues Passwort",
   "change_password_form_password_mismatch": "Passwörter stimmen nicht überein",
   "change_password_form_reenter_new_password": "Passwort erneut eingeben",
+  "change_pin_code": "PIN Code ändern",
   "change_your_password": "Ändere dein Passwort",
   "changed_visibility_successfully": "Die Sichtbarkeit wurde erfolgreich geändert",
   "check_all": "Alle prüfen",
@@ -630,8 +633,8 @@
   "client_cert_import_success_msg": "Client Zertifikat wurde importiert",
   "client_cert_invalid_msg": "Ungültige Zertifikatsdatei oder falsches Passwort",
   "client_cert_remove_msg": "Client Zertifikat wurde entfernt",
-  "client_cert_subtitle": "Unterstützt nur das PKCS12 (.p12, .pfx) Format. Zertifikatsimporte oder -entfernungen sind nur vor dem Login möglich.",
-  "client_cert_title": "SSL-Client-Zertifikat ",
+  "client_cert_subtitle": "Unterstützt nur das PKCS12 (.p12, .pfx) Format. Zertifikatsimporte oder -entfernungen sind nur vor dem Login möglich",
+  "client_cert_title": "SSL-Client-Zertifikat",
   "clockwise": "Im Uhrzeigersinn",
   "close": "Schließen",
   "collapse": "Zusammenklappen",
@@ -643,18 +646,19 @@
   "comments_and_likes": "Kommentare & Likes",
   "comments_are_disabled": "Kommentare sind deaktiviert",
   "common_create_new_album": "Neues Album erstellen",
-  "common_server_error": "Bitte überprüfe Deine Netzwerkverbindung und stelle sicher, dass die App und Server Versionen kompatibel sind.",
-  "completed": "Fertig\n",
+  "common_server_error": "Bitte überprüfe deine Netzwerkverbindung und stelle sicher, dass die App und Server Versionen kompatibel sind.",
+  "completed": "Abgeschlossen",
   "confirm": "Bestätigen",
   "confirm_admin_password": "Administrator Passwort bestätigen",
   "confirm_delete_face": "Bist du sicher dass du das Gesicht von {name} aus der Datei entfernen willst?",
   "confirm_delete_shared_link": "Bist du sicher, dass du diesen geteilten Link löschen willst?",
   "confirm_keep_this_delete_others": "Alle anderen Dateien im Stapel bis auf diese werden gelöscht. Bist du sicher, dass du fortfahren möchten?",
+  "confirm_new_pin_code": "Neuen PIN Code bestätigen",
   "confirm_password": "Passwort bestätigen",
   "contain": "Vollständig",
   "context": "Kontext",
   "continue": "Fortsetzen",
-  "control_bottom_app_bar_album_info_shared": "{} Elemente · Geteilt",
+  "control_bottom_app_bar_album_info_shared": "{count} Elemente · Geteilt",
   "control_bottom_app_bar_create_new_album": "Neues Album erstellen",
   "control_bottom_app_bar_delete_from_immich": "Aus Immich löschen",
   "control_bottom_app_bar_delete_from_local": "Vom Gerät löschen",
@@ -692,9 +696,11 @@
   "create_tag_description": "Erstelle einen neuen Tag. Für verschachtelte Tags, gib den gesamten Pfad inklusive Schrägstrich an.",
   "create_user": "Nutzer erstellen",
   "created": "Erstellt",
+  "created_at": "Erstellt",
   "crop": "Zuschneiden",
   "curated_object_page_title": "Dinge",
   "current_device": "Aktuelles Gerät",
+  "current_pin_code": "Aktueller PIN Code",
   "current_server_address": "Aktuelle Serveradresse",
   "custom_locale": "Benutzerdefinierte Sprache",
   "custom_locale_description": "Datumsangaben und Zahlen je nach Sprache und Land formatieren",
@@ -719,9 +725,9 @@
   "delete_album": "Album löschen",
   "delete_api_key_prompt": "Bist du sicher, dass du diesen API-Schlüssel löschen willst?",
   "delete_dialog_alert": "Diese Elemente werden unwiderruflich von Immich und dem Gerät entfernt",
-  "delete_dialog_alert_local": "Diese Inhalte werden vom Gerät gelöscht, bleiben aber auf dem Immich-Server.",
-  "delete_dialog_alert_local_non_backed_up": "Einige Inhalte sind nicht in Immich gesichert und werden dauerhaft vom Gerät gelöscht.",
-  "delete_dialog_alert_remote": "Diese Inhalte werden dauerhaft vom Immich-Server gelöscht.",
+  "delete_dialog_alert_local": "Diese Inhalte werden vom Gerät gelöscht, bleiben aber auf dem Immich-Server",
+  "delete_dialog_alert_local_non_backed_up": "Einige Inhalte sind nicht in Immich gesichert und werden dauerhaft vom Gerät gelöscht",
+  "delete_dialog_alert_remote": "Diese Inhalte werden dauerhaft vom Immich-Server gelöscht",
   "delete_dialog_ok_force": "Trotzdem löschen",
   "delete_dialog_title": "Endgültig löschen",
   "delete_duplicates_confirmation": "Bist du sicher, dass du diese Duplikate endgültig löschen willst?",
@@ -741,7 +747,7 @@
   "deletes_missing_assets": "Löscht Dateien, die auf der Festplatte fehlen",
   "description": "Beschreibung",
   "description_input_hint_text": "Beschreibung hinzufügen...",
-  "description_input_submit_error": "Beschreibung konnte nicht geändert werden, bitte im Log für mehr Details nachsehen.",
+  "description_input_submit_error": "Beschreibung konnte nicht geändert werden, bitte im Log für mehr Details nachsehen",
   "details": "Details",
   "direction": "Richtung",
   "disabled": "Deaktiviert",
@@ -758,23 +764,23 @@
   "documentation": "Dokumentation",
   "done": "Fertig",
   "download": "Herunterladen",
-  "download_canceled": "Download abgebrochen!",
-  "download_complete": "Download vollständig!",
-  "download_enqueue": "Download in die Warteschlange gesetzt!",
+  "download_canceled": "Download abgebrochen",
+  "download_complete": "Download vollständig",
+  "download_enqueue": "Download in die Warteschlange gesetzt",
   "download_error": "Download fehlerhaft",
-  "download_failed": "Download fehlerhaft!",
-  "download_filename": "Datei: {}",
+  "download_failed": "Download fehlerhaft",
+  "download_filename": "Datei: {filename}",
   "download_finished": "Download abgeschlossen",
   "download_include_embedded_motion_videos": "Eingebettete Videos",
   "download_include_embedded_motion_videos_description": "Videos, die in Bewegungsfotos eingebettet sind, als separate Datei einfügen",
-  "download_notfound": "Download nicht gefunden!",
-  "download_paused": "Download pausiert!",
+  "download_notfound": "Download nicht gefunden",
+  "download_paused": "Download pausiert",
   "download_settings": "Download",
   "download_settings_description": "Einstellungen für das Herunterladen von Dateien verwalten",
   "download_started": "Download gestartet",
   "download_sucess": "Download erfolgreich",
   "download_sucess_android": "Die Datei wurde nach DCIM/Immich heruntergeladen",
-  "download_waiting_to_retry": "Warte auf erneuten Versuch...",
+  "download_waiting_to_retry": "Warte auf erneuten Versuch",
   "downloading": "Herunterladen",
   "downloading_asset_filename": "Datei {filename} wird heruntergeladen",
   "downloading_media": "Medien werden heruntergeladen",
@@ -807,6 +813,7 @@
   "editor_crop_tool_h2_aspect_ratios": "Seitenverhältnisse",
   "editor_crop_tool_h2_rotation": "Drehung",
   "email": "E-Mail",
+  "email_notifications": "E-Mail Benachrichtigungen",
   "empty_folder": "Dieser Ordner ist leer",
   "empty_trash": "Papierkorb leeren",
   "empty_trash_confirmation": "Bist du sicher, dass du den Papierkorb leeren willst?\nDies entfernt alle Dateien im Papierkorb endgültig aus Immich und kann nicht rückgängig gemacht werden!",
@@ -819,7 +826,7 @@
   "error_change_sort_album": "Ändern der Anzeigereihenfolge fehlgeschlagen",
   "error_delete_face": "Fehler beim Löschen des Gesichts",
   "error_loading_image": "Fehler beim Laden des Bildes",
-  "error_saving_image": "Fehler: {}",
+  "error_saving_image": "Fehler: {error}",
   "error_title": "Fehler - Etwas ist schief gelaufen",
   "errors": {
     "cannot_navigate_next_asset": "Kann nicht zur nächsten Datei navigieren",
@@ -849,10 +856,12 @@
     "failed_to_keep_this_delete_others": "Fehler beim Löschen der anderen Dateien",
     "failed_to_load_asset": "Fehler beim Laden der Datei",
     "failed_to_load_assets": "Fehler beim Laden der Dateien",
+    "failed_to_load_notifications": "Fehler beim Laden der Benachrichtigungen",
     "failed_to_load_people": "Fehler beim Laden von Personen",
     "failed_to_remove_product_key": "Fehler beim Entfernen des Produktschlüssels",
     "failed_to_stack_assets": "Dateien konnten nicht gestapelt werden",
     "failed_to_unstack_assets": "Dateien konnten nicht entstapelt werden",
+    "failed_to_update_notification_status": "Benachrichtigungsstatus aktualisieren fehlgeschlagen",
     "import_path_already_exists": "Dieser Importpfad existiert bereits.",
     "incorrect_email_or_password": "Ungültige E-Mail oder Passwort",
     "paths_validation_failed": "{paths, plural, one {# Pfad konnte} other {# Pfade konnten}} nicht validiert werden",
@@ -920,6 +929,7 @@
     "unable_to_remove_reaction": "Reaktion kann nicht entfernt werden",
     "unable_to_repair_items": "Objekte können nicht repariert werden",
     "unable_to_reset_password": "Passwort kann nicht zurückgesetzt werden",
+    "unable_to_reset_pin_code": "Zurücksetzen des PIN Code nicht möglich",
     "unable_to_resolve_duplicate": "Duplikate können nicht aufgelöst werden",
     "unable_to_restore_assets": "Dateien konnten nicht wiederhergestellt werden",
     "unable_to_restore_trash": "Papierkorb kann nicht wiederhergestellt werden",
@@ -953,10 +963,10 @@
   "exif_bottom_sheet_location": "STANDORT",
   "exif_bottom_sheet_people": "PERSONEN",
   "exif_bottom_sheet_person_add_person": "Namen hinzufügen",
-  "exif_bottom_sheet_person_age": "Alter {}",
-  "exif_bottom_sheet_person_age_months": "Age {} months",
-  "exif_bottom_sheet_person_age_year_months": "Age 1 year, {} months",
-  "exif_bottom_sheet_person_age_years": "Age {}",
+  "exif_bottom_sheet_person_age": "Alter {age}",
+  "exif_bottom_sheet_person_age_months": "{months} Monate alt",
+  "exif_bottom_sheet_person_age_year_months": "1 Jahr, {months} Monate alt",
+  "exif_bottom_sheet_person_age_years": "Alter {years}",
   "exit_slideshow": "Diashow beenden",
   "expand_all": "Alle aufklappen",
   "experimental_settings_new_asset_list_subtitle": "In Arbeit",
@@ -965,7 +975,7 @@
   "experimental_settings_title": "Experimentell",
   "expire_after": "Verfällt nach",
   "expired": "Verfallen",
-  "expires_date": "Läuft {date} ab",
+  "expires_date": "Läuft am {date} ab",
   "explore": "Erkunden",
   "explorer": "Datei-Explorer",
   "export": "Exportieren",
@@ -992,6 +1002,7 @@
   "filetype": "Dateityp",
   "filter": "Filter",
   "filter_people": "Personen filtern",
+  "filter_places": "Orte filtern",
   "find_them_fast": "Finde sie schneller mit der Suche nach Namen",
   "fix_incorrect_match": "Fehlerhafte Übereinstimmung beheben",
   "folder": "Ordner",
@@ -1001,7 +1012,7 @@
   "forward": "Vorwärts",
   "general": "Allgemein",
   "get_help": "Hilfe erhalten",
-  "get_wifiname_error": "WLAN-Name konnte nicht ermittelt werden. Vergewissere dich, dass die erforderlichen Berechtigungen erteilt wurden und du mit einem WLAN-Netzwerk verbunden bist.\n",
+  "get_wifiname_error": "WLAN-Name konnte nicht ermittelt werden. Vergewissere dich, dass die erforderlichen Berechtigungen erteilt wurden und du mit einem WLAN-Netzwerk verbunden bist",
   "getting_started": "Erste Schritte",
   "go_back": "Zurück",
   "go_to_folder": "Gehe zu Ordner",
@@ -1030,23 +1041,24 @@
   "hide_person": "Person verbergen",
   "hide_unnamed_people": "Unbenannte Personen verbergen",
   "home_page_add_to_album_conflicts": "{added} Elemente zu {album} hinzugefügt. {failed} Elemente sind bereits vorhanden.",
-  "home_page_add_to_album_err_local": "Es können lokale Elemente noch nicht zu Alben hinzugefügt werden, überspringen...",
+  "home_page_add_to_album_err_local": "Es können lokale Elemente noch nicht zu Alben hinzugefügt werden, überspringen",
   "home_page_add_to_album_success": "{added} Elemente zu {album} hinzugefügt.",
-  "home_page_album_err_partner": "Inhalte von Partnern können derzeit nicht zu Alben hinzugefügt werden!",
-  "home_page_archive_err_local": "Kann lokale Elemente nicht archvieren, überspringen...",
-  "home_page_archive_err_partner": "Inhalte von Partnern können nicht archiviert werden!",
-  "home_page_building_timeline": "Zeitachse wird erstellt.",
-  "home_page_delete_err_partner": "Inhalte von Partnern können nicht gelöscht werden!",
-  "home_page_delete_remote_err_local": "Lokale Inhalte in der Auswahl, überspringen...",
-  "home_page_favorite_err_local": "Kann lokale Elemente noch nicht favorisieren, überspringen...",
-  "home_page_favorite_err_partner": "Inhalte von Partnern können nicht favorisiert werden!",
-  "home_page_first_time_notice": "Wenn dies das erste Mal ist dass Du Immich nutzt, stelle bitte sicher, dass mindestens ein Album zur Sicherung ausgewählt ist, sodass die Zeitachse mit Fotos und Videos gefüllt werden kann.",
+  "home_page_album_err_partner": "Inhalte von Partnern können derzeit nicht zu Alben hinzugefügt werden",
+  "home_page_archive_err_local": "Kann lokale Elemente nicht archvieren, überspringen",
+  "home_page_archive_err_partner": "Inhalte von Partnern können nicht archiviert werden",
+  "home_page_building_timeline": "Zeitachse wird erstellt",
+  "home_page_delete_err_partner": "Inhalte von Partnern können nicht gelöscht werden, überspringe",
+  "home_page_delete_remote_err_local": "Lokale Inhalte in der Auswahl, überspringen",
+  "home_page_favorite_err_local": "Kann lokale Elemente noch nicht favorisieren, überspringen",
+  "home_page_favorite_err_partner": "Inhalte von Partnern können nicht favorisiert werden, überspringe",
+  "home_page_first_time_notice": "Wenn dies das erste Mal ist dass Du Immich nutzt, stelle bitte sicher, dass mindestens ein Album zur Sicherung ausgewählt ist, sodass die Zeitachse mit Fotos und Videos gefüllt werden kann",
   "home_page_share_err_local": "Lokale Inhalte können nicht per Link geteilt werden, überspringe",
-  "home_page_upload_err_limit": "Es können max. 30 Elemente gleichzeitig hochgeladen werden, überspringen...",
+  "home_page_upload_err_limit": "Es können max. 30 Elemente gleichzeitig hochgeladen werden, überspringen",
   "host": "Host",
   "hour": "Stunde",
+  "id": "ID",
   "ignore_icloud_photos": "iCloud Fotos ignorieren",
-  "ignore_icloud_photos_description": "Fotos, die in der iCloud gespeichert sind, werden nicht auf den immich Server  hochgeladen",
+  "ignore_icloud_photos_description": "Fotos, die in der iCloud gespeichert sind, werden nicht auf den immich Server hochgeladen",
   "image": "Bild",
   "image_alt_text_date": "{isVideo, select, true {Video} other {Bild}} aufgenommen am {date}",
   "image_alt_text_date_1_person": "{isVideo, select, true {Video} other {Bild}} aufgenommen mit {person1} am {date}",
@@ -1080,7 +1092,7 @@
     "night_at_midnight": "Täglich um Mitternacht",
     "night_at_twoam": "Täglich nachts um 2:00 Uhr"
   },
-  "invalid_date": "Ungültiges Datum ",
+  "invalid_date": "Ungültiges Datum",
   "invalid_date_format": "Ungültiges Datumsformat",
   "invite_people": "Personen einladen",
   "invite_to_album": "Zum Album einladen",
@@ -1120,7 +1132,7 @@
   "local_network": "Lokales Netzwerk",
   "local_network_sheet_info": "Die App stellt über diese URL eine Verbindung zum Server her, wenn sie das angegebene WLAN-Netzwerk verwendet",
   "location_permission": "Standort Genehmigung",
-  "location_permission_content": "Um die automatische Umschaltfunktion nutzen zu können, benötigt Immich eine genaue Standortberechtigung, damit es den Namen des aktuellen WLAN-Netzwerks ermitteln kann",
+  "location_permission_content": "Um die automatische Umschaltfunktion nutzen zu können, benötigt Immich genaue Standortberechtigung, damit es den Namen des aktuellen WLAN-Netzwerks ermitteln kann",
   "location_picker_choose_on_map": "Auf der Karte auswählen",
   "location_picker_latitude_error": "Gültigen Breitengrad eingeben",
   "location_picker_latitude_hint": "Breitengrad eingeben",
@@ -1143,7 +1155,7 @@
   "login_form_err_leading_whitespace": "Leerzeichen am Anfang",
   "login_form_err_trailing_whitespace": "Leerzeichen am Ende",
   "login_form_failed_get_oauth_server_config": "Fehler beim Login per OAuth, bitte Server-URL überprüfen",
-  "login_form_failed_get_oauth_server_disable": "Die OAuth-Funktion ist auf diesem Server nicht verfügbar.",
+  "login_form_failed_get_oauth_server_disable": "Die OAuth-Funktion ist auf diesem Server nicht verfügbar",
   "login_form_failed_login": "Fehler beim Login, bitte überprüfe die Server-URL, deine E-Mail oder das Passwort",
   "login_form_handshake_exception": "Fehler beim Verbindungsaufbau mit dem Server. Falls du ein selbstsigniertes Zertifikat verwendest, aktiviere die Unterstützung dafür in den Einstellungen.",
   "login_form_password_hint": "Passwort",
@@ -1151,8 +1163,8 @@
   "login_form_server_empty": "Serveradresse eingeben.",
   "login_form_server_error": "Es Konnte sich nicht mit dem Server verbunden werden.",
   "login_has_been_disabled": "Die Anmeldung wurde deaktiviert.",
-  "login_password_changed_error": "Fehler beim Passwort ändern!",
-  "login_password_changed_success": "Passwort erfolgreich geändert.",
+  "login_password_changed_error": "Fehler beim Ändern deines Passwort",
+  "login_password_changed_success": "Passwort erfolgreich geändert",
   "logout_all_device_confirmation": "Bist du sicher, dass du alle Geräte abmelden willst?",
   "logout_this_device_confirmation": "Bist du sicher, dass du dieses Gerät abmelden willst?",
   "longitude": "Längengrad",
@@ -1170,9 +1182,9 @@
   "manage_your_devices": "Deine eingeloggten Geräte verwalten",
   "manage_your_oauth_connection": "Deine OAuth-Verknüpfung verwalten",
   "map": "Karte",
-  "map_assets_in_bound": "{} Foto",
-  "map_assets_in_bounds": "{} Fotos",
-  "map_cannot_get_user_location": "Standort konnte nicht ermittelt werden!",
+  "map_assets_in_bound": "{count} Foto",
+  "map_assets_in_bounds": "{count} Fotos",
+  "map_cannot_get_user_location": "Standort konnte nicht ermittelt werden",
   "map_location_dialog_yes": "Ja",
   "map_location_picker_page_use_location": "Aufnahmeort verwenden",
   "map_location_service_disabled_content": "Ortungsdienste müssen aktiviert sein, um Inhalte am aktuellen Standort anzuzeigen. Willst du die Ortungsdienste jetzt aktivieren?",
@@ -1181,29 +1193,32 @@
   "map_marker_with_image": "Kartenmarkierung mit Bild",
   "map_no_assets_in_bounds": "Keine Fotos in dieser Gegend",
   "map_no_location_permission_content": "Ortungsdienste müssen aktiviert sein, um Inhalte am aktuellen Standort anzuzeigen. Willst du die Ortungsdienste jetzt aktivieren?",
-  "map_no_location_permission_title": "Kein Zugriff auf den Standort!",
+  "map_no_location_permission_title": "Kein Zugriff auf den Standort",
   "map_settings": "Karteneinstellungen",
   "map_settings_dark_mode": "Dunkler Modus",
   "map_settings_date_range_option_day": "Letzte 24 Stunden",
-  "map_settings_date_range_option_days": "Letzte {} Tage",
+  "map_settings_date_range_option_days": "Letzten {days} Tage",
   "map_settings_date_range_option_year": "Letztes Jahr",
-  "map_settings_date_range_option_years": "Letzte {} Jahre",
+  "map_settings_date_range_option_years": "Letzten {years} Jahre",
   "map_settings_dialog_title": "Karteneinstellungen",
   "map_settings_include_show_archived": "Archivierte anzeigen",
   "map_settings_include_show_partners": "Partner einbeziehen",
   "map_settings_only_show_favorites": "Nur Favoriten anzeigen",
   "map_settings_theme_settings": "Karten Design",
   "map_zoom_to_see_photos": "Ansicht verkleinern um Fotos zu sehen",
+  "mark_all_as_read": "Alle als gelesen markieren",
+  "mark_as_read": "Als gelesen markieren",
+  "marked_all_as_read": "Alle als gelesen markiert",
   "matches": "Treffer",
   "media_type": "Medientyp",
   "memories": "Erinnerungen",
   "memories_all_caught_up": "Alles aufgeholt",
-  "memories_check_back_tomorrow": "Schau morgen wieder vorbei für weitere Erinnerungen!",
+  "memories_check_back_tomorrow": "Schau morgen wieder vorbei für weitere Erinnerungen",
   "memories_setting_description": "Verwalte, was du in deinen Erinnerungen siehst",
   "memories_start_over": "Erneut beginnen",
   "memories_swipe_to_close": "Nach oben Wischen zum schließen",
   "memories_year_ago": "ein Jahr her",
-  "memories_years_ago": "{} Jahre her",
+  "memories_years_ago": "Vor {years} Jahren",
   "memory": "Erinnerung",
   "memory_lane_title": "Foto-Erinnerungen {title}",
   "menu": "Menü",
@@ -1220,9 +1235,11 @@
   "month": "Monat",
   "monthly_title_text_date_format": "MMMM y",
   "more": "Mehr",
+  "moved_to_archive": "{count, plural, one {# Datei} other {# Dateien}} archiviert",
+  "moved_to_library": "{count, plural, one {# Datei} other {# Dateien}} in die Bibliothek verschoben",
   "moved_to_trash": "In den Papierkorb verschoben",
-  "multiselect_grid_edit_date_time_err_read_only": "Das Datum und die Uhrzeit von schreibgeschützten Inhalten kann nicht verändert werden, überspringen...",
-  "multiselect_grid_edit_gps_err_read_only": "Der Aufnahmeort von schreibgeschützten Inhalten kann nicht verändert werden, überspringen...",
+  "multiselect_grid_edit_date_time_err_read_only": "Das Datum und die Uhrzeit von schreibgeschützten Inhalten kann nicht verändert werden, überspringen",
+  "multiselect_grid_edit_gps_err_read_only": "Der Aufnahmeort von schreibgeschützten Inhalten kann nicht verändert werden, überspringen",
   "mute_memories": "Erinnerungen stumm schalten",
   "my_albums": "Meine Alben",
   "name": "Name",
@@ -1234,6 +1251,7 @@
   "new_api_key": "Neuer API-Schlüssel",
   "new_password": "Neues Passwort",
   "new_person": "Neue Person",
+  "new_pin_code": "Neuer PIN Code",
   "new_user_created": "Neuer Benutzer wurde erstellt",
   "new_version_available": "NEUE VERSION VERFÜGBAR",
   "newest_first": "Neueste zuerst",
@@ -1252,6 +1270,8 @@
   "no_favorites_message": "Füge Favoriten hinzu, um deine besten Bilder und Videos schnell zu finden",
   "no_libraries_message": "Eine externe Bibliothek erstellen, um deine Fotos und Videos anzusehen",
   "no_name": "Kein Name",
+  "no_notifications": "Keine Benachrichtigungen",
+  "no_people_found": "Keine passenden Personen gefunden",
   "no_places": "Keine Orte",
   "no_results": "Keine Ergebnisse",
   "no_results_description": "Versuche es mit einem Synonym oder einem allgemeineren Stichwort",
@@ -1260,8 +1280,8 @@
   "not_selected": "Nicht ausgewählt",
   "note_apply_storage_label_to_previously_uploaded assets": "Hinweis: Um eine Speicherpfadbezeichnung anzuwenden, starte den",
   "notes": "Notizen",
-  "notification_permission_dialog_content": "Um Benachrichtigungen zu aktivieren, navigiere zu Einstellungen und klicke \"Erlauben\"",
-  "notification_permission_list_tile_content": "Erlaube Berechtigung für Benachrichtigungen",
+  "notification_permission_dialog_content": "Um Benachrichtigungen zu aktivieren, navigiere zu Einstellungen und klicke \"Erlauben\".",
+  "notification_permission_list_tile_content": "Erlaube Berechtigung für Benachrichtigungen.",
   "notification_permission_list_tile_enable_button": "Aktiviere Benachrichtigungen",
   "notification_permission_list_tile_title": "Benachrichtigungs-Berechtigung",
   "notification_toggle_setting_description": "E-Mail-Benachrichtigungen aktivieren",
@@ -1282,6 +1302,7 @@
   "onboarding_welcome_user": "Willkommen, {user}",
   "online": "Online",
   "only_favorites": "Nur Favoriten",
+  "open": "Öffnen",
   "open_in_map_view": "In Kartenansicht öffnen",
   "open_in_openstreetmap": "In OpenStreetMap öffnen",
   "open_the_search_filters": "Die Suchfilter öffnen",
@@ -1305,7 +1326,7 @@
   "partner_page_partner_add_failed": "Fehler beim Partner hinzufügen",
   "partner_page_select_partner": "Partner auswählen",
   "partner_page_shared_to_title": "Geteilt mit",
-  "partner_page_stop_sharing_content": "{} wird nicht mehr auf deine Fotos zugreifen können.",
+  "partner_page_stop_sharing_content": "{partner} wird nicht mehr auf deine Fotos zugreifen können.",
   "partner_sharing": "Partner-Sharing",
   "partners": "Partner",
   "password": "Passwort",
@@ -1351,6 +1372,9 @@
   "photos_count": "{count, plural, one {{count, number} Foto} other {{count, number} Fotos}}",
   "photos_from_previous_years": "Fotos von vorherigen Jahren",
   "pick_a_location": "Wähle einen Ort",
+  "pin_code_changed_successfully": "PIN Code erfolgreich geändert",
+  "pin_code_reset_successfully": "PIN Code erfolgreich zurückgesetzt",
+  "pin_code_setup_successfully": "PIN Code erfolgreich festgelegt",
   "place": "Ort",
   "places": "Orte",
   "places_count": "{count, plural, one {{count, number} Ort} other {{count, number} Orte}}",
@@ -1368,10 +1392,11 @@
   "previous_or_next_photo": "Vorheriges oder nächstes Foto",
   "primary": "Primär",
   "privacy": "Privatsphäre",
+  "profile": "Profil",
   "profile_drawer_app_logs": "Logs",
   "profile_drawer_client_out_of_date_major": "Mobile-App ist veraltet. Bitte aktualisiere auf die neueste Major-Version.",
   "profile_drawer_client_out_of_date_minor": "Mobile-App ist veraltet. Bitte aktualisiere auf die neueste Minor-Version.",
-  "profile_drawer_client_server_up_to_date": "Die App-Version / Server-Version sind aktuell.",
+  "profile_drawer_client_server_up_to_date": "Die App- und Server-Versionen sind aktuell",
   "profile_drawer_github": "GitHub",
   "profile_drawer_server_out_of_date_major": "Server-Version ist veraltet. Bitte aktualisiere auf die neueste Major-Version.",
   "profile_drawer_server_out_of_date_minor": "Server-Version ist veraltet. Bitte aktualisiere auf die neueste Minor-Version.",
@@ -1381,7 +1406,7 @@
   "public_share": "Öffentliche Freigabe",
   "purchase_account_info": "Unterstützer",
   "purchase_activated_subtitle": "Danke für die Unterstützung von Immich und Open-Source Software",
-  "purchase_activated_time": "Aktiviert am {date, date}",
+  "purchase_activated_time": "Aktiviert am {date}",
   "purchase_activated_title": "Dein Schlüssel wurde erfolgreich aktiviert",
   "purchase_button_activate": "Aktivieren",
   "purchase_button_buy": "Kaufen",
@@ -1426,6 +1451,8 @@
   "recent_searches": "Letzte Suchen",
   "recently_added": "Kürzlich hinzugefügt",
   "recently_added_page_title": "Zuletzt hinzugefügt",
+  "recently_taken": "Kürzlich aufgenommen",
+  "recently_taken_page_title": "Kürzlich aufgenommen",
   "refresh": "Aktualisieren",
   "refresh_encoded_videos": "Kodierte Videos aktualisieren",
   "refresh_faces": "Gesichter aktualisieren",
@@ -1468,6 +1495,7 @@
   "reset": "Zurücksetzen",
   "reset_password": "Passwort zurücksetzen",
   "reset_people_visibility": "Sichtbarkeit von Personen zurücksetzen",
+  "reset_pin_code": "PIN Code zurücksetzen",
   "reset_to_default": "Auf Standard zurücksetzen",
   "resolve_duplicates": "Duplikate entfernen",
   "resolved_all_duplicates": "Alle Duplikate aufgelöst",
@@ -1504,7 +1532,7 @@
   "search_city": "Suche nach Stadt...",
   "search_country": "Suche nach Land...",
   "search_filter_apply": "Filter anwenden",
-  "search_filter_camera_title": "Kameratyp auswählen ",
+  "search_filter_camera_title": "Kameratyp auswählen",
   "search_filter_date": "Datum",
   "search_filter_date_interval": "{start} bis {end}",
   "search_filter_date_title": "Wähle einen Zeitraum",
@@ -1512,10 +1540,10 @@
   "search_filter_display_options": "Anzeigeeinstellungen",
   "search_filter_filename": "Suche nach Dateiname",
   "search_filter_location": "Ort",
-  "search_filter_location_title": "Ort auswählen ",
+  "search_filter_location_title": "Ort auswählen",
   "search_filter_media_type": "Medientyp",
-  "search_filter_media_type_title": "Medientyp auswählen ",
-  "search_filter_people_title": "Personen auswählen ",
+  "search_filter_media_type_title": "Medientyp auswählen",
+  "search_filter_people_title": "Personen auswählen",
   "search_for": "Suche nach",
   "search_for_existing_person": "Suche nach vorhandener Person",
   "search_no_more_result": "Keine weiteren Ergebnisse",
@@ -1560,6 +1588,7 @@
   "select_keep_all": "Alle behalten",
   "select_library_owner": "Bibliotheksbesitzer auswählen",
   "select_new_face": "Neues Gesicht auswählen",
+  "select_person_to_tag": "Wählen Sie eine Person zum Markieren aus",
   "select_photos": "Fotos auswählen",
   "select_trash_all": "Alle löschen",
   "select_user_for_sharing_page_err_album": "Album konnte nicht erstellt werden",
@@ -1590,13 +1619,13 @@
   "setting_languages_apply": "Anwenden",
   "setting_languages_subtitle": "App-Sprache ändern",
   "setting_languages_title": "Sprachen",
-  "setting_notifications_notify_failures_grace_period": "Benachrichtigung bei Fehler/n in der Hintergrundsicherung: {}",
-  "setting_notifications_notify_hours": "{} Stunden",
+  "setting_notifications_notify_failures_grace_period": "Benachrichtigung bei Fehler(n) in der Hintergrundsicherung: {duration}",
+  "setting_notifications_notify_hours": "{count} Stunden",
   "setting_notifications_notify_immediately": "sofort",
-  "setting_notifications_notify_minutes": "{} Minuten",
+  "setting_notifications_notify_minutes": "{count} Minuten",
   "setting_notifications_notify_never": "niemals",
-  "setting_notifications_notify_seconds": "{} Sekunden",
-  "setting_notifications_single_progress_subtitle": "Detaillierter Upload-Fortschritt für jedes Element.",
+  "setting_notifications_notify_seconds": "{count} Sekunden",
+  "setting_notifications_single_progress_subtitle": "Detaillierter Upload-Fortschritt für jedes Element",
   "setting_notifications_single_progress_title": "Zeige den detaillierten Fortschritt der Hintergrundsicherung",
   "setting_notifications_subtitle": "Benachrichtigungen anpassen",
   "setting_notifications_total_progress_subtitle": "Gesamter Upload-Fortschritt (abgeschlossen/Anzahl Elemente)",
@@ -1605,14 +1634,15 @@
   "setting_video_viewer_original_video_subtitle": "Beim Streaming eines Videos vom Server wird das Original abgespielt, auch wenn eine Transkodierung verfügbar ist. Kann zu Pufferung führen. Lokal verfügbare Videos werden unabhängig von dieser Einstellung in Originalqualität wiedergegeben.",
   "setting_video_viewer_original_video_title": "Originalvideo erzwingen",
   "settings": "Einstellungen",
-  "settings_require_restart": "Bitte starte Immich neu, um diese Einstellung anzuwenden.",
+  "settings_require_restart": "Bitte starte Immich neu, um diese Einstellung anzuwenden",
   "settings_saved": "Einstellungen gespeichert",
+  "setup_pin_code": "Einen PIN Code festlegen",
   "share": "Teilen",
   "share_add_photos": "Fotos hinzufügen",
-  "share_assets_selected": "{} ausgewählt",
+  "share_assets_selected": "{count} ausgewählt",
   "share_dialog_preparing": "Vorbereiten...",
   "shared": "Geteilt",
-  "shared_album_activities_input_disable": "Kommentare sind deaktiviert.",
+  "shared_album_activities_input_disable": "Kommentare sind deaktiviert",
   "shared_album_activity_remove_content": "Möchtest du diese Aktivität entfernen?",
   "shared_album_activity_remove_title": "Aktivität entfernen",
   "shared_album_section_people_action_error": "Fehler beim Verlassen oder Entfernen aus dem Album",
@@ -1623,32 +1653,32 @@
   "shared_by_user": "Von {user} geteilt",
   "shared_by_you": "Von dir geteilt",
   "shared_from_partner": "Fotos von {partner}",
-  "shared_intent_upload_button_progress_text": "{} / {} hochgeladen",
+  "shared_intent_upload_button_progress_text": "{current} / {total} hochgeladen",
   "shared_link_app_bar_title": "Geteilte Links",
   "shared_link_clipboard_copied_massage": "Link kopiert",
-  "shared_link_clipboard_text": "Link: {}\nPasswort: {}",
+  "shared_link_clipboard_text": "Link: {link}\nPasswort: {password}",
   "shared_link_create_error": "Fehler beim Erstellen der Linkfreigabe",
   "shared_link_edit_description_hint": "Beschreibung eingeben",
   "shared_link_edit_expire_after_option_day": "1 Tag",
-  "shared_link_edit_expire_after_option_days": "{} Tage",
+  "shared_link_edit_expire_after_option_days": "{count} Tagen",
   "shared_link_edit_expire_after_option_hour": "1 Stunde",
-  "shared_link_edit_expire_after_option_hours": "{} Stunden",
+  "shared_link_edit_expire_after_option_hours": "{count} Stunden",
   "shared_link_edit_expire_after_option_minute": "1 Minute",
-  "shared_link_edit_expire_after_option_minutes": "{} Minuten",
-  "shared_link_edit_expire_after_option_months": "{} Monat/en",
-  "shared_link_edit_expire_after_option_year": "{} Jahr/en",
+  "shared_link_edit_expire_after_option_minutes": "{count} Minuten",
+  "shared_link_edit_expire_after_option_months": "{count} Monaten",
+  "shared_link_edit_expire_after_option_year": "{count} Jahr",
   "shared_link_edit_password_hint": "Passwort eingeben",
   "shared_link_edit_submit_button": "Link aktualisieren",
   "shared_link_error_server_url_fetch": "Fehler beim Ermitteln der Server-URL",
-  "shared_link_expires_day": "Verfällt in {} Tag",
-  "shared_link_expires_days": "Verfällt in {} Tag/en",
-  "shared_link_expires_hour": "Verfällt in {} Stunde",
-  "shared_link_expires_hours": "Verfällt in {} Stunde/n",
-  "shared_link_expires_minute": "Verfällt in {} Minute",
-  "shared_link_expires_minutes": "Verfällt in {} Minute/n",
+  "shared_link_expires_day": "Läuft ab in {count} Tag",
+  "shared_link_expires_days": "Läuft ab in {count} Tagen",
+  "shared_link_expires_hour": "Läuft ab in {count} Stunde",
+  "shared_link_expires_hours": "Läuft ab in {count} Stunden",
+  "shared_link_expires_minute": "Läuft ab in {count} Minute",
+  "shared_link_expires_minutes": "Läuft ab in {count} Minuten",
   "shared_link_expires_never": "Läuft nie ab",
-  "shared_link_expires_second": "Verfällt in {} Sekunde",
-  "shared_link_expires_seconds": "Verfällt in {} Sekunde/n",
+  "shared_link_expires_second": "Läuft ab in {count} Sekunde",
+  "shared_link_expires_seconds": "Läuft ab in {count} Sekunden",
   "shared_link_individual_shared": "Individuell geteilt",
   "shared_link_info_chip_metadata": "EXIF",
   "shared_link_manage_links": "Geteilte Links verwalten",
@@ -1723,6 +1753,7 @@
   "stop_sharing_photos_with_user": "Aufhören Fotos mit diesem Benutzer zu teilen",
   "storage": "Speicherplatz",
   "storage_label": "Speicherpfad",
+  "storage_quota": "Speicherplatz-Kontingent",
   "storage_usage": "{used} von {available} verwendet",
   "submit": "Bestätigen",
   "suggestions": "Vorschläge",
@@ -1739,7 +1770,7 @@
   "tag_assets": "Dateien taggen",
   "tag_created": "Tag erstellt: {tag}",
   "tag_feature_description": "Durchsuchen von Fotos und Videos, gruppiert nach logischen Tag-Themen",
-  "tag_not_found_question": "Kein Tag zu finden? <link>Erstelle einen neuen Tag.</link>",
+  "tag_not_found_question": "Kein Tag vorhanden? <link>Erstelle einen neuen Tag.</link>",
   "tag_people": "Personen taggen",
   "tag_updated": "Tag aktualisiert: {tag}",
   "tagged_assets": "{count, plural, one {# Datei} other {# Dateien}} getagged",
@@ -1749,12 +1780,12 @@
   "theme_selection": "Themenauswahl",
   "theme_selection_description": "Automatische Einstellung des Themes auf Hell oder Dunkel, je nach Systemeinstellung des Browsers",
   "theme_setting_asset_list_storage_indicator_title": "Forschrittsbalken der Sicherung auf dem Vorschaubild",
-  "theme_setting_asset_list_tiles_per_row_title": "Anzahl der Elemente pro Reihe ({})",
-  "theme_setting_colorful_interface_subtitle": "Primärfarbe auf App-Hintergrund anwenden",
+  "theme_setting_asset_list_tiles_per_row_title": "Anzahl der Elemente pro Reihe ({count})",
+  "theme_setting_colorful_interface_subtitle": "Primärfarbe auf App-Hintergrund anwenden.",
   "theme_setting_colorful_interface_title": "Farbige UI-Oberfläche",
   "theme_setting_image_viewer_quality_subtitle": "Einstellen der Qualität des Detailbildbetrachters",
   "theme_setting_image_viewer_quality_title": "Qualität des Bildbetrachters",
-  "theme_setting_primary_color_subtitle": "Farbauswahl für primäre Aktionen und Akzente",
+  "theme_setting_primary_color_subtitle": "Farbauswahl für primäre Aktionen und Akzente.",
   "theme_setting_primary_color_title": "Primärfarbe",
   "theme_setting_system_primary_color_title": "Systemfarbe verwenden",
   "theme_setting_system_theme_switch": "Automatisch (Systemeinstellung)",
@@ -1784,13 +1815,15 @@
   "trash_no_results_message": "Gelöschte Fotos und Videos werden hier angezeigt.",
   "trash_page_delete_all": "Alle löschen",
   "trash_page_empty_trash_dialog_content": "Elemente im Papierkorb löschen? Diese Elemente werden dauerhaft aus Immich entfernt",
-  "trash_page_info": "Elemente im Papierkorb werden nach {} Tagen endgültig gelöscht.",
+  "trash_page_info": "Elemente im Papierkorb werden nach {days} Tagen endgültig gelöscht",
   "trash_page_no_assets": "Es gibt keine Daten im Papierkorb",
   "trash_page_restore_all": "Alle wiederherstellen",
   "trash_page_select_assets_btn": "Elemente auswählen",
-  "trash_page_title": "Papierkorb ({})",
+  "trash_page_title": "Papierkorb ({count})",
   "trashed_items_will_be_permanently_deleted_after": "Gelöschte Objekte werden nach {days, plural, one {# Tag} other {# Tagen}} endgültig gelöscht.",
   "type": "Typ",
+  "unable_to_change_pin_code": "PIN Code konnte nicht geändert werden",
+  "unable_to_setup_pin_code": "PIN Code konnte nicht festgelegt werden",
   "unarchive": "Entarchivieren",
   "unarchived_count": "{count, plural, other {# entarchiviert}}",
   "unfavorite": "Entfavorisieren",
@@ -1814,6 +1847,7 @@
   "untracked_files": "Unverfolgte Dateien",
   "untracked_files_decription": "Diese Dateien werden nicht von der Application getrackt. Sie können das Ergebnis fehlgeschlagener Verschiebungen, unterbrochener Uploads oder aufgrund eines Fehlers sein",
   "up_next": "Weiter",
+  "updated_at": "Aktualisiert",
   "updated_password": "Passwort aktualisiert",
   "upload": "Hochladen",
   "upload_concurrency": "Parallelität beim Hochladen",
@@ -1826,15 +1860,18 @@
   "upload_status_errors": "Fehler",
   "upload_status_uploaded": "Hochgeladen",
   "upload_success": "Hochladen erfolgreich. Aktualisiere die Seite, um neue hochgeladene Dateien zu sehen.",
-  "upload_to_immich": "Zu Immich hochladen ({})",
+  "upload_to_immich": "Auf Immich hochladen ({count})",
   "uploading": "Wird hochgeladen",
   "url": "URL",
   "usage": "Verwendung",
   "use_current_connection": "aktuelle Verbindung verwenden",
   "use_custom_date_range": "Stattdessen einen benutzerdefinierten Datumsbereich verwenden",
   "user": "Nutzer",
+  "user_has_been_deleted": "Dieser Benutzer wurde gelöscht.",
   "user_id": "Nutzer-ID",
   "user_liked": "{type, select, photo {Dieses Foto} video {Dieses Video} asset {Diese Datei} other {Dies}} gefällt {user}",
+  "user_pin_code_settings": "PIN Code",
+  "user_pin_code_settings_description": "Verwalte deinen PIN Code",
   "user_purchase_settings": "Kauf",
   "user_purchase_settings_description": "Kauf verwalten",
   "user_role_set": "{user} als {role} festlegen",