chore: version v1.132.1

* chore: revert #16732

* lint

.devcontainer/Dockerfile

@@ -1,4 +1,4 @@
-ARG BASEIMAGE=mcr.microsoft.com/devcontainers/typescript-node:22@sha256:9791f4aa527774bc370c6bd2f6705ce5a686f1e6f204badd8dfaacce28c631ae
+ARG BASEIMAGE=mcr.microsoft.com/devcontainers/typescript-node:22@sha256:a20b8a3538313487ac9266875bbf733e544c1aa2091df2bb99ab592a6d4f7399
 FROM ${BASEIMAGE}
 
 # Flutter SDK

.gitattributes

@@ -6,6 +6,9 @@ mobile/openapi/**/*.dart linguist-generated=true
 mobile/lib/**/*.g.dart -diff -merge
 mobile/lib/**/*.g.dart linguist-generated=true
 
+mobile/lib/**/*.drift.dart -diff -merge
+mobile/lib/**/*.drift.dart linguist-generated=true
+
 open-api/typescript-sdk/fetch-client.ts -diff -merge
 open-api/typescript-sdk/fetch-client.ts linguist-generated=true
 

.github/.nvmrc

@@ -0,0 +1 @@
+22.14.0

.github/DISCUSSION_TEMPLATE/feature-request.yaml

@@ -1,5 +1,5 @@
-title: "[Feature] feature-name-goes-here"
-labels: ["feature"]
+title: '[Feature] feature-name-goes-here'
+labels: ['feature']
 
 body:
   - type: markdown
@@ -13,7 +13,7 @@ body:
     attributes:
       label: I have searched the existing feature requests, both open and closed, to make sure this is not a duplicate request.
       options:
-        - label: "Yes"
+        - label: 'Yes'
           required: true
 
   - type: textarea

.github/ISSUE_TEMPLATE/bug_report.yaml

@@ -5,7 +5,7 @@ body:
     attributes:
       label: I have searched the existing issues, both open and closed, to make sure this is not a duplicate report.
       options:
-        - label: "Yes"
+        - label: 'Yes'
           required: true
 
   - type: markdown
@@ -84,7 +84,7 @@ body:
     id: repro
     attributes:
       label: Reproduction steps
-      description: "How do you trigger this bug? Please walk us through it step by step."
+      description: 'How do you trigger this bug? Please walk us through it step by step.'
       value: |
         1.
         2.
@@ -97,12 +97,13 @@ body:
     id: logs
     attributes:
       label: Relevant log output
-      description: Please copy and paste any relevant logs below. (code formatting is
+      description:
+        Please copy and paste any relevant logs below. (code formatting is
         enabled, no need for backticks)
       render: shell
     validations:
       required: false
-      
+
   - type: textarea
     attributes:
       label: Additional information

.github/package-lock.json

@@ -0,0 +1,28 @@
+{
+  "name": ".github",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "devDependencies": {
+        "prettier": "^3.5.3"
+      }
+    },
+    "node_modules/prettier": {
+      "version": "3.5.3",
+      "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.5.3.tgz",
+      "integrity": "sha512-QQtaxnoDJeAkDvDKWCLiwIXkTgRhwYDEQCghU9Z6q03iyek/rxRh/2lC3HB7P8sWT2xC/y5JDctPLBIGzHKbhw==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "prettier": "bin/prettier.cjs"
+      },
+      "engines": {
+        "node": ">=14"
+      },
+      "funding": {
+        "url": "https://github.com/prettier/prettier?sponsor=1"
+      }
+    }
+  }
+}

.github/package.json

@@ -0,0 +1,9 @@
+{
+  "scripts": {
+    "format": "prettier --check .",
+    "format:fix": "prettier --write ."
+  },
+  "devDependencies": {
+    "prettier": "^3.5.3"
+  }
+}

.github/release.yml

@@ -1,33 +1,33 @@
-changelog:
-  categories:
-    - title: 🚨 Breaking Changes
-      labels:
-        - changelog:breaking-change
-
-    - title: 🫥 Deprecated Changes
-      labels:
-        - changelog:deprecated
-
-    - title: 🔒 Security
-      labels:
-        - changelog:security
-
-    - title: 🚀 Features
-      labels:
-        - changelog:feature
-
-    - title: 🌟 Enhancements
-      labels:
-        - changelog:enhancement
-
-    - title: 🐛 Bug fixes
-      labels:
-        - changelog:bugfix
-
-    - title: 📚 Documentation
-      labels:
-        - changelog:documentation
-
-    - title: 🌐 Translations
-      labels:
-        - changelog:translation
+changelog:
+  categories:
+    - title: 🚨 Breaking Changes
+      labels:
+        - changelog:breaking-change
+
+    - title: 🫥 Deprecated Changes
+      labels:
+        - changelog:deprecated
+
+    - title: 🔒 Security
+      labels:
+        - changelog:security
+
+    - title: 🚀 Features
+      labels:
+        - changelog:feature
+
+    - title: 🌟 Enhancements
+      labels:
+        - changelog:enhancement
+
+    - title: 🐛 Bug fixes
+      labels:
+        - changelog:bugfix
+
+    - title: 📚 Documentation
+      labels:
+        - changelog:documentation
+
+    - title: 🌐 Translations
+      labels:
+        - changelog:translation

.github/workflows/build-mobile.yml

@@ -7,6 +7,15 @@ on:
       ref:
         required: false
         type: string
+    secrets:
+      KEY_JKS:
+        required: true
+      ALIAS:
+        required: true
+      ANDROID_KEY_PASSWORD:
+        required: true
+      ANDROID_STORE_PASSWORD:
+        required: true
   pull_request:
   push:
     branches: [main]
@@ -15,16 +24,23 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   pre-job:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     outputs:
       should_run: ${{ steps.found_paths.outputs.mobile == 'true' || steps.should_force.outputs.should_force == 'true' }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
+
       - id: found_paths
-        uses: dorny/paths-filter@v3
+        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3
         with:
           filters: |
             mobile:
@@ -38,31 +54,26 @@ jobs:
   build-sign-android:
     name: Build and sign Android
     needs: pre-job
+    permissions:
+      contents: read
     # Skip when PR from a fork
     if: ${{ !github.event.pull_request.head.repo.fork && github.actor != 'dependabot[bot]' && needs.pre-job.outputs.should_run == 'true' }}
     runs-on: macos-14
 
     steps:
-      - name: Determine ref
-        id: get-ref
-        run: |
-          input_ref="${{ inputs.ref }}"
-          github_ref="${{ github.sha }}"
-          ref="${input_ref:-$github_ref}"
-          echo "ref=$ref" >> $GITHUB_OUTPUT
-
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
-          ref: ${{ steps.get-ref.outputs.ref }}
+          ref: ${{ inputs.ref || github.sha }}
+          persist-credentials: false
 
-      - uses: actions/setup-java@v4
+      - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4
         with:
           distribution: 'zulu'
           java-version: '17'
           cache: 'gradle'
 
       - name: Setup Flutter SDK
-        uses: subosito/flutter-action@v2
+        uses: subosito/flutter-action@e938fdf56512cc96ef2f93601a5a40bde3801046 # v2
         with:
           channel: 'stable'
           flutter-version-file: ./mobile/pubspec.yaml
@@ -78,6 +89,10 @@ jobs:
         working-directory: ./mobile
         run: flutter pub get
 
+      - name: Generate translation file
+        run: make translation
+        working-directory: ./mobile
+
       - name: Build Android App Bundle
         working-directory: ./mobile
         env:
@@ -89,7 +104,7 @@ jobs:
           flutter build apk --release --split-per-abi --target-platform android-arm,android-arm64,android-x64
 
       - name: Publish Android Artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: release-apk-signed
           path: mobile/build/app/outputs/flutter-apk/*.apk

.github/workflows/cache-cleanup.yml

@@ -8,31 +8,38 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   cleanup:
     name: Cleanup
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      actions: write
     steps:
       - name: Check out code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
 
       - name: Cleanup
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          REF: ${{ github.ref }}
         run: |
           gh extension install actions/gh-actions-cache
 
           REPO=${{ github.repository }}
-          BRANCH=${{ github.ref }}
 
           echo "Fetching list of cache keys"
-          cacheKeysForPR=$(gh actions-cache list -R $REPO -B $BRANCH -L 100 | cut -f 1 )
+          cacheKeysForPR=$(gh actions-cache list -R $REPO -B ${REF} -L 100 | cut -f 1 )
 
           ## Setting this to not fail the workflow while deleting cache keys.
           set +e
           echo "Deleting caches..."
           for cacheKey in $cacheKeysForPR
           do
-              gh actions-cache delete $cacheKey -R $REPO -B $BRANCH --confirm
+              gh actions-cache delete $cacheKey -R "$REPO" -B "${REF}" --confirm
           done
           echo "Done"
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/cli.yml

@@ -6,7 +6,6 @@ on:
       - 'cli/**'
       - '.github/workflows/cli.yml'
   pull_request:
-    branches: [main]
     paths:
       - 'cli/**'
       - '.github/workflows/cli.yml'
@@ -17,21 +16,25 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
-permissions:
-  packages: write
+permissions: {}
 
 jobs:
   publish:
     name: CLI Publish
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     defaults:
       run:
         working-directory: ./cli
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
+
       # Setup .npmrc file to publish to npm
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: './cli/.nvmrc'
           registry-url: 'https://registry.npmjs.org'
@@ -49,20 +52,25 @@ jobs:
   docker:
     name: Docker
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     needs: publish
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3.6.0
+        uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3.10.0
+        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
         if: ${{ !github.event.pull_request.head.repo.fork }}
         with:
           registry: ghcr.io
@@ -77,7 +85,7 @@ jobs:
 
       - name: Generate docker image tags
         id: metadata
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5
         with:
           flavor: |
             latest=false
@@ -88,7 +96,7 @@ jobs:
             type=raw,value=latest,enable=${{ github.event_name == 'release' }}
 
       - name: Build and push image
-        uses: docker/build-push-action@v6.15.0
+        uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
         with:
           file: cli/Dockerfile
           platforms: linux/amd64,linux/arm64

.github/workflows/codeql-analysis.yml

@@ -9,14 +9,14 @@
 # the `language` matrix defined below to confirm you have the correct set of
 # supported CodeQL languages.
 #
-name: "CodeQL"
+name: 'CodeQL'
 
 on:
   push:
-    branches: [ "main" ]
+    branches: ['main']
   pull_request:
     # The branches below must be a subset of the branches above
-    branches: [ "main" ]
+    branches: ['main']
   schedule:
     - cron: '20 13 * * 1'
 
@@ -24,6 +24,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   analyze:
     name: Analyze
@@ -36,43 +38,44 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        language: [ 'javascript', 'python' ]
+        language: ['javascript', 'python']
         # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
         # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
 
     steps:
-    - name: Checkout repository
-      uses: actions/checkout@v4
+      - name: Checkout repository
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
 
-    # Initializes the CodeQL tools for scanning.
-    - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
-      with:
-        languages: ${{ matrix.language }}
-        # If you wish to specify custom queries, you can do so here or in a config file.
-        # By default, queries listed here will override any specified in a config file.
-        # Prefix the list here with "+" to use these queries and those in the config file.
+      # Initializes the CodeQL tools for scanning.
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@45775bd8235c68ba998cffa5171334d58593da47 # v3
+        with:
+          languages: ${{ matrix.language }}
+          # If you wish to specify custom queries, you can do so here or in a config file.
+          # By default, queries listed here will override any specified in a config file.
+          # Prefix the list here with "+" to use these queries and those in the config file.
 
-        # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
-        # queries: security-extended,security-and-quality
+          # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
+          # queries: security-extended,security-and-quality
 
+      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+      # If this step fails, then you should remove it and run the build manually (see below)
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@45775bd8235c68ba998cffa5171334d58593da47 # v3
 
-    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
-    # If this step fails, then you should remove it and run the build manually (see below)
-    - name: Autobuild
-      uses: github/codeql-action/autobuild@v3
+      # ℹ️ Command-line programs to run using the OS shell.
+      # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
 
-    # ℹ️ Command-line programs to run using the OS shell.
-    # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
+      #   If the Autobuild fails above, remove it and uncomment the following three lines.
+      #   modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
 
-    #   If the Autobuild fails above, remove it and uncomment the following three lines.
-    #   modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
+      # - run: |
+      #   echo "Run, Build Application using script"
+      #   ./location_of_script_within_repo/buildscript.sh
 
-    # - run: |
-    #   echo "Run, Build Application using script"
-    #   ./location_of_script_within_repo/buildscript.sh
-
-    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
-      with:
-        category: "/language:${{matrix.language}}"
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@45775bd8235c68ba998cffa5171334d58593da47 # v3
+        with:
+          category: '/language:${{matrix.language}}'

.github/workflows/docker.yml

@@ -12,20 +12,23 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
-permissions:
-  packages: write
+permissions: {}
 
 jobs:
   pre-job:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     outputs:
       should_run_server: ${{ steps.found_paths.outputs.server == 'true' || steps.should_force.outputs.should_force == 'true' }}
       should_run_ml: ${{ steps.found_paths.outputs.machine-learning == 'true' || steps.should_force.outputs.should_force == 'true' }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
       - id: found_paths
-        uses: dorny/paths-filter@v3
+        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3
         with:
           filters: |
             server:
@@ -45,56 +48,67 @@ jobs:
   retag_ml:
     name: Re-Tag ML
     needs: pre-job
+    permissions:
+      contents: read
+      packages: write
     if: ${{ needs.pre-job.outputs.should_run_ml == 'false' && !github.event.pull_request.head.repo.fork }}
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        suffix: ["", "-cuda", "-openvino", "-armnn"]
-    steps:
-        - name: Login to GitHub Container Registry
-          uses: docker/login-action@v3
-          with:
-            registry: ghcr.io
-            username: ${{ github.repository_owner }}
-            password: ${{ secrets.GITHUB_TOKEN }}
-        - name: Re-tag image
-          run: |
-              REGISTRY_NAME="ghcr.io"
-              REPOSITORY=${{ github.repository_owner }}/immich-machine-learning
-              TAG_OLD=main${{ matrix.suffix }}
-              TAG_PR=${{ github.event.number == 0 && github.ref_name ||  format('pr-{0}', github.event.number)  }}${{ matrix.suffix }}
-              TAG_COMMIT=commit-${{ github.event_name != 'pull_request' && github.sha || github.event.pull_request.head.sha }}${{ matrix.suffix }}
-              docker buildx imagetools create -t $REGISTRY_NAME/$REPOSITORY:$TAG_PR $REGISTRY_NAME/$REPOSITORY:$TAG_OLD
-              docker buildx imagetools create -t $REGISTRY_NAME/$REPOSITORY:$TAG_COMMIT $REGISTRY_NAME/$REPOSITORY:$TAG_OLD
-
-  retag_server:
-    name: Re-Tag Server
-    needs: pre-job
-    if: ${{ needs.pre-job.outputs.should_run_server == 'false' && !github.event.pull_request.head.repo.fork }}
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        suffix: [""]
+        suffix: ['', '-cuda', '-rocm', '-openvino', '-armnn', '-rknn']
     steps:
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: Re-tag image
+        env:
+          REGISTRY_NAME: 'ghcr.io'
+          REPOSITORY: ${{ github.repository_owner }}/immich-machine-learning
+          TAG_OLD: main${{ matrix.suffix }}
+          TAG_PR: ${{ github.event.number == 0 && github.ref_name || format('pr-{0}', github.event.number) }}${{ matrix.suffix }}
+          TAG_COMMIT: commit-${{ github.event_name != 'pull_request' && github.sha || github.event.pull_request.head.sha }}${{ matrix.suffix }}
         run: |
-          REGISTRY_NAME="ghcr.io"
-          REPOSITORY=${{ github.repository_owner }}/immich-server
-          TAG_OLD=main${{ matrix.suffix }}
-          TAG_PR=${{ github.event.number == 0 && github.ref_name ||  format('pr-{0}', github.event.number)  }}${{ matrix.suffix }}
-          TAG_COMMIT=commit-${{ github.event_name != 'pull_request' && github.sha || github.event.pull_request.head.sha }}${{ matrix.suffix }}
-          docker buildx imagetools create -t $REGISTRY_NAME/$REPOSITORY:$TAG_PR $REGISTRY_NAME/$REPOSITORY:$TAG_OLD
-          docker buildx imagetools create -t $REGISTRY_NAME/$REPOSITORY:$TAG_COMMIT $REGISTRY_NAME/$REPOSITORY:$TAG_OLD
+          docker buildx imagetools create -t "${REGISTRY_NAME}/${REPOSITORY}:${TAG_PR}" "${REGISTRY_NAME}/${REPOSITORY}:${TAG_OLD}"
+          docker buildx imagetools create -t "${REGISTRY_NAME}/${REPOSITORY}:${TAG_COMMIT}" "${REGISTRY_NAME}/${REPOSITORY}:${TAG_OLD}"
+
+  retag_server:
+    name: Re-Tag Server
+    needs: pre-job
+    permissions:
+      contents: read
+      packages: write
+    if: ${{ needs.pre-job.outputs.should_run_server == 'false' && !github.event.pull_request.head.repo.fork }}
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        suffix: ['']
+    steps:
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Re-tag image
+        env:
+          REGISTRY_NAME: 'ghcr.io'
+          REPOSITORY: ${{ github.repository_owner }}/immich-server
+          TAG_OLD: main${{ matrix.suffix }}
+          TAG_PR: ${{ github.event.number == 0 && github.ref_name || format('pr-{0}', github.event.number) }}${{ matrix.suffix }}
+          TAG_COMMIT: commit-${{ github.event_name != 'pull_request' && github.sha || github.event.pull_request.head.sha }}${{ matrix.suffix }}
+        run: |
+          docker buildx imagetools create -t "${REGISTRY_NAME}/${REPOSITORY}:${TAG_PR}" "${REGISTRY_NAME}/${REPOSITORY}:${TAG_OLD}"
+          docker buildx imagetools create -t "${REGISTRY_NAME}/${REPOSITORY}:${TAG_COMMIT}" "${REGISTRY_NAME}/${REPOSITORY}:${TAG_OLD}"
 
   build_and_push_ml:
     name: Build and Push ML
     needs: pre-job
+    permissions:
+      contents: read
+      packages: write
     if: ${{ needs.pre-job.outputs.should_run_ml == 'true' }}
     runs-on: ${{ matrix.runner }}
     env:
@@ -120,6 +134,11 @@ jobs:
             device: cuda
             suffix: -cuda
 
+          - platform: linux/amd64
+            runner: mich
+            device: rocm
+            suffix: -rocm
+
           - platform: linux/amd64
             runner: ubuntu-latest
             device: openvino
@@ -130,6 +149,11 @@ jobs:
             device: armnn
             suffix: -armnn
 
+          - platform: linux/arm64
+            runner: ubuntu-24.04-arm
+            device: rknn
+            suffix: -rknn
+
     steps:
       - name: Prepare
         run: |
@@ -137,13 +161,15 @@ jobs:
           echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3.10.0
+        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
         if: ${{ !github.event.pull_request.head.repo.fork }}
         with:
           registry: ghcr.io
@@ -151,11 +177,14 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Generate cache key suffix
+        env:
+          REF: ${{ github.ref_name }}
         run: |
           if [[ "${{ github.event_name }}" == "pull_request" ]]; then
             echo "CACHE_KEY_SUFFIX=pr-${{ github.event.number }}" >> $GITHUB_ENV
           else
-            echo "CACHE_KEY_SUFFIX=$(echo ${{ github.ref_name }} | sed 's/[^a-zA-Z0-9]/-/g')" >> $GITHUB_ENV
+            SUFFIX=$(echo "${REF}" | sed 's/[^a-zA-Z0-9]/-/g')
+            echo "CACHE_KEY_SUFFIX=${SUFFIX}" >> $GITHUB_ENV
           fi
 
       - name: Generate cache target
@@ -165,17 +194,23 @@ jobs:
             # Essentially just ignore the cache output (forks can't write to registry cache)
             echo "cache-to=type=local,dest=/tmp/discard,ignore-error=true" >> $GITHUB_OUTPUT
           else
-            echo "cache-to=type=registry,ref=${{ env.GHCR_REPO }}-build-cache:${{ env.PLATFORM_PAIR }}-${{ matrix.device }}-${{ env.CACHE_KEY_SUFFIX }},mode=max,compression=zstd" >> $GITHUB_OUTPUT
+            echo "cache-to=type=registry,ref=${GHCR_REPO}-build-cache:${PLATFORM_PAIR}-${{ matrix.device }}-${CACHE_KEY_SUFFIX},mode=max,compression=zstd" >> $GITHUB_OUTPUT
           fi
 
+      - name: Generate docker image tags
+        id: meta
+        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5
+        env:
+          DOCKER_METADATA_PR_HEAD_SHA: 'true'
+
       - name: Build and push image
         id: build
-        uses: docker/build-push-action@v6.15.0
+        uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
         with:
           context: ${{ env.context }}
           file: ${{ env.file }}
           platforms: ${{ matrix.platforms }}
-          labels: ${{ steps.metadata.outputs.labels }}
+          labels: ${{ steps.meta.outputs.labels }}
           cache-to: ${{ steps.cache-target.outputs.cache-to }}
           cache-from: |
             type=registry,ref=${{ env.GHCR_REPO }}-build-cache:${{ env.PLATFORM_PAIR }}-${{ matrix.device }}-${{ env.CACHE_KEY_SUFFIX }}
@@ -189,13 +224,13 @@ jobs:
             BUILD_SOURCE_COMMIT=${{ github.sha }}
 
       - name: Export digest
-        run: |
+        run: | # zizmor: ignore[template-injection]
           mkdir -p ${{ runner.temp }}/digests
           digest="${{ steps.build.outputs.digest }}"
           touch "${{ runner.temp }}/digests/${digest#sha256:}"
 
       - name: Upload digest
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: ml-digests-${{ matrix.device }}-${{ env.PLATFORM_PAIR }}
           path: ${{ runner.temp }}/digests/*
@@ -205,6 +240,10 @@ jobs:
   merge_ml:
     name: Merge & Push ML
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      actions: read
+      packages: write
     if: ${{ needs.pre-job.outputs.should_run_ml == 'true' && !github.event.pull_request.head.repo.fork }}
     env:
       GHCR_REPO: ghcr.io/${{ github.repository_owner }}/immich-machine-learning
@@ -215,15 +254,19 @@ jobs:
           - device: cpu
           - device: cuda
             suffix: -cuda
+          - device: rocm
+            suffix: -rocm
           - device: openvino
             suffix: -openvino
           - device: armnn
             suffix: -armnn
+          - device: rknn
+            suffix: -rknn
     needs:
       - build_and_push_ml
     steps:
       - name: Download digests
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
         with:
           path: ${{ runner.temp }}/digests
           pattern: ml-digests-${{ matrix.device }}-*
@@ -231,26 +274,26 @@ jobs:
 
       - name: Login to Docker Hub
         if: ${{ github.event_name == 'release' }}
-        uses: docker/login-action@v3
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Login to GHCR
-        uses: docker/login-action@v3
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3
 
       - name: Generate docker image tags
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5
         env:
-          DOCKER_METADATA_PR_HEAD_SHA: "true"
+          DOCKER_METADATA_PR_HEAD_SHA: 'true'
         with:
           flavor: |
             # Disable latest tag
@@ -273,12 +316,31 @@ jobs:
       - name: Create manifest list and push
         working-directory: ${{ runner.temp }}/digests
         run: |
-          docker buildx imagetools create $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
-            $(printf '${{ env.GHCR_REPO }}@sha256:%s ' *)
+          # Process annotations
+          declare -a ANNOTATIONS=()
+          if [[ -n "$DOCKER_METADATA_OUTPUT_JSON" ]]; then
+            while IFS= read -r annotation; do
+              # Extract key and value by removing the manifest: prefix
+              if [[ "$annotation" =~ ^manifest:(.+)=(.+)$ ]]; then
+                key="${BASH_REMATCH[1]}"
+                value="${BASH_REMATCH[2]}"
+                # Use array to properly handle arguments with spaces
+                ANNOTATIONS+=(--annotation "index:$key=$value")
+              fi
+            done < <(jq -r '.annotations[]' <<< "$DOCKER_METADATA_OUTPUT_JSON")
+          fi
+
+          TAGS=$(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
+          SOURCE_ARGS=$(printf "${GHCR_REPO}@sha256:%s " *)
+
+          docker buildx imagetools create $TAGS "${ANNOTATIONS[@]}" $SOURCE_ARGS
 
   build_and_push_server:
     name: Build and Push Server
     runs-on: ${{ matrix.runner }}
+    permissions:
+      contents: read
+      packages: write
     needs: pre-job
     if: ${{ needs.pre-job.outputs.should_run_server == 'true' }}
     env:
@@ -301,13 +363,15 @@ jobs:
           echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
         if: ${{ !github.event.pull_request.head.repo.fork }}
         with:
           registry: ghcr.io
@@ -315,11 +379,14 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Generate cache key suffix
+        env:
+          REF: ${{ github.ref_name }}
         run: |
           if [[ "${{ github.event_name }}" == "pull_request" ]]; then
             echo "CACHE_KEY_SUFFIX=pr-${{ github.event.number }}" >> $GITHUB_ENV
           else
-            echo "CACHE_KEY_SUFFIX=$(echo ${{ github.ref_name }} | sed 's/[^a-zA-Z0-9]/-/g')" >> $GITHUB_ENV
+            SUFFIX=$(echo "${REF}" | sed 's/[^a-zA-Z0-9]/-/g')
+            echo "CACHE_KEY_SUFFIX=${SUFFIX}" >> $GITHUB_ENV
           fi
 
       - name: Generate cache target
@@ -329,17 +396,23 @@ jobs:
             # Essentially just ignore the cache output (forks can't write to registry cache)
             echo "cache-to=type=local,dest=/tmp/discard,ignore-error=true" >> $GITHUB_OUTPUT
           else
-            echo "cache-to=type=registry,ref=${{ env.GHCR_REPO }}-build-cache:${{ env.PLATFORM_PAIR }}-${{ matrix.device }}-${{ env.CACHE_KEY_SUFFIX }},mode=max,compression=zstd" >> $GITHUB_OUTPUT
+            echo "cache-to=type=registry,ref=${GHCR_REPO}-build-cache:${PLATFORM_PAIR}-${CACHE_KEY_SUFFIX},mode=max,compression=zstd" >> $GITHUB_OUTPUT
           fi
 
+      - name: Generate docker image tags
+        id: meta
+        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5
+        env:
+          DOCKER_METADATA_PR_HEAD_SHA: 'true'
+
       - name: Build and push image
         id: build
-        uses: docker/build-push-action@v6.15.0
+        uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
         with:
           context: ${{ env.context }}
           file: ${{ env.file }}
           platforms: ${{ matrix.platform }}
-          labels: ${{ steps.metadata.outputs.labels }}
+          labels: ${{ steps.meta.outputs.labels }}
           cache-to: ${{ steps.cache-target.outputs.cache-to }}
           cache-from: |
             type=registry,ref=${{ env.GHCR_REPO }}-build-cache:${{ env.PLATFORM_PAIR }}-${{ env.CACHE_KEY_SUFFIX }}
@@ -353,13 +426,13 @@ jobs:
             BUILD_SOURCE_COMMIT=${{ github.sha }}
 
       - name: Export digest
-        run: |
+        run: | # zizmor: ignore[template-injection]
           mkdir -p ${{ runner.temp }}/digests
           digest="${{ steps.build.outputs.digest }}"
           touch "${{ runner.temp }}/digests/${digest#sha256:}"
 
       - name: Upload digest
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: server-digests-${{ env.PLATFORM_PAIR }}
           path: ${{ runner.temp }}/digests/*
@@ -369,6 +442,10 @@ jobs:
   merge_server:
     name: Merge & Push Server
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      actions: read
+      packages: write
     if: ${{ needs.pre-job.outputs.should_run_server == 'true' && !github.event.pull_request.head.repo.fork }}
     env:
       GHCR_REPO: ghcr.io/${{ github.repository_owner }}/immich-server
@@ -377,7 +454,7 @@ jobs:
       - build_and_push_server
     steps:
       - name: Download digests
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
         with:
           path: ${{ runner.temp }}/digests
           pattern: server-digests-*
@@ -385,26 +462,26 @@ jobs:
 
       - name: Login to Docker Hub
         if: ${{ github.event_name == 'release' }}
-        uses: docker/login-action@v3
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Login to GHCR
-        uses: docker/login-action@v3
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3
 
       - name: Generate docker image tags
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5
         env:
-          DOCKER_METADATA_PR_HEAD_SHA: "true"
+          DOCKER_METADATA_PR_HEAD_SHA: 'true'
         with:
           flavor: |
             # Disable latest tag
@@ -427,12 +504,29 @@ jobs:
       - name: Create manifest list and push
         working-directory: ${{ runner.temp }}/digests
         run: |
-          docker buildx imagetools create $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
-            $(printf '${{ env.GHCR_REPO }}@sha256:%s ' *)
+          # Process annotations
+          declare -a ANNOTATIONS=()
+          if [[ -n "$DOCKER_METADATA_OUTPUT_JSON" ]]; then
+            while IFS= read -r annotation; do
+              # Extract key and value by removing the manifest: prefix
+              if [[ "$annotation" =~ ^manifest:(.+)=(.+)$ ]]; then
+                key="${BASH_REMATCH[1]}"
+                value="${BASH_REMATCH[2]}"
+                # Use array to properly handle arguments with spaces
+                ANNOTATIONS+=(--annotation "index:$key=$value")
+              fi
+            done < <(jq -r '.annotations[]' <<< "$DOCKER_METADATA_OUTPUT_JSON")
+          fi
+
+          TAGS=$(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
+          SOURCE_ARGS=$(printf "${GHCR_REPO}@sha256:%s " *)
+
+          docker buildx imagetools create $TAGS "${ANNOTATIONS[@]}" $SOURCE_ARGS
 
   success-check-server:
     name: Docker Build & Push Server Success
     needs: [merge_server, retag_server]
+    permissions: {}
     runs-on: ubuntu-latest
     if: always()
     steps:
@@ -441,11 +535,13 @@ jobs:
         run: exit 1
       - name: All jobs passed or skipped
         if: ${{ !(contains(needs.*.result, 'failure')) }}
+        # zizmor: ignore[template-injection]
         run: echo "All jobs passed or skipped" && echo "${{ toJSON(needs.*.result) }}"
 
   success-check-ml:
     name: Docker Build & Push ML Success
     needs: [merge_ml, retag_ml]
+    permissions: {}
     runs-on: ubuntu-latest
     if: always()
     steps:
@@ -454,4 +550,5 @@ jobs:
         run: exit 1
       - name: All jobs passed or skipped
         if: ${{ !(contains(needs.*.result, 'failure')) }}
+        # zizmor: ignore[template-injection]
         run: echo "All jobs passed or skipped" && echo "${{ toJSON(needs.*.result) }}"

.github/workflows/docs-build.yml

@@ -3,7 +3,6 @@ on:
   push:
     branches: [main]
   pull_request:
-    branches: [main]
   release:
     types: [published]
 
@@ -11,16 +10,22 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   pre-job:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     outputs:
       should_run: ${{ steps.found_paths.outputs.docs == 'true' ||  steps.should_force.outputs.should_force == 'true' }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
       - id: found_paths
-        uses: dorny/paths-filter@v3
+        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3
         with:
           filters: |
             docs:
@@ -34,6 +39,8 @@ jobs:
   build:
     name: Docs Build
     needs: pre-job
+    permissions:
+      contents: read
     if: ${{ needs.pre-job.outputs.should_run == 'true' }}
     runs-on: ubuntu-latest
     defaults:
@@ -42,10 +49,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: './docs/.nvmrc'
 
@@ -59,7 +68,7 @@ jobs:
         run: npm run build
 
       - name: Upload build output
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: docs-build-output
           path: docs/build/

.github/workflows/docs-deploy.yml

@@ -1,7 +1,7 @@
 name: Docs deploy
 on:
-  workflow_run:
-    workflows: ["Docs build"]
+  workflow_run: # zizmor: ignore[dangerous-triggers] no attacker inputs are used here
+    workflows: ['Docs build']
     types:
       - completed
 
@@ -9,6 +9,9 @@ jobs:
   checks:
     name: Docs Deploy Checks
     runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      pull-requests: read
     outputs:
       parameters: ${{ steps.parameters.outputs.result }}
       artifact: ${{ steps.get-artifact.outputs.result }}
@@ -17,7 +20,7 @@ jobs:
         run: echo 'The triggering workflow did not succeed' && exit 1
       - name: Get artifact
         id: get-artifact
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
         with:
           script: |
             let allArtifacts = await github.rest.actions.listWorkflowRunArtifacts({
@@ -35,7 +38,9 @@ jobs:
             return { found: true, id: matchArtifact.id };
       - name: Determine deploy parameters
         id: parameters
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
+        env:
+          HEAD_SHA: ${{ github.event.workflow_run.head_sha }}
         with:
           script: |
             const eventType = context.payload.workflow_run.event;
@@ -57,7 +62,8 @@ jobs:
             } else if (eventType == "pull_request") {
               let pull_number = context.payload.workflow_run.pull_requests[0]?.number;
               if(!pull_number) {
-                const response = await github.rest.search.issuesAndPullRequests({q: 'repo:${{ github.repository }} is:pr sha:${{ github.event.workflow_run.head_sha }}',per_page: 1,})
+                const {HEAD_SHA} = process.env;
+                const response = await github.rest.search.issuesAndPullRequests({q: `repo:${{ github.repository }} is:pr sha:${HEAD_SHA}`,per_page: 1,})
                 const items = response.data.items
                 if (items.length < 1) {
                   throw new Error("No pull request found for the commit")
@@ -95,30 +101,36 @@ jobs:
     name: Docs Deploy
     runs-on: ubuntu-latest
     needs: checks
+    permissions:
+      contents: read
+      actions: read
+      pull-requests: write
     if: ${{ fromJson(needs.checks.outputs.artifact).found && fromJson(needs.checks.outputs.parameters).shouldDeploy }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
 
       - name: Load parameters
         id: parameters
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
+        env:
+          PARAM_JSON: ${{ needs.checks.outputs.parameters }}
         with:
           script: |
-            const json = `${{ needs.checks.outputs.parameters }}`;
-            const parameters = JSON.parse(json);
+            const parameters = JSON.parse(process.env.PARAM_JSON);
             core.setOutput("event", parameters.event);
             core.setOutput("name", parameters.name);
             core.setOutput("shouldDeploy", parameters.shouldDeploy);
 
-      - run: |
-          echo "Starting docs deployment for ${{ steps.parameters.outputs.event }} ${{ steps.parameters.outputs.name }}"
-
       - name: Download artifact
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
+        env:
+          ARTIFACT_JSON: ${{ needs.checks.outputs.artifact }}
         with:
           script: |
-            let artifact = ${{ needs.checks.outputs.artifact }};
+            let artifact = JSON.parse(process.env.ARTIFACT_JSON);
             let download = await github.rest.actions.downloadArtifact({
                owner: context.repo.owner,
                repo: context.repo.repo,
@@ -138,12 +150,12 @@ jobs:
           CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           TF_STATE_POSTGRES_CONN_STR: ${{ secrets.TF_STATE_POSTGRES_CONN_STR }}
-        uses: gruntwork-io/terragrunt-action@v2
+        uses: gruntwork-io/terragrunt-action@9559e51d05873b0ea467c42bbabcb5c067642ccc # v2
         with:
-          tg_version: "0.58.12"
-          tofu_version: "1.7.1"
-          tg_dir: "deployment/modules/cloudflare/docs"
-          tg_command: "apply"
+          tg_version: '0.58.12'
+          tofu_version: '1.7.1'
+          tg_dir: 'deployment/modules/cloudflare/docs'
+          tg_command: 'apply'
 
       - name: Deploy Docs Subdomain Output
         id: docs-output
@@ -153,27 +165,29 @@ jobs:
           CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           TF_STATE_POSTGRES_CONN_STR: ${{ secrets.TF_STATE_POSTGRES_CONN_STR }}
-        uses: gruntwork-io/terragrunt-action@v2
+        uses: gruntwork-io/terragrunt-action@9559e51d05873b0ea467c42bbabcb5c067642ccc # v2
         with:
-          tg_version: "0.58.12"
-          tofu_version: "1.7.1"
-          tg_dir: "deployment/modules/cloudflare/docs"
-          tg_command: "output -json"
+          tg_version: '0.58.12'
+          tofu_version: '1.7.1'
+          tg_dir: 'deployment/modules/cloudflare/docs'
+          tg_command: 'output -json'
 
       - name: Output Cleaning
         id: clean
+        env:
+          TG_OUTPUT: ${{ steps.docs-output.outputs.tg_action_output }}
         run: |
-          TG_OUT=$(echo '${{ steps.docs-output.outputs.tg_action_output }}' | sed 's|%0A|\n|g ; s|%3C|<|g' | jq -c .)
-          echo "output=$TG_OUT" >> $GITHUB_OUTPUT
+          CLEANED=$(echo "$TG_OUTPUT" | sed 's|%0A|\n|g ; s|%3C|<|g' | jq -c .)
+          echo "output=$CLEANED" >> $GITHUB_OUTPUT
 
       - name: Publish to Cloudflare Pages
-        uses: cloudflare/pages-action@v1
+        uses: cloudflare/pages-action@f0a1cd58cd66095dee69bfa18fa5efd1dde93bca # v1
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN_PAGES_UPLOAD }}
           accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           projectName: ${{ fromJson(steps.clean.outputs.output).pages_project_name.value }}
-          workingDirectory: "docs"
-          directory: "build"
+          workingDirectory: 'docs'
+          directory: 'build'
           branch: ${{ steps.parameters.outputs.name }}
           wranglerVersion: '3'
 
@@ -184,7 +198,7 @@ jobs:
           CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           TF_STATE_POSTGRES_CONN_STR: ${{ secrets.TF_STATE_POSTGRES_CONN_STR }}
-        uses: gruntwork-io/terragrunt-action@v2
+        uses: gruntwork-io/terragrunt-action@9559e51d05873b0ea467c42bbabcb5c067642ccc # v2
         with:
           tg_version: '0.58.12'
           tofu_version: '1.7.1'
@@ -192,7 +206,7 @@ jobs:
           tg_command: 'apply'
 
       - name: Comment
-        uses: actions-cool/maintain-one-comment@v3
+        uses: actions-cool/maintain-one-comment@4b2dbf086015f892dcb5e8c1106f5fccd6c1476b # v3
         if: ${{ steps.parameters.outputs.event == 'pr' }}
         with:
           number: ${{ fromJson(needs.checks.outputs.parameters).pr_number }}

.github/workflows/docs-destroy.yml

@@ -1,32 +1,39 @@
 name: Docs destroy
 on:
-  pull_request_target:
+  pull_request_target: # zizmor: ignore[dangerous-triggers] no attacker inputs are used here
     types: [closed]
 
+permissions: {}
+
 jobs:
   deploy:
     name: Docs Destroy
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
 
       - name: Destroy Docs Subdomain
         env:
-          TF_VAR_prefix_name: "pr-${{ github.event.number }}"
-          TF_VAR_prefix_event_type: "pr"
+          TF_VAR_prefix_name: 'pr-${{ github.event.number }}'
+          TF_VAR_prefix_event_type: 'pr'
           CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           TF_STATE_POSTGRES_CONN_STR: ${{ secrets.TF_STATE_POSTGRES_CONN_STR }}
-        uses: gruntwork-io/terragrunt-action@v2
+        uses: gruntwork-io/terragrunt-action@9559e51d05873b0ea467c42bbabcb5c067642ccc # v2
         with:
-          tg_version: "0.58.12"
-          tofu_version: "1.7.1"
-          tg_dir: "deployment/modules/cloudflare/docs"
-          tg_command: "destroy -refresh=false"
+          tg_version: '0.58.12'
+          tofu_version: '1.7.1'
+          tg_dir: 'deployment/modules/cloudflare/docs'
+          tg_command: 'destroy -refresh=false'
 
       - name: Comment
-        uses: actions-cool/maintain-one-comment@v3
+        uses: actions-cool/maintain-one-comment@4b2dbf086015f892dcb5e8c1106f5fccd6c1476b # v3
         with:
           number: ${{ github.event.number }}
           delete: true

.github/workflows/fix-format.yml

@@ -4,28 +4,32 @@ on:
   pull_request:
     types: [labeled]
 
+permissions: {}
+
 jobs:
   fix-formatting:
     runs-on: ubuntu-latest
     if: ${{ github.event.label.name == 'fix:formatting' }}
     permissions:
+      contents: write
       pull-requests: write
     steps:
       - name: Generate a token
         id: generate-token
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2
         with:
           app-id: ${{ secrets.PUSH_O_MATIC_APP_ID }}
           private-key: ${{ secrets.PUSH_O_MATIC_APP_KEY }}
 
       - name: 'Checkout'
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           ref: ${{ github.event.pull_request.head.ref }}
           token: ${{ steps.generate-token.outputs.token }}
+          persist-credentials: true
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: './server/.nvmrc'
 
@@ -33,13 +37,13 @@ jobs:
         run: make install-all && make format-all
 
       - name: Commit and push
-        uses: EndBug/add-and-commit@v9
+        uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9
         with:
           default_author: github_actions
           message: 'chore: fix formatting'
 
       - name: Remove label
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
         if: always()
         with:
           script: |
@@ -49,4 +53,3 @@ jobs:
               repo: context.repo.repo,
               name: 'fix:formatting'
             })
-

.github/workflows/pr-label-validation.yml

@@ -1,9 +1,11 @@
 name: PR Label Validation
 
 on:
-  pull_request_target:
+  pull_request_target: # zizmor: ignore[dangerous-triggers] no attacker inputs are used here
     types: [opened, labeled, unlabeled, synchronize]
 
+permissions: {}
+
 jobs:
   validate-release-label:
     runs-on: ubuntu-latest
@@ -12,11 +14,11 @@ jobs:
       pull-requests: write
     steps:
       - name: Require PR to have a changelog label
-        uses: mheap/github-action-required-labels@v5
+        uses: mheap/github-action-required-labels@388fd6af37b34cdfe5a23b37060e763217e58b03 # v5
         with:
           mode: exactly
           count: 1
           use_regex: true
-          labels: "changelog:.*"
+          labels: 'changelog:.*'
           add_comment: true
-          message: "Label error. Requires {{errorString}} {{count}} of: {{ provided }}. Found: {{ applied }}. A maintainer will add the required label."
+          message: 'Label error. Requires {{errorString}} {{count}} of: {{ provided }}. Found: {{ applied }}. A maintainer will add the required label.'

.github/workflows/pr-labeler.yml

@@ -1,6 +1,8 @@
-name: "Pull Request Labeler"
+name: 'Pull Request Labeler'
 on:
-- pull_request_target
+  - pull_request_target # zizmor: ignore[dangerous-triggers] no attacker inputs are used here
+
+permissions: {}
 
 jobs:
   labeler:
@@ -9,4 +11,4 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/labeler@v5
+      - uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5

.github/workflows/pr-require-conventional-commit.yml

@@ -4,12 +4,16 @@ on:
   pull_request:
     types: [opened, synchronize, reopened, edited]
 
+permissions: {}
+
 jobs:
   validate-pr-title:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - name: PR Conventional Commit Validation
-        uses:  ytanikin/PRConventionalCommits@1.3.0
+        uses: ytanikin/PRConventionalCommits@b628c5a234cc32513014b7bfdd1e47b532124d98 # 1.3.0
         with:
           task_types: '["feat","fix","docs","test","ci","refactor","perf","chore","revert"]'
           add_label: 'false'

.github/workflows/prepare-release.yml

@@ -21,35 +21,40 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}-root
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   bump_version:
     runs-on: ubuntu-latest
-
     outputs:
       ref: ${{ steps.push-tag.outputs.commit_long_sha }}
-
+    permissions: {} # No job-level permissions are needed because it uses the app-token
     steps:
       - name: Generate a token
         id: generate-token
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2
         with:
           app-id: ${{ secrets.PUSH_O_MATIC_APP_ID }}
           private-key: ${{ secrets.PUSH_O_MATIC_APP_KEY }}
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           token: ${{ steps.generate-token.outputs.token }}
+          persist-credentials: true
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v5
+        uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5
 
       - name: Bump version
-        run: misc/release/pump-version.sh -s "${{ inputs.serverBump }}" -m "${{ inputs.mobileBump }}"
+        env:
+          SERVER_BUMP: ${{ inputs.serverBump }}
+          MOBILE_BUMP: ${{ inputs.mobileBump }}
+        run: misc/release/pump-version.sh -s "${SERVER_BUMP}" -m "${MOBILE_BUMP}"
 
       - name: Commit and tag
         id: push-tag
-        uses: EndBug/add-and-commit@v9
+        uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9
         with:
           default_author: github_actions
           message: 'chore: version ${{ env.IMMICH_VERSION }}'
@@ -59,37 +64,47 @@ jobs:
   build_mobile:
     uses: ./.github/workflows/build-mobile.yml
     needs: bump_version
-    secrets: inherit
+    permissions:
+      contents: read
+    secrets:
+      KEY_JKS: ${{ secrets.KEY_JKS }}
+      ALIAS: ${{ secrets.ALIAS }}
+      ANDROID_KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}
+      ANDROID_STORE_PASSWORD: ${{ secrets.ANDROID_STORE_PASSWORD }}
     with:
       ref: ${{ needs.bump_version.outputs.ref }}
 
   prepare_release:
     runs-on: ubuntu-latest
     needs: build_mobile
-
+    permissions:
+      actions: read # To download the app artifact
+      # No content permissions are needed because it uses the app-token
     steps:
       - name: Generate a token
         id: generate-token
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2
         with:
           app-id: ${{ secrets.PUSH_O_MATIC_APP_ID }}
           private-key: ${{ secrets.PUSH_O_MATIC_APP_KEY }}
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           token: ${{ steps.generate-token.outputs.token }}
+          persist-credentials: false
 
       - name: Download APK
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
         with:
           name: release-apk-signed
 
       - name: Create draft release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 # v2
         with:
           draft: true
           tag_name: ${{ env.IMMICH_VERSION }}
+          token: ${{ steps.generate-token.outputs.token }}
           generate_release_notes: true
           body_path: misc/release/notes.tmpl
           files: |

.github/workflows/preview-label.yaml

@@ -4,6 +4,8 @@ on:
   pull_request:
     types: [labeled, closed]
 
+permissions: {}
+
 jobs:
   comment-status:
     runs-on: ubuntu-latest
@@ -11,10 +13,10 @@ jobs:
     permissions:
       pull-requests: write
     steps:
-      - uses: mshick/add-pr-comment@v2
+      - uses: mshick/add-pr-comment@b8f338c590a895d50bcbfa6c5859251edc8952fc # v2
         with:
-          message-id: "preview-status"
-          message: "Deploying preview environment to https://pr-${{ github.event.pull_request.number }}.preview.internal.immich.cloud/"
+          message-id: 'preview-status'
+          message: 'Deploying preview environment to https://pr-${{ github.event.pull_request.number }}.preview.internal.immich.cloud/'
 
   remove-label:
     runs-on: ubuntu-latest
@@ -22,7 +24,7 @@ jobs:
     permissions:
       pull-requests: write
     steps:
-      - uses: actions/github-script@v7
+      - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
         with:
           script: |
             github.rest.issues.removeLabel({

.github/workflows/sdk.yml

@@ -4,20 +4,24 @@ on:
   release:
     types: [published]
 
-permissions:
-  packages: write
+permissions: {}
 
 jobs:
   publish:
     name: Publish `@immich/sdk`
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     defaults:
       run:
         working-directory: ./open-api/typescript-sdk
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
+
       # Setup .npmrc file to publish to npm
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: './open-api/typescript-sdk/.nvmrc'
           registry-url: 'https://registry.npmjs.org'

.github/workflows/static_analysis.yml

@@ -9,16 +9,22 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   pre-job:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     outputs:
       should_run: ${{ steps.found_paths.outputs.mobile == 'true' || steps.should_force.outputs.should_force == 'true' }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
       - id: found_paths
-        uses: dorny/paths-filter@v3
+        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3
         with:
           filters: |
             mobile:
@@ -33,15 +39,17 @@ jobs:
     name: Run Dart Code Analysis
     needs: pre-job
     if: ${{ needs.pre-job.outputs.should_run == 'true' }}
-
     runs-on: ubuntu-latest
-
+    permissions:
+      contents: read
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
 
       - name: Setup Flutter SDK
-        uses: subosito/flutter-action@v2
+        uses: subosito/flutter-action@e938fdf56512cc96ef2f93601a5a40bde3801046 # v2
         with:
           channel: 'stable'
           flutter-version-file: ./mobile/pubspec.yaml
@@ -50,12 +58,16 @@ jobs:
         run: dart pub get
         working-directory: ./mobile
 
+      - name: Generate translation file
+        run: make translation; dart format lib/generated/codegen_loader.g.dart
+        working-directory: ./mobile
+
       - name: Run Build Runner
         run: make build
         working-directory: ./mobile
 
       - name: Find file changes
-        uses: tj-actions/verify-changed-files@v20
+        uses: tj-actions/verify-changed-files@a1c6acee9df209257a246f2cc6ae8cb6581c1edf # v20
         id: verify-changed-files
         with:
           files: |
@@ -65,9 +77,11 @@ jobs:
 
       - name: Verify files have not changed
         if: steps.verify-changed-files.outputs.files_changed == 'true'
+        env:
+          CHANGED_FILES: ${{ steps.verify-changed-files.outputs.changed_files }}
         run: |
           echo "ERROR: Generated files not up to date! Run make_build inside the mobile directory"
-          echo "Changed files: ${{ steps.verify-changed-files.outputs.changed_files }}"
+          echo "Changed files: ${CHANGED_FILES}"
           exit 1
 
       - name: Run dart analyze
@@ -81,3 +95,30 @@ jobs:
       - name: Run dart custom_lint
         run: dart run custom_lint
         working-directory: ./mobile
+
+  zizmor:
+    name: zizmor
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+      contents: read
+      actions: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      - name: Install the latest version of uv
+        uses: astral-sh/setup-uv@v5
+
+      - name: Run zizmor 🌈
+        run: uvx zizmor --format=sarif . > results.sarif
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Upload SARIF file
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: results.sarif
+          category: zizmor

.github/workflows/test.yml

@@ -9,9 +9,13 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   pre-job:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     outputs:
       should_run_web: ${{ steps.found_paths.outputs.web == 'true' || steps.should_force.outputs.should_force == 'true' }}
       should_run_server: ${{ steps.found_paths.outputs.server == 'true' || steps.should_force.outputs.should_force == 'true' }}
@@ -21,11 +25,15 @@ jobs:
       should_run_ml: ${{ steps.found_paths.outputs.machine-learning == 'true' || steps.should_force.outputs.should_force == 'true' }}
       should_run_e2e_web: ${{ steps.found_paths.outputs.e2e == 'true' || steps.found_paths.outputs.web == 'true' || steps.should_force.outputs.should_force == 'true' }}
       should_run_e2e_server_cli: ${{ steps.found_paths.outputs.e2e == 'true' || steps.found_paths.outputs.server == 'true' || steps.found_paths.outputs.cli == 'true' || steps.should_force.outputs.should_force == 'true' }}
+      should_run_.github: ${{ steps.found_paths.outputs['.github'] == 'true' || steps.should_force.outputs.should_force == 'true' }} # redundant to have should_force but if someone changes the trigger then this won't have to be changed
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
+
       - id: found_paths
-        uses: dorny/paths-filter@v3
+        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3
         with:
           filters: |
             web:
@@ -45,6 +53,8 @@ jobs:
               - 'machine-learning/**'
             workflow:
               - '.github/workflows/test.yml'
+            .github:
+              - '.github/**'
 
       - name: Check if we should force jobs to run
         id: should_force
@@ -55,16 +65,20 @@ jobs:
     needs: pre-job
     if: ${{ needs.pre-job.outputs.should_run_server == 'true' }}
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     defaults:
       run:
         working-directory: ./server
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: './server/.nvmrc'
 
@@ -92,16 +106,20 @@ jobs:
     needs: pre-job
     if: ${{ needs.pre-job.outputs.should_run_cli == 'true' }}
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     defaults:
       run:
         working-directory: ./cli
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: './cli/.nvmrc'
 
@@ -133,16 +151,20 @@ jobs:
     needs: pre-job
     if: ${{ needs.pre-job.outputs.should_run_cli == 'true' }}
     runs-on: windows-latest
+    permissions:
+      contents: read
     defaults:
       run:
         working-directory: ./cli
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: './cli/.nvmrc'
 
@@ -162,21 +184,25 @@ jobs:
         run: npm run test:cov
         if: ${{ !cancelled() }}
 
-  web-unit-tests:
-    name: Test & Lint Web
+  web-lint:
+    name: Lint Web
     needs: pre-job
     if: ${{ needs.pre-job.outputs.should_run_web == 'true' }}
-    runs-on: ubuntu-latest
+    runs-on: mich
+    permissions:
+      contents: read
     defaults:
       run:
         working-directory: ./web
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: './web/.nvmrc'
 
@@ -188,7 +214,7 @@ jobs:
         run: npm ci
 
       - name: Run linter
-        run: npm run lint
+        run: npm run lint:p
         if: ${{ !cancelled() }}
 
       - name: Run formatter
@@ -199,6 +225,35 @@ jobs:
         run: npm run check:svelte
         if: ${{ !cancelled() }}
 
+  web-unit-tests:
+    name: Test Web
+    needs: pre-job
+    if: ${{ needs.pre-job.outputs.should_run_web == 'true' }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    defaults:
+      run:
+        working-directory: ./web
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
+
+      - name: Setup Node
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version-file: './web/.nvmrc'
+
+      - name: Run setup typescript-sdk
+        run: npm ci && npm run build
+        working-directory: ./open-api/typescript-sdk
+
+      - name: Run npm install
+        run: npm ci
+
       - name: Run tsc
         run: npm run check:typescript
         if: ${{ !cancelled() }}
@@ -212,16 +267,20 @@ jobs:
     needs: pre-job
     if: ${{ needs.pre-job.outputs.should_run_e2e == 'true' }}
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     defaults:
       run:
         working-directory: ./e2e
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: './e2e/.nvmrc'
 
@@ -251,16 +310,20 @@ jobs:
     needs: pre-job
     if: ${{ needs.pre-job.outputs.should_run_server == 'true' }}
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     defaults:
       run:
         working-directory: ./server
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: './server/.nvmrc'
 
@@ -276,18 +339,21 @@ jobs:
     needs: pre-job
     if: ${{ needs.pre-job.outputs.should_run_e2e_server_cli == 'true' }}
     runs-on: mich
+    permissions:
+      contents: read
     defaults:
       run:
         working-directory: ./e2e
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
+          persist-credentials: false
           submodules: 'recursive'
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: './e2e/.nvmrc'
 
@@ -318,18 +384,21 @@ jobs:
     needs: pre-job
     if: ${{ needs.pre-job.outputs.should_run_e2e_web == 'true' }}
     runs-on: mich
+    permissions:
+      contents: read
     defaults:
       run:
         working-directory: ./e2e
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
+          persist-credentials: false
           submodules: 'recursive'
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: './e2e/.nvmrc'
 
@@ -359,10 +428,15 @@ jobs:
     needs: pre-job
     if: ${{ needs.pre-job.outputs.should_run_mobile == 'true' }}
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
+
       - name: Setup Flutter SDK
-        uses: subosito/flutter-action@v2
+        uses: subosito/flutter-action@e938fdf56512cc96ef2f93601a5a40bde3801046 # v2
         with:
           channel: 'stable'
           flutter-version-file: ./mobile/pubspec.yaml
@@ -375,14 +449,19 @@ jobs:
     needs: pre-job
     if: ${{ needs.pre-job.outputs.should_run_ml == 'true' }}
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     defaults:
       run:
         working-directory: ./machine-learning
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
+
       - name: Install uv
-        uses: astral-sh/setup-uv@v5
-      - uses: actions/setup-python@v5
+        uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5
+      - uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # v5
         # TODO: add caching when supported (https://github.com/actions/setup-python/pull/818)
         # with:
         #   python-version: 3.11
@@ -392,39 +471,77 @@ jobs:
           uv sync --extra cpu
       - name: Lint with ruff
         run: |
-          uv run ruff check --output-format=github app export
+          uv run ruff check --output-format=github immich_ml
       - name: Check black formatting
         run: |
-          uv run black --check app export
+          uv run black --check immich_ml
       - name: Run mypy type checking
         run: |
-          uv run mypy --strict app/
+          uv run mypy --strict immich_ml/
       - name: Run tests and coverage
         run: |
-          uv run pytest app --cov=app --cov-report term-missing
+          uv run pytest --cov=immich_ml --cov-report term-missing
+
+  github-files-formatting:
+    name: .github Files Formatting
+    needs: pre-job
+    if: ${{ needs.pre-job.outputs['should_run_.github'] == 'true' }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    defaults:
+      run:
+        working-directory: ./.github
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
+
+      - name: Setup Node
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version-file: './.github/.nvmrc'
+
+      - name: Run npm install
+        run: npm ci
+
+      - name: Run formatter
+        run: npm run format
+        if: ${{ !cancelled() }}
 
   shellcheck:
     name: ShellCheck
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
+
       - name: Run ShellCheck
         uses: ludeeus/action-shellcheck@master
         with:
           ignore_paths: >-
             **/open-api/**
-            **/openapi/**
+            **/openapi**
             **/node_modules/**
 
   generated-api-up-to-date:
     name: OpenAPI Clients
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: './server/.nvmrc'
 
@@ -438,7 +555,7 @@ jobs:
         run: make open-api
 
       - name: Find file changes
-        uses: tj-actions/verify-changed-files@v20
+        uses: tj-actions/verify-changed-files@a1c6acee9df209257a246f2cc6ae8cb6581c1edf # v20
         id: verify-changed-files
         with:
           files: |
@@ -448,14 +565,18 @@ jobs:
 
       - name: Verify files have not changed
         if: steps.verify-changed-files.outputs.files_changed == 'true'
+        env:
+          CHANGED_FILES: ${{ steps.verify-changed-files.outputs.changed_files }}
         run: |
           echo "ERROR: Generated files not up to date!"
-          echo "Changed files: ${{ steps.verify-changed-files.outputs.changed_files }}"
+          echo "Changed files: ${CHANGED_FILES}"
           exit 1
 
   generated-typeorm-migrations-up-to-date:
     name: TypeORM Checks
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     services:
       postgres:
         image: tensorchord/pgvecto-rs:pg14-v0.2.0@sha256:739cdd626151ff1f796dc95a6591b55a714f341c737e27f045019ceabf8e8c52
@@ -476,10 +597,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version-file: './server/.nvmrc'
 
@@ -490,27 +613,29 @@ jobs:
         run: npm run build
 
       - name: Run existing migrations
-        run: npm run typeorm:migrations:run
+        run: npm run migrations:run
 
       - name: Test npm run schema:reset command works
-        run: npm run typeorm:schema:reset
+        run: npm run schema:reset
 
       - name: Generate new migrations
         continue-on-error: true
-        run: npm run typeorm:migrations:generate ./src/migrations/TestMigration
+        run: npm run migrations:generate TestMigration
 
       - name: Find file changes
-        uses: tj-actions/verify-changed-files@v20
+        uses: tj-actions/verify-changed-files@a1c6acee9df209257a246f2cc6ae8cb6581c1edf # v20
         id: verify-changed-files
         with:
           files: |
-            server/src/migrations/
+            server/src
       - name: Verify migration files have not changed
         if: steps.verify-changed-files.outputs.files_changed == 'true'
+        env:
+          CHANGED_FILES: ${{ steps.verify-changed-files.outputs.changed_files }}
         run: |
           echo "ERROR: Generated migration files not up to date!"
-          echo "Changed files: ${{ steps.verify-changed-files.outputs.changed_files }}"
-          cat ./src/migrations/*-TestMigration.ts
+          echo "Changed files: ${CHANGED_FILES}"
+          cat ./src/*-TestMigration.ts
           exit 1
 
       - name: Run SQL generation
@@ -519,7 +644,7 @@ jobs:
           DB_URL: postgres://postgres:postgres@localhost:5432/immich
 
       - name: Find file changes
-        uses: tj-actions/verify-changed-files@v20
+        uses: tj-actions/verify-changed-files@a1c6acee9df209257a246f2cc6ae8cb6581c1edf # v20
         id: verify-changed-sql-files
         with:
           files: |
@@ -527,9 +652,11 @@ jobs:
 
       - name: Verify SQL files have not changed
         if: steps.verify-changed-sql-files.outputs.files_changed == 'true'
+        env:
+          CHANGED_FILES: ${{ steps.verify-changed-sql-files.outputs.changed_files }}
         run: |
           echo "ERROR: Generated SQL files not up to date!"
-          echo "Changed files: ${{ steps.verify-changed-sql-files.outputs.changed_files }}"
+          echo "Changed files: ${CHANGED_FILES}"
           exit 1
 
   # mobile-integration-tests:

.github/workflows/weblate-lock.yml

@@ -4,30 +4,32 @@ on:
   pull_request:
     branches: [main]
 
+permissions: {}
+
 jobs:
   pre-job:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     outputs:
       should_run: ${{ steps.found_paths.outputs.i18n == 'true' && github.head_ref != 'chore/translations'}}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          persist-credentials: false
       - id: found_paths
-        uses: dorny/paths-filter@v3
+        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3
         with:
           filters: |
             i18n:
               - 'i18n/!(en)**\.json'
-      - name: Debug
-        run: |
-            echo "Should run: ${{ steps.found_paths.outputs.i18n == 'true' && github.head_ref != 'chore/translations'}}"
-            echo "Found i18n paths: ${{ steps.found_paths.outputs.i18n }}"
-            echo "Head ref: ${{ github.head_ref }}"
 
   enforce-lock:
     name: Check Weblate Lock
-    needs: [ pre-job ]
+    needs: [pre-job]
     runs-on: ubuntu-latest
+    permissions: {}
     if: ${{ needs.pre-job.outputs.should_run == 'true' }}
     steps:
       - name: Check weblate lock
@@ -36,7 +38,7 @@ jobs:
             exit 1
           fi
       - name: Find Pull Request
-        uses: juliangruber/find-pull-request-action@v1
+        uses: juliangruber/find-pull-request-action@48b6133aa6c826f267ebd33aa2d29470f9d9e7d0 # v1
         id: find-pr
         with:
           branch: chore/translations
@@ -45,8 +47,9 @@ jobs:
         run: exit 1
   success-check-lock:
     name: Weblate Lock Check Success
-    needs: [ enforce-lock ]
+    needs: [enforce-lock]
     runs-on: ubuntu-latest
+    permissions: {}
     if: always()
     steps:
       - name: Any jobs failed?
@@ -54,4 +57,5 @@ jobs:
         run: exit 1
       - name: All jobs passed or skipped
         if: ${{ !(contains(needs.*.result, 'failure')) }}
+        # zizmor: ignore[template-injection]
         run: echo "All jobs passed or skipped" && echo "${{ toJSON(needs.*.result) }}"

.vscode/settings.json

@@ -39,6 +39,7 @@
   ],
   "explorer.fileNesting.enabled": true,
   "explorer.fileNesting.patterns": {
-    "*.ts": "${capture}.spec.ts,${capture}.mock.ts"
+    "*.ts": "${capture}.spec.ts,${capture}.mock.ts",
+    "*.dart": "${capture}.g.dart,${capture}.gr.dart,${capture}.drift.dart"
   }
 }

Makefile

@@ -39,7 +39,7 @@ attach-server:
 renovate:
   LOG_LEVEL=debug npx renovate --platform=local --repository-cache=reset
 
-MODULES = e2e server web cli sdk docs
+MODULES = e2e server web cli sdk docs .github
 
 audit-%:
 	npm --prefix $(subst sdk,open-api/typescript-sdk,$*) audit fix
@@ -77,14 +77,14 @@ test-medium:
 test-medium-dev:
 	docker exec -it immich_server /bin/sh -c "npm run test:medium"
 
-build-all: $(foreach M,$(filter-out e2e,$(MODULES)),build-$M) ;
+build-all: $(foreach M,$(filter-out e2e .github,$(MODULES)),build-$M) ;
 install-all: $(foreach M,$(MODULES),install-$M) ;
-check-all: $(foreach M,$(filter-out sdk cli docs,$(MODULES)),check-$M) ;
-lint-all: $(foreach M,$(filter-out sdk docs,$(MODULES)),lint-$M) ;
+check-all: $(foreach M,$(filter-out sdk cli docs .github,$(MODULES)),check-$M) ;
+lint-all: $(foreach M,$(filter-out sdk docs .github,$(MODULES)),lint-$M) ;
 format-all: $(foreach M,$(filter-out sdk,$(MODULES)),format-$M) ;
 audit-all:  $(foreach M,$(MODULES),audit-$M) ;
 hygiene-all: lint-all format-all check-all sql audit-all;
-test-all: $(foreach M,$(filter-out sdk docs,$(MODULES)),test-$M) ;
+test-all: $(foreach M,$(filter-out sdk docs .github,$(MODULES)),test-$M) ;
 
 clean:
 	find . -name "node_modules" -type d -prune -exec rm -rf '{}' +

README.md

@@ -61,9 +61,7 @@
 
 ## Demo
 
-Access the demo [here](https://demo.immich.app). The demo is running on a Free-tier Oracle VM in Amsterdam with a 2.4Ghz quad-core ARM64 CPU and 24GB RAM.
-
-For the mobile app, you can use `https://demo.immich.app` for the `Server Endpoint URL`
+Access the demo [here](https://demo.immich.app). For the mobile app, you can use `https://demo.immich.app` for the `Server Endpoint URL`.
 
 ### Login credentials
 
@@ -104,7 +102,7 @@ For the mobile app, you can use `https://demo.immich.app` for the `Server Endpoi
 | Read-only gallery                            | Yes    | Yes |
 | Stacked Photos                               | Yes    | Yes |
 | Tags                                         | No     | Yes |
-| Folder View                                  | No     | Yes |
+| Folder View                                  | Yes    | Yes |
 
 ## Translations
 

cli/eslint.config.mjs

@@ -1,39 +1,29 @@
-import { FlatCompat } from '@eslint/eslintrc';
 import js from '@eslint/js';
-import typescriptEslint from '@typescript-eslint/eslint-plugin';
-import tsParser from '@typescript-eslint/parser';
+import eslintPluginPrettierRecommended from 'eslint-plugin-prettier/recommended';
+import eslintPluginUnicorn from 'eslint-plugin-unicorn';
 import globals from 'globals';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import typescriptEslint from 'typescript-eslint';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
-const compat = new FlatCompat({
-  baseDirectory: __dirname,
-  recommendedConfig: js.configs.recommended,
-  allConfig: js.configs.all,
-});
 
-export default [
+export default typescriptEslint.config([
+  eslintPluginUnicorn.configs.recommended,
+  eslintPluginPrettierRecommended,
+  js.configs.recommended,
+  typescriptEslint.configs.recommended,
   {
     ignores: ['eslint.config.mjs', 'dist'],
   },
-  ...compat.extends(
-    'plugin:@typescript-eslint/recommended',
-    'plugin:prettier/recommended',
-    'plugin:unicorn/recommended',
-  ),
   {
-    plugins: {
-      '@typescript-eslint': typescriptEslint,
-    },
-
     languageOptions: {
       globals: {
         ...globals.node,
       },
 
-      parser: tsParser,
+      parser: typescriptEslint.parser,
       ecmaVersion: 5,
       sourceType: 'module',
 
@@ -58,4 +48,4 @@ export default [
       'object-shorthand': ['error', 'always'],
     },
   },
-];
+]);

cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@immich/cli",
-  "version": "2.2.53",
+  "version": "2.2.63",
   "description": "Command Line Interface (CLI) for Immich",
   "type": "module",
   "exports": "./dist/index.js",
@@ -21,9 +21,7 @@
     "@types/lodash-es": "^4.17.12",
     "@types/micromatch": "^4.0.9",
     "@types/mock-fs": "^4.13.1",
-    "@types/node": "^22.13.9",
-    "@typescript-eslint/eslint-plugin": "^8.15.0",
-    "@typescript-eslint/parser": "^8.15.0",
+    "@types/node": "^22.14.1",
     "@vitest/coverage-v8": "^3.0.0",
     "byte-size": "^9.0.0",
     "cli-progress": "^3.12.0",
@@ -31,12 +29,13 @@
     "eslint": "^9.14.0",
     "eslint-config-prettier": "^10.0.0",
     "eslint-plugin-prettier": "^5.1.3",
-    "eslint-plugin-unicorn": "^56.0.1",
+    "eslint-plugin-unicorn": "^57.0.0",
     "globals": "^16.0.0",
     "mock-fs": "^5.2.0",
     "prettier": "^3.2.5",
     "prettier-plugin-organize-imports": "^4.0.0",
     "typescript": "^5.3.3",
+    "typescript-eslint": "^8.28.0",
     "vite": "^6.0.0",
     "vite-tsconfig-paths": "^5.0.0",
     "vitest": "^3.0.0",

docker/docker-compose.dev.yml

@@ -95,12 +95,12 @@ services:
     image: immich-machine-learning-dev:latest
     # extends:
     #   file: hwaccel.ml.yml
-    #   service: cpu # set to one of [armnn, cuda, openvino, openvino-wsl] for accelerated inference
+    #   service: cpu # set to one of [armnn, cuda, rocm, openvino, openvino-wsl, rknn] for accelerated inference
     build:
       context: ../machine-learning
       dockerfile: Dockerfile
       args:
-        - DEVICE=cpu # set to one of [armnn, cuda, openvino, openvino-wsl] for accelerated inference
+        - DEVICE=cpu # set to one of [armnn, cuda, rocm, openvino, openvino-wsl, rknn] for accelerated inference
     ports:
       - 3003:3003
     volumes:
@@ -116,7 +116,7 @@ services:
 
   redis:
     container_name: immich_redis
-    image: redis:6.2-alpine@sha256:148bb5411c184abd288d9aaed139c98123eeb8824c5d3fce03cf721db58066d8
+    image: docker.io/valkey/valkey:8-bookworm@sha256:42cba146593a5ea9a622002c1b7cba5da7be248650cbb64ecb9c6c33d29794b1
     healthcheck:
       test: redis-cli ping || exit 1
 

docker/docker-compose.prod.yml

@@ -38,12 +38,12 @@ services:
     image: immich-machine-learning:latest
     # extends:
     #   file: hwaccel.ml.yml
-    #   service: cpu # set to one of [armnn, cuda, openvino, openvino-wsl] for accelerated inference
+    #   service: cpu # set to one of [armnn, cuda, rocm, openvino, openvino-wsl, rknn] for accelerated inference
     build:
       context: ../machine-learning
       dockerfile: Dockerfile
       args:
-        - DEVICE=cpu # set to one of [armnn, cuda, openvino, openvino-wsl] for accelerated inference
+        - DEVICE=cpu # set to one of [armnn, cuda, rocm, openvino, openvino-wsl, rknn] for accelerated inference
     ports:
       - 3003:3003
     volumes:
@@ -56,7 +56,7 @@ services:
 
   redis:
     container_name: immich_redis
-    image: redis:6.2-alpine@sha256:148bb5411c184abd288d9aaed139c98123eeb8824c5d3fce03cf721db58066d8
+    image: docker.io/valkey/valkey:8-bookworm@sha256:42cba146593a5ea9a622002c1b7cba5da7be248650cbb64ecb9c6c33d29794b1
     healthcheck:
       test: redis-cli ping || exit 1
     restart: always
@@ -77,22 +77,12 @@ services:
       - 5432:5432
     healthcheck:
       test: >-
-        pg_isready --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" || exit 1;
-        Chksum="$$(psql --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" --tuples-only --no-align
-        --command='SELECT COALESCE(SUM(checksum_failures), 0) FROM pg_stat_database')";
-        echo "checksum failure count is $$Chksum";
-        [ "$$Chksum" = '0' ] || exit 1
+        pg_isready --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" || exit 1; Chksum="$$(psql --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" --tuples-only --no-align --command='SELECT COALESCE(SUM(checksum_failures), 0) FROM pg_stat_database')"; echo "checksum failure count is $$Chksum"; [ "$$Chksum" = '0' ] || exit 1
       interval: 5m
       start_interval: 30s
       start_period: 5m
     command: >-
-      postgres
-      -c shared_preload_libraries=vectors.so
-      -c 'search_path="$$user", public, vectors'
-      -c logging_collector=on
-      -c max_wal_size=2GB
-      -c shared_buffers=512MB
-      -c wal_compression=on
+      postgres -c shared_preload_libraries=vectors.so -c 'search_path="$$user", public, vectors' -c logging_collector=on -c max_wal_size=2GB -c shared_buffers=512MB -c wal_compression=on
     restart: always
 
   # set IMMICH_TELEMETRY_INCLUDE=all in .env to enable metrics
@@ -100,7 +90,7 @@ services:
     container_name: immich_prometheus
     ports:
       - 9090:9090
-    image: prom/prometheus@sha256:6927e0919a144aa7616fd0137d4816816d42f6b816de3af269ab065250859a62
+    image: prom/prometheus@sha256:339ce86a59413be18d0e445472891d022725b4803fab609069110205e79fb2f1
     volumes:
       - ./prometheus.yml:/etc/prometheus/prometheus.yml
       - prometheus-data:/prometheus
@@ -109,10 +99,10 @@ services:
   # add data source for http://immich-prometheus:9090 to get started
   immich-grafana:
     container_name: immich_grafana
-    command: ['./run.sh', '-disable-reporting']
+    command: [ './run.sh', '-disable-reporting' ]
     ports:
       - 3000:3000
-    image: grafana/grafana:11.5.2-ubuntu@sha256:8b5858c447e06fd7a89006b562ba7bba7c4d5813600c7982374c41852adefaeb
+    image: grafana/grafana:11.6.0-ubuntu@sha256:fd8fa48213c624e1a95122f1d93abbf1cf1cbe85fc73212c1e599dbd76c63ff8
     volumes:
       - grafana-data:/var/lib/grafana
 

docker/docker-compose.yml

@@ -33,12 +33,12 @@ services:
 
   immich-machine-learning:
     container_name: immich_machine_learning
-    # For hardware acceleration, add one of -[armnn, cuda, openvino] to the image tag.
+    # For hardware acceleration, add one of -[armnn, cuda, rocm, openvino, rknn] to the image tag.
     # Example tag: ${IMMICH_VERSION:-release}-cuda
     image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
     # extends: # uncomment this section for hardware acceleration - see https://immich.app/docs/features/ml-hardware-acceleration
     #   file: hwaccel.ml.yml
-    #   service: cpu # set to one of [armnn, cuda, openvino, openvino-wsl] for accelerated inference - use the `-wsl` version for WSL2 where applicable
+    #   service: cpu # set to one of [armnn, cuda, rocm, openvino, openvino-wsl, rknn] for accelerated inference - use the `-wsl` version for WSL2 where applicable
     volumes:
       - model-cache:/cache
     env_file:
@@ -49,7 +49,7 @@ services:
 
   redis:
     container_name: immich_redis
-    image: docker.io/redis:6.2-alpine@sha256:148bb5411c184abd288d9aaed139c98123eeb8824c5d3fce03cf721db58066d8
+    image: docker.io/valkey/valkey:8-bookworm@sha256:42cba146593a5ea9a622002c1b7cba5da7be248650cbb64ecb9c6c33d29794b1
     healthcheck:
       test: redis-cli ping || exit 1
     restart: always
@@ -67,22 +67,12 @@ services:
       - ${DB_DATA_LOCATION}:/var/lib/postgresql/data
     healthcheck:
       test: >-
-        pg_isready --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" || exit 1;
-        Chksum="$$(psql --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" --tuples-only --no-align
-        --command='SELECT COALESCE(SUM(checksum_failures), 0) FROM pg_stat_database')";
-        echo "checksum failure count is $$Chksum";
-        [ "$$Chksum" = '0' ] || exit 1
+        pg_isready --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" || exit 1; Chksum="$$(psql --dbname="$${POSTGRES_DB}" --username="$${POSTGRES_USER}" --tuples-only --no-align --command='SELECT COALESCE(SUM(checksum_failures), 0) FROM pg_stat_database')"; echo "checksum failure count is $$Chksum"; [ "$$Chksum" = '0' ] || exit 1
       interval: 5m
       start_interval: 30s
       start_period: 5m
     command: >-
-      postgres
-      -c shared_preload_libraries=vectors.so
-      -c 'search_path="$$user", public, vectors'
-      -c logging_collector=on
-      -c max_wal_size=2GB
-      -c shared_buffers=512MB
-      -c wal_compression=on
+      postgres -c shared_preload_libraries=vectors.so -c 'search_path="$$user", public, vectors' -c logging_collector=on -c max_wal_size=2GB -c shared_buffers=512MB -c wal_compression=on
     restart: always
 
 volumes:

docker/example.env

@@ -2,7 +2,8 @@
 
 # The location where your uploaded files are stored
 UPLOAD_LOCATION=./library
-# The location where your database files are stored
+
+# The location where your database files are stored. Network shares are not supported for the database
 DB_DATA_LOCATION=./postgres
 
 # To set a timezone, uncomment the next line and change Etc/UTC to a TZ identifier from this list: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List

docker/hwaccel.ml.yml

@@ -13,6 +13,13 @@ services:
     volumes:
       - /lib/firmware/mali_csffw.bin:/lib/firmware/mali_csffw.bin:ro # Mali firmware for your chipset (not always required depending on the driver)
       - /usr/lib/libmali.so:/usr/lib/libmali.so:ro # Mali driver for your chipset (always required)
+  
+  rknn:
+    security_opt:
+      - systempaths=unconfined
+      - apparmor=unconfined
+    devices:
+      - /dev/dri:/dev/dri
 
   cpu: {}
 
@@ -26,6 +33,13 @@ services:
               capabilities:
                 - gpu
 
+  rocm:
+    group_add:
+      - video
+    devices:
+      - /dev/dri:/dev/dri
+      - /dev/kfd:/dev/kfd
+
   openvino:
     device_cgroup_rules:
       - 'c 189:* rmw'

docs/docs/FAQ.mdx

@@ -262,7 +262,7 @@ No, this is not supported. Only models listed in the [Hugging Face][huggingface]
 
 ### I want to be able to search in other languages besides English. How can I do that?
 
-You can change to a multilingual CLIP model. See [here](/docs/features/searching#clip-model) for instructions.
+You can change to a multilingual CLIP model. See [here](/docs/features/searching#clip-models) for instructions.
 
 ### Does Immich support Facial Recognition for videos?
 

docs/docs/administration/backup-and-restore.md

@@ -23,23 +23,32 @@ Refer to the official [postgres documentation](https://www.postgresql.org/docs/c
 It is not recommended to directly backup the `DB_DATA_LOCATION` folder. Doing so while the database is running can lead to a corrupted backup that cannot be restored.
 :::
 
-### Automatic Database Backups
+### Automatic Database Dumps
 
-For convenience, Immich will automatically create database backups by default. The backups are stored in `UPLOAD_LOCATION/backups`.  
-As mentioned above, you should make your own backup of these together with the asset folders as noted below.  
-You can adjust the schedule and amount of kept backups in the [admin settings](http://my.immich.app/admin/system-settings?isOpen=backup).  
-By default, Immich will keep the last 14 backups and create a new backup every day at 2:00 AM.
+:::warning
+The automatic database dumps can be used to restore the database in the event of damage to the Postgres database files.
+There is no monitoring for these dumps and you will not be notified if they are unsuccessful.
+:::
 
-#### Trigger Backup
+:::caution
+The database dumps do **NOT** contain any pictures or videos, only metadata. They are only usable with a copy of the other files in `UPLOAD_LOCATION` as outlined below.
+:::
 
-You are able to trigger a backup in the [admin job status page](http://my.immich.app/admin/jobs-status).
-Visit the page, open the "Create job" modal from the top right, select "Backup Database" and click "Confirm".
-A job will run and trigger a backup, you can verify this worked correctly by checking the logs or the backup folder.
-This backup will count towards the last X backups that will be kept based on your settings.
+For disaster-recovery purposes, Immich will automatically create database dumps. The dumps are stored in `UPLOAD_LOCATION/backups`.
+Please be sure to make your own, independent backup of the database together with the asset folders as noted below.
+You can adjust the schedule and amount of kept database dumps in the [admin settings](http://my.immich.app/admin/system-settings?isOpen=backup).
+By default, Immich will keep the last 14 database dumps and create a new dump every day at 2:00 AM.
+
+#### Trigger Dump
+
+You are able to trigger a database dump in the [admin job status page](http://my.immich.app/admin/jobs-status).
+Visit the page, open the "Create job" modal from the top right, select "Create Database Dump" and click "Confirm".
+A job will run and trigger a dump, you can verify this worked correctly by checking the logs or the `backups/` folder.
+This dumps will count towards the last `X` dumps that will be kept based on your settings.
 
 #### Restoring
 
-We hope to make restoring simpler in future versions, for now you can find the backups in the `UPLOAD_LOCATION/backups` folder on your host.  
+We hope to make restoring simpler in future versions, for now you can find the database dumps in the `UPLOAD_LOCATION/backups` folder on your host.
 Then please follow the steps in the following section for restoring the database.
 
 ### Manual Backup and Restore

docs/docs/administration/server-commands.md

@@ -11,6 +11,7 @@ The `immich-server` docker image comes preinstalled with an administrative CLI (
 | `enable-oauth-login`     | Enable OAuth login                    |
 | `disable-oauth-login`    | Disable OAuth login                   |
 | `list-users`             | List Immich users                     |
+| `version`                | Print Immich version                  |
 
 ## How to run a command
 
@@ -80,3 +81,10 @@ immich-admin list-users
   }
 ]
 ```
+
+Print Immich Version
+
+```
+immich-admin version
+v1.129.0
+```

docs/docs/administration/user-management.mdx

@@ -31,7 +31,7 @@ Admin can send a welcome email if the Email option is set, you can learn here ho
 
 Admin can specify the storage quota for the user as the instance's admin; once the limit is reached, the user won't be able to upload to the instance anymore.
 
-In order to select a storage quota, click on the pencil icon and enter the storage quota in GiB. You can choose an unlimited quota using the value 0 (default).
+In order to select a storage quota, click on the pencil icon and enter the storage quota in GiB. You can choose an unlimited quota by leaving it empty (default).
 
 :::tip
 The system administrator can see the usage quota percentage of all users in Server Stats page.

docs/docs/developer/database-migrations.md

@@ -1,14 +1,14 @@
 # Database Migrations
 
-After making any changes in the `server/src/entities`, a database migration need to run in order to register the changes in the database. Follow the steps below to create a new migration.
+After making any changes in the `server/src/schema`, a database migration need to run in order to register the changes in the database. Follow the steps below to create a new migration.
 
 1. Run the command
 
 ```bash
-npm run typeorm:migrations:generate <migration-name>
+npm run migrations:generate <migration-name>
 ```
 
 2. Check if the migration file makes sense.
-3. Move the migration file to folder `./server/src/migrations` in your code editor.
+3. Move the migration file to folder `./server/src/schema/migrations` in your code editor.
 
 The server will automatically detect `*.ts` file changes and restart. Part of the server start-up process includes running any new migrations, so it will be applied immediately.

docs/docs/developer/setup.md

@@ -63,6 +63,13 @@ If you only want to do web development connected to an existing, remote backend,
 IMMICH_SERVER_URL=https://demo.immich.app/ npm run dev
 ```
 
+If you're using PowerShell on Windows you may need to set the env var separately like so:
+
+```powershell
+$env:IMMICH_SERVER_URL = "https://demo.immich.app/"
+npm run dev
+```
+
 #### `@immich/ui`
 
 To see local changes to `@immich/ui` in Immich, do the following:
@@ -76,9 +83,20 @@ To see local changes to `@immich/ui` in Immich, do the following:
 
 ### Mobile app
 
-The mobile app `(/mobile)` will required Flutter toolchain 3.13.x and FVM to be installed on your system.
+#### Setup
 
-Please refer to the [Flutter's official documentation](https://flutter.dev/docs/get-started/install) for more information on setting up the toolchain on your machine.
+1. Setup Flutter toolchain using FVM.
+2. Run `flutter pub get` to install the dependencies.
+3. Run `make translation` to generate the translation file.
+4. Run `fvm flutter run` to start the app.
+
+#### Translation
+
+To add a new translation text, enter the key-value pair in the `i18n/en.json` in the root of the immich project. Then, from the `mobile/` directory, run
+
+```bash
+make translation
+```
 
 The mobile app asks you what backend to connect to. You can utilize the demo backend (https://demo.immich.app/) if you don't need to change server code or upload photos. Alternatively, you can run the server yourself per the instructions above.
 

docs/docs/features/command-line-interface.md

@@ -42,6 +42,12 @@ docker run -it -v "$(pwd)":/import:ro -e IMMICH_INSTANCE_URL=https://your-immich
 
 Please modify the `IMMICH_INSTANCE_URL` and `IMMICH_API_KEY` environment variables as suitable. You can also use a Docker env file to store your sensitive API key.
 
+This `docker run` command will directly run the command `immich` inside the container. You can directly append the desired parameters (see under "usage") to the commandline like this:
+
+```bash
+docker run -it -v "$(pwd)":/import:ro -e IMMICH_INSTANCE_URL=https://your-immich-instance/api -e IMMICH_API_KEY=your-api-key ghcr.io/immich-app/immich-cli:latest upload -a -c 5 --recursive directory/
+```
+
 ## Usage
 
 <details>
@@ -112,7 +118,7 @@ You begin by authenticating to your Immich server. For instance:
 immich login http://192.168.1.216:2283/api HFEJ38DNSDUEG
 ```
 
-This will store your credentials in a `auth.yml` file in the configuration directory which defaults to `~/.config/`. The directory can be set with the `-d` option or the environment variable `IMMICH_CONFIG_DIR`. Please keep the file secure, either by performing the logout command after you are done, or deleting it manually.
+This will store your credentials in a `auth.yml` file in the configuration directory which defaults to `~/.config/immich/`. The directory can be set with the `-d` option or the environment variable `IMMICH_CONFIG_DIR`. Please keep the file secure, either by performing the logout command after you are done, or deleting it manually.
 
 Once you are authenticated, you can upload assets to your Immich server.
 

docs/docs/features/libraries.md

@@ -95,7 +95,7 @@ The `immich-server` container will need access to the gallery. Modify your docke
 +     - /mnt/nas/christmas-trip:/mnt/media/christmas-trip:ro
 +     - /home/user/old-pics:/mnt/media/old-pics:ro
 +     - /mnt/media/videos:/mnt/media/videos:ro
-+     - /mnt/media/videos2:/mnt/media/videos2 # the files in this folder can be deleted, as it does not end with :ro
++     - /mnt/media/videos2:/mnt/media/videos2 # WARNING: Immich will be able to delete the files in this folder, as it does not end with :ro
 +     - "C:/Users/user_name/Desktop/my media:/mnt/media/my-media:ro" # import path in Windows system.
 ```
 

docs/docs/features/ml-hardware-acceleration.md

@@ -11,7 +11,9 @@ You do not need to redo any machine learning jobs after enabling hardware accele
 
 - ARM NN (Mali)
 - CUDA (NVIDIA GPUs with [compute capability](https://developer.nvidia.com/cuda-gpus) 5.2 or higher)
+- ROCm (AMD GPUs)
 - OpenVINO (Intel GPUs such as Iris Xe and Arc)
+- RKNN (Rockchip)
 
 ## Limitations
 
@@ -19,6 +21,7 @@ You do not need to redo any machine learning jobs after enabling hardware accele
 - Only Linux and Windows (through WSL2) servers are supported.
 - ARM NN is only supported on devices with Mali GPUs. Other Arm devices are not supported.
 - Some models may not be compatible with certain backends. CUDA is the most reliable.
+- Search latency isn't improved by ARM NN due to model compatibility issues preventing its use. However, smart search jobs do make use of ARM NN.
 
 ## Prerequisites
 
@@ -33,30 +36,47 @@ You do not need to redo any machine learning jobs after enabling hardware accele
   - The `hwaccel.ml.yml` file assumes the path to it is `/usr/lib/libmali.so`, so update accordingly if it is elsewhere
   - The `hwaccel.ml.yml` file assumes an additional file `/lib/firmware/mali_csffw.bin`, so update accordingly if your device's driver does not require this file
 - Optional: Configure your `.env` file, see [environment variables](/docs/install/environment-variables) for ARM NN specific settings
+  - In particular, the `MACHINE_LEARNING_ANN_FP16_TURBO` can significantly improve performance at the cost of very slightly lower accuracy
 
 #### CUDA
 
 - The GPU must have compute capability 5.2 or greater.
 - The server must have the official NVIDIA driver installed.
-- The installed driver must be >= 535 (it must support CUDA 12.2).
+- The installed driver must be >= 545 (it must support CUDA 12.3).
 - On Linux (except for WSL2), you also need to have [NVIDIA Container Toolkit][nvct] installed.
 
+#### ROCm
+
+- The GPU must be supported by ROCm. If it isn't officially supported, you can attempt to use the `HSA_OVERRIDE_GFX_VERSION` environmental variable: `HSA_OVERRIDE_GFX_VERSION=<a supported version, e.g. 10.3.0>`. If this doesn't work, you might need to also set `HSA_USE_SVM=0`.
+- The ROCm image is quite large and requires at least 35GiB of free disk space. However, pulling later updates to the service through Docker will generally only amount to a few hundred megabytes as the rest will be cached.
+- This backend is new and may experience some issues. For example, GPU power consumption can be higher than usual after running inference, even if the machine learning service is idle. In this case, it will only go back to normal after being idle for 5 minutes (configurable with the [MACHINE_LEARNING_MODEL_TTL](/docs/install/environment-variables) setting).
+
 #### OpenVINO
 
 - Integrated GPUs are more likely to experience issues than discrete GPUs, especially for older processors or servers with low RAM.
 - Ensure the server's kernel version is new enough to use the device for hardware accceleration.
 - Expect higher RAM usage when using OpenVINO compared to CPU processing.
 
+#### RKNN
+
+- You must have a supported Rockchip SoC: only RK3566, RK3568, RK3576 and RK3588 are supported at this moment.
+- Make sure you have the appropriate linux kernel driver installed
+  - This is usually pre-installed on the device vendor's Linux images
+- RKNPU driver V0.9.8 or later must be available in the host server
+  - You may confirm this by running `cat /sys/kernel/debug/rknpu/version` to check the version
+- Optional: Configure your `.env` file, see [environment variables](/docs/install/environment-variables) for RKNN specific settings
+  - In particular, setting `MACHINE_LEARNING_RKNN_THREADS` to 2 or 3 can _dramatically_ improve performance for RK3576 and RK3588 compared to the default of 1, at the expense of multiplying the amount of RAM each model uses by that amount.
+
 ## Setup
 
 1. If you do not already have it, download the latest [`hwaccel.ml.yml`][hw-file] file and ensure it's in the same folder as the `docker-compose.yml`.
 2. In the `docker-compose.yml` under `immich-machine-learning`, uncomment the `extends` section and change `cpu` to the appropriate backend.
-3. Still in `immich-machine-learning`, add one of -[armnn, cuda, openvino] to the `image` section's tag at the end of the line.
+3. Still in `immich-machine-learning`, add one of -[armnn, cuda, rocm, openvino, rknn] to the `image` section's tag at the end of the line.
 4. Redeploy the `immich-machine-learning` container with these updated settings.
 
 ### Confirming Device Usage
 
-You can confirm the device is being recognized and used by checking its utilization. There are many tools to display this, such as `nvtop` for NVIDIA or Intel and `intel_gpu_top` for Intel.
+You can confirm the device is being recognized and used by checking its utilization. There are many tools to display this, such as `nvtop` for NVIDIA or Intel, `intel_gpu_top` for Intel, and `radeontop` for AMD.
 
 You can also check the logs of the `immich-machine-learning` container. When a Smart Search or Face Detection job begins, or when you search with text in Immich, you should either see a log for `Available ORT providers` containing the relevant provider (e.g. `CUDAExecutionProvider` in the case of CUDA), or a `Loaded ANN model` log entry without errors in the case of ARM NN.
 
@@ -127,3 +147,12 @@ Note that you should increase job concurrencies to increase overall utilization
 - If you encounter an error when a model is running, try a different model to see if the issue is model-specific.
 - You may want to increase concurrency past the default for higher utilization. However, keep in mind that this will also increase VRAM consumption.
 - Larger models benefit more from hardware acceleration, if you have the VRAM for them.
+- Compared to ARM NN, RKNPU has:
+  - Wider model support (including for search, which ARM NN does not accelerate)
+  - Less heat generation
+  - Very slightly lower accuracy (RKNPU always uses FP16, while ARM NN by default uses higher precision FP32 unless `MACHINE_LEARNING_ANN_FP16_TURBO` is enabled)
+  - Varying speed (tested on RK3588):
+    - If `MACHINE_LEARNING_RKNN_THREADS` is at the default of 1, RKNPU will have substantially lower throughput for ML jobs than ARM NN in most cases, but similar latency (such as when searching)
+    - If `MACHINE_LEARNING_RKNN_THREADS` is set to 3, it will be somewhat faster than ARM NN at FP32, but somewhat slower than ARM NN if `MACHINE_LEARNING_ANN_FP16_TURBO` is enabled
+    - When other tasks also use the GPU (like transcoding), RKNPU has a significant advantage over ARM NN as it uses the otherwise idle NPU instead of competing for GPU usage
+  - Lower RAM usage if `MACHINE_LEARNING_RKNN_THREADS` is at the default of 1, but significantly higher if greater than 1 (which is necessary for it to fully utilize the NPU and hence be comparable in speed to ARM NN)

docs/docs/guides/remote-machine-learning.md

@@ -23,12 +23,12 @@ name: immich_remote_ml
 services:
   immich-machine-learning:
     container_name: immich_machine_learning
-    # For hardware acceleration, add one of -[armnn, cuda, openvino] to the image tag.
+    # For hardware acceleration, add one of -[armnn, cuda, rocm, openvino, rknn] to the image tag.
     # Example tag: ${IMMICH_VERSION:-release}-cuda
     image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
     # extends:
     #   file: hwaccel.ml.yml
-    #   service: # set to one of [armnn, cuda, openvino, openvino-wsl] for accelerated inference - use the `-wsl` version for WSL2 where applicable
+    #   service: # set to one of [armnn, cuda, rocm, openvino, openvino-wsl, rknn] for accelerated inference - use the `-wsl` version for WSL2 where applicable
     volumes:
       - model-cache:/cache
     restart: always

docs/docs/install/config-file.md

@@ -1,3 +1,7 @@
+---
+sidebar_position: 100
+---
+
 # Config File
 
 A config file can be provided as an alternative to the UI configuration.

docs/docs/install/docker-compose.mdx

@@ -69,39 +69,7 @@ If you get an error `can't set healthcheck.start_interval as feature require Doc
 
 ## Next Steps
 
-Read the [Post Installation](/docs/install/post-install.mdx) steps or setup optional features below.
-
-### Setting up optional features
-
-- [External Libraries](/docs/features/libraries.md): Adding your existing photo library to Immich
-- [Hardware Transcoding](/docs/features/hardware-transcoding.md): Speeding up video transcoding
-- [Hardware-Accelerated Machine Learning](/docs/features/ml-hardware-acceleration.md): Speeding up various machine learning tasks in Immich
-
-### Upgrading
-
-:::danger Read the release notes
-Immich is currently under heavy development, which means you can expect [breaking changes][breaking] and bugs. Therefore, we recommend reading the release notes prior to updating and to take special care when using automated tools like [Watchtower][watchtower].
-
-You can see versions that had breaking changes [here][breaking].
-:::
-
-If `IMMICH_VERSION` is set, it will need to be updated to the latest or desired version.
-
-When a new version of Immich is [released][releases], the application can be upgraded and restarted with the following commands, run in the directory with the `docker-compose.yml` file:
-
-```bash title="Upgrade and restart Immich"
-docker compose pull && docker compose up -d
-```
-
-To clean up disk space, the old version's obsolete container images can be deleted with the following command:
-
-```bash title="Clean up unused Docker images"
-docker image prune
-```
+Read the [Post Installation](/docs/install/post-install.mdx) steps and [upgrade instructions](/docs/install/upgrading.md).
 
 [compose-file]: https://github.com/immich-app/immich/releases/latest/download/docker-compose.yml
 [env-file]: https://github.com/immich-app/immich/releases/latest/download/example.env
-[watchtower]: https://containrrr.dev/watchtower/
-[breaking]: https://github.com/immich-app/immich/discussions?discussions_q=label%3Achangelog%3Abreaking-change+sort%3Adate_created
-[container-auth]: https://docs.github.com/en/packages/working-with-a-github-packages-registry/working-with-the-container-registry#authenticating-to-the-container-registry
-[releases]: https://github.com/immich-app/immich/releases

docs/docs/install/environment-variables.md

@@ -170,6 +170,8 @@ Redis (Sentinel) URL example JSON before encoding:
 | `MACHINE_LEARNING_MAX_BATCH_SIZE__FACIAL_RECOGNITION`       | Set the maximum number of faces that will be processed at once by the facial recognition model      |  None (`1` if using OpenVINO)   | machine learning |
 | `MACHINE_LEARNING_PING_TIMEOUT`                             | How long (ms) to wait for a PING response when checking if an ML server is available                |             `2000`              | server           |
 | `MACHINE_LEARNING_AVAILABILITY_BACKOFF_TIME`                | How long to ignore ML servers that are offline before trying again                                  |             `30000`             | server           |
+| `MACHINE_LEARNING_RKNN`                                     | Enable RKNN hardware acceleration if supported                                                      |             `True`              | machine learning |
+| `MACHINE_LEARNING_RKNN_THREADS`                             | How many threads of RKNN runtime should be spinned up while inferencing.                            |               `1`               | machine learning |
 
 \*1: It is recommended to begin with this parameter when changing the concurrency levels of the machine learning service and then tune the other ones.
 

docs/docs/install/post-install.mdx

@@ -41,3 +41,9 @@ A list of common steps to take after installing Immich include:
 ## Step 7 - Setup Server Backups
 
 <ServerBackup />
+
+## Setting up optional features
+
+- [External Libraries](/docs/features/libraries.md): Adding your existing photo library to Immich
+- [Hardware Transcoding](/docs/features/hardware-transcoding.md): Speeding up video transcoding
+- [Hardware-Accelerated Machine Learning](/docs/features/ml-hardware-acceleration.md): Speeding up various machine learning tasks in Immich

docs/docs/install/synology.md

@@ -67,10 +67,4 @@ Click "**Edit Rules**" and add the following firewall rules:
 
 ## Next Steps
 
-Read the [Post Installation](/docs/install/post-install.mdx) steps or setup optional features below.
-
-### Setting up optional features
-
-- [External Libraries](/docs/features/libraries.md): Adding your existing photo library to Immich
-- [Hardware Transcoding](/docs/features/hardware-transcoding.md): Speeding up video transcoding
-- [Hardware-Accelerated Machine Learning](/docs/features/ml-hardware-acceleration.md): Speeding up various machine learning tasks in Immich
+Read the [Post Installation](/docs/install/post-install.mdx) steps and [upgrade instructions](/docs/install/upgrading.md).

docs/docs/install/truenas.md

@@ -247,6 +247,10 @@ Some examples are: `IMMICH_VERSION`, `UPLOAD_LOCATION`, `DB_DATA_LOCATION`, `TZ`
 
 ## Updating the App
 
+:::danger
+Make sure to read the general [upgrade instructions](/docs/install/upgrading.md).
+:::
+
 When updates become available, SCALE alerts and provides easy updates.
 To update the app to the latest version:
 

docs/docs/install/unraid.md

@@ -131,6 +131,10 @@ For more information on how to use the application once installed, please refer
 
 ## Updating Steps
 
+:::danger
+Make sure to read the general [upgrade instructions](/docs/install/upgrading.md).
+:::
+
 Updating is extremely easy however it's important to be aware that containers managed via the Docker Compose Manager plugin do not integrate with Unraid's native dockerman UI, the label "_update ready_" will always be present on containers installed via the Docker Compose Manager.
 
 <img

docs/docs/install/upgrading.md

@@ -0,0 +1,29 @@
+---
+sidebar_position: 95
+---
+
+# Upgrading
+
+:::danger Read the release notes
+Immich is currently under heavy development, which means you can expect [breaking changes][breaking] and bugs. You should read the release notes prior to updating and take special care when using automated tools like [Watchtower][watchtower].
+
+You can see versions that had breaking changes [here][breaking].
+:::
+
+When a new version of Immich is [released][releases], you should read the release notes and account for any breaking changes noted (as mentioned above).
+If you use `IMMICH_VERSION` in your `.env` file, it will need to be updated to the latest or desired version.
+After that, the application can be upgraded and restarted with the following commands, run in the directory with the `docker-compose.yml` file:
+
+```bash title="Upgrade and restart Immich"
+docker compose pull && docker compose up -d
+```
+
+To clean up disk space, the old version's obsolete container images can be deleted with the following command:
+
+```bash title="Clean up unused Docker images"
+docker image prune
+```
+
+[watchtower]: https://containrrr.dev/watchtower/
+[breaking]: https://github.com/immich-app/immich/discussions?discussions_q=label%3Achangelog%3Abreaking-change+sort%3Adate_created
+[releases]: https://github.com/immich-app/immich/releases

docs/docs/partials/_server-backup.md

@@ -1,2 +1,7 @@
 Now that you have imported some pictures, you should setup server backups to preserve your memories.
 You can do so by following our [backup guide](/docs/administration/backup-and-restore.md).
+
+:::danger
+Immich is still under heavy development _and_ handles very important data.
+It is essential that you set up good backups, and test them.
+:::

docs/src/components/community-projects.tsx

@@ -40,8 +40,9 @@ const projects: CommunityProjectProps[] = [
   },
   {
     title: 'Lightroom Immich Plugin: lrc-immich-plugin',
-    description: 'Another Lightroom plugin to publish or export photos from Lightroom to Immich.',
-    url: 'https://github.com/bmachek/lrc-immich-plugin',
+    description:
+      'Lightroom plugin to publish, export photos from Lightroom to Immich. Import from Immich to Lightroom is also supported.',
+    url: 'https://blog.fokuspunk.de/lrc-immich-plugin/',
   },
   {
     title: 'Immich Duplicate Finder',

docs/src/pages/errors.md

@@ -0,0 +1,5 @@
+# Errors
+
+## TypeORM Upgrade
+
+The upgrade to Immich `v2.x.x` has a required upgrade path to `v1.132.0+`. This means it is required to start up the application at least once on version `1.132.0` (or later). Doing so will complete database schema upgrades that are required for `v2.0.0`. After Immich has successfully booted on this version, shut the system down and try the `v2.x.x` upgrade again.

docs/src/pages/index.tsx

@@ -4,6 +4,7 @@ import Layout from '@theme/Layout';
 import { discordPath, discordViewBox } from '@site/src/components/svg-paths';
 import ThemedImage from '@theme/ThemedImage';
 import Icon from '@mdi/react';
+import { mdiAndroid } from '@mdi/js';
 function HomepageHeader() {
   return (
     <header>
@@ -88,11 +89,18 @@ function HomepageHeader() {
               <img className="h-24" alt="Get it on Google Play" src="/img/google-play-badge.png" />
             </a>
           </div>
+
           <div className="h-24">
             <a href="https://apps.apple.com/sg/app/immich/id1613945652">
               <img className="h-24 sm:p-3.5 p-3" alt="Download on the App Store" src="/img/ios-app-store-badge.svg" />
             </a>
           </div>
+
+          <div className="h-24">
+            <a href="https://github.com/immich-app/immich/releases/latest">
+              <img className="h-24 sm:p-3.5 p-3" alt="Download APK" src="/img/download-apk-github.svg" />
+            </a>
+          </div>
         </div>
         <ThemedImage
           sources={{ dark: '/img/app-qr-code-dark.svg', light: '/img/app-qr-code-light.svg' }}

docs/src/pages/roadmap.tsx

@@ -76,6 +76,7 @@ import {
   mdiWeb,
   mdiDatabaseOutline,
   mdiLinkEdit,
+  mdiTagFaces,
   mdiMovieOpenPlayOutline,
 } from '@mdi/js';
 import Layout from '@theme/Layout';
@@ -83,6 +84,8 @@ import React from 'react';
 import { Item, Timeline } from '../components/timeline';
 
 const releases = {
+  'v1.130.0': new Date(2025, 2, 25),
+  'v1.127.0': new Date(2025, 1, 26),
   'v1.122.0': new Date(2024, 11, 5),
   'v1.120.0': new Date(2024, 10, 6),
   'v1.114.0': new Date(2024, 8, 6),
@@ -242,6 +245,21 @@ const roadmap: Item[] = [
 ];
 
 const milestones: Item[] = [
+  withRelease({
+    icon: mdiFolderMultiple,
+    iconColor: 'brown',
+    title: 'Folders view in the mobile app',
+    description: 'Browse your photos and videos in their folder structure inside the mobile app',
+    release: 'v1.130.0',
+  }),
+  withRelease({
+    icon: mdiTagFaces,
+    iconColor: 'teal',
+    title: 'Manual face tagging',
+    description:
+      'Manually tag or remove faces in photos and videos, even when automatic detection misses or misidentifies them.',
+    release: 'v1.127.0',
+  }),
   {
     icon: mdiStar,
     iconColor: 'gold',
@@ -266,8 +284,8 @@ const milestones: Item[] = [
   withRelease({
     icon: mdiDatabaseOutline,
     iconColor: 'brown',
-    title: 'Automatic database backups',
-    description: 'Database backups are now integrated into the Immich server',
+    title: 'Automatic database dumps',
+    description: 'Database dumps are now integrated into the Immich server',
     release: 'v1.120.0',
   }),
   {
@@ -300,7 +318,7 @@ const milestones: Item[] = [
   withRelease({
     icon: mdiFolderMultiple,
     iconColor: 'brown',
-    title: 'Folders',
+    title: 'Folders view',
     description: 'Browse your photos and videos in their folder structure',
     release: 'v1.113.0',
   }),

docs/static/archived-versions.json

@@ -1,4 +1,44 @@
 [
+  {
+    "label": "v1.132.1",
+    "url": "https://v1.132.1.archive.immich.app"
+  },
+  {
+    "label": "v1.132.0",
+    "url": "https://v1.132.0.archive.immich.app"
+  },
+  {
+    "label": "v1.131.3",
+    "url": "https://v1.131.3.archive.immich.app"
+  },
+  {
+    "label": "v1.131.2",
+    "url": "https://v1.131.2.archive.immich.app"
+  },
+  {
+    "label": "v1.131.1",
+    "url": "https://v1.131.1.archive.immich.app"
+  },
+  {
+    "label": "v1.131.0",
+    "url": "https://v1.131.0.archive.immich.app"
+  },
+  {
+    "label": "v1.130.3",
+    "url": "https://v1.130.3.archive.immich.app"
+  },
+  {
+    "label": "v1.130.2",
+    "url": "https://v1.130.2.archive.immich.app"
+  },
+  {
+    "label": "v1.130.1",
+    "url": "https://v1.130.1.archive.immich.app"
+  },
+  {
+    "label": "v1.130.0",
+    "url": "https://v1.130.0.archive.immich.app"
+  },
   {
     "label": "v1.129.0",
     "url": "https://v1.129.0.archive.immich.app"

e2e/eslint.config.mjs

@@ -1,39 +1,29 @@
-import { FlatCompat } from '@eslint/eslintrc';
 import js from '@eslint/js';
-import typescriptEslint from '@typescript-eslint/eslint-plugin';
-import tsParser from '@typescript-eslint/parser';
+import eslintPluginPrettierRecommended from 'eslint-plugin-prettier/recommended';
+import eslintPluginUnicorn from 'eslint-plugin-unicorn';
 import globals from 'globals';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import typescriptEslint from 'typescript-eslint';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
-const compat = new FlatCompat({
-  baseDirectory: __dirname,
-  recommendedConfig: js.configs.recommended,
-  allConfig: js.configs.all,
-});
 
-export default [
+export default typescriptEslint.config([
+  eslintPluginUnicorn.configs.recommended,
+  eslintPluginPrettierRecommended,
+  js.configs.recommended,
+  typescriptEslint.configs.recommended,
   {
     ignores: ['eslint.config.mjs'],
   },
-  ...compat.extends(
-    'plugin:@typescript-eslint/recommended',
-    'plugin:prettier/recommended',
-    'plugin:unicorn/recommended',
-  ),
   {
-    plugins: {
-      '@typescript-eslint': typescriptEslint,
-    },
-
     languageOptions: {
       globals: {
         ...globals.node,
       },
 
-      parser: tsParser,
+      parser: typescriptEslint.parser,
       ecmaVersion: 5,
       sourceType: 'module',
 
@@ -62,4 +52,4 @@ export default [
       'object-shorthand': ['error', 'always'],
     },
   },
-];
+]);

e2e/package.json

@@ -1,6 +1,6 @@
 {
   "name": "immich-e2e",
-  "version": "1.129.0",
+  "version": "1.132.1",
   "description": "",
   "main": "index.js",
   "type": "module",
@@ -25,18 +25,16 @@
     "@immich/sdk": "file:../open-api/typescript-sdk",
     "@playwright/test": "^1.44.1",
     "@types/luxon": "^3.4.2",
-    "@types/node": "^22.13.9",
+    "@types/node": "^22.14.1",
     "@types/oidc-provider": "^8.5.1",
     "@types/pg": "^8.11.0",
     "@types/pngjs": "^6.0.4",
     "@types/supertest": "^6.0.2",
-    "@typescript-eslint/eslint-plugin": "^8.15.0",
-    "@typescript-eslint/parser": "^8.15.0",
     "@vitest/coverage-v8": "^3.0.0",
     "eslint": "^9.14.0",
     "eslint-config-prettier": "^10.0.0",
     "eslint-plugin-prettier": "^5.1.3",
-    "eslint-plugin-unicorn": "^56.0.1",
+    "eslint-plugin-unicorn": "^57.0.0",
     "exiftool-vendored": "^28.3.1",
     "globals": "^16.0.0",
     "jose": "^5.6.3",
@@ -49,6 +47,7 @@
     "socket.io-client": "^4.7.4",
     "supertest": "^7.0.0",
     "typescript": "^5.3.3",
+    "typescript-eslint": "^8.28.0",
     "utimes": "^5.2.1",
     "vitest": "^3.0.0"
   },

e2e/src/api/specs/asset.e2e-spec.ts

@@ -1141,7 +1141,7 @@ describe('/asset', () => {
             fNumber: 8,
             focalLength: 97,
             iso: 100,
-            lensModel: 'E PZ 18-105mm F4 G OSS',
+            lensModel: 'Sony E PZ 18-105mm F4 G OSS',
             fileSizeInByte: 25_001_984,
             dateTimeOriginal: '2016-09-27T10:51:44+00:00',
             orientation: '1',
@@ -1163,7 +1163,7 @@ describe('/asset', () => {
             fNumber: 22,
             focalLength: 25,
             iso: 100,
-            lensModel: 'E 25mm F2',
+            lensModel: 'Zeiss Batis 25mm F2',
             fileSizeInByte: 49_512_448,
             dateTimeOriginal: '2016-01-08T14:08:01+00:00',
             orientation: '1',
@@ -1234,7 +1234,7 @@ describe('/asset', () => {
             focalLength: 18.3,
             iso: 100,
             latitude: 36.613_24,
-            lensModel: 'GR LENS 18.3mm F2.8',
+            lensModel: '18.3mm F2.8',
             longitude: -121.897_85,
             make: 'RICOH IMAGING COMPANY, LTD.',
             model: 'RICOH GR III',
@@ -1257,6 +1257,7 @@ describe('/asset', () => {
 
       for (const { id, status } of assets) {
         expect(status).toBe(AssetMediaStatus.Created);
+        // longer timeout as the thumbnail generation from full-size raw files can take a while
         await utils.waitForWebsocketEvent({ event: 'assetUpload', id });
       }
 

e2e/src/api/specs/auth.e2e-spec.ts

@@ -5,7 +5,7 @@ import { app, utils } from 'src/utils';
 import request from 'supertest';
 import { beforeEach, describe, expect, it } from 'vitest';
 
-const { name, email, password } = signupDto.admin;
+const { email, password } = signupDto.admin;
 
 describe(`/auth/admin-sign-up`, () => {
   beforeEach(async () => {
@@ -13,33 +13,6 @@ describe(`/auth/admin-sign-up`, () => {
   });
 
   describe('POST /auth/admin-sign-up', () => {
-    const invalid = [
-      {
-        should: 'require an email address',
-        data: { name, password },
-      },
-      {
-        should: 'require a password',
-        data: { name, email },
-      },
-      {
-        should: 'require a name',
-        data: { email, password },
-      },
-      {
-        should: 'require a valid email',
-        data: { name, email: 'immich', password },
-      },
-    ];
-
-    for (const { should, data } of invalid) {
-      it(`should ${should}`, async () => {
-        const { status, body } = await request(app).post('/auth/admin-sign-up').send(data);
-        expect(status).toEqual(400);
-        expect(body).toEqual(errorDto.badRequest());
-      });
-    }
-
     it(`should sign up the admin`, async () => {
       const { status, body } = await request(app).post('/auth/admin-sign-up').send(signupDto.admin);
       expect(status).toBe(201);
@@ -57,14 +30,6 @@ describe(`/auth/admin-sign-up`, () => {
       });
     });
 
-    it('should transform email to lower case', async () => {
-      const { status, body } = await request(app)
-        .post('/auth/admin-sign-up')
-        .send({ ...signupDto.admin, email: 'aDmIn@IMMICH.cloud' });
-      expect(status).toEqual(201);
-      expect(body).toEqual(signupResponseDto.admin);
-    });
-
     it('should not allow a second admin to sign up', async () => {
       await signUpAdmin({ signUpDto: signupDto.admin });
 

e2e/src/api/specs/library.e2e-spec.ts

@@ -329,7 +329,7 @@ describe('/libraries', () => {
       const library = await utils.createLibrary(admin.accessToken, {
         ownerId: admin.userId,
         importPaths: [`${testAssetDirInternal}/temp`],
-        exclusionPatterns: ['**/directoryA'],
+        exclusionPatterns: ['**/directoryA/**'],
       });
 
       await utils.scan(admin.accessToken, library.id);
@@ -337,7 +337,82 @@ describe('/libraries', () => {
       const { assets } = await utils.searchAssets(admin.accessToken, { libraryId: library.id });
 
       expect(assets.count).toBe(1);
-      expect(assets.items[0].originalPath.includes('directoryB'));
+
+      expect(assets.items).toEqual(
+        expect.arrayContaining([
+          expect.objectContaining({ originalPath: expect.stringContaining('directoryB/assetB.png') }),
+        ]),
+      );
+    });
+
+    it('should scan external library with multiple exclusion patterns', async () => {
+      const library = await utils.createLibrary(admin.accessToken, {
+        ownerId: admin.userId,
+        importPaths: [`${testAssetDirInternal}/temp`],
+        exclusionPatterns: ['**/directoryA/**', '**/directoryB/**'],
+      });
+
+      await utils.scan(admin.accessToken, library.id);
+
+      const { assets } = await utils.searchAssets(admin.accessToken, { libraryId: library.id });
+
+      expect(assets.count).toBe(0);
+
+      expect(assets.items).toEqual([]);
+    });
+
+    it('should remove assets covered by a new exclusion pattern', async () => {
+      const library = await utils.createLibrary(admin.accessToken, {
+        ownerId: admin.userId,
+        importPaths: [`${testAssetDirInternal}/temp`],
+      });
+
+      await utils.scan(admin.accessToken, library.id);
+
+      {
+        const { assets } = await utils.searchAssets(admin.accessToken, { libraryId: library.id });
+
+        expect(assets.count).toBe(2);
+
+        expect(assets.items).toEqual(
+          expect.arrayContaining([
+            expect.objectContaining({ originalPath: expect.stringContaining('directoryA/assetA.png') }),
+            expect.objectContaining({ originalPath: expect.stringContaining('directoryB/assetB.png') }),
+          ]),
+        );
+      }
+
+      await utils.updateLibrary(admin.accessToken, library.id, {
+        exclusionPatterns: ['**/directoryA/**'],
+      });
+
+      await utils.scan(admin.accessToken, library.id);
+
+      {
+        const { assets } = await utils.searchAssets(admin.accessToken, { libraryId: library.id });
+
+        expect(assets.count).toBe(1);
+
+        expect(assets.items).toEqual(
+          expect.arrayContaining([
+            expect.objectContaining({ originalPath: expect.stringContaining('directoryB/assetB.png') }),
+          ]),
+        );
+      }
+
+      await utils.updateLibrary(admin.accessToken, library.id, {
+        exclusionPatterns: ['**/directoryA/**', '**/directoryB/**'],
+      });
+
+      await utils.scan(admin.accessToken, library.id);
+
+      {
+        const { assets } = await utils.searchAssets(admin.accessToken, { libraryId: library.id });
+
+        expect(assets.count).toBe(0);
+
+        expect(assets.items).toEqual([]);
+      }
     });
 
     it('should scan multiple import paths', async () => {
@@ -454,6 +529,133 @@ describe('/libraries', () => {
       utils.removeImageFile(`${testAssetDir}/temp/folder${char}2/asset2.png`);
     });
 
+    it('should respect exclusion patterns when using multiple import paths', async () => {
+      // https://github.com/immich-app/immich/issues/17121
+      const library = await utils.createLibrary(admin.accessToken, {
+        ownerId: admin.userId,
+        importPaths: [`${testAssetDirInternal}/temp/exclusion/`, `${testAssetDirInternal}/temp/exclusion2/`],
+      });
+
+      const excludedFolder = `Raw`;
+
+      utils.createImageFile(`${testAssetDir}/temp/exclusion/asset1.png`);
+      utils.createImageFile(`${testAssetDir}/temp/exclusion/${excludedFolder}/asset2.png`);
+
+      await utils.scan(admin.accessToken, library.id);
+
+      {
+        const { assets } = await utils.searchAssets(admin.accessToken, { libraryId: library.id });
+
+        expect(assets.items).toEqual(
+          expect.arrayContaining([
+            expect.objectContaining({ originalPath: expect.stringContaining(`/asset1.png`) }),
+            expect.objectContaining({ originalPath: expect.stringContaining(`${excludedFolder}/asset2.png`) }),
+          ]),
+        );
+      }
+
+      await utils.scan(admin.accessToken, library.id);
+
+      {
+        const { assets } = await utils.searchAssets(admin.accessToken, { libraryId: library.id });
+
+        expect(assets.items).toEqual(
+          expect.arrayContaining([
+            expect.objectContaining({ originalPath: expect.stringContaining(`/asset1.png`) }),
+            expect.objectContaining({ originalPath: expect.stringContaining(`${excludedFolder}/asset2.png`) }),
+          ]),
+        );
+      }
+
+      await utils.updateLibrary(admin.accessToken, library.id, { exclusionPatterns: [`**/${excludedFolder}/**`] });
+      await utils.scan(admin.accessToken, library.id);
+
+      {
+        const { assets } = await utils.searchAssets(admin.accessToken, { libraryId: library.id });
+
+        expect(assets.items).toEqual([
+          expect.objectContaining({ originalPath: expect.stringContaining(`/asset1.png`) }),
+        ]);
+      }
+
+      await utils.scan(admin.accessToken, library.id);
+
+      {
+        const { assets } = await utils.searchAssets(admin.accessToken, { libraryId: library.id });
+
+        expect(assets.items).toEqual([
+          expect.objectContaining({ originalPath: expect.stringContaining(`/asset1.png`) }),
+        ]);
+      }
+
+      utils.removeImageFile(`${testAssetDir}/temp/exclusion/asset1.png`);
+      utils.removeImageFile(`${testAssetDir}/temp/exclusion/${excludedFolder}/asset2.png`);
+    });
+
+    const annoyingExclusionPatterns = ['@', '#', '$', '%', '^', '&', '='];
+
+    it.each(annoyingExclusionPatterns)('should support exclusion patterns with %s', async (char) => {
+      const library = await utils.createLibrary(admin.accessToken, {
+        ownerId: admin.userId,
+        importPaths: [`${testAssetDirInternal}/temp/exclusion/`],
+      });
+
+      const excludedFolder = `${char}folder`;
+
+      utils.createImageFile(`${testAssetDir}/temp/exclusion/asset1.png`);
+      utils.createImageFile(`${testAssetDir}/temp/exclusion/${excludedFolder}/asset2.png`);
+
+      await utils.scan(admin.accessToken, library.id);
+
+      {
+        const { assets } = await utils.searchAssets(admin.accessToken, { libraryId: library.id });
+
+        expect(assets.items).toEqual(
+          expect.arrayContaining([
+            expect.objectContaining({ originalPath: expect.stringContaining(`/asset1.png`) }),
+            expect.objectContaining({ originalPath: expect.stringContaining(`${excludedFolder}/asset2.png`) }),
+          ]),
+        );
+      }
+
+      await utils.scan(admin.accessToken, library.id);
+
+      {
+        const { assets } = await utils.searchAssets(admin.accessToken, { libraryId: library.id });
+
+        expect(assets.items).toEqual(
+          expect.arrayContaining([
+            expect.objectContaining({ originalPath: expect.stringContaining(`/asset1.png`) }),
+            expect.objectContaining({ originalPath: expect.stringContaining(`${excludedFolder}/asset2.png`) }),
+          ]),
+        );
+      }
+
+      await utils.updateLibrary(admin.accessToken, library.id, { exclusionPatterns: [`**/${excludedFolder}/**`] });
+      await utils.scan(admin.accessToken, library.id);
+
+      {
+        const { assets } = await utils.searchAssets(admin.accessToken, { libraryId: library.id });
+
+        expect(assets.items).toEqual([
+          expect.objectContaining({ originalPath: expect.stringContaining(`/asset1.png`) }),
+        ]);
+      }
+
+      await utils.scan(admin.accessToken, library.id);
+
+      {
+        const { assets } = await utils.searchAssets(admin.accessToken, { libraryId: library.id });
+
+        expect(assets.items).toEqual([
+          expect.objectContaining({ originalPath: expect.stringContaining(`/asset1.png`) }),
+        ]);
+      }
+
+      utils.removeImageFile(`${testAssetDir}/temp/exclusion/asset1.png`);
+      utils.removeImageFile(`${testAssetDir}/temp/exclusion/${excludedFolder}/asset2.png`);
+    });
+
     it('should reimport a modified file', async () => {
       const library = await utils.createLibrary(admin.accessToken, {
         ownerId: admin.userId,

e2e/src/api/specs/oauth.e2e-spec.ts

@@ -6,6 +6,7 @@ import {
   startOAuth,
   updateConfig,
 } from '@immich/sdk';
+import { createHash, randomBytes } from 'node:crypto';
 import { errorDto } from 'src/responses';
 import { OAuthClient, OAuthUser } from 'src/setup/auth-server';
 import { app, asBearerAuth, baseUrl, utils } from 'src/utils';
@@ -21,18 +22,30 @@ const mobileOverrideRedirectUri = 'https://photos.immich.app/oauth/mobile-redire
 
 const redirect = async (url: string, cookies?: string[]) => {
   const { headers } = await request(url)
-    .get('/')
+    .get('')
     .set('Cookie', cookies || []);
   return { cookies: (headers['set-cookie'] as unknown as string[]) || [], location: headers.location };
 };
 
+// Function to generate a code challenge from the verifier
+const generateCodeChallenge = async (codeVerifier: string): Promise<string> => {
+  const hashed = createHash('sha256').update(codeVerifier).digest();
+  return hashed.toString('base64url');
+};
+
 const loginWithOAuth = async (sub: OAuthUser | string, redirectUri?: string) => {
-  const { url } = await startOAuth({ oAuthConfigDto: { redirectUri: redirectUri ?? `${baseUrl}/auth/login` } });
+  const state = randomBytes(16).toString('base64url');
+  const codeVerifier = randomBytes(64).toString('base64url');
+  const codeChallenge = await generateCodeChallenge(codeVerifier);
+
+  const { url } = await startOAuth({
+    oAuthConfigDto: { redirectUri: redirectUri ?? `${baseUrl}/auth/login`, state, codeChallenge },
+  });
 
   // login
   const response1 = await redirect(url.replace(authServer.internal, authServer.external));
   const response2 = await request(authServer.external + response1.location)
-    .post('/')
+    .post('')
     .set('Cookie', response1.cookies)
     .type('form')
     .send({ prompt: 'login', login: sub, password: 'password' });
@@ -40,7 +53,7 @@ const loginWithOAuth = async (sub: OAuthUser | string, redirectUri?: string) =>
   // approve
   const response3 = await redirect(response2.header.location, response1.cookies);
   const response4 = await request(authServer.external + response3.location)
-    .post('/')
+    .post('')
     .type('form')
     .set('Cookie', response3.cookies)
     .send({ prompt: 'consent' });
@@ -51,9 +64,9 @@ const loginWithOAuth = async (sub: OAuthUser | string, redirectUri?: string) =>
   expect(redirectUrl).toBeDefined();
   const params = new URL(redirectUrl).searchParams;
   expect(params.get('code')).toBeDefined();
-  expect(params.get('state')).toBeDefined();
+  expect(params.get('state')).toBe(state);
 
-  return redirectUrl;
+  return { url: redirectUrl, state, codeVerifier };
 };
 
 const setupOAuth = async (token: string, dto: Partial<SystemConfigOAuthDto>) => {
@@ -119,9 +132,42 @@ describe(`/oauth`, () => {
       expect(body).toEqual(errorDto.badRequest(['url should not be empty']));
     });
 
-    it('should auto register the user by default', async () => {
-      const url = await loginWithOAuth('oauth-auto-register');
+    it(`should throw an error if the state is not provided`, async () => {
+      const { url } = await loginWithOAuth('oauth-auto-register');
       const { status, body } = await request(app).post('/oauth/callback').send({ url });
+      expect(status).toBe(400);
+      expect(body).toEqual(errorDto.badRequest('OAuth state is missing'));
+    });
+
+    it(`should throw an error if the state mismatches`, async () => {
+      const callbackParams = await loginWithOAuth('oauth-auto-register');
+      const { state } = await loginWithOAuth('oauth-auto-register');
+      const { status, body } = await request(app)
+        .post('/oauth/callback')
+        .send({ ...callbackParams, state });
+      expect(status).toBeGreaterThanOrEqual(400);
+    });
+
+    it(`should throw an error if the codeVerifier is not provided`, async () => {
+      const { url, state } = await loginWithOAuth('oauth-auto-register');
+      const { status, body } = await request(app).post('/oauth/callback').send({ url, state });
+      expect(status).toBe(400);
+      expect(body).toEqual(errorDto.badRequest('OAuth code verifier is missing'));
+    });
+
+    it(`should throw an error if the codeVerifier doesn't match the challenge`, async () => {
+      const callbackParams = await loginWithOAuth('oauth-auto-register');
+      const { codeVerifier } = await loginWithOAuth('oauth-auto-register');
+      const { status, body } = await request(app)
+        .post('/oauth/callback')
+        .send({ ...callbackParams, codeVerifier });
+      console.log(body);
+      expect(status).toBeGreaterThanOrEqual(400);
+    });
+
+    it('should auto register the user by default', async () => {
+      const callbackParams = await loginWithOAuth('oauth-auto-register');
+      const { status, body } = await request(app).post('/oauth/callback').send(callbackParams);
       expect(status).toBe(201);
       expect(body).toMatchObject({
         accessToken: expect.any(String),
@@ -132,16 +178,30 @@ describe(`/oauth`, () => {
       });
     });
 
+    it('should allow passing state and codeVerifier via cookies', async () => {
+      const { url, state, codeVerifier } = await loginWithOAuth('oauth-auto-register');
+      const { status, body } = await request(app)
+        .post('/oauth/callback')
+        .set('Cookie', [`immich_oauth_state=${state}`, `immich_oauth_code_verifier=${codeVerifier}`])
+        .send({ url });
+      expect(status).toBe(201);
+      expect(body).toMatchObject({
+        accessToken: expect.any(String),
+        userId: expect.any(String),
+        userEmail: 'oauth-auto-register@immich.app',
+      });
+    });
+
     it('should handle a user without an email', async () => {
-      const url = await loginWithOAuth(OAuthUser.NO_EMAIL);
-      const { status, body } = await request(app).post('/oauth/callback').send({ url });
+      const callbackParams = await loginWithOAuth(OAuthUser.NO_EMAIL);
+      const { status, body } = await request(app).post('/oauth/callback').send(callbackParams);
       expect(status).toBe(400);
       expect(body).toEqual(errorDto.badRequest('OAuth profile does not have an email address'));
     });
 
     it('should set the quota from a claim', async () => {
-      const url = await loginWithOAuth(OAuthUser.WITH_QUOTA);
-      const { status, body } = await request(app).post('/oauth/callback').send({ url });
+      const callbackParams = await loginWithOAuth(OAuthUser.WITH_QUOTA);
+      const { status, body } = await request(app).post('/oauth/callback').send(callbackParams);
       expect(status).toBe(201);
       expect(body).toMatchObject({
         accessToken: expect.any(String),
@@ -154,8 +214,8 @@ describe(`/oauth`, () => {
     });
 
     it('should set the storage label from a claim', async () => {
-      const url = await loginWithOAuth(OAuthUser.WITH_USERNAME);
-      const { status, body } = await request(app).post('/oauth/callback').send({ url });
+      const callbackParams = await loginWithOAuth(OAuthUser.WITH_USERNAME);
+      const { status, body } = await request(app).post('/oauth/callback').send(callbackParams);
       expect(status).toBe(201);
       expect(body).toMatchObject({
         accessToken: expect.any(String),
@@ -176,8 +236,8 @@ describe(`/oauth`, () => {
         buttonText: 'Login with Immich',
         signingAlgorithm: 'RS256',
       });
-      const url = await loginWithOAuth('oauth-RS256-token');
-      const { status, body } = await request(app).post('/oauth/callback').send({ url });
+      const callbackParams = await loginWithOAuth('oauth-RS256-token');
+      const { status, body } = await request(app).post('/oauth/callback').send(callbackParams);
       expect(status).toBe(201);
       expect(body).toMatchObject({
         accessToken: expect.any(String),
@@ -196,8 +256,8 @@ describe(`/oauth`, () => {
         buttonText: 'Login with Immich',
         profileSigningAlgorithm: 'RS256',
       });
-      const url = await loginWithOAuth('oauth-signed-profile');
-      const { status, body } = await request(app).post('/oauth/callback').send({ url });
+      const callbackParams = await loginWithOAuth('oauth-signed-profile');
+      const { status, body } = await request(app).post('/oauth/callback').send(callbackParams);
       expect(status).toBe(201);
       expect(body).toMatchObject({
         userId: expect.any(String),
@@ -213,8 +273,8 @@ describe(`/oauth`, () => {
         buttonText: 'Login with Immich',
         signingAlgorithm: 'something-that-does-not-work',
       });
-      const url = await loginWithOAuth('oauth-signed-bad');
-      const { status, body } = await request(app).post('/oauth/callback').send({ url });
+      const callbackParams = await loginWithOAuth('oauth-signed-bad');
+      const { status, body } = await request(app).post('/oauth/callback').send(callbackParams);
       expect(status).toBe(500);
       expect(body).toMatchObject({
         error: 'Internal Server Error',
@@ -235,8 +295,8 @@ describe(`/oauth`, () => {
       });
 
       it('should not auto register the user', async () => {
-        const url = await loginWithOAuth('oauth-no-auto-register');
-        const { status, body } = await request(app).post('/oauth/callback').send({ url });
+        const callbackParams = await loginWithOAuth('oauth-no-auto-register');
+        const { status, body } = await request(app).post('/oauth/callback').send(callbackParams);
         expect(status).toBe(400);
         expect(body).toEqual(errorDto.badRequest('User does not exist and auto registering is disabled.'));
       });
@@ -247,8 +307,8 @@ describe(`/oauth`, () => {
           email: 'oauth-user3@immich.app',
           password: 'password',
         });
-        const url = await loginWithOAuth('oauth-user3');
-        const { status, body } = await request(app).post('/oauth/callback').send({ url });
+        const callbackParams = await loginWithOAuth('oauth-user3');
+        const { status, body } = await request(app).post('/oauth/callback').send(callbackParams);
         expect(status).toBe(201);
         expect(body).toMatchObject({
           userId,
@@ -286,13 +346,15 @@ describe(`/oauth`, () => {
     });
 
     it('should auto register the user by default', async () => {
-      const url = await loginWithOAuth('oauth-mobile-override', 'app.immich:///oauth-callback');
-      expect(url).toEqual(expect.stringContaining(mobileOverrideRedirectUri));
+      const callbackParams = await loginWithOAuth('oauth-mobile-override', 'app.immich:///oauth-callback');
+      expect(callbackParams.url).toEqual(expect.stringContaining(mobileOverrideRedirectUri));
 
       // simulate redirecting back to mobile app
-      const redirectUri = url.replace(mobileOverrideRedirectUri, 'app.immich:///oauth-callback');
+      const url = callbackParams.url.replace(mobileOverrideRedirectUri, 'app.immich:///oauth-callback');
 
-      const { status, body } = await request(app).post('/oauth/callback').send({ url: redirectUri });
+      const { status, body } = await request(app)
+        .post('/oauth/callback')
+        .send({ ...callbackParams, url });
       expect(status).toBe(201);
       expect(body).toMatchObject({
         accessToken: expect.any(String),

e2e/src/api/specs/search.e2e-spec.ts

@@ -633,7 +633,6 @@ describe('/search', () => {
         .set('Authorization', `Bearer ${admin.accessToken}`);
       expect(body).toEqual([
         'Andalusia',
-        'Berlin',
         'Glarus',
         'Greater Accra',
         'Havana',
@@ -642,6 +641,7 @@ describe('/search', () => {
         'Mississippi',
         'New York',
         'Shanghai',
+        'State of Berlin',
         'St.-Petersburg',
         'Tbilisi',
         'Tokyo',
@@ -657,7 +657,6 @@ describe('/search', () => {
         .set('Authorization', `Bearer ${admin.accessToken}`);
       expect(body).toEqual([
         'Andalusia',
-        'Berlin',
         'Glarus',
         'Greater Accra',
         'Havana',
@@ -666,6 +665,7 @@ describe('/search', () => {
         'Mississippi',
         'New York',
         'Shanghai',
+        'State of Berlin',
         'St.-Petersburg',
         'Tbilisi',
         'Tokyo',

e2e/src/api/specs/shared-link.e2e-spec.ts

@@ -117,7 +117,7 @@ describe('/shared-links', () => {
       const resp = await request(shareUrl).get(`/${linkWithAssets.key}`);
       expect(resp.status).toBe(200);
       expect(resp.header['content-type']).toContain('text/html');
-      expect(resp.text).toContain(`<meta property="og:image" content="http://`);
+      expect(resp.text).toContain(`<meta property="og:image" content="https://my.immich.app`);
     });
   });
 
@@ -246,15 +246,7 @@ describe('/shared-links', () => {
       const { status, body } = await request(app).get('/shared-links/me').query({ key: linkWithMetadata.key });
 
       expect(status).toBe(200);
-      expect(body.assets).toHaveLength(1);
-      expect(body.assets[0]).toEqual(
-        expect.objectContaining({
-          originalFileName: 'example.png',
-          localDateTime: expect.any(String),
-          fileCreatedAt: expect.any(String),
-          exifInfo: expect.any(Object),
-        }),
-      );
+      expect(body.assets).toHaveLength(0);
       expect(body.album).toBeDefined();
     });
 

e2e/src/api/specs/user.e2e-spec.ts

@@ -31,33 +31,7 @@ describe('/users', () => {
     );
   });
 
-  describe('GET /users', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get('/users');
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
-    it('should get users', async () => {
-      const { status, body } = await request(app).get('/users').set('Authorization', `Bearer ${admin.accessToken}`);
-      expect(status).toEqual(200);
-      expect(body).toHaveLength(2);
-      expect(body).toEqual(
-        expect.arrayContaining([
-          expect.objectContaining({ email: 'admin@immich.cloud' }),
-          expect.objectContaining({ email: 'user2@immich.cloud' }),
-        ]),
-      );
-    });
-  });
-
   describe('GET /users/me', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get(`/users/me`);
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should not work for shared links', async () => {
       const album = await utils.createAlbum(admin.accessToken, { albumName: 'Album' });
       const sharedLink = await utils.createSharedLink(admin.accessToken, {
@@ -99,24 +73,6 @@ describe('/users', () => {
   });
 
   describe('PUT /users/me', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).put(`/users/me`);
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
-    for (const key of ['email', 'name']) {
-      it(`should not allow null ${key}`, async () => {
-        const dto = { [key]: null };
-        const { status, body } = await request(app)
-          .put(`/users/me`)
-          .set('Authorization', `Bearer ${admin.accessToken}`)
-          .send(dto);
-        expect(status).toBe(400);
-        expect(body).toEqual(errorDto.badRequest());
-      });
-    }
-
     it('should update first and last name', async () => {
       const before = await getMyUser({ headers: asBearerAuth(admin.accessToken) });
 
@@ -269,11 +225,6 @@ describe('/users', () => {
   });
 
   describe('GET /users/:id', () => {
-    it('should require authentication', async () => {
-      const { status } = await request(app).get(`/users/${admin.userId}`);
-      expect(status).toEqual(401);
-    });
-
     it('should get the user', async () => {
       const { status, body } = await request(app)
         .get(`/users/${admin.userId}`)
@@ -292,12 +243,6 @@ describe('/users', () => {
   });
 
   describe('GET /server/license', () => {
-    it('should require authentication', async () => {
-      const { status, body } = await request(app).get('/users/me/license');
-      expect(status).toBe(401);
-      expect(body).toEqual(errorDto.unauthorized);
-    });
-
     it('should return the user license', async () => {
       await request(app)
         .put('/users/me/license')
@@ -315,11 +260,6 @@ describe('/users', () => {
   });
 
   describe('PUT /users/me/license', () => {
-    it('should require authentication', async () => {
-      const { status } = await request(app).put(`/users/me/license`);
-      expect(status).toEqual(401);
-    });
-
     it('should set the user license', async () => {
       const { status, body } = await request(app)
         .put(`/users/me/license`)

e2e/src/cli/specs/upload.e2e-spec.ts

@@ -22,7 +22,7 @@ const tests: Test[] = [
   },
   {
     test: 'should support paths with an asterisk',
-    paths: [`/photos\*/image1.jpg`],
+    paths: [`/photos*/image1.jpg`],
     files: {
       '/photos*/image1.jpg': true,
       '/photos*/image2.jpg': false,
@@ -40,7 +40,7 @@ const tests: Test[] = [
   },
   {
     test: 'should support paths with a single quote',
-    paths: [`/photos\'/image1.jpg`],
+    paths: [`/photos'/image1.jpg`],
     files: {
       "/photos'/image1.jpg": true,
       "/photos'/image2.jpg": false,
@@ -49,7 +49,7 @@ const tests: Test[] = [
   },
   {
     test: 'should support paths with a double quote',
-    paths: [`/photos\"/image1.jpg`],
+    paths: [`/photos"/image1.jpg`],
     files: {
       '/photos"/image1.jpg': true,
       '/photos"/image2.jpg': false,
@@ -67,7 +67,7 @@ const tests: Test[] = [
   },
   {
     test: 'should support paths with an opening brace',
-    paths: [`/photos\{/image1.jpg`],
+    paths: [`/photos{/image1.jpg`],
     files: {
       '/photos{/image1.jpg': true,
       '/photos{/image2.jpg': false,
@@ -76,7 +76,7 @@ const tests: Test[] = [
   },
   {
     test: 'should support paths with a closing brace',
-    paths: [`/photos\}/image1.jpg`],
+    paths: [`/photos}/image1.jpg`],
     files: {
       '/photos}/image1.jpg': true,
       '/photos}/image2.jpg': false,

e2e/src/utils.ts

@@ -493,7 +493,7 @@ export const utils = {
         value: accessToken,
         domain,
         path: '/',
-        expires: 1_742_402_728,
+        expires: 2_058_028_213,
         httpOnly: true,
         secure: false,
         sameSite: 'Lax',
@@ -503,7 +503,7 @@ export const utils = {
         value: 'password',
         domain,
         path: '/',
-        expires: 1_742_402_728,
+        expires: 2_058_028_213,
         httpOnly: true,
         secure: false,
         sameSite: 'Lax',
@@ -513,7 +513,7 @@ export const utils = {
         value: 'true',
         domain,
         path: '/',
-        expires: 1_742_402_728,
+        expires: 2_058_028_213,
         httpOnly: false,
         secure: false,
         sameSite: 'Lax',
@@ -537,6 +537,7 @@ export const utils = {
   },
 
   waitForQueueFinish: (accessToken: string, queue: keyof AllJobStatusResponseDto, ms?: number) => {
+    // eslint-disable-next-line no-async-promise-executor
     return new Promise<void>(async (resolve, reject) => {
       const timeout = setTimeout(() => reject(new Error('Timed out waiting for queue to empty')), ms || 10_000);
 

e2e/src/web/specs/photo-viewer.e2e-spec.ts

@@ -8,12 +8,14 @@ function imageLocator(page: Page) {
 test.describe('Photo Viewer', () => {
   let admin: LoginResponseDto;
   let asset: AssetMediaResponseDto;
+  let rawAsset: AssetMediaResponseDto;
 
   test.beforeAll(async () => {
     utils.initSdk();
     await utils.resetDatabase();
     admin = await utils.adminSetup();
     asset = await utils.createAsset(admin.accessToken);
+    rawAsset = await utils.createAsset(admin.accessToken, { assetData: { filename: 'test.arw' } });
   });
 
   test.beforeEach(async ({ context, page }) => {
@@ -36,7 +38,7 @@ test.describe('Photo Viewer', () => {
     await expect(page.getByTestId('loading-spinner')).toBeVisible();
   });
 
-  test('loads high resolution photo when zoomed', async ({ page }) => {
+  test('loads original photo when zoomed', async ({ page }) => {
     await page.goto(`/photos/${asset.id}`);
     await expect.poll(async () => await imageLocator(page).getAttribute('src')).toContain('thumbnail');
     const box = await imageLocator(page).boundingBox();
@@ -47,6 +49,17 @@ test.describe('Photo Viewer', () => {
     await expect.poll(async () => await imageLocator(page).getAttribute('src')).toContain('original');
   });
 
+  test('loads fullsize image when zoomed and original is web-incompatible', async ({ page }) => {
+    await page.goto(`/photos/${rawAsset.id}`);
+    await expect.poll(async () => await imageLocator(page).getAttribute('src')).toContain('thumbnail');
+    const box = await imageLocator(page).boundingBox();
+    expect(box).toBeTruthy();
+    const { x, y, width, height } = box!;
+    await page.mouse.move(x + width / 2, y + height / 2);
+    await page.mouse.wheel(0, -1);
+    await expect.poll(async () => await imageLocator(page).getAttribute('src')).toContain('fullsize');
+  });
+
   test('reloads photo when checksum changes', async ({ page }) => {
     await page.goto(`/photos/${asset.id}`);
     await expect.poll(async () => await imageLocator(page).getAttribute('src')).toContain('thumbnail');

e2e/src/web/specs/shared-link.e2e-spec.ts

@@ -45,10 +45,10 @@ test.describe('Shared Links', () => {
     await page.goto(`/share/${sharedLink.key}`);
     await page.getByRole('heading', { name: 'Test Album' }).waitFor();
     await page.locator(`[data-asset-id="${asset.id}"]`).hover();
-    await page.waitForSelector('#asset-group-by-date svg');
+    await page.waitForSelector('[data-group] svg');
     await page.getByRole('checkbox').click();
     await page.getByRole('button', { name: 'Download' }).click();
-    await page.getByText('DOWNLOADING', { exact: true }).waitFor();
+    await page.waitForEvent('download');
   });
 
   test('download all from shared link', async ({ page }) => {
@@ -56,6 +56,7 @@ test.describe('Shared Links', () => {
     await page.getByRole('heading', { name: 'Test Album' }).waitFor();
     await page.getByRole('button', { name: 'Download' }).click();
     await page.getByText('DOWNLOADING', { exact: true }).waitFor();
+    await page.waitForEvent('download');
   });
 
   test('enter password for a shared link', async ({ page }) => {

i18n/af.json

@@ -1,5 +1,5 @@
 {
-  "about": "Verfris",
+  "about": "Oor",
   "account": "Rekening",
   "account_settings": "Rekeninginstellings",
   "acknowledge": "Erken",
@@ -56,7 +56,7 @@
     "duplicate_detection_job_description": "Begin masjienleer op bates om soortgelyke beelde op te spoor. Maak staat op Smart Search",
     "exclusion_pattern_description": "Met uitsluitingspatrone kan jy lêers en vouers ignoreer wanneer jy jou biblioteek skandeer. Dit is nuttig as jy vouers het wat lêers bevat wat jy nie wil invoer nie, soos RAW-lêers.",
     "external_library_created_at": "Eksterne biblioteek (geskep op {date})",
-    "external_library_management": "Eksterne Biblioteek-opsies",
+    "external_library_management": "Eksterne Biblioteekbestuur",
     "face_detection": "Gesig deteksie",
     "failed_job_command": "Opdrag {command} het misluk vir werk: {job}",
     "force_delete_user_warning": "WAARSKUWING: Dit sal onmiddellik die gebruiker en alle bates verwyder. Dit kan nie ontdoen word nie en die lêers kan nie herstel word nie.",
@@ -64,7 +64,8 @@
     "image_format": "Formaat",
     "image_format_description": "WebP produseer kleiner lêers as JPEG, maar is stadiger om te enkodeer.",
     "image_prefer_embedded_preview": "Verkies ingebedde voorskou",
-    "image_prefer_wide_gamut": "Verkies wye spektrum",
+    "image_prefer_wide_gamut": "Verkies wide gamut",
+    "image_prefer_wide_gamut_setting_description": "Gebruik Display P3 vir kleinkiekies. Dit behou die lewendheid van beelde met wye kleurruimtes beter, maar beelde kan anders verskyn op ou apparate met 'n ou blaaierweergawe. sRGB-beelde gebruik steeds sRGB om kleurverskuiwings te voorkom.",
     "image_preview_description": "Mediumgrootte prent met gestroopte metadata, wat gebruik word wanneer 'n enkele bate bekyk word en vir masjienleer",
     "image_preview_quality_description": "Voorskou kwaliteit van 1-100. Hoër is beter, maar produseer groter lêers en kan app-reaksie verminder. Die stel van 'n lae waarde kan masjienleerkwaliteit beïnvloed.",
     "image_preview_title": "Voorskou Instellings",
@@ -72,7 +73,14 @@
     "image_resolution": "Resolusie",
     "image_resolution_description": "Hoër resolusies kan meer detail bewaar, maar neem langer om te enkodeer, het groter lêergroottes en kan app-reaksie verminder.",
     "image_settings": "Prent Instellings",
-    "image_settings_description": "Bestuur die kwaliteit en resolusie van gegenereerde beelde"
+    "image_settings_description": "Bestuur die kwaliteit en resolusie van gegenereerde beelde",
+    "image_thumbnail_description": "Klein kleinkiekies sonder metadata, gebruik om groepe foto's soos die tydlyn te bekyk",
+    "image_thumbnail_quality_description": "Kleinkiekiekwaliteit van 1-100. Hoër is beter, maar produseer groter lêers en kan die toepassing vertraag.",
+    "image_thumbnail_title": "Kleinkiekie-instellings",
+    "job_concurrency": "{job} gelyktydigheid",
+    "job_created": "Taak gemaak",
+    "job_not_concurrency_safe": "Hierdie taak kan nie gelyktydig uitgevoer word nie.",
+    "job_settings": "Agtergrondtaakinstellings"
   },
   "search_by_description": "Soek by beskrywing",
   "search_by_description_example": "Stapdag in Sapa"

i18n/be.json

@@ -4,6 +4,7 @@
   "account_settings": "Налады ўліковага запісу",
   "acknowledge": "Пацвердзіць",
   "action": "Дзеянне",
+  "action_common_update": "Абнавіць",
   "actions": "Дзеянні",
   "active": "Актыўны",
   "activity": "Актыўнасць",
@@ -20,8 +21,10 @@
   "add_partner": "Дадаць партнёра",
   "add_path": "Дадаць шлях",
   "add_photos": "Дадаць фота",
-  "add_to": "Дадаць у...",
+  "add_to": "Дадаць у…",
   "add_to_album": "Дадаць у альбом",
+  "add_to_album_bottom_sheet_added": "Дададзена да {album}",
+  "add_to_album_bottom_sheet_already_exists": "Ужо знаходзіцца ў {album}",
   "add_to_shared_album": "Дадаць у агульны альбом",
   "add_url": "Дадаць URL",
   "added_to_archive": "Дададзена ў архіў",
@@ -41,6 +44,7 @@
     "backup_settings": "Налады рэзервовага капіявання",
     "backup_settings_description": "Кіраванне наладкамі рэзервовага капіявання базы даных",
     "check_all": "Праверыць усе",
+    "cleanup": "Ачыстка",
     "cleared_jobs": "Ачышчаны заданні для: {job}",
     "config_set_by_file": "Канфігурацыя ў зараз усталявана праз файл канфігурацыі",
     "confirm_delete_library": "Вы ўпэўнены што жадаеце выдаліць {library} бібліятэку?",

i18n/bg.json

@@ -162,7 +162,6 @@
     "no_pattern_added": "Няма добавен модел",
     "note_apply_storage_label_previous_assets": "Забележка: За да приложите етикета за съхранение към предварително качени файлове, стартирайте",
     "note_cannot_be_changed_later": "ВНИМАНИЕ: Това не може да бъде променено по-късно!",
-    "note_unlimited_quota": "Бележка: Въведете 0 за да нямате лимит на квотата",
     "notification_email_from_address": "От адрес",
     "notification_email_from_address_description": "Електронна поща на изпращача, например: \"Immich Photo Server <noreply@example.com>\"",
     "notification_email_host_description": "Хост на сървъра за електронна поща (например: smtp.immich.app)",
@@ -923,7 +922,6 @@
   "no_shared_albums_message": "Създайте албум, за да споделяте снимки и видеоклипове с хората в мрежата си",
   "not_in_any_album": "Не е в никой албум",
   "note_apply_storage_label_to_previously_uploaded assets": "Забележка: За да приложите етикета за съхранение към предварително качени активи, стартирайте",
-  "note_unlimited_quota": "Забележка: Въведете 0 за неограничена квота",
   "notes": "Бележки",
   "notification_toggle_setting_description": "Активиране на имейл известия",
   "notifications": "Известия",
@@ -1374,4 +1372,4 @@
   "yes": "Да",
   "you_dont_have_any_shared_links": "Нямате споделени връзки",
   "zoom_image": "Увеличаване на изображението"
-}
+}

i18n/bi.json

@@ -1,20 +1,22 @@
 {
-  "account": "",
-  "account_settings": "",
-  "acknowledge": "",
+  "about": "abaot",
+  "account": "Akaont",
+  "account_settings": "Seting blo Akaont",
+  "acknowledge": "Akcept",
   "action": "",
   "actions": "",
-  "active": "",
-  "activity": "",
-  "add": "",
-  "add_a_description": "",
-  "add_a_location": "",
-  "add_a_name": "",
-  "add_a_title": "",
-  "add_exclusion_pattern": "",
-  "add_import_path": "",
-  "add_location": "",
-  "add_more_users": "",
+  "active": "Stap Mekem",
+  "activity": "Wanem hemi Mekem",
+  "activity_changed": "WAnem hemi Mekem hemi",
+  "add": "Ad",
+  "add_a_description": "Putem Description blo hem",
+  "add_a_location": "Putem place blo hem",
+  "add_a_name": "Putem nam blo hem",
+  "add_a_title": "Putem wan name blo hem",
+  "add_exclusion_pattern": "Putem wan paten wae hemi karem aot",
+  "add_import_path": "Putem wan pat blo import",
+  "add_location": "Putem wan place blo hem",
+  "add_more_users": "Putem mor man",
   "add_partner": "",
   "add_path": "",
   "add_photos": "",
@@ -116,7 +118,6 @@
     "no_pattern_added": "",
     "note_apply_storage_label_previous_assets": "",
     "note_cannot_be_changed_later": "",
-    "note_unlimited_quota": "",
     "notification_email_from_address": "",
     "notification_email_from_address_description": "",
     "notification_email_host_description": "",
@@ -612,7 +613,6 @@
   "no_shared_albums_message": "",
   "not_in_any_album": "",
   "note_apply_storage_label_to_previously_uploaded assets": "",
-  "note_unlimited_quota": "",
   "notes": "",
   "notification_toggle_setting_description": "",
   "notifications": "",

i18n/et.json

@@ -4,6 +4,7 @@
   "account_settings": "Konto seaded",
   "acknowledge": "Sain aru",
   "action": "Tegevus",
+  "action_common_update": "Uuenda",
   "actions": "Tegevused",
   "active": "Aktiivne",
   "activity": "Aktiivsus",
@@ -13,6 +14,7 @@
   "add_a_location": "Lisa asukoht",
   "add_a_name": "Lisa nimi",
   "add_a_title": "Lisa pealkiri",
+  "add_endpoint": "Lisa lõpp-punkt",
   "add_exclusion_pattern": "Lisa välistamismuster",
   "add_import_path": "Lisa imporditee",
   "add_location": "Lisa asukoht",
@@ -22,6 +24,8 @@
   "add_photos": "Lisa fotosid",
   "add_to": "Lisa kohta…",
   "add_to_album": "Lisa albumisse",
+  "add_to_album_bottom_sheet_added": "Lisatud albumisse {album}",
+  "add_to_album_bottom_sheet_already_exists": "On juba albumis {album}",
   "add_to_shared_album": "Lisa jagatud albumisse",
   "add_url": "Lisa URL",
   "added_to_archive": "Lisatud arhiivi",
@@ -35,11 +39,11 @@
     "authentication_settings_disable_all": "Kas oled kindel, et soovid kõik sisselogimismeetodid välja lülitada? Sisselogimine lülitatakse täielikult välja.",
     "authentication_settings_reenable": "Et taas lubada, kasuta <link>serveri käsku</link>.",
     "background_task_job": "Tausttegumid",
-    "backup_database": "Varunda andmebaas",
-    "backup_database_enable_description": "Luba andmebaasi varundamine",
-    "backup_keep_last_amount": "Varukoopiate arv, mida alles hoida",
-    "backup_settings": "Varundamise seaded",
-    "backup_settings_description": "Halda andmebaasi varundamise seadeid",
+    "backup_database": "Loo andmebaasi tõmmis",
+    "backup_database_enable_description": "Luba andmebaasi tõmmised",
+    "backup_keep_last_amount": "Eelmiste tõmmiste arv, mida alles hoida",
+    "backup_settings": "Andmebaasi tõmmiste seaded",
+    "backup_settings_description": "Halda andmebaasi tõmmiste seadeid. Märkus: Neid tööteid ei jälgita ning ebaõnnestumisest ei hoiatata.",
     "check_all": "Märgi kõik",
     "cleanup": "Koristus",
     "cleared_jobs": "Tööted eemaldatud: {job}",
@@ -66,6 +70,11 @@
     "forcing_refresh_library_files": "Kogu kõigi failide sundvärskendamine",
     "image_format": "Formaat",
     "image_format_description": "WebP failid on väiksemad kui JPEG, aga kodeerimine on aeglasem.",
+    "image_fullsize_description": "Täismõõdus pilt ilma metaandmeteta, kasutatakse sisse suumimisel",
+    "image_fullsize_enabled": "Luba täismõõdus piltide genereerimine",
+    "image_fullsize_enabled_description": "Genereeri mitte-veebisõbralike formaatide jaoks täismõõdus pilt. Kui \"Eelista manustatud eelvaadet\" on lubatud, kasutatakse manustatud eelvaateid otse ilma teisendamiseta. Ei mõjuta veebisõbralikke formaate nagu JPEG.",
+    "image_fullsize_quality_description": "Täismõõdus pildi kvaliteet vahemikus 1-100. Kõrgem väärtus on parem, aga tulemuseks on suuremad failid.",
+    "image_fullsize_title": "Täismõõdus pildi seaded",
     "image_prefer_embedded_preview": "Eelista manustatud eelvaadet",
     "image_prefer_embedded_preview_setting_description": "Kasuta pilditöötluse sisendina võimalusel RAW fotodesse manustatud eelvaateid. See võib mõnede piltide puhul anda tulemuseks täpsemad värvid, aga eelvaate kvaliteet sõltub konkreetsest kaamerast ning pildis võib olla rohkem tihendusmüra.",
     "image_prefer_wide_gamut": "Eelista laia värvigammat",
@@ -162,7 +171,6 @@
     "no_pattern_added": "Mustreid ei ole",
     "note_apply_storage_label_previous_assets": "Märkus: Et rakendada talletussilt varem üleslaaditud üksustele, käivita",
     "note_cannot_be_changed_later": "MÄRKUS: Seda ei saa hiljem muuta!",
-    "note_unlimited_quota": "Märkus: Piiramatu kvoodi jaoks sisesta 0",
     "notification_email_from_address": "Saatja aadress",
     "notification_email_from_address_description": "Saatja e-posti aadress, näiteks: \"Immich Photo Server <noreply@example.com>\"",
     "notification_email_host_description": "E-posti serveri host (nt. smtp.immich.app)",
@@ -363,6 +371,10 @@
   "admin_password": "Administraatori parool",
   "administration": "Administratsioon",
   "advanced": "Täpsemad valikud",
+  "advanced_settings_log_level_title": "Logimistase: {}",
+  "advanced_settings_proxy_headers_title": "Vaheserveri päised",
+  "advanced_settings_self_signed_ssl_title": "Luba endasigneeritud SSL-sertifikaadid",
+  "advanced_settings_troubleshooting_title": "Tõrkeotsing",
   "age_months": "Vanus {months, plural, one {# kuu} other {# kuud}}",
   "age_year_months": "Vanus 1 aasta, {months, plural, one {# kuu} other {# kuud}}",
   "age_years": "{years, plural, other {Vanus #}}",
@@ -371,6 +383,8 @@
   "album_cover_updated": "Albumi kaanepilt muudetud",
   "album_delete_confirmation": "Kas oled kindel, et soovid albumi {album} kustutada?",
   "album_delete_confirmation_description": "Kui see album on jagatud, ei pääse teised kasutajad sellele enam ligi.",
+  "album_info_card_backup_album_excluded": "VÄLJA JÄETUD",
+  "album_info_card_backup_album_included": "LISATUD",
   "album_info_updated": "Albumi info muudetud",
   "album_leave": "Lahku albumist?",
   "album_leave_confirmation": "Kas oled kindel, et soovid albumist {album} lahkuda?",
@@ -379,10 +393,21 @@
   "album_remove_user": "Eemalda kasutaja?",
   "album_remove_user_confirmation": "Kas oled kindel, et soovid kasutaja {user} eemaldada?",
   "album_share_no_users": "Paistab, et oled seda albumit kõikide kasutajatega jaganud, või pole ühtegi kasutajat, kellega jagada.",
+  "album_thumbnail_card_item": "1 üksus",
+  "album_thumbnail_card_items": "{} üksust",
+  "album_thumbnail_card_shared": " · Jagatud",
+  "album_thumbnail_shared_by": "Jagas {}",
   "album_updated": "Album muudetud",
   "album_updated_setting_description": "Saa teavitus e-posti teel, kui jagatud albumis on uusi üksuseid",
   "album_user_left": "Lahkutud albumist {album}",
   "album_user_removed": "Kasutaja {user} eemaldatud",
+  "album_viewer_appbar_delete_confirm": "Kas oled kindel, et soovid selle albumi oma kontolt kustutada?",
+  "album_viewer_appbar_share_err_delete": "Albumi kustutamine ebaõnnestus",
+  "album_viewer_appbar_share_err_leave": "Albumist lahkumine ebaõnnestus",
+  "album_viewer_appbar_share_err_remove": "Üksuste albumist eemaldamisel tekkis probleeme",
+  "album_viewer_appbar_share_err_title": "Albumi pealkirja muutmine ebaõnnestus",
+  "album_viewer_appbar_share_leave": "Lahku albumist",
+  "album_viewer_page_share_add_users": "Lisa kasutajaid",
   "album_with_link_access": "Luba kõigil, kellel on link, näha selle albumi fotosid ja isikuid.",
   "albums": "Albumid",
   "albums_count": "{count, plural, one {{count, number} album} other {{count, number} albumit}}",
@@ -400,23 +425,36 @@
   "api_key_description": "Seda väärtust kuvatakse ainult üks kord. Kopeeri see enne akna sulgemist.",
   "api_key_empty": "Su API võtme nimi ei tohiks olla tühi",
   "api_keys": "API võtmed",
+  "app_bar_signout_dialog_content": "Kas oled kindel, et soovid välja logida?",
+  "app_bar_signout_dialog_ok": "Jah",
+  "app_bar_signout_dialog_title": "Logi välja",
   "app_settings": "Rakenduse seaded",
   "appears_in": "Albumid",
   "archive": "Arhiiv",
   "archive_or_unarchive_photo": "Arhiveeri või taasta foto",
+  "archive_page_no_archived_assets": "Arhiveeritud üksuseid ei leitud",
   "archive_size": "Arhiivi suurus",
   "archive_size_description": "Seadista arhiivi suurus allalaadimiseks (GiB)",
+  "archived": "Arhiveeritud",
   "archived_count": "{count, plural, other {# arhiveeritud}}",
   "are_these_the_same_person": "Kas need on sama isik?",
   "are_you_sure_to_do_this": "Kas oled kindel, et soovid seda teha?",
+  "asset_action_delete_err_read_only": "Kirjutuskaitstud üksuseid ei saa kustutada, jätan vahele",
   "asset_added_to_album": "Lisatud albumisse",
   "asset_adding_to_album": "Albumisse lisamine…",
   "asset_description_updated": "Üksuse kirjeldus on muudetud",
   "asset_filename_is_offline": "Üksus {filename} ei ole kättesaadav",
   "asset_has_unassigned_faces": "Üksusel on seostamata nägusid",
   "asset_hashing": "Räsimine…",
+  "asset_list_group_by_sub_title": "Grupeeri",
+  "asset_list_layout_settings_dynamic_layout_title": "Dünaamiline asetus",
+  "asset_list_layout_settings_group_automatically": "Automaatne",
+  "asset_list_layout_settings_group_by": "Grupeeri üksused",
+  "asset_list_layout_settings_group_by_month_day": "Kuu + päev",
+  "asset_list_layout_sub_title": "Asetus",
   "asset_offline": "Üksus pole kättesaadav",
   "asset_offline_description": "Seda välise kogu üksust ei leitud kettalt. Abi saamiseks palun võta ühendust oma Immich'i administraatoriga.",
+  "asset_restored_successfully": "Üksus edukalt taastatud",
   "asset_skipped": "Vahele jäetud",
   "asset_skipped_in_trash": "Prügikastis",
   "asset_uploaded": "Üleslaaditud",
@@ -434,8 +472,26 @@
   "assets_trashed_count": "{count, plural, one {# üksus} other {# üksust}} liigutatud prügikasti",
   "assets_were_part_of_album_count": "{count, plural, one {Üksus oli} other {Üksused olid}} juba osa albumist",
   "authorized_devices": "Autoriseeritud seadmed",
+  "automatic_endpoint_switching_subtitle": "Ühendu lokaalselt üle valitud WiFi-võrgu, kui see on saadaval, ja kasuta mujal alternatiivseid ühendusi",
   "back": "Tagasi",
   "back_close_deselect": "Tagasi, sulge või tühista valik",
+  "backup_album_selection_page_select_albums": "Vali albumid",
+  "backup_album_selection_page_selection_info": "Valiku info",
+  "backup_album_selection_page_total_assets": "Unikaalseid üksuseid kokku",
+  "backup_all": "Kõik",
+  "backup_background_service_default_notification": "Uute üksuste kontrollimine…",
+  "backup_background_service_error_title": "Varundamise viga",
+  "backup_controller_page_background_battery_info_ok": "OK",
+  "backup_controller_page_background_wifi": "Ainult WiFi-võrgus",
+  "backup_controller_page_backup_sub": "Varundatud fotod ja videod",
+  "backup_controller_page_desc_backup": "Lülita sisse esiplaanil varundamine, et rakenduse avamisel uued üksused automaatselt serverisse üles laadida.",
+  "backup_controller_page_to_backup": "Albumid, mida varundada",
+  "backup_controller_page_total_sub": "Kõik unikaalsed fotod ja videod valitud albumitest",
+  "backup_err_only_album": "Ei saa ainsat albumit eemaldada",
+  "backup_info_card_assets": "üksused",
+  "backup_manual_cancelled": "Tühistatud",
+  "backup_manual_title": "Üleslaadimise staatus",
+  "backup_setting_subtitle": "Halda taustal ja esiplaanil üleslaadimise seadeid",
   "backward": "Tagasi",
   "birthdate_saved": "Sünnikuupäev salvestatud",
   "birthdate_set_description": "Sünnikuupäeva kasutatakse isiku vanuse arvutamiseks foto tegemise hetkel.",
@@ -447,11 +503,14 @@
   "bulk_keep_duplicates_confirmation": "Kas oled kindel, et soovid {count, plural, one {# dubleeritud üksuse} other {# dubleeritud üksust}} alles jätta? Sellega märgitakse kõik duplikaadigrupid lahendatuks ilma midagi kustutamata.",
   "bulk_trash_duplicates_confirmation": "Kas oled kindel, et soovid {count, plural, one {# dubleeritud üksuse} other {# dubleeritud üksust}} masskustutada? Sellega jäetakse alles iga grupi suurim üksus ning duplikaadid liigutatakse prügikasti.",
   "buy": "Osta Immich",
+  "cache_settings_clear_cache_button": "Tühjenda puhver",
+  "cache_settings_statistics_title": "Puhvri kasutus",
   "camera": "Kaamera",
   "camera_brand": "Kaamera mark",
   "camera_model": "Kaamera mudel",
   "cancel": "Katkesta",
   "cancel_search": "Katkesta otsing",
+  "canceled": "Tühistatud",
   "cannot_merge_people": "Ei saa isikuid ühendada",
   "cannot_undo_this_action": "Sa ei saa seda tagasi võtta!",
   "cannot_update_the_description": "Kirjelduse muutmine ebaõnnestus",
@@ -462,6 +521,10 @@
   "change_name_successfully": "Nimi edukalt muudetud",
   "change_password": "Parooli muutmine",
   "change_password_description": "See on su esimene kord süsteemi siseneda, või on tehtud taotlus parooli muutmiseks. Palun sisesta allpool uus parool.",
+  "change_password_form_confirm_password": "Kinnita parool",
+  "change_password_form_new_password": "Uus parool",
+  "change_password_form_password_mismatch": "Paroolid ei klapi",
+  "change_password_form_reenter_new_password": "Korda uut parooli",
   "change_your_password": "Muuda oma parooli",
   "changed_visibility_successfully": "Nähtavus muudetud",
   "check_all": "Märgi kõik",
@@ -473,6 +536,14 @@
   "clear_all_recent_searches": "Tühjenda hiljutised otsingud",
   "clear_message": "Tühjenda sõnum",
   "clear_value": "Tühjenda väärtus",
+  "client_cert_dialog_msg_confirm": "OK",
+  "client_cert_enter_password": "Sisesta parool",
+  "client_cert_import": "Impordi",
+  "client_cert_import_success_msg": "Klientsertifikaat on imporditud",
+  "client_cert_invalid_msg": "Vigane sertifikaadi fail või vale parool",
+  "client_cert_remove_msg": "Klientsertifikaat on eemaldatud",
+  "client_cert_subtitle": "Toetab ainult PKCS12 (.p12, .pfx) formaati. Sertifikaadi importimine/eemaldamine on saadaval ainult enne sisselogimist",
+  "client_cert_title": "SSL klientsertifikaat",
   "clockwise": "Päripäeva",
   "close": "Sulge",
   "collapse": "Peida",
@@ -483,6 +554,8 @@
   "comment_options": "Kommentaari valikud",
   "comments_and_likes": "Kommentaarid ja meeldimised",
   "comments_are_disabled": "Kommentaarid on keelatud",
+  "common_create_new_album": "Lisa uus album",
+  "completed": "Lõpetatud",
   "confirm": "Kinnita",
   "confirm_admin_password": "Kinnita administraatori parool",
   "confirm_delete_face": "Kas oled kindel, et soovid isiku {name} näo üksuselt kustutada?",
@@ -492,6 +565,10 @@
   "contain": "Mahuta ära",
   "context": "Kontekst",
   "continue": "Jätka",
+  "control_bottom_app_bar_create_new_album": "Lisa uus album",
+  "control_bottom_app_bar_delete_from_local": "Kustuta seadmest",
+  "control_bottom_app_bar_edit_location": "Muuda asukohta",
+  "control_bottom_app_bar_edit_time": "Muuda kuupäeva ja aega",
   "copied_image_to_clipboard": "Pilt kopeeritud lõikelauale.",
   "copied_to_clipboard": "Kopeeritud lõikelauale!",
   "copy_error": "Kopeeri viga",
@@ -513,6 +590,7 @@
   "create_new_person": "Lisa uus isik",
   "create_new_person_hint": "Seosta valitud üksused uue isikuga",
   "create_new_user": "Lisa uus kasutaja",
+  "create_shared_album_page_share_select_photos": "Vali fotod",
   "create_tag": "Lisa silt",
   "create_tag_description": "Lisa uus silt. Pesastatud siltide jaoks sisesta täielik tee koos kaldkriipsudega.",
   "create_user": "Lisa kasutaja",
@@ -537,19 +615,23 @@
   "delete": "Kustuta",
   "delete_album": "Kustuta album",
   "delete_api_key_prompt": "Kas oled kindel, et soovid selle API võtme kustutada?",
+  "delete_dialog_title": "Kustuta jäädavalt",
   "delete_duplicates_confirmation": "Kas oled kindel, et soovid need duplikaadid jäädavalt kustutada?",
   "delete_face": "Kustuta nägu",
   "delete_key": "Kustuta võti",
   "delete_library": "Kustuta kogu",
   "delete_link": "Kustuta link",
+  "delete_local_dialog_ok_backed_up_only": "Kustuta ainult varundatud",
   "delete_others": "Kustuta teised",
   "delete_shared_link": "Kustuta jagatud link",
+  "delete_shared_link_dialog_title": "Kustuta jagatud link",
   "delete_tag": "Kustuta silt",
   "delete_tag_confirmation_prompt": "Kas oled kindel, et soovid sildi {tagName} kustutada?",
   "delete_user": "Kustuta kasutaja",
   "deleted_shared_link": "Jagatud link kustutatud",
   "deletes_missing_assets": "Kustutab üksused, mis on kettalt puudu",
   "description": "Kirjeldus",
+  "description_input_hint_text": "Lisa kirjeldus...",
   "details": "Üksikasjad",
   "direction": "Suund",
   "disabled": "Välja lülitatud",
@@ -566,10 +648,20 @@
   "documentation": "Dokumentatsioon",
   "done": "Tehtud",
   "download": "Laadi alla",
+  "download_canceled": "Allalaadimine katkestatud",
+  "download_complete": "Allalaadimine lõpetatud",
+  "download_enqueue": "Allalaadimine ootel",
+  "download_error": "Allalaadimise viga",
+  "download_failed": "Allalaadimine ebaõnnestus",
+  "download_finished": "Allalaadimine lõpetatud",
   "download_include_embedded_motion_videos": "Manustatud videod",
   "download_include_embedded_motion_videos_description": "Lisa liikuvatesse fotodesse manustatud videod eraldi failidena",
+  "download_paused": "Allalaadimine peatatud",
   "download_settings": "Allalaadimine",
   "download_settings_description": "Halda üksuste allalaadimise seadeid",
+  "download_started": "Allalaadimine alustatud",
+  "download_sucess": "Allalaadimine õnnestus",
+  "download_sucess_android": "Meediumid laaditi alla kataloogi DCIM/Immich",
   "downloading": "Allalaadimine",
   "downloading_asset_filename": "Üksuse {filename} allalaadimine",
   "drop_files_to_upload": "Failide üleslaadimiseks sikuta need ükskõik kuhu",
@@ -588,6 +680,7 @@
   "edit_key": "Muuda võtit",
   "edit_link": "Muuda linki",
   "edit_location": "Muuda asukohta",
+  "edit_location_dialog_title": "Asukoht",
   "edit_name": "Muuda nime",
   "edit_people": "Muuda isikuid",
   "edit_tag": "Muuda silti",
@@ -600,12 +693,15 @@
   "editor_crop_tool_h2_aspect_ratios": "Kuvasuhted",
   "editor_crop_tool_h2_rotation": "Pööre",
   "email": "E-post",
+  "empty_folder": "See kaust on tühi",
   "empty_trash": "Tühjenda prügikast",
   "empty_trash_confirmation": "Kas oled kindel, et soovid prügikasti tühjendada? See eemaldab kõik seal olevad üksused Immich'ist jäädavalt.\nSeda tegevust ei saa tagasi võtta!",
   "enable": "Luba",
   "enabled": "Lubatud",
   "end_date": "Lõppkuupäev",
+  "enter_wifi_name": "Sisesta WiFi-võrgu nimi",
   "error": "Viga",
+  "error_change_sort_album": "Albumi sorteerimisjärjestuse muutmine ebaõnnestus",
   "error_delete_face": "Viga näo kustutamisel",
   "error_loading_image": "Viga pildi laadimisel",
   "error_title": "Viga - midagi läks valesti",
@@ -736,8 +832,14 @@
     "unable_to_upload_file": "Faili üleslaadimine ebaõnnestus"
   },
   "exif": "Exif",
+  "exif_bottom_sheet_description": "Lisa kirjeldus...",
+  "exif_bottom_sheet_details": "ÜKSIKASJAD",
+  "exif_bottom_sheet_location": "ASUKOHT",
+  "exif_bottom_sheet_people": "ISIKUD",
+  "exif_bottom_sheet_person_add_person": "Lisa nimi",
   "exit_slideshow": "Sulge slaidiesitlus",
   "expand_all": "Näita kõik",
+  "experimental_settings_title": "Eksperimentaalne",
   "expire_after": "Aegub",
   "expired": "Aegunud",
   "expires_date": "Aegub {date}",
@@ -748,6 +850,7 @@
   "extension": "Laiend",
   "external": "Väline",
   "external_libraries": "Välised kogud",
+  "external_network_sheet_info": "Kui seade ei ole eelistatud WiFi-võrgus, ühendub rakendus serveriga allolevatest URL-idest esimese kättesaadava kaudu, alustades ülevalt",
   "face_unassigned": "Seostamata",
   "failed_to_load_assets": "Üksuste laadimine ebaõnnestus",
   "favorite": "Lemmik",
@@ -763,6 +866,8 @@
   "filter_people": "Filtreeri isikuid",
   "find_them_fast": "Leia teda kiiresti nime järgi otsides",
   "fix_incorrect_match": "Paranda ebaõige vaste",
+  "folder": "Kaust",
+  "folder_not_found": "Kausta ei leitud",
   "folders": "Kaustad",
   "folders_feature_description": "Kaustavaate abil failisüsteemis olevate fotode ja videote sirvimine",
   "forward": "Edasi",
@@ -779,6 +884,10 @@
   "group_places_by": "Grupeeri kohad...",
   "group_year": "Grupeeri aasta kaupa",
   "has_quota": "On kvoot",
+  "header_settings_add_header_tip": "Lisa päis",
+  "header_settings_field_validator_msg": "Väärtus ei saa olla tühi",
+  "header_settings_header_name_input": "Päise nimi",
+  "header_settings_header_value_input": "Päise väärtus",
   "hi_user": "Tere {name} ({email})",
   "hide_all_people": "Peida kõik isikud",
   "hide_gallery": "Peida galerii",
@@ -786,8 +895,20 @@
   "hide_password": "Peida parool",
   "hide_person": "Peida isik",
   "hide_unnamed_people": "Peida nimetud isikud",
+  "home_page_add_to_album_conflicts": "{added} üksust lisati albumisse {album}. {failed} üksust oli juba albumis.",
+  "home_page_add_to_album_err_local": "Lokaalseid üksuseid ei saa veel albumisse lisada, jätan vahele",
+  "home_page_add_to_album_success": "{added} üksust lisati albumisse {album}.",
+  "home_page_album_err_partner": "Partneri üksuseid ei saa veel albumisse lisada, jätan vahele",
+  "home_page_archive_err_local": "Lokaalseid üksuseid ei saa veel arhiveerida, jätan vahele",
+  "home_page_archive_err_partner": "Partneri üksuseid ei saa arhiveerida, jätan vahele",
+  "home_page_building_timeline": "Ajajoone koostamine",
+  "home_page_delete_err_partner": "Partneri üksuseid ei saa kustutada, jätan vahele",
+  "home_page_favorite_err_local": "Lokaalseid üksuseid ei saa lemmikuks märkida, jätan vahele",
+  "home_page_favorite_err_partner": "Partneri üksuseid ei saa lemmikuks märkida, jätan vahele",
+  "home_page_share_err_local": "Lokaalseid üksuseid ei saa lingiga jagada, jätan vahele",
   "host": "Host",
   "hour": "Tund",
+  "ignore_icloud_photos": "Ignoreeri iCloud fotosid",
   "image": "Pilt",
   "image_alt_text_date": "{isVideo, select, true {Video} other {Pilt}} tehtud {date}",
   "image_alt_text_date_1_person": "{isVideo, select, true {Video} other {Pilt}} tehtud {date} koos isikuga {person1}",
@@ -799,6 +920,8 @@
   "image_alt_text_date_place_2_people": "{isVideo, select, true {Video} other {Pilt}} tehtud {date} kohas {city}, {country} koos isikutega {person1} ja {person2}",
   "image_alt_text_date_place_3_people": "{isVideo, select, true {Video} other {Pilt}} tehtud {date} kohas {city}, {country} koos isikutega {person1}, {person2} ja {person3}",
   "image_alt_text_date_place_4_or_more_people": "{isVideo, select, true {Video} other {Pilt}} tehtud {date} kohas {city}, {country} koos {person1}, {person2} ja veel {additionalCount, number} isikuga",
+  "image_viewer_page_state_provider_download_started": "Allalaadimine alustatud",
+  "image_viewer_page_state_provider_download_success": "Allalaadimine õnnestus",
   "immich_logo": "Immich'i logo",
   "immich_web_interface": "Immich'i veebiliides",
   "import_from_json": "Impordi JSON-formaadist",
@@ -817,6 +940,8 @@
     "night_at_midnight": "Iga päev keskööl",
     "night_at_twoam": "Iga öö kell 2"
   },
+  "invalid_date": "Vigane kuupäev",
+  "invalid_date_format": "Vigane kuupäevaformaat",
   "invite_people": "Kutsu inimesi",
   "invite_to_album": "Kutsu albumisse",
   "items_count": "{count, plural, one {# üksus} other {# üksust}}",
@@ -837,6 +962,9 @@
   "level": "Tase",
   "library": "Kogu",
   "library_options": "Kogu seaded",
+  "library_page_new_album": "Uus album",
+  "library_page_sort_asset_count": "Üksuste arv",
+  "library_page_sort_title": "Albumi pealkiri",
   "light": "Hele",
   "like_deleted": "Meeldimine kustutatud",
   "link_motion_video": "Lingi liikuv video",
@@ -846,12 +974,24 @@
   "list": "Loend",
   "loading": "Laadimine",
   "loading_search_results_failed": "Otsitulemuste laadimine ebaõnnestus",
+  "local_network_sheet_info": "Rakendus ühendub valitud Wi-Fi võrgus olles serveriga selle URL-i kaudu",
+  "location_permission_content": "Automaatseks ümberlülitumiseks vajab Immich täpse asukoha luba, et saaks lugeda aktiivse WiFi-võrgu nime",
+  "location_picker_choose_on_map": "Vali kaardil",
   "log_out": "Logi välja",
   "log_out_all_devices": "Logi kõigist seadmetest välja",
   "logged_out_all_devices": "Kõigist seadmetest välja logitud",
   "logged_out_device": "Seadmest välja logitud",
   "login": "Logi sisse",
+  "login_form_back_button_text": "Tagasi",
+  "login_form_email_hint": "sinunimi@email.com",
+  "login_form_endpoint_hint": "http://serveri-ip:port",
+  "login_form_endpoint_url": "Serveri lõpp-punkti URL",
+  "login_form_err_http": "Palun täpsusta http:// või https://",
+  "login_form_err_invalid_email": "Vigane e-posti aadress",
+  "login_form_err_invalid_url": "Vigane URL",
+  "login_form_password_hint": "parool",
   "login_has_been_disabled": "Sisselogimine on keelatud.",
+  "login_password_changed_success": "Parool edukalt uuendatud",
   "logout_all_device_confirmation": "Kas oled kindel, et soovid kõigist seadmetest välja logida?",
   "logout_this_device_confirmation": "Kas oled kindel, et soovid sellest seadmest välja logida?",
   "longitude": "Pikkuskraad",
@@ -859,6 +999,7 @@
   "loop_videos": "Taasesita videod",
   "loop_videos_description": "Lülita sisse, et detailvaates videot automaatselt taasesitada.",
   "main_branch_warning": "Sa kasutad arendusversiooni; soovitame tungivalt kasutada väljalaskeversiooni!",
+  "main_menu": "Peamenüü",
   "make": "Mark",
   "manage_shared_links": "Halda jagatud linke",
   "manage_sharing_with_partners": "Halda partneritega jagamist",
@@ -871,10 +1012,14 @@
   "map_marker_for_images": "Kaardimarker kohas {city}, {country} tehtud piltide jaoks",
   "map_marker_with_image": "Kaardimarker pildiga",
   "map_settings": "Kaardi seaded",
+  "map_settings_date_range_option_day": "Viimased 24 tundi",
+  "map_settings_date_range_option_year": "Viimane aasta",
+  "map_settings_dialog_title": "Kaardi seaded",
   "matches": "Ühtivad failid",
-  "media_type": "Meedia tüüp",
+  "media_type": "Meediumi tüüp",
   "memories": "Mälestused",
   "memories_setting_description": "Halda, mida sa oma mälestustes näed",
+  "memories_year_ago": "Aasta tagasi",
   "memory": "Mälestus",
   "memory_lane_title": "Mälestus {title}",
   "menu": "Menüü",
@@ -891,10 +1036,14 @@
   "month": "Kuu",
   "more": "Rohkem",
   "moved_to_trash": "Liigutatud prügikasti",
+  "multiselect_grid_edit_date_time_err_read_only": "Kirjutuskaitsega üksus(t)e kuupäeva ei saa muuta, jätan vahele",
+  "multiselect_grid_edit_gps_err_read_only": "Kirjutuskaitsega üksus(t)e asukohta ei saa muuta, jätan vahele",
   "mute_memories": "Vaigista mälestused",
   "my_albums": "Minu albumid",
   "name": "Nimi",
   "name_or_nickname": "Nimi või hüüdnimi",
+  "networking_settings": "Võrguühendus",
+  "networking_subtitle": "Halda serveri lõpp-punkti seadeid",
   "never": "Mitte kunagi",
   "new_album": "Uus album",
   "new_api_key": "Uus API võti",
@@ -923,7 +1072,6 @@
   "no_shared_albums_message": "Lisa album, et fotosid ja videosid teistega jagada",
   "not_in_any_album": "Pole üheski albumis",
   "note_apply_storage_label_to_previously_uploaded assets": "Märkus: Et rakendada talletussilt varem üleslaaditud üksustele, käivita",
-  "note_unlimited_quota": "Märkus: Piiramatu kvoodi jaoks sisesta 0",
   "notes": "Märkused",
   "notification_toggle_setting_description": "Luba e-posti teel teavitused",
   "notifications": "Teavitused",
@@ -958,6 +1106,9 @@
   "partner_can_access": "{partner} pääseb ligi",
   "partner_can_access_assets": "Kõik su fotod ja videod, välja arvatud arhiveeritud ja kustutatud",
   "partner_can_access_location": "Asukohad, kus su fotod tehti",
+  "partner_list_view_all": "Vaata kõiki",
+  "partner_page_partner_add_failed": "Partneri lisamine ebaõnnestus",
+  "partner_page_select_partner": "Vali partner",
   "partner_sharing": "Partneriga jagamine",
   "partners": "Partnerid",
   "password": "Parool",
@@ -986,6 +1137,7 @@
   "permanently_delete_assets_prompt": "Kas oled kindel, et soovid {count, plural, one {selle üksuse} other {need <b>#</b> üksust}} jäädavalt kustutada? Sellega eemaldatakse {count, plural, one {see} other {need}} ka oma albumi(te)st.",
   "permanently_deleted_asset": "Üksus jäädavalt kustutatud",
   "permanently_deleted_assets_count": "{count, plural, one {# üksus} other {# üksust}} jäädavalt kustutatud",
+  "permission_onboarding_back": "Tagasi",
   "person": "Isik",
   "person_birthdate": "Sündinud {date}",
   "person_hidden": "{name}{hidden, select, true { (peidetud)} other {}}",
@@ -1003,6 +1155,7 @@
   "play_motion_photo": "Esita liikuv foto",
   "play_or_pause_video": "Esita või peata video",
   "port": "Port",
+  "preferences_settings_title": "Eelistused",
   "preset": "Eelseadistus",
   "preview": "Eelvaade",
   "previous": "Eelmine",
@@ -1010,6 +1163,8 @@
   "previous_or_next_photo": "Eelmine või järgmine foto",
   "primary": "Peamine",
   "privacy": "Privaatsus",
+  "profile_drawer_app_logs": "Logid",
+  "profile_drawer_github": "GitHub",
   "profile_image_of_user": "Kasutaja {user} profiilipilt",
   "profile_picture_set": "Profiilipilt määratud.",
   "public_album": "Avalik album",
@@ -1059,6 +1214,8 @@
   "recent": "Hiljutine",
   "recent-albums": "Hiljutised albumid",
   "recent_searches": "Hiljutised otsingud",
+  "recently_added": "Hiljuti lisatud",
+  "recently_added_page_title": "Hiljuti lisatud",
   "refresh": "Värskenda",
   "refresh_encoded_videos": "Värskenda kodeeritud videod",
   "refresh_faces": "Värskenda näod",
@@ -1079,6 +1236,8 @@
   "remove_from_album": "Eemalda albumist",
   "remove_from_favorites": "Eemalda lemmikutest",
   "remove_from_shared_link": "Eemalda jagatud lingist",
+  "remove_memory": "Eemalda mälestus",
+  "remove_photo_from_memory": "Eemalda foto sellest mälestusest",
   "remove_url": "Eemalda URL",
   "remove_user": "Eemalda kasutaja",
   "removed_api_key": "API võti eemaldatud: {name}",
@@ -1113,6 +1272,7 @@
   "role_editor": "Muutja",
   "role_viewer": "Vaataja",
   "save": "Salvesta",
+  "save_to_gallery": "Salvesta galeriisse",
   "saved_api_key": "API võti salvestatud",
   "saved_profile": "Profiil salvestatud",
   "saved_settings": "Seaded salvestatud",
@@ -1132,14 +1292,32 @@
   "search_camera_model": "Otsi kaamera mudelit...",
   "search_city": "Otsi linna...",
   "search_country": "Otsi riiki...",
+  "search_filter_camera_title": "Vali kaamera tüüp",
+  "search_filter_date": "Kuupäev",
+  "search_filter_date_interval": "{start} kuni {end}",
+  "search_filter_date_title": "Vali kuupäevavahemik",
+  "search_filter_display_options": "Kuva valikud",
+  "search_filter_filename": "Otsi failinime alusel",
+  "search_filter_location": "Asukoht",
+  "search_filter_location_title": "Vali asukoht",
+  "search_filter_media_type": "Meediumi tüüp",
+  "search_filter_media_type_title": "Vali meediumi tüüp",
+  "search_filter_people_title": "Vali isikud",
   "search_for": "Otsi",
   "search_for_existing_person": "Otsi olemasolevat isikut",
   "search_no_people": "Isikuid ei ole",
   "search_no_people_named": "Ei ole isikuid nimega \"{name}\"",
   "search_options": "Otsingu valikud",
+  "search_page_categories": "Kategooriad",
+  "search_page_screenshots": "Ekraanipildid",
+  "search_page_search_photos_videos": "Otsi oma fotosid ja videosid",
+  "search_page_selfies": "Selfid",
+  "search_page_things": "Asjad",
+  "search_page_view_all_button": "Vaata kõiki",
   "search_people": "Otsi inimesi",
   "search_places": "Otsi kohti",
   "search_rating": "Otsi hinnangu järgi...",
+  "search_result_page_new_search_hint": "Uus otsing",
   "search_settings": "Otsi seadeid",
   "search_state": "Otsi osariiki...",
   "search_tags": "Otsi silte...",
@@ -1149,6 +1327,7 @@
   "searching_locales": "Lokaatide otsimine...",
   "second": "Sekund",
   "see_all_people": "Vaata kõiki isikuid",
+  "select": "Vali",
   "select_album_cover": "Vali albumi kaanepilt",
   "select_all": "Vali kõik",
   "select_all_duplicates": "Vali kõik duplikaadid",
@@ -1161,10 +1340,14 @@
   "select_new_face": "Vali uus nägu",
   "select_photos": "Vali fotod",
   "select_trash_all": "Vali kõik prügikasti",
+  "select_user_for_sharing_page_err_album": "Albumi lisamine ebaõnnestus",
   "selected": "Valitud",
   "selected_count": "{count, plural, other {# valitud}}",
   "send_message": "Saada sõnum",
   "send_welcome_email": "Saada tervituskiri",
+  "server_endpoint": "Serveri lõpp-punkt",
+  "server_info_box_app_version": "Rakenduse versioon",
+  "server_info_box_server_url": "Serveri URL",
   "server_offline": "Serveriga ühendus puudub",
   "server_online": "Server ühendatud",
   "server_stats": "Serveri statistika",
@@ -1176,22 +1359,42 @@
   "set_date_of_birth": "Määra sünnikuupäev",
   "set_profile_picture": "Sea profiilipilt",
   "set_slideshow_to_fullscreen": "Kuva slaidiesitlus täisekraanil",
+  "setting_languages_apply": "Rakenda",
+  "setting_languages_title": "Keeled",
+  "setting_notifications_notify_immediately": "kohe",
+  "setting_notifications_notify_never": "mitte kunagi",
   "settings": "Seaded",
   "settings_saved": "Seaded salvestatud",
   "share": "Jaga",
   "shared": "Jagatud",
+  "shared_album_section_people_action_error": "Viga albumist eemaldamisel/lahkumisel",
+  "shared_album_section_people_action_leave": "Eemalda kasutaja albumist",
+  "shared_album_section_people_action_remove_user": "Eemalda kasutaja albumist",
+  "shared_album_section_people_title": "ISIKUD",
   "shared_by": "Jagas",
   "shared_by_user": "Jagas {user}",
   "shared_by_you": "Jagasid sina",
   "shared_from_partner": "Fotod partnerilt {partner}",
+  "shared_link_app_bar_title": "Jagatud lingid",
+  "shared_link_clipboard_copied_massage": "Kopeeritud lõikelauale",
+  "shared_link_create_error": "Viga jagatud lingi loomisel",
+  "shared_link_edit_expire_after_option_day": "1 päev",
+  "shared_link_edit_expire_after_option_hour": "1 tund",
+  "shared_link_edit_expire_after_option_minute": "1 minut",
+  "shared_link_info_chip_metadata": "EXIF",
+  "shared_link_manage_links": "Halda jagatud linke",
   "shared_link_options": "Jagatud lingi valikud",
   "shared_links": "Jagatud lingid",
   "shared_links_description": "Jaga fotosid ja videosid lingiga",
   "shared_photos_and_videos_count": "{assetCount, plural, other {# jagatud fotot ja videot.}}",
+  "shared_with_me": "Minuga jagatud",
   "shared_with_partner": "Jagatud partneriga {partner}",
   "sharing": "Jagamine",
   "sharing_enter_password": "Palun sisesta selle lehe vaatamiseks salasõna.",
+  "sharing_page_album": "Jagatud albumid",
   "sharing_sidebar_description": "Kuva külgmenüüs Jagamise linki",
+  "sharing_silver_appbar_create_shared_album": "Uus jagatud album",
+  "sharing_silver_appbar_share_partner": "Jaga partneriga",
   "shift_to_permanent_delete": "vajuta ⇧, et üksus jäädavalt kustutada",
   "show_album_options": "Näita albumi valikuid",
   "show_albums": "Näita albumeid",
@@ -1258,6 +1461,7 @@
   "support_third_party_description": "Sinu Immich'i install on kolmanda osapoole pakendatud. Probleemid, mida täheldad, võivad olla põhjustatud selle pakendamise poolt, seega võta esmajärjekorras nendega ühendust, kasutades allolevaid linke.",
   "swap_merge_direction": "Muuda ühendamise suunda",
   "sync": "Sünkrooni",
+  "sync_albums": "Sünkrooni albumid",
   "tag": "Silt",
   "tag_assets": "Sildista üksuseid",
   "tag_created": "Lisatud silt: {tag}",
@@ -1271,6 +1475,9 @@
   "theme": "Teema",
   "theme_selection": "Teema valik",
   "theme_selection_description": "Sea automaatselt hele või tume teema vastavalt veebilehitseja eelistustele",
+  "theme_setting_primary_color_title": "Põhivärv",
+  "theme_setting_system_primary_color_title": "Kasuta süsteemset värvi",
+  "theme_setting_system_theme_switch": "Automaatne (järgi süsteemi seadet)",
   "they_will_be_merged_together": "Nad ühendatakse kokku",
   "third_party_resources": "Kolmanda osapoole ressursid",
   "time_based_memories": "Ajapõhised mälestused",
@@ -1291,6 +1498,9 @@
   "trash_count": "Liiguta {count, number} prügikasti",
   "trash_delete_asset": "Kustuta üksus",
   "trash_no_results_message": "Siia ilmuvad prügikasti liigutatud fotod ja videod.",
+  "trash_page_delete_all": "Kustuta kõik",
+  "trash_page_restore_all": "Taasta kõik",
+  "trash_page_select_assets_btn": "Vali üksused",
   "trashed_items_will_be_permanently_deleted_after": "Prügikasti tõstetud üksused kustutatakse jäädavalt {days, plural, one {# päeva} other {# päeva}} pärast.",
   "type": "Tüüp",
   "unarchive": "Taasta arhiivist",
@@ -1326,6 +1536,7 @@
   "upload_status_errors": "Vead",
   "upload_status_uploaded": "Üleslaaditud",
   "upload_success": "Üleslaadimine õnnestus, uute üksuste nägemiseks värskenda lehte.",
+  "uploading": "Üleslaadimine",
   "url": "URL",
   "usage": "Kasutus",
   "use_custom_date_range": "Kasuta kohandatud kuupäevavahemikku",
@@ -1363,16 +1574,21 @@
   "view_name": "Vaade",
   "view_next_asset": "Vaata järgmist üksust",
   "view_previous_asset": "Vaata eelmist üksust",
+  "view_qr_code": "Vaata QR-koodi",
   "view_stack": "Vaata virna",
+  "viewer_remove_from_stack": "Eemalda virnast",
+  "viewer_unstack": "Eralda",
   "visibility_changed": "{count, plural, one {# isiku} other {# isiku}} nähtavus muudetud",
   "waiting": "Ootel",
   "warning": "Hoiatus",
   "week": "Nädal",
   "welcome": "Tere tulemast",
   "welcome_to_immich": "Tere tulemast Immich'isse",
+  "wifi_name": "WiFi-võrgu nimi",
   "year": "Aasta",
   "years_ago": "{years, plural, one {# aasta} other {# aastat}} tagasi",
   "yes": "Jah",
   "you_dont_have_any_shared_links": "Sul pole ühtegi jagatud linki",
+  "your_wifi_name": "Sinu WiFi-võrgu nimi",
   "zoom_image": "Suumi pilti"
-}
+}

i18n/eu.json

@@ -0,0 +1 @@
+{}

i18n/fa.json

@@ -132,7 +132,6 @@
     "no_pattern_added": "هیچ الگوی اضافه نشده",
     "note_apply_storage_label_previous_assets": "توجه: برای اعمال برچسب ذخیره سازی به دارایی هایی که قبلاً بارگذاری شده اند، دستور زیر را اجرا کنید",
     "note_cannot_be_changed_later": "توجه: این را نمی توان بعداً تغییر داد!",
-    "note_unlimited_quota": "توجه: برای سهمیه نامحدود، عدد 0 را وارد کنید",
     "notification_email_from_address": "آدرس فرستنده",
     "notification_email_from_address_description": "آدرس ایمیل فرستنده، به عنوان مثال:\"Immich سرور عکس <noreply@example.com>\"",
     "notification_email_host_description": "میزبان سرور ایمیل (مثلاً smtp.immich.app)",
@@ -664,7 +663,6 @@
   "no_shared_albums_message": "",
   "not_in_any_album": "در هیچ آلبومی نیست",
   "note_apply_storage_label_to_previously_uploaded assets": "",
-  "note_unlimited_quota": "",
   "notes": "یادداشت‌ها",
   "notification_toggle_setting_description": "اعلان‌های ایمیلی را فعال کنید",
   "notifications": "اعلان‌ها",
@@ -926,4 +924,4 @@
   "yes": "بله",
   "you_dont_have_any_shared_links": "",
   "zoom_image": "بزرگنمایی تصویر"
-}
+}

i18n/fi.json

@@ -4,6 +4,7 @@
   "account_settings": "Tilin asetukset",
   "acknowledge": "Tiedostan",
   "action": "Toiminta",
+  "action_common_update": "Päivitä",
   "actions": "Toimintoja",
   "active": "Aktiivinen",
   "activity": "Aktiviteetti",
@@ -13,6 +14,7 @@
   "add_a_location": "Lisää sijainti",
   "add_a_name": "Lisää nimi",
   "add_a_title": "Lisää otsikko",
+  "add_endpoint": "Add endpoint",
   "add_exclusion_pattern": "Lisää poissulkemismalli",
   "add_import_path": "Lisää tuontipolku",
   "add_location": "Lisää sijainti",
@@ -22,6 +24,8 @@
   "add_photos": "Lisää kuvia",
   "add_to": "Lisää…",
   "add_to_album": "Lisää albumiin",
+  "add_to_album_bottom_sheet_added": "Lisätty albumiin {album}",
+  "add_to_album_bottom_sheet_already_exists": "Kohde on jo albumissa {album}",
   "add_to_shared_album": "Lisää jaettuun albumiin",
   "add_url": "Lisää URL",
   "added_to_archive": "Arkistoitu",
@@ -159,7 +163,6 @@
     "no_pattern_added": "Kaavoja ei lisättynä",
     "note_apply_storage_label_previous_assets": "Huom: Asettaaksesi nimikkeen aiemmin ladatulle aineistolle, aja",
     "note_cannot_be_changed_later": "Huom: Tätä ei voi enää myöhemmin vaihtaa!",
-    "note_unlimited_quota": "Huom: Määritä 0 rajoittamattomaksi kiintiöksi",
     "notification_email_from_address": "Lähettäjän osoite",
     "notification_email_from_address_description": "Lähettäjän sähköpostiosoite. Esimerkiksi \"Immich-kuvapalvelin <noreply@example.com>\"",
     "notification_email_host_description": "Sähköpostipalvelin (esim. smtp.immich.app)",
@@ -219,7 +222,7 @@
     "reset_settings_to_default": "Nollaa asetukset oletuksille",
     "reset_settings_to_recent_saved": "Palauta aiemmin tallennetut asetukset",
     "scanning_library": "Kirjastoa skannataan",
-    "search_jobs": "Etsi tehtäviä...",
+    "search_jobs": "Etsi tehtäviä…",
     "send_welcome_email": "Lähetä tervetuloviesti",
     "server_external_domain_settings": "Ulkoinen osoite",
     "server_external_domain_settings_description": "Osoite julkisille linkeille, http(s):// mukaan lukien",
@@ -360,6 +363,16 @@
   "admin_password": "Ylläpitäjän salasana",
   "administration": "Ylläpito",
   "advanced": "Edistyneet",
+  "advanced_settings_log_level_title": "Lokitaso: {}",
+  "advanced_settings_prefer_remote_subtitle": "Jotkut laitteet ovat erittäin hitaita lataamaan esikatselukuvia laitteen kohteista. Aktivoi tämä asetus käyttääksesi etäkuvia.",
+  "advanced_settings_prefer_remote_title": "Suosi etäkuvia",
+  "advanced_settings_proxy_headers_subtitle": "Define proxy headers Immich should send with each network request",
+  "advanced_settings_proxy_headers_title": "Proxy Headers",
+  "advanced_settings_self_signed_ssl_subtitle": "Ohita SSL sertifikaattivarmennus palvelimen päätepisteellä. Vaaditaan self-signed -sertifikaateissa.",
+  "advanced_settings_self_signed_ssl_title": "Salli self-signed SSL -sertifikaatit",
+  "advanced_settings_tile_subtitle": "Edistyneen käyttäjän asetukset",
+  "advanced_settings_troubleshooting_subtitle": "Ota vianetsinnän lisäominaisuudet käyttöön",
+  "advanced_settings_troubleshooting_title": "Vianetsintä",
   "age_months": "Ikä {months, plural, one {# kuukausi} other {# kuukautta}}",
   "age_year_months": "Ikä 1 vuosi, {months, plural, one {# kuukausi} other {# kuukautta}}",
   "age_years": "{years, plural, other {Ikä #v}}",
@@ -368,6 +381,8 @@
   "album_cover_updated": "Albumin kansikuva päivitetty",
   "album_delete_confirmation": "Haluatko varmasti poistaa albumin {album}?",
   "album_delete_confirmation_description": "Jos albumi on jaettu, muut eivät pääse siihen enää.",
+  "album_info_card_backup_album_excluded": "JÄTETTY POIS",
+  "album_info_card_backup_album_included": "SISÄLLYTETTY",
   "album_info_updated": "Albumin tiedot päivitetty",
   "album_leave": "Poistu albumista?",
   "album_leave_confirmation": "Haluatko varmasti poistua albumista {album}?",
@@ -376,10 +391,22 @@
   "album_remove_user": "Poista käyttäjä?",
   "album_remove_user_confirmation": "Oletko varma että haluat poistaa {user}?",
   "album_share_no_users": "Näyttää että olet jakanut tämän albumin kaikkien kanssa, tai sinulla ei ole käyttäjiä joille jakaa.",
+  "album_thumbnail_card_item": "1 kohde",
+  "album_thumbnail_card_items": "{} kohdetta",
+  "album_thumbnail_card_shared": "Jaettu",
+  "album_thumbnail_shared_by": "Jakanut {}",
   "album_updated": "Albumi päivitetty",
   "album_updated_setting_description": "Saa sähköpostia kun jaetussa albumissa on uutta sisältöä",
   "album_user_left": "Poistuttiin albumista {album}",
   "album_user_removed": "{user} poistettu",
+  "album_viewer_appbar_delete_confirm": "Haluatko varmast poistaa tämän albumin tililtäsi?",
+  "album_viewer_appbar_share_err_delete": "Albumin poistaminen epäonnistui",
+  "album_viewer_appbar_share_err_leave": "Albumista poistuminen epäonnistui",
+  "album_viewer_appbar_share_err_remove": "Ongelmia kohteiden poistamisessa albumista",
+  "album_viewer_appbar_share_err_title": "Albumin nimen muuttaminen epäonnistui",
+  "album_viewer_appbar_share_leave": "Poistu albumista",
+  "album_viewer_appbar_share_to": "Jaa",
+  "album_viewer_page_share_add_users": "Lisää käyttäjiä",
   "album_with_link_access": "Anna kenen tahansa nähdä linkin kautta tämän albumin valokuvat ja henkilöt.",
   "albums": "Albumit",
   "albums_count": "{count, plural, one {{count, number} albumi} other {{count, number} albumia}}",
@@ -396,42 +423,133 @@
   "api_key_description": "Tämä arvo näytetään vain kerran. Varmista, että olet kopioinut sen ennen kuin suljet ikkunan.",
   "api_key_empty": "API-avaimesi ei pitäisi olla tyhjä",
   "api_keys": "API-avaimet",
+  "app_bar_signout_dialog_content": "Haluatko varmasti kirjautua ulos?",
+  "app_bar_signout_dialog_ok": "Kyllä",
+  "app_bar_signout_dialog_title": "Kirjaudu ulos",
   "app_settings": "Sovellusasetukset",
   "appears_in": "Esiintyy albumeissa",
   "archive": "Arkisto",
   "archive_or_unarchive_photo": "Arkistoi kuva tai palauta arkistosta",
+  "archive_page_no_archived_assets": "Arkistoituja kohteita ei löytynyt",
+  "archive_page_title": "Arkisto ({})",
   "archive_size": "Arkiston koko",
   "archive_size_description": "Määritä arkiston koko latauksissa (Gt)",
+  "archived": "Archived",
   "archived_count": "{count, plural, other {Arkistoitu #}}",
   "are_these_the_same_person": "Ovatko he sama henkilö?",
   "are_you_sure_to_do_this": "Haluatko varmasti tehdä tämän?",
+  "asset_action_delete_err_read_only": "Vain luku-tilassa olevia kohteita ei voitu poistaa, ohitetaan",
+  "asset_action_share_err_offline": "Verkottomassa tilassa olevia kohteita ei voitu noutaa, ohitetaan",
   "asset_added_to_album": "Lisätty albumiin",
-  "asset_adding_to_album": "Lisätään albumiin...",
+  "asset_adding_to_album": "Lisätään albumiin…",
   "asset_description_updated": "Kohteen kuvaus on päivitetty",
   "asset_filename_is_offline": "Kohde {filename} on offline-tilassa",
   "asset_has_unassigned_faces": "Kohteella on määrittämättömiä kasvoja",
-  "asset_hashing": "Hajautetaan...",
+  "asset_hashing": "Hajautetaan…",
+  "asset_list_group_by_sub_title": "Ryhmittele",
+  "asset_list_layout_settings_dynamic_layout_title": "Dynaaminen asetelma",
+  "asset_list_layout_settings_group_automatically": "Automaattisesti",
+  "asset_list_layout_settings_group_by": "Ryhmittele",
+  "asset_list_layout_settings_group_by_month_day": "Kuukauden ja päivän mukaan",
+  "asset_list_layout_sub_title": "Asettelu",
+  "asset_list_settings_subtitle": "Kuvaruudukon asettelu",
+  "asset_list_settings_title": "Kuvaruudukko",
   "asset_offline": "Aineisto offline-tilassa",
   "asset_offline_description": "Tätä ulkoista resurssia ei enää löydy levyltä. Ole hyvä ja ota yhteyttä Immich-järjestelmänvalvojaan saadaksesi apua.",
+  "asset_restored_successfully": "Asset restored successfully",
   "asset_skipped": "Ohitettu",
   "asset_skipped_in_trash": "Roskakorissa",
   "asset_uploaded": "Lähetetty",
   "asset_uploading": "Lähetetään…",
+  "asset_viewer_settings_subtitle": "Manage your gallery viewer settings",
+  "asset_viewer_settings_title": "Katselin",
   "assets": "kohdetta",
   "assets_added_count": "Lisätty {count, plural, one {# kohde} other {# kohdetta}}",
   "assets_added_to_album_count": "Albumiin lisätty {count, plural, one {# kohde} other {# kohdetta}}",
   "assets_added_to_name_count": "Lisätty {count, plural, one {# kohde} other {# kohdetta}} {hasName, select, true {<b>{name}</b>} other {uuteen albumiin}}",
   "assets_count": "{count, plural, one {# media} other {# mediaa}}",
+  "assets_deleted_permanently": "{} asset(s) deleted permanently",
+  "assets_deleted_permanently_from_server": "{} asset(s) deleted permanently from the Immich server",
   "assets_moved_to_trash_count": "Siirretty {count, plural, one {# media} other {# mediaa}} roskakoriin",
   "assets_permanently_deleted_count": "{count, plural, one {# media} other {# mediaa}} poistettu pysyvästi",
   "assets_removed_count": "{count, plural, one {# media} other {# mediaa}} poistettu",
+  "assets_removed_permanently_from_device": "{} asset(s) removed permanently from your device",
   "assets_restore_confirmation": "Haluatko varmasti palauttaa kaikki roskakoriisi siirretyt resurssit? Tätä toimintoa ei voi peruuttaa! Huomaa, että offline-resursseja ei voida palauttaa tällä tavalla.",
   "assets_restored_count": "{count, plural, one {# media} other {# mediaa}} palautettu",
+  "assets_restored_successfully": "{} asset(s) restored successfully",
+  "assets_trashed": "{} asset(s) trashed",
   "assets_trashed_count": "{count, plural, one {# media} other {# mediaa}} siirretty roskakoriin",
+  "assets_trashed_from_server": "{} asset(s) trashed from the Immich server",
   "assets_were_part_of_album_count": "{count, plural, one {Media oli} other {Mediat olivat}} jo albumissa",
   "authorized_devices": "Valtuutetut laitteet",
+  "automatic_endpoint_switching_subtitle": "Connect locally over designated Wi-Fi when available and use alternative connections elsewhere",
+  "automatic_endpoint_switching_title": "Automatic URL switching",
   "back": "Takaisin",
   "back_close_deselect": "Palaa, sulje tai poista valinnat",
+  "background_location_permission": "Background location permission",
+  "background_location_permission_content": "In order to switch networks when running in the background, Immich must *always* have precise location access so the app can read the Wi-Fi network's name",
+  "backup_album_selection_page_albums_device": "Laitteen albumit ({})",
+  "backup_album_selection_page_albums_tap": "Napauta sisällyttääksesi, kaksoisnapauta jättääksesi pois",
+  "backup_album_selection_page_assets_scatter": "Kohteet voivat olla hajaantuneina useisiin albumeihin. Albumeita voidaan sisällyttää varmuuskopiointiin tai jättää siitä pois.",
+  "backup_album_selection_page_select_albums": "Valitse albumit",
+  "backup_album_selection_page_selection_info": "Valintatiedot",
+  "backup_album_selection_page_total_assets": "Uniikkeja kohteita yhteensä",
+  "backup_all": "Kaikki",
+  "backup_background_service_backup_failed_message": "Kohteiden varmuuskopiointi epäonnistui. Yritetään uudelleen...",
+  "backup_background_service_connection_failed_message": "Palvelimeen ei saatu yhteyttä. Yritetään uudelleen...",
+  "backup_background_service_current_upload_notification": "Lähetetään {}",
+  "backup_background_service_default_notification": "Tarkistetaan uusia kohteita...",
+  "backup_background_service_error_title": "Virhe varmuuskopioinnissa",
+  "backup_background_service_in_progress_notification": "Varmuuskopioidaan kohteita...",
+  "backup_background_service_upload_failure_notification": "Lähetys palvelimelle epäonnistui {}",
+  "backup_controller_page_albums": "Varmuuskopioi albumit",
+  "backup_controller_page_background_app_refresh_disabled_content": "Salli sovelluksen päivittäminen taustalla suorittaaksesi varmuuskopiointia taustalla: Asetukset > Yleiset > Appien päivitys taustalla",
+  "backup_controller_page_background_app_refresh_disabled_title": "Sovelluksen päivittäminen taustalla on pois päältä",
+  "backup_controller_page_background_app_refresh_enable_button_text": "Siirry asetuksiin",
+  "backup_controller_page_background_battery_info_link": "Näytä minulle miten",
+  "backup_controller_page_background_battery_info_message": "Kytke pois päältä kaikki Immichin taustatyöskentelyyn liittyvät akun optimoinnit, jotta varmistat taustavarmuuskopioinnin parhaan mahdollisen toiminnan.\n\nKoska tämä on laitekohtaista, tarkista tarvittavat toimet laitevalmistajan ohjeista.",
+  "backup_controller_page_background_battery_info_ok": "OK",
+  "backup_controller_page_background_battery_info_title": "Akun optimointi",
+  "backup_controller_page_background_charging": "Vain laitteen ollessa kytkettynä laturiin",
+  "backup_controller_page_background_configure_error": "Taustapalvelun asettaminen epäonnistui",
+  "backup_controller_page_background_delay": "Viivästytä uusien kohteiden varmuuskopiointia: {}",
+  "backup_controller_page_background_description": "Kytke taustapalvelu päälle varmuuskopioidaksesi uudet kohteet automaattisesti, ilman sovelluksen avaamista",
+  "backup_controller_page_background_is_off": "Automaattinen varmuuskopiointi taustalla on pois päältä",
+  "backup_controller_page_background_is_on": "Automaattinen varmuuskopiointi taustalla on päällä",
+  "backup_controller_page_background_turn_off": "Kytke taustapalvelu pois päältä",
+  "backup_controller_page_background_turn_on": "Kytke taustapalvelu päälle",
+  "backup_controller_page_background_wifi": "Vain WiFi-verkossa",
+  "backup_controller_page_backup": "Varmuuskopiointi",
+  "backup_controller_page_backup_selected": "Valittu: ",
+  "backup_controller_page_backup_sub": "Varmuuskopioidut kuvat ja videot",
+  "backup_controller_page_created": "Luotu: {}",
+  "backup_controller_page_desc_backup": "Kytke varmuuskopiointi päälle lähettääksesi uudet kohteet palvelimelle automaattisesti.",
+  "backup_controller_page_excluded": "Jätetty pois: ",
+  "backup_controller_page_failed": "Epäonnistui ({})",
+  "backup_controller_page_filename": "Tiedoston nimi: {} [{}]",
+  "backup_controller_page_id": "ID: {}",
+  "backup_controller_page_info": "Varmuuskopioinnin tiedot",
+  "backup_controller_page_none_selected": "Ei mitään",
+  "backup_controller_page_remainder": "Jäljellä",
+  "backup_controller_page_remainder_sub": "Varmuuskopiointia odottavat kuvat ja videot",
+  "backup_controller_page_server_storage": "Palvelimen tallennustila",
+  "backup_controller_page_start_backup": "Aloita varmuuskopiointi",
+  "backup_controller_page_status_off": "Varmuuskopiointi on pois päältä",
+  "backup_controller_page_status_on": "Varmuuskopiointi on päällä",
+  "backup_controller_page_storage_format": "{} / {} käytetty",
+  "backup_controller_page_to_backup": "Varmuuskopioitavat albumit",
+  "backup_controller_page_total_sub": "Kaikki uniikit kuvat ja videot valituista albumeista",
+  "backup_controller_page_turn_off": "Varmuuskopiointi pois päältä",
+  "backup_controller_page_turn_on": "Varmuuskopiointi päälle",
+  "backup_controller_page_uploading_file_info": "Tiedostojen lähetystiedot",
+  "backup_err_only_album": "Vähintään yhden albumin tulee olla valittuna",
+  "backup_info_card_assets": "kohdetta",
+  "backup_manual_cancelled": "Peruutettu",
+  "backup_manual_in_progress": "Lähetys palvelimelle on jo käynnissä. Kokeile uudelleen hetken kuluttua.",
+  "backup_manual_success": "Onnistui",
+  "backup_manual_title": "Lähetyksen tila",
+  "backup_options_page_title": "Varmuuskopioinnin asetukset",
+  "backup_setting_subtitle": "Manage background and foreground upload settings",
   "backward": "Taaksepäin",
   "birthdate_saved": "Syntymäaika tallennettu",
   "birthdate_set_description": "Syntymäaikaa käytetään laskemaan henkilön ikä kuvanottohetkellä.",
@@ -443,24 +561,52 @@
   "bulk_keep_duplicates_confirmation": "Haluatko varmasti säilyttää {count, plural, one {# kaksoiskappaleen} other {# kaksoiskappaleet}}? Tämä merkitsee kaikki kaksoiskappaleet ratkaistuiksi, eikä poista mitään.",
   "bulk_trash_duplicates_confirmation": "Haluatko varmasti siirtää {count, plural, one {# kaksoiskappaleen} other {# kaksoiskappaleet}} roskakoriin? Tämä säilyttää kustakin mediasta kookkaimman ja siirtää loput roskakoriin.",
   "buy": "Osta lisenssi Immich:iin",
+  "cache_settings_album_thumbnails": "Kirjastosivun esikatselukuvat ({} kohdetta)",
+  "cache_settings_clear_cache_button": "Tyhjennä välimuisti",
+  "cache_settings_clear_cache_button_title": "Tyhjennä sovelluksen välimuisti. Tämä vaikuttaa merkittävästi sovelluksen suorituskykyyn, kunnes välimuisti on rakennettu uudelleen.",
+  "cache_settings_duplicated_assets_clear_button": "Tyhjennä",
+  "cache_settings_duplicated_assets_subtitle": "Sovelluksen mustalle listalle merkitsemät valokuvat ja videot",
+  "cache_settings_duplicated_assets_title": "Kaksoiskappaleet ({})",
+  "cache_settings_image_cache_size": "Kuvien välimuistin koko ({} kohdetta)",
+  "cache_settings_statistics_album": "Kirjaston esikatselukuvat",
+  "cache_settings_statistics_assets": "{} kohdetta ({})",
+  "cache_settings_statistics_full": "Täysikokoiset kuvat",
+  "cache_settings_statistics_shared": "Jaettujen albumien esikatselukuvat",
+  "cache_settings_statistics_thumbnail": "Esikatselukuvat",
+  "cache_settings_statistics_title": "Välimuistin käyttö",
+  "cache_settings_subtitle": "Hallitse Immich-mobiilisovelluksen välimuistin käyttöä",
+  "cache_settings_thumbnail_size": "Esikatselukuvien välimuistin koko ({} kohdetta)",
+  "cache_settings_tile_subtitle": "Hallitse paikallista tallenustilaa",
+  "cache_settings_tile_title": "Paikallinen tallennustila",
+  "cache_settings_title": "Välimuistin asetukset",
   "camera": "Kamera",
   "camera_brand": "Kameran merkki",
   "camera_model": "Kameran malli",
   "cancel": "Peruuta",
   "cancel_search": "Peru haku",
+  "canceled": "Canceled",
   "cannot_merge_people": "Ihmisiä ei voitu yhdistää",
   "cannot_undo_this_action": "Et voi perua tätä toimintoa!",
   "cannot_update_the_description": "Kuvausta ei voi päivittää",
   "change_date": "Vaihda päiväys",
+  "change_display_order": "Change display order",
   "change_expiration_time": "Muuta erääntymisaikaa",
   "change_location": "Vaihda sijainti",
   "change_name": "Vaihda nimi",
   "change_name_successfully": "Nimi vaihdettu",
   "change_password": "Vaihda Salasana",
   "change_password_description": "Tämä on joko ensimmäinen kertasi kun kirjaudut järjestelmään, tai salasanasi on pyydetty vaihtamaan. Määritä uusi salasana alle.",
+  "change_password_form_confirm_password": "Vahvista salasana",
+  "change_password_form_description": "Hei {name},\n\nTämä on joko ensimmäinen kirjautumisesi järjestelmään tai salasanan vaihtaminen vaihtaminen on pakotettu. Ole hyvä ja syötä uusi salasana alle.",
+  "change_password_form_new_password": "Uusi salasana",
+  "change_password_form_password_mismatch": "Salasanat eivät täsmää",
+  "change_password_form_reenter_new_password": "Uusi salasana uudelleen",
   "change_your_password": "Vaihda salasanasi",
   "changed_visibility_successfully": "Näkyvyys vaihdettu",
   "check_all": "Valitse kaikki",
+  "check_corrupt_asset_backup": "Check for corrupt asset backups",
+  "check_corrupt_asset_backup_button": "Perform check",
+  "check_corrupt_asset_backup_description": "Run this check only over Wi-Fi and once all assets have been backed-up. The procedure might take a few minutes.",
   "check_logs": "Katso lokeja",
   "choose_matching_people_to_merge": "Valitse henkilöt joka yhdistetään",
   "city": "Kaupunki",
@@ -469,6 +615,14 @@
   "clear_all_recent_searches": "Tyhjennä viimeisimmät haut",
   "clear_message": "Tyhjennä viesti",
   "clear_value": "Tyhjää arvo",
+  "client_cert_dialog_msg_confirm": "OK",
+  "client_cert_enter_password": "Enter Password",
+  "client_cert_import": "Import",
+  "client_cert_import_success_msg": "Client certificate is imported",
+  "client_cert_invalid_msg": "Invalid certificate file or wrong password",
+  "client_cert_remove_msg": "Client certificate is removed",
+  "client_cert_subtitle": "Supports PKCS12 (.p12, .pfx) format only. Certificate Import/Remove is available only before login",
+  "client_cert_title": "SSL Client Certificate",
   "clockwise": "Myötäpäivään",
   "close": "Sulje",
   "collapse": "Supista",
@@ -479,6 +633,9 @@
   "comment_options": "Kommentin valinnat",
   "comments_and_likes": "Kommentit ja tykkäykset",
   "comments_are_disabled": "Kommentointi ei käytössä",
+  "common_create_new_album": "Luo uusi albumi",
+  "common_server_error": "Tarkista internet-yhteytesi. Varmista että palvelin on saavutettavissa ja sovellus-/palvelinversiot ovat yhteensopivia.",
+  "completed": "Completed",
   "confirm": "Vahvista",
   "confirm_admin_password": "Vahvista ylläpitäjän salasana",
   "confirm_delete_shared_link": "Haluatko varmasti poistaa tämän jaetun linkin?",
@@ -487,6 +644,15 @@
   "contain": "Mahduta",
   "context": "Konteksti",
   "continue": "Jatka",
+  "control_bottom_app_bar_album_info_shared": "{} kohdetta · Jaettu",
+  "control_bottom_app_bar_create_new_album": "Luo uusi albumi",
+  "control_bottom_app_bar_delete_from_immich": "Poista Immichistä",
+  "control_bottom_app_bar_delete_from_local": "Poista laitteelta",
+  "control_bottom_app_bar_edit_location": "Muokkaa sijaintia",
+  "control_bottom_app_bar_edit_time": "Muokkaa aikaa",
+  "control_bottom_app_bar_share_link": "Share Link",
+  "control_bottom_app_bar_share_to": "Jaa",
+  "control_bottom_app_bar_trash_from_immich": "Siirrä roskakoriin",
   "copied_image_to_clipboard": "Kuva kopioitu leikepöydälle.",
   "copied_to_clipboard": "Kopioitu leikepöydälle!",
   "copy_error": "Kopiointivirhe",
@@ -501,24 +667,34 @@
   "covers": "Kannet",
   "create": "Luo",
   "create_album": "Luo albumi",
+  "create_album_page_untitled": "Nimetön",
   "create_library": "Luo uusi kirjasto",
   "create_link": "Luo linkki",
   "create_link_to_share": "Luo linkki jaettavaksi",
   "create_link_to_share_description": "Salli kaikkien linkin saaneiden nähdä valitut kuvat",
+  "create_new": "CREATE NEW",
   "create_new_person": "Luo uusi henkilö",
   "create_new_person_hint": "Määritä valitut mediat uudelle henkilölle",
   "create_new_user": "Luo uusi käyttäjä",
+  "create_shared_album_page_share_add_assets": "LISÄÄ KOHTEITA",
+  "create_shared_album_page_share_select_photos": "Valitse kuvat",
   "create_tag": "Luo tunniste",
   "create_tag_description": "Luo uusi tunniste. Sisäkkäisiä tunnisteita varten syötä tunnisteen täydellinen polku kauttaviivat mukaan luettuna.",
   "create_user": "Luo käyttäjä",
   "created": "Luotu",
+  "crop": "Crop",
+  "curated_object_page_title": "Asiat",
   "current_device": "Nykyinen laite",
+  "current_server_address": "Current server address",
   "custom_locale": "Muokatut maa-asetukset",
   "custom_locale_description": "Muotoile päivämäärät ja numerot perustuen alueen kieleen",
+  "daily_title_text_date": "E, MMM dd",
+  "daily_title_text_date_year": "E, MMM dd, yyyy",
   "dark": "Tumma",
   "date_after": "Päivämäärän jälkeen",
   "date_and_time": "Päivämäärä ja aika",
   "date_before": "Päivä ennen",
+  "date_format": "E, LLL d, y • h:mm a",
   "date_of_birth_saved": "Syntymäaika tallennettu",
   "date_range": "Päivämäärän rajaus",
   "day": "Päivä",
@@ -532,18 +708,29 @@
   "delete": "Poista",
   "delete_album": "Poista albumi",
   "delete_api_key_prompt": "Haluatko varmasti poistaa tämän API-avaimen?",
+  "delete_dialog_alert": "Nämä kohteet poistetaan pysyvästi Immich:stä ja laitteeltasi",
+  "delete_dialog_alert_local": "Kohteet poistetaan pysyvästi laitteelta, mutta ovat saatavilla Immich-palvelimella",
+  "delete_dialog_alert_local_non_backed_up": "Joitain kohteista ei ole varmuuskopioitu Immichiin ja ne poistetaan laitteelta pysyvästi",
+  "delete_dialog_alert_remote": "Kohteet poistetaan pysyvästi Immich-palvelimelta",
+  "delete_dialog_ok_force": "Poista kuitenkin",
+  "delete_dialog_title": "Poista pysyvästi",
   "delete_duplicates_confirmation": "Haluatko varmasti poistaa nämä kaksoiskappaleet pysyvästi?",
   "delete_key": "Poista avain",
   "delete_library": "Poista kirjasto",
   "delete_link": "Poista linkki",
+  "delete_local_dialog_ok_backed_up_only": "Poista vain varmuuskopioidut",
+  "delete_local_dialog_ok_force": "Poista kuitenkin",
   "delete_others": "Poista muut",
   "delete_shared_link": "Poista jaettu linkki",
+  "delete_shared_link_dialog_title": "Poista jaettu linkki",
   "delete_tag": "Poista tunniste",
   "delete_tag_confirmation_prompt": "Haluatko varmasti poistaa tunnisteen {tagName}?",
   "delete_user": "Poista käyttäjä",
   "deleted_shared_link": "Jaettu linkki poistettu",
   "deletes_missing_assets": "Poistaa levyltä puuttuvat resurssit",
   "description": "Kuvaus",
+  "description_input_hint_text": "Lisää kuvaus...",
+  "description_input_submit_error": "Virhe kuvauksen päivittämisessä, tarkista lisätiedot lokista",
   "details": "TIEDOT",
   "direction": "Suunta",
   "disabled": "Poistettu käytöstä",
@@ -560,12 +747,26 @@
   "documentation": "Dokumentaatio",
   "done": "Valmis",
   "download": "Lataa",
+  "download_canceled": "Download canceled",
+  "download_complete": "Download complete",
+  "download_enqueue": "Download enqueued",
+  "download_error": "Download Error",
+  "download_failed": "Download failed",
+  "download_filename": "file: {}",
+  "download_finished": "Download finished",
   "download_include_embedded_motion_videos": "Upotetut videot",
   "download_include_embedded_motion_videos_description": "Sisällytä liikekuviin upotetut videot erillisinä tiedostoina",
+  "download_notfound": "Download not found",
+  "download_paused": "Download paused",
   "download_settings": "Lataukset",
   "download_settings_description": "Hallitse aineiston lataukseen liittyviä asetuksia",
+  "download_started": "Download started",
+  "download_sucess": "Download success",
+  "download_sucess_android": "The media has been downloaded to DCIM/Immich",
+  "download_waiting_to_retry": "Waiting to retry",
   "downloading": "Ladataan",
   "downloading_asset_filename": "Ladataan mediaa {filename}",
+  "downloading_media": "Downloading media",
   "drop_files_to_upload": "Pudota tiedostot mihin tahansa ladataksesi ne",
   "duplicates": "Kaksoiskappaleet",
   "duplicates_description": "Selvitä jokaisen kohdalla mitkä (jos yksikään) ovat kaksoiskappaleita",
@@ -582,6 +783,7 @@
   "edit_key": "Muokkaa avainta",
   "edit_link": "Muokkaa linkkiä",
   "edit_location": "Muokkaa sijaintia",
+  "edit_location_dialog_title": "Sijainti",
   "edit_name": "Muokkaa nimeä",
   "edit_people": "Muokkaa henkilöitä",
   "edit_tag": "Muokkaa tunnistetta",
@@ -594,13 +796,18 @@
   "editor_crop_tool_h2_aspect_ratios": "Kuvasuhteet",
   "editor_crop_tool_h2_rotation": "Rotaatio",
   "email": "Sähköposti",
+  "empty_folder": "This folder is empty",
   "empty_trash": "Tyhjennä roskakori",
   "empty_trash_confirmation": "Haluatko varmasti tyhjentää roskakorin? Tämä poistaa pysyvästi kaikki tiedostot Immich:stä.\nToimintoa ei voi perua!",
   "enable": "Ota käyttöön",
   "enabled": "Käytössä",
   "end_date": "Päättymispäivä",
+  "enqueued": "Enqueued",
+  "enter_wifi_name": "Enter WiFi name",
   "error": "Virhe",
+  "error_change_sort_album": "Failed to change album sort order",
   "error_loading_image": "Kuvan lataus ei onnistunut",
+  "error_saving_image": "Error: {}",
   "error_title": "Virhe - Jotain meni pieleen",
   "errors": {
     "cannot_navigate_next_asset": "Seuraavaan mediaan ei voi siirtyä",
@@ -729,8 +936,21 @@
     "unable_to_upload_file": "Tiedostoa ei voitu ladata"
   },
   "exif": "Exif",
+  "exif_bottom_sheet_description": "Lisää kuvaus…",
+  "exif_bottom_sheet_details": "TIEDOT",
+  "exif_bottom_sheet_location": "SIJAINTI",
+  "exif_bottom_sheet_people": "IHMISET",
+  "exif_bottom_sheet_person_add_person": "Lisää nimi",
+  "exif_bottom_sheet_person_age": "Age {}",
+  "exif_bottom_sheet_person_age_months": "Age {} months",
+  "exif_bottom_sheet_person_age_year_months": "Age 1 year, {} months",
+  "exif_bottom_sheet_person_age_years": "Age {}",
   "exit_slideshow": "Poistu diaesityksestä",
   "expand_all": "Laajenna kaikki",
+  "experimental_settings_new_asset_list_subtitle": "Työn alla",
+  "experimental_settings_new_asset_list_title": "Ota käyttöön kokeellinen kuvaruudukko",
+  "experimental_settings_subtitle": "Käyttö omalla vastuulla!",
+  "experimental_settings_title": "Kokeellinen",
   "expire_after": "Umpeutuu",
   "expired": "Voimassaolo päättynyt",
   "expires_date": "Vanhenee {date}",
@@ -741,11 +961,16 @@
   "extension": "Tiedostopääte",
   "external": "Ulkoisesta",
   "external_libraries": "Ulkoiset kirjastot",
+  "external_network": "External network",
+  "external_network_sheet_info": "When not on the preferred WiFi network, the app will connect to the server through the first of the below URLs it can reach, starting from top to bottom",
   "face_unassigned": "Ei määritelty",
+  "failed": "Failed",
   "failed_to_load_assets": "Kohteiden lataus epäonnistui",
+  "failed_to_load_folder": "Failed to load folder",
   "favorite": "Suosikki",
   "favorite_or_unfavorite_photo": "Suosikki- tai ei-suosikkikuva",
   "favorites": "Suosikit",
+  "favorites_page_no_favorites": "Suosikkikohteita ei löytynyt",
   "feature_photo_updated": "Kansikuva ladattu",
   "features": "Ominaisuudet",
   "features_setting_description": "Hallitse sovelluksen ominaisuuksia",
@@ -753,25 +978,38 @@
   "file_name_or_extension": "Tiedostonimi tai tiedostopääte",
   "filename": "Tiedostonimi",
   "filetype": "Tiedostotyyppi",
+  "filter": "Filter",
   "filter_people": "Suodata henkilöt",
   "find_them_fast": "Löydä nopeasti hakemalla nimellä",
   "fix_incorrect_match": "Korjaa virheellinen osuma",
+  "folder": "Folder",
+  "folder_not_found": "Folder not found",
   "folders": "Kansiot",
   "folders_feature_description": "Käytetään kansionäkymää valokuvien ja videoiden selaamiseen järjestelmässä",
   "forward": "Eteenpäin",
   "general": "Yleinen",
   "get_help": "Hae apua",
+  "get_wifiname_error": "Could not get Wi-Fi name. Make sure you have granted the necessary permissions and are connected to a Wi-Fi network",
   "getting_started": "Aloittaminen",
   "go_back": "Palaa",
   "go_to_folder": "Mene kansioon",
   "go_to_search": "Siirry hakuun",
+  "grant_permission": "Grant permission",
   "group_albums_by": "Ryhmitä albumi...",
   "group_country": "Ryhmitä maan mukaan",
   "group_no": "Ei ryhmitystä",
   "group_owner": "Ryhmitä omistajan mukaan",
   "group_places_by": "Ryhmitä paikat...",
   "group_year": "Ryhmitä vuoden mukaan",
+  "haptic_feedback_switch": "Ota haptinen palaute käyttöön",
+  "haptic_feedback_title": "Haptinen palaute",
   "has_quota": "On kiintiö",
+  "header_settings_add_header_tip": "Add Header",
+  "header_settings_field_validator_msg": "Value cannot be empty",
+  "header_settings_header_name_input": "Header name",
+  "header_settings_header_value_input": "Header value",
+  "headers_settings_tile_subtitle": "Define proxy headers the app should send with each network request",
+  "headers_settings_tile_title": "Custom proxy headers",
   "hi_user": "Hei {name} ({email})",
   "hide_all_people": "Piilota kaikki henkilöt",
   "hide_gallery": "Piilota galleria",
@@ -779,8 +1017,24 @@
   "hide_password": "Piilota salasana",
   "hide_person": "Piilota henkilö",
   "hide_unnamed_people": "Piilota nimeämättömät henkilöt",
+  "home_page_add_to_album_conflicts": "Lisätty {added} kohdetta albumiin {album}. {failed} kohdetta on jo albumissa.",
+  "home_page_add_to_album_err_local": "Paikallisten kohteiden lisääminen albumeihin ei ole mahdollista, ohitetaan",
+  "home_page_add_to_album_success": "Lisätty {added} kohdetta albumiin {album}.",
+  "home_page_album_err_partner": "Kumppanin kohteita ei voi vielä lisätä albumiin. Hypätään yli",
+  "home_page_archive_err_local": "Paikallisten kohteiden arkistointi ei ole mahdollista, ohitetaan",
+  "home_page_archive_err_partner": "Kumppanin kohteita ei voi arkistoida. Hypätään yli",
+  "home_page_building_timeline": "Rakennetaan aikajanaa",
+  "home_page_delete_err_partner": "Kumppanin kohteita ei voi poistaa.Hypätään yli",
+  "home_page_delete_remote_err_local": "Paikallisia kohteita etäkohdevalintojen joukossa, ohitetaan",
+  "home_page_favorite_err_local": "Paikallisten kohteiden lisääminen suosikkeihin ei ole mahdollista, ohitetaan",
+  "home_page_favorite_err_partner": "Kumppanin kohteita ei voi vielä merkitä suosikiksi. Hypätään yli",
+  "home_page_first_time_notice": "Jos käytät sovellusta ensimmäistä kertaa, muista valita varmuuskopioitavat albumi(t), jotta aikajanalla voi olla kuvia ja videoita.",
+  "home_page_share_err_local": "Paikallisia kohteita ei voitu jakaa linkkien avulla. Hypätään yli",
+  "home_page_upload_err_limit": "Voit lähettää palvelimelle enintään 30 kohdetta kerrallaan, ohitetaan",
   "host": "Isäntä",
   "hour": "Tunti",
+  "ignore_icloud_photos": "Ignore iCloud photos",
+  "ignore_icloud_photos_description": "Photos that are stored on iCloud will not be uploaded to the Immich server",
   "image": "Kuva",
   "image_alt_text_date": "{isVideo, select, true {Video} other {Kuva}} otettu {date}",
   "image_alt_text_date_1_person": "{isVideo, select, true {Video} other {Kuva}} otettu {person1} kanssa {date}",
@@ -792,6 +1046,10 @@
   "image_alt_text_date_place_2_people": "{isVideo, select, true {Video} other {Kuva}} otettu {city}ssä, {country}ssä {person1}n ja {person2}n kanssa {date}",
   "image_alt_text_date_place_3_people": "{isVideo, select, true {Video} other {Kuva}} otettu {city}ssä, {country}ssä {person1}n, {person2}n ja {person3}n kanssa {date}",
   "image_alt_text_date_place_4_or_more_people": "{isVideo, select, true {Video} other {Kuva}} otettu {city}ssä, {country}ssä {person1}n, {person2}n ja {additionalCount, number} muun kanssa {date}",
+  "image_saved_successfully": "Image saved",
+  "image_viewer_page_state_provider_download_started": "Lataaminen aloitettu",
+  "image_viewer_page_state_provider_download_success": "Lataus onnistui",
+  "image_viewer_page_state_provider_share_error": "Jakovirhe",
   "immich_logo": "Immich-logo",
   "immich_web_interface": "Immich-verkkokäyttöliittymä",
   "import_from_json": "Tuo JSON-tiedostosta",
@@ -810,6 +1068,8 @@
     "night_at_midnight": "Joka yö keskiyöllä",
     "night_at_twoam": "Joka yö klo 02:00"
   },
+  "invalid_date": "Invalid date",
+  "invalid_date_format": "Invalid date format",
   "invite_people": "Kutsu ihmisiä",
   "invite_to_album": "Kutsu albumiin",
   "items_count": "{count, plural, one {# kpl} other {# kpl}}",
@@ -829,6 +1089,12 @@
   "level": "Taso",
   "library": "Kirjasto",
   "library_options": "Kirjastovaihtoehdot",
+  "library_page_device_albums": "Laitteen albumit",
+  "library_page_new_album": "Uusi albumi",
+  "library_page_sort_asset_count": "Kohteiden lukumäärä",
+  "library_page_sort_created": "Viimeisin luotu",
+  "library_page_sort_last_modified": "Viimeksi muokattu",
+  "library_page_sort_title": "Albumin otsikko",
   "light": "Vaalea",
   "like_deleted": "Tykkäys poistettu",
   "link_motion_video": "Linkitä liikevideo",
@@ -838,12 +1104,42 @@
   "list": "Lista",
   "loading": "Ladataan",
   "loading_search_results_failed": "Hakutulosten lataaminen epäonnistui",
+  "local_network": "Local network",
+  "local_network_sheet_info": "The app will connect to the server through this URL when using the specified Wi-Fi network",
+  "location_permission": "Location permission",
+  "location_permission_content": "In order to use the auto-switching feature, Immich needs precise location permission so it can read the current WiFi network's name",
+  "location_picker_choose_on_map": "Valitse kartalta",
+  "location_picker_latitude_error": "Lisää kelvollinen leveysaste",
+  "location_picker_latitude_hint": "Syötä leveysaste",
+  "location_picker_longitude_error": "Lisää kelvollinen pituusaste",
+  "location_picker_longitude_hint": "Syötä pituusaste",
   "log_out": "Kirjaudu ulos",
   "log_out_all_devices": "Kirjaudu ulos kaikilta laitteilta",
   "logged_out_all_devices": "Kaikki laitteet kirjattu ulos",
   "logged_out_device": "Laite kirjattu ulos",
   "login": "Kirjaudu",
+  "login_disabled": "Kirjautuminen on poistettu käytöstä",
+  "login_form_api_exception": "API-virhe. Tarkista palvelimen URL-osoite ja yritä uudelleen.",
+  "login_form_back_button_text": "Takaisin",
+  "login_form_email_hint": "sahkopostisi@esimerkki.fi",
+  "login_form_endpoint_hint": "http://palvelimesi-osoite:portti",
+  "login_form_endpoint_url": "Palvelimen URL",
+  "login_form_err_http": "Lisää http:// tai https://",
+  "login_form_err_invalid_email": "Virheellinen sähköpostiosoite",
+  "login_form_err_invalid_url": "Virheellinen URL",
+  "login_form_err_leading_whitespace": "Alussa välilyönti",
+  "login_form_err_trailing_whitespace": "Lopussa välilyönti",
+  "login_form_failed_get_oauth_server_config": "Virhe kirjauduttaessa OAuth:lla, tarkista palvelimen URL",
+  "login_form_failed_get_oauth_server_disable": "OAuth-ominaisuus ei ole käytössä tällä palvelimella",
+  "login_form_failed_login": "Virhe kirjautumisessa. Tarkista palvelimen URL, sähköpostiosoite ja salasana.",
+  "login_form_handshake_exception": "Tapahtui poikkeus kättelyssä palvelimen kanssa. Kytke päälle self-signed -sertifikaattituki asetuksista, mikäli käytät self-signed -sertifikaatteja.",
+  "login_form_password_hint": "salasana",
+  "login_form_save_login": "Pysy kirjautuneena",
+  "login_form_server_empty": "Syötä palvelimen URL-osoite.",
+  "login_form_server_error": "Palvelimeen ei saatu yhteyttä.",
   "login_has_been_disabled": "Kirjautuminen on otettu pois käytöstä.",
+  "login_password_changed_error": "Salasanan päivityksessä tapahtui virhe",
+  "login_password_changed_success": "Salasan päivitetty onnistuneesti",
   "logout_all_device_confirmation": "Haluatko varmasti kirjautua ulos kaikilta laitteilta?",
   "logout_this_device_confirmation": "Haluatko varmasti kirjautua ulos näiltä laitteilta?",
   "longitude": "Pituusaste",
@@ -860,13 +1156,40 @@
   "manage_your_devices": "Hallitse sisäänkirjautuneita laitteitasi",
   "manage_your_oauth_connection": "Hallitse OAuth-yhteyttäsi",
   "map": "Kartta",
+  "map_assets_in_bound": "{} kuva",
+  "map_assets_in_bounds": "{} kuvaa",
+  "map_cannot_get_user_location": "Käyttäjän sijaintia ei voitu määrittää",
+  "map_location_dialog_yes": "Kyllä",
+  "map_location_picker_page_use_location": "Käytä tätä sijaintia",
+  "map_location_service_disabled_content": "Paikannuspalvelun pitää olla kytkettynä päälle, jotta nykyisen sijaintisi kohteita voidaan näyttää. Haluatko kytkeä sen päälle nyt?",
+  "map_location_service_disabled_title": "Paikannuspalvelu pois päältä",
   "map_marker_for_images": "Karttamarkerointi kuville, jotka on otettu kaupungissa {city}, maassa {country}",
   "map_marker_with_image": "Karttamarkerointi kuvalla",
+  "map_no_assets_in_bounds": "Ei kuvia tällä alueella",
+  "map_no_location_permission_content": "Paikannuslupa tarvitaan, jotta nykyisen sijainnin kohteita voidaan näyttää. Haluatko sallia pääsyn sijaintiin?",
+  "map_no_location_permission_title": "Paikannuslupa estetty",
   "map_settings": "Kartta-asetukset",
+  "map_settings_dark_mode": "Tumma tila",
+  "map_settings_date_range_option_day": "Viimeiset 24 tuntia",
+  "map_settings_date_range_option_days": "Viimeiset {} päivää",
+  "map_settings_date_range_option_year": "Viimeisin vuosi",
+  "map_settings_date_range_option_years": "Viimeiset {} vuotta",
+  "map_settings_dialog_title": "Kartta-asetukset",
+  "map_settings_include_show_archived": "Sisällytä arkistoidut",
+  "map_settings_include_show_partners": "Sisällytä kumppanit",
+  "map_settings_only_show_favorites": "Näytä vain suosikit",
+  "map_settings_theme_settings": "Kartan teema",
+  "map_zoom_to_see_photos": "Tarkenna nähdäksesi kuvat",
   "matches": "Osumia",
   "media_type": "Median tyyppi",
   "memories": "Muistoja",
+  "memories_all_caught_up": "Kaikki ajan tasalla",
+  "memories_check_back_tomorrow": "Palaa huomenna nähdäskesi lisää muistoja",
   "memories_setting_description": "Hallitse mitä näet muistoissasi",
+  "memories_start_over": "Aloita alusta",
+  "memories_swipe_to_close": "Pyyhkäise ylös sulkeaksesi",
+  "memories_year_ago": "A year ago",
+  "memories_years_ago": "{} years ago",
   "memory": "Muisto",
   "memory_lane_title": "Muistojen polku {title}",
   "menu": "Valikko",
@@ -881,11 +1204,16 @@
   "missing": "Puuttuu",
   "model": "Malli",
   "month": "Kuukauden mukaan",
+  "monthly_title_text_date_format": "MMMM y",
   "more": "Enemmän",
   "moved_to_trash": "Siirretty roskakoriin",
+  "multiselect_grid_edit_date_time_err_read_only": "Vain luku -tilassa olevien kohteiden päivämäärää ei voitu muokata, ohitetaan",
+  "multiselect_grid_edit_gps_err_read_only": "Vain luku-tilassa olevien kohteiden sijantitietoja ei voitu muokata, ohitetaan",
   "my_albums": "Albumini",
   "name": "Nimi",
   "name_or_nickname": "Nimi tai lempinimi",
+  "networking_settings": "Networking",
+  "networking_subtitle": "Manage the server endpoint settings",
   "never": "ei koskaan",
   "new_album": "Uusi Albumi",
   "new_api_key": "Uusi API-avain",
@@ -902,6 +1230,7 @@
   "no_albums_yet": "Näyttää siltä, ettei sinulla ole vielä yhtään albumia.",
   "no_archived_assets_message": "Arkistoi kuvia ja videoita piilottaaksesi ne kuvat näkymästä",
   "no_assets_message": "NAPAUTA LATAAKSESI ENSIMMÄISEN KUVASI",
+  "no_assets_to_show": "Ei näytettäviä kohteita",
   "no_duplicates_found": "Kaksoiskappaleita ei löytynyt.",
   "no_exif_info_available": "EXIF-tietoa ei saatavilla",
   "no_explore_results_message": "Lataa lisää kuvia tutkiaksesi kokoelmaasi.",
@@ -913,9 +1242,13 @@
   "no_results_description": "Kokeile synonyymiä tai yleisempää avainsanaa",
   "no_shared_albums_message": "Luo albumi, jotta voit jakaa kuvia ja videoita toisille",
   "not_in_any_album": "Ei yhdessäkään albumissa",
+  "not_selected": "Not selected",
   "note_apply_storage_label_to_previously_uploaded assets": "Huom: Jotta voit soveltaa tallennustunnistetta aiemmin ladattuihin kohteisiin, suorita",
-  "note_unlimited_quota": "Huomio: Syötä 0 rajoittamatonta kiintiötä varten",
   "notes": "Muistiinpanot",
+  "notification_permission_dialog_content": "Ottaaksesi ilmoitukset käyttöön, siirry asetuksiin ja valitse 'salli'.",
+  "notification_permission_list_tile_content": "Myönnä käyttöoikeus ottaaksesi ilmoitukset käyttöön.",
+  "notification_permission_list_tile_enable_button": "Ota ilmoitukset käyttöön",
+  "notification_permission_list_tile_title": "Ilmoitusten käyttöoikeus",
   "notification_toggle_setting_description": "Ota sähköposti-ilmoitukset käyttöön",
   "notifications": "Ilmoitukset",
   "notifications_setting_description": "Hallitse ilmoituksia",
@@ -926,6 +1259,7 @@
   "offline_paths_description": "Nämä tulokset voivat johtua tiedostojen manuaalisesta poistamisesta, jotka eivät ole osa ulkoista kirjastoa.",
   "ok": "Ok",
   "oldest_first": "Vanhin ensin",
+  "on_this_device": "On this device",
   "onboarding": "Käyttöönotto",
   "onboarding_privacy_description": "Seuraavat (valinnaiset) ominaisuudet perustuvat ulkoisiin palveluihin, ja ne voidaan poistaa käytöstä milloin tahansa hallinta asetuksista.",
   "onboarding_theme_description": "Valitse väriteema istunnollesi. Voit muuttaa tämän myöhemmin asetuksistasi.",
@@ -949,6 +1283,14 @@
   "partner_can_access": "{partner} voi päästä",
   "partner_can_access_assets": "Kaikki valokuvasi ja videosi, lukuun ottamatta arkistoituja ja poistettuja",
   "partner_can_access_location": "Sijainti, jossa kuvasi on otettu",
+  "partner_list_user_photos": "Käyttäjän {user} kuvat",
+  "partner_list_view_all": "Näytä kaikki",
+  "partner_page_empty_message": "Kuviasi ei ole vielä jaettu kenenkään kumppanin kanssa.",
+  "partner_page_no_more_users": "Ei enempää käyttäjiä lisättäväksi",
+  "partner_page_partner_add_failed": "Kumppanin lisääminen epäonnistui",
+  "partner_page_select_partner": "Valitse kumppani",
+  "partner_page_shared_to_title": "Jaettu henkilöille",
+  "partner_page_stop_sharing_content": "{} ei voi enää käyttää kuviasi.",
   "partner_sharing": "Kumppanijako",
   "partners": "Kumppanit",
   "password": "Salasana",
@@ -977,6 +1319,14 @@
   "permanently_delete_assets_prompt": "Oletko varma, että haluat poistaa pysyvästi {count, plural, one {tämän kohteen?} other {nämä <b>#</b> kohteet?}} Tämä poistaa myös {count, plural, one {sen sen} other {ne niiden}} albumista.",
   "permanently_deleted_asset": "Media poistettu pysyvästi",
   "permanently_deleted_assets_count": "{count, plural, one {# media} other {# mediaa}} poistettu pysyvästi",
+  "permission_onboarding_back": "Takaisin",
+  "permission_onboarding_continue_anyway": "Jatka silti",
+  "permission_onboarding_get_started": "Aloittaminen",
+  "permission_onboarding_go_to_settings": "Siirry asetuksiin",
+  "permission_onboarding_permission_denied": "Kielletty käyttöoikeus. Käyttääksesi Immichiä, myönnä oikeus kuviin ja videoihin asetuksista.",
+  "permission_onboarding_permission_granted": "Käyttöoikeus myönnetty! Kaikki valmista.",
+  "permission_onboarding_permission_limited": "Rajoitettu käyttöoikeus. Salliaksesi Immichin varmuuskopioida ja hallita koko kuvakirjastoasi, myönnä oikeus kuviin ja videoihin asetuksista.",
+  "permission_onboarding_request": "Immich vaatii käyttöoikeuden kuvien ja videoiden käyttämiseen.",
   "person": "Henkilö",
   "person_hidden": "{name}{hidden, select, true { (piilotettu)} other {}}",
   "photo_shared_all_users": "Näyttää että olet jakanut kuvasi kaikkien käyttäjien kanssa, tai sinulla ei ole käyttäjää kenelle jakaa.",
@@ -992,6 +1342,8 @@
   "play_motion_photo": "Toista Liikekuva",
   "play_or_pause_video": "Toista tai keskeytä video",
   "port": "Portti",
+  "preferences_settings_subtitle": "Manage the app's preferences",
+  "preferences_settings_title": "Asetukset",
   "preset": "Asetus",
   "preview": "Esikatselu",
   "previous": "Edellinen",
@@ -999,6 +1351,13 @@
   "previous_or_next_photo": "Edellinen tai seuraava kuva",
   "primary": "Ensisijainen",
   "privacy": "Yksityisyys",
+  "profile_drawer_app_logs": "Lokit",
+  "profile_drawer_client_out_of_date_major": "Sovelluksen mobiiliversio on vanhentunut. Päivitä viimeisimpään merkittävään versioon.",
+  "profile_drawer_client_out_of_date_minor": "Sovelluksen mobiiliversio on vanhentunut. Päivitä viimeisimpään versioon.",
+  "profile_drawer_client_server_up_to_date": "Asiakassovellus ja palvelin ovat ajan tasalla",
+  "profile_drawer_github": "GitHub",
+  "profile_drawer_server_out_of_date_major": "Palvelimen ohjelmistoversio on vanhentunut. Päivitä viimeisimpään merkittävään versioon.",
+  "profile_drawer_server_out_of_date_minor": "Palvelimen ohjelmistoversio on vanhentunut. Päivitä viimeisimpään versioon.",
   "profile_image_of_user": "Käyttäjän {user} profiilikuva",
   "profile_picture_set": "Profiilikuva asetettu.",
   "public_album": "Julkinen albumi",
@@ -1048,6 +1407,8 @@
   "recent": "Viimeisin",
   "recent-albums": "Viimeisimmät albumit",
   "recent_searches": "Edelliset haut",
+  "recently_added": "Recently added",
+  "recently_added_page_title": "Viimeksi lisätyt",
   "refresh": "Päivitä",
   "refresh_encoded_videos": "Päivitä enkoodatut videot",
   "refresh_faces": "Päivitä kasvot",
@@ -1099,10 +1460,12 @@
   "role_editor": "Editori",
   "role_viewer": "Toistin",
   "save": "Tallenna",
+  "save_to_gallery": "Save to gallery",
   "saved_api_key": "API-avain tallennettu",
   "saved_profile": "Profiili tallennettu",
   "saved_settings": "Asetukset tallennettu",
   "say_something": "Sano jotain",
+  "scaffold_body_error_occurred": "Tapahtui virhe",
   "scan_all_libraries": "Skannaa kaikki kirjastot",
   "scan_library": "Skannaa",
   "scan_settings": "Skannausasetukset",
@@ -1117,14 +1480,43 @@
   "search_camera_model": "Etsi kameramallia...",
   "search_city": "Etsi kaupunkia...",
   "search_country": "Etsi maata...",
+  "search_filter_apply": "Käytä",
+  "search_filter_camera_title": "Select camera type",
+  "search_filter_date": "Date",
+  "search_filter_date_interval": "{start} to {end}",
+  "search_filter_date_title": "Select a date range",
+  "search_filter_display_option_not_in_album": "Ei kuulu albumiin",
+  "search_filter_display_options": "Display Options",
+  "search_filter_filename": "Search by file name",
+  "search_filter_location": "Location",
+  "search_filter_location_title": "Select location",
+  "search_filter_media_type": "Media Type",
+  "search_filter_media_type_title": "Select media type",
+  "search_filter_people_title": "Select people",
   "search_for_existing_person": "Etsi olemassa olevaa henkilöä",
+  "search_no_more_result": "No more results",
   "search_no_people": "Ei henkilöitä",
   "search_no_people_named": "Ei \"{name}\" nimisiä henkilöitä",
+  "search_no_result": "No results found, try a different search term or combination",
   "search_options": "Hakuvaihtoehdot",
+  "search_page_categories": "Kategoriat",
+  "search_page_motion_photos": "Liikekuvat",
+  "search_page_no_objects": "Objektitietoja ei ole saatavilla",
+  "search_page_no_places": "Paikkatietoja ei ole saatavilla",
+  "search_page_screenshots": "Näyttökuvat",
+  "search_page_search_photos_videos": "Search for your photos and videos",
+  "search_page_selfies": "Selfiet",
+  "search_page_things": "Asiat",
+  "search_page_view_all_button": "Näytä kaikki",
+  "search_page_your_activity": "Toimintasi",
+  "search_page_your_map": "Sinun karttasi",
   "search_people": "Etsi ihmisiä",
   "search_places": "Etsi paikkoja",
+  "search_result_page_new_search_hint": "Uusi haku",
   "search_settings": "Hakuasetukset",
   "search_state": "Etsi tilaa...",
+  "search_suggestion_list_smart_search_hint_1": "Älykäs haku on oletuksena käytössä. Käytä metatietojen etsimiseen syntaksia",
+  "search_suggestion_list_smart_search_hint_2": "m:hakusana",
   "search_tags": "Etsi tunnisteita...",
   "search_timezone": "Etsi aikavyöhyke...",
   "search_type": "Etsinnän tyyppi",
@@ -1144,10 +1536,14 @@
   "select_new_face": "Valitse uudet kasvot",
   "select_photos": "Valitse kuvat",
   "select_trash_all": "Valitse kaikki roskakoriin",
+  "select_user_for_sharing_page_err_album": "Albumin luonti epäonnistui",
   "selected": "Valittu",
   "selected_count": "{count, plural, other {# valittu}}",
   "send_message": "Lähetä viesti",
   "send_welcome_email": "Lähetä tervetuloviesti",
+  "server_endpoint": "Server Endpoint",
+  "server_info_box_app_version": "Sovelluksen versio",
+  "server_info_box_server_url": "Palvelimen URL-osoite",
   "server_offline": "Palvelin Offline-tilassa",
   "server_online": "Palvelin Online-tilassa",
   "server_stats": "Palvelimen tilastot",
@@ -1159,21 +1555,90 @@
   "set_date_of_birth": "Aseta syntymäaika",
   "set_profile_picture": "Aseta profiilikuva",
   "set_slideshow_to_fullscreen": "Näytä diaesitys koko ruudulla",
+  "setting_image_viewer_help": "Sovellus lataa ensin pienen esikatselukuvan, toisena keskitarkkuuksisen kuvan (jos käytössä) ja kolmantena alkuperäisen täysitarkkuuksisen kuvan (jos käytössä)",
+  "setting_image_viewer_original_subtitle": "Ota käyttöön ladataksesi alkuperäinen täysitarkkuuksinen kuva (suuri!). Poista käytöstä vähentääksesi datan käyttöä (sekä verkossa että laitteen välimuistissa).",
+  "setting_image_viewer_original_title": "Lataa alkuperäinen kuva",
+  "setting_image_viewer_preview_subtitle": "Ota käyttöön ladataksesi keskitarkkuuksinen kuva. Poista käytöstä ladataksesi alkuperäinen kuva tai käyttääksesi vain esikatselukuvaa.",
+  "setting_image_viewer_preview_title": "Lataa esikatselukuva",
+  "setting_image_viewer_title": "Kuvat",
+  "setting_languages_apply": "Käytä",
+  "setting_languages_subtitle": "Change the app's language",
+  "setting_languages_title": "Kieli",
+  "setting_notifications_notify_failures_grace_period": "Ilmoita taustavarmuuskopioinnin epäonnistumisista: {}",
+  "setting_notifications_notify_hours": "{} tunnin välein",
+  "setting_notifications_notify_immediately": "heti",
+  "setting_notifications_notify_minutes": "{} minuutin välein",
+  "setting_notifications_notify_never": "ei koskaan",
+  "setting_notifications_notify_seconds": "{} sekuntia",
+  "setting_notifications_single_progress_subtitle": "Yksityiskohtainen tieto palvelimelle lähettämisen edistymisestä kohteittain",
+  "setting_notifications_single_progress_title": "Näytä taustavarmuuskopioinnin eidstminen",
+  "setting_notifications_subtitle": "Ilmoitusasetusten määrittely",
+  "setting_notifications_total_progress_subtitle": "Lähetyksen yleinen edistyminen (kohteita lähetetty/yhteensä)",
+  "setting_notifications_total_progress_title": "Näytä taustavarmuuskopioinnin kokonaisedistyminen",
+  "setting_video_viewer_looping_title": "Looping",
+  "setting_video_viewer_original_video_subtitle": "When streaming a video from the server, play the original even when a transcode is available. May lead to buffering. Videos available locally are played in original quality regardless of this setting.",
+  "setting_video_viewer_original_video_title": "Force original video",
   "settings": "Asetukset",
+  "settings_require_restart": "Käynnistä Immich uudelleen ottaaksesti tämän asetuksen käyttöön",
   "settings_saved": "Asetukset tallennettu",
   "share": "Jaa",
+  "share_add_photos": "Lisää kuvia",
+  "share_assets_selected": "{} valittu",
+  "share_dialog_preparing": "Valmistellaan...",
   "shared": "Jaettu",
+  "shared_album_activities_input_disable": "Kommentointi on kytketty pois päältä",
+  "shared_album_activity_remove_content": "Haluatko poistaa tämän aktiviteetin?",
+  "shared_album_activity_remove_title": "Poista aktiviteetti",
+  "shared_album_section_people_action_error": "Virhe poistuttaessa/poistaessa kohdetta albumista",
+  "shared_album_section_people_action_leave": "Poista käyttäjä albumista",
+  "shared_album_section_people_action_remove_user": "Poista käyttäjä albumista",
+  "shared_album_section_people_title": "HENKILÖT",
   "shared_by": "Jakanut",
   "shared_by_user": "Käyttäjän {user} jakama",
   "shared_by_you": "Sinun jakamasi",
   "shared_from_partner": "Kumppanin {partner} kuvia",
+  "shared_intent_upload_button_progress_text": "{} / {} Uploaded",
+  "shared_link_app_bar_title": "Jaetut linkit",
+  "shared_link_clipboard_copied_massage": "Kopioitu leikepöydältä",
+  "shared_link_clipboard_text": "Linkki: {}\nSalasana: {}",
+  "shared_link_create_error": "Jaetun linkin luomisessa tapahtui virhe",
+  "shared_link_edit_description_hint": "Lisää jaon kuvaus",
+  "shared_link_edit_expire_after_option_day": "1 päivä",
+  "shared_link_edit_expire_after_option_days": "{} päivää",
+  "shared_link_edit_expire_after_option_hour": "1 tunti",
+  "shared_link_edit_expire_after_option_hours": "{} tuntia",
+  "shared_link_edit_expire_after_option_minute": "1 minuutti",
+  "shared_link_edit_expire_after_option_minutes": "{} minuuttia",
+  "shared_link_edit_expire_after_option_months": "{} kuukautta",
+  "shared_link_edit_expire_after_option_year": "{} vuosi",
+  "shared_link_edit_password_hint": "Syötä jaon salasana",
+  "shared_link_edit_submit_button": "Päivitä linkki",
+  "shared_link_error_server_url_fetch": "Palvelimen URL-osoitetta ei voitu hakea",
+  "shared_link_expires_day": "Voimassaolo päättyy {} päivän kuluttua",
+  "shared_link_expires_days": "Voimassaolo päättyy {} päivän kuluttua",
+  "shared_link_expires_hour": "Voimassaolo päättyy {} tunnin kuluttua",
+  "shared_link_expires_hours": "Voimassaolo päättyy {} tunnin kuluttua",
+  "shared_link_expires_minute": "Voimassaolo päättyy {} minuutin kuluttua",
+  "shared_link_expires_minutes": "Voimassaolo päättyy {} minuutin kuluttua",
+  "shared_link_expires_never": "Voimassaolo päättyy ∞",
+  "shared_link_expires_second": "Voimassaolo päättyy {} sekunnin kuluttua",
+  "shared_link_expires_seconds": "Voimassaolo päättyy {} sekunnin kuluttua",
+  "shared_link_individual_shared": "Individual shared",
+  "shared_link_info_chip_metadata": "EXIF",
+  "shared_link_manage_links": "Hallitse jaettuja linkkejä",
   "shared_link_options": "Jaetun linkin vaihtoehdot",
   "shared_links": "Jaetut linkit",
   "shared_photos_and_videos_count": "{assetCount, plural, other {# jaettua kuvaa ja videota.}}",
+  "shared_with_me": "Shared with me",
   "shared_with_partner": "Jaa kumppanin {partner} kanssa",
   "sharing": "Jakaminen",
   "sharing_enter_password": "Nähdäksesi sivun sinun tulee antaa salasana.",
+  "sharing_page_album": "Jaetut albumit",
+  "sharing_page_description": "Luo jaettuja albumeja jakaaksesi kuvia ja videoita läheisillesi.",
+  "sharing_page_empty_list": "TYHJÄ LISTA",
   "sharing_sidebar_description": "Näytä jakamislinkki sivupalkissa",
+  "sharing_silver_appbar_create_shared_album": "Luo jaettu albumi",
+  "sharing_silver_appbar_share_partner": "Jaa kumppanille",
   "shift_to_permanent_delete": "Paina ⇧ poistaaksesi median pysyvästi",
   "show_album_options": "Näytä albumin asetukset",
   "show_albums": "Näytä albumit",
@@ -1239,6 +1704,9 @@
   "support_third_party_description": "Immich-asennuksesi on pakattu kolmannen osapuolen toimesta. Kohtaamasi ongelmat saattavat johtua tästä paketista, joten ilmoita niistä ensisijaisesti heille alla olevien linkkien kautta.",
   "swap_merge_direction": "Käännä yhdistämissuunta",
   "sync": "Synkronoi",
+  "sync_albums": "Sync albums",
+  "sync_albums_manual_subtitle": "Sync all uploaded videos and photos to the selected backup albums",
+  "sync_upload_album_setting_subtitle": "Create and upload your photos and videos to the selected albums on Immich",
   "tag": "Lisää tunniste",
   "tag_assets": "Lisää tunnisteita",
   "tag_created": "Luotu tunniste: {tag}",
@@ -1251,6 +1719,19 @@
   "theme": "Teema",
   "theme_selection": "Teeman valinta",
   "theme_selection_description": "Aseta vaalea tai tumma tila automaattisesti perustuen selaimesi asetuksiin",
+  "theme_setting_asset_list_storage_indicator_title": "Näytä tallennustilan ilmaisin kohteiden kuvakkeissa",
+  "theme_setting_asset_list_tiles_per_row_title": "Kohteiden määrä rivillä ({})",
+  "theme_setting_colorful_interface_subtitle": "Apply primary color to background surfaces.",
+  "theme_setting_colorful_interface_title": "Colorful interface",
+  "theme_setting_image_viewer_quality_subtitle": "Säädä kuvien katselun laatua",
+  "theme_setting_image_viewer_quality_title": "Kuvien katseluohjelman laatu",
+  "theme_setting_primary_color_subtitle": "Pick a color for primary actions and accents.",
+  "theme_setting_primary_color_title": "Primary color",
+  "theme_setting_system_primary_color_title": "Use system color",
+  "theme_setting_system_theme_switch": "Automaattinen (seuraa järjestelmän asetusta)",
+  "theme_setting_theme_subtitle": "Valitse sovelluksen teema-asetukset",
+  "theme_setting_three_stage_loading_subtitle": "Kolmivaiheinen lataaminen saattaa parantaa latauksen suorituskykyä, mutta lisää kaistankäyttöä huomattavasti.",
+  "theme_setting_three_stage_loading_title": "Ota kolmivaiheinen lataus käyttöön",
   "they_will_be_merged_together": "Nämä tullaan yhdistämään",
   "third_party_resources": "Kolmannen osapuolen resurssit",
   "time_based_memories": "Aikaan perustuvat muistot",
@@ -1270,7 +1751,15 @@
   "trash_all": "Vie kaikki roskakoriin",
   "trash_count": "Roskakori {count, number}",
   "trash_delete_asset": "Poista / vie roskakoriin",
+  "trash_emptied": "Emptied trash",
   "trash_no_results_message": "Roskakorissa olevat kuvat ja videot näytetään täällä.",
+  "trash_page_delete_all": "Poista kaikki",
+  "trash_page_empty_trash_dialog_content": "Haluatko poistaa roskakoriin siirretyt kohteet? Kohteet poistetaan lopullisesti Immich:sta.",
+  "trash_page_info": "Roskakoriin siirretyt kohteet poistetaan lopullisesti {} päivän kuluttua",
+  "trash_page_no_assets": "Ei poistettuja kohteita",
+  "trash_page_restore_all": "Palauta kaikki",
+  "trash_page_select_assets_btn": "Valitse kohteet",
+  "trash_page_title": "Roskakori",
   "trashed_items_will_be_permanently_deleted_after": "Roskakorin kohteet poistetaan pysyvästi {days, plural, one {# päivän} other {# päivän}} päästä.",
   "type": "Tyyppi",
   "unarchive": "Palauta arkistosta",
@@ -1297,6 +1786,8 @@
   "updated_password": "Salasana päivitetty",
   "upload": "Siirrä palvelimelle",
   "upload_concurrency": "Latausten samanaikaisuus",
+  "upload_dialog_info": "Haluatko varmuuskopioida valitut kohteet palvelimelle?",
+  "upload_dialog_title": "Lähetä kohde",
   "upload_errors": "Lataus valmistui {count, plural, one {# virheen} other {# virheen}} kanssa. Päivitä sivu nähdäksesi ladatut tiedot.",
   "upload_progress": "Jäljellä {remaining, number} - Käsitelty {processed, number}/{total, number}",
   "upload_skipped_duplicates": "Ohitettiin {count, plural, one {# kaksoiskappale} other {# kaksoiskappaletta}}",
@@ -1304,8 +1795,11 @@
   "upload_status_errors": "Virheet",
   "upload_status_uploaded": "Ladattu",
   "upload_success": "Lataus onnistui. Päivitä sivu jotta näet latauksesi.",
+  "upload_to_immich": "Upload to Immich ({})",
+  "uploading": "Uploading",
   "url": "URL",
   "usage": "Käyttö",
+  "use_current_connection": "use current connection",
   "use_custom_date_range": "Käytä omaa aikaväliä",
   "user": "Käyttäjä",
   "user_id": "Käyttäjän ID",
@@ -1320,10 +1814,16 @@
   "users": "Käyttäjät",
   "utilities": "Apuohjelmat",
   "validate": "Validoi",
+  "validate_endpoint_error": "Please enter a valid URL",
   "variables": "Muuttujat",
   "version": "Versio",
   "version_announcement_closing": "Ystäväsi Alex",
   "version_announcement_message": "Hei! Sovelluksen uusi versio on saatavilla. Käythän vilkaisemassa <link>julkaisun tiedot</link> ja varmistathan, että ohjelman määritykset ovat ajan tasalla. Erityisesti, jos käytössä on Watchtower tai jokin muu mekanismi Immich-sovelluksen automaattista päivitystä varten.",
+  "version_announcement_overlay_release_notes": "julkaisutiedoissa",
+  "version_announcement_overlay_text_1": "Hei, kaveri! Uusi palvelinversio on saatavilla sovelluksesta",
+  "version_announcement_overlay_text_2": "Ota hetki aikaa vieraillaksesi",
+  "version_announcement_overlay_text_3": "ja varmista, että käyttämäsi docker-compose ja .env-asetukset ovat ajantasalla välttyäksesi asetusongelmilta. Varsinkin jos käytät WatchToweria tai jotain muuta mekanismia päivittääksesi palvelinsovellusta automaattisesti.",
+  "version_announcement_overlay_title": "Uusi palvelinversio saatavilla 🎉",
   "version_history": "Versiohistoria",
   "version_history_item": "Asennettu {version} päivänä {date}",
   "video": "Video",
@@ -1341,15 +1841,20 @@
   "view_next_asset": "Näytä seuraava",
   "view_previous_asset": "Näytä edellinen",
   "view_stack": "Näytä pinona",
+  "viewer_remove_from_stack": "Poista pinosta",
+  "viewer_stack_use_as_main_asset": "Käytä pääkohteena",
+  "viewer_unstack": "Pura pino",
   "visibility_changed": "{count, plural, one {# henkilön} other {# henkilöiden}} näkyvyys vaihdettu",
   "waiting": "Odottaa",
   "warning": "Varoitus",
   "week": "Viikko",
   "welcome": "Tervetuloa",
   "welcome_to_immich": "Tervetuloa Immichiin",
+  "wifi_name": "WiFi Name",
   "year": "Vuosi",
   "years_ago": "{years, plural, one {# vuosi} other {# vuotta}} sitten",
   "yes": "Kyllä",
   "you_dont_have_any_shared_links": "Sinulla ei ole jaettuja linkkejä",
+  "your_wifi_name": "Your WiFi name",
   "zoom_image": "Zoomaa kuvaa"
-}
+}

i18n/hi.json

@@ -4,6 +4,7 @@
   "account_settings": "अभिलेख व्यवस्था",
   "acknowledge": "स्वीकार करें",
   "action": "कार्रवाई",
+  "action_common_update": "Update",
   "actions": "कार्यवाहियां",
   "active": "सक्रिय",
   "activity": "गतिविधि",
@@ -13,6 +14,7 @@
   "add_a_location": "एक स्थान जोड़ें",
   "add_a_name": "नाम जोड़ें",
   "add_a_title": "एक शीर्षक जोड़ें",
+  "add_endpoint": "Add endpoint",
   "add_exclusion_pattern": "अपवाद उदाहरण जोड़ें",
   "add_import_path": "आयात पथ जोड़ें",
   "add_location": "स्थान जोड़ें",
@@ -22,6 +24,8 @@
   "add_photos": "फ़ोटो जोड़ें",
   "add_to": "इसमें जोड़ें…",
   "add_to_album": "एल्बम में जोड़ें",
+  "add_to_album_bottom_sheet_added": "Added to {album}",
+  "add_to_album_bottom_sheet_already_exists": "Already in {album}",
   "add_to_shared_album": "साझा एल्बम में जोड़ें",
   "add_url": "URL जोड़ें",
   "added_to_archive": "संग्रहीत कर दिया गया है",
@@ -29,11 +33,17 @@
   "added_to_favorites_count": "पसंदीदा में {count, number} जोड़ा गया",
   "admin": {
     "add_exclusion_pattern_description": "बहिष्करण पैटर्न जोड़ें. *, **, और ? का उपयोग करके ग्लोबिंग करना समर्थित है। \"Raw\" नामक किसी भी निर्देशिका की सभी फ़ाइलों को अनदेखा करने के लिए, \"**/Raw/**\" का उपयोग करें। \".tif\" से समाप्त होने वाली सभी फ़ाइलों को अनदेखा करने के लिए, \"**/*.tif\" का उपयोग करें। किसी पूर्ण पथ को अनदेखा करने के लिए, \"/path/to/ignore/**\" का उपयोग करें।",
+    "asset_offline_description": "यह बाहरी लाइब्रेरी एसेट अब डिस्क पर मौजूद नहीं है और इसे ट्रैश में डाल दिया गया है। यदि फ़ाइल को लाइब्रेरी के भीतर कहीं ले जाया गया था, तो नई संबंधित एसेट के लिए अपनी टाइमलाइन देखें। इस एसेट को वापस पाने के लिए, कृपया सुनिश्चित करें कि नीचे दिए गए फ़ाइल पथ को इम्मिच द्वारा एक्सेस किया जा सकता है और फिर लाइब्रेरी को स्कैन करें।",
     "authentication_settings": "प्रमाणीकरण सेटिंग्स",
     "authentication_settings_description": "पासवर्ड, OAuth और अन्य प्रमाणीकरण सेटिंग्स प्रबंधित करें",
     "authentication_settings_disable_all": "क्या आप वाकई सभी लॉगिन विधियों को अक्षम करना चाहते हैं? लॉगिन पूरी तरह से अक्षम कर दिया जाएगा।",
     "authentication_settings_reenable": "पुनः सक्षम करने के लिए, <link>Server Command</link> का प्रयोग करे।",
     "background_task_job": "पृष्ठभूमि कार्य",
+    "backup_database": "बैकअप डाटाबेस",
+    "backup_database_enable_description": "बैकअप डेटाबेस सक्रिय करें",
+    "backup_keep_last_amount": "पूर्व बैकअप क्षमता",
+    "backup_settings": "बैकअप सेटिंग्स",
+    "backup_settings_description": "डेटाबेस बैकअप सेटिंग्स प्रबंधन",
     "check_all": "सभी चेक करें",
     "cleared_jobs": "{job}: के लिए कार्य साफ़ कर दिए गए",
     "config_set_by_file": "Config वर्तमान में एक config फ़ाइल द्वारा सेट किया गया है",
@@ -42,6 +52,9 @@
     "confirm_email_below": "पुष्टि करने के लिए नीचे \"{email}\" टाइप करें",
     "confirm_reprocess_all_faces": "क्या आप वाकई सभी चेहरों को दोबारा संसाधित करना चाहते हैं? इससे नामित लोग भी साफ हो जायेंगे।",
     "confirm_user_password_reset": "क्या आप वाकई {user} का पासवर्ड रीसेट करना चाहते हैं?",
+    "create_job": "जॉब बनाएँ",
+    "cron_expression": "क्रॉन अभिव्यक्ति",
+    "cron_expression_description": "क्रॉन प्रारूप का उपयोग करके स्कैनिंग अंतराल सेट करें। अधिक जानकारी के लिए कृपया <link>क्रोनटैब गुरु</link> देखें",
     "disable_login": "लॉगिन अक्षम करें",
     "duplicate_detection_job_description": "समान छवियों का पता लगाने के लिए संपत्तियों पर मशीन लर्निंग चलाएं। यह कार्यक्षमता स्मार्ट खोज पर निर्भर करती है",
     "exclusion_pattern_description": "Exclusion पैटर्न आपको अपनी लाइब्रेरी को स्कैन करते समय फ़ाइलों और फ़ोल्डरों को अनदेखा करने देता है। यह उपयोगी है यदि आपके पास ऐसे फ़ोल्डर हैं जिनमें ऐसी फ़ाइलें हैं जिन्हें आप आयात नहीं करना चाहते हैं, जैसे RAW फ़ाइलें।",
@@ -53,11 +66,14 @@
     "failed_job_command": "कार्य {job} के लिए आदेश {command} विफल",
     "force_delete_user_warning": "चेतावनी: इससे उपयोगकर्ता और सारा डेटा तुरंत हट जाएगा। इसे पूर्ववत नहीं किया जा सकता और फ़ाइलें पुनर्प्राप्त नहीं की जा सकतीं।",
     "forcing_refresh_library_files": "सभी लाइब्रेरी फ़ाइलों को जबरन सामयिक करें",
+    "image_format": "प्रारूप",
     "image_format_description": "वेबपी, जेपीईजी की तुलना में छोटी फ़ाइलें बनाता है, लेकिन एनकोड करने में धीमा है।",
     "image_prefer_embedded_preview": "एम्बेडेड पूर्वावलोकन को प्राथमिकता दें",
     "image_prefer_embedded_preview_setting_description": "जब उपलब्ध हो तो RAW फ़ोटो में एम्बेडेड पूर्वावलोकन का उपयोग इमेज प्रोसेसिंग के इनपुट के रूप में करें। यह कुछ छवियों के लिए अधिक सटीक रंग उत्पन्न कर सकता है, लेकिन पूर्वावलोकन की गुणवत्ता कैमरे पर निर्भर करती है और छवि में अधिक संपीड़न कलाकृतियाँ हो सकती हैं।",
     "image_prefer_wide_gamut": "विस्तृत सरगम को प्राथमिकता दें",
     "image_prefer_wide_gamut_setting_description": "थंबनेल के लिए डिस्प्ले P3 का उपयोग करें। यह विस्तृत कलरस्पेस वाली छवियों की जीवंतता को बेहतर ढंग से संरक्षित करता है, लेकिन पुराने ब्राउज़र संस्करण वाले पुराने डिवाइस पर छवियां अलग-अलग दिखाई दे सकती हैं। रंग परिवर्तन से बचने के लिए sRGB छवियों को sRGB के रूप में रखा जाता है।",
+    "image_preview_description": "मेटाडेटा रहित मध्यम आकार की छवि, जिसका उपयोग एकल संपत्ति देखने और मशीन लर्निंग के लिए होता है",
+    "image_preview_title": "पूर्वदर्शन सेटिंग्स",
     "image_quality": "गुणवत्ता",
     "image_settings": "छवि सेटिंग्स",
     "image_settings_description": "उत्पन्न छवियों की गुणवत्ता और रिज़ॉल्यूशन प्रबंधित करें",
@@ -134,7 +150,6 @@
     "no_pattern_added": "कोई पैटर्न नहीं जोड़ा गया",
     "note_apply_storage_label_previous_assets": "नोट: पहले अपलोड की गई संपत्तियों पर स्टोरेज लेबल लागू करने के लिए, चलाएँ",
     "note_cannot_be_changed_later": "नोट: इसे बाद में बदला नहीं जा सकता!",
-    "note_unlimited_quota": "नोट: असीमित कोटा के लिए 0 दर्ज करें",
     "notification_email_from_address": "इस पते से",
     "notification_email_from_address_description": "प्रेषक का ईमेल पता, उदाहरण के लिए: \"इमिच फोटो सर्वर <noreply@example.com>\"",
     "notification_email_host_description": "ईमेल सर्वर का होस्ट (उदा. smtp.immitch.app)",
@@ -301,17 +316,41 @@
   "admin_password": "व्यवस्थापक पासवर्ड",
   "administration": "प्रशासन",
   "advanced": "विकसित",
+  "advanced_settings_log_level_title": "Log level: {}",
+  "advanced_settings_prefer_remote_subtitle": "Some devices are painfully slow to load thumbnails from assets on the device. Activate this setting to load remote images instead.",
+  "advanced_settings_prefer_remote_title": "Prefer remote images",
+  "advanced_settings_proxy_headers_subtitle": "Define proxy headers Immich should send with each network request",
+  "advanced_settings_proxy_headers_title": "Proxy Headers",
+  "advanced_settings_self_signed_ssl_subtitle": "Skips SSL certificate verification for the server endpoint. Required for self-signed certificates.",
+  "advanced_settings_self_signed_ssl_title": "Allow self-signed SSL certificates",
+  "advanced_settings_tile_subtitle": "Advanced user's settings",
+  "advanced_settings_troubleshooting_subtitle": "Enable additional features for troubleshooting",
+  "advanced_settings_troubleshooting_title": "Troubleshooting",
   "album_added": "एल्बम जोड़ा गया",
   "album_added_notification_setting_description": "जब आपको किसी साझा एल्बम में जोड़ा जाए तो एक ईमेल सूचना प्राप्त करें",
   "album_cover_updated": "एल्बम कवर अपडेट किया गया",
+  "album_info_card_backup_album_excluded": "EXCLUDED",
+  "album_info_card_backup_album_included": "INCLUDED",
   "album_info_updated": "एल्बम की जानकारी अपडेट की गई",
   "album_leave": "एल्बम छोड़ें?",
   "album_name": "एल्बम का नाम",
   "album_options": "एल्बम विकल्प",
   "album_remove_user": "उपयोगकर्ता हटाएं?",
   "album_share_no_users": "ऐसा लगता है कि आपने यह एल्बम सभी उपयोगकर्ताओं के साथ साझा कर दिया है या आपके पास साझा करने के लिए कोई उपयोगकर्ता नहीं है।",
+  "album_thumbnail_card_item": "1 item",
+  "album_thumbnail_card_items": "{} items",
+  "album_thumbnail_card_shared": " · Shared",
+  "album_thumbnail_shared_by": "Shared by {}",
   "album_updated": "एल्बम अपडेट किया गया",
   "album_updated_setting_description": "जब किसी साझा एल्बम में नई संपत्तियाँ हों तो एक ईमेल सूचना प्राप्त करें",
+  "album_viewer_appbar_delete_confirm": "Are you sure you want to delete this album from your account?",
+  "album_viewer_appbar_share_err_delete": "Failed to delete album",
+  "album_viewer_appbar_share_err_leave": "Failed to leave album",
+  "album_viewer_appbar_share_err_remove": "There are problems in removing assets from album",
+  "album_viewer_appbar_share_err_title": "Failed to change album title",
+  "album_viewer_appbar_share_leave": "Leave album",
+  "album_viewer_appbar_share_to": "साझा करें",
+  "album_viewer_page_share_add_users": "Add users",
   "album_with_link_access": "लिंक वाले किसी भी व्यक्ति को इस एल्बम में फ़ोटो और लोगों को देखने दें।",
   "albums": "एलबम",
   "all": "सभी",
@@ -326,29 +365,120 @@
   "api_key_description": "यह की केवल एक बार दिखाई जाएगी। विंडो बंद करने से पहले कृपया इसे कॉपी करना सुनिश्चित करें।।",
   "api_key_empty": "आपका एपीआई कुंजी नाम खाली नहीं होना चाहिए",
   "api_keys": "एपीआई कीज",
+  "app_bar_signout_dialog_content": "क्या आप सुनिश्चित हैं कि आप लॉग आउट करना चाहते हैं?",
+  "app_bar_signout_dialog_ok": "हाँ",
+  "app_bar_signout_dialog_title": "लॉग आउट",
   "app_settings": "एप्लिकेशन सेटिंग",
   "appears_in": "प्रकट होता है",
   "archive": "संग्रहालय",
   "archive_or_unarchive_photo": "फ़ोटो को संग्रहीत या असंग्रहीत करें",
+  "archive_page_no_archived_assets": "No archived assets found",
+  "archive_page_title": "Archive ({})",
   "archive_size": "पुरालेख आकार",
   "archive_size_description": "डाउनलोड के लिए संग्रह आकार कॉन्फ़िगर करें (GiB में)",
+  "archived": "संग्रहित",
   "are_these_the_same_person": "क्या ये वही व्यक्ति हैं?",
   "are_you_sure_to_do_this": "क्या आप वास्तव में इसे करना चाहते हैं?",
+  "asset_action_delete_err_read_only": "Cannot delete read only asset(s), skipping",
+  "asset_action_share_err_offline": "Cannot fetch offline asset(s), skipping",
   "asset_added_to_album": "एल्बम में जोड़ा गया",
   "asset_adding_to_album": "एल्बम में जोड़ा जा रहा है..।",
   "asset_description_updated": "संपत्ति विवरण अद्यतन कर दिया गया है",
   "asset_has_unassigned_faces": "एसेट में अनिर्धारित चेहरे हैं",
   "asset_hashing": "हैशिंग..।",
+  "asset_list_group_by_sub_title": "Group by",
+  "asset_list_layout_settings_dynamic_layout_title": "Dynamic layout",
+  "asset_list_layout_settings_group_automatically": "Automatic",
+  "asset_list_layout_settings_group_by": "Group assets by",
+  "asset_list_layout_settings_group_by_month_day": "Month + day",
+  "asset_list_layout_sub_title": "Layout",
+  "asset_list_settings_subtitle": "Photo grid layout settings",
+  "asset_list_settings_title": "Photo Grid",
   "asset_offline": "संपत्ति ऑफ़लाइन",
   "asset_offline_description": "यह संपत्ति ऑफ़लाइन है।",
+  "asset_restored_successfully": "संपत्ति(याँ) सफलतापूर्वक पुनर्स्थापित की गईं",
   "asset_skipped": "छोड़ा गया",
   "asset_uploaded": "अपलोड किए गए",
   "asset_uploading": "अपलोड हो रहा है..।",
+  "asset_viewer_settings_subtitle": "Manage your gallery viewer settings",
+  "asset_viewer_settings_title": "Asset Viewer",
   "assets": "संपत्तियां",
+  "assets_deleted_permanently": "{} संपत्ति(याँ) स्थायी रूप से हटा दी गईं",
+  "assets_deleted_permanently_from_server": "{} संपत्ति(याँ) इमिच सर्वर से स्थायी रूप से हटा दी गईं",
+  "assets_removed_permanently_from_device": "{} संपत्ति(याँ) आपके डिवाइस से स्थायी रूप से हटा दी गईं",
   "assets_restore_confirmation": "क्या आप वाकई अपनी सभी नष्ट की गई संपत्तियों को पुनर्स्थापित करना चाहते हैं? आप इस क्रिया को पूर्ववत नहीं कर सकते!",
+  "assets_restored_successfully": "{} संपत्ति(याँ) सफलतापूर्वक पुनर्स्थापित की गईं",
+  "assets_trashed": "{} संपत्ति(याँ) कचरे में डाली गईं",
+  "assets_trashed_from_server": "{} संपत्ति(याँ) इमिच सर्वर से कचरे में डाली गईं",
   "authorized_devices": "अधिकृत उपकरण",
+  "automatic_endpoint_switching_subtitle": "Connect locally over designated Wi-Fi when available and use alternative connections elsewhere",
+  "automatic_endpoint_switching_title": "Automatic URL switching",
   "back": "वापस",
   "back_close_deselect": "वापस जाएँ, बंद करें, या अचयनित करें",
+  "background_location_permission": "Background location permission",
+  "background_location_permission_content": "In order to switch networks when running in the background, Immich must *always* have precise location access so the app can read the Wi-Fi network's name",
+  "backup_album_selection_page_albums_device": "Albums on device ({})",
+  "backup_album_selection_page_albums_tap": "Tap to include, double tap to exclude",
+  "backup_album_selection_page_assets_scatter": "Assets can scatter across multiple albums. Thus, albums can be included or excluded during the backup process.",
+  "backup_album_selection_page_select_albums": "Select albums",
+  "backup_album_selection_page_selection_info": "Selection Info",
+  "backup_album_selection_page_total_assets": "Total unique assets",
+  "backup_all": "All",
+  "backup_background_service_backup_failed_message": "Failed to backup assets. Retrying…",
+  "backup_background_service_connection_failed_message": "Failed to connect to the server. Retrying…",
+  "backup_background_service_current_upload_notification": "Uploading {}",
+  "backup_background_service_default_notification": "Checking for new assets…",
+  "backup_background_service_error_title": "Backup error",
+  "backup_background_service_in_progress_notification": "Backing up your assets…",
+  "backup_background_service_upload_failure_notification": "Failed to upload {}",
+  "backup_controller_page_albums": "Backup Albums",
+  "backup_controller_page_background_app_refresh_disabled_content": "Enable background app refresh in Settings > General > Background App Refresh in order to use background backup.",
+  "backup_controller_page_background_app_refresh_disabled_title": "Background app refresh disabled",
+  "backup_controller_page_background_app_refresh_enable_button_text": "Go to settings",
+  "backup_controller_page_background_battery_info_link": "Show me how",
+  "backup_controller_page_background_battery_info_message": "For the best background backup experience, please disable any battery optimizations restricting background activity for Immich.\n\nSince this is device-specific, please lookup the required information for your device manufacturer.",
+  "backup_controller_page_background_battery_info_ok": "OK",
+  "backup_controller_page_background_battery_info_title": "Battery optimizations",
+  "backup_controller_page_background_charging": "Only while charging",
+  "backup_controller_page_background_configure_error": "Failed to configure the background service",
+  "backup_controller_page_background_delay": "Delay new assets backup: {}",
+  "backup_controller_page_background_description": "Turn on the background service to automatically backup any new assets without needing to open the app",
+  "backup_controller_page_background_is_off": "Automatic background backup is off",
+  "backup_controller_page_background_is_on": "Automatic background backup is on",
+  "backup_controller_page_background_turn_off": "Turn off background service",
+  "backup_controller_page_background_turn_on": "Turn on background service",
+  "backup_controller_page_background_wifi": "Only on WiFi",
+  "backup_controller_page_backup": "Backup",
+  "backup_controller_page_backup_selected": "Selected: ",
+  "backup_controller_page_backup_sub": "Backed up photos and videos",
+  "backup_controller_page_created": "Created on: {}",
+  "backup_controller_page_desc_backup": "Turn on foreground backup to automatically upload new assets to the server when opening the app.",
+  "backup_controller_page_excluded": "Excluded: ",
+  "backup_controller_page_failed": "Failed ({})",
+  "backup_controller_page_filename": "File name: {} [{}]",
+  "backup_controller_page_id": "ID: {}",
+  "backup_controller_page_info": "Backup Information",
+  "backup_controller_page_none_selected": "None selected",
+  "backup_controller_page_remainder": "Remainder",
+  "backup_controller_page_remainder_sub": "Remaining photos and videos to back up from selection",
+  "backup_controller_page_server_storage": "Server Storage",
+  "backup_controller_page_start_backup": "Start Backup",
+  "backup_controller_page_status_off": "Automatic foreground backup is off",
+  "backup_controller_page_status_on": "Automatic foreground backup is on",
+  "backup_controller_page_storage_format": "{} of {} used",
+  "backup_controller_page_to_backup": "Albums to be backed up",
+  "backup_controller_page_total_sub": "All unique photos and videos from selected albums",
+  "backup_controller_page_turn_off": "Turn off foreground backup",
+  "backup_controller_page_turn_on": "Turn on foreground backup",
+  "backup_controller_page_uploading_file_info": "Uploading file info",
+  "backup_err_only_album": "Cannot remove the only album",
+  "backup_info_card_assets": "assets",
+  "backup_manual_cancelled": "Cancelled",
+  "backup_manual_in_progress": "Upload already in progress. Try after sometime",
+  "backup_manual_success": "Success",
+  "backup_manual_title": "Upload status",
+  "backup_options_page_title": "Backup options",
+  "backup_setting_subtitle": "Manage background and foreground upload settings",
   "backward": "पिछला",
   "birthdate_saved": "जन्मतिथि सफलतापूर्वक सहेजी गई",
   "birthdate_set_description": "जन्मतिथि का उपयोग फोटो के समय इस व्यक्ति की आयु की गणना करने के लिए किया जाता है।",
@@ -356,24 +486,52 @@
   "build": "निर्माण",
   "build_image": "छवि बनाएँ",
   "buy": "इम्मीच खरीदो",
+  "cache_settings_album_thumbnails": "Library page thumbnails ({} assets)",
+  "cache_settings_clear_cache_button": "Clear cache",
+  "cache_settings_clear_cache_button_title": "Clears the app's cache. This will significantly impact the app's performance until the cache has rebuilt.",
+  "cache_settings_duplicated_assets_clear_button": "CLEAR",
+  "cache_settings_duplicated_assets_subtitle": "Photos and videos that are black listed by the app",
+  "cache_settings_duplicated_assets_title": "Duplicated Assets ({})",
+  "cache_settings_image_cache_size": "Image cache size ({} assets)",
+  "cache_settings_statistics_album": "Library thumbnails",
+  "cache_settings_statistics_assets": "{} assets ({})",
+  "cache_settings_statistics_full": "Full images",
+  "cache_settings_statistics_shared": "Shared album thumbnails",
+  "cache_settings_statistics_thumbnail": "Thumbnails",
+  "cache_settings_statistics_title": "Cache usage",
+  "cache_settings_subtitle": "Control the caching behaviour of the Immich mobile application",
+  "cache_settings_thumbnail_size": "Thumbnail cache size ({} assets)",
+  "cache_settings_tile_subtitle": "स्थानीय संग्रहण के व्यवहार को नियंत्रित करें",
+  "cache_settings_tile_title": "स्थानीय संग्रहण",
+  "cache_settings_title": "Caching Settings",
   "camera": "कैमरा",
   "camera_brand": "कैमरा ब्रांड",
   "camera_model": "कैमरा मॉडल",
   "cancel": "रद्द करना",
   "cancel_search": "खोज रद्द करें",
+  "canceled": "Canceled",
   "cannot_merge_people": "लोगों का विलय नहीं हो सकता",
   "cannot_undo_this_action": "आप इस क्रिया को पूर्ववत नहीं कर सकते!",
   "cannot_update_the_description": "विवरण अद्यतन नहीं किया जा सकता",
   "change_date": "बदलाव दिनांक",
+  "change_display_order": "Change display order",
   "change_expiration_time": "समाप्ति समय बदलें",
   "change_location": "स्थान बदलें",
   "change_name": "नाम परिवर्तन करें",
   "change_name_successfully": "नाम सफलतापूर्वक बदलें",
   "change_password": "पासवर्ड बदलें",
   "change_password_description": "यह या तो पहली बार है जब आप सिस्टम में साइन इन कर रहे हैं या आपका पासवर्ड बदलने का अनुरोध किया गया है।",
+  "change_password_form_confirm_password": "Confirm Password",
+  "change_password_form_description": "Hi {name},\n\nThis is either the first time you are signing into the system or a request has been made to change your password. Please enter the new password below.",
+  "change_password_form_new_password": "New Password",
+  "change_password_form_password_mismatch": "Passwords do not match",
+  "change_password_form_reenter_new_password": "Re-enter New Password",
   "change_your_password": "अपना पासवर्ड बदलें",
   "changed_visibility_successfully": "दृश्यता सफलतापूर्वक परिवर्तित",
   "check_all": "सभी चेक करें",
+  "check_corrupt_asset_backup": "Check for corrupt asset backups",
+  "check_corrupt_asset_backup_button": "Perform check",
+  "check_corrupt_asset_backup_description": "Run this check only over Wi-Fi and once all assets have been backed-up. The procedure might take a few minutes.",
   "check_logs": "लॉग जांचें",
   "choose_matching_people_to_merge": "मर्ज करने के लिए मिलते-जुलते लोगों को चुनें",
   "city": "शहर",
@@ -382,6 +540,14 @@
   "clear_all_recent_searches": "सभी हालिया खोजें साफ़ करें",
   "clear_message": "स्पष्ट संदेश",
   "clear_value": "स्पष्ट मूल्य",
+  "client_cert_dialog_msg_confirm": "OK",
+  "client_cert_enter_password": "Enter Password",
+  "client_cert_import": "Import",
+  "client_cert_import_success_msg": "Client certificate is imported",
+  "client_cert_invalid_msg": "Invalid certificate file or wrong password",
+  "client_cert_remove_msg": "Client certificate is removed",
+  "client_cert_subtitle": "Supports PKCS12 (.p12, .pfx) format only. Certificate Import/Remove is available only before login",
+  "client_cert_title": "SSL Client Certificate",
   "close": "बंद",
   "collapse": "गिर जाना",
   "collapse_all": "सभी को संकुचित करें",
@@ -390,6 +556,9 @@
   "comment_options": "टिप्पणी विकल्प",
   "comments_and_likes": "टिप्पणियाँ और पसंद",
   "comments_are_disabled": "टिप्पणियाँ अक्षम हैं",
+  "common_create_new_album": "Create new album",
+  "common_server_error": "Please check your network connection, make sure the server is reachable and app/server versions are compatible.",
+  "completed": "Completed",
   "confirm": "पुष्टि",
   "confirm_admin_password": "एडमिन पासवर्ड की पुष्टि करें",
   "confirm_delete_shared_link": "क्या आप वाकई इस साझा लिंक को हटाना चाहते हैं?",
@@ -397,6 +566,15 @@
   "contain": "समाहित",
   "context": "संदर्भ",
   "continue": "जारी",
+  "control_bottom_app_bar_album_info_shared": "{} items · Shared",
+  "control_bottom_app_bar_create_new_album": "Create new album",
+  "control_bottom_app_bar_delete_from_immich": "Delete from Immich",
+  "control_bottom_app_bar_delete_from_local": "Delete from device",
+  "control_bottom_app_bar_edit_location": "Edit Location",
+  "control_bottom_app_bar_edit_time": "Edit Date & Time",
+  "control_bottom_app_bar_share_link": "Share Link",
+  "control_bottom_app_bar_share_to": "Share To",
+  "control_bottom_app_bar_trash_from_immich": "Move to Trash",
   "copied_image_to_clipboard": "छवि को क्लिपबोर्ड पर कॉपी किया गया।",
   "copied_to_clipboard": "क्लिपबोर्ड पर नकल!",
   "copy_error": "प्रतिलिपि त्रुटि",
@@ -411,22 +589,32 @@
   "covers": "आवरण",
   "create": "तैयार करें",
   "create_album": "एल्बम बनाओ",
+  "create_album_page_untitled": "Untitled",
   "create_library": "लाइब्रेरी बनाएं",
   "create_link": "लिंक बनाएं",
   "create_link_to_share": "शेयर करने के लिए लिंक बनाएं",
   "create_link_to_share_description": "लिंक वाले किसी भी व्यक्ति को चयनित फ़ोटो देखने दें",
+  "create_new": "नया बनाएं",
   "create_new_person": "नया व्यक्ति बनाएं",
   "create_new_person_hint": "चयनित संपत्तियों को एक नए व्यक्ति को सौंपें",
   "create_new_user": "नया उपयोगकर्ता बनाएं",
+  "create_shared_album_page_share_add_assets": "ADD ASSETS",
+  "create_shared_album_page_share_select_photos": "Select Photos",
   "create_user": "उपयोगकर्ता बनाइये",
   "created": "बनाया",
+  "crop": "छाँटें",
+  "curated_object_page_title": "Things",
   "current_device": "वर्तमान उपकरण",
+  "current_server_address": "Current server address",
   "custom_locale": "कस्टम लोकेल",
   "custom_locale_description": "भाषा और क्षेत्र के आधार पर दिनांक और संख्याएँ प्रारूपित करें",
+  "daily_title_text_date": "E, MMM dd",
+  "daily_title_text_date_year": "E, MMM dd, yyyy",
   "dark": "डार्क",
   "date_after": "इसके बाद की तारीख",
   "date_and_time": "तिथि और समय",
   "date_before": "पहले की तारीख",
+  "date_format": "E, LLL d, y • h:mm a",
   "date_of_birth_saved": "जन्मतिथि सफलतापूर्वक सहेजी गई",
   "date_range": "तिथि सीमा",
   "day": "दिन",
@@ -436,14 +624,25 @@
   "delete": "हटाएँ",
   "delete_album": "एल्बम हटाएँ",
   "delete_api_key_prompt": "क्या आप वाकई इस एपीआई कुंजी को हटाना चाहते हैं?",
+  "delete_dialog_alert": "These items will be permanently deleted from Immich and from your device",
+  "delete_dialog_alert_local": "These items will be permanently removed from your device but still be available on the Immich server",
+  "delete_dialog_alert_local_non_backed_up": "Some of the items aren't backed up to Immich and will be permanently removed from your device",
+  "delete_dialog_alert_remote": "These items will be permanently deleted from the Immich server",
+  "delete_dialog_ok_force": "Delete Anyway",
+  "delete_dialog_title": "Delete Permanently",
   "delete_duplicates_confirmation": "क्या आप वाकई इन डुप्लिकेट को स्थायी रूप से हटाना चाहते हैं?",
   "delete_key": "कुंजी हटाएँ",
   "delete_library": "लाइब्रेरी हटाएँ",
   "delete_link": "लिंक हटाएँ",
+  "delete_local_dialog_ok_backed_up_only": "Delete Backed Up Only",
+  "delete_local_dialog_ok_force": "Delete Anyway",
   "delete_shared_link": "साझा किए गए लिंक को हटाएं",
+  "delete_shared_link_dialog_title": "साझा किए गए लिंक को हटाएं",
   "delete_user": "उपभोक्ता मिटायें",
   "deleted_shared_link": "साझा किया गया लिंक हटा दिया गया",
   "description": "वर्णन",
+  "description_input_hint_text": "Add description...",
+  "description_input_submit_error": "Error updating description, check the log for more details",
   "details": "विवरण",
   "direction": "दिशा",
   "disabled": "अक्षम",
@@ -458,9 +657,23 @@
   "do_not_show_again": "इस संदेश को दुबारा मत दिखाना",
   "done": "ठीक है",
   "download": "डाउनलोड करें",
+  "download_canceled": "डाउनलोड रद्द कर दिया गया",
+  "download_complete": "डाउनलोड पूरा",
+  "download_enqueue": "डाउनलोड कतार में है",
+  "download_error": "डाउनलोड त्रुटि",
+  "download_failed": "डाउनलोड विफल",
+  "download_filename": "फ़ाइल: {}",
+  "download_finished": "डाउनलोड समाप्त",
+  "download_notfound": "डाउनलोड नहीं मिला",
+  "download_paused": "डाउनलोड स्थगित",
   "download_settings": "डाउनलोड करना",
   "download_settings_description": "संपत्ति डाउनलोड से संबंधित सेटिंग्स प्रबंधित करें",
+  "download_started": "डाउनलोड प्रारंभ हुआ",
+  "download_sucess": "डाउनलोड सफल",
+  "download_sucess_android": "मीडिया DCIM/Immich में डाउनलोड हो गया है",
+  "download_waiting_to_retry": "पुनः प्रयास करने का इंतजार कर रहा है",
   "downloading": "डाउनलोड",
+  "downloading_media": "मीडिया डाउनलोड हो रहा है",
   "drop_files_to_upload": "अपलोड करने के लिए फ़ाइलें कहीं भी छोड़ें",
   "duplicates": "डुप्लिकेट",
   "duplicates_description": "प्रत्येक समूह को यह इंगित करके हल करें कि कौन सा, यदि कोई है, डुप्लिकेट है",
@@ -477,6 +690,7 @@
   "edit_key": "कुंजी संपादित करें",
   "edit_link": "लिंक संपादित करें",
   "edit_location": "स्थान संपादित करें",
+  "edit_location_dialog_title": "Location",
   "edit_name": "नाम संपादित करें",
   "edit_people": "लोगों को संपादित करें",
   "edit_title": "शीर्षक संपादित करें",
@@ -484,13 +698,18 @@
   "edited": "संपादित",
   "editor": "",
   "email": "ईमेल",
+  "empty_folder": "This folder is empty",
   "empty_trash": "कूड़ेदान खाली करें",
   "empty_trash_confirmation": "क्या आपको यकीन है कि आप कचरा खाली करना चाहते हैं? यह इमिच से स्थायी रूप से कचरा में सभी संपत्तियों को हटा देगा।\nआप इस कार्रवाई को नहीं रोक सकते!",
   "enable": "सक्षम",
   "enabled": "सक्रिय",
   "end_date": "अंतिम तिथि",
+  "enqueued": "Enqueued",
+  "enter_wifi_name": "Enter WiFi name",
   "error": "गलती",
+  "error_change_sort_album": "Failed to change album sort order",
   "error_loading_image": "छवि लोड करने में त्रुटि",
+  "error_saving_image": "त्रुटि: {}",
   "error_title": "त्रुटि - कुछ गलत हो गया",
   "errors": {
     "cannot_navigate_next_asset": "अगली संपत्ति पर नेविगेट नहीं किया जा सकता",
@@ -604,8 +823,21 @@
     "unable_to_upload_file": "फाइल अपलोड करने में असमर्थ"
   },
   "exif": "एक्सिफ",
+  "exif_bottom_sheet_description": "Add Description...",
+  "exif_bottom_sheet_details": "DETAILS",
+  "exif_bottom_sheet_location": "LOCATION",
+  "exif_bottom_sheet_people": "PEOPLE",
+  "exif_bottom_sheet_person_add_person": "Add name",
+  "exif_bottom_sheet_person_age": "Age {}",
+  "exif_bottom_sheet_person_age_months": "Age {} months",
+  "exif_bottom_sheet_person_age_year_months": "Age 1 year, {} months",
+  "exif_bottom_sheet_person_age_years": "Age {}",
   "exit_slideshow": "स्लाइड शो से बाहर निकलें",
   "expand_all": "सभी का विस्तार",
+  "experimental_settings_new_asset_list_subtitle": "Work in progress",
+  "experimental_settings_new_asset_list_title": "Enable experimental photo grid",
+  "experimental_settings_subtitle": "Use at your own risk!",
+  "experimental_settings_title": "Experimental",
   "expire_after": "एक्सपायर आफ्टर",
   "expired": "खत्म हो चुका",
   "explore": "अन्वेषण करना",
@@ -614,37 +846,77 @@
   "extension": "विस्तार",
   "external": "बाहरी",
   "external_libraries": "बाहरी पुस्तकालय",
+  "external_network": "External network",
+  "external_network_sheet_info": "When not on the preferred WiFi network, the app will connect to the server through the first of the below URLs it can reach, starting from top to bottom",
   "face_unassigned": "सौंपे नहीं गए",
+  "failed": "Failed",
+  "failed_to_load_assets": "Failed to load assets",
+  "failed_to_load_folder": "Failed to load folder",
   "favorite": "पसंदीदा",
   "favorite_or_unfavorite_photo": "पसंदीदा या नापसंद फोटो",
   "favorites": "पसंदीदा",
+  "favorites_page_no_favorites": "No favorite assets found",
   "feature_photo_updated": "फ़ीचर फ़ोटो अपडेट किया गया",
   "file_name": "फ़ाइल का नाम",
   "file_name_or_extension": "फ़ाइल का नाम या एक्सटेंशन",
   "filename": "फ़ाइल का नाम",
   "filetype": "फाइल का प्रकार",
+  "filter": "फ़िल्टर",
   "filter_people": "लोगों को फ़िल्टर करें",
   "find_them_fast": "खोज के साथ नाम से उन्हें तेजी से ढूंढें",
   "fix_incorrect_match": "ग़लत मिलान ठीक करें",
+  "folder": "Folder",
+  "folder_not_found": "Folder not found",
+  "folders": "Folders",
   "forward": "आगे",
   "general": "सामान्य",
   "get_help": "मदद लें",
+  "get_wifiname_error": "Could not get Wi-Fi name. Make sure you have granted the necessary permissions and are connected to a Wi-Fi network",
   "getting_started": "शुरू करना",
   "go_back": "वापस जाओ",
   "go_to_search": "खोज पर जाएँ",
+  "grant_permission": "Grant permission",
   "group_albums_by": "इनके द्वारा समूह एल्बम..।",
   "group_no": "कोई समूहीकरण नहीं",
   "group_owner": "स्वामी द्वारा समूह",
   "group_year": "वर्ष के अनुसार समूह",
+  "haptic_feedback_switch": "Enable haptic feedback",
+  "haptic_feedback_title": "Haptic Feedback",
   "has_quota": "कोटा है",
+  "header_settings_add_header_tip": "Add Header",
+  "header_settings_field_validator_msg": "Value cannot be empty",
+  "header_settings_header_name_input": "Header name",
+  "header_settings_header_value_input": "Header value",
+  "headers_settings_tile_subtitle": "Define proxy headers the app should send with each network request",
+  "headers_settings_tile_title": "Custom proxy headers",
   "hide_all_people": "सभी लोगों को छुपाएं",
   "hide_gallery": "गैलरी छिपाएँ",
   "hide_password": "पासवर्ड छिपाएं",
   "hide_person": "व्यक्ति छिपाएँ",
   "hide_unnamed_people": "अनाम लोगों को छुपाएं",
+  "home_page_add_to_album_conflicts": "Added {added} assets to album {album}. {failed} assets are already in the album.",
+  "home_page_add_to_album_err_local": "Can not add local assets to albums yet, skipping",
+  "home_page_add_to_album_success": "Added {added} assets to album {album}.",
+  "home_page_album_err_partner": "अब तक पार्टनर एसेट्स को एल्बम में जोड़ा नहीं कर सकते, स्किप कर रहे हैं",
+  "home_page_archive_err_local": "Can not archive local assets yet, skipping",
+  "home_page_archive_err_partner": "पार्टनर एसेट्स को आर्काइव नहीं कर सकते, स्किप कर रहे हैं",
+  "home_page_building_timeline": "Building the timeline",
+  "home_page_delete_err_partner": "पार्टनर एसेट्स को डिलीट नहीं कर सकते, स्किप कर रहे हैं",
+  "home_page_delete_remote_err_local": "Local assets in delete remote selection, skipping",
+  "home_page_favorite_err_local": "Can not favorite local assets yet, skipping",
+  "home_page_favorite_err_partner": "अब तक पार्टनर एसेट्स को फेवरेट नहीं कर सकते, स्किप कर रहे हैं",
+  "home_page_first_time_notice": "If this is your first time using the app, please make sure to choose a backup album(s) so that the timeline can populate photos and videos in the album(s).",
+  "home_page_share_err_local": "लोकल एसेट्स को लिंक के जरिए शेयर नहीं कर सकते, स्किप कर रहे हैं",
+  "home_page_upload_err_limit": "Can only upload a maximum of 30 assets at a time, skipping",
   "host": "मेज़बान",
   "hour": "घंटा",
+  "ignore_icloud_photos": "आइक्लाउड फ़ोटो को अनदेखा करें",
+  "ignore_icloud_photos_description": "आइक्लाउड पर स्टोर की गई फ़ोटोज़ इमिच सर्वर पर अपलोड नहीं की जाएंगी",
   "image": "छवि",
+  "image_saved_successfully": "इमेज सहेज दी गई",
+  "image_viewer_page_state_provider_download_started": "Download Started",
+  "image_viewer_page_state_provider_download_success": "Download Success",
+  "image_viewer_page_state_provider_share_error": "Share Error",
   "immich_logo": "Immich लोगो",
   "immich_web_interface": "इमिच वेब इंटरफ़ेस",
   "import_from_json": "JSON से आयात करें",
@@ -661,6 +933,8 @@
     "night_at_midnight": "हर रात आधी रात को",
     "night_at_twoam": "हर रात 2 बजे"
   },
+  "invalid_date": "अमान्य तारीख़",
+  "invalid_date_format": "अमान्य तारीख़ प्रारूप",
   "invite_people": "लोगो को निमंत्रण भेजो",
   "invite_to_album": "एल्बम के लिए आमंत्रित करें",
   "jobs": "नौकरियां",
@@ -677,6 +951,12 @@
   "level": "स्तर",
   "library": "पुस्तकालय",
   "library_options": "पुस्तकालय विकल्प",
+  "library_page_device_albums": "Albums on Device",
+  "library_page_new_album": "New album",
+  "library_page_sort_asset_count": "Number of assets",
+  "library_page_sort_created": "Created date",
+  "library_page_sort_last_modified": "Last modified",
+  "library_page_sort_title": "Album title",
   "light": "रोशनी",
   "like_deleted": "जैसे हटा दिया गया",
   "link_options": "लिंक विकल्प",
@@ -685,12 +965,42 @@
   "list": "सूची",
   "loading": "लोड हो रहा है",
   "loading_search_results_failed": "खोज परिणाम लोड करना विफल रहा",
+  "local_network": "Local network",
+  "local_network_sheet_info": "The app will connect to the server through this URL when using the specified Wi-Fi network",
+  "location_permission": "Location permission",
+  "location_permission_content": "In order to use the auto-switching feature, Immich needs precise location permission so it can read the current WiFi network's name",
+  "location_picker_choose_on_map": "Choose on map",
+  "location_picker_latitude_error": "Enter a valid latitude",
+  "location_picker_latitude_hint": "Enter your latitude here",
+  "location_picker_longitude_error": "Enter a valid longitude",
+  "location_picker_longitude_hint": "Enter your longitude here",
   "log_out": "लॉग आउट",
   "log_out_all_devices": "सभी डिवाइस लॉग आउट करें",
   "logged_out_all_devices": "सभी डिवाइस लॉग आउट कर दिए गए",
   "logged_out_device": "लॉग आउट डिवाइस",
   "login": "लॉग इन करें",
+  "login_disabled": "Login has been disabled",
+  "login_form_api_exception": "API exception. Please check the server URL and try again.",
+  "login_form_back_button_text": "Back",
+  "login_form_email_hint": "youremail@email.com",
+  "login_form_endpoint_hint": "http://your-server-ip:port",
+  "login_form_endpoint_url": "Server Endpoint URL",
+  "login_form_err_http": "Please specify http:// or https://",
+  "login_form_err_invalid_email": "Invalid Email",
+  "login_form_err_invalid_url": "Invalid URL",
+  "login_form_err_leading_whitespace": "Leading whitespace",
+  "login_form_err_trailing_whitespace": "Trailing whitespace",
+  "login_form_failed_get_oauth_server_config": "Error logging using OAuth, check server URL",
+  "login_form_failed_get_oauth_server_disable": "OAuth feature is not available on this server",
+  "login_form_failed_login": "Error logging you in, check server URL, email and password",
+  "login_form_handshake_exception": "There was an Handshake Exception with the server. Enable self-signed certificate support in the settings if you are using a self-signed certificate.",
+  "login_form_password_hint": "password",
+  "login_form_save_login": "Stay logged in",
+  "login_form_server_empty": "Enter a server URL.",
+  "login_form_server_error": "Could not connect to server.",
   "login_has_been_disabled": "लॉगिन अक्षम कर दिया गया है।",
+  "login_password_changed_error": "There was an error updating your password",
+  "login_password_changed_success": "Password updated successfully",
   "logout_all_device_confirmation": "क्या आप वाकई सभी डिवाइस से लॉग आउट करना चाहते हैं?",
   "logout_this_device_confirmation": "क्या आप वाकई इस डिवाइस को लॉग आउट करना चाहते हैं?",
   "longitude": "देशान्तर",
@@ -706,12 +1016,39 @@
   "manage_your_devices": "अपने लॉग-इन डिवाइस प्रबंधित करें",
   "manage_your_oauth_connection": "अपना OAuth कनेक्शन प्रबंधित करें",
   "map": "नक्शा",
+  "map_assets_in_bound": "{} photo",
+  "map_assets_in_bounds": "{} photos",
+  "map_cannot_get_user_location": "Cannot get user's location",
+  "map_location_dialog_yes": "Yes",
+  "map_location_picker_page_use_location": "Use this location",
+  "map_location_service_disabled_content": "Location service needs to be enabled to display assets from your current location. Do you want to enable it now?",
+  "map_location_service_disabled_title": "Location Service disabled",
   "map_marker_with_image": "छवि के साथ मानचित्र मार्कर",
+  "map_no_assets_in_bounds": "No photos in this area",
+  "map_no_location_permission_content": "Location permission is needed to display assets from your current location. Do you want to allow it now?",
+  "map_no_location_permission_title": "Location Permission denied",
   "map_settings": "मानचित्र सेटिंग",
+  "map_settings_dark_mode": "Dark mode",
+  "map_settings_date_range_option_day": "Past 24 hours",
+  "map_settings_date_range_option_days": "Past {} days",
+  "map_settings_date_range_option_year": "Past year",
+  "map_settings_date_range_option_years": "Past {} years",
+  "map_settings_dialog_title": "Map Settings",
+  "map_settings_include_show_archived": "Include Archived",
+  "map_settings_include_show_partners": "Include Partners",
+  "map_settings_only_show_favorites": "Show Favorite Only",
+  "map_settings_theme_settings": "Map Theme",
+  "map_zoom_to_see_photos": "Zoom out to see photos",
   "matches": "माचिस",
   "media_type": "मीडिया प्रकार",
   "memories": "यादें",
+  "memories_all_caught_up": "All caught up",
+  "memories_check_back_tomorrow": "Check back tomorrow for more memories",
   "memories_setting_description": "आप अपनी यादों में जो देखते हैं उसे प्रबंधित करें",
+  "memories_start_over": "Start Over",
+  "memories_swipe_to_close": "Swipe up to close",
+  "memories_year_ago": "A year ago",
+  "memories_years_ago": "{} years ago",
   "memory": "याद",
   "menu": "मेन्यू",
   "merge": "मर्ज",
@@ -724,11 +1061,16 @@
   "missing": "गुम",
   "model": "मॉडल",
   "month": "महीना",
+  "monthly_title_text_date_format": "MMMM y",
   "more": "अधिक",
   "moved_to_trash": "कूड़ेदान में ले जाया गया",
+  "multiselect_grid_edit_date_time_err_read_only": "Cannot edit date of read only asset(s), skipping",
+  "multiselect_grid_edit_gps_err_read_only": "Cannot edit location of read only asset(s), skipping",
   "my_albums": "मेरे एल्बम",
   "name": "नाम",
   "name_or_nickname": "नाम या उपनाम",
+  "networking_settings": "Networking",
+  "networking_subtitle": "Manage the server endpoint settings",
   "never": "कभी नहीं",
   "new_album": "नयी एल्बम",
   "new_api_key": "नई एपीआई कुंजी",
@@ -745,6 +1087,7 @@
   "no_albums_yet": "ऐसा लगता है कि आपके पास अभी तक कोई एल्बम नहीं है।",
   "no_archived_assets_message": "फ़ोटो और वीडियो को अपने फ़ोटो दृश्य से छिपाने के लिए उन्हें संग्रहीत करें",
   "no_assets_message": "अपना पहला फोटो अपलोड करने के लिए क्लिक करें",
+  "no_assets_to_show": "No assets to show",
   "no_duplicates_found": "कोई नकलची नहीं मिला।",
   "no_exif_info_available": "कोई एक्सिफ़ जानकारी उपलब्ध नहीं है",
   "no_explore_results_message": "अपने संग्रह का पता लगाने के लिए और फ़ोटो अपलोड करें।",
@@ -756,9 +1099,13 @@
   "no_results_description": "कोई पर्यायवाची या अधिक सामान्य कीवर्ड आज़माएँ",
   "no_shared_albums_message": "अपने नेटवर्क में लोगों के साथ फ़ोटो और वीडियो साझा करने के लिए एक एल्बम बनाएं",
   "not_in_any_album": "किसी एलबम में नहीं",
+  "not_selected": "Not selected",
   "note_apply_storage_label_to_previously_uploaded assets": "नोट: पहले अपलोड की गई संपत्तियों पर स्टोरेज लेबल लागू करने के लिए, चलाएँ",
-  "note_unlimited_quota": "नोट: असीमित कोटा के लिए 0 दर्ज करें",
   "notes": "टिप्पणियाँ",
+  "notification_permission_dialog_content": "To enable notifications, go to Settings and select allow.",
+  "notification_permission_list_tile_content": "Grant permission to enable notifications.",
+  "notification_permission_list_tile_enable_button": "Enable Notifications",
+  "notification_permission_list_tile_title": "Notification Permission",
   "notification_toggle_setting_description": "ईमेल सूचनाएं सक्षम करें",
   "notifications": "सूचनाएं",
   "notifications_setting_description": "सूचनाएं प्रबंधित करें",
@@ -768,6 +1115,7 @@
   "offline_paths_description": "ये परिणाम उन फ़ाइलों को मैन्युअल रूप से हटाने के कारण हो सकते हैं जो बाहरी लाइब्रेरी का हिस्सा नहीं हैं।",
   "ok": "ठीक है",
   "oldest_first": "सबसे पुराना पहले",
+  "on_this_device": "इस डिवाइस पर",
   "onboarding": "ज्ञानप्राप्ति",
   "onboarding_theme_description": "अपने उदाहरण के लिए एक रंग थीम चुनें।",
   "onboarding_welcome_description": "आइए कुछ सामान्य सेटिंग्स के साथ अपना इंस्टेंस सेट अप करें।",
@@ -787,6 +1135,14 @@
   "partner": "साथी",
   "partner_can_access_assets": "संग्रहीत और हटाए गए को छोड़कर आपके सभी फ़ोटो और वीडियो",
   "partner_can_access_location": "वह स्थान जहां आपकी तस्वीरें ली गईं थीं",
+  "partner_list_user_photos": "{user}'s photos",
+  "partner_list_view_all": "View all",
+  "partner_page_empty_message": "Your photos are not yet shared with any partner.",
+  "partner_page_no_more_users": "No more users to add",
+  "partner_page_partner_add_failed": "Failed to add partner",
+  "partner_page_select_partner": "Select partner",
+  "partner_page_shared_to_title": "Shared to",
+  "partner_page_stop_sharing_content": "{} will no longer be able to access your photos।",
   "partner_sharing": "पार्टनर शेयरिंग",
   "partners": "भागीदारों",
   "password": "पासवर्ड",
@@ -810,6 +1166,14 @@
   "permanent_deletion_warning_setting_description": "संपत्तियों को स्थायी रूप से हटाते समय एक चेतावनी दिखाएं",
   "permanently_delete": "स्थायी रूप से हटाना",
   "permanently_deleted_asset": "स्थायी रूप से हटाई गई संपत्ति",
+  "permission_onboarding_back": "वापस",
+  "permission_onboarding_continue_anyway": "Continue anyway",
+  "permission_onboarding_get_started": "Get started",
+  "permission_onboarding_go_to_settings": "Go to settings",
+  "permission_onboarding_permission_denied": "Permission denied. To use Immich, grant photo and video permissions in Settings.",
+  "permission_onboarding_permission_granted": "Permission granted! You are all set.",
+  "permission_onboarding_permission_limited": "Permission limited. To let Immich backup and manage your entire gallery collection, grant photo and video permissions in Settings.",
+  "permission_onboarding_request": "Immich requires permission to view your photos and videos.",
   "person": "व्यक्ति",
   "photo_shared_all_users": "ऐसा लगता है कि आपने अपनी तस्वीरें सभी उपयोगकर्ताओं के साथ साझा कीं या आपके पास साझा करने के लिए कोई उपयोगकर्ता नहीं है।",
   "photos": "तस्वीरें",
@@ -823,12 +1187,21 @@
   "play_motion_photo": "मोशन फ़ोटो चलाएं",
   "play_or_pause_video": "वीडियो चलाएं या रोकें",
   "port": "पत्तन",
+  "preferences_settings_subtitle": "Manage the app's preferences",
+  "preferences_settings_title": "Preferences",
   "preset": "प्रीसेट",
   "preview": "पूर्व दर्शन",
   "previous": "पहले का",
   "previous_memory": "पिछली स्मृति",
   "previous_or_next_photo": "पिछला या अगला फ़ोटो",
   "primary": "प्राथमिक",
+  "profile_drawer_app_logs": "Logs",
+  "profile_drawer_client_out_of_date_major": "Mobile App is out of date. Please update to the latest major version.",
+  "profile_drawer_client_out_of_date_minor": "Mobile App is out of date. Please update to the latest minor version.",
+  "profile_drawer_client_server_up_to_date": "Client and Server are up-to-date",
+  "profile_drawer_github": "गिटहब",
+  "profile_drawer_server_out_of_date_major": "Server is out of date. Please update to the latest major version.",
+  "profile_drawer_server_out_of_date_minor": "Server is out of date. Please update to the latest minor version.",
   "profile_picture_set": "प्रोफ़ाइल चित्र सेट।",
   "public_album": "सार्वजनिक एल्बम",
   "public_share": "सार्वजनिक शेयर",
@@ -869,6 +1242,8 @@
   "reassing_hint": "चयनित संपत्तियों को किसी मौजूदा व्यक्ति को सौंपें",
   "recent": "हाल ही का",
   "recent_searches": "हाल की खोजें",
+  "recently_added": "हाल ही में जोड़ा गया",
+  "recently_added_page_title": "Recently Added",
   "refresh": "ताज़ा करना",
   "refresh_encoded_videos": "एन्कोडेड वीडियो ताज़ा करें",
   "refresh_metadata": "मेटाडेटा ताज़ा करें",
@@ -912,10 +1287,12 @@
   "role_editor": "संपादक",
   "role_viewer": "दर्शक",
   "save": "बचाना",
+  "save_to_gallery": "गैलरी में सहेजें",
   "saved_api_key": "सहेजी गई एपीआई कुंजी",
   "saved_profile": "प्रोफ़ाइल सहेजी गई",
   "saved_settings": "सहेजी गई सेटिंग्स",
   "say_something": "कुछ कहें",
+  "scaffold_body_error_occurred": "Error occurred",
   "scan_all_libraries": "सभी पुस्तकालयों को स्कैन करें",
   "scan_settings": "सेटिंग्स स्कैन करें",
   "scanning_for_album": "एल्बम के लिए स्कैन किया जा रहा है..।",
@@ -928,11 +1305,40 @@
   "search_camera_model": "कैमरा मॉडल खोजें..।",
   "search_city": "शहर खोजें..।",
   "search_country": "देश खोजें..।",
+  "search_filter_apply": "Apply filter",
+  "search_filter_camera_title": "कैमरा प्रकार चुनें",
+  "search_filter_date": "तारीख़",
+  "search_filter_date_interval": "{start} से {end} तक",
+  "search_filter_date_title": "तारीख़ की सीमा चुनें",
+  "search_filter_display_option_not_in_album": "Not in album",
+  "search_filter_display_options": "प्रदर्शन विकल्प",
+  "search_filter_filename": "Search by file name",
+  "search_filter_location": "स्थान",
+  "search_filter_location_title": "स्थान चुनें",
+  "search_filter_media_type": "मीडिया प्रकार",
+  "search_filter_media_type_title": "मीडिया प्रकार चुनें",
+  "search_filter_people_title": "लोगों का चयन करें",
   "search_for_existing_person": "मौजूदा व्यक्ति को खोजें",
+  "search_no_more_result": "No more results",
   "search_no_people": "कोई लोग नहीं",
+  "search_no_result": "No results found, try a different search term or combination",
+  "search_page_categories": "Categories",
+  "search_page_motion_photos": "Motion Photos",
+  "search_page_no_objects": "No Objects Info Available",
+  "search_page_no_places": "No Places Info Available",
+  "search_page_screenshots": "Screenshots",
+  "search_page_search_photos_videos": "Search for your photos and videos",
+  "search_page_selfies": "Selfies",
+  "search_page_things": "Things",
+  "search_page_view_all_button": "View all",
+  "search_page_your_activity": "Your activity",
+  "search_page_your_map": "Your Map",
   "search_people": "लोगों को खोजें",
   "search_places": "स्थान खोजें",
+  "search_result_page_new_search_hint": "New Search",
   "search_state": "स्थिति खोजें..।",
+  "search_suggestion_list_smart_search_hint_1": "Smart search is enabled by default, to search for metadata use the syntax ",
+  "search_suggestion_list_smart_search_hint_2": "m:your-search-term",
   "search_timezone": "समयक्षेत्र खोजें..।",
   "search_type": "तलाश की विधि",
   "search_your_photos": "अपनी फ़ोटो खोजें",
@@ -951,9 +1357,13 @@
   "select_new_face": "नया चेहरा चुनें",
   "select_photos": "फ़ोटो चुनें",
   "select_trash_all": "ट्रैश ऑल का चयन करें",
+  "select_user_for_sharing_page_err_album": "Failed to create album",
   "selected": "चयनित",
   "send_message": "मेसेज भेजें",
   "send_welcome_email": "स्वागत ईमेल भेजें",
+  "server_endpoint": "Server Endpoint",
+  "server_info_box_app_version": "App Version",
+  "server_info_box_server_url": "सर्वर URL",
   "server_offline": "सर्वर ऑफ़लाइन",
   "server_online": "सर्वर ऑनलाइन",
   "server_stats": "सर्वर आँकड़े",
@@ -964,16 +1374,85 @@
   "set_date_of_birth": "जन्मतिथि निर्धारित करें",
   "set_profile_picture": "प्रोफ़ाइल चित्र सेट करें",
   "set_slideshow_to_fullscreen": "स्लाइड शो को फ़ुलस्क्रीन पर सेट करें",
+  "setting_image_viewer_help": "The detail viewer loads the small thumbnail first, then loads the medium-size preview (if enabled), finally loads the original (if enabled).",
+  "setting_image_viewer_original_subtitle": "Enable to load the original full-resolution image (large!). Disable to reduce data usage (both network and on device cache).",
+  "setting_image_viewer_original_title": "Load original image",
+  "setting_image_viewer_preview_subtitle": "Enable to load a medium-resolution image. Disable to either directly load the original or only use the thumbnail.",
+  "setting_image_viewer_preview_title": "Load preview image",
+  "setting_image_viewer_title": "Images",
+  "setting_languages_apply": "Apply",
+  "setting_languages_subtitle": "Change the app's language",
+  "setting_languages_title": "Languages",
+  "setting_notifications_notify_failures_grace_period": "Notify background backup failures: {}",
+  "setting_notifications_notify_hours": "{} hours",
+  "setting_notifications_notify_immediately": "immediately",
+  "setting_notifications_notify_minutes": "{} minutes",
+  "setting_notifications_notify_never": "never",
+  "setting_notifications_notify_seconds": "{} seconds",
+  "setting_notifications_single_progress_subtitle": "Detailed upload progress information per asset",
+  "setting_notifications_single_progress_title": "Show background backup detail progress",
+  "setting_notifications_subtitle": "Adjust your notification preferences",
+  "setting_notifications_total_progress_subtitle": "Overall upload progress (done/total assets)",
+  "setting_notifications_total_progress_title": "Show background backup total progress",
+  "setting_video_viewer_looping_title": "Looping",
+  "setting_video_viewer_original_video_subtitle": "When streaming a video from the server, play the original even when a transcode is available. May lead to buffering. Videos available locally are played in original quality regardless of this setting.",
+  "setting_video_viewer_original_video_title": "Force original video",
   "settings": "समायोजन",
+  "settings_require_restart": "Please restart Immich to apply this setting",
   "settings_saved": "सेटिंग्स को सहेजा गया",
   "share": "शेयर करना",
+  "share_add_photos": "Add photos",
+  "share_assets_selected": "{} selected",
+  "share_dialog_preparing": "Preparing...",
   "shared": "साझा",
+  "shared_album_activities_input_disable": "कॉमेंट डिजेबल्ड है",
+  "shared_album_activity_remove_content": "क्या आप इस गतिविधि को हटाना चाहते हैं?",
+  "shared_album_activity_remove_title": "गतिविधि हटाएं",
+  "shared_album_section_people_action_error": "Error leaving/removing from album",
+  "shared_album_section_people_action_leave": "Remove user from album",
+  "shared_album_section_people_action_remove_user": "Remove user from album",
+  "shared_album_section_people_title": "PEOPLE",
   "shared_by": "द्वारा साझा",
   "shared_by_you": "आपके द्वारा साझा किया गया",
+  "shared_intent_upload_button_progress_text": "{} / {} Uploaded",
+  "shared_link_app_bar_title": "साझा किए गए लिंक",
+  "shared_link_clipboard_copied_massage": "Copied to clipboard",
+  "shared_link_clipboard_text": "Link: {}\nPassword: {}",
+  "shared_link_create_error": "Error while creating shared link",
+  "shared_link_edit_description_hint": "शेयर विवरण दर्ज करें",
+  "shared_link_edit_expire_after_option_day": "1 day",
+  "shared_link_edit_expire_after_option_days": "{} days",
+  "shared_link_edit_expire_after_option_hour": "1 hour",
+  "shared_link_edit_expire_after_option_hours": "{} hours",
+  "shared_link_edit_expire_after_option_minute": "1 minute",
+  "shared_link_edit_expire_after_option_minutes": "{} minutes",
+  "shared_link_edit_expire_after_option_months": "{} months",
+  "shared_link_edit_expire_after_option_year": "{} year",
+  "shared_link_edit_password_hint": "शेयर पासवर्ड दर्ज करें",
+  "shared_link_edit_submit_button": "अपडेट लिंक",
+  "shared_link_error_server_url_fetch": "Cannot fetch the server url",
+  "shared_link_expires_day": "Expires in {} day",
+  "shared_link_expires_days": "Expires in {} days",
+  "shared_link_expires_hour": "Expires in {} hour",
+  "shared_link_expires_hours": "Expires in {} hours",
+  "shared_link_expires_minute": "Expires in {} minute",
+  "shared_link_expires_minutes": "Expires in {} minutes",
+  "shared_link_expires_never": "Expires ∞",
+  "shared_link_expires_second": "Expires in {} second",
+  "shared_link_expires_seconds": "Expires in {} seconds",
+  "shared_link_individual_shared": "Individual shared",
+  "shared_link_info_chip_metadata": "EXIF",
+  "shared_link_manage_links": "साझा किए गए लिंक का प्रबंधन करें",
   "shared_links": "साझा किए गए लिंक",
+  "shared_with_me": "मेरे साथ साझा किया गया",
   "sharing": "शेयरिंग",
   "sharing_enter_password": "कृपया इस पृष्ठ को देखने के लिए पासवर्ड दर्ज करें।",
+  "sharing_page_album": "Shared albums",
+  "sharing_page_description": "Create shared albums to share photos and videos with people in your network.",
+  "sharing_page_empty_list": "EMPTY LIST",
   "sharing_sidebar_description": "साइडबार में शेयरिंग के लिए एक लिंक प्रदर्शित करें",
+  "sharing_silver_appbar_create_shared_album": "New shared album",
+  "sharing_silver_appbar_share_partner": "Share with partner",
   "shift_to_permanent_delete": "संपत्ति को स्थायी रूप से हटाने के लिए ⇧ दबाएँ",
   "show_album_options": "एल्बम विकल्प दिखाएँ",
   "show_all_people": "सभी लोगों को दिखाओ",
@@ -1024,10 +1503,26 @@
   "sunrise_on_the_beach": "समुद्र तट पर सूर्योदय",
   "swap_merge_direction": "मर्ज दिशा स्वैप करें",
   "sync": "साथ-साथ करना",
+  "sync_albums": "एल्बम्स सिंक करें",
+  "sync_albums_manual_subtitle": "चुने हुए बैकअप एल्बम्स में सभी अपलोड की गई वीडियो और फ़ोटो सिंक करें",
+  "sync_upload_album_setting_subtitle": "अपनी फ़ोटो और वीडियो बनाएँ और उन्हें इमिच पर चुने हुए एल्बम्स में अपलोड करें",
   "template": "खाका",
   "theme": "विषय",
   "theme_selection": "थीम चयन",
   "theme_selection_description": "आपके ब्राउज़र की सिस्टम प्राथमिकता के आधार पर थीम को स्वचालित रूप से प्रकाश या अंधेरे पर सेट करें",
+  "theme_setting_asset_list_storage_indicator_title": "Show storage indicator on asset tiles",
+  "theme_setting_asset_list_tiles_per_row_title": "Number of assets per row ({})",
+  "theme_setting_colorful_interface_subtitle": "प्राथमिक रंग को पृष्ठभूमि सतहों पर लागू करें",
+  "theme_setting_colorful_interface_title": "रंगीन इंटरफ़ेस",
+  "theme_setting_image_viewer_quality_subtitle": "Adjust the quality of the detail image viewer",
+  "theme_setting_image_viewer_quality_title": "Image viewer quality",
+  "theme_setting_primary_color_subtitle": "प्राथमिक क्रियाओं और उच्चारणों के लिए एक रंग चुनें",
+  "theme_setting_primary_color_title": "प्राथमिक रंग",
+  "theme_setting_system_primary_color_title": "सिस्टम रंग का उपयोग करें",
+  "theme_setting_system_theme_switch": "Automatic (Follow system setting)",
+  "theme_setting_theme_subtitle": "Choose the app's theme setting",
+  "theme_setting_three_stage_loading_subtitle": "Three-stage loading might increase the loading performance but causes significantly higher network load",
+  "theme_setting_three_stage_loading_title": "Enable three-stage loading",
   "they_will_be_merged_together": "इन्हें एक साथ मिला दिया जाएगा",
   "time_based_memories": "समय आधारित यादें",
   "timezone": "समय क्षेत्र",
@@ -1042,7 +1537,15 @@
   "trash": "कचरा",
   "trash_all": "सब कचरा",
   "trash_delete_asset": "संपत्ति को ट्रैश/डिलीट करें",
+  "trash_emptied": "कचरा खाली कर दिया",
   "trash_no_results_message": "ट्रैश की गई फ़ोटो और वीडियो यहां दिखाई देंगे।",
+  "trash_page_delete_all": "Delete All",
+  "trash_page_empty_trash_dialog_content": "क्या आप अपनी कूड़ेदान संपत्तियों को खाली करना चाहते हैं? इन आइटमों को Immich से स्थायी रूप से हटा दिया जाएगा",
+  "trash_page_info": "Trashed items will be permanently deleted after {} days",
+  "trash_page_no_assets": "No trashed assets",
+  "trash_page_restore_all": "सभी को पुनः स्थानांतरित करें",
+  "trash_page_select_assets_btn": "संपत्तियों को चयन करें",
+  "trash_page_title": "Trash ({})",
   "type": "प्रकार",
   "unarchive": "संग्रह से निकालें",
   "unfavorite": "नापसंद करें",
@@ -1064,12 +1567,17 @@
   "updated_password": "अद्यतन पासवर्ड",
   "upload": "डालना",
   "upload_concurrency": "समवर्ती अपलोड करें",
+  "upload_dialog_info": "Do you want to backup the selected Asset(s) to the server?",
+  "upload_dialog_title": "Upload Asset",
   "upload_status_duplicates": "डुप्लिकेट",
   "upload_status_errors": "त्रुटियाँ",
   "upload_status_uploaded": "अपलोड किए गए",
   "upload_success": "अपलोड सफल रहा, नई अपलोड संपत्तियां देखने के लिए पेज को रीफ्रेश करें।",
+  "upload_to_immich": "Upload to Immich ({})",
+  "uploading": "Uploading",
   "url": "यूआरएल",
   "usage": "प्रयोग",
+  "use_current_connection": "use current connection",
   "use_custom_date_range": "इसके बजाय कस्टम दिनांक सीमा का उपयोग करें",
   "user": "उपयोगकर्ता",
   "user_id": "उपयोगकर्ता पहचान",
@@ -1081,10 +1589,16 @@
   "users": "उपयोगकर्ताओं",
   "utilities": "उपयोगिताओं",
   "validate": "मान्य",
+  "validate_endpoint_error": "Please enter a valid URL",
   "variables": "चर",
   "version": "संस्करण",
   "version_announcement_closing": "आपका मित्र, एलेक्स",
   "version_announcement_message": "नमस्कार मित्र, एप्लिकेशन का एक नया संस्करण है, कृपया अपना समय निकालकर इसे देखें <link>रिलीज नोट्स</link> और अपना सुनिश्चित करें <code>docker-compose.yml</code>, और <code>.env</code> किसी भी गलत कॉन्फ़िगरेशन को रोकने के लिए सेटअप अद्यतित है, खासकर यदि आप वॉचटावर या किसी भी तंत्र का उपयोग करते हैं जो आपके एप्लिकेशन को स्वचालित रूप से अपडेट करने का प्रबंधन करता है।",
+  "version_announcement_overlay_release_notes": "release notes",
+  "version_announcement_overlay_text_1": "Hi friend, there is a new release of",
+  "version_announcement_overlay_text_2": "please take your time to visit the ",
+  "version_announcement_overlay_text_3": " and ensure your docker-compose and .env setup is up-to-date to prevent any misconfigurations, especially if you use WatchTower or any mechanism that handles updating your server application automatically.",
+  "version_announcement_overlay_title": "New Server Version Available 🎉",
   "video": "वीडियो",
   "video_hover_setting": "होवर पर वीडियो थंबनेल चलाएं",
   "video_hover_setting_description": "जब माउस आइटम पर घूम रहा हो तो वीडियो थंबनेल चलाएं।",
@@ -1093,17 +1607,23 @@
   "view_album": "एल्बम देखें",
   "view_all": "सभी को देखें",
   "view_all_users": "सभी उपयोगकर्ताओं को देखें",
+  "view_in_timeline": "टाइमलाइन में देखें",
   "view_links": "लिंक देखें",
   "view_next_asset": "अगली संपत्ति देखें",
   "view_previous_asset": "पिछली संपत्ति देखें",
   "view_stack": "ढेर देखें",
+  "viewer_remove_from_stack": "स्टैक से हटाएं",
+  "viewer_stack_use_as_main_asset": "मुख्य संपत्ति के रूप में उपयोग करें",
+  "viewer_unstack": "स्टैक रद्द करें",
   "waiting": "इंतज़ार में",
   "warning": "चेतावनी",
   "week": "सप्ताह",
   "welcome": "स्वागत",
   "welcome_to_immich": "इमिच में आपका स्वागत है",
+  "wifi_name": "WiFi Name",
   "year": "वर्ष",
   "yes": "हाँ",
   "you_dont_have_any_shared_links": "आपके पास कोई साझा लिंक नहीं है",
+  "your_wifi_name": "Your WiFi name",
   "zoom_image": "छवि ज़ूम करें"
 }