#2794·immich

Dependency Dashboard

Author: renovate[bot]Created Jun 16, 2023Updated Sep 17, 2026
> ℹ️ **Note** > > This PR body was truncated due to platform limits. This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/immich-app/immich). ## Repository Problems These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/immich-app/immich). - ⚠️ WARN: Hidden Unicode characters have been discovered in file(s) in your repository. See your Renovate logs for more details. Please confirm that they are intended to be there, as they could be an attempt to "smuggle" text into your codebase, or used to confuse tools like Renovate or Large Language Models (LLMs) - ⚠️ WARN: Some release(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information - ⚠️ WARN: Some upgrade(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information - ⚠️ WARN: Artifact error would be reported due to a pending version in use which hasn't passed Minimum Release Age, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information ## Deprecations / Replacements > [!WARNING] The following dependencies are either deprecated or have replacements available. | Datasource | Package | Replacement PR? | |------------|------|--------------| | npm | [@react-email/components](https://redirect.github.com/resend/react-email) | ![Unavailable](https://img.shields.io/badge/unavailable-orange?style=flat-square) | | npm | [fluent-ffmpeg](https://redirect.github.com/fluent-ffmpeg/node-fluent-ffmpeg) | ![Unavailable](https://img.shields.io/badge/unavailable-orange?style=flat-square) | ## Abandoned Dependencies The following dependencies have not received updates for an extended period and may be unmaintained. > [!NOTE] Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity. > View abandoned dependencies (72) | Datasource | Package | Last Updated | |------------|------|-------------| | github-actions | [ludeeus/action-shellcheck](https://redirect.github.com/ludeeus/action-shellcheck) | `2023-01-29` | | mise | [github:extism/cli](https://redirect.github.com/extism/cli) | `2025-07-23` | | npm | `@extism/js-pdk` | `2024-09-09` | | npm | `@koddsson/eslint-plugin-tscompat` | `2025-05-30` | | npm | [@mdi/js](https://redirect.github.com/Templarian/MaterialDesign-JS) | `2023-12-27` | | npm | [@mdi/react](https://redirect.github.com/Templarian/MaterialDesign-React) | `2022-07-22` | | npm | [@mdx-js/react](https://redirect.github.com/mdx-js/mdx) | `2025-08-29` | | npm | [@socket.io/redis-adapter](https://redirect.github.com/socketio/socket.io-redis-adapter) | `2024-03-13` | | npm | [async-lock](https://redirect.github.com/rogierschouten/async-lock) | `2023-12-22` | | npm | [bcrypt](https://redirect.github.com/kelektiv/node.bcrypt.js) | `2025-05-11` | | npm | [byte-size](https://redirect.github.com/75lb/byte-size) | `2024-12-06` | | npm | [cli-progress](https://redirect.github.com/npkgz/cli-progress) | `2023-02-19` | | npm | [cookie-parser](https://redirect.github.com/expressjs/cookie-parser) | `2024-10-08` | | npm | [dom-to-image](https://redirect.github.com/tsayen/dom-to-image) | `2017-10-04` | | npm | [factory.ts](https://redirect.github.com/willryan/factory.ts) | `2024-10-13` | | npm | [fast-glob](https://redirect.github.com/mrmlnc/fast-glob) | `2025-01-05` | | npm | [generic-pool](https://redirect.github.com/coopernurse/node-pool) | `2022-09-10` | | npm | [geo-coordinates-parser](https://redirect.github.com/ianengelbrecht/geo-coordinates-parser) | `2024-10-10` | | npm | [geojson](https://redirect.github.com/caseycesari/geojson.js) | `2017-08-06` | | npm | [hash-wasm](https://redirect.github.com/Daninet/hash-wasm) | `2024-11-19` | | npm | [i18n-iso-countries](https://redirect.github.com/michaelwittig/node-i18n-iso-countries) | `2025-02-17` | | npm | [justified-layout](https://redirect.github.com/flickr/justified-layout) | `2021-01-06` | | npm | [lunr](https://redirect.github.com/olivernn/lunr.js) | `2020-08-19` | | npm | [micromatch](https://redirect.github.com/micromatch/micromatch) | `2024-08-23` | | npm | [mock-fs](https://redirect.github.com/tschaub/mock-fs) | `2025-02-06` | | npm | [pngjs](https://redirect.github.com/pngjs/pngjs) | `2023-02-20` | | npm | [prism-react-renderer](https://redirect.github.com/FormidableLabs/prism-react-renderer) | `2024-12-11` | | npm | [qrcode](https://redirect.github.com/soldair/node-qrcode) | `2024-08-05` | | npm | [raw-loader](https://redirect.github.com/webpack-contrib/raw-loader) | `2020-10-09` | | npm | [reflect-metadata](https://redirect.github.com/rbuckton/reflect-metadata) | `2024-03-29` | | npm | [sirv](https://redirect.github.com/lukeed/sirv) | `2025-09-03` | | npm | [svelte-i18n](https://redirect.github.com/kaisermann/svelte-i18n) | `2024-10-21` | | npm | [svelte-persisted-store](https://redirect.github.com/joshnuss/svelte-persisted-store) | `2024-10-31` | | npm | [thumbhash](https://redirect.github.com/evanw/thumbhash) | `2023-03-22` | | npm | [transformation-matrix](https://redirect.github.com/chrvadala/transformation-matrix) | `2025-08-18` | | npm | [uplot](https://redirect.github.com/leeoniya/uPlot) | `2025-03-14` | | npm | [url](https://redirect.github.com/defunctzombie/node-url) | `2024-07-26` | | npm | [utimes](https://redirect.github.com/baileyherbert/utimes) | `2023-09-27` | | npm | [vitest-fetch-mock](https://redirect.github.com/IanVS/vitest-fetch-mock) | `2025-03-03` | | pep621 | [aiocache](https://redirect.github.com/aio-libs/aiocache) | `2024-09-25` | | pep621 | [pytest-mock](https://redirect.github.com/pytest-dev/pytest-mock) | `2025-09-16` | | pep621 | [rknn-toolkit-lite2](https://redirect.github.com/airockchip/rknn-toolkit2) | `2025-04-09` | | pep621 | [types-ujson](https://redirect.github.com/python/typeshed) | `2025-08-22` | | pub | [cast](https://redirect.github.com/johnvuko/flutter_cast) | `2024-08-09` | | pub | [collection](https://redirect.github.com/dart-lang/core) | `2024-10-21` | | pub | [diacritic](https://redirect.github.com/agilord/diacritic) | `2024-09-23` | | pub | [fake_async](https://redirect.github.com/dart-lang/test) | `2025-01-28` | | pub | [file](https://redirect.github.com/dart-lang/tools) | `2024-10-08` | | pub | `flutter` | `2016-04-20` | | pub | [flutter_launcher_icons](https://redirect.github.com/fluttercommunity/flutter_launcher_icons) | `2025-06-10` | | pub | [flutter_lints](https://redirect.github.com/flutter/packages) | `2025-05-27` | | pub | [freezed_annotation](https://redirect.github.com/rrousselGit/freezed) | `2025-07-02` | | pub | [logging](https://redirect.github.com/dart-lang/core) | `2024-10-17` | | pub | [octo_image](https://redirect.github.com/Baseflow/octo_image) | `2024-08-01` | | pub | [path](https://redirect.github.com/dart-lang/core) | `2024-10-17` | | pub | [punycode](https://redirect.github.com/close2/punycode) | `2021-02-25` | | pub | [scroll_date_picker](https://redirect.github.com/mincheol-shin/scroll_date_picker) | `2024-03-19` | | pub | [scrollable_positioned_list](https://redirect.github.com/google/flutter.widgets) | `2023-05-08` | | pub | [share_handler](https://redirect.github.com/AboutShout/share_handler) | `2025-07-29` | | pub | [sliver_tools](https://redirect.github.com/Kavantix/sliver_tools) | `2023-07-17` | | pub | [url_launcher](https://redirect.github.com/flutter/packages) | `2025-07-10` | | pub | [web_socket](https://redirect.github.com/dart-lang/http) | `2025-05-06` | | regex | [airockchip/rknn-toolkit2](https://redirect.github.com/airockchip/rknn-toolkit2) | `2025-04-09` | ## Awaiting Schedule The following updates are awaiting their schedule. To get an update now, click on a checkbox below. - [ ] chore(deps): update ghcr.io/jdx/mise docker tag to v2026.9.10 - [ ] fix(deps): update typescript-projects (`@nestjs/schematics`, `@noble/hashes`, `@playwright/test`, `@swc/core`, `@testing-library/user-event`, `@types/oidc-provider`, `@types/react`, `autoprefixer`, `bullmq`, `compression`, `eslint`, `fastq`, `globals`, `happy-dom`, `hls.js`, `jose`, `nest-commander`, `nestjs-cls`, `nestjs-otel`, `oidc-provider`, `openid-client`, `pnpm`, `postcss`, `react`, `react-dom`, `simple-icons`, `svelte`, `tailwindcss-preset-email`, `tsc-alias`, `tsx`, `typescript-eslint`, `unplugin-swc`, `vite`, `wrangler`, `yaml`, `zod`) - [ ] chore(deps): update github-actions (`astral-sh/setup-uv`, `ruby`) - [ ] fix(deps): update dependency @immich/ui to ^0.89.0 - [ ] chore(deps): update dependency eslint-plugin-unicorn to v74 - [ ] chore(deps): update dependency freezed to v4 - [ ] chore(deps): update dependency pigeon to v28 - [ ] chore(deps): update github-actions (major) (`actions/setup-java`, `ruby`) - [ ] chore(deps): update grafana/grafana docker tag to v13 - [ ] chore(deps): update machine-learning (`fastapi`, `gunicorn`, `ruff`, `types-setuptools`, `types-simplejson`, `uvicorn`) - [ ] chore(deps): update pnpm to v12 - [ ] chore(deps): update vitest monorepo to v5 (`@vitest/coverage-v8`, `vitest`) - [ ] fix(deps): update dependency archiver to v8 (`archiver`, `@types/archiver`) - [ ] fix(deps): update dependency bullmq to v6 - [ ] fix(deps): update dependency chokidar to v5 - [ ] fix(deps): update dependency cookie to v2 - [ ] fix(deps): update dependency device_info_plus to v13 - [ ] fix(deps): update dependency dynamic_color to v2 - [ ] fix(deps): update dependency exiftool-vendored to v38 - [ ] fix(deps): update dependency ioredis to v6 - [ ] fix(deps): update dependency kysely-postgres-js to v4 - [ ] fix(deps): update dependency local_auth to v3 - [ ] fix(deps): update dependency network_info_plus to v8 - [ ] fix(deps): update dependency package_info_plus to v10 - [ ] fix(deps): update dependency permission_handler to v13 - [ ] fix(deps): update dependency pinput to v6 - [ ] fix(deps): update dependency react-email to v6 - [ ] fix(deps): update dependency share_plus to v13 - [ ] **Create all awaiting schedule PRs at once** ## PR Edited (Blocked) The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below. - [ ] [chore(deps): update dependency sharp to v0.35.4 [security]](../pull/31370) ## Pending Status Checks The following updates await pending status checks. To force their creation now, click on a checkbox below. - [ ] chore(deps): update dependency @types/node to ^24.13.5 - [ ] fix(deps): update dependency intl-messageformat to v12 ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [chore(deps): update dependency multer to v2.3.0 [security]](../pull/31352) - [ ] [chore(deps): update dependency nodemailer to v9.1.1 [security]](../pull/31371) - [ ] [chore(deps): update dependency java to v21.0.12+101.0.lts](../pull/31172) - [ ] [chore(deps): update dependency opentofu to v1.12.6](../pull/31173) - [ ] [chore(deps): update dependency terragrunt to v1.1.4](../pull/30538) - [ ] [chore(deps): update grafana/grafana docker tag to v12.4.10-ubuntu](../pull/31324) - [ ] [chore(deps): update terraform cloudflare to v4.52.9](../pull/31325) - [ ] [chore(deps): update dependency onnxruntime-gpu to v1.30.0](../pull/31567) - [ ] [chore(deps): update machine-learning](../pull/29123) (`huggingface-hub`, `locust`, `mypy`, `numpy`, `opencv-python-headless`, `orjson`, `pydantic`, `pytest`, `python`, `rapidocr`, `tokenizers`, `types-pyyaml`, `types-requests`) - [ ] [fix(deps): update dependency timezone to ^0.11.0](../pull/30841) - [ ] [chore(deps): update dependency java to v25](../pull/29686) - [ ] [fix(deps): update dependency tailwindcss to v4](../pull/31404) - [ ] **Click on this checkbox to rebase all open PRs at once** ## PR Closed (Blocked) The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below. - [ ] [fix(deps): update mobile](../pull/27916) (`aqua:flutter/flutter`, `flutter`, `github:CQLabs/homebrew-dcm`, `java`, `photo_manager`, `sqlite_async`) - [ ] [chore(deps): update terraform cloudflare to v5](../pull/15933) - [ ] [fix(deps): update dependency hooks_riverpod to v3](../pull/27918) - [ ] [fix(deps): update flutter (major)](../pull/27920) (`flutter_local_notifications`, `flutter_secure_storage`, `fluttertoast`) ## Detected Dependencies > [!NOTE] > Detected dependencies section has been truncated devcontainer (1)
.devcontainer/devcontainer.json (1) - `ghcr.io/devcontainers/features/docker-in-docker 4`
docker-compose (6)
docker/docker-compose.dev.yml (2) - `docker.io/valkey/valkey 9@sha256:c123e3715db63d06d4ad6964884037aa0d5d4d703939b9929954112889708e1d` - `ghcr.io/immich-app/postgres 14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23` → [Updates: `16-vectorchord0.4.3-pgvectors0.2.0`] docker/docker-compose.prod.yml (4) - `docker.io/valkey/valkey 9@sha256:c123e3715db63d06d4ad6964884037aa0d5d4d703939b9929954112889708e1d` - `ghcr.io/immich-app/postgres 14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23` → [Updates: `16-vectorchord0.4.3-pgvectors0.2.0`] - `prom/prometheus sha256:5ce7540c3c00ef4ab0c9d2c995c6a5b9c421f44b4a115d97a2c7af3b1c21cbb0` - `grafana/grafana 12.4.9-ubuntu@sha256:91dd82bc25850f41da5bfd769531d94ec8352a818fc84bf7f2ee8b7389e09971` → [Updates: `12.4.10-ubuntu`, `13.2.1-ubuntu`] docker/docker-compose.rootless.yml (2) - `docker.io/valkey/valkey 9@sha256:c123e3715db63d06d4ad6964884037aa0d5d4d703939b9929954112889708e1d` - `ghcr.io/immich-app/postgres 14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23` → [Updates: `16-vectorchord0.4.3-pgvectors0.2.0`] docker/docker-compose.yml (2) - `docker.io/valkey/valkey 9@sha256:c123e3715db63d06d4ad6964884037aa0d5d4d703939b9929954112889708e1d` - `ghcr.io/immich-app/postgres 14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23` → [Updates: `16-vectorchord0.4.3-pgvectors0.2.0`] e2e/docker-compose.dev.yml e2e/docker-compose.yml (2) - `docker.io/valkey/valkey 9@sha256:c123e3715db63d06d4ad6964884037aa0d5d4d703939b9929954112889708e1d` - `ghcr.io/immich-app/postgres 14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23` → [Updates: `16-vectorchord0.4.3-pgvectors0.2.0`]
dockerfile (5)
machine-learning/Dockerfile (8) - `python 3.11-bookworm@sha256:20ec607c68642c64c73269ce245aa0f060913f4129d15d9687850aa158e6269c` → [Updates: `3.11-bookworm`] - `python 3.13-slim-trixie@sha256:f82c96458eedc847b233e582eb31336f4954b39cae020b6dcf5b3ed0e5cbcd74` → [Updates: `3.13-slim-trixie`] - `rocm/dev-ubuntu-24.04 7.2-complete@sha256:86e11093b4a7ec2a79b1b6701d10e840a6994f21c7e05929b51eb9be361c683a` - `ghcr.io/astral-sh/uv 0.8.15@sha256:a5727064a0de127bdb7c9d3c1383f3a9ac307d9f2d8a391edc7896c54289ced0` - `python 3.11-slim-bookworm@sha256:e2d3af735aff6eeee600b1933bedd99da6645fedf572cc12ef4cc1331f2ceebe` → [Updates: `3.11-slim-bookworm`] - `python 3.13-slim-trixie@sha256:f82c96458eedc847b233e582eb31336f4954b39cae020b6dcf5b3ed0e5cbcd74` → [Updates: `3.13-slim-trixie`] - `nvidia/cuda 12.2.2-runtime-ubuntu22.04@sha256:94c1577b2cd9dd6c0312dc04dff9cb2fdce2b268018abc3d7c2dbcacf1155000` - `rocm/dev-ubuntu-24.04 7.2-complete@sha256:86e11093b4a7ec2a79b1b6701d10e840a6994f21c7e05929b51eb9be361c683a` packages/cli/Dockerfile (1) - `node 24.21.0-trixie-slim@sha256:db3ae80f5d8df06e04dabdf7b44cbf008d32de168205fa0294444aabbc08c590` packages/e2e-auth-server/Dockerfile (1) - `node 24.21.0-trixie-slim@sha256:db3ae80f5d8df06e04dabdf7b44cbf008d32de168205fa0294444aabbc08c590` server/Dockerfile (3) - `ghcr.io/immich-app/base-server-dev 202609151314@sha256:ba336c43615bf9fe10d27637c3baf84cfc1379482dc712c35e314946e378a076` - `ghcr.io/jdx/mise 2026.9.9@sha256:a88f300ef4365494b88f8eefd271bb92ba467d4a41835739a714426207215730` → [Updates: `2026.9.10`] - `ghcr.io/immich-app/base-server-prod 202609151314@sha256:1d71b4254aeba9a547ed9c6a4a1acf490b5e8786d6dad2a943bd61bb0c8ab736` server/Dockerfile.dev (2) - `ghcr.io/immich-app/base-server-dev 202609151314@sha256:ba336c43615bf9fe10