code · pull · Jul 31, 2026 · Jul 30, 2026 · Jul 30, 2026 · Jul 30, 2026
diff --git a/.github/workflows/pr-labeler.yml b/.github/workflows/pr-labeler.yml
@@ -19,6 +19,6 @@ jobs:
           permission-contents: read
           permission-pull-requests: write
 
-      - uses: actions/labeler@b8dd2d9be0f68b860e7dae5dae7d772984eacd6d # v6.2.0
+      - uses: actions/labeler@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13 # v7.0.0
         with:
           repo-token: ${{ steps.token.outputs.token }}
diff --git a/.github/workflows/prepare-release.yml b/.github/workflows/prepare-release.yml
@@ -74,7 +74,7 @@ jobs:
 
       # TODO move to mise
       - name: Install uv
-        uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
+        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
 
       - name: Bump version
         env:

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -441,20 +441,21 @@ jobs:
         if: ${{ !cancelled() }}
 
       - name: Start Docker Compose
+        id: docker
         run: docker compose up -d --build --renew-anon-volumes --force-recreate --remove-orphans --wait --wait-timeout 300
         if: ${{ !cancelled() }}
 
       - name: Run e2e tests (api & cli)
         env:
           VITEST_DISABLE_DOCKER_SETUP: true
         run: pnpm test
-        if: ${{ !cancelled() }}
+        if: ${{ !cancelled() && steps.docker.outcome == 'success' }}
 
       - name: Run e2e tests (maintenance)
         env:
           VITEST_DISABLE_DOCKER_SETUP: true
         run: pnpm test:maintenance
-        if: ${{ !cancelled() }}
+        if: ${{ !cancelled() && steps.docker.outcome == 'success' }}
 
       - name: Capture Docker logs
         if: always()
@@ -519,14 +520,15 @@ jobs:
         if: ${{ !cancelled() }}
 
       - name: Docker build
+        id: docker
         run: docker compose up -d --build --renew-anon-volumes --force-recreate --remove-orphans --wait --wait-timeout 300
         if: ${{ !cancelled() }}
 
       - name: Run e2e tests (web)
         env:
           PLAYWRIGHT_DISABLE_WEBSERVER: true
         run: pnpm test:web
-        if: ${{ !cancelled() }}
+        if: ${{ !cancelled() && steps.docker.outcome == 'success' }}
 
       - name: Archive e2e test (web) results
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
@@ -539,7 +541,7 @@ jobs:
         env:
           PLAYWRIGHT_DISABLE_WEBSERVER: true
         run: pnpm test:web:ui
-        if: ${{ !cancelled() }}
+        if: ${{ !cancelled() && steps.docker.outcome == 'success' }}
 
       - name: Archive ui test (web) results
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
@@ -552,7 +554,7 @@ jobs:
         env:
           PLAYWRIGHT_DISABLE_WEBSERVER: true
         run: pnpm test:web:maintenance
-        if: ${{ !cancelled() }}
+        if: ${{ !cancelled() && steps.docker.outcome == 'success' }}
 
       - name: Archive maintenance tests (web) results
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1

diff --git a/deployment/mise.lock b/deployment/mise.lock
diff --git a/deployment/mise.toml b/deployment/mise.toml
@@ -1,6 +1,6 @@
 [tools]
 terragrunt = "1.1.1"
-opentofu = "1.12.4"
+opentofu = "1.12.5"
 
 [tasks."tg:fmt"]
 run = "terragrunt hclfmt"

diff --git a/docker/docker-compose.prod.yml b/docker/docker-compose.prod.yml
@@ -97,7 +97,7 @@ services:
     command: ['./run.sh', '-disable-reporting']
     ports:
       - 3000:3000
-    image: grafana/grafana:12.4.5-ubuntu@sha256:00396460e499415c828b7c298f19287c8a0f95e72412ee37ac11723655c2d6b9
+    image: grafana/grafana:12.4.6-ubuntu@sha256:35c75489ff2e2e69c53977a180de491643d51fdb32108f9335317527978daed7
     volumes:
       - grafana-data:/var/lib/grafana
 

diff --git a/docs/docs/install/config-file.md b/docs/docs/install/config-file.md
@@ -6,14 +6,18 @@ sidebar_position: 100
 
 A config file can be provided as an alternative to the UI configuration.
 
+:::note Interaction with the web UI
+While the config file does not need to include all keys from the below example, specifying `IMMICH_CONFIG_FILE` will disable the ability to edit other properties from the Immich web UI.
+:::
+
 ### Step 1 - Create a new config file
 
-In JSON format, create a new config file (e.g. `immich.json`) and put it in a location mounted in the container that can be accessed by Immich.
+In JSON format, create a new config file (e.g. `immich-config.json`) and put it in a location mounted in the container that can be accessed by Immich.
 YAML-formatted config files are also supported.
 The default configuration looks like this:
 
 <details>
-<summary>immich.json</summary>
+<summary>immich-config.json</summary>
 
 ```json
 {
@@ -250,6 +254,10 @@ So you can just grab it from there, paste it into a file and you're pretty much
 
 ### Step 2 - Specify the file location
 
+:::note
+If you have any `microservices` workers, they will also need to have the config file mounted to their container.
+:::
+
 In your `.env` file, set the variable `IMMICH_CONFIG_FILE` to the path of your config.
 For more information, refer to the [Environment Variables](/install/environment-variables.md) section.
 
@@ -261,7 +269,7 @@ It is recommended to reuse this variable in your `docker-compose.yml`:
 
 ```yaml
 volumes:
-  - ./configuration.yml:${IMMICH_CONFIG_FILE}
+  - ./immich-config.json:${IMMICH_CONFIG_FILE}
 ```
 
 :::
diff --git a/docs/docs/install/environment-variables.md b/docs/docs/install/environment-variables.md
@@ -45,7 +45,7 @@ These environment variables are used by the `docker-compose.yml` file and do **N
 | `IMMICH_PROCESS_INVALID_IMAGES`     | When `true`, generate thumbnails for invalid images                                                                                                                  |                              | server                   | microservices      |
 | `IMMICH_TRUSTED_PROXIES`            | List of comma-separated IPs set as trusted proxies                                                                                                                   |                              | server                   | api                |
 | `IMMICH_IGNORE_MOUNT_CHECK_ERRORS`  | See [System Integrity](/administration/system-integrity)                                                                                                             |                              | server                   | api, microservices |
-| `IMMICH_ALLOW_SETUP`                | When `false` disables the `/auth/admin-sign-up` endpoint                                                                                                             |            `true`            | server                   | api                |
+| `IMMICH_ALLOW_SETUP`                | When `false` disables the `/auth/admin-sign-up` and `/admin/database-backups/start-restore` endpoints                                                                |            `true`            | server                   | api                |
 
 \*1: `TZ` should be set to a `TZ identifier` from [this list][tz-list]. For example, `TZ="Etc/UTC"`.
 `TZ` is used by `exiftool` as a fallback in case the timezone cannot be determined from the image metadata. It is also used for logfile timestamps and cron job execution.

diff --git a/docs/docs/install/unraid.md b/docs/docs/install/unraid.md
@@ -1,13 +1,19 @@
 ---
-sidebar_position: 60
+sidebar_position: 70
 ---
 
-# Unraid
+# Unraid [ Community ]
+
+:::note
+This is a community contribution and not officially supported by the Immich team, but included here for convenience.
+
+Community support can be found in the dedicated channel on the [Discord Server](https://discord.immich.app/).
+:::
 
 Immich can easily be installed and updated on Unraid via:
 
-1. [Docker Compose Manager](https://forums.unraid.net/topic/114415-plugin-docker-compose-manager/) plugin from the Unraid Community Apps
-2. Community made template on the Unraid Community Apps
+1. Community made template on the Unraid Community Apps
+2. [Docker Compose Manager](https://forums.unraid.net/topic/114415-plugin-docker-compose-manager/) plugin from the Unraid Community Apps
 
 ## Community Applications Template
 
@@ -23,7 +29,7 @@ Once you have Redis and PostgreSQL running, search for Immich on the Unraid CA,
 
 For more information about setting up the community image see [here](https://github.com/imagegenius/docker-immich#application-setup)
 
-## Docker-Compose Method (Official)
+## Docker-Compose Method
 
 :::info
 

diff --git a/e2e/mise.toml b/e2e/mise.toml
@@ -1,5 +1,5 @@
 [tasks.install]
-run = "pnpm install --filter immich-e2e --frozen-lockfile"
+run = "pnpm install --filter immich-e2e... --frozen-lockfile"
 
 [tasks.build]
 dir = "{{ config_root }}"
@@ -40,18 +40,19 @@ run = "tsc --noEmit"
 
 
 [tasks.ci-setup]
-depends = [
-  "//:sdk:install",
-  "//:sdk:build",
-  "//packages/cli:install",
-  "//packages/cli:build",
+run = [
+  { task = "//:sdk:install" },
+  { task = "//:sdk:build" },
+  { task = "//packages/cli:install" },
+  { task = "//packages/cli:build" },
+  { task = ":install" },
 ]
-run = { task = ":install" }
 
 
 [tasks.ci-unit]
-depends = ["//:sdk:install", "//:sdk:build"]
 run = [
+  { task = "//:sdk:install" },
+  { task = "//:sdk:build" },
   { task = ":install" },
   { task = ":format" },
   { task = ":lint" },

diff --git a/e2e/src/responses.ts b/e2e/src/responses.ts
@@ -38,9 +38,6 @@ export const errorDto = {
   incorrectLogin: {
     message: 'Incorrect email or password',
   },
-  alreadyHasAdmin: {
-    message: 'The server already has an admin',
-  },
 };
 
 export const signupResponseDto = {

diff --git a/e2e/src/specs/maintenance/server/database-backups.e2e-spec.ts b/e2e/src/specs/maintenance/server/database-backups.e2e-spec.ts
@@ -108,7 +108,7 @@ describe('/admin/database-backups', () => {
       const { status, body } = await request(app).post('/admin/database-backups/start-restore').send();
 
       expect(status).toBe(400);
-      expect(body).toEqual(errorDto.badRequest('The server already has an admin'));
+      expect(body).toEqual(errorDto.badRequest('Admin setup is not available'));
     });
 
     it.sequential('should enter maintenance mode in "database restore mode"', async () => {

diff --git a/mise.lock b/mise.lock
diff --git a/mise.toml b/mise.toml
@@ -18,7 +18,7 @@ config_roots = [
 node = "24.15.0"
 pnpm = "11.13.1"
 terragrunt = "1.1.1"
-opentofu = "1.12.4"
+opentofu = "1.12.5"
 "npm:@openapitools/openapi-generator-cli" = "2.40.1"
 "npm:oazapfts" = "7.5.0"
 "github:extism/cli" = "1.6.3"

diff --git a/mobile/.gitignore b/mobile/.gitignore
@@ -34,6 +34,11 @@
 lib/**/*.drift.dart
 test/drift/main/generated/
 
+# Pigeon related
+/lib/platform/*.g.dart
+/ios/**/*.g.swift
+/android/**/*.g.kt
+
 # Web related
 lib/generated_plugin_registrant.dart