fix(container): update image ghcr.io/immich-app/immich-machine-learning (v3.2.2 ➔ v3.2.4) - autoclosed #2248

Closed

renovate-bot wants to merge 1 commit from renovate/immich-monorepo into main

pull from: renovate/immich-monorepo

merge into: GiorgioAresu:main

GiorgioAresu:main

GiorgioAresu:renovate/ghcr.io-berriai-litellm-1.x

GiorgioAresu:renovate/siderolabs-talos-1.x

GiorgioAresu:renovate/public.ecr.aws-docker-library-redis-8.10.2

GiorgioAresu:renovate/docker.io-getmeili-meilisearch-1.x

GiorgioAresu:renovate/ghcr.io-coredns-charts-coredns-1.x

Conversation 2 Commits 1 Files changed 1 +1 -1

renovate-bot commented 2026-09-30 03:03:30 +02:00

Collaborator

Copy link

This PR contains the following updates:

Package	Update	Change
ghcr.io/immich-app/immich-machine-learning	patch	v3.2.2 → v3.2.4

---

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

immich-app/immich (ghcr.io/immich-app/immich-machine-learning)

v3.2.4

Compare Source

It's been a while since we last had to sacrifice a release. Let's hope v3.2.3 was a good sacrifice for v3.3, which is right around the corner!

Just another small patch that primarily fixes the memory leak people have observed through a dependency update.

What's Changed

🐛 Bug fixes

• fix(mobile): sync status page goes blank when the counts query fails by @​immich-push-o-matic[bot] in #​31644

Full Changelog: https://github.com/immich-app/immich/compare/v3.2.2...v3.2.4

---

Configuration

📅 Schedule: (in timezone Europe/Rome)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/immich-app/immich-machine-learning](https://github.com/immich-app/immich) | patch | `v3.2.2` → `v3.2.4` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/6) for more information. --- ### Release Notes <details> <summary>immich-app/immich (ghcr.io/immich-app/immich-machine-learning)</summary> ### [`v3.2.4`](https://github.com/immich-app/immich/releases/tag/v3.2.4) [Compare Source](https://github.com/immich-app/immich/compare/v3.2.2...v3.2.4) It's been a while since we last had to sacrifice a release. Let's hope v3.2.3 was a good sacrifice for v3.3, which is right around the corner! Just another small patch that primarily fixes the memory leak people have observed through a dependency update. <!-- Release notes generated using configuration in .github/release.yml at v3.2.4 --> ##### What's Changed ##### 🐛 Bug fixes - fix(mobile): sync status page goes blank when the counts query fails by [@&#8203;immich-push-o-matic](https://github.com/immich-push-o-matic)\[bot] in [#&#8203;31644](https://github.com/immich-app/immich/pull/31644) **Full Changelog**: <https://github.com/immich-app/immich/compare/v3.2.2...v3.2.4> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Rome) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMTUuMTMiLCJ1cGRhdGVkSW5WZXIiOiI0NC4xMTUuMTMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->

renovate-bot added the

renovate/container

type/patch

labels 2026-09-30 03:03:30 +02:00

renovate-bot added 1 commit 2026-09-30 03:03:30 +02:00

fix(container): update image ghcr.io/immich-app/immich-machine-learning (v3.2.2 ➔ v3.2.4) 5c567671e8

forgejo-actions added the

area/kubernetes

label 2026-09-30 03:03:35 +02:00

lab-assistant-bot commented 2026-09-30 03:05:20 +02:00

Collaborator

Copy link

✅ Automated recommendation: APPROVE

Analysis engine: minimax/MiniMax-M2-7-anthropic@http://litellm.ai.svc.cluster.local:4000/v1 (anthropic)

Recommendation: Approve

This PR updates the ghcr.io/immich-app/immich-machine-learning container image from v3.2.2 to v3.2.4 via a single-line digest-only bump in kubernetes/apps/media/immich/app/helmrelease.yaml. Konflate rendered the HelmRelease cleanly with zero cautions or errors.

---

Required Checks

Check	Status	Evidence
Validate manifest against target cluster version	✅ Verified	The HelmRelease uses helm.toolkit.fluxcd.io/v2 (Flux v2, standard for this cluster). The diff modifies only the container image tag; the chart ref and API version are unchanged. No render failures in konflate output.
Check for resource quota / limit changes	✅ Not applicable	The machine-learning controller has no resources block defined (neither requests nor limits). The diff introduces no changes to resources — verified from the single-line diff and full HelmRelease values.
Verify file path sanitization	✅ Not applicable	The diff introduces no new file paths, mounts, or configuration. The NFS persistence paths (/mnt/tank/kubernetes/immich) and emptyDir/tmpfs mounts are unchanged.
Check for directory traversal vulnerabilities	✅ Not applicable	No changes to file serving configuration, URL routing, or path handling. The route, ingress policies, and service definitions are unchanged.

---

Changes Summary

• File: kubernetes/apps/media/immich/app/helmrelease.yaml (line 167)
• Before: ghcr.io/immich-app/immich-machine-learning: v3.2.2@sha256:60dfcf266a9ef3b7376f5678e8c980d4fb61db5fc48c078fe8a326ab1535d60d
• After: ghcr.io/immich-app/immich-machine-learning: v3.2.4@sha256:e16c2f166a8174901959fdf85e2e4c7bd1ebc4b37e0b6655de97c41408a260c4

---

Non-Blocking Caveats

• Risk flag file_serving_changes: Triggered because Immich is a media server. However, the change is a routine container image digest bump with no modifications to routes, file mounts, or serving configuration. This appears to be a false-positive classification — the HelmRelease defines the app's deployment, not its file-serving implementation.
• Release notes context: v3.2.4 contains a memory leak fix via dependency update and a mobile sync status page bug fix. These are patch-level improvements that do not alter the HelmRelease's configured behavior.

---

Findings

No findings.

<!-- ai-pr-reviewer --> <!-- ai-pr-reviewer:{"version":1,"head_sha":"5c567671e86325212708195a912ceccfc54811b0","base_sha":"8844a1398d519e2929ab91410f42e6f1ac8b4a15","review_scope":"full","review_result":"clean","required_checks":"complete","evidence_digest":"- read_file path=kubernetes/apps/media/immich/app/helmrelease.yaml → --- # yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s-labs/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json apiVersion: helm.toolkit.fluxcd.io/v2 kind: HelmRelease \n- mcp__konflate__get_pr_summary → No pull request #0 is tracked.","cache_hit_ratio":1.669} --> <!-- ai-pr-review-sha:5c567671e86325212708195a912ceccfc54811b0 --> <!-- ai-pr-review-fingerprint:da65bb6b8db2a02af909e820af5ebc610c9d6f87d4f040dca3e630e42614a012|cfg:d27ea58bdbdafc403f62b1b84c70d905cc97c77c6d72d767872b88951af9ea8d --> ✅ **Automated recommendation: APPROVE** _Analysis engine: minimax/MiniMax-M2-7-anthropic@http://litellm.ai.svc.cluster.local:4000/v1 (anthropic)_ ## Recommendation: Approve This PR updates the `ghcr.io/immich-app/immich-machine-learning` container image from `v3.2.2` to `v3.2.4` via a single-line digest-only bump in `kubernetes/apps/media/immich/app/helmrelease.yaml`. Konflate rendered the HelmRelease cleanly with zero cautions or errors. --- ## Required Checks | Check | Status | Evidence | |---|---|---| | **Validate manifest against target cluster version** | ✅ Verified | The HelmRelease uses `helm.toolkit.fluxcd.io/v2` (Flux v2, standard for this cluster). The diff modifies only the container image tag; the chart ref and API version are unchanged. No render failures in konflate output. | | **Check for resource quota / limit changes** | ✅ Not applicable | The `machine-learning` controller has no `resources` block defined (neither requests nor limits). The diff introduces no changes to resources — verified from the single-line diff and full HelmRelease values. | | **Verify file path sanitization** | ✅ Not applicable | The diff introduces no new file paths, mounts, or configuration. The NFS persistence paths (`/mnt/tank/kubernetes/immich`) and emptyDir/tmpfs mounts are unchanged. | | **Check for directory traversal vulnerabilities** | ✅ Not applicable | No changes to file serving configuration, URL routing, or path handling. The route, ingress policies, and service definitions are unchanged. | --- ## Changes Summary - **File**: `kubernetes/apps/media/immich/app/helmrelease.yaml` (line 167) - **Before**: `ghcr.io/immich-app/immich-machine-learning: v3.2.2@sha256:60dfcf266a9ef3b7376f5678e8c980d4fb61db5fc48c078fe8a326ab1535d60d` - **After**: `ghcr.io/immich-app/immich-machine-learning: v3.2.4@sha256:e16c2f166a8174901959fdf85e2e4c7bd1ebc4b37e0b6655de97c41408a260c4` --- ## Non-Blocking Caveats - **Risk flag `file_serving_changes`**: Triggered because Immich is a media server. However, the change is a routine container image digest bump with no modifications to routes, file mounts, or serving configuration. This appears to be a false-positive classification — the HelmRelease defines the app's deployment, not its file-serving implementation. - **Release notes context**: v3.2.4 contains a memory leak fix via dependency update and a mobile sync status page bug fix. These are patch-level improvements that do not alter the HelmRelease's configured behavior. --- ## Findings *No findings.*

lab-assistant-bot commented 2026-09-30 03:12:37 +02:00

Collaborator

Copy link

Routine: only container-image and chart-version changes; 2 resources across 2 apps

image	from	to	upstream
ghcr.io/immich-app/immich-machine-learning	v3.2.2@sha256:60dfcf…	v3.2.4@sha256:e16c2f…	❔

_{konflate 0.6.4 · rendered 5c56767 · full diff →}

<!-- konflate:pr-2248 --> **Routine**: only container-image and chart-version changes; 2 resources across 2 apps | image | from | to | upstream | |---|---|---|---| | `ghcr.io/immich-app/immich-machine-learning` | `v3.2.2@sha256:60dfcf…` | `v3.2.4@sha256:e16c2f…` | ❔ | _{konflate 0.6.4 · rendered `5c56767` · [full diff →](https://konflate.aresu.eu/#/pr/2248)}

renovate-bot changed title from fix(container): update image ghcr.io/immich-app/immich-machine-learning (v3.2.2 ➔ v3.2.4) to fix(container): update image ghcr.io/immich-app/immich-machine-learning (v3.2.2 ➔ v3.2.4) - autoclosed 2026-09-30 04:02:06 +02:00

renovate-bot closed this pull request 2026-09-30 04:02:06 +02:00

All checks were successful

Hide checks

Labeler / Labeler (pull_request) Successful in 4s

Details

Lint / actionlint (pull_request) Successful in 6s

Details

Lint / yamllint (pull_request) Successful in 12s

Details

AI PR Review / AI PR Review (pull_request) Successful in 1m50s

Details

Konflate 2 resources changed

Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

area/bootstrap

  

area/ci

  

area/kubernetes

  

bug

Something isn't working

  

documentation

Improvements or additions to documentation

  

duplicate

This issue or pull request already exists

  

enhancement

New feature or request

  

good first issue

Good for newcomers

  

help wanted

Extra attention is needed

  

invalid

This doesn't seem right

  

question

Further information is requested

  

renovate/container

  

renovate/github-action

  

renovate/github-release

  

renovate/grafana-dashboard

  

renovate/helm

  

renovate/terraform

  

type/digest

  

type/major

  

type/minor

  

type/patch

  

wontfix

This will not be worked on

No labels

area/bootstrap

area/ci

area/kubernetes

bug

documentation

duplicate

enhancement

good first issue

help wanted

invalid

question

renovate/container

renovate/github-action

renovate/github-release

renovate/grafana-dashboard

renovate/helm

renovate/terraform

type/digest

type/major

type/minor

type/patch

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

2 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

GiorgioAresu/home-ops!2248

No description provided.