code · pull · Feb 12, 2026 · Feb 12, 2026 · Feb 12, 2026 · Feb 12, 2026
diff --git a/cli/src/commands/asset.ts b/cli/src/commands/asset.ts
@@ -4,6 +4,7 @@ import {
   AssetBulkUploadCheckResult,
   AssetMediaResponseDto,
   AssetMediaStatus,
+  Permission,
   addAssetsToAlbum,
   checkBulkUpload,
   createAlbum,
@@ -20,13 +21,11 @@ import { Stats, createReadStream } from 'node:fs';
 import { stat, unlink } from 'node:fs/promises';
 import path, { basename } from 'node:path';
 import { Queue } from 'src/queue';
-import { BaseOptions, Batcher, authenticate, crawl, sha1 } from 'src/utils';
+import { BaseOptions, Batcher, authenticate, crawl, requirePermissions, s, sha1 } from 'src/utils';
 
 const UPLOAD_WATCH_BATCH_SIZE = 100;
 const UPLOAD_WATCH_DEBOUNCE_TIME_MS = 10_000;
 
-const s = (count: number) => (count === 1 ? '' : 's');
-
 // TODO figure out why `id` is missing
 type AssetBulkUploadCheckResults = Array<AssetBulkUploadCheckResult & { id: string }>;
 type Asset = { id: string; filepath: string };
@@ -136,6 +135,7 @@ export const startWatch = async (
 
 export const upload = async (paths: string[], baseOptions: BaseOptions, options: UploadOptionsDto) => {
   await authenticate(baseOptions);
+  await requirePermissions([Permission.AssetUpload]);
 
   const scanFiles = await scan(paths, options);
 

diff --git a/cli/src/commands/auth.ts b/cli/src/commands/auth.ts
@@ -1,14 +1,23 @@
-import { getMyUser } from '@immich/sdk';
+import { getMyUser, Permission } from '@immich/sdk';
 import { existsSync } from 'node:fs';
 import { mkdir, unlink } from 'node:fs/promises';
-import { BaseOptions, connect, getAuthFilePath, logError, withError, writeAuthFile } from 'src/utils';
+import {
+  BaseOptions,
+  connect,
+  getAuthFilePath,
+  logError,
+  requirePermissions,
+  withError,
+  writeAuthFile,
+} from 'src/utils';
 
 export const login = async (url: string, key: string, options: BaseOptions) => {
   console.log(`Logging in to ${url}`);
 
   const { configDirectory: configDir } = options;
 
   await connect(url, key);
+  await requirePermissions([Permission.UserRead]);
 
   const [error, user] = await withError(getMyUser());
   if (error) {

diff --git a/cli/src/commands/server-info.ts b/cli/src/commands/server-info.ts
@@ -1,8 +1,9 @@
-import { getAssetStatistics, getMyUser, getServerVersion, getSupportedMediaTypes } from '@immich/sdk';
-import { BaseOptions, authenticate } from 'src/utils';
+import { getAssetStatistics, getMyUser, getServerVersion, getSupportedMediaTypes, Permission } from '@immich/sdk';
+import { authenticate, BaseOptions, requirePermissions } from 'src/utils';
 
 export const serverInfo = async (options: BaseOptions) => {
   const { url } = await authenticate(options);
+  await requirePermissions([Permission.ServerAbout, Permission.AssetStatistics, Permission.UserRead]);
 
   const [versionInfo, mediaTypes, stats, userInfo] = await Promise.all([
     getServerVersion(),

diff --git a/cli/src/utils.ts b/cli/src/utils.ts
@@ -1,4 +1,4 @@
-import { getMyUser, init, isHttpError } from '@immich/sdk';
+import { ApiKeyResponseDto, getMyApiKey, getMyUser, init, isHttpError, Permission } from '@immich/sdk';
 import { convertPathToPattern, glob } from 'fast-glob';
 import { createHash } from 'node:crypto';
 import { createReadStream } from 'node:fs';
@@ -34,6 +34,36 @@ export const authenticate = async (options: BaseOptions): Promise<AuthDto> => {
   return auth;
 };
 
+export const s = (count: number) => (count === 1 ? '' : 's');
+
+let _apiKey: ApiKeyResponseDto;
+export const requirePermissions = async (permissions: Permission[]) => {
+  if (!_apiKey) {
+    _apiKey = await getMyApiKey();
+  }
+
+  if (_apiKey.permissions.includes(Permission.All)) {
+    return;
+  }
+
+  const missing: Permission[] = [];
+
+  for (const permission of permissions) {
+    if (!_apiKey.permissions.includes(permission)) {
+      missing.push(permission);
+    }
+  }
+
+  if (missing.length > 0) {
+    const combined = missing.map((permission) => `"${permission}"`).join(', ');
+    console.log(
+      `Missing required permission${s(missing.length)}: ${combined}.
+Please make sure your API key has the correct permissions.`,
+    );
+    process.exit(1);
+  }
+};
+
 export const connect = async (url: string, key: string) => {
   const wellKnownUrl = new URL('.well-known/immich', url);
   try {

diff --git a/docker/docker-compose.dev.yml b/docker/docker-compose.dev.yml
@@ -127,7 +127,7 @@ services:
 
   redis:
     container_name: immich_redis
-    image: docker.io/valkey/valkey:9@sha256:546304417feac0874c3dd576e0952c6bb8f06bb4093ea0c9ca303c73cf458f63
+    image: docker.io/valkey/valkey:9@sha256:930b41430fb727f533c5982fe509b6f04233e26d0f7354e04de4b0d5c706e44e
     healthcheck:
       test: redis-cli ping || exit 1
 

diff --git a/docker/docker-compose.prod.yml b/docker/docker-compose.prod.yml
@@ -56,7 +56,7 @@ services:
 
   redis:
     container_name: immich_redis
-    image: docker.io/valkey/valkey:9@sha256:546304417feac0874c3dd576e0952c6bb8f06bb4093ea0c9ca303c73cf458f63
+    image: docker.io/valkey/valkey:9@sha256:930b41430fb727f533c5982fe509b6f04233e26d0f7354e04de4b0d5c706e44e
     healthcheck:
       test: redis-cli ping || exit 1
     restart: always

diff --git a/docker/docker-compose.rootless.yml b/docker/docker-compose.rootless.yml
@@ -61,7 +61,7 @@ services:
 
   redis:
     container_name: immich_redis
-    image: docker.io/valkey/valkey:9@sha256:546304417feac0874c3dd576e0952c6bb8f06bb4093ea0c9ca303c73cf458f63
+    image: docker.io/valkey/valkey:9@sha256:930b41430fb727f533c5982fe509b6f04233e26d0f7354e04de4b0d5c706e44e
     user: '1000:1000'
     security_opt:
       - no-new-privileges:true

diff --git a/docker/docker-compose.yml b/docker/docker-compose.yml
@@ -49,7 +49,7 @@ services:
 
   redis:
     container_name: immich_redis
-    image: docker.io/valkey/valkey:9@sha256:546304417feac0874c3dd576e0952c6bb8f06bb4093ea0c9ca303c73cf458f63
+    image: docker.io/valkey/valkey:9@sha256:930b41430fb727f533c5982fe509b6f04233e26d0f7354e04de4b0d5c706e44e
     healthcheck:
       test: redis-cli ping || exit 1
     restart: always

diff --git a/e2e/src/responses.ts b/e2e/src/responses.ts
@@ -43,10 +43,10 @@ export const errorDto = {
     message: 'Invalid share key',
     correlationId: expect.any(String),
   },
-  invalidSharePassword: {
+  passwordRequired: {
     error: 'Unauthorized',
     statusCode: 401,
-    message: 'Invalid password',
+    message: 'Password required',
     correlationId: expect.any(String),
   },
   badRequest: (message: any = null) => ({

diff --git a/e2e/src/specs/server/api/shared-link.e2e-spec.ts b/e2e/src/specs/server/api/shared-link.e2e-spec.ts
@@ -239,7 +239,7 @@ describe('/shared-links', () => {
       const { status, body } = await request(app).get('/shared-links/me').query({ key: linkWithPassword.key });
 
       expect(status).toBe(401);
-      expect(body).toEqual(errorDto.invalidSharePassword);
+      expect(body).toEqual(errorDto.passwordRequired);
     });
 
     it('should get data for correct password protected link', async () => {

diff --git a/i18n/ar.json b/i18n/ar.json
@@ -1613,7 +1613,6 @@
   "not_available": "غير متاح",
   "not_in_any_album": "ليست في أي ألبوم",
   "not_selected": "لم يختار",
-  "note_apply_storage_label_to_previously_uploaded assets": "ملاحظة: لتطبيق سمة التخزين على المحتويات التي تم رفعها مسبقًا، قم بتشغيل",
   "notes": "ملاحظات",
   "nothing_here_yet": "لا يوجد شيء هنا بعد",
   "notification_permission_dialog_content": "لتمكين الإخطارات ، انتقل إلى الإعدادات و اختار السماح.",
@@ -1815,7 +1814,7 @@
   "reassigned_assets_to_new_person": "تمت إعادة تعيين {count, plural, one {# المحتوى} other {# المحتويات}} إلى شخص جديد",
   "reassing_hint": "تعيين المحتويات المحددة لشخص موجود",
   "recent": "حديث",
-  "recent-albums": "ألبومات الحديثة",
+  "recent_albums": "ألبومات الحديثة",
   "recent_searches": "عمليات البحث الأخيرة",
   "recently_added": "اضيف مؤخرا",
   "recently_added_page_title": "أضيف مؤخرا",

diff --git a/i18n/be.json b/i18n/be.json
@@ -457,7 +457,7 @@
   "reassign": "Перапрызначыць",
   "reassing_hint": "Прыпісаць выбраныя актывы існуючай асобе",
   "recent": "Нядаўні",
-  "recent-albums": "Нядаўнія альбомы",
+  "recent_albums": "Нядаўнія альбомы",
   "recent_searches": "Нядаўнія пошукі",
   "recently_added": "Нядаўна дададзена",
   "refresh_faces": "Абнавіць твары",

diff --git a/i18n/bg.json b/i18n/bg.json
@@ -1613,7 +1613,6 @@
   "not_available": "Неналично",
   "not_in_any_album": "Не е в никой албум",
   "not_selected": "Не е избрано",
-  "note_apply_storage_label_to_previously_uploaded assets": "Забележка: За да приложите етикета за съхранение към предварително качени активи, стартирайте",
   "notes": "Бележки",
   "nothing_here_yet": "Засега тук няма нищо",
   "notification_permission_dialog_content": "За да включиш известията, отиди в Настройки и избери Разреши.",
@@ -1815,7 +1814,7 @@
   "reassigned_assets_to_new_person": "Преназначени {count, plural, one {# елемент} other {# елемента}} на нов човек",
   "reassing_hint": "Назначи избраните елементи на съществуващо лице",
   "recent": "Скорошни",
-  "recent-albums": "Скорошни Албуми",
+  "recent_albums": "Скорошни Албуми",
   "recent_searches": "Скорошни търсения",
   "recently_added": "Наскоро добавено",
   "recently_added_page_title": "Наскоро добавено",

diff --git a/i18n/bi.json b/i18n/bi.json
@@ -17,7 +17,7 @@
   "readonly_mode_enabled": "Mod blo yu no save janjem i on",
   "reassigned_assets_to_new_person": "Janjem{count, plural, one {# asset} other {# assets}} blo nu man",
   "reassing_hint": "janjem ol sumtin yu bin joos i go blo wan man",
-  "recent-albums": "album i no old tu mas",
+  "recent_albums": "album i no old tu mas",
   "recent_searches": "lukabout wea i no old tu mas",
   "time_based_memories_duration": "hao mus second blo wan wan imij i stap lo scrin.",
   "timezone": "taemzon",

diff --git a/i18n/ca.json b/i18n/ca.json
@@ -1613,7 +1613,6 @@
   "not_available": "N/A",
   "not_in_any_album": "En cap àlbum",
   "not_selected": "No seleccionat",
-  "note_apply_storage_label_to_previously_uploaded assets": "Nota: per aplicar l'etiqueta d'emmagatzematge als actius penjats anteriorment, executeu el",
   "notes": "Notes",
   "nothing_here_yet": "No hi ha res encara",
   "notification_permission_dialog_content": "Per activar les notificacions, aneu a Configuració i seleccioneu permet.",
@@ -1815,7 +1814,7 @@
   "reassigned_assets_to_new_person": "{count, plural, one {S'ha reassignat # recurs} other {S'han reassignat # recursos}} a una persona nova",
   "reassing_hint": "Assignar els elements seleccionats a una persona existent",
   "recent": "Recent",
-  "recent-albums": "Àlbums recents",
+  "recent_albums": "Àlbums recents",
   "recent_searches": "Cerques recents",
   "recently_added": "Afegit recentment",
   "recently_added_page_title": "Afegit recentment",

diff --git a/i18n/cs.json b/i18n/cs.json
@@ -1613,7 +1613,6 @@
   "not_available": "Není k dispozici",
   "not_in_any_album": "Bez alba",
   "not_selected": "Není vybráno",
-  "note_apply_storage_label_to_previously_uploaded assets": "Upozornění: Chcete-li použít štítek úložiště na dříve nahrané položky, spusťte příkaz",
   "notes": "Poznámky",
   "nothing_here_yet": "Zatím zde nic není",
   "notification_permission_dialog_content": "Chcete-li povolit oznámení, přejděte do nastavení a vyberte možnost povolit.",
@@ -1815,7 +1814,7 @@
   "reassigned_assets_to_new_person": "{count, plural, one {Přeřazena # položka} few {Přeřazeny # položky} other {Přeřazeno # položek}} na novou osobu",
   "reassing_hint": "Přiřazení vybraných položek existující osobě",
   "recent": "Nedávné",
-  "recent-albums": "Nedávná alba",
+  "recent_albums": "Nedávná alba",
   "recent_searches": "Nedávná vyhledávání",
   "recently_added": "Nedávno přidané",
   "recently_added_page_title": "Nedávno přidané",

diff --git a/i18n/da.json b/i18n/da.json
@@ -1613,7 +1613,6 @@
   "not_available": "ikke tilgængelig",
   "not_in_any_album": "Ikke i noget album",
   "not_selected": "Ikke valgt",
-  "note_apply_storage_label_to_previously_uploaded assets": "Bemærk: For at anvende Lagringsmærkat på tidligere uploadede medier, kør opgaven igen",
   "notes": "Noter",
   "nothing_here_yet": "Intet her endnu",
   "notification_permission_dialog_content": "Gå til indstillinger for at slå notifikationer til.",
@@ -1815,7 +1814,7 @@
   "reassigned_assets_to_new_person": "Gentildelt {count, plural, one {# aktiv} other {# aktiver}} til en ny person",
   "reassing_hint": "Tildel valgte mediefiler til en eksisterende person",
   "recent": "For nylig",
-  "recent-albums": "Seneste albums",
+  "recent_albums": "Seneste albums",
   "recent_searches": "Seneste søgninger",
   "recently_added": "Senest tilføjet",
   "recently_added_page_title": "Nyligt tilføjet",

diff --git a/i18n/de.json b/i18n/de.json
@@ -1,8 +1,8 @@
 {
-  "about": "Über",
+  "about": "Über Immich",
   "account": "Konto",
   "account_settings": "Kontoeinstellungen",
-  "acknowledge": "Bestätigen",
+  "acknowledge": "Verstanden",
   "action": "Aktion",
   "action_common_update": "Aktualisieren",
   "action_description": "Eine Reihe von Aktionen, die an den gefilterten Assets ausgeführt werden sollen",
@@ -1613,7 +1613,6 @@
   "not_available": "N/A",
   "not_in_any_album": "In keinem Album",
   "not_selected": "Nicht ausgewählt",
-  "note_apply_storage_label_to_previously_uploaded assets": "Hinweis: Um eine Speicherpfadbezeichnung anzuwenden, starte den",
   "notes": "Notizen",
   "nothing_here_yet": "Noch nichts hier",
   "notification_permission_dialog_content": "Um Benachrichtigungen zu aktivieren, navigiere zu Einstellungen und klicke \"Erlauben\".",
@@ -1815,7 +1814,7 @@
   "reassigned_assets_to_new_person": "{count, plural, one {# Datei wurde} other {# Dateien wurden}} einer neuen Person zugewiesen",
   "reassing_hint": "Markierte Dateien einer vorhandenen Person zuweisen",
   "recent": "Neueste",
-  "recent-albums": "Neueste Alben",
+  "recent_albums": "Neueste Alben",
   "recent_searches": "Letzte Suchen",
   "recently_added": "Kürzlich hinzugefügt",
   "recently_added_page_title": "Zuletzt hinzugefügt",

diff --git a/i18n/el.json b/i18n/el.json
@@ -1613,7 +1613,6 @@
   "not_available": "Μ/Δ (Μη Διαθέσιμο)",
   "not_in_any_album": "Σε κανένα άλμπουμ",
   "not_selected": "Δεν επιλέχθηκε",
-  "note_apply_storage_label_to_previously_uploaded assets": "Σημείωση: Για να εφαρμόσετε την Ετικέτα Αποθήκευσης σε στοιχεία που έχουν μεταφορτωθεί προηγουμένως, εκτελέστε το",
   "notes": "Σημειώσεις",
   "nothing_here_yet": "Τίποτα εδώ ακόμα",
   "notification_permission_dialog_content": "Για να ενεργοποιήσετε τις ειδοποιήσεις, μεταβείτε στις Ρυθμίσεις και επιλέξτε να επιτρέπεται.",
@@ -1815,7 +1814,7 @@
   "reassigned_assets_to_new_person": "Η ανάθεση {count, plural, one {# αρχείου} other {# αρχείων}} σε νέο άτομο",
   "reassing_hint": "Ανάθεση των επιλεγμένων στοιχείων σε υπάρχον άτομο",
   "recent": "Πρόσφατα",
-  "recent-albums": "Πρόσφατα άλμπουμ",
+  "recent_albums": "Πρόσφατα άλμπουμ",
   "recent_searches": "Πρόσφατες αναζητήσεις",
   "recently_added": "Προστέθηκαν πρόσφατα",
   "recently_added_page_title": "Προστέθηκαν Πρόσφατα",

diff --git a/i18n/en.json b/i18n/en.json
@@ -794,6 +794,11 @@
   "color": "Color",
   "color_theme": "Color theme",
   "command": "Command",
+  "command_palette_prompt": "Quickly find pages, actions, or commands",
+  "command_palette_to_close": "to close",
+  "command_palette_to_navigate": "to enter",
+  "command_palette_to_select": "to select",
+  "command_palette_to_show_all": "to show all",
   "comment_deleted": "Comment deleted",
   "comment_options": "Comment options",
   "comments_and_likes": "Comments & likes",
@@ -1168,6 +1173,7 @@
   "exif_bottom_sheet_people": "PEOPLE",
   "exif_bottom_sheet_person_add_person": "Add name",
   "exit_slideshow": "Exit Slideshow",
+  "expand": "Expand",
   "expand_all": "Expand all",
   "experimental_settings_new_asset_list_subtitle": "Work in progress",
   "experimental_settings_new_asset_list_title": "Enable experimental photo grid",
@@ -1613,7 +1619,6 @@
   "not_available": "N/A",
   "not_in_any_album": "Not in any album",
   "not_selected": "Not selected",
-  "note_apply_storage_label_to_previously_uploaded assets": "Note: To apply the Storage Label to previously uploaded assets, run the",
   "notes": "Notes",
   "nothing_here_yet": "Nothing here yet",
   "notification_permission_dialog_content": "To enable notifications, go to Settings and select allow.",
@@ -1643,6 +1648,7 @@
   "online": "Online",
   "only_favorites": "Only favorites",
   "open": "Open",
+  "open_calendar": "Open calendar",
   "open_in_map_view": "Open in map view",
   "open_in_openstreetmap": "Open in OpenStreetMap",
   "open_the_search_filters": "Open the search filters",
@@ -1815,7 +1821,7 @@
   "reassigned_assets_to_new_person": "Re-assigned {count, plural, one {# asset} other {# assets}} to a new person",
   "reassing_hint": "Assign selected assets to an existing person",
   "recent": "Recent",
-  "recent-albums": "Recent albums",
+  "recent_albums": "Recent albums",
   "recent_searches": "Recent searches",
   "recently_added": "Recently added",
   "recently_added_page_title": "Recently Added",
@@ -2184,6 +2190,7 @@
   "support": "Support",
   "support_and_feedback": "Support & Feedback",
   "support_third_party_description": "Your Immich installation was packaged by a third-party. Issues you experience may be caused by that package, so please raise issues with them in the first instance using the links below.",
+  "supporter": "Supporter",
   "swap_merge_direction": "Swap merge direction",
   "sync": "Sync",
   "sync_albums": "Sync albums",

diff --git a/i18n/es.json b/i18n/es.json
@@ -1613,7 +1613,6 @@
   "not_available": "N/D",
   "not_in_any_album": "Sin álbum",
   "not_selected": "No seleccionado",
-  "note_apply_storage_label_to_previously_uploaded assets": "Nota: Para aplicar la etiqueta de almacenamiento a los recursos que ya se subieron, ejecute la",
   "notes": "Notas",
   "nothing_here_yet": "Sin nada aún",
   "notification_permission_dialog_content": "Para activar las notificaciones, ve a Configuración y selecciona permitir.",
@@ -1815,7 +1814,7 @@
   "reassigned_assets_to_new_person": "Reasignado {count, plural, one {# recurso} other {# recursos}} a un nuevo usuario",
   "reassing_hint": "Asignar recursos seleccionados a una persona existente",
   "recent": "Reciente",
-  "recent-albums": "Últimos álbumes",
+  "recent_albums": "Últimos álbumes",
   "recent_searches": "Búsquedas recientes",
   "recently_added": "Añadidos recientemente",
   "recently_added_page_title": "Recién añadidos",