bump immich to 3.1.0

clusters/base/apps/immich/helmrelease-ml.yaml

@@ -24,7 +24,7 @@ spec:
               # an internal API contract that isn't guaranteed compatible
               # across versions.
               repository: ghcr.io/immich-app/immich-machine-learning
-              tag: v2.7.5
+              tag: v3.1.0
             env:
               TZ: Europe/Moscow
             resources:

clusters/base/apps/immich/helmrelease-server.yaml

@@ -76,16 +76,8 @@ spec:
           app:
             image:
               repository: ghcr.io/immich-app/immich-server
-              # pinned to match the DB backup being restored
-              # (immich-db-backup-20260711T020000-v2.7.5-pg14.19.sql.gz) -
-              # a newer server expects a newer DB schema than what that
-              # backup contains, so it has to match at restore time. Once
-              # the restore is done and v2.7.5 has come up cleanly against
-              # it, bump back to "release" - v2.7.5's own migrations will
-              # carry the schema forward from there, which is the safe
-              # supported upgrade path (vs. jumping straight to a much
-              # newer server against a much older schema).
-              tag: v2.7.5
+              # make sure immich-machine-learning version match this 
+              tag: v3.1.0
             env:
               TZ: Europe/Moscow
               DB_HOSTNAME: immich-postgres

clusters/base/apps/immich/secret.enc.yaml

@@ -4,19 +4,19 @@ metadata:
     name: immich-secrets
     namespace: photo
 stringData:
-    DB_PASSWORD: ENC[AES256_GCM,data:rnTKGq7plm9+wS7AFYzbDdguKOQkZsjGzoyQcS9RVJ8=,iv:dDBjMY+m0PbFsUKL7Rnwj3j6sLgmgxuTkcdixazYlWQ=,tag:Wfg5YLMNHfjvkZvhqJik5g==,type:str]
+    DB_PASSWORD: ENC[AES256_GCM,data:AdaIt9jXHlasJeZwWqXoXoVpDwWQ3vkfJ0ZR4vOWpHg=,iv:zsMLi3PbTpkxKAwBiMO8WjIvTz0DjyedXFg7I3dGFuU=,tag:CkBDuNzK24Adv+IzTP0j5Q==,type:str]
 sops:
     age:
         - recipient: age1wmm8qrqnjzvd5nkraed6ylrsxlpn3ru7d7zettdudj7y9sg9dd2su0u3mr
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVNitPVHV4OVFmM1A1WVhP
-            SFJXTTU1aWc1TnJBZnFZV3RqREtNZ3BUZm1NClBTai9LYzhId3hnaWZCa0Vmd2ds
-            K2JtR3hsSlgvYzR1SjJuWnd0UHFEQVEKLS0tIDNGZm5kOG8rVzlaTXc1eTZUVXdG
-            S0VGYU4yOEdVZ3ZwdDA1TGVqQ1Y0YTQK1g7sQUEjDYGKEOlprGVo9rjFPNsBb/8Y
-            FC2TbYyQwZrd1rn7ELv4/9AReb/obSSygWRMirY3PhuJvZPFGRJTLA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4VDZJVzRPWFdYdDYwMStN
+            d3hvQVdJOFhacTk1SjZ2T09DSXZQOXJKUHd3CmJaMWNNcTFBakdnV3VZM1cvZHU5
+            OWJzNldLanVna0dPZkt3WVlaOHYwOWMKLS0tIEJubCs3TWlJQTRiREgwVTBlT3pj
+            ODlhdDJyWDAyeUJGeFBwMFJCaEhTQ0EKqNHwTTT6zYBU/xV2K3fiiOlCEt06qJAq
+            5dnwxqyyycgzXlLXWk0d0yx+yQ1NgFUmFXg2Fsph4qHYyonlf3Lb2g==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:29:26Z"
-    mac: ENC[AES256_GCM,data:LPOc4OSnMELT/8Wi02wxBjKqSbNmyn2t7lLXrT37ADFiE9rbUp8WjtOC3/oYIeiol3fZ/fnaMiqubBG8d1SQFG+z7Iojfloi/fwTIvTAf1k1Lb1sXv3yS8TMzT84eCeft355Zf4SIeZJEcnpd7u6qxZX30N0QWe3EiMlTzX4oyw=,iv:44cF7AFoIy6kA9zYl1/5Wyf1s5Td3JP3ICIzbOknJzQ=,tag:HWXTWzHCvjMMHbaA5ODKHA==,type:str]
+    lastmodified: "2026-08-26T10:29:36Z"
+    mac: ENC[AES256_GCM,data:d/cw0pi/GmcQYtkRn06RcvGBmKoO12ycjK/SHAIsxR3UBs1gpoPBYznVBRDE7PHJi9NoobAykWj03cDrDrzXqBHq/xflKYOzmqRpf2bOSOtzfnLaDBmEI+lFjhyZ9b2z1+lKBDY9r4JvevEyOxZ/1t9hDgLt8gEXc01kJY9a2cQ=,iv:ATqxpr2FtVf8vddG6FhkNgPGKWyzGn7C2CsTb5qawiw=,tag:57tJqNMkuPfdEulmdEaQ4A==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0