build: Bump isolated-vm to 6.1.2 (#30519)

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

docker/images/n8n/Dockerfile

@@ -1,13 +1,12 @@
 ARG NODE_VERSION=24.15.0
 ARG N8N_VERSION=snapshot
 
-# Rebuild native addons for the container platform. The base image has no
-# package manager or build tools, so we compile in a throwaway builder stage.
+# Builder stage exists because the runtime base image has no toolchain.
 FROM node:${NODE_VERSION}-alpine3.23 AS builder
 COPY ./compiled /usr/local/lib/node_modules/n8n
 RUN apk add --no-cache python3 make g++ && \
     cd /usr/local/lib/node_modules/n8n && \
-    npm rebuild sqlite3 isolated-vm
+    npm rebuild sqlite3
 
 FROM n8nio/base:${NODE_VERSION}
 

packages/@n8n/expression-runtime/package.json

@@ -33,7 +33,7 @@
   "dependencies": {
     "@n8n/errors": "workspace:*",
     "@n8n/tournament": "workspace:*",
-    "isolated-vm": "^6.0.2",
+    "isolated-vm": "catalog:",
     "js-base64": "catalog:",
     "jssha": "3.3.1",
     "lodash": "catalog:",

packages/cli/package.json

@@ -173,7 +173,7 @@
     "infisical-node": "1.3.0",
     "ioredis": "5.3.2",
     "isbot": "3.6.13",
-    "isolated-vm": "^6.0.2",
+    "isolated-vm": "catalog:",
     "jose": "^6.2.2",
     "json-diff": "1.0.6",
     "jsonschema": "1.4.1",

packages/nodes-base/package.json

@@ -907,7 +907,7 @@
     "@n8n/imap": "workspace:*",
     "@thednp/dommatrix": "^2.0.12",
     "alasql": "4.4.0",
-    "isolated-vm": "^6.0.2",
+    "isolated-vm": "catalog:",
     "amqplib": "0.10.6",
     "aws4": "1.11.0",
     "basic-auth": "catalog:",

pnpm-lock.yaml

@@ -183,6 +183,9 @@ catalogs:
     iconv-lite:
       specifier: 0.6.3
       version: 0.6.3
+    isolated-vm:
+      specifier: ^6.1.2
+      version: 6.1.2
     js-base64:
       specifier: 3.7.8
       version: 3.7.8
@@ -1600,8 +1603,8 @@ importers:
         specifier: workspace:*
         version: link:../tournament
       isolated-vm:
-        specifier: ^6.0.2
-        version: 6.0.2
+        specifier: 'catalog:'
+        version: 6.1.2
       js-base64:
         specifier: 'catalog:'
         version: 3.7.8
@@ -2889,8 +2892,8 @@ importers:
         specifier: 3.6.13
         version: 3.6.13
       isolated-vm:
-        specifier: ^6.0.2
-        version: 6.0.2
+        specifier: 'catalog:'
+        version: 6.1.2
       jose:
         specifier: ^6.2.2
         version: 6.2.2
@@ -4376,8 +4379,8 @@ importers:
         specifier: 2.1.15
         version: 2.1.15
       isolated-vm:
-        specifier: ^6.0.2
-        version: 6.0.2
+        specifier: 'catalog:'
+        version: 6.1.2
       js-nacl:
         specifier: 1.4.0
         version: 1.4.0
@@ -16678,8 +16681,8 @@ packages:
     resolution: {integrity: sha512-7c7mBznZu2ktfvyT582E2msM+Udc1EjOyhVRE/0ZsjD9LBtWSm23h3PtiRh2a35XoUsTQQjJXaJzuLjXsOdFDg==}
     engines: {node: '>=6.0'}
 
-  isolated-vm@6.0.2:
-    resolution: {integrity: sha512-Qw6AJuagG/VJuh2AIcSWmQPsAArti/L+lKhjXU+lyhYkbt3J57XZr+ZjgfTnOr4NJcY1r3f8f0eePS7MRGp+pg==}
+  isolated-vm@6.1.2:
+    resolution: {integrity: sha512-GGfsHqtlZiiurZaxB/3kY7LLAXR3sgzDul0fom4cSyBjx6ZbjpTrFWiH3z/nUfLJGJ8PIq9LQmQFiAxu24+I7A==}
     engines: {node: '>=22.0.0'}
 
   isomorphic-timers-promises@1.0.1:
@@ -38283,9 +38286,9 @@ snapshots:
 
   iso-639-1@2.1.15: {}
 
-  isolated-vm@6.0.2:
+  isolated-vm@6.1.2:
     dependencies:
-      prebuild-install: 7.1.3
+      node-gyp-build: 4.8.4
 
   isomorphic-timers-promises@1.0.1: {}
 

pnpm-workspace.yaml

@@ -79,6 +79,7 @@ catalog:
   http-proxy-agent: 7.0.2
   https-proxy-agent: 7.0.6
   iconv-lite: 0.6.3
+  isolated-vm: ^6.1.2
   js-base64: 3.7.8
   js-tiktoken: 1.0.21
   jsonrepair: 3.13.2