github-mirror/n8n
1
0
Fork 0
mirror of https://github.com/n8n-io/n8n.git synced 2026-10-19 16:55:02 +02:00
Code Issues Actions 12 Packages Projects Releases Wiki Activity Graph
23,982 Commits 1,918 Branches 2,206 Tags 4.7 GiB
community-nodes-security
Commit Graph

23982 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Garrit Franke
a0149691b8 refactor(core): Show the matched source line under each YARA finding (no-changelog) 2026-09-08 15:43:51 +02:00
Garrit Franke
433d20a20d refactor(core): Format YARA findings like the lint checks and drop rule URLs (no-changelog) 2026-09-08 15:42:26 +02:00
Garrit Franke
23f4353f13 refactor(core): Derive YARA rule source URL from its ruleset directory (no-changelog) 2026-09-08 15:39:52 +02:00
Garrit Franke
4a984fad51 feat(core): Add YARA malware rules to the community package scanner 
Add a third check to @n8n/scan-community-package: a YARA scan of the published package, run through YARA-X compiled to WebAssembly (@virustotal/yara-x). No Python or Docker is needed, so the scan keeps working via npx for node authors and in CI.

The ruleset is GuardDog's (DataDog/guarddog, Apache-2.0), vendored under scanner/rules/guarddog with a sync script. GuardDog itself does not run; only its YARA rules do. Rule hits were identical to 'guarddog npm scan' on 16 popular community packages.

Also:
- Fix the typescript dependency: the package used the TS 7 native compiler, but typescript-estree needs the TS 6 JS API. Every scan failed with 'Cannot read properties of undefined (reading Cjs)'. Use catalog:typescript-tooling like the sibling packages.
- Report each check on its own line with a count, group details per check, and print paths relative to the package root.
- Silence the typescript-estree unsupported-version banner.
 2026-09-08 15:36:04 +02:00
Guillaume Jacquart
aa91e71893
fix(API): Let global members grant folder scopes to API keys (#37654) 
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
 2026-09-08 10:50:16 +00:00
Predrag Ristic
418f85e9eb
refactor(core): Remove legacy Instance AI eval agent (no-changelog) (#36740) 2026-09-08 10:14:32 +00:00
Mutasem Aldmour
2550501caa
fix(core): Allow a fallback model alongside the primary on AI nodes (#38007) 
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
 2026-09-08 09:53:58 +00:00
Raúl Gómez Morales
37efe11502
fix(core): Stop the workflow SDK collapsing inline branch chains to their branching node (#37717) 2026-09-08 09:46:47 +00:00
Svetoslav Dekov
5cfae1ce62
chore: Fix seed assistant threads so the assistant page can list them (no-changelog) (#37863) 
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
 2026-09-08 09:24:24 +00:00
n8n-cat-bot[bot]
bbc8e83e5d
chore: Share the workflow-node task payload type and guard between the schedule- and poll-trigger tasks (#38038) 
Co-authored-by: n8n-cat-bot[bot] <n8n-cat-bot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
 2026-09-08 09:24:23 +00:00
n8n-cat-bot[bot]
a51e6a0455
chore: Reuse one helper for the triplicated scheduler task-identity span attributes (#38037) 
Co-authored-by: n8n-cat-bot[bot] <n8n-cat-bot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
 2026-09-08 09:23:16 +00:00
Robin Braumann
79d936fa5e
fix(core): Batch LangSmith agent session exports (#38030) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-08 09:04:15 +00:00
Matsu
04c82c0586
ci: Retarget PRs to bundle branches on sync (#38022) 2026-09-08 09:04:07 +00:00
Charlie Kolb
31f24f0f45
ci: Report a missing required review as pending, not failure (#38036) 
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
 2026-09-08 09:01:48 +00:00
Stephen Wright
ea73209a1d
feat(Microsoft Teams Node): Add Online Meeting Delete operation (#37502) 2026-09-08 08:38:04 +00:00
mfsiega
52127777e1
fix(core): Bound the wait for the workflow publication lock (#38019) 
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
 2026-09-08 08:35:30 +00:00
Declan Carroll
362311942d
ci: Improve multi-architecture manifest publishing (no-changelog) (#37894) 2026-09-08 08:24:10 +00:00
Robin Braumann
7383fd7e89
fix(Azure OpenAI Chat Model Node): Resolve the proxy against the Azure endpoint so NO_PROXY applies (#38026) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-08 08:13:29 +00:00
Alex Grozav
7718f45b00
docs(editor): Add the frontend module guide next to the module CLI (no-changelog) (#37004) 
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
 2026-09-08 08:12:00 +00:00
n8n-release-tag-merge[bot]
2661f4de38 Merge tag 'n8n@2.39.0' 2026-09-08 08:25:47 +00:00
n8n-assistant[bot]
1620ec42ca
🚀 Release 2.39.0 (#38029) 
Co-authored-by: Matsuuu <16068444+Matsuuu@users.noreply.github.com>
 2026-09-08 11:04:45 +03:00
Ali Elkhateeb
53ecf6b6be
fix(core): Do not persist an execution when preExecute throws (#37701) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-08 08:00:49 +00:00
Benjamin Schroth
68d5deba65
feat(editor): Add manual agent creation entry point on the agents pages (#37702) 2026-09-08 07:53:11 +00:00
Robin Braumann
80577ac3b0
feat(core): Share the parent workspace sandbox with background sub-agents (#38025) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-08 07:34:37 +00:00
n8n-release-tag-merge[bot]
4223e6172a Merge tag 'n8n@2.38.0' 2026-09-08 07:40:20 +00:00
Mike Repeć
7ce17be560
fix(core): Keep reporting the original job error when the job key is gone (#37993) 
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
 2026-09-08 07:26:07 +00:00
Lorent Lempereur
52befceb66
refactor(core): Run insights compaction and pruning as system tasks (no-changelog) (#37543) 
Co-authored-by: Veljko Terzic <veljko.terzic@n8n.io>
 2026-09-08 07:15:14 +00:00
n8n-cat-bot[bot]
cbaa0be44d
fix: Use consistent personal space icon in the Instance AI artifacts (#38011) 
Co-authored-by: n8n-cat-bot[bot] <n8n-cat-bot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
Co-authored-by: Jeroen van der Poll <74372991+jvanderpoll@users.noreply.github.com>
 2026-09-08 07:03:26 +00:00
n8n-assistant[bot]
9c8a0f7dc1
chore: Update e2e impact map (#38017)
Some checks are pending
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (24.18.1) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (26.5.1) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Verify single-instance deps (npm-install) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Details 
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-09-08 02:58:41 +00:00
Roman Makowiak
9769dacbe3
feat(core): Add folder exploration to Instance AI (#37865) 
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
 2026-09-07 20:52:53 +00:00
n8n-cat-bot[bot]
b5072af998
chore: Share the data-table row file prefix between the export and import services (#38006) 
Co-authored-by: n8n-cat-bot[bot] <n8n-cat-bot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
 2026-09-07 19:43:54 +00:00
Savelii
e12dc06a44
feat(core): Store signing deployment keys in the same wrapped form as data-encryption keys (#37953) 
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
 2026-09-07 18:21:34 +00:00
Predrag Ristic
082008363b
fix(editor): Restore Instance AI draft when thread creation fails (#37874) 2026-09-07 17:56:50 +00:00
Robin Braumann
19eba4305b
feat(core): Index agent workflow tool dependencies and invalidate dependent runtimes (#37857) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-07 17:14:03 +00:00
Andreas Fitzek
93945cce5d
fix(core): Register the encryption key provider before any encrypt or decrypt (no-changelog) (#37972) 
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-09-07 17:04:39 +00:00
Dimitri Lavrenük
a716209294
feat: Add node output schemas harvested from test files (no-changelog) (#37846) 2026-09-07 16:36:41 +00:00
Thanasis G
6fa5b3d292
fix: Sign Microsoft Dynamics OAuth2 requests with the access token (#37855) 
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
 2026-09-07 16:24:47 +00:00
n8n-cat-bot[bot]
9a41c66852
chore: Extract the duplicated stringifyQuery helper in the public API data-table handlers (#38001) 
Co-authored-by: n8n-cat-bot[bot] <n8n-cat-bot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
 2026-09-07 16:11:02 +00:00
n8n-cat-bot[bot]
5e3a74f8b2
chore: Small upgrade for js-yaml - license-server (#37999) 
Co-authored-by: n8n-cat-bot[bot] <n8n-cat-bot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
 2026-09-07 16:04:59 +00:00
Rúben Castro
f2109fbb83
fix(core): Make node type policy writes safe under concurrent requests (no-changelog) (#37955) 
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
 2026-09-07 15:57:58 +00:00
Tomi Turtiainen
07d1cad441
chore: Add publication module ownership to catalysts (no-changelog) (#37998) 2026-09-07 15:43:45 +00:00
Sam Wooler
21755d2bf7
feat(API): Add push endpoint to the public API for source control (#37873) 2026-09-07 15:32:31 +00:00
Eugene
9418c23b81
feat(core): Declare agents as a scheduled job owner (no-changelog) (#37848) 
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
Co-authored-by: Emilia <100027345+sovietspaceship@users.noreply.github.com>
 2026-09-07 15:28:55 +00:00
n8n-cat-bot[bot]
fc2bea75db
chore: Extract the triplicated capability-count telemetry properties in the agents module (#37986) 
Co-authored-by: n8n-cat-bot[bot] <n8n-cat-bot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
 2026-09-07 15:06:02 +00:00
Tomi Turtiainen
10bc6ca351
feat(engine): Store the workflow that ran with each engine 2.0 execution (#37858) 2026-09-07 15:05:31 +00:00
Michael Drury
5f13016d06
fix(core): Attribute agent session metrics to users (no-changelog) (#37988) 2026-09-07 15:03:45 +00:00
Konstantin Tieber
82d348002b
feat(core): Add Instance reporting module (#36796) 2026-09-07 14:56:32 +00:00
Benjamin Schroth
085a7a980d
fix(core): Make pending agent creation and thread binding idempotent (#37074) 2026-09-07 14:56:21 +00:00
Alex Grozav
e974e5e22e
docs(editor): Document @n8n/design-system consumption in its README (no-changelog) (#37017) 
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
 2026-09-07 14:37:42 +00:00
Robin Braumann
60db997f5b
feat(core): Reject the agent publish with the names of unpublished workflow tools (#37889) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-07 14:24:18 +00:00