n8n-assistant[bot]
cbee391326
🚀 Release 1.123.76 ( #37610 )
...
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
2026-09-02 10:14:10 +03:00
n8n-assistant[bot]
cac1cad223
chore: Bundle/1.x ( #37587 )
...
Co-authored-by: Matsu <matias.huhta@n8n.io>
2026-09-02 08:16:43 +03:00
Declan Carroll
01132b19b8
chore: Bump browserslist 4.27.0 → 4.28.7 (minor) on 1.x to clear 2 Aikido findings ( #37579 )
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
2026-09-02 00:05:44 +01:00
n8n-cat-bot[bot]
9de4ccefcf
fix(core): Bump browserslist to 4.28.7 to clear CVE-2026-73088/73089
...
browserslist is a transitive dependency only, so add a pnpm override
scoped to `browserslist@<4.28.7`. This collapses the three previously
resolved versions (4.24.4, 4.25.0, 4.27.0) onto 4.28.7, staying within
the 4.x major.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-09-01 22:31:31 +00:00
n8n-assistant[bot]
34740baec0
🚀 Release 1.123.75 ( #36790 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Lint (push) Has been cancelled
CI: Master (Build, Test, Lint) / Performance (push) Has been cancelled
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Has been cancelled
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
2026-08-21 07:35:26 +00:00
n8n-assistant[bot]
5c9153e013
fix(core): Normalize env values before schema-based parsing (backport to 1.x) ( #36733 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Co-authored-by: Mike Repeć <mike.repec@n8n.io>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: Danny Martini <danny@n8n.io>
2026-08-20 20:56:02 +02:00
n8n-assistant[bot]
fccd046c97
fix(core): Wrap a trigger's closeFunction in an expression isolate at creation time (backport to 1.x) ( #36699 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Co-authored-by: Danny Martini <danny@n8n.io>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: Mike Repeć <mike.repec@n8n.io>
2026-08-20 14:04:31 +02:00
n8n-assistant[bot]
16a867684a
fix(core): Only init the expression engine for commands that evaluate expressions (backport to 1.x) ( #36649 )
...
Co-authored-by: Mike Repeć <mike.repec@n8n.io>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: Danny Martini <danny@n8n.io>
2026-08-20 13:10:56 +02:00
n8n-assistant[bot]
a75e5ed20a
fix(core): Release test-webhook isolate only after teardown completes (backport to 1.x) ( #36633 )
...
Co-authored-by: Mike Repeć <mike.repec@n8n.io>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: Danny Martini <danny@n8n.io>
2026-08-20 13:10:31 +02:00
n8n-assistant[bot]
9826eec801
🚀 Release 1.123.74 ( #36683 )
...
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
2026-08-20 07:35:45 +00:00
Declan Carroll
6ab893b112
chore: Bump jose to 6.2.9 on 1.x to clear 1 Aikido finding ( #36677 )
2026-08-20 07:14:00 +01:00
n8n-cat-bot[bot]
f1afdf9dbb
chore: Bump jose to 6.2.9 via range override to clear AIKIDO-2026-584205
...
Use the range-based override form `"jose@<6.2.9": "6.2.9"` (matching
master's patched pin) instead of an exact `6.2.5` pin, so any transitive
jose below the patched floor is raised while future deps can still pull
newer. 6.2.5 fell below master's `<6.2.9` patched threshold and would
likely have left the Aikido finding open.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-20 05:54:08 +00:00
n8n-cat-bot[bot]
c0c909d4cf
chore: Bump jose 6.1.3 → 6.2.5 (minor) on 1.x to clear 1 Aikido finding
...
Add a pnpm override to raise the transitive `jose` dependency to 6.2.5,
clearing Aikido finding AIKIDO-2026-584205.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-20 05:17:10 +00:00
Declan Carroll
a9981e484b
chore: Bump strnum 2.2.3 → 2.4.2 (minor) on 1.x to clear 1 Aikido finding ( #36673 )
2026-08-20 06:00:31 +01:00
n8n-cat-bot[bot]
6aca3df80b
chore: Bump strnum 2.2.3 → 2.4.2 (minor) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-20 04:31:45 +00:00
Declan Carroll
77ca098451
chore: Bump highlight.js 11.8.0 → 11.12.0 (minor) on 1.x to clear 1 Aikido finding ( #36672 )
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
2026-08-20 04:50:30 +01:00
n8n-cat-bot[bot]
4c320792db
chore: Bump highlight.js 11.8.0 → 11.12.0 (minor) on 1.x to clear 1 Aikido finding
...
Bumps the frontend catalog entry for highlight.js from 11.8.0 to 11.12.0
to clear Aikido finding AIKIDO-2026-456719. The catalog bump also dedupes
the transitive v-code-diff resolution (11.11.1) up to 11.12.0, so the
lockfile no longer resolves highlight.js below 11.12.0.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-20 03:17:53 +00:00
Declan Carroll
8324fd380e
chore: Bump js-yaml 4.2.0 → 4.3.1 (minor) on 1.x to clear 3 Aikido findings ( #36669 )
2026-08-20 00:30:30 +01:00
n8n-cat-bot[bot]
9d95d48cdb
chore: Bump js-yaml 4.2.0 → 4.3.1 (minor) on 1.x to clear 3 Aikido findings
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 22:31:25 +00:00
Declan Carroll
c581ac603f
chore: Bump linkify-it 5.0.1 → 5.0.2 (patch) on 1.x to clear 1 Aikido finding ( #36668 )
2026-08-19 22:40:30 +01:00
n8n-cat-bot[bot]
4bafad7d91
chore: Bump linkify-it 5.0.1 → 5.0.2 (patch) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 21:09:51 +00:00
Declan Carroll
b4cecf4788
chore: Bump @langchain/langgraph-checkpoint 1.0.0 → 1.0.3 (patch) on 1.x to clear 1 Aikido finding ( #36666 )
2026-08-19 21:50:30 +01:00
n8n-cat-bot[bot]
900ee39119
chore: Bump @langchain/langgraph-checkpoint 1.0.0 → 1.0.3 (patch) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 20:10:42 +00:00
Declan Carroll
b85fb40992
chore: Bump hono 4.12.27 → 4.12.34 (patch) on 1.x to clear 4 Aikido findings ( #36665 )
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
2026-08-19 20:40:30 +01:00
n8n-cat-bot[bot]
9e130cf59f
chore: Bump hono 4.12.27 → 4.12.34 (patch) on 1.x to clear 4 Aikido findings
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 19:08:07 +00:00
Declan Carroll
de040ce5e0
chore: Bump tar-fs 2.1.4 → 2.1.5 (patch) on 1.x to clear 1 Aikido finding ( #36663 )
2026-08-19 19:40:30 +01:00
n8n-cat-bot[bot]
54434d6ddd
chore: Bump tar-fs 2.1.4 → 2.1.5 (patch) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 18:07:53 +00:00
Declan Carroll
7596c0f810
chore: Bump sanitize-html 2.17.4 → 2.17.5 (patch) on 1.x to clear 1 Aikido finding ( #36661 )
2026-08-19 18:50:30 +01:00
n8n-cat-bot[bot]
22a227a5b2
chore: Bump sanitize-html 2.17.4 → 2.17.5 (patch) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 17:13:52 +00:00
Declan Carroll
4f2a5c2033
chore: Bump pg 8.12.0 → 8.21.0 (minor) on 1.x to clear 1 Aikido finding ( #36656 )
2026-08-19 17:50:31 +01:00
n8n-cat-bot[bot]
8340dc2e52
chore: Bump pg 8.12.0 → 8.21.0 (minor) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 16:17:06 +00:00
Declan Carroll
a066a973a5
chore: Bump vm2 3.11.4 → 3.11.6 (patch) on 1.x to clear 10 Aikido findings ( #36637 )
2026-08-19 16:50:31 +01:00
n8n-cat-bot[bot]
94387d3fba
chore: Bump vm2 3.11.4 → 3.11.6 (patch) on 1.x to clear 10 Aikido findings
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 15:10:37 +00:00
Declan Carroll
f326d32c1b
chore: Bump @intlify/shared 11.1.10 → 11.4.4 (minor) on 1.x to clear 1 Aikido finding ( #36626 )
2026-08-19 15:50:30 +01:00
n8n-cat-bot[bot]
6a2bd2ba7a
chore: Bump @intlify/shared 11.1.10 → 11.4.4 (minor) on 1.x to clear 1 Aikido finding
...
Adds a pnpm override pinning the transitive @intlify/shared to 11.4.4 to
clear AIKIDO-2026-10838. @intlify/shared is only present in the lockfile
(pulled in via vue-i18n), so it is raised through pnpm.overrides.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 14:14:28 +00:00
Lorent Lempereur
951edd783a
fix(core): CAT-3451 (backport to 1.x) ( #36593 )
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
2026-08-19 13:22:16 +02:00
n8n-assistant[bot]
1a4cb1caa9
🚀 Release 1.123.73 ( #36562 )
...
Co-authored-by: Matsuuu <16068444+Matsuuu@users.noreply.github.com>
2026-08-19 08:41:57 +03:00
n8n-assistant[bot]
4648e23c3c
chore: Bundle/1.x ( #36559 )
...
Co-authored-by: Matsu <matias.huhta@n8n.io>
Co-authored-by: n8n-assistant[bot] <100856346+n8n-assistant[bot]@users.noreply.github.com>
Co-authored-by: Bernhard Wittmann <bernhard.wittmann@n8n.io>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
Co-authored-by: yehorkardash <yehor.kardash@n8n.io>
Co-authored-by: Danny Martini <danny@n8n.io>
Co-authored-by: mfsiega <93014743+mfsiega@users.noreply.github.com>
Co-authored-by: n8n-assistant[bot] <n8n-assistant[bot]@users.noreply.github.com>
Co-authored-by: Emilia <100027345+sovietspaceship@users.noreply.github.com>
2026-08-19 07:57:49 +03:00
Mike Repeć
75bedd8eaf
feat(core): Make the vm expression engine the default on 1.x ( #36498 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
2026-08-18 13:54:47 +01:00
Mike Repeć
4ee48e61a1
fix(core): Acquire expression isolate for dynamic node parameter requests (backport to 1.x) ( #36494 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
2026-08-18 12:49:07 +02:00
n8n-assistant[bot]
d062821759
🚀 Release 1.123.72 ( #36390 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
2026-08-17 07:31:48 +00:00
Declan Carroll
438f3e9ab7
chore: Bump mammoth 1.11.0 → 1.12.1 (minor) on 1.x to clear 2 Aikido findings ( #36365 )
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Lint (push) Has been cancelled
CI: Master (Build, Test, Lint) / Performance (push) Has been cancelled
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Has been cancelled
2026-08-15 05:50:30 +01:00
n8n-cat-bot[bot]
4512cee8e0
chore: Bump mammoth 1.11.0 → 1.12.1 (minor) on 1.x to clear 2 Aikido findings
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-15 04:10:11 +00:00
Declan Carroll
71e1482f22
chore: Bump @zone-eu/mailsplit 5.4.8 → 5.4.15 (patch) on 1.x to clear 1 Aikido finding ( #36359 )
2026-08-15 03:00:30 +01:00
n8n-cat-bot[bot]
d59af9af43
chore: Bump @zone-eu/mailsplit 5.4.8 → 5.4.15 (patch) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-15 01:14:17 +00:00
Declan Carroll
e267e45760
chore: Bump @xmldom/xmldom 0.8.13 → 0.8.14 (patch) on 1.x to clear 2 Aikido findings ( #36357 )
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
2026-08-14 23:50:30 +01:00
n8n-cat-bot[bot]
69d727b1dc
chore: Bump @xmldom/xmldom 0.8.13 → 0.8.14 (patch) on 1.x to clear 2 Aikido findings
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-14 22:15:17 +00:00
Declan Carroll
763a7b8ed6
chore: Bump isolated-vm 6.1.2 → 6.2.0 (minor) on 1.x to clear 1 Aikido finding ( #36356 )
2026-08-14 23:00:30 +01:00
n8n-cat-bot[bot]
5960ab738b
chore: Bump isolated-vm 6.1.2 → 6.2.0 (minor) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-14 21:10:12 +00:00
Declan Carroll
f41d9c9791
chore: Bump nanoid 3.3.17 → 3.3.18 (patch) on 1.x to clear 2 Aikido findings ( #36264 )
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
2026-08-13 21:50:30 +01:00