github-mirror/n8n
1
0
Fork 0
mirror of https://github.com/n8n-io/n8n.git synced 2026-10-18 05:59:42 +02:00
Code Issues Actions 13 Packages Projects Releases Wiki Activity Graph
16,978 Commits 1,923 Branches 2,204 Tags 4.6 GiB
n8n@1.123.80
Commit Graph

16978 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
n8n-assistant[bot]
108c7163f8
🚀 Release 1.123.80 (#38771) 
Co-authored-by: Matsuuu <16068444+Matsuuu@users.noreply.github.com>
 2026-09-16 09:32:00 +03:00
n8n-assistant[bot]
fff2c84a51
chore: Bundle/1.x (#38767) 2026-09-16 08:22:02 +03:00
n8n-assistant[bot]
35ffb8881e
fix(core): Apply credential allowed domains in declarative node requests (backport to 1.x) (#38723) 
Co-authored-by: Guillaume Jacquart <jacquart.guillaume@gmail.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
 2026-09-15 13:58:33 +00:00
n8n-assistant[bot]
28dd85aaf2
🚀 Release 1.123.79 (#38268)
Some checks failed
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Lint (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Performance (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Has been cancelled
Details 
Co-authored-by: Matsuuu <16068444+Matsuuu@users.noreply.github.com>
Co-authored-by: Matsuuu <matias.huhta@n8n.io>
 2026-09-10 09:06:29 +03:00
Matsu
55c635f9bf
build: Patch docker images to not build with pnpm 12 (#38223) 2026-09-09 16:33:22 +03:00
n8n-assistant[bot]
24040d8f32
fix(core): Resolve managed OAuth endpoint fields from the credential type (backport to 1.x) (no-changelog) (#38163) 
Co-authored-by: Andreas Fitzek <andreas.fitzek@n8n.io>
 2026-09-09 10:18:57 +02:00
Declan Carroll
53ebf213a3
chore: Bump hono 4.12.34 → 4.13.5 (minor) on 1.x to clear 3 Aikido findings (#38162) 2026-09-09 05:25:21 +01:00
n8n-cat-bot[bot]
1cc6d839de chore: Bump hono 4.12.34 -> 4.13.5 (minor) on 1.x to clear 3 Aikido findings 
hono is transitive only, reaching the tree through @modelcontextprotocol/sdk (both
directly and via @hono/node-server), and is already pinned by a root pnpm
override. Raise the existing `hono@<=4.12.34` selector to `<=4.13.5` and refresh
the lockfile so the single resolved copy in the tree is 4.13.5, clearing
CVE-2026-84363 (medium), CVE-2026-84364 (low) and CVE-2026-84365 (medium).

No source file imports hono, so this is a runtime-dependency bump with no type
surface of ours to adjust.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-09 04:05:52 +00:00
Declan Carroll
f9edcd565f
chore: Bump multer 2.2.0 → 2.3.0 (minor) on 1.x to clear 4 Aikido findings (#38160) 2026-09-09 04:30:36 +01:00
n8n-cat-bot[bot]
2787b94c43 chore: Bump multer 2.2.0 -> 2.3.0 (minor) on 1.x to clear 4 Aikido findings 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-09 03:10:55 +00:00
Declan Carroll
3b5d084933
chore: Bump js-yaml 4.2.0 → 4.3.2 (patch) on 1.x to clear 2 Aikido findings (#38158) 2026-09-09 03:50:09 +01:00
n8n-cat-bot[bot]
18ea962392 chore: Bump js-yaml 4.3.1 -> 4.3.2 (patch) on 1.x to clear 2 Aikido findings 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-09 02:26:49 +00:00
Declan Carroll
695e2b8699
chore: Bump sharp 0.35.0 → 0.35.4 (patch) on 1.x to clear 1 Aikido finding (#38157) 2026-09-09 02:35:24 +01:00
n8n-cat-bot[bot]
21f482f349 chore: Bump sharp 0.35.0 -> 0.35.4 (patch) on 1.x to clear 1 Aikido finding 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-09 01:09:44 +00:00
Declan Carroll
b73fbb5080
chore: Bump @xmldom/xmldom 0.8.14 → 0.8.15 (patch) on 1.x to clear 1 Aikido finding (#38154) 2026-09-08 23:34:55 +01:00
n8n-cat-bot[bot]
fbc26d571c chore: Bump @xmldom/xmldom 0.8.14 -> 0.8.15 (patch) on 1.x to clear 1 Aikido finding 
@xmldom/xmldom is transitive only (samlify, @authenio/xml-encryption,
xml-crypto, mammoth), already pinned by a root pnpm override. Raise the
existing `@xmldom/xmldom@<=0.8.14` selector to `<=0.8.15` and refresh the
lockfile so the single resolved copy in the tree is 0.8.15, clearing
CVE-2026-83610 (medium).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-08 22:13:30 +00:00
Declan Carroll
526f6aa338
chore: Bump fflate 0.7.4 → 0.7.5 (patch) on 1.x to clear 1 Aikido finding (#38150)
Some checks failed
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Lint (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Performance (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Has been cancelled
Details
2026-09-08 22:16:12 +01:00
n8n-cat-bot[bot]
51805b7e53 chore: Bump fflate 0.7.4 -> 0.7.5 (patch) on 1.x to clear 1 Aikido finding 
fflate is a direct dependency of n8n-nodes-base, pinned at 0.7.4. Raise the
declared pin to 0.7.5 and refresh the lockfile so the only resolved copy in
the tree is 0.7.5, clearing CVE-2026-45820 (high).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-08 20:49:54 +00:00
Declan Carroll
ad1b1d87e1
chore: Bump fast-uri 3.1.5 → 3.1.6 (patch) on 1.x to clear 4 Aikido findings (#38145) 2026-09-08 20:46:03 +01:00
n8n-cat-bot[bot]
a9e11f6f77 chore: Bump fast-uri 3.1.5 → 3.1.6 (patch) on 1.x to clear 4 Aikido findings 
Raises the existing pnpm.overrides entry for fast-uri from 3.1.5 to 3.1.6
and refreshes the lockfile. fast-uri is transitive (via ajv@8, reached at
runtime through express-openapi-validator in packages/cli).

Clears CVE-2026-75899, CVE-2026-75931, CVE-2026-75975 and CVE-2026-76172
(all high, needs >= 3.1.6).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-08 19:14:45 +00:00
n8n-assistant[bot]
a1400f1916
🚀 Release 1.123.77 (#37697)
Some checks failed
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Lint (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Performance (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Has been cancelled
Details 
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
 2026-09-03 07:34:44 +00:00
Matsu
72b1ab10ab
ci: Remove a stray tree entry from the 1.x branch (no-changelog) (#37616)
Some checks are pending
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Details 
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
 2026-09-02 08:22:43 +00:00
n8n-assistant[bot]
cbee391326
🚀 Release 1.123.76 (#37610) 
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
 2026-09-02 10:14:10 +03:00
n8n-assistant[bot]
cac1cad223
chore: Bundle/1.x (#37587) 
Co-authored-by: Matsu <matias.huhta@n8n.io>
 2026-09-02 08:16:43 +03:00
Declan Carroll
01132b19b8
chore: Bump browserslist 4.27.0 → 4.28.7 (minor) on 1.x to clear 2 Aikido findings (#37579)
Some checks are pending
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Details
2026-09-02 00:05:44 +01:00
n8n-cat-bot[bot]
9de4ccefcf fix(core): Bump browserslist to 4.28.7 to clear CVE-2026-73088/73089 
browserslist is a transitive dependency only, so add a pnpm override
scoped to `browserslist@<4.28.7`. This collapses the three previously
resolved versions (4.24.4, 4.25.0, 4.27.0) onto 4.28.7, staying within
the 4.x major.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-01 22:31:31 +00:00
n8n-assistant[bot]
34740baec0
🚀 Release 1.123.75 (#36790)
Some checks failed
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Lint (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Performance (push) Has been cancelled
Details
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Has been cancelled
Details 
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
 2026-08-21 07:35:26 +00:00
n8n-assistant[bot]
5c9153e013
fix(core): Normalize env values before schema-based parsing (backport to 1.x) (#36733)
Some checks are pending
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Details 
Co-authored-by: Mike Repeć <mike.repec@n8n.io>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: Danny Martini <danny@n8n.io>
 2026-08-20 20:56:02 +02:00
n8n-assistant[bot]
fccd046c97
fix(core): Wrap a trigger's closeFunction in an expression isolate at creation time (backport to 1.x) (#36699)
Some checks are pending
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Details 
Co-authored-by: Danny Martini <danny@n8n.io>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: Mike Repeć <mike.repec@n8n.io>
 2026-08-20 14:04:31 +02:00
n8n-assistant[bot]
16a867684a
fix(core): Only init the expression engine for commands that evaluate expressions (backport to 1.x) (#36649) 
Co-authored-by: Mike Repeć <mike.repec@n8n.io>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: Danny Martini <danny@n8n.io>
 2026-08-20 13:10:56 +02:00
n8n-assistant[bot]
a75e5ed20a
fix(core): Release test-webhook isolate only after teardown completes (backport to 1.x) (#36633) 
Co-authored-by: Mike Repeć <mike.repec@n8n.io>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: Danny Martini <danny@n8n.io>
 2026-08-20 13:10:31 +02:00
n8n-assistant[bot]
9826eec801
🚀 Release 1.123.74 (#36683) 
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
 2026-08-20 07:35:45 +00:00
Declan Carroll
6ab893b112
chore: Bump jose to 6.2.9 on 1.x to clear 1 Aikido finding (#36677) 2026-08-20 07:14:00 +01:00
n8n-cat-bot[bot]
f1afdf9dbb chore: Bump jose to 6.2.9 via range override to clear AIKIDO-2026-584205 
Use the range-based override form `"jose@<6.2.9": "6.2.9"` (matching
master's patched pin) instead of an exact `6.2.5` pin, so any transitive
jose below the patched floor is raised while future deps can still pull
newer. 6.2.5 fell below master's `<6.2.9` patched threshold and would
likely have left the Aikido finding open.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-08-20 05:54:08 +00:00
n8n-cat-bot[bot]
c0c909d4cf chore: Bump jose 6.1.3 → 6.2.5 (minor) on 1.x to clear 1 Aikido finding 
Add a pnpm override to raise the transitive `jose` dependency to 6.2.5,
clearing Aikido finding AIKIDO-2026-584205.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-08-20 05:17:10 +00:00
Declan Carroll
a9981e484b
chore: Bump strnum 2.2.3 → 2.4.2 (minor) on 1.x to clear 1 Aikido finding (#36673) 2026-08-20 06:00:31 +01:00
n8n-cat-bot[bot]
6aca3df80b chore: Bump strnum 2.2.3 → 2.4.2 (minor) on 1.x to clear 1 Aikido finding 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-08-20 04:31:45 +00:00
Declan Carroll
77ca098451
chore: Bump highlight.js 11.8.0 → 11.12.0 (minor) on 1.x to clear 1 Aikido finding (#36672)
Some checks are pending
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Details
2026-08-20 04:50:30 +01:00
n8n-cat-bot[bot]
4c320792db chore: Bump highlight.js 11.8.0 → 11.12.0 (minor) on 1.x to clear 1 Aikido finding 
Bumps the frontend catalog entry for highlight.js from 11.8.0 to 11.12.0
to clear Aikido finding AIKIDO-2026-456719. The catalog bump also dedupes
the transitive v-code-diff resolution (11.11.1) up to 11.12.0, so the
lockfile no longer resolves highlight.js below 11.12.0.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-08-20 03:17:53 +00:00
Declan Carroll
8324fd380e
chore: Bump js-yaml 4.2.0 → 4.3.1 (minor) on 1.x to clear 3 Aikido findings (#36669) 2026-08-20 00:30:30 +01:00
n8n-cat-bot[bot]
9d95d48cdb chore: Bump js-yaml 4.2.0 → 4.3.1 (minor) on 1.x to clear 3 Aikido findings 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-08-19 22:31:25 +00:00
Declan Carroll
c581ac603f
chore: Bump linkify-it 5.0.1 → 5.0.2 (patch) on 1.x to clear 1 Aikido finding (#36668) 2026-08-19 22:40:30 +01:00
n8n-cat-bot[bot]
4bafad7d91 chore: Bump linkify-it 5.0.1 → 5.0.2 (patch) on 1.x to clear 1 Aikido finding 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-08-19 21:09:51 +00:00
Declan Carroll
b4cecf4788
chore: Bump @langchain/langgraph-checkpoint 1.0.0 → 1.0.3 (patch) on 1.x to clear 1 Aikido finding (#36666) 2026-08-19 21:50:30 +01:00
n8n-cat-bot[bot]
900ee39119 chore: Bump @langchain/langgraph-checkpoint 1.0.0 → 1.0.3 (patch) on 1.x to clear 1 Aikido finding 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-08-19 20:10:42 +00:00
Declan Carroll
b85fb40992
chore: Bump hono 4.12.27 → 4.12.34 (patch) on 1.x to clear 4 Aikido findings (#36665)
Some checks are pending
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
Details
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Details
2026-08-19 20:40:30 +01:00
n8n-cat-bot[bot]
9e130cf59f chore: Bump hono 4.12.27 → 4.12.34 (patch) on 1.x to clear 4 Aikido findings 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-08-19 19:08:07 +00:00
Declan Carroll
de040ce5e0
chore: Bump tar-fs 2.1.4 → 2.1.5 (patch) on 1.x to clear 1 Aikido finding (#36663) 2026-08-19 19:40:30 +01:00
n8n-cat-bot[bot]
54434d6ddd chore: Bump tar-fs 2.1.4 → 2.1.5 (patch) on 1.x to clear 1 Aikido finding 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-08-19 18:07:53 +00:00
Declan Carroll
7596c0f810
chore: Bump sanitize-html 2.17.4 → 2.17.5 (patch) on 1.x to clear 1 Aikido finding (#36661) 2026-08-19 18:50:30 +01:00