n8n-assistant[bot]
8ea1ccdf82
🚀 Release 1.123.85 ( #41045 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Lint (push) Has been cancelled
CI: Master (Build, Test, Lint) / Performance (push) Has been cancelled
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Has been cancelled
Co-authored-by: CharlieKolb <13814565+CharlieKolb@users.noreply.github.com>
2026-10-14 08:14:56 +00:00
n8n-assistant[bot]
9900478177
🚀 Release 1.123.84 ( #40630 )
...
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
2026-10-08 07:33:05 +00:00
Luigi Gubello
fa26c87723
chore: Update npm dependencies (backport to 1.x) ( #40598 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Lint (push) Has been cancelled
CI: Master (Build, Test, Lint) / Performance (push) Has been cancelled
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Has been cancelled
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-07 20:11:39 +02:00
n8n-assistant[bot]
9e655c64ae
🚀 Release 1.123.83 ( #39941 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Lint (push) Has been cancelled
CI: Master (Build, Test, Lint) / Performance (push) Has been cancelled
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Has been cancelled
Co-authored-by: Matsuuu <16068444+Matsuuu@users.noreply.github.com>
2026-09-30 08:51:35 +03:00
n8n-assistant[bot]
ab0b5351ec
chore: Bundle/1.x ( #39936 )
...
Co-authored-by: Matsu <matias.huhta@n8n.io>
2026-09-30 07:44:17 +03:00
n8n-cat-bot[bot]
76e467dc14
fix: Pin cjs-module-lexer 2.2.0 to address review finding
2026-09-25 15:54:32 +00:00
n8n-assistant[bot]
17b3ae8cf9
🚀 Release 1.123.82 ( #39573 )
...
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
2026-09-25 07:20:42 +00:00
n8n-cat-bot[bot]
80a0bc291f
chore: Bump proxy-addr 2.0.7 → 2.0.8 on 1.x (DEVP-1204)
2026-09-24 20:33:41 +00:00
n8n-cat-bot[bot]
de771f0aa4
fix: bump adm-zip to 0.6.1
2026-09-23 00:25:32 +00:00
n8n-assistant[bot]
9a00ed398c
🚀 Release 1.123.81 ( #38899 )
...
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
2026-09-17 07:35:42 +00:00
n8n-assistant[bot]
3357ecc57f
fix(core): Update undici to 7.29.1 (backport to 1.x) ( #38849 )
...
Co-authored-by: Luigi Gubello <27034386+luigigubello@users.noreply.github.com>
Co-authored-by: Luigi Gubello <luigi.gubello@n8n.io>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-09-16 14:48:39 +00:00
n8n-assistant[bot]
108c7163f8
🚀 Release 1.123.80 ( #38771 )
...
Co-authored-by: Matsuuu <16068444+Matsuuu@users.noreply.github.com>
2026-09-16 09:32:00 +03:00
n8n-assistant[bot]
28dd85aaf2
🚀 Release 1.123.79 ( #38268 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Lint (push) Has been cancelled
CI: Master (Build, Test, Lint) / Performance (push) Has been cancelled
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Has been cancelled
Co-authored-by: Matsuuu <16068444+Matsuuu@users.noreply.github.com>
Co-authored-by: Matsuuu <matias.huhta@n8n.io>
2026-09-10 09:06:29 +03:00
n8n-cat-bot[bot]
1cc6d839de
chore: Bump hono 4.12.34 -> 4.13.5 (minor) on 1.x to clear 3 Aikido findings
...
hono is transitive only, reaching the tree through @modelcontextprotocol/sdk (both
directly and via @hono/node-server), and is already pinned by a root pnpm
override. Raise the existing `hono@<=4.12.34` selector to `<=4.13.5` and refresh
the lockfile so the single resolved copy in the tree is 4.13.5, clearing
CVE-2026-84363 (medium), CVE-2026-84364 (low) and CVE-2026-84365 (medium).
No source file imports hono, so this is a runtime-dependency bump with no type
surface of ours to adjust.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-09-09 04:05:52 +00:00
n8n-cat-bot[bot]
2787b94c43
chore: Bump multer 2.2.0 -> 2.3.0 (minor) on 1.x to clear 4 Aikido findings
...
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-09-09 03:10:55 +00:00
n8n-cat-bot[bot]
18ea962392
chore: Bump js-yaml 4.3.1 -> 4.3.2 (patch) on 1.x to clear 2 Aikido findings
...
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-09-09 02:26:49 +00:00
n8n-cat-bot[bot]
21f482f349
chore: Bump sharp 0.35.0 -> 0.35.4 (patch) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-09-09 01:09:44 +00:00
n8n-cat-bot[bot]
fbc26d571c
chore: Bump @xmldom/xmldom 0.8.14 -> 0.8.15 (patch) on 1.x to clear 1 Aikido finding
...
@xmldom/xmldom is transitive only (samlify, @authenio/xml-encryption,
xml-crypto, mammoth), already pinned by a root pnpm override. Raise the
existing `@xmldom/xmldom@<=0.8.14` selector to `<=0.8.15` and refresh the
lockfile so the single resolved copy in the tree is 0.8.15, clearing
CVE-2026-83610 (medium).
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-09-08 22:13:30 +00:00
n8n-cat-bot[bot]
a9e11f6f77
chore: Bump fast-uri 3.1.5 → 3.1.6 (patch) on 1.x to clear 4 Aikido findings
...
Raises the existing pnpm.overrides entry for fast-uri from 3.1.5 to 3.1.6
and refreshes the lockfile. fast-uri is transitive (via ajv@8, reached at
runtime through express-openapi-validator in packages/cli).
Clears CVE-2026-75899, CVE-2026-75931, CVE-2026-75975 and CVE-2026-76172
(all high, needs >= 3.1.6).
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-09-08 19:14:45 +00:00
n8n-assistant[bot]
a1400f1916
🚀 Release 1.123.77 ( #37697 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Lint (push) Has been cancelled
CI: Master (Build, Test, Lint) / Performance (push) Has been cancelled
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Has been cancelled
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
2026-09-03 07:34:44 +00:00
n8n-assistant[bot]
cbee391326
🚀 Release 1.123.76 ( #37610 )
...
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
2026-09-02 10:14:10 +03:00
n8n-assistant[bot]
cac1cad223
chore: Bundle/1.x ( #37587 )
...
Co-authored-by: Matsu <matias.huhta@n8n.io>
2026-09-02 08:16:43 +03:00
n8n-cat-bot[bot]
9de4ccefcf
fix(core): Bump browserslist to 4.28.7 to clear CVE-2026-73088/73089
...
browserslist is a transitive dependency only, so add a pnpm override
scoped to `browserslist@<4.28.7`. This collapses the three previously
resolved versions (4.24.4, 4.25.0, 4.27.0) onto 4.28.7, staying within
the 4.x major.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-09-01 22:31:31 +00:00
n8n-assistant[bot]
34740baec0
🚀 Release 1.123.75 ( #36790 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Has been cancelled
CI: Master (Build, Test, Lint) / Lint (push) Has been cancelled
CI: Master (Build, Test, Lint) / Performance (push) Has been cancelled
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Has been cancelled
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
2026-08-21 07:35:26 +00:00
n8n-assistant[bot]
9826eec801
🚀 Release 1.123.74 ( #36683 )
...
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
2026-08-20 07:35:45 +00:00
n8n-cat-bot[bot]
f1afdf9dbb
chore: Bump jose to 6.2.9 via range override to clear AIKIDO-2026-584205
...
Use the range-based override form `"jose@<6.2.9": "6.2.9"` (matching
master's patched pin) instead of an exact `6.2.5` pin, so any transitive
jose below the patched floor is raised while future deps can still pull
newer. 6.2.5 fell below master's `<6.2.9` patched threshold and would
likely have left the Aikido finding open.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-20 05:54:08 +00:00
n8n-cat-bot[bot]
c0c909d4cf
chore: Bump jose 6.1.3 → 6.2.5 (minor) on 1.x to clear 1 Aikido finding
...
Add a pnpm override to raise the transitive `jose` dependency to 6.2.5,
clearing Aikido finding AIKIDO-2026-584205.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-20 05:17:10 +00:00
n8n-cat-bot[bot]
6aca3df80b
chore: Bump strnum 2.2.3 → 2.4.2 (minor) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-20 04:31:45 +00:00
n8n-cat-bot[bot]
9d95d48cdb
chore: Bump js-yaml 4.2.0 → 4.3.1 (minor) on 1.x to clear 3 Aikido findings
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 22:31:25 +00:00
n8n-cat-bot[bot]
4bafad7d91
chore: Bump linkify-it 5.0.1 → 5.0.2 (patch) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 21:09:51 +00:00
n8n-cat-bot[bot]
900ee39119
chore: Bump @langchain/langgraph-checkpoint 1.0.0 → 1.0.3 (patch) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 20:10:42 +00:00
n8n-cat-bot[bot]
9e130cf59f
chore: Bump hono 4.12.27 → 4.12.34 (patch) on 1.x to clear 4 Aikido findings
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 19:08:07 +00:00
n8n-cat-bot[bot]
54434d6ddd
chore: Bump tar-fs 2.1.4 → 2.1.5 (patch) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 18:07:53 +00:00
n8n-cat-bot[bot]
8340dc2e52
chore: Bump pg 8.12.0 → 8.21.0 (minor) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 16:17:06 +00:00
n8n-cat-bot[bot]
6a2bd2ba7a
chore: Bump @intlify/shared 11.1.10 → 11.4.4 (minor) on 1.x to clear 1 Aikido finding
...
Adds a pnpm override pinning the transitive @intlify/shared to 11.4.4 to
clear AIKIDO-2026-10838. @intlify/shared is only present in the lockfile
(pulled in via vue-i18n), so it is raised through pnpm.overrides.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 14:14:28 +00:00
n8n-assistant[bot]
1a4cb1caa9
🚀 Release 1.123.73 ( #36562 )
...
Co-authored-by: Matsuuu <16068444+Matsuuu@users.noreply.github.com>
2026-08-19 08:41:57 +03:00
n8n-assistant[bot]
d062821759
🚀 Release 1.123.72 ( #36390 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
2026-08-17 07:31:48 +00:00
n8n-cat-bot[bot]
d59af9af43
chore: Bump @zone-eu/mailsplit 5.4.8 → 5.4.15 (patch) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-15 01:14:17 +00:00
n8n-cat-bot[bot]
69d727b1dc
chore: Bump @xmldom/xmldom 0.8.13 → 0.8.14 (patch) on 1.x to clear 2 Aikido findings
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-14 22:15:17 +00:00
n8n-cat-bot[bot]
ed6bf6b9b2
chore: Bump nanoid 3.3.17 → 3.3.18 (patch) on 1.x to clear 2 Aikido findings
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-13 20:11:16 +00:00
n8n-cat-bot[bot]
a66000bc3a
chore: Bump @vue/shared 3.5.13 → 3.5.40 (patch) on 1.x to clear 1 Aikido finding
...
Adds a pnpm override to pin the transitive @vue/shared dependency to
3.5.40, clearing Aikido finding AIKIDO-2026-624585.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-13 18:31:05 +00:00
n8n-cat-bot[bot]
11027dea45
chore: Bump @hono/node-server 1.19.13 → 1.19.15 (patch) on 1.x to clear 1 Aikido finding ( #36191 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Co-authored-by: n8n-cat-bot[bot] <n8n-cat-bot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: Declan Carroll <declan@n8n.io>
2026-08-13 15:32:58 +01:00
Declan Carroll
d472e64e0a
chore: Bump @vue/server-renderer 3.5.13 → 3.5.40 (patch) on 1.x to clear 1 Aikido finding ( #36168 )
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
2026-08-13 09:29:37 +01:00
n8n-assistant[bot]
d29aec3de1
🚀 Release 1.123.71 ( #36182 )
...
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
2026-08-13 07:28:45 +00:00
n8n-cat-bot[bot]
2f18f9418a
chore: Bump @vue/server-renderer 3.5.13 → 3.5.40 (patch) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-12 19:11:04 +00:00
n8n-cat-bot[bot]
58daeb7c0e
chore: Bump body-parser 2.2.1 → 2.3.0 (minor) on 1.x to clear 1 Aikido finding
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-12 16:34:04 +00:00
n8n-cat-bot[bot]
d78e19bafb
chore: Bump nanoid 3.3.8 → 3.3.17 (patch) on 1.x to clear 3 Aikido findings ( #36092 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Co-authored-by: n8n-cat-bot[bot] <n8n-cat-bot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-12 09:13:56 +00:00
n8n-assistant[bot]
9d8fa66e6a
🚀 Release 1.123.70 ( #36104 )
...
CI: Master (Build, Test, Lint) / Build for Github Cache (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (22.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (24.13.1) (push) Waiting to run
CI: Master (Build, Test, Lint) / Unit tests (25.x) (push) Waiting to run
CI: Master (Build, Test, Lint) / Lint (push) Waiting to run
CI: Master (Build, Test, Lint) / Performance (push) Waiting to run
CI: Master (Build, Test, Lint) / Notify Slack on failure (push) Blocked by required conditions
Co-authored-by: n8n-release-helper[bot] <265227495+n8n-release-helper[bot]@users.noreply.github.com>
2026-08-12 07:31:56 +00:00
n8n-cat-bot[bot]
df148e223f
chore: Bump fast-xml-builder 1.1.7 → 1.2.1 (minor) on 1.x to clear 1 Aikido finding
...
Adds a pnpm.overrides entry for the transitive dependency fast-xml-builder
(pulled in via fast-xml-parser@5.7.2), raising it from 1.1.7 to 1.2.1 to clear
Aikido finding AIKIDO-2026-476466.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-11 19:34:49 +00:00
n8n-cat-bot[bot]
eab17a34bb
chore: Bump brace-expansion 2.1.0 → 2.1.4 (patch) on 1.x to clear 3 Aikido findings
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-11 16:13:01 +00:00