n8n Release Notes

Bug Fixes

• ai-builder: Align HITL approval resume schemas with confirm envelope (#36047) (be1fde1)
• ai-builder: Enable Save in agent tool modal when credential auth is selected (#36012) (4fe94d8)
• ai-builder: Prevent agent from claiming integration tool call success early (#36196) (547cfb9)
• ai-builder: Recover stuck tool-call UI and MCP timeout progressive update (#36162) (e1cd757)
• ai-builder: Surface existing LLM-provider credentials when a filtered lookup finds none (#35833) (d73d625)
• ai-builder: Surface skill save validation errors and stop reverting skill renames (#36055) (b08cde6)
• Avoid false port-in-use error in get-n8n script on Windows/WSL (#36026) (6f2033f)
• core: Accept Always allow scope on data-tables resume (#36070) (560455f)
• core: Allow details field in continueErrorOutput mode (#35939) (55927c4)
• core: Apply TLS options per hop when requests go through a proxy (#35518) (68bcdfe)
• core: Bound database pool teardown so connection recovery always completes (#36013) (da314d3)
• core: Bound workflow publication outbox record processing with an abort deadline (#36197) (c0278b0)
• core: Crash enqueued executions with unreadable data (#36010) (fd67bf8)
• core: Detect node settings changes when comparing workflow versions (#36066) (e4f0c33)
• core: Execute tools in the order the root requested them (#36009) (acd4fda)
• core: Explain Browser Use failures caused by other browser extensions (#36011) (f66a0e8)
• core: Expose incoming request headers to MCP trigger tools (#35236) (64ed864)
• core: Fix non existent workflow id pathway for AIA (#35984) (6ab2569)
• core: Fix z-indexing of expression modal over agent NDV (#36233) (1fa6ef0)
• core: Gate AI Assistant workflow publish offers on live verification (#36394) (602e6a0)
• core: Handle dropped AI provider connections as transient (#35587) (72235d3)
• core: Handle oversized chat attachments gracefully (#36061) (de8b358)
• core: Harden agent HTTP Request tool configuration (#36463) (0791359)
• core: Improve agent builder skill and channel handling (#35980) (a723e79)
• core: Keep node IDs stable when the AI Assistant edits a workflow (#36236) (a71e45a)
• core: Keep resolving end-user credentials after a trigger stops listening (#35973) (a447ac4)
• core: Keep the account panel on hosted forms once every account is connected (#36429) (a8754b4)
• core: Let Instance AI run a specific trigger's flow (#36410) (1a7425d)
• core: Make published agent channel add, replace, and remove failure-safe (#36100) (79c1393)
• core: Prefer managed OAuth auth types when the AI builder resolves credentials (#35929) (1b4c0ba)
• core: Preserve Anthropic thinking history across agent turns (#36185) (5f6d734)
• core: Rebuild the node registry without emptying it first (#36387) (86facbd)
• core: Recover model turns that end without usable output (#36423) (bae82bd)
• core: Remember skipped Instance AI credential setup for the rest of a thread (#36308) (6ace2a5)
• core: Report the real activation mode for triggers activated via the publication outbox (#36123) (1a12af6)
• core: Report the workflow's parent folder in get_workflow_details (#36234) (9b97fb5)
• core: Require trigger node name for MCP workflow executions (#36341) (7ea9d54)
• core: Resolve agent credentials through the node decryption path so external secrets work (#36275) (9cbbd59)
• core: Resolve AI Assistant sticky note placement after layout (#36320) (b671cf4)
• core: Resolve Custom API Call support through inherited credential types (#35820) (88efdb9)
• core: Resolve operation defaults per resource in generated node schemas (#35952) (79a7bd2)
• core: Respect the editor write lock when Instance AI writes workflows (#36335) (f19c452)
• core: Return final responses from workflow agents (#36127) (5e2779e)
• core: Scope AI Assistant credential setup cards to the thread's project (#36425) (b50ea9c)
• core: Stop auto-selecting the only generic auth credential (#35963) (237c503)
• core: Stop duplicated workflows from inheriting the original's static data (#35921) (25c1521)
• core: Stop routing unrelated pre-existing nodes into workflow setup after AI Assistant edit (#36280) (c89dba8)
• core: Surface model discovery authentication failures to users (#35979) (c44c7de)
• Default all navigations to domcontentloaded (#36238) (5a1e186)
• Don't detach child process on Windows so external programs write (#36327) (de6f3d9)
• editor: Clarify external secret expression previews (#36064) (7792fdb)
• editor: Display tool execution data in Agent sessions (#36085) (a94ffe9)
• editor: Improve agent error handoff to AI Assistant (#36076) (598c1f3)
• editor: Keep agent nodes inside canvas group borders (#35972) (174d0d8)
• editor: Name the AI Assistant browser tab after the conversation (#35958) (e4a414d)
• editor: Never autosave a read-only preview canvas (#36023) (56a2d20)
• editor: Only show Markdown placeholder when empty (#36336) (95515d7)
• editor: Open OAuth sign-in popup before network calls and report blocked pop-ups clearly (#35948) (0f9bff0)
• editor: Polish workflow header actions menu and production checklist placement (#36209) (f3f075a)
• editor: Preserve saved credential data after connect-save to prevent false disconnect prompt (#35598) (59ea1f4)
• editor: Redirect to sign-in when the user's session expires (#35507) (a78ff67)
• editor: Refresh chat history when switching executions (#35312) (36f2b68)
• editor: Remove misleading reset zoom control (#35843) (cce5401)
• editor: Restore the connection test for Kafka and Odoo credentials (#36195) (40a5901)
• editor: Settle navigation instead of hanging when auth-init guard errors (#36190) (ddd5494)
• editor: Show agent context after assistant handoff (#36310) (d810315)
• editor: Show placeholder while MCP settings counts load (#35894) (870099f)
• editor: Show the connected provider account, not the n8n account email (#35553) (ee03e02)
• editor: Stop the workflow actions menu shifting when a new workflow is saved (#36077) (a914319)
• editor: Stop write-lock polling from re-arming after session expiry (#34750) (26be86d)
• editor: Update ready-to-run demo templates to a current OpenAI model (#36189) (a27c90c)
• Fix decompress size calculation for zip64 archives (#35856) (d094b6a)
• Google Ads Node: Migrate from sunset v21 API to v25 (#36255) (bab2649)
• Google Ads Node: Select the renamed video views metric on API v25 (#36347) (7b64b94)
• Handle exponential-notation numbers in smartDecimal (#35967) (08052c1)
• Kafka Trigger Node: Fail v2 activation when the consumer group cannot be joined (#36046) (67a458e)
• Kafka Trigger Node: Refuse activation when the topic does not exist (#36044) (b025ff0)
• MCP Server Trigger Node: Keep sessions working when the caller's end-user credentials are unconnected (#36221) (5044810)
• Microsoft SharePoint Node: Require subdomain in OAuth2 credential (#35680) (620c40c)
• Microsoft Teams Node: Restore Group.ReadWrite.All OAuth2 scope (#36005) (653dfc6)
• Microsoft Teams Node: Surface Graph errors instead of returning an empty chat list (#36200) (1cc20d5)
• Remove default model from one-script docker compose setup (#36034) (a91e012)
• Rethrow unreachable-element errors in getElementValue (#36199) (1ad64b8)
• Surface Zoho API error message on duplicate record (#35840) (0a30c03)
• Wait for task runner registration before executing in e2e test (#36212) (2bca080)
• Wordpress Node: Send no-cache header on write requests (#20473) (077370f)

Features

• Adapt the OAuth consent screen for first-party clients (#36261) (2e97fa5)
• Add LangSmith agent session debug export (#36309) (6cd9a2b)
• Add snapshot option to every browser use interaction tool (#36111) (7f37137)
• ai-builder: Add MCP server as allowed tools in skills (#35969) (d0424b4)
• ai-builder: Auto-select a sensible default model for new agents (#36058) (30aff5d)
• ai-builder: Offer agent building in assistant greetings (#36073) (e2e719c)
• API: Add endpoint to create role-mapping rules (#36032) (40a0f2a)
• API: Add endpoint to get a single role (#36279) (7bd7dac)
• API: Add endpoint to list all roles (#35609) (48893ee)
• API: Add endpoint to update a custom role (#36213) (28bf536)
• API: Migrate workflow tags endpoints to decorator pattern (#35829) (6ab3f5e)
• Confluence Node: Add Confluence Cloud OAuth2 credential (#35732) (f9fd8a8)
• Confluence Node: Add page get operation with full sub-tree support (#36217) (d9fa966)
• core: Add AI Assistant setup funnel telemetry (#36391) (490b368)
• core: Add an inline Available tools card to connect MCP servers from the assistant chat (#35332) (fb430aa)
• core: Add env var to skip workflow history compaction on startup (#36099) (5c61888)
• core: Add get_workflow_versions_diff MCP tool (#35492) (ff7955f)
• core: Add MCP support for folder creation and workflow moves (#35964) (d4dcc1c)
• core: Add MCP tool to read data table rows (#35956) (de944d2)
• core: Add n8n Sandbox support to Agent Knowledge (#35811) (6a30736)
• core: Add new agent slack integration (#35591) (ca82fd9)
• core: Add one-off operation flow and insertion-semantics rules to AI Assistant (#36184) (51aa6fb)
• core: Add writable workspaces to agents (#36033) (01ce449)
• core: Advertise the MCP 2026-07-28 routing headers in CORS (#35471) (a14ab0b)
• core: Auto-expose new workflows to MCP from settings via toggle (#35828) (a74fbab)
• core: Coalesce a Schedule Trigger node's catch-up runs after downtime (#35524) (026cee3)
• core: Deprecate Array.merge from expressions, and add Array.mergeIntoObject (#36161) (04e76a3)
• core: Enable Agent sandboxes through Instance AI setup (#36056) (5f9602b)
• core: Isolate Agent sandboxes by principal (#36203) (ce1b521)
• core: Let agent builder inspect and update schedules (#36449) (f7459c8)
• core: Make n8n User Auth (OAuth2) generally available (#35900) (5bfcde5)
• core: Redesign the account connect panel on hosted forms (#36344) (bf28af6)
• core: Refuse durable pollers when an active workflow has duplicate trigger node ids (#36340) (faf4dc3)
• core: Restrict end-user credential creation to team projects (#36025) (e243656)
• core: Restrict workflow review decisions to assigned reviewers (#36040) (64dcebb)
• core: Send projectId to the AI Gateway for usage attribution (#35885) (3300833)
• core: Skip update approval for workflows created in the same Instance AI session (#36054) (dfa841a)
• core: Support workflow version policies in package exports (#35962) (aecd164)
• core: Tell the assistant which services are connected and what tools they expose (#35931) (3571c09)
• Create workflow tools from the agent builder (#36460) (35434b0)
• Discord Node: Add member moderation actions (#33486) (6bd31e5)
• editor: Add docked agent preview chat (#35773) (42130c5)
• editor: Add preview chat to SessionTimeline view (#36128) (dbb28af)
• editor: Display authors on the review details view (#35897) (d35bb3e)
• editor: Improve agent session tool call feedback (#36346) (b27a53e)
• editor: Integrate n8n credits into the node credential picker (#35758) (b2df4c8)
• editor: Let users update review descriptions (#36069) (cbb5577)
• editor: Link review success toasts (#35888) (3a4f356)
• editor: Show character counters on review title and description inputs (#36177) (998fc85)
• editor: Split workflow review inbox sections (#36216) (dd82601)
• editor: Switch credits pill after a top-up or depleted allowance (#36239) (516c19e)
• editor: Update NumberInput styling (#35937) (a319c76)
• editor: Update SegmentControl component (#34447) (60736dc)
• Gate Browser Use setup steps on extension detection (#36235) (7025284)
• Hide n8n-connect usage when aiGatewayCloudUbb is enabled (#35978) (e7fa252)
• Improve Browser Use connect conditions (#36215) (fee8450)
• lmChatOpenRouter Node: Add provider routing options (#24822) (d7dcba5)
• MCP Server Trigger Node: Add server instructions option (#35945) (bfd2746)
• MiniMax Node: Add M3 and H3 model support (#35935) (aee23f7)

Bug Fixes

• AI Agent Node: Stop pre-tool-call text leaking into agent responses (#35212) (d5845df)
• core: Apply redaction policy to Code node console output (#35121) (242da02)
• core: Bound oversized agent tool results (#35759) (8fbcd7e)
• core: Close review requests when a source control pull archives or cascade-deletes a workflow (#35798) (fd366ce)
• core: Compile MCP tool schemas on their declared JSON Schema dialect (#35610) (eeaa425)
• core: Deduplicate OAuth2 authorization URL query parameters (#35949) (0b4b044)
• core: Detect node parameter values the connected credential cannot use (#35633) (5925f5b)
• core: Fail stalled Instance AI model streams fast instead of hanging (#35943) (c04825d)
• core: Fix task runner health check failing (#35808) (9c4a613)
• core: Gate error workflows behind primary readiness (#35634) (c79bd88)
• core: Handle errors from triggered and polled workflow executions (#35689) (1deee72)
• core: Handle out-of-scope display option dependencies (#35845) (9241a72)
• core: Honor dry run on data table row delete (#35713) (76fb3bc)
• core: Ignore undeclared fields in agent resume payloads (#35607) (42754a8)
• core: Keep agent workflow tools linked after renames (#35690) (b4736b7)
• core: Keep database ping loop alive across connection recovery (#35752) (3f2d479)
• core: Keep n8n-docs always loaded so n8n questions do not route to web search (#35537) (e73f0a4)
• core: Keep valid resume payloads intact when ignoring undeclared fields (#35751) (a2c9578)
• core: Nest agent traces under the calling workflow node (#35457) (5d0a424)
• core: Normalize the $fromAI type argument before coercing defaults (#35641) (c0a7674)
• core: Probe azure blob with list instead of exists() (#35719) (8bbc988)
• core: Reattach n8n-sandbox thread sandboxes after restart, idle eviction, and across mains (#35953) (0e7e49b)
• core: Recover unresponsive task runners (#35456) (7a79486)
• core: Reject stale Instance AI confirmations instead of hijacking the live run (#35733) (4555145)
• core: Report failed publishing when imported workflows share a webhook path (#35525) (32f38a3)
• core: Require row read scope when data table writes return rows (#35651) (ae6b256)
• core: Resolve expressions in ephemeral agent tools (#35876) (65083ab)
• core: Return a clear error for a node type with an unknown version (#35196) (a9cde3f)
• core: Run published agent workflow tools as production (#35784) (6cc9b28)
• core: Show Agent references in credential usage (#35409) (a74c6fd)
• core: Show Instance AI model overload errors clearly (#35498) (40ba0dd)
• core: Strip leading BOM before parsing webhook request bodies (#35933) (aa03666)
• editor: Derive workflow home project from shared relation when absent (#35810) (62e6862)
• editor: Disable no-op workflow review updates (#35890) (bf860f3)
• editor: Fix janky spacing between agent capability chips with long labels (#35493) (007400d)
• editor: Focus Markdown editor input before toolbar (#35529) (698d137)
• editor: Keep NDV panels spanning the full container width (#35818) (561af4c)
• editor: Keep Publish button visible in narrow workflow headers (#35502) (1de80ac)
• editor: Lock the AI Assistant canvas while the agent is working (#35339) (1206780)
• editor: Make DropdownMenus more obviously scrollable (#35726) (d3e49b2)
• editor: Preserve new agent artifact lifecycle (#35703) (caeb40e)
• editor: Remove unsupported button type attributes (#35578) (980c9bd)
• editor: Require an explicit answer or Skip on Instance AI questions (#35700) (6f765e9)
• editor: Show agent tool credentials above configuration (#35590) (1ca0708)
• editor: Show dependency pills on views listing more than 100 resources (#35825) (926aa1a)
• Execute Workflow Node: Prevent invalid input mappings (#35767) (34ca40b)
• Fix token data updates and refresh for DCR oauth credentials (#35535) (abe2959)
• Kafka Trigger Node: Stop consumers reliably when a workflow is deactivated or updated (#35069) (03213e7)
• Preserve Agent build intent and refresh artifact names (#35823) (daba594)
• Schedule Node: Apply declared interval defaults to stored rules (#35271) (28d929d)
• Send n8n version on backend posthog flag retrieval (#35621) (1ade7a2)
• SharePoint Node: Point delegated Sites.Selected users at URL or ID mode (#35369) (305ed29)
• Skip setup cards for credentials the workflow already settled (#35701) (4493e5a)
• Use caller's timezone for Insights date range boundaries (#33989) (279bde3)
• X (Formerly Twitter) Node: Update OAuth2 and API endpoints to x.com (#32699) (8ac5a60)

Features

• Add self-hosted AI Assistant onboarding (#35579) (4ae4cc3)
• Add Simplified Custom Auth credential with recipe-guided setup in the AI Assistant (#35056) (53841f1)
• Add task-runners sidecar to the get.n8n.io stack (#35426) (9493631)
• API: Add @Deprecated decorator to the decorated controller platform (#35725) (897ce6a)
• API: Add endpoint to create custom roles (#35522) (d225d03)
• API: Add publishIfActive option to workflow update endpoint (#35813) (0e22fdf)
• core: Add Agent Builder test runs (#35716) (b660ebe)
• core: Add backend form-trigger submission gate for end-user credentials (no changelog) (#35539) (ddcc94f)
• core: Add detailLevel option to MCP get_workflow_details (#35497) (3773c31)
• core: Add Discord as an agent chat channel (#35331) (4e6fc65)
• core: Add HITL to agent builder test runs (#35731) (0df0041)
• core: Add local agent token counting (#35836) (ae1252a)
• core: Add projectConflictPolicy to package import (#35488) (881a14f)
• core: Add telemetry for Simplified Custom Auth templated credentials (#35832) (c485cea)
• core: Auto-close workflow review requests when a workflow is archived or moved (#35772) (a044c0d)
• core: Enable 'instance-ai' module by default and remove startup warning (#35670) (fcc4ef5)
• core: Expose agent test execution through MCP (#35744) (6f761ad)
• core: Expose MCP registry search to the assistant as a tool (#35318) (59278a7)
• core: Extend n8n Connect to Agent Builder node tools (#35402) (104bc5c)
• core: Gate n8n Connect with instance config (#35007) (935cfb9)
• core: Include SDK language rules in the MCP workflow SDK reference (#35183) (1c6e992)
• core: Make Azure Key Vault provider endpoints configurable (#35214) (82e22c9)
• core: Make the vm expression engine the default (#35738) (98e0952)
• core: Migrate the instance MCP server to the MCP TypeScript SDK v2 (#35467) (74631f7)
• core: Persist agent session timelines during execution (#35490) (1546c95)
• core: Reconcile tag ids on name collision when importing packages (#35224) (c9eeb2e)
• core: Support the MCP 2026-07-28 discovery handshake on the instance server (#35470) (145863c)
• core: Surface decision eligibility on the review detail (#35391) (5e4a20d)
• core: Teach the AI assistant to organise workflows into node groups (#35646) (5bf5f38)
• core: Warn on startup when Postgres is below the supported range (#35495) (c72b14f)
• editor: Add Changes diff tab to workflow review detail pane (#35431) (6c8197e)
• editor: Add ChatMessage to @n8n/design-system (#35461) (38f0691)
• editor: Add more Markdown editor toolbar options (#35630) (32db83c)
• editor: Add review detail metadata (#35638) (cf13bc0)
• editor: Allow adding a workflow version description when submitting for review (#35640) (5f0e464)
• editor: Disable command bar in canvas-only mode (#35542) (fda3301)
• editor: Enable enhanced HITL Slack/Telegram (#35411) (5d501e3)
• editor: Improve agent file upload visibility (#35513) (75a0cdf)
• editor: Name the pinned workflow version when submitting for review (#35566) (fe37fe3)
• editor: Restore one-click connector for ChatGPT MCP client (#35396) (2058a16)
• Extract the get-n8n stack definition into a versioned standalone file (#35620) (8a1645a)
• Form Trigger Node: Add credential connect UI for end-user credentials (#35347) (a89dc5d)
• GitHub Node: Add timeout option to Dispatch and Wait for Completion (#35837) (a6f07db)
• Kafka Node: Add compression options to version 2 (#35727) (21b52fb)
• Kafka Node: Add version 2 to send messages via the new Kafka library (#35450) (d2901bd)
• Load Instance AI models dynamically (#35927) (269a45d)
• Merge Node: Add "Append" and "Combine" search aliases (#35709) (cc98292)
• Salesforce Trigger Node: Add OAuth2 JWT authentication support (#32257) (eda2496)
• Slack Node: Use Real-time Search API for message search (#35291) (204f346)

Performance Improvements

• core: Resolve webhook description fields via declared native resolvers (#35404) (18c2d71)

Bug Fixes

• ai-builder: Treat bound stored credentials as settled in setup analysis (#35340) (5decab2)
• AWS Bedrock Chat Model Node: Enable TCP keepalive on Bedrock runtime connections (#35323) (78e27ff)
• core: Add incremental SSE response headers (#35342) (7b8818d)
• core: Add reactions:write to Slack agent app manifest scopes (#35238) (43831eb)
• core: Annotate pre-existing validation warnings in MCP update_workflow (#34944) (cca4d8d)
• core: Apply AI request timeout even without a proxy (#34992) (ab3ed79)
• core: Block deletion of the SSO role mapping default condition role (#35086) (587b23d)
• core: Clarify MCP trigger info for unsupported production triggers (#35209) (21dc3ad)
• core: Classify agent execution pulse with run_type (#35346) (8f4816e)
• core: Classify Instance AI error reports by severity and quota cause (#35353) (a97e305)
• core: Classify no-op pseudo triggers as persisted (#35287) (2bc0f30)
• core: Default AI-created workflows to v1 execution order (#35277) (d0d0b7a)
• core: Disable Slack app Home tab (#35412) (c0d09a5)
• core: Emit OTel spans for queue mode executions (#35357) (e976bd0)
• core: Exclude AI assistant verification runs from prod execution counts (#35405) (4accb5b)
• core: Fix broken documentation links in AWS (Assume Role) credential (#34763) (1e39ea5)
• core: Fix SSE push backend connections in production (#35327) (c0a8f02)
• core: Harden axios error handling against non-string error stack (#35073) (b329d57)
• core: Import security audit risk reporters with a file extension (#35263) (8e62ca2)
• core: Improve task broker resilience when a runner dies (#35298) (c15bbca)
• core: Keep agent channel setup separate from publishing (#35468) (9f2f315)
• core: Keep external secrets available while provider connections reload (#35237) (f3b052a)
• core: Keep waitTill when storing worker job results on main (#34958) (7f50297)
• core: Limit the size of webhook responses relayed through the queue (#35032) (bdf33c1)
• core: Prefer n8n credits covered nodes in Instance AI workflow builds (#35019) (b2af755)
• core: Preserve cause on execution errors (#35216) (0d4c3a7)
• core: Preserve credential field expressions when caching preAuthentication tokens (#35064) (03894ee)
• core: Preserve saved node positions when the assistant edits a workflow (#35268) (7034666)
• core: Propagate sub-agent tool approvals (#35368) (edc377c)
• core: Recover enqueued executions after a restart (#35059) (3872950)
• core: Refresh end-user credential connection status after save (#35131) (a66fabb)
• core: Return 405 for GET requests to the instance MCP endpoint (#34835) (982a906)
• core: Route crash-loop auto-deactivation through the workflow unpublish flow (#35097) (eb0d966)
• core: Skip error workflow dispatch for AI builder verification runs (#35247) (1cedd9f)
• core: Sort node version directories by numeric version (#35206) (1f3d48d)
• core: Tolerate JSON Schema patterns incompatible with the regex u flag (#35320) (3fe8d6e)
• core: Unify workflow trigger teardown and make it best-effort (#35273) (9e452bb)
• Deep-merge task metadata to preserve nested tracing attributes (#35166) (b682696)
• editor: Add configurable origin allowlist for editor postMessage handling (#34674) (f9b4bd5)
• editor: Add executions quota tooltip to trial banner icon (#34872) (50b56ac)
• editor: Clarify Slack HITL "Capture Who Responded" helper text (#35432) (fff29ec)
• editor: Create agent-builder credentials in the agent's project (#35286) (33caa35)
• editor: Default credential modal to requested auth type and disambiguate managed OAuth2 options (#35079) (6676373)
• editor: Dismiss archive toast immediately after permanent delete (#35207) (12f1fcc)
• editor: Do not fail OAuth flows when the provider's COOP policy makes the popup read as closed (#34404) (b81d79a)
• editor: Fix icon overlap in end-user credential connection banner (#35130) (2837a68)
• editor: Gate agent reasoning by model support (#35253) (5046f24)
• editor: Guard optional fields when reading public settings (#35281) (ba21bea)
• editor: Keep Enter selection working when node search ends with a space (#35046) (6b9b890)
• editor: Keep read-only execution background in sync (#35245) (cc5f334)
• editor: Mention n8n User Auth webhook mode in end-user credential warning (#35222) (3b69d54)
• editor: Preserve line breaks in multiline secret credential fields (#35157) (ad02a26)
• editor: Remove brackets from docs link in credential setup assistant help (#35028) (9cdcc6d)
• editor: Rename preview AI Agent node to V2 (#35285) (703c600)
• editor: Show node descriptions for installed community nodes (#34914) (0839326)
• editor: Size settings save bar off its column so its content aligns with settings rows (#34967) (982fa19)
• editor: Update AI Agent preview label (#35102) (c9cf9bb)
• editor: Wait for animated zoom-in transition to settle (#35244) (d512f5c)
• Enable Save and clear stale OAuth state on auth method switch (#35367) (7eabd74)
• Execute gated tool after approving Human Review in manual chat (#34881) (b29f38b)
• Fixes see all button tracking on aia template examples (#35451) ([ad54d0cd63affd87dc134532825affd85f6a4233))
• Form Node: Skip parent nodes without run data when returning binary from form ending (#35336) (d3e761e)
• Google Vertex Chat Model Node: Preserve Gemini thought signature on single tool calls (#34797) (c6e5ecd)
• Grist Node: Restore the stored base URL of legacy credentials (#35229) (3a2af96)
• HTTP Request Tool Node: Pass error response bodies to the model (#34509) (f443349)
• MCP Server Trigger Node: Save execution data only after tool call completes (#35239) (c1f5577)
• Notion Node: Mark title as required for database page create in v3 (#35334) (736f570)
• Preserve AI Assistant sandbox provider selection (#35122) (923a964)
• Release Snowflake connection when a statement fails (NODE-5163) (#32932) (dc776f6)
• Schedule Node: Run non-dividing minute intervals by elapsed time (#35062) (3a5a4a6)
• Skip redundant workflow edit approval in AI Assistant (#35423) (852fed1)
• Slack Node: Add groups:write OAuth scope for private channel actions (#35288) (e4e33e3)
• Support n8n credits on nodes with multiple credential types (#35190) (47569fc)
• Validate Send and Wait custom forms before sending (#35262) (ca54f32)
• Webhook Node: Don't flag Respond to Webhook nodes owned by a Wait node as unused (#33911) (b7e8850)

Bug Fixes

• ai-builder: Halt workflow verification at send-and-wait gates on loops (#34809) (e904939)
• ai-builder: Keep assistant replies in the user's language during tool-heavy turns (#34761) (5a64744)
• ai-builder: Make channel config dropdown enabled - Linear and Telegram - in AIA agent builder (#34706) (6b40211)
• ai-builder: Make labels be more specific about access token for Slack setup (#34893) (490b722)
• ai-builder: MCP Connections failures are non-blocking for agents (#34722) (3301e12)
• ai-builder: Preview chat link fix (#34659) (54db083)
• ai-builder: Provision agent prerequisites before build-agent delegation (#34802) (fec6cee)
• Airtable Node: Support matching array field values in update operation (#31517) (e07eab8)
• AMQP Trigger Node: Cap concurrent executions at the configured messages per cycle (#34787) (d2672a6)
• Baserow Node: Format Get Many date filter values for Baserow API (#32723) (b5da074)
• Cohere Chat Model Node: Route chat requests through the v2 endpoint (#34878) (4006c22)
• core: Accept 5-field cron expressions in schedule trigger (#35006) (27edc54)
• core: Advertise OAuth protected-resource metadata URL on MCP server 401 responses (#34571) (37bb354)
• core: Avoid loading execution data during credentials security audit (#34876) (4212fc2)
• core: Classify masked Instance AI stream failures as quota exhaustion via credit re-check (#34553) (bd89cfc)
• core: Ensure license device fingerprint meets minimum length (#33852) (9140a06)
• core: Expose workflowPublishingPolicy in the package import CLI command (#34632) (3117e45)
• core: Fail fast with a node error when a Data Table node references a missing table (#34610) (68c7b55)
• core: Fall back to the run's resolved model for AI Assistant verification LLM calls (#34627) (a8c90f8)
• core: Fix MCP workflow update failing for active workflows on SQLite (#34964) (bc88dc4)
• core: Handle MCP OAuth2 token expiry and PKCE negotiation (#34494) (c7b90d0)
• core: Include RFC 9207 iss parameter on OAuth authorization error redirects (#34751) (eca731c)
• core: Keep MCP server display names free-form in agent config (#34931) (5339b5e)
• core: Normalize workflow rollup timestamps (#34670) (0316336)
• core: Preserve the underlying error as cause on Instance AI workspace file reads (#34759) (206a258)
• core: Prevent concurrent instance startups from racing database migrations (#34685) (4d861d1)
• core: Prevent unsupported waiting operations in agent tools (#34587) (3c278f0)
• core: Publish workspace packages required by n8n at runtime (#34886) (0c613b4)
• core: Redact a sub-workflow's own execution record per its own policy (#34621) (d8d89cc)
• core: Redirect form-resume waiting requests to the form endpoint (#34725) (5dfa49b)
• core: Reject workflow deletion while unpublish is still in progress (#34836) (9e09ff4)
• core: Require row read scope for data table CSV export (#34127) (8171aa8)
• core: Resolve synthetic tool nodes to the requested version (#34850) (6e12426)
• core: Return correct webhook URL in MCP get_workflow_details trigger info (#34927) (5542c1b)
• core: Sanitize secret values before persisting to agent memory (#34622) (edbed4f)
• core: Serve RFC 9728 metadata at bare /.well-known/oauth-protected-resource (#33776) (3e0188c)
• core: Sign S3 object paths with strict RFC 3986 encoding (#34694) (8e5fdb4)
• core: Skip Sentry reports for Instance AI errors that self-declare a warning level (#34617) (3bb3835)
• core: Stop Instance AI follow-up runs from looping when they keep failing before the agent starts (#34767) (5aac66d)
• core: Strip null optional node fields from AI-generated workflows (#34668) (94e505a)
• core: Support fractional community node versions with PostgreSQL (#34717) (48c0e70)
• core: Surface HITL suspend/resume content in Instance AI trace turns (#34599) (d8c3fad)
• Databricks Node: Change default tokenExpiredStatusCode from 401 to 403 (#34325) (6f3d2b9)
• DeepSeek Node: Preserve reasoning_content on tool-calling turns (#34924) (4d247a1)
• editor: Add document title and adopt new settings layout on migration report pages (#34609) (0164216)
• editor: Allow LDAP users to configure n8n 2FA in personal settings (#34655) (2b1e4b8)
• editor: Center empty state content vertically on short viewports (#34820) (359d82f)
• editor: Clamp persisted sidebar width when expanding the main sidebar (#34923) (4f7c725)
• editor: Debounce node creator search filtering (#34828) (25c5a73)
• editor: Don't show quick connect for non-main auth fields (#34449) (6195471)
• editor: Fix an issue in some Safari versions that prevented copying invite links (#34620) (e75e412)
• editor: Fix focus parameter button breaking selection in credential dialog (#34453) (ee029b8)
• editor: Html strings for table names are escaped (#24522) (f4365b1)
• editor: Inject instance UTM parameters in all links to the templates website (#34790) (d5b5d8e)
• editor: Keep chat typing indicator visible until response arrives (#34768) (4fdf3ed)
• editor: Keep NDV node hints visible after execution and render them in a single pane (#34920) (082b5d9)
• editor: Keep Switch fallback outputs available with unresolved expressions (#34698) (a0f6861)
• editor: Manage and other permissions checkboxs stuck in half-selected state during member selection (#34726) (0e186ad)
• editor: Preserve agent tool name translations (#35039) (fd5bc7d)
• editor: Preserve canvas groups when converting a selection to a sub-workflow (#34664) (1666f1e)
• editor: Prevent reactive feedback loop when opening workflow diff (#34897) (962ff56)
• editor: Reassign users when deleting a custom instance role (#34642) (fa0abd8)
• editor: Refresh subworkflow input schema from draft on parent open (#34522) (734f957)
• editor: Remove episodic memory callout and knowledge base publish requirement (#34888) (771d038)
• editor: Rename preview AI Agent node to V1 (#34714) (359e1fb)
• editor: Replace invalid link (#34652) (87115d6)
• editor: Restore agent channel credential setup (#34737) (ac839bb)
• editor: Restore horizontal scrolling of NDV panel header controls (#34824) (0745526)
• editor: Stabilize icon picker scrolling (#34596) (e67c119)
• editor: Update copy for executions tab empty state (#34731) (1138f11)
• Form Node: Properly handle quotes in Form Trigger Node name (#34650) (95c36b8)
• HTTP Request Node: Include error body in continueOnFail mode (#34729) (d0b254c)
• Keep agent preview streams responsive (#35035) (8d46c6e)
• MCP Client Tool Node: Close cached MCP client sessions when their execution finishes (#34397) (ec5f503)
• Microsoft Teams Node: Respect limit server-side in getAll operations (#34851) (ded1697)
• N8n Node: Update credential test to use an endpoint with no extra scopes (#34605) (4622b35)
• Parse structured output from content-block model responses in chain nodes (#34928) (1713d9a)
• Report real exported entity counts in package export (#34995) (f3fd559)
• Return reversed array when calling .reverse() (#34625) (cc4dbf9)
• Serialize dates and route binary columns to output in database nodes (#34124) (26ae903)
• Slack Node: Handle user-list rate limits and surface real load errors (#34743) (2268149)
• Treat blank optional enum form fields as unset in package import (#35010) (4abbc89)
• Validate loadOption parameter in GSheet and Notion nodes (#34695) (1f82bee)
• Wikipedia Tool Node: Surface tool errors as actionable node errors (#34643) (3f1b35d)
• Wordpress Node: WordPress Get Many adds before filter for posts and pages (#19790) (90f1430)

Features

• Add admin-managed instance credentials (#34364) (7d8426f)
• Add require-files-array ESLint rule for community node packages (#34792) (d0adaf7)
• ai-builder: Add Fix with Assistant for failed agent preview tools - pass single execution context (#34616) (9626891)
• ai-builder: Add support for verified community nodes as agent tools (#34922) (3d281ec)
• ai-builder: Agent session records direct to session chat, not trace (#34997) (f62cc63)
• ai-builder: Format zod erros on agent config - better toast msg (#34867) (bac8deb)
• ai-builder: Single preview chat + trace modal (#35033) (687a00e)
• ai-builder: Support execution scenarios for first-class agents in evals (#34384) (5fd800e)
• ai-builder: Tidy up tool names and agent builder tool UX (#34646) (decb322)
• Allow custom OAuth scopes for Microsoft Azure Monitor, Dynamics, Graph Security and Azure Storage (#34612) (69c8633)
• Allow custom OAuth scopes for the remaining Google credentials (#34631) (4a8dd5b)
• API: Add credentialResolverId, timeSavedMode & binaryMode properties to workflow settings schema (#34330) (9ac95b6)
• API: Add endpoint to list workflow version history (GET /workflows/{id}/history) (#34656) (91751c3)
• API: Add public API endpoints for OpenTelemetry configuration (#34429) (cd1e48e)
• API: Add workflow publish/unpublish public API endpoints (#34745) (e9933bd)
• API: Deprecate workflow activate/deactivate public API endpoints (#34771) (05c691b)
• AWS Bedrock Chat Model Node: Surface inference-profile models in the default model picker (#34983) (cb28555)
• Configure the AI Assistant through a redesigned instance settings page (#34493) (4078318)
• core: Add active_workflow_info and make workflow_info leader-only (#34987) (78e55b5)
• core: Add availableInMCP column to agents (#34665) (fdd4e33)
• core: Add credential-unnecessary-password community node lint rule (#34791) (95da849)
• core: Add eligible-reviewer API types and reviewer ids to revie… (#34703) (60112eb)
• core: Add instance credential database schema (#34709) (13becf3)
• core: Add N8N_SCHEDULER_MAX_ATTEMPTS to configure scheduler dead-letter threshold (#34633) (29f2fac)
• core: Add storedAt column to agent_execution (#34858) (0b4bbd0)
• core: Add telemetry events for agent publishing, builder capabilities, and interactive flows (#34887) (8017b3d)
• core: Add workflow review request entities and migration scripts (#34062) (156ac00)
• core: Add workflow.deactivate external hook (#34746) (697174f)
• core: Allow Storybook components to be viewed in light and dark mode (#34361) (e592b21)
• core: Auto-include sub-workflows in package exports (#34218) (09c90f9)
• core: Create reviews page and render inbox (#34357) (b2cbcc1)
• core: Detect and heal published-version skew in trigger reconciliation (#34877) (3f2bc68)
• core: Emit agent run spans through the OTel module's tracer (#34460) (e01e996)
• core: Include acting user identity in workflow lifecycle external hooks (#34769) (efa86c6)
• core: Infer structured output from example JSON in AI Agent Node (#34779) (0ec49b3)
• core: Nest delegated sub-agent spans under the parent agent trace (#34720) (bd6f617)
• core: Return open and closed counts for the review inbox tabs (#34789) (f4edeeb)
• core: Review submission flow endpoints and toggle (#34649) (6d38f2e)
• core: Store agent execution logs in blob storage (#34796) (a647aef)
• core: Support legacy sub-workflow dependencies in package exports (#34398) (41660d0)
• core: Validate missing node types on package import (#34598) (4044d58)
• Default package import workflowIdPolicy to source (#34989) (1f4e654)
• editor: Add N8nStatusDot component (#34963) (f758a4b)
• editor: Add workflow review submission flow (#34520) (5939eb5)
• editor: Adds modal to see all projects a user can access in a list (#34619) (2748e1a)
• editor: Keep review-required toggle synchronized with open reviews (#34606) (ca0c5f4)
• editor: Migrate OpenTelemetry settings page to new instance settings UI (#34965) (91e1276)
• editor: Polish end-user credential setup modal and NDV states (#34766) (01e0639)
• editor: Revamp MCP settings view with instance settings components (#34041) (e2840a7)
• editor: Show confirmation modal when updating a custom instance role with assigned users (#34544) (6dc2079)
• editor: Show reviewer and requester avatars and a status indicator on review inbox items (#34885) (2ea7da2)
• editor: Sync a new workflow version into an existing open review (#34842) (5a97bd1)
• editor: Track Instance AI entry point as action_source on builder messages (#34671) (c0fe8ba)
• Gmail Node: Add warning notice when Simplify is disabled (#34611) (72a311a)
• Microsoft Excel (SharePoint) Node: Add node for Excel workbooks in SharePoint document libraries (#34847) (d67b9cd)

Performance Improvements

• core: Skip allowed-methods lookup on successful production webhook requests (#34833) (bf8f5d8)

Bug Fixes

• ai-builder: Honor eq @version conditions in generated node type definitions (#34232) (9a48bc5)
• ai-builder: Open agent chat preview on the same tab on instance AI (#34441) (6d56cee)
• ai-builder: Resurface channel edit modal on AIA agent builder's artifact mode (#34257) (0984a1d)
• ai-builder: Scope ToolIoView synth execution under a synthetic document store (#34588) (ab12ee5)
• ai-builder: Wire thread conversation history - with caps - for agents with slack channel (#34354) (8c1d17f)
• Allow devDependency imports in linter (#34335) (26caaa8)
• API: Fix broken public API playground server selection (#34077) (f24570f)
• AWS Bedrock Chat Model Node: Default guardrail version to working draft when not set (#33555) (013c34c)
• core, editor: Clarify credential setup outcomes and add requireUserSelection (#34268) (65e267b)
• core: Acquire expression isolate for MCP Trigger tool calls in queue mode (#34491) (eed8f3f)
• core: Add a per-attempt timeout to AI assistant service calls (#34341) (f191548)
• core: Add project ID and project name to log stream events (#33854) (a89817d)
• core: Alert on unusable Instance AI sandbox snapshots and gate the release on snapshot health (#34344) (080c3cc)
• core: Allow publishing end-user credentials with Send-and-Wait nodes (#34462) (c59f5d8)
• core: Bind dynamic credential tokens to a user ID (#34073) (fd261be)
• core: Cancel Instance AI tool runs promptly when generation is stopped (#34433) (4f8fef1)
• core: Cancel Instance AI workspace tools promptly on stop (#34551) (267fd85)
• core: Close the durable scheduler's record-then-dispatch effect boundary (#34014) (e22680b)
• core: Coerce AWS request header values to strings before signing (#34534) (d6f26cf)
• core: Count AI assistant workflow test runs as manual executions in statistics (#34145) (9842c2c)
• core: Create proxied Instance AI sandboxes from snapshots only (#34328) (29c5d72)
• core: Delete executions in batches when removing workflows, projects and folders (#34265) (0b809c9)
• core: Exclude in-flight Instance AI groups from history reads on non-driving mains (#34345) (50c3d88)
• core: Fix AI Agent not seeing tools connected through HITL tools (#34271) (bdff8f4)
• core: Fix change in width of all dropdowns in UI (#34249) (87cdf3d)
• core: Lint community packages against their provenance-attested source (#34214) (5f3d139)
• core: Persist MCP servers when credential setup is skipped (#34399) (7c7506d)
• core: Prefer direct tools for agent capabilities (#34466) (969a68e)
• core: Preserve agent builder question answers (#34414) (9882c5c)
• core: Preserve local credential fields absent from source contro… (#34173) (0a4ddde)
• core: Preserve node aliases when generating AI tool variants (#34162) (8284460)
• core: Prevent getIncomingData from throwing on a missing connection type (#34285) (9d05fbd)
• core: Prevent sub-workflow failures after transferring a deleted user's workflows (#33772) (7a56ade)
• core: Replace https agent for 'Ignore SSL issues' OAuth2 requests with one that respects proxies (#34234) (338f186)
• core: Require execution mode for MCP workflow executions (#34155) (79012f6)
• core: Resolve @n8n/expression-runtime to its CJS build under Node (#34463) (09f5ade)
• core: Retry transient AI assistant service errors during Instance AI environment setup (#34324) (5b7df71)
• core: Retry transient sandbox file writes (#34319) (80ea25b)
• core: Show a single error toast when a manual execution fails pre-flight validation (#34541) (8d1fc02)
• core: Sign SES requests with the ses service name (#34270) (2e31230)
• core: Skip reporting axios errors thrown as unhandled node errors (#34570) (33f1c36)
• core: Stop reporting quota-exhausted Instance AI runs to Sentry and isolate report request context (#34549) (6f0804e)
• core: Update error message on file write (#33833) (afe603fc)
• Correct build-command quoting in standalone package release (#34258) (1301bba)
• Correct end-user credential validation, re-evaluation, and identity-hook recognition (#34094) (65da749)
• Default new agent MCP tool transport to httpStreamable (#34092) (9c3f7fa)
• Do not lose scenario results on a budget/timeout abort (#34419) (40c5b76)
• editor: Allow self-hosted OpenAI credentials for episodic memory (#34558) (e162724)
• editor: Auto-ungroup invalid groups on workflow save (#34456) (d5d3da6)
• editor: Avoid next prev buttons from being disabled (#33774) (a2fd7f7)
• editor: Decouple MCP redirect URI controls from env-lock flag (#34184) (64318a8)
• editor: Dissolve single-node canvas group when converting its nodes to a sub-workflow (#34334) (93e1b7f)
• editor: Improve Message an Agent panels (#34461) (e8b005e)
• editor: Include Chat, AI Assistant, and MCP settings under 'Instance settings: Manage' custom role permission (#34455) (fa5476c)
• editor: Keep dropdown tooltips above menus (#34547) (051eee1)
• editor: Link end-user credentials docs from credential modal (#34406) (09d1e96)
• editor: Make AI assistant quota-exhausted error states explicit (#33847) (4ef0d05)
• editor: Make selector dropdowns usable in Instance AI workflow setup (#33971) (487594c)
• editor: Polish pass on the custom instance roles (#34122) (297e252)
• editor: Prevent AI Agent from auto adding a chat connector on creation (#34259) (865035d)
• editor: Prevent users from clicking workflows within insights that they do not have access to (#34362) (e68fb3a)
• editor: Prevent workflow actions menu from being cut off (#34278) (8ba28dc)
• editor: Reconcile stale Instance AI run state on reload and stop (#34432) (8879b87)
• editor: Refresh editor checksum on workflow activation while editing (#34095) (7ebeb1e)
• editor: Refresh editor checksum on workflow deactivation while editing (#34315) (c83eab0)
• editor: Remove extra top spacing in sticky note markdown (#34116) (114c74d)
• editor: Rename agent tasks to schedules (#34326) (1ab30cb)
• editor: Restore hosted chat Markdown styles (#34176) (d6b9234)
• editor: Restore previous route when closing session trace (#34423) (e8922cb)
• editor: Restrict setup credential dropdown to pinned type (#34252) (454e0d3)
• editor: Show only the latest node as executing during manual executions (#34182) (6faca89)
• editor: Trigger options menu from node details header add button (#34212) (3b6af51)
• editor: Wrap long keyboard shortcut tooltip labels within max-width (#34135) (eb6a4a1)
• Even out workflow metadata divider spacing (#34132) (90f25e2)
• Extend orphan message cleanup to handle trailing orphans from memory trimming (#34385) (96264a0)
• Gate agent knowledge base table on AI Assistant proxy availability (#34366) (77880a3)
• Gmail Node: Handle multi-address Reply-To in the reply operation (#34312) (0b8ad18)
• Google Workspace Admin Node: Not able to reactivate the user (#33937) (f43d723)
• HTTP Request Node: Sign non-standard AWS endpoint hosts with the correct region and service (#34081) (0e8420b)
• Microsoft Excel Node: Resolve service principal target per input item (#34112) (afc8a87)
• Microsoft OneDrive Node: Resolve service principal target per input item (#34111) (578545c)
• Microsoft Outlook Node: Resolve service principal mailbox per input item (#34110) (831e054)
• Microsoft Teams Node: Validate Graph path IDs under all credential types (#34065) (e43a162)
• Microsoft To Do Node: Resolve service principal target per input item (#34109) (9b2479c)
• Postgres Node: Return DATE and date/time array columns as strings (v2.7) (#34050) (17eb819)
• Provide provider-accurate response shapes for evals (#34418) (1b173c7)
• QuickBooks Node: Initialize headers object in quickBooksApiRequest (#34291) (83dd194)
• Report an unverifiable unit as notVerified, not a silent pass (#34421) (7d6fd4c)
• Resolve modules on windows (#34167) (9f0a6fa)
• Salesforce Node: Pass ParentId when creating or updating a Case (#33775) (fffee46)
• Serialize date output in FTP, Set, IMAP and Unleashed nodes (#34205) (391deb9)
• Split Out Node: Properly handle if "Fields to split out" is not a string (#34148) (7998940)

Bug Fixes

• Add tooltips to node hover actions (#33777) (715cdcb)
• Agent Node: Fall back to guardrails input and hide auto prompt source without a chat trigger (#33762) (2fbd6c5)
• AI Agent Node: Remove assistant tool call redundant message and simplify chat tool response (#33640) (704d956)
• Build API playground URL with a slash-safe join on settings/api (#33272) (3e12a5b)
• Cancel leaked assistant unread timer on stream stop and disposal (#33359) (161392a)
• Cap auto-detected editor rows within NDV boundary (#33727) (5c20436)
• Chat works when running on separate webhook server (#33724) (33e490d)
• core: Acquire expression isolate when resolving node inputs (#33759) (5fa42f4)
• core: Acquire expression isolate when resolving node parameters (#33757) (3865048)
• core: Add N8N_MCP_BASE_URL for split-hostname MCP OAuth deployments (#34028) (17905b5)
• core: Allow extra properties in MCP search_workflows output schema (#33057) (1bb253e)
• core: Bound Postgres pool teardown during DB connection recovery (#33140) (509ab6b)
• core: Construct execution errors correctly when Error.prototype is frozen (#33897) (fffa423)
• core: Decouple executions visibility from the sharing license feature (#33694) (4623bb4)
• core: Exclude published versions from workflow history prune (#32239) (bde5f08)
• core: Guard against null run-data slots in execution redaction (#33718) (c9590f3)
• core: Handle manual execution without a destination node (#33156) (ec68851)
• core: Persist MCP Server Trigger tool calls in queue mode (#33383) (0a067ee)
• core: Propagate sub-workflow credential usage to the parent execution (#33674) (993e1c8)
• core: Reconcile data table name collisions on source control pull (#33867) (328e07c)
• core: Reconcile per-user connections when a private credential is moved (#33630) (136e774)
• core: Reconcile stale AI Assistant mocked-credential simulation plan before workflow verification (#33808) (2d42b3f)
• core: Report auto-bound credentials from AI Assistant workflow builds (#33802) (a1df115)
• core: Report node errors in workflow verification (#33576) (3aa3ffd)
• core: Run database connection recovery only for Postgres (#33731) (a3e6a56)
• core: Serialize circuit breaker options (#33909) (b6bf7b0)
• core: Settle webhook execution promise on early errors (#33872) (7cf79d1)
• core: Skip webhook auth for editor test executions and scope basic auth realm per webhook (#33823) (6660c45)
• core: Support bare models for custom AI Assistant endpoints (#34016) (0fee78b)
• core: Support custom OpenAI-compatible model endpoints in AI Assistant (#33836) (b544b14)
• core: Surface vector store provider errors as actionable node errors (#33508) (8526bc0)
• Cron Node: Remove HTML line breaks from notice text (#33991) (7496201)
• Decompress small ZIP64 archives without false size-limit error (#33039) (d472e14)
• editor: Add labels to buttons in logs view overview row (#33203) (4a741f3)
• editor: Clarify why AI workflow setup cannot continue (#33917) (421bd6f)
• editor: Correct documentation link (#33692) (52a48f0)
• editor: Disable private credential connect and actions in execution view (#33766) (80f99eb)
• editor: Disable view publish timeline action for new workflows (#33901) (ba57f6f)
• editor: Fix concurrent executions label when manual run is active (#33660) (2a0ea0c)
• editor: Fix What's New dialog layout and restore close button (#33972) (383f18c)
• editor: Highlight Instance AI cards that are waiting for user input (#33959) (de0389d)
• editor: Improve private credentials UI copy and layout (#33930) (55addc8)
• editor: Keep AI Assistant thread state intact on editor hand-off (#33895) (61a395c)
• editor: Keep credential connect banner below the type selector (#33806) (c6264b2)
• editor: Lift 5k character limit in agent builder prompts (#33921) (499f75a)
• editor: Make Slack setup snapshots row horizontally scrollable (#33977) (008852c)
• editor: Preserve valid model selection when switching credentials (#33820) (126b3da)
• editor: Prevent duplicate $fromAI keys when editing tool node fields (#33892) (b9c360a)
• editor: Render node:* icons in credentials (#33887) (a7ca661)
• editor: Restore correct height of credential modal sidebar tabs (#33926) (f190c32)
• editor: Restore small tag size in personalization survey multi-selects (#33856) (1bea412)
• editor: Restrict assignment fields in AI Assistant workflow setup (#33968) (678b9e0)
• editor: Simplify n8n Connect messaging in publish and top-up modals (#33662) (82814dc)
• editor: Stop executions list from firing endless load-more requests (#33574) (0e8de74)
• editor: Unify onboarding empty states across overview and project tabs (#33670) (eeaa26e)
• editor: Use the show-suffix property to display chevron (#33803) (e7e44fe)
• editor: Using the correct variant for secondary buttons (#28959) (3c2208a)
• Form Trigger Node: Trim whitespace from email fields (#33507) (bfc0406)
• Gmail Node: Stringify expressions for parameters that expect strings (#33800) (3bfcbe4)
• Google Docs add default drive id when searching folders (#33765) (0010cf6)
• HTTP Request Node: Include UI query parameters when signing AWS requests (#33679) (36a834d)
• HTTP Request Node: Sign AWS PrivateLink (vpce) endpoints correctly (#33769) (36411ea)
• LinkedIn Node: Add scopes to get users even with organization support (#33934) (3681a8d)
• MCP Client Tool Node: Stop wrapping tool arguments in a value object (#33685) (ba62417)
• MCP Server Trigger Node: Prevent memory leak under active MCP client polling (#33752) (0ca27b7)
• Microsoft Agent 365 Node: Support stable Agent 365 MCP tooling (#30866) (87088c1)
• Microsoft Teams Node: List all joined teams in the Task resource Team picker (#34043) (bae0021)
• Notion Node: Restore ASCII simplified property keys on earlier node versions (#33965) (e82116f)
• Odoo Node: Add domain filters to custom resources (#33581) (53e3ab4)
• RabbitMQ Node: Resolve routingKey by index (#33377) (f58fb18)
• Raise community stale workflow operations-per-run so it reaches recent PRs (#34070) (6cb9a2f)
• Reconcile pagination qs against params in next-page URL (#33804) (0f9b33f)
• Rundeck node supports configurable SSL validation (#33960) (1950037)
• Slack Node: Clarify unfurl field descriptions (#33900) (2ef112b)
• Update Supabase credential description to use new secret keys (#33818) (cedab5d)
• Use a valid operation default in five built-in nodes (#32410) (66ad8b9)

Bug Fixes

• AI Agent Node: Preserve parallel tool call structure in chat memory (#32481) (387bb73)
• AI Agent Node: Return intermediate steps when no tools are used (#33450) (3ac2495)
• ai-builder: Prevent snapshot staging races during concurrent sandbox creation (#33342) (7d946c3)
• API: Only exclude running executions from the public executions list (#32657) (ae50852)
• Avoid stack overflow on large search result sets (#33050) (3915aba)
• AWS Bedrock Chat Model Node: Validate regions from ARNs and IAM credentials (#33638) (3ed8be9)
• Basic LLM Chain Node: Prevent "Failed to parse agent steps" error (#33338) (a62f0e3)
• Block manual project member changes when project roles are managed (#33270) (36aa28b)
• Broaden secret detection in browser tool snapshots (#33528) (48024f2)
• Calendly Trigger Node: Request required OAuth2 scopes for Calendly API (#33286) (9b9c3dd)
• core: Add environment variable to configure redis tls serverName (#31220) (161d595)
• core: Allow-list models that support sampling parameters (#33667) (5ebce06)
• core: Await in-flight insights compaction when stopping the timer (#33258) (8c7167f)
• core: Ensure the system credential resolver exists on all main instances (#33393) (c3898fb)
• core: Guard against undefined node parameters in webhook path indexing (#33366) (f1582f5)
• core: Guard connection pool idle checks during cleanup (#31059) (84ee38e)
• core: Honor target version in migration report (#33671) (ca589e9)
• core: Improve error message for registry network failures (#31276) (5af86c5)
• core: Improve external secrets provider failure logs (#33104) (e01bb9e)
• core: Improve Instance AI workflow-building reliability (#33530) (2be4092)
• core: Improve OTEL error type handling (#33519) (7e738ca)
• core: Include workflow tags in get_workflow_details MCP tool (#33219) (b3efecc)
• core: Keep the user message when a run is stopped before it starts (#33318) (78ca212)
• core: Load tools for MCP registry connections from the server (#33542) (f18443d)
• core: Make agent execution project-scoped so published workflows in team projects can message agents (#33459) (e9e2dd6)
• core: Persist AI Assistant domain-access approvals across restarts and mains (#33454) (d448379)
• core: Pin langgraph and langgraph-checkpoint to prevent broken npm installs (#33536) (4cca307)
• core: Preserve Date values passed to the expression isolate (#33322) (9410e96)
• core: Preserve Instance AI agent activity when its run snapshot is empty (#33557) (e46e321)
• core: Preserve Instance AI output for runs stopped before completion (#33335) (2472df8)
• core: Prevent Code node failure when a workflow contains an AI tool (#33336) (fea03a9)
• core: Prevent duplicate zod instances that break npm installs (#33463) (39a2093)
• core: Reject reserved system column names when creating data tables (#27064) (dbb7fa4)
• core: Resolve private credentials in offloaded manual executions (#33214) (e9a9088)
• core: Restore node-cli eslint peer to a range (#33196) (963c7f8)
• core: Retry initial database connection on startup (#33647) (e4711b9)
• core: Return a client error when the request body stream is unreadable (#33243) (4f4e252)
• core: Return Data Table rows in a deterministic order when paginating (#33358) (e130a22)
• core: Roll back failed community package updates (#33256) (63d28b3)
• core: Send Digest auth credentials only after the server challenge (#32673) (969e36e)
• core: Skip AI Gateway managed credentials in pre-execution permission check (#33269) (38b99af)
• core: Surface the underlying cause on OAuth callback errors (#33390) (546ee30)
• core: Validate data-table CSV uploads by file extension (#33275) (8aa4c71)
• editor: Align parameter input sizes (#33309) (da1a58e)
• editor: Gate tag write actions in UI behind RBAC scopes (#33378) (99cf776)
• editor: Generate actions for nodes using a flat Action field across versions (#33568) (b94b2cf)
• editor: Hide "Needs first setup" badge for private credentials (#33392) (62aa7b1)
• editor: Hide custom scopes for managed OAuth credentials edited from the list (#33432) (29aa414)
• editor: Include base path in View sub-execution links (#33069) (a6e7880)
• editor: Keep Instance AI preview manual execution across tab switches (#33179) (e5e018e)
• editor: Limit assistant resource auto-linking (#33389) (e18501f)
• editor: Prevent duplicate AI Gateway unsupported-action notice (#33428) (cb039e0)
• editor: Reconcile Data Table column schema on node open (#29935) (269895f)
• editor: Reliably auto-open template credential setup modal (#33281) (608a222)
• editor: Render parameter popout editors above the credential modal (#33202) (cfce542)
• editor: Restore Instance AI credential card without a loaded workflow (#33289) (c4e0bf3)
• editor: Restore Instance AI live run UI after HITL reconnect (#33401) (01a3c7e)
• editor: Should not allow Sub wf when all ai child nodes (#23472) (b5f4035)
• editor: Show AI Gateway hints for supported nodes used as tools (#33464) (cdc473e)
• editor: Show Free credits badge for Tool-variant nodes in node creator panel (#33285) (5cf8645)
• editor: Show implied scope options as disabled with tooltip (#33237) (899abf6)
• editor: Warn on incompatible trigger for private creds not connected by user (#33641) (6d499a2)
• Email Trigger (IMAP) Node: Surface connection error details in activation errors (#32913) (8fa4e8c)
• Github Node: Set searchFilterRequired:true for owner property, fix behavior on frontend (#33290) (49e5982)
• Guard SSH clients manager shutdown against undefined logger (#33274) (f75802d)
• Handle AI Gateway-managed credentials in Instance AI (#33365) (704d246)
• HubSpot Node: Load full property list in selection dropdowns (#33280) (613b2c5)
• Improve AI Assistant post-build follow-ups (#33419) (6f0d30f)
• Improve error on missing execution data (#33567) (507131e)
• Make Miro OAuth2 scope field visible (#25105) (3c8689f)
• MCP Client Node: Don't send undefined token to mcp and include resource in token request (#33527) (5b39761)
• MCP Server Trigger Node: Evict idle sessions to prevent memory leak (#33201) (c3ce961)
• Minor updates to custom instance roles (#33520) (112b405)
• Oracle DB Node: Fix the Continue(Using error output) issue mentioned in GH issue 26199 (#28343) (5df5a2c)
• Pipedrive Node: Send activity person as primary participant for v2 API (#31789) (4cf766d)
• Salesforce node correctly handles "continue on error" (#33239) (cb0743e)
• Salesforce Node: Fix document uploads and surface errors on JWT auth (#33490) (ac1905e)
• Salesforce Node: Normalize empty 204 responses on JWT auth path (#33262) (37a75d2)
• Salesforce Node: Use server-side search for Contact Account selector (#31277) (165f1bd)
• Strip '=' expression marker from json fields switched back to (#33120) (88f8586)
• Telegram Trigger Node: Apply chat/user ID filters to all update types (#32417) (224a85b)
• TheHive Node: Normalize analyzers when expression returns a string (#32472) (efa9c4e)
• UX improvements in the custom roles experience (#33399) (062d679)
• Webhook Node: Return 401 instead of 403 when basic auth credentials are wrong (#31119) (40c2dc5)

Features

• Add certificate authentication to the Microsoft Entra Service Principal credential (#33420) (4d1862b)
• Add unified N8N_WEBHOOK_URL for production and test webhook URLs (#33312) (9dc43d0)
• API: Add public API endpoints to read evaluation test runs (#33455) (27b2844)
• API: Support exporting projects via the public API (#33084) (0f46be0)
• core: Add 'n8n-package-exported' logstreaming event (#33460) (456c6dc)
• core: Add certificate authentication option to Microsoft OAuth2 credentials (#33227) (f82a932)
• core: Add N8N_RUNNERS_ALLOW_TRANSITIVE_IMPORTS for the Python task runner (#33130) (95a81ed)
• core: Add role:manageProject scope for project-role-only management (#33628) (de34bec)
• core: Add telemetry events for import / export (#33319) (a6b307c)
• core: Clear end-user connections when shared credential fields change (#33624) (25acaad)
• core: Enable filtering crashed executions via public API (#33485) (62f3c7c)
• core: Prefer predefined credentials over generic auth on HTTP Request nodes (#33298) (4192c95)
• core: Re-enable sharing private credentials (#33071) (e51f611)
• core: Route Instance AI billing to a dedicated credit pool (#33263) (25d0d12)
• core: Support community node type definitions in AI Assistant (#33340) (3298e21)
• editor: Add new Tree component to @n8n/design-system (#33291) (cbbe113)
• editor: Deprecate $getPairedItem in the expression editor (#33549) (c706cd4)
• editor: Display canvas groups in logs panel (#33235) (d561a92)
• editor: Hide gateway-incompatible node parameters under managed credentials (#32961) (61dbb92)
• editor: Improve data table node (#28199) (0a6cb66)
• editor: Make data table artifacts editable when AI is not running (#33210) (7204648)
• editor: NDV one-line credential row with connect/connected/disconnect states (#33371) (0fa6454)
• editor: Read-only credential view and connect banner for private credentials (#33055) (627818e)
• editor: Render AI Assistant reasoning as separate blocks in the run timeline (#33676) (dc1e3ce)
• editor: Sets AIA v3 as default empty state & fixes display issues (#33273) (723749c)
• editor: Show private credential icon on execution list runs (#32957) (4290e84)
• editor: Update reasoning block to mook more reasonable (#33293) (1614720)
• Include response timestamp in Send and Wait responses (#33283) (13d0655)
• Kafka Node: Add mTLS (client certificate) authentication (#33236) (25e0321)
• Microsoft Excel Node: Add Service Principal (app-only) authentication (#33014) (b3287f7)
• Microsoft Teams Node: Add Service Principal (app-only) authentication (#33105) (df9257b)
• Microsoft To Do Node: Add Service Principal (app-only) authentication (#33081) (689d873)
• Setup credentials card includes a button to setup automatically in AI Assistant (#33453) (22e37bd)

Bug Fixes

• Cap changed-files list to avoid oversized CI process environment (#32949) (1632ad1)
• core: Align markdown task list items (#33020) (a2735a6)
• core: Align pdfjs-dist versions for PDF document loading (#31732) (c2f2edb)
• core: Block deleting a custom role referenced by an SSO mapping rule (#33004) (a013b0f)
• core: Bump file-type to 21.3.2 and migrate to its ESM API (#33096) (8a413bc)
• core: Correct Extract from File output key in document processing best-practices (#32992) (fb5b358)
• core: Ensure project variables override same-key global variables (#33137) (2a32dc7)
• core: Guard runData access in execution retry against missing node run data (#31765) (a91ba62)
• core: Improve backend route handling (#31350) (22167a9)
• core: Improve external secrets provider replacement (#33072) (1e68729)
• core: Include IPv6 loopback [::1] in MCP redirect URI DTO validation (#32801) (26d925f)
• core: Keep task runner serving during graceful shutdown so in-flight executions finish (#32385) (b9cfa25)
• core: Make AI Assistant workflow verification and setup repeatable (#33085) (a00ac27)
• core: OpenAI and Anthropic custom header credentials causing inconsistent behaviours (#33131) (9977e77)
• core: Parse OAuth2 token responses with non-standard content types (#33018) (a3a0a50)
• core: Persist Instance AI assistant output when a turn suspends (#32958) (ffb32b7)
• core: Persist Instance AI user input on receipt (#32917) (4a97d05)
• core: Preserve binary data metadata on S3 copy and rename (#33089) (4cff812)
• core: Prevent partial execution crash when the start node is disabled (#32654) (f1b1ee6)
• core: Prevent startup failure from partially-installed community packages (#32909) (a99862d)
• core: Propagate graceful-shutdown timeout to internal task runner (#32944) (4364046)
• core: Release database ping connection when the health check times out (#32838) (22b67a3)
• core: Remove duplicated sub-agent list (#33015) (8acefa2)
• core: Report IAI agent background failures to Sentry (#32972) (abed4a3)
• core: Resolve expression-mode $self values in credential templates (#32970) (2f35448)
• core: Route clarifying questions through ask-user (#32871) (5f4d196)
• core: Route split in batches chains through loop output (#32968) (7830cec)
• core: Run node-type-gated validators in MCP workflow build tools (#31247) (fb6e1b1)
• core: Serialize OAuth2 credential refresh to prevent rotating refresh-token invalidation (#33092) (b14a98d)
• core: Serialize source control work folder operations (#32857) (65660a4)
• core: Track builder workflow telemetry when execution fails to launch (#33003) (85fc9a4)
• core: Trim whitespace from webhook path on registration (#33022) (00e8224)
• core: Use regional AWS STS endpoints in China and GovCloud (#32825) (3dee0ff)
• core: Verify Instance AI workflows before setup (#32872) (274339f)
• Databricks Node: Allow configuring the token-expired status code on OAuth2 credential (#32824) (3987803)
• Disabling community module does not crash the instance (#33087) (638d828)
• editor: Align Referenced resources chip tooltip placement (#30692) (8e193e4)
• editor: Disable data table creation on read-only instances (#32863) (30eaf30)
• editor: Fix abbreviateNumber rollover and large-number handling (#32689) (2c0e2c9)
• editor: Fix InputTriple responsive behaviour in NDV parameters (#31633) (7772769)
• editor: Instance AI thread, navigation, and UX fixes (#32870) (0c92df7)
• editor: Redirect to project home after archiving or deleting a workflow (#32971) (2a613a0)
• editor: Replace radio buttons with checkmark in instance role dropdown (#33242) (1a00b07)
• editor: Show execution link on failed evaluation test cases (#32873) (30fd834)
• editor: Show filters as required conditions (#26541) (29e8163)
• editor: Show logs panel actions menu (#33034) (9fda7b3)
• editor: Sort move workflow project dropdown alphabetically (#33150) (3ee1b22)
• editor: Surface Human review node in add-node search (#32327) (247efd4)
• editor: Transfer ownership or delete data tables when user deleted (#33037) (0a97fe8)
• Email Read Imap Node: Default to 7BIT when a message part has no encoding (#32914) (6a3ad57)
• ExecuteCommand Node respects abort signal (#32865) (21d979a)
• Facebook Graph API Node: Route error responses to error output branch (#23832) (c5233d2)
• Facebook Graph API Node: Route failed items to the error output (#32027) (7b4a10f)
• Google Vertex Chat Model Node: Support newer Gemini models and EU/US data residency (#33135) (3955bca)
• Include cwd in shell_execute affected resources (#32165) (1a7b48d)
• MCP Client Tool Node: Reuse the MCP session across tool calls in an execution (#32477) (8565107)
• MCP Server Trigger Node: Propagate tool errors with isError flag in MCP responses (#28510) (486173a)
• Microsoft Teams Node: Downgrade OAuth2 scope from Group.ReadWrite.All to Group.Read.All (#28141) (d307cae)
• MySQL Node: Route query parameter validation errors to error output (#31888) (1fa6566)
• Notion Trigger Node: Handle empty results when polling for updates (#31739) (7e3d181)
• OpenAI Node: Convert binary stream to buffer before FormData append (#26530) (cd480af)
• OpenAI Node: Use output_text for assistant messages in Message a Model (#32822) (7f0d22b)
• Populate mutation-health ledger churn/fix_density from setup (#32903) (0ef6044)
• Postgres Node: Prevent execution context retention (#32730) (06ceccb)
• Prefer placeholders over pre-build setup questions (#32969) (02df832)
• Preserve AI Assistant Anthropic reasoning through proxy (#33193) (8854452)
• Reload symlinked community node changes without restart (#32774) (f727ff2)
• Restore sticky note paragraph spacing without breaking code (#32704) (750f336)
• Salesforce Node: Use server-side search for owner selectors (#32815) (8027463)
• Schedule Node: Fix schedules that permanently stop firing (#32877) (ec82d3a)
• WooCommerce Node: Validate resource ID and isolate query params per item (#32987) (957e7b5)

Bug Fixes

• API: Return 409 when deleting a published workflow (#32600) (1f774c8)
• Bitbucket Trigger Node: Use account_id to validate credentials instead of username (#30172) (5dc9c45)
• Bump form-data, tmp, protobufjs to patched versions (#32436) (a1cfd14)
• Bump protobufjs, js-yaml, @opentelemetry/core for nightly Trivy (#32542) (2dac96d)
• Cap ci-filter deepen value and fall back to --unshallow (#32581) (af563c6)
• Compression Node: Decompress only the archive members (#32486) (cafc64c)
• core: Account for pending CSV uploads in data-table size budget (#31394) (e4757d2)
• core: Change default value of the COOP header (#32377) (b94ff9b)
• core: Clean up workflow publication outbox records (#32795) (900c0ea)
• core: Coalesce outbox drains and wait for in-flight processing on shutdown (#32548) (7230fa3)
• core: Drive workflow folder placement through validated parentFolderId (#31364) (0f1c1a8)
• core: Evaluate expressions in AI tool description for node-as-to… (#31495) (beba723)
• core: Exclude error workflow executions from billable execution count (#32315) (f6c2bcc)
• core: Fix error path schema mismatch in mcp tools (#32560) (c91250f)
• core: Handle malformed agent tool calls (#32276) (285e4a9)
• core: Implement workflow-folder-conflict handling in import process (#32391) (97f45cc)
• core: Keep $fromAI placeholders intact on fields with expressions disabled (#31681) (43eec00)
• core: Keep thread history when observation cursor lacks observations (#32773) (0197817)
• core: Let allowlisted Python packages import their own submodules via relative imports (#32772) (46aa8e4)
• core: Limit execution data size for display reads (#32508) (524d4e8)
• core: Make workflow evaluations work alongside config evals (#32384) (19eeb5e)
• core: Negotiate token_endpoint_auth_method during MCP OAuth2 DCR (#32289) (734af04)
• core: Persist run data for Instance AI trigger executions in queue mode (#32498) (db1e21f)
• core: Prevent assigning unusable credentials in mcp (#32353) (7ddde95)
• core: Propagate execution context to sub-workflow tools (#32577) (09f5888)
• core: Propagate stop signal to sub-workflow executions on workers in queue mode (#32206) (ae7f699)
• core: Request protected-resource scopes during MCP OAuth2 DCR (#32300) (e8ee370)
• core: Resolve duplicate generated schema fields (#32275) (94594e3)
• core: Save Instance AI workflow edits through workspace files (#32545) (1e80d41)
• core: Shorten private-credential OAuth authorization links (#32584) (c1582a6)
• core: Stop re-asking answered or skipped clarifying questions (#32755) (9ce241b)
• core: Support v4 and v5 schemas for strapi consumers (#32559) (d6758db)
• core: Surface form submission errors instead of failing silently (#32305) (60ac614)
• core: Suspend query acquisition during database connection recovery (#32394) (7440fca)
• core: Time out stalled HTTP response body reads (#32411) (50887bf)
• core: Upgrade @n8n_io/license-sdk to v3 and resolve node-rsa to v2 (#32552) (ebbd629)
• editor: Clamp and truncate long workflow descriptions in MCP settings (#32104) (b953709)
• editor: Hide function info-box tooltip while typing arguments (#32371) (59971c8)
• editor: Hide template setup button when only disabled nodes lack credentials (#32625) (801bd5f)
• editor: Polish API key scope picker radio alignment, contrast and form spacing (#32420) (229560e)
• editor: Preserve existing node IDs when AI edits a workflow (#32593) (cbb9ae5)
• editor: Prevent autosave failure loop after AI builder modifies a workflow (#32558) (4821bed)
• editor: Prevent drag and drop of a folder onto itself (#31510) (4f8af4d)
• editor: Show a rejection screen when the OAuth consent target is unavailable (#32594) (2c3c67f)
• editor: Show rotated API keys in the create modal and outline the read-only Close button (#32480) (31e8ddc)
• editor: Widen callable subworkflow list using callerPolicy in workflow picker (#32522) (f105b34)
• editor: Wrap long unbroken strings in tooltip (#32345) (a0b35d5)
• Extract inline run-report attachments before aggregating sizing (#32799) (c8a3a3c)
• Fix 26 security issues in electron, axios, undici and 5 more (#32688) (c7fcbb7)
• Form Node: Evaluate expressions in form fields on subsequent pages (#32352) (35adffa)
• Form Trigger Node: Add default value for authentication parameter to prevent crash on old workflows (#32627) (940f389)
• Handle HTTP raw body validation loops (#32277) (d5dd492)
• Hides preview suggestions on smaller screens due to lack of space (#32444) (ad298e7)
• HTTP Request Node: Preserve all repeated query parameters in cURL import (#32253) (8b01aac)
• Kafka Node: Route Schema Registry client through configurable egress protection (#32370) (f19d744)
• Kafka Trigger Node: Surface consumer errors instead of waiting indefinitely (#32642) (30b2127)
• Make QA metrics telemetry truly fire-and-forget (#32597) (6e8a7fc)
• Microsoft OneDrive Node: Validate upload file name to replace misleading Graph error (#32470) (f998a1f)
• Nextcloud Node: Fix broken user actions and folder sharing, add internal link share type (#32002) (3767449)
• Prompt to save before manual run with autosave disabled (#32513) (2124c08)
• RedactValues throws TypeError on null-valued credential fields (#32804) (7ebd0cf)
• Removes phantom telemetry profile caused by missing user id fallback (#32344) (ef148c6)
• Salesforce Node: Reuse JWT session token across requests (#32325) (0e4d2c3)
• Slack Node: Handle missing response property in pagination (#32328) (d673064)
• Stop a timed-out background AI builder from respawning itself (#32630) (8c96484)
• Suggest the configured AI provider's chat model when building workflows (#32634) (b294e3d)

Bug Fixes

• API: Make conditional credential fields optional instead of forbidden (#32010) (0ab043c)
• Bump task-runner-launcher to 1.4.7 to clear stdlib CVEs (#32095) (4d974e3)
• Computer use disconnect status on client stop (#32059) (5c61d0e)
• core: Add RFC 8707 resource parameter to client-side OAuth flow (#30924) (04b4a79)
• core: Allow publishing workflows that use private credentials (#32306) (27d8426)
• core: Enforce API key scope/endpoint parity in public API (#32231) (58999f0)
• core: Ensure workflows that fail to activate are removed from active, preventing unintended executions (#31767) (79d1695)
• core: Fix workers processing queued jobs before module initialization completes (#32145) (506461f)
• core: Hide resource URL for synthetic OAuth2 credentials for MCP registry tools (#32351) (51fe9ff)
• core: Include indexes and TOAST in Postgres data table size (#31606) (c9f4aa8)
• core: Preserve trailing letter-less text in toSentenceCase() exp… (#32242) (7a77898)
• core: Prevent nodes from throwing context.getNodeParameter is not a function when n8n is installed via npm (#32123) (a254a89)
• core: Prevent pollers from starting executions for old workflow versions when registered while in-flight (#32006) (21c786c)
• core: Prevent post-execution writes against closed pool on worker shutdown (#31915) (3059088)
• core: Prevent queue recovery from marking waiting executions as crashed (#32316) (c4c0e91)
• core: Propagate sub-workflow errors to parent after wait resume (#31927) (6afba57)
• core: Remove user:enforceMfa from public API key scopes (#32223) (3c39a0e)
• core: Retry role mapping create order conflicts (#30687) (448c114)
• core: Surface a final response when a builder follow-up completes silently (#31986) (29abe78)
• core: Throw a clear error for $evaluateExpression in the Code node under secure mode (#31721) (fbad049)
• core: Upgrade nodemailer to 8.0.10 (DEVP-401) (#31998) (c339095)
• core: Use npm's bundled node-gyp for isolated-vm Docker rebuild (#32158) (67cdf44)
• Correct Form URL Encoded label in HTTP Request node (#31852) (ff7f35e)
• editor: Agent builder progress log lines visual glitches (#32077) (f9496c2)
• editor: Auto-reload editor on stale Vite chunk preload error (#31747) (2f3ebb6)
• editor: Close credential modal after successful setup (#31925) (7b2c722)
• editor: Harden credential modal against async hangs (#31292) (037bdb2)
• editor: Hide template setup button once setup is complete (#31912) (af9caff)
• editor: Insert instance ai prompt suggestions instead of submit (#32008) (3386aa8)
• editor: Make workflow settings and actions menu work in the AI artifact view (#32082) (5a28683)
• editor: Mute Never expiration in API keys table (#32224) (115d9c7)
• editor: Open sticky note color picker from context menu (#31917) (0685db8)
• editor: Preserve loaded options value when navigating between nodes (#31946) (f6e5705)
• editor: Refresh Instance AI workflow preview on update and restore-version (#31904) (f2c764a)
• editor: Remove 'Building your agent' loading state and go straight to full-page builder (#32120) (d553602)
• editor: Restore cross-origin notification after OAuth popup completes (#32087) (090fa9e)
• editor: Scope publish history scrollbar to timeline sidebar (#31661) (497226e)
• editor: Send only credential id when authorizing OAuth credentials (#31926) (4f10853)
• editor: Show AI assistant error when stream ends with unparseable content (#32068) (a7b910f)
• editor: Show an error when imported JSON is not a valid workflow (#31782) (0731871)
• editor: Show correct project in workflow breadcrumb for projectId links (#32103) (fd23d4d)
• editor: Show run data of stopped executions in scaling mode (#32142) (889769a)
• editor: Skip external-secrets fetch on Community Edition (#31906) (f6518a5)
• editor: Stop showing deleted resources in dependency pill (#32106) (4e10568)
• editor: Truncate long API key labels in settings table (#32232) (607634a)
• editor: Use workflow-scoped credential fetch in node credential picker (#31938) (8cd67d3)
• Fix 4 security issues in @grpc/grpc-js, hono (#32281) (e292779)
• Fix security issue in shell-quote via minor version upgrade from 1.8.3 to 1.8.4 (SEC-809) (#32107) (131e4ea)
• Http Request Node: Preserve multipart filenames for binary uploads (#29022) (f412820)
• Kafka Node: Distinguish the Schema Registry credential from the Kafka credential (#32335) (41ee940)
• Move unstable PURL-pinned overrides to version-agnostic byName (#31985) (e77dd74)
• Oracle Database Node: Support OUT bind parameters (#30083) (d3406dd)
• Require justified mutants in mutation-health gate (#32340) (b3a34fc)
• Set task status to 'cancelled' in BackgroundTaskManager.cancelAll() (#31764) (5733fb7)
• Store messages even if stream is undrained (#32119) (f2da1d1)

Bug Fixes

• API: Enforce the redaction floor when creating workflows (#31898) (03eecb1)
• AWS Rekognition Node: Handle all binary data modes correctly (#31065) (e264e06)
• Bump hono and postcss to patch CVEs from Trivy nightly scan (#31790) (0c26304)
• core: Allow exporting workflows with AI Gateway-managed credentials (#31136) (8376a4f)
• core: Bump qs, tmp, uuid, @tootallnate/once (#31674) (868e988)
• core: Dedupe getConnectedNodes results and add fast-check property tests (#31793) (be85b10)
• core: Delete orphaned per-user entries on unshare and membership changes (#31741) (8832194)
• core: Disable iAI e2e tests temporarily (#31779) (91ae2a2)
• core: External agent channels correctly utilise the user ID for episodic memory (#31584) (2a9a23f)
• core: Fix dropdown menu safety triangle (#31583) (ff1a7ae)
• core: Fix hardcoded aud claim in MCP OAuth tokens (#30558) (6bcd02a)
• core: Ground AI workflow completion in saved graph (#31742) (491360f)
• core: Improve validator error messages for name and label fields (#31391) (24f27ed)
• core: Include node and field details in WorkflowHasIssuesError message (#30944) (68b2053)
• core: Invalidate cached redaction floor across mains on change (#31831) (ad59171)
• core: Keep Instance AI builder sandboxes thread-scoped and non-ephemeral (#31745) (2993afb)
• core: Lock execution row during data-only condition re-check (#31547) (f83efe5)
• core: Make AI assistant conversation pruning happen regularly (#31707) (13a1a99)
• core: Make Sentry event loop block detection configurable (#31823) (ddac0e0)
• core: Move instance AI builds to a skill (#31412) (332d2df)
• core: Normalize LangChain parser errors (#31499) (872171c)
• core: Polyfill DOMMatrix when parsing PDFs in Data Loader (#31669) (5e0e266)
• core: Prefer MCP registry nodes when wiring AI Agent tools (#30774) (f4e998f)
• core: Preserve verification failure in budget-exhausted blocked responses (#31907) (f7076a3)
• core: Prevent evaluation executions from stalling in status new (#31619) (ea800f7)
• core: Prevent isUniqueConstraintError false positives (#31284) (a3e37fc)
• core: Reclassify expected backend errors out of the Sentry error stream (#31423) (ecce350)
• core: Report only error class and stack for unhandled node errors (#31628) (364c250)
• core: Resolve custom node icon paths (#30946) (7ab8254)
• core: Restore OIDC login for IdPs returning expires_in: 0 (#31265) (41b2bda)
• core: Resume Instance AI sandboxes that were stopped or deleted while idle (#31761) (06cf1d9)
• core: Show actionable message when OAuth2 token refresh fails (#30460) (5e9a8a0)
• core: Stop parent workflows getting stuck waiting on sub-workflow completion (#31736) (61af45a)
• core: Store OAuth CSRF and PKCE state per-flow in the cache (#31254) (7d729ff)
• core: Strip legacy unsupported config before agent JSON validation (#31577) (255b7a1)
• core: Sub-workflows to respect own timeout settings and global timeout config (#31536) (0b2a632)
• core: Teach the builder the SDK language subset and stop repeated invalid repairs (#31911) (4271d42)
• core: Temporarily disable error card from iAi chat (#31740) (d58b7ea)
• core: The n8n import:workflow --activeState=fromJson cli can fail for subworkflow dependencies (#31377) (e785e4e)
• Declare @smithy/node-http-handler and @aws-sdk (#31562) (485c153)
• Discord Node: Preserve object author in embed JSON for icon_url support (#30046) (cb38338)
• editor: Add evaluation trigger from setup (#31102) (5504361)
• editor: Allow editing IdP mapping rules when SSO is configured v… (#31809) (b9af480)
• editor: Attribute experiment telemetry in PostHog (#31137) (4ea8068)
• editor: Constrain debug overwrite pinned data confirmation modal (#31665) (6e67ffd)
• editor: Copy only selected markdown editor text (#31851) (5036147)
• editor: Load all SSO role mapping rules instead of first page (#31523) (330d441)
• editor: Make project delete dialog backdrop cover the sidebar (#31735) (c02665a)
• editor: Move the AI Assistant status line into the conversation flow (#31811) (4c0628a)
• editor: Persist switching workflow credential resolver back to system resolver (#31703) (f723f54)
• editor: Polish Instance AI panel interactions (#31903) (054c85d)
• editor: Polish private credential pills, callout, and banners (#31604) (7e83c7b)
• editor: Preserve non-string JSON values when importing cURL commands (#31791) (ed09c08)
• editor: Reference manage data redaction permission in enforcement dialogs (#31893) (c05a623)
• editor: Reset connection state when switching credential to private (#31713) (b2942b4)
• editor: Show data redaction upgrade prompt on unlicensed instances (#31816) (b755ee4)
• editor: Show error feedback when copying non-duplicatable triggers (#31104) (151fd83)
• editor: Show switch-to-static warning after connecting a private credential (#31712) (f1d87fd)
• Format single-line PEM keys when newlines are stripped on paste (#31129) (ec44980)
• Google Sheets Trigger Node: Custom OAuth option not availble when there are managed credentials (#29933) (a44197c)
• Harden mutation picker against low-value source files (#31914) (7e5c5c4)
• HTTP Request Node: Sign Amazon Bedrock requests as 'bedrock' service (#31250) (9963143)
• Improve Instance AI workflow-builder eval reliability and node diagnostics (#31506) (4e0e0ed)
• LangChain Code Node: Hide node from the node catalogue (#31464) (18d4fdd)
• MCP Client Tool Node: Tie transport lifecycle to execution cancel signal to prevent GET stream leak (#31087) (2a88b50)
• Microsoft Entra Node: Refresh expired OAuth2 tokens (#30943) (ab849d3)
• Postgres Node: Spread array queryReplacement across multiple bind values (#31704) (ee7aa0b)
• Read/Write Files from Disk Node: Escape square brackets in file path selector (#31706) (89ae45f)
• Remove PLAYWRIGHT_BROWSERS_PATH from install-browsers turbo (#31856) (a0df2a3)
• Salesforce Node: Preserve detailed API errors in continueOnFail mode (#30990) (8cfc9d2)
• Slack Node: Normalize multiOptions values when expression returns a string (#31269) (95e4ee7)
• Stabilise midnight-sensitive integration tests and harden CTE (#31901) (4ef9944)
• TheHiveProject Node: Normalize analyzers when expression returns a string (#31580) (43d32fd)
• Use logical-or fallback for GitHub env vars in send-metrics (#31783) (d39d944)

Bug Fixes

• cli: Decouple agent library bundle from build:data (#31293) (70ab5e5)
• Compression Node: Add decompression output size validation (#31366) (90dd93c)
• core: Align /credentials/for-workflow response with its frontend type (#31253) (1c39015)
• core: Allow emails in npm person strings in no-template-placeholders lint rule (#31196) (0a548b8)
• core: Coerce non-string node names in buildNodeIndex (#31411) (6cf3b0b)
• core: Expand ESLint rule to catch toThrowError error instance assertions (#31187) (39d660e)
• core: Insights page shows license paywall for licensed users (#31406) (d24a076)
• core: Make AI tool nodes continue on error by default (#31225) (863dfc3)
• core: Normalise Sentry stack frame paths to stable app:/// roots (#31421) (e620545)
• core: Preserve code-builder thread suffix when parsing session (#30829) (483752e)
• core: Preserve underlying cause when logging webhook execution failures (#31120) (b2f4c2c)
• core: Quiet VM expression engine logs on the happy path (#31488) (b9e97e4)
• core: Raise rate limit on telemetry /identify endpoint (#31509) (e8cbcf0)
• core: Re-register expression metrics after Prometheus registry reset (#31484) (ccf401c)
• core: Rebuild isolated-vm in Docker image for musl libc (#31396) (80a97bd)
• core: Sort MCP search_workflows by most recently edited (#31245) (3d452f7)
• core: Synthesize type-defs for MCP registry nodes at request time (#30887) (37e47e3)
• core: Use slugs instead of ids to identify MCP registry servers (#30974) (4722c4d)
• core: Use timestamptz for data table date columns (#31286) (1a9a69a)
• editor, core: Enhance source control endpoint access control (#31349) (068547b)
• editor: Clear pin data on workspace initialization of production execution (#31218) (a99b91d)
• editor: Hide private credential connect controls without update permission (#31507) (13ee461)
• editor: Reduce length penalty so longer node names rank fairly (#31294) (1b8235e)
• editor: Remove obsolete credential resolver warnings (#31466) (f09e1c7)
• editor: Render new empty state for quick-connect credentials in standalone mode (#31145) (1e9c6bb)
• editor: Render setup step dropdown above chat input (#31299) (e07c8e6)
• editor: Suppress strict-mode 'delete' TypeScript error in Code node JS editor (#31067) (d6457bd)
• Email Trigger (IMAP) Node: Fix emails marked as read without triggering workflow (#30375) (3d45fe6)
• Extend Browser mcp secret redaction patterns (#30970) (60c8517)
• Google Gemini Chat Model Node: Hide imagen models from model dropdown (#31150) (e4c0d6f)
• HighLevel Node: Encode contact lookup query parameters (#31365) (8635dcd)
• langchain agent Node: Resolve sub-agent tool calls inline when nested (#31072) (e9920b6)
• LDAP Node: Bump ldapts to 8.1.7 to fix silent rename on long DN paths (#30712) (7db3eb8)
• MongoDB Node: Validate update key value type (#31371) (439d260)
• Only allow specified AWS regions (#31374) (e3c14a4)
• Pipedrive Node: Map user_id to owner_id for v2 deal and activity requests (#30890) (e9631b3)
• Postgres Node: Return empty array for SELECTs that match no rows (#30528) (4df0568)
• Preserve reserved tokens (#31363) (dd4b3ff)
• Resolve all external licenses in release SBOM (#31231) (eff29ce)
• Revert 'Input validation for workflow and data table names' (PR 30594) (#31359) (f4a5880)
• Salesforce Trigger Node: Stop Created triggers refiring on record updates (#30809) (6151660)
• Send Email Node: Allow non-inline file attachments (#31071) (c1856af)
• Set Content-Type for Meta-family trigger node responses (#31354) (16728b3)
• Stripe Trigger Node: Use stored webhook secret for request verification (#31212) (9e41d03)
• Zulip Node: Normalize multiOptions recipients when expression returns a string (#31492) (01cc906)

Bug Fixes

• ai-builder: Default Switch to case-insensitive in builder hints (#31044) (76c432c)
• Azure Cosmos DB Node: Preserve query parameter types instead of converting to strings (#25882) (cb4db22)
• Bitbucket Node: Use supported workspace listing endpoint (#30646) (875a805)
• Bump urllib3 constraint to >=2.7.0 (#30927) (aa78b81)
• core: Acquire expression isolate for scheduled polls (#30729) (764f33a)
• core: Allow dynamic credential OAuth callbacks without skip-auth env var (#31103) (cf1a6fa)
• core: Allow personal project owners to manage data redaction (#31153) (1f41d33)
• core: Allow shadowing dangerous globals as variable names in workflow SDK (#30678) (d13e22b)
• core: Allow Unicode characters in execution metadata keys (#30486) (41a273e)
• core: Bypass pubsub debounce for workflow activation display commands (#30965) (9f0a695)
• core: Count agent background generation tokens (#31082) (def3a7b)
• core: Exclude error workflow executions from time saved insights (#30952) (4b0e23b)
• core: Guide agent to not pass bogus workflow-id to submit-workflow tool (#30911) (a3210d5)
• core: Handle null pinData column at executions, save empty object as pinData on instanceAI (#30698) (50dc050)
• core: Honor chunkSize when streaming S3-backed binary data (#30919) (e2c2a5a)
• core: Improve license diagnostics and CLI output (#30955) (affc3c1)
• core: Improve project routing for MCP-built workflows (#30674) (65b7919)
• core: Keep Instance AI HITL confirmations waiting (#30722) (cdfc905)
• core: Keep workflow active when external hook rejects publish (#30707) (2bc621e)
• core: Members can still create API keys with insights:read scope (#30778) (d5d619c)
• core: Populate manual user id on webhook execution data path (#30644) (2743f51)
• core: Preserve known credential supportedNodes under lazy loading (#30529) (58483a1)
• core: Preserve workflow node settings in workflow-sdk (#30869) (69c9e65)
• core: Reject invalid ai_tool source nodes in MCP workflow creation (#30593) (af73013)
• core: Remove aggressive temp directory cleanup in binary data rename (#31068) (10a04cb)
• core: Report scheduled-poll isolate acquisition failures via __emitError (#30743) (5f97ef3)
• core: Scope source control data tables by project (#30751) (4cf44e3)
• core: Set HITL confirmation timeout default (#30783) (b601880)
• core: Show clear error when running a tool node without an Agent (#30626) (ca38167)
• core: Stop classifying AI sub-tool nodes as triggers in generated types (#30865) (4db0046)
• core: Stop idle-killing Instance AI active runs awaiting HITL (#31154) (a8d29f2)

Bug Fixes

• Add Switch fallback output guidance for workflow builder (#30449) (17b64da)
• ai-builder: Ground workflow setup guidance (#30638) (0d262fe)
• ai-builder: Guide builder to prefer httpBearerAuth for Bearer flows (#30309) (c3e39f8)
• Allow service-specific MCP OAuth credentials to be used with MCP endpoint domains (#30343) (3dda7b7)
• core: Add correct telemetry for resumed Instance AI runs (#30335) (8489afd)
• core: Add input validation for workflow and data table names (#30594) (d14c71e)
• core: Add Instance AI first-turn guidance and trace metadata (#30315) (5d872d1)
• core: Add origin-only fallback to MCP OAuth discovery for path-bearing server URLs (#30231) (fb78047)
• core: Align MCP OAuth issued aud with advertised resource URL (#30055) (9d4fc35)
• core: Avoid unnecessary planner credential prompts (#30451) (f1fd79f)
• core: Bypass archived workflows in activation (#30517) (3bab056)
• core: Clean up failed AI workflow shells (#30432) (d26a402)
• core: Extract workflow-sdk examples to a writable cache dir (#30433) (6beed60)
• core: Limit Insights compaction runs (#30503) (d67cef8)
• core: Member role getting read permissions for insights (#30291) (111d403)
• core: Preserve AxiosHeaders instance when applying OpenAI vendor defaults (#29860) (3dd134a)
• core: Preserve nested arrays in VM expression engine output (#30246) (c2ecb4d)
• core: Prioritize HTTP status codes for retry logic in httpRequest nodes (#27547) (87ba302)
• core: Resolve empty expressions to empty string in VM evaluator (#30310) (e52bbbd)
• core: Return plan-tool validator errors as tool results instead of throwing (#30592) (db69aa6)
• core: Stop workflow builder after terminal remediation (#30289) (22f2e34)
• core: Update instance-ai evaluator to include pinned subnodes and allow all mcp tools (#30292) (54d62bb)
• core: Update workflow version only on indexable content change (#30521) (dc66f1e)
• core: Warn MCP clients that removeNode disconnects sub-nodes (#30491) (83a0b41)
• Correct misleading credential notice in Bearer Auth (#30465) (5279454)
• CRON Node: Tooltip typo in trigger polling setting (#17949) (94a3220)
• editor: Auto-derive data table name from CSV filename (#30066) (108fb02)
• editor: Automatically close credential modal after claiming free OpenAI credits (#30610) (05c25da)
• editor: Do not save workflow on execute when autosave is disabled (#30347) (ad6c470)
• editor: Fit workflow zoom into workflow artifact after animation correctly (#30625) (f88334d)
• editor: Fix wf context for ai assistant setup node validations (#30664) (f2a86e9)
• editor: Hide help callout for view-only credential users (#30336) (b40d533)
• editor: Limit run live demo ready-to-run button to users created within 14 days (#25896) (d8f22e5)
• editor: Load credentials when opening node credential picker (#30463) (cec8238)
• editor: Open update CTA docs in a new tab on self-hosted instances (#30571) (3fca302)
• editor: Persist Resource Mapper field deletions (#30244) (b6ad572)
• editor: Preserve custom Form Trigger path on workflow re-import (#30053) (c3cf5c7)
• editor: Prevent expression editor result panel from overflowing in HTML and Markdown render modes (#30470) (709ebbd)
• editor: Prevent Safari text selection on canvas drag (#27055) (4a50e92)
• editor: Render fallback icon for projects without one in sidebar (#30572) (cd1bae8)
• editor: Restore NDV panel proportions after zoom changes (#30573) (3d67664)
• editor: Restore workflow name in window tab title (#29826) (21a3090)
• editor: Sanitize workflow created during sub-workflow conversion (#30208) (d5d5173)
• editor: Snap tidy-up node positions to grid (#30455) (e105063)
• editor: Stabilize workflow setup credentials state (#30513) (c638e91)
• editor: Use vuedraggable source module in builds (#30516) (4575c85)
• Fix 13 critical issues in vm2, protobufjs, @daytonaio/sdk and 4 more (#30578) (ac02d32)
• Fix security issue in langsmith via minor version upgrade from 0.5.19 to 0.6.0 (#30685) (1dd0415)
• Google Cloud Storage Node: Fix large file upload and add Project RLC (#29847) (99a66eb)
• Honor continueOnFail in Send and Wait operations (#30287) (f155ace)
• HTTP Request Node: Trim url whitespace (#27381) (47ffd1c)
• Improve AI builder reliability for Sheets and workflow lookups (#30546) (458709f)
• Include .gitignore in node-cli generated projects (#30068) (0626ed2)
• LinkedIn Node: Improve refresh token expiry error messaging (#29613) (e80ccd8)
• Redact issuer-shaped secrets from MCP browser tool outputs (#30026) (2c31768)
• Restore /usr/local/bin/n8n compat symlink in production image (#30622) (f4deb49)
• S3 Node: Implement Delete Bucket operation (#30056) (aabc6f1)
• Slack Node: Honor Continue using error output functionality (#29116) (cdc12d2)
• Supabase Node: Fix getAll returning duplicate or missing records during pagination (#30020) (6362afe)
• Zendesk Trigger Node: Prevent webhook from being deleted after execution (#29511) (c27fcde)