n8n Release Notes

Bug Fixes

• Cap changed-files list to avoid oversized CI process environment (#32949) (1632ad1)
• core: Align markdown task list items (#33020) (a2735a6)
• core: Align pdfjs-dist versions for PDF document loading (#31732) (c2f2edb)
• core: Block deleting a custom role referenced by an SSO mapping rule (#33004) (a013b0f)
• core: Bump file-type to 21.3.2 and migrate to its ESM API (#33096) (8a413bc)
• core: Correct Extract from File output key in document processing best-practices (#32992) (fb5b358)
• core: Ensure project variables override same-key global variables (#33137) (2a32dc7)
• core: Guard runData access in execution retry against missing node run data (#31765) (a91ba62)
• core: Improve backend route handling (#31350) (22167a9)
• core: Improve external secrets provider replacement (#33072) (1e68729)
• core: Include IPv6 loopback [::1] in MCP redirect URI DTO validation (#32801) (26d925f)
• core: Keep task runner serving during graceful shutdown so in-flight executions finish (#32385) (b9cfa25)
• core: Make AI Assistant workflow verification and setup repeatable (#33085) (a00ac27)
• core: OpenAI and Anthropic custom header credentials causing inconsistent behaviours (#33131) (9977e77)
• core: Parse OAuth2 token responses with non-standard content types (#33018) (a3a0a50)
• core: Persist Instance AI assistant output when a turn suspends (#32958) (ffb32b7)
• core: Persist Instance AI user input on receipt (#32917) (4a97d05)
• core: Preserve binary data metadata on S3 copy and rename (#33089) (4cff812)
• core: Prevent partial execution crash when the start node is disabled (#32654) (f1b1ee6)
• core: Prevent startup failure from partially-installed community packages (#32909) (a99862d)
• core: Propagate graceful-shutdown timeout to internal task runner (#32944) (4364046)
• core: Release database ping connection when the health check times out (#32838) (22b67a3)
• core: Remove duplicated sub-agent list (#33015) (8acefa2)
• core: Report IAI agent background failures to Sentry (#32972) (abed4a3)
• core: Resolve expression-mode $self values in credential templates (#32970) (2f35448)
• core: Route clarifying questions through ask-user (#32871) (5f4d196)
• core: Route split in batches chains through loop output (#32968) (7830cec)
• core: Run node-type-gated validators in MCP workflow build tools (#31247) (fb6e1b1)
• core: Serialize OAuth2 credential refresh to prevent rotating refresh-token invalidation (#33092) (b14a98d)
• core: Serialize source control work folder operations (#32857) (65660a4)
• core: Track builder workflow telemetry when execution fails to launch (#33003) (85fc9a4)
• core: Trim whitespace from webhook path on registration (#33022) (00e8224)
• core: Use regional AWS STS endpoints in China and GovCloud (#32825) (3dee0ff)
• core: Verify Instance AI workflows before setup (#32872) (274339f)
• Databricks Node: Allow configuring the token-expired status code on OAuth2 credential (#32824) (3987803)
• Disabling community module does not crash the instance (#33087) (638d828)
• editor: Align Referenced resources chip tooltip placement (#30692) (8e193e4)
• editor: Disable data table creation on read-only instances (#32863) (30eaf30)
• editor: Fix abbreviateNumber rollover and large-number handling (#32689) (2c0e2c9)
• editor: Fix InputTriple responsive behaviour in NDV parameters (#31633) (7772769)
• editor: Instance AI thread, navigation, and UX fixes (#32870) (0c92df7)
• editor: Redirect to project home after archiving or deleting a workflow (#32971) (2a613a0)
• editor: Replace radio buttons with checkmark in instance role dropdown (#33242) (1a00b07)
• editor: Show execution link on failed evaluation test cases (#32873) (30fd834)
• editor: Show filters as required conditions (#26541) (29e8163)
• editor: Show logs panel actions menu (#33034) (9fda7b3)
• editor: Sort move workflow project dropdown alphabetically (#33150) (3ee1b22)
• editor: Surface Human review node in add-node search (#32327) (247efd4)
• editor: Transfer ownership or delete data tables when user deleted (#33037) (0a97fe8)
• Email Read Imap Node: Default to 7BIT when a message part has no encoding (#32914) (6a3ad57)
• ExecuteCommand Node respects abort signal (#32865) (21d979a)
• Facebook Graph API Node: Route error responses to error output branch (#23832) (c5233d2)
• Facebook Graph API Node: Route failed items to the error output (#32027) (7b4a10f)
• Google Vertex Chat Model Node: Support newer Gemini models and EU/US data residency (#33135) (3955bca)
• Include cwd in shell_execute affected resources (#32165) (1a7b48d)
• MCP Client Tool Node: Reuse the MCP session across tool calls in an execution (#32477) (8565107)
• MCP Server Trigger Node: Propagate tool errors with isError flag in MCP responses (#28510) (486173a)
• Microsoft Teams Node: Downgrade OAuth2 scope from Group.ReadWrite.All to Group.Read.All (#28141) (d307cae)
• MySQL Node: Route query parameter validation errors to error output (#31888) (1fa6566)
• Notion Trigger Node: Handle empty results when polling for updates (#31739) (7e3d181)
• OpenAI Node: Convert binary stream to buffer before FormData append (#26530) (cd480af)
• OpenAI Node: Use output_text for assistant messages in Message a Model (#32822) (7f0d22b)
• Populate mutation-health ledger churn/fix_density from setup (#32903) (0ef6044)
• Postgres Node: Prevent execution context retention (#32730) (06ceccb)
• Prefer placeholders over pre-build setup questions (#32969) (02df832)
• Preserve AI Assistant Anthropic reasoning through proxy (#33193) (8854452)
• Reload symlinked community node changes without restart (#32774) (f727ff2)
• Restore sticky note paragraph spacing without breaking code (#32704) (750f336)
• Salesforce Node: Use server-side search for owner selectors (#32815) (8027463)
• Schedule Node: Fix schedules that permanently stop firing (#32877) (ec82d3a)
• WooCommerce Node: Validate resource ID and isolate query params per item (#32987) (957e7b5)

Bug Fixes

• API: Return 409 when deleting a published workflow (#32600) (1f774c8)
• Bitbucket Trigger Node: Use account_id to validate credentials instead of username (#30172) (5dc9c45)
• Bump form-data, tmp, protobufjs to patched versions (#32436) (a1cfd14)
• Bump protobufjs, js-yaml, @opentelemetry/core for nightly Trivy (#32542) (2dac96d)
• Cap ci-filter deepen value and fall back to --unshallow (#32581) (af563c6)
• Compression Node: Decompress only the archive members (#32486) (cafc64c)
• core: Account for pending CSV uploads in data-table size budget (#31394) (e4757d2)
• core: Change default value of the COOP header (#32377) (b94ff9b)
• core: Clean up workflow publication outbox records (#32795) (900c0ea)
• core: Coalesce outbox drains and wait for in-flight processing on shutdown (#32548) (7230fa3)
• core: Drive workflow folder placement through validated parentFolderId (#31364) (0f1c1a8)
• core: Evaluate expressions in AI tool description for node-as-to… (#31495) (beba723)
• core: Exclude error workflow executions from billable execution count (#32315) (f6c2bcc)
• core: Fix error path schema mismatch in mcp tools (#32560) (c91250f)
• core: Handle malformed agent tool calls (#32276) (285e4a9)
• core: Implement workflow-folder-conflict handling in import process (#32391) (97f45cc)
• core: Keep $fromAI placeholders intact on fields with expressions disabled (#31681) (43eec00)
• core: Keep thread history when observation cursor lacks observations (#32773) (0197817)
• core: Let allowlisted Python packages import their own submodules via relative imports (#32772) (46aa8e4)
• core: Limit execution data size for display reads (#32508) (524d4e8)
• core: Make workflow evaluations work alongside config evals (#32384) (19eeb5e)
• core: Negotiate token_endpoint_auth_method during MCP OAuth2 DCR (#32289) (734af04)
• core: Persist run data for Instance AI trigger executions in queue mode (#32498) (db1e21f)
• core: Prevent assigning unusable credentials in mcp (#32353) (7ddde95)
• core: Propagate execution context to sub-workflow tools (#32577) (09f5888)
• core: Propagate stop signal to sub-workflow executions on workers in queue mode (#32206) (ae7f699)
• core: Request protected-resource scopes during MCP OAuth2 DCR (#32300) (e8ee370)
• core: Resolve duplicate generated schema fields (#32275) (94594e3)
• core: Save Instance AI workflow edits through workspace files (#32545) (1e80d41)
• core: Shorten private-credential OAuth authorization links (#32584) (c1582a6)
• core: Stop re-asking answered or skipped clarifying questions (#32755) (9ce241b)
• core: Support v4 and v5 schemas for strapi consumers (#32559) (d6758db)
• core: Surface form submission errors instead of failing silently (#32305) (60ac614)
• core: Suspend query acquisition during database connection recovery (#32394) (7440fca)
• core: Time out stalled HTTP response body reads (#32411) (50887bf)
• core: Upgrade @n8n_io/license-sdk to v3 and resolve node-rsa to v2 (#32552) (ebbd629)
• editor: Clamp and truncate long workflow descriptions in MCP settings (#32104) (b953709)
• editor: Hide function info-box tooltip while typing arguments (#32371) (59971c8)
• editor: Hide template setup button when only disabled nodes lack credentials (#32625) (801bd5f)
• editor: Polish API key scope picker radio alignment, contrast and form spacing (#32420) (229560e)
• editor: Preserve existing node IDs when AI edits a workflow (#32593) (cbb9ae5)
• editor: Prevent autosave failure loop after AI builder modifies a workflow (#32558) (4821bed)
• editor: Prevent drag and drop of a folder onto itself (#31510) (4f8af4d)
• editor: Show a rejection screen when the OAuth consent target is unavailable (#32594) (2c3c67f)
• editor: Show rotated API keys in the create modal and outline the read-only Close button (#32480) (31e8ddc)
• editor: Widen callable subworkflow list using callerPolicy in workflow picker (#32522) (f105b34)
• editor: Wrap long unbroken strings in tooltip (#32345) (a0b35d5)
• Extract inline run-report attachments before aggregating sizing (#32799) (c8a3a3c)
• Fix 26 security issues in electron, axios, undici and 5 more (#32688) (c7fcbb7)
• Form Node: Evaluate expressions in form fields on subsequent pages (#32352) (35adffa)
• Form Trigger Node: Add default value for authentication parameter to prevent crash on old workflows (#32627) (940f389)
• Handle HTTP raw body validation loops (#32277) (d5dd492)
• Hides preview suggestions on smaller screens due to lack of space (#32444) (ad298e7)
• HTTP Request Node: Preserve all repeated query parameters in cURL import (#32253) (8b01aac)
• Kafka Node: Route Schema Registry client through configurable egress protection (#32370) (f19d744)
• Kafka Trigger Node: Surface consumer errors instead of waiting indefinitely (#32642) (30b2127)
• Make QA metrics telemetry truly fire-and-forget (#32597) (6e8a7fc)
• Microsoft OneDrive Node: Validate upload file name to replace misleading Graph error (#32470) (f998a1f)
• Nextcloud Node: Fix broken user actions and folder sharing, add internal link share type (#32002) (3767449)
• Prompt to save before manual run with autosave disabled (#32513) (2124c08)
• RedactValues throws TypeError on null-valued credential fields (#32804) (7ebd0cf)
• Removes phantom telemetry profile caused by missing user id fallback (#32344) (ef148c6)
• Salesforce Node: Reuse JWT session token across requests (#32325) (0e4d2c3)
• Slack Node: Handle missing response property in pagination (#32328) (d673064)
• Stop a timed-out background AI builder from respawning itself (#32630) (8c96484)
• Suggest the configured AI provider's chat model when building workflows (#32634) (b294e3d)

Bug Fixes

• API: Make conditional credential fields optional instead of forbidden (#32010) (0ab043c)
• Bump task-runner-launcher to 1.4.7 to clear stdlib CVEs (#32095) (4d974e3)
• Computer use disconnect status on client stop (#32059) (5c61d0e)
• core: Add RFC 8707 resource parameter to client-side OAuth flow (#30924) (04b4a79)
• core: Allow publishing workflows that use private credentials (#32306) (27d8426)
• core: Enforce API key scope/endpoint parity in public API (#32231) (58999f0)
• core: Ensure workflows that fail to activate are removed from active, preventing unintended executions (#31767) (79d1695)
• core: Fix workers processing queued jobs before module initialization completes (#32145) (506461f)
• core: Hide resource URL for synthetic OAuth2 credentials for MCP registry tools (#32351) (51fe9ff)
• core: Include indexes and TOAST in Postgres data table size (#31606) (c9f4aa8)
• core: Preserve trailing letter-less text in toSentenceCase() exp… (#32242) (7a77898)
• core: Prevent nodes from throwing context.getNodeParameter is not a function when n8n is installed via npm (#32123) (a254a89)
• core: Prevent pollers from starting executions for old workflow versions when registered while in-flight (#32006) (21c786c)
• core: Prevent post-execution writes against closed pool on worker shutdown (#31915) (3059088)
• core: Prevent queue recovery from marking waiting executions as crashed (#32316) (c4c0e91)
• core: Propagate sub-workflow errors to parent after wait resume (#31927) (6afba57)
• core: Remove user:enforceMfa from public API key scopes (#32223) (3c39a0e)
• core: Retry role mapping create order conflicts (#30687) (448c114)
• core: Surface a final response when a builder follow-up completes silently (#31986) (29abe78)
• core: Throw a clear error for $evaluateExpression in the Code node under secure mode (#31721) (fbad049)
• core: Upgrade nodemailer to 8.0.10 (DEVP-401) (#31998) (c339095)
• core: Use npm's bundled node-gyp for isolated-vm Docker rebuild (#32158) (67cdf44)
• Correct Form URL Encoded label in HTTP Request node (#31852) (ff7f35e)
• editor: Agent builder progress log lines visual glitches (#32077) (f9496c2)
• editor: Auto-reload editor on stale Vite chunk preload error (#31747) (2f3ebb6)
• editor: Close credential modal after successful setup (#31925) (7b2c722)
• editor: Harden credential modal against async hangs (#31292) (037bdb2)
• editor: Hide template setup button once setup is complete (#31912) (af9caff)
• editor: Insert instance ai prompt suggestions instead of submit (#32008) (3386aa8)
• editor: Make workflow settings and actions menu work in the AI artifact view (#32082) (5a28683)
• editor: Mute Never expiration in API keys table (#32224) (115d9c7)
• editor: Open sticky note color picker from context menu (#31917) (0685db8)
• editor: Preserve loaded options value when navigating between nodes (#31946) (f6e5705)
• editor: Refresh Instance AI workflow preview on update and restore-version (#31904) (f2c764a)
• editor: Remove 'Building your agent' loading state and go straight to full-page builder (#32120) (d553602)
• editor: Restore cross-origin notification after OAuth popup completes (#32087) (090fa9e)
• editor: Scope publish history scrollbar to timeline sidebar (#31661) (497226e)
• editor: Send only credential id when authorizing OAuth credentials (#31926) (4f10853)
• editor: Show AI assistant error when stream ends with unparseable content (#32068) (a7b910f)
• editor: Show an error when imported JSON is not a valid workflow (#31782) (0731871)
• editor: Show correct project in workflow breadcrumb for projectId links (#32103) (fd23d4d)
• editor: Show run data of stopped executions in scaling mode (#32142) (889769a)
• editor: Skip external-secrets fetch on Community Edition (#31906) (f6518a5)
• editor: Stop showing deleted resources in dependency pill (#32106) (4e10568)
• editor: Truncate long API key labels in settings table (#32232) (607634a)
• editor: Use workflow-scoped credential fetch in node credential picker (#31938) (8cd67d3)
• Fix 4 security issues in @grpc/grpc-js, hono (#32281) (e292779)
• Fix security issue in shell-quote via minor version upgrade from 1.8.3 to 1.8.4 (SEC-809) (#32107) (131e4ea)
• Http Request Node: Preserve multipart filenames for binary uploads (#29022) (f412820)
• Kafka Node: Distinguish the Schema Registry credential from the Kafka credential (#32335) (41ee940)
• Move unstable PURL-pinned overrides to version-agnostic byName (#31985) (e77dd74)
• Oracle Database Node: Support OUT bind parameters (#30083) (d3406dd)
• Require justified mutants in mutation-health gate (#32340) (b3a34fc)
• Set task status to 'cancelled' in BackgroundTaskManager.cancelAll() (#31764) (5733fb7)
• Store messages even if stream is undrained (#32119) (f2da1d1)

Bug Fixes

• API: Enforce the redaction floor when creating workflows (#31898) (03eecb1)
• AWS Rekognition Node: Handle all binary data modes correctly (#31065) (e264e06)
• Bump hono and postcss to patch CVEs from Trivy nightly scan (#31790) (0c26304)
• core: Allow exporting workflows with AI Gateway-managed credentials (#31136) (8376a4f)
• core: Bump qs, tmp, uuid, @tootallnate/once (#31674) (868e988)
• core: Dedupe getConnectedNodes results and add fast-check property tests (#31793) (be85b10)
• core: Delete orphaned per-user entries on unshare and membership changes (#31741) (8832194)
• core: Disable iAI e2e tests temporarily (#31779) (91ae2a2)
• core: External agent channels correctly utilise the user ID for episodic memory (#31584) (2a9a23f)
• core: Fix dropdown menu safety triangle (#31583) (ff1a7ae)
• core: Fix hardcoded aud claim in MCP OAuth tokens (#30558) (6bcd02a)
• core: Ground AI workflow completion in saved graph (#31742) (491360f)
• core: Improve validator error messages for name and label fields (#31391) (24f27ed)
• core: Include node and field details in WorkflowHasIssuesError message (#30944) (68b2053)
• core: Invalidate cached redaction floor across mains on change (#31831) (ad59171)
• core: Keep Instance AI builder sandboxes thread-scoped and non-ephemeral (#31745) (2993afb)
• core: Lock execution row during data-only condition re-check (#31547) (f83efe5)
• core: Make AI assistant conversation pruning happen regularly (#31707) (13a1a99)
• core: Make Sentry event loop block detection configurable (#31823) (ddac0e0)
• core: Move instance AI builds to a skill (#31412) (332d2df)
• core: Normalize LangChain parser errors (#31499) (872171c)
• core: Polyfill DOMMatrix when parsing PDFs in Data Loader (#31669) (5e0e266)
• core: Prefer MCP registry nodes when wiring AI Agent tools (#30774) (f4e998f)
• core: Preserve verification failure in budget-exhausted blocked responses (#31907) (f7076a3)
• core: Prevent evaluation executions from stalling in status new (#31619) (ea800f7)
• core: Prevent isUniqueConstraintError false positives (#31284) (a3e37fc)
• core: Reclassify expected backend errors out of the Sentry error stream (#31423) (ecce350)
• core: Report only error class and stack for unhandled node errors (#31628) (364c250)
• core: Resolve custom node icon paths (#30946) (7ab8254)
• core: Restore OIDC login for IdPs returning expires_in: 0 (#31265) (41b2bda)
• core: Resume Instance AI sandboxes that were stopped or deleted while idle (#31761) (06cf1d9)
• core: Show actionable message when OAuth2 token refresh fails (#30460) (5e9a8a0)
• core: Stop parent workflows getting stuck waiting on sub-workflow completion (#31736) (61af45a)
• core: Store OAuth CSRF and PKCE state per-flow in the cache (#31254) (7d729ff)
• core: Strip legacy unsupported config before agent JSON validation (#31577) (255b7a1)
• core: Sub-workflows to respect own timeout settings and global timeout config (#31536) (0b2a632)
• core: Teach the builder the SDK language subset and stop repeated invalid repairs (#31911) (4271d42)
• core: Temporarily disable error card from iAi chat (#31740) (d58b7ea)
• core: The n8n import:workflow --activeState=fromJson cli can fail for subworkflow dependencies (#31377) (e785e4e)
• Declare @smithy/node-http-handler and @aws-sdk (#31562) (485c153)
• Discord Node: Preserve object author in embed JSON for icon_url support (#30046) (cb38338)
• editor: Add evaluation trigger from setup (#31102) (5504361)
• editor: Allow editing IdP mapping rules when SSO is configured v… (#31809) (b9af480)
• editor: Attribute experiment telemetry in PostHog (#31137) (4ea8068)
• editor: Constrain debug overwrite pinned data confirmation modal (#31665) (6e67ffd)
• editor: Copy only selected markdown editor text (#31851) (5036147)
• editor: Load all SSO role mapping rules instead of first page (#31523) (330d441)
• editor: Make project delete dialog backdrop cover the sidebar (#31735) (c02665a)
• editor: Move the AI Assistant status line into the conversation flow (#31811) (4c0628a)
• editor: Persist switching workflow credential resolver back to system resolver (#31703) (f723f54)
• editor: Polish Instance AI panel interactions (#31903) (054c85d)
• editor: Polish private credential pills, callout, and banners (#31604) (7e83c7b)
• editor: Preserve non-string JSON values when importing cURL commands (#31791) (ed09c08)
• editor: Reference manage data redaction permission in enforcement dialogs (#31893) (c05a623)
• editor: Reset connection state when switching credential to private (#31713) (b2942b4)
• editor: Show data redaction upgrade prompt on unlicensed instances (#31816) (b755ee4)
• editor: Show error feedback when copying non-duplicatable triggers (#31104) (151fd83)
• editor: Show switch-to-static warning after connecting a private credential (#31712) (f1d87fd)
• Format single-line PEM keys when newlines are stripped on paste (#31129) (ec44980)
• Google Sheets Trigger Node: Custom OAuth option not availble when there are managed credentials (#29933) (a44197c)
• Harden mutation picker against low-value source files (#31914) (7e5c5c4)
• HTTP Request Node: Sign Amazon Bedrock requests as 'bedrock' service (#31250) (9963143)
• Improve Instance AI workflow-builder eval reliability and node diagnostics (#31506) (4e0e0ed)
• LangChain Code Node: Hide node from the node catalogue (#31464) (18d4fdd)
• MCP Client Tool Node: Tie transport lifecycle to execution cancel signal to prevent GET stream leak (#31087) (2a88b50)
• Microsoft Entra Node: Refresh expired OAuth2 tokens (#30943) (ab849d3)
• Postgres Node: Spread array queryReplacement across multiple bind values (#31704) (ee7aa0b)
• Read/Write Files from Disk Node: Escape square brackets in file path selector (#31706) (89ae45f)
• Remove PLAYWRIGHT_BROWSERS_PATH from install-browsers turbo (#31856) (a0df2a3)
• Salesforce Node: Preserve detailed API errors in continueOnFail mode (#30990) (8cfc9d2)
• Slack Node: Normalize multiOptions values when expression returns a string (#31269) (95e4ee7)
• Stabilise midnight-sensitive integration tests and harden CTE (#31901) (4ef9944)
• TheHiveProject Node: Normalize analyzers when expression returns a string (#31580) (43d32fd)
• Use logical-or fallback for GitHub env vars in send-metrics (#31783) (d39d944)

Bug Fixes

• cli: Decouple agent library bundle from build:data (#31293) (70ab5e5)
• Compression Node: Add decompression output size validation (#31366) (90dd93c)
• core: Align /credentials/for-workflow response with its frontend type (#31253) (1c39015)
• core: Allow emails in npm person strings in no-template-placeholders lint rule (#31196) (0a548b8)
• core: Coerce non-string node names in buildNodeIndex (#31411) (6cf3b0b)
• core: Expand ESLint rule to catch toThrowError error instance assertions (#31187) (39d660e)
• core: Insights page shows license paywall for licensed users (#31406) (d24a076)
• core: Make AI tool nodes continue on error by default (#31225) (863dfc3)
• core: Normalise Sentry stack frame paths to stable app:/// roots (#31421) (e620545)
• core: Preserve code-builder thread suffix when parsing session (#30829) (483752e)
• core: Preserve underlying cause when logging webhook execution failures (#31120) (b2f4c2c)
• core: Quiet VM expression engine logs on the happy path (#31488) (b9e97e4)
• core: Raise rate limit on telemetry /identify endpoint (#31509) (e8cbcf0)
• core: Re-register expression metrics after Prometheus registry reset (#31484) (ccf401c)
• core: Rebuild isolated-vm in Docker image for musl libc (#31396) (80a97bd)
• core: Sort MCP search_workflows by most recently edited (#31245) (3d452f7)
• core: Synthesize type-defs for MCP registry nodes at request time (#30887) (37e47e3)
• core: Use slugs instead of ids to identify MCP registry servers (#30974) (4722c4d)
• core: Use timestamptz for data table date columns (#31286) (1a9a69a)
• editor, core: Enhance source control endpoint access control (#31349) (068547b)
• editor: Clear pin data on workspace initialization of production execution (#31218) (a99b91d)
• editor: Hide private credential connect controls without update permission (#31507) (13ee461)
• editor: Reduce length penalty so longer node names rank fairly (#31294) (1b8235e)
• editor: Remove obsolete credential resolver warnings (#31466) (f09e1c7)
• editor: Render new empty state for quick-connect credentials in standalone mode (#31145) (1e9c6bb)
• editor: Render setup step dropdown above chat input (#31299) (e07c8e6)
• editor: Suppress strict-mode 'delete' TypeScript error in Code node JS editor (#31067) (d6457bd)
• Email Trigger (IMAP) Node: Fix emails marked as read without triggering workflow (#30375) (3d45fe6)
• Extend Browser mcp secret redaction patterns (#30970) (60c8517)
• Google Gemini Chat Model Node: Hide imagen models from model dropdown (#31150) (e4c0d6f)
• HighLevel Node: Encode contact lookup query parameters (#31365) (8635dcd)
• langchain agent Node: Resolve sub-agent tool calls inline when nested (#31072) (e9920b6)
• LDAP Node: Bump ldapts to 8.1.7 to fix silent rename on long DN paths (#30712) (7db3eb8)
• MongoDB Node: Validate update key value type (#31371) (439d260)
• Only allow specified AWS regions (#31374) (e3c14a4)
• Pipedrive Node: Map user_id to owner_id for v2 deal and activity requests (#30890) (e9631b3)
• Postgres Node: Return empty array for SELECTs that match no rows (#30528) (4df0568)
• Preserve reserved tokens (#31363) (dd4b3ff)
• Resolve all external licenses in release SBOM (#31231) (eff29ce)
• Revert 'Input validation for workflow and data table names' (PR 30594) (#31359) (f4a5880)
• Salesforce Trigger Node: Stop Created triggers refiring on record updates (#30809) (6151660)
• Send Email Node: Allow non-inline file attachments (#31071) (c1856af)
• Set Content-Type for Meta-family trigger node responses (#31354) (16728b3)
• Stripe Trigger Node: Use stored webhook secret for request verification (#31212) (9e41d03)
• Zulip Node: Normalize multiOptions recipients when expression returns a string (#31492) (01cc906)

Bug Fixes

• ai-builder: Default Switch to case-insensitive in builder hints (#31044) (76c432c)
• Azure Cosmos DB Node: Preserve query parameter types instead of converting to strings (#25882) (cb4db22)
• Bitbucket Node: Use supported workspace listing endpoint (#30646) (875a805)
• Bump urllib3 constraint to >=2.7.0 (#30927) (aa78b81)
• core: Acquire expression isolate for scheduled polls (#30729) (764f33a)
• core: Allow dynamic credential OAuth callbacks without skip-auth env var (#31103) (cf1a6fa)
• core: Allow personal project owners to manage data redaction (#31153) (1f41d33)
• core: Allow shadowing dangerous globals as variable names in workflow SDK (#30678) (d13e22b)
• core: Allow Unicode characters in execution metadata keys (#30486) (41a273e)
• core: Bypass pubsub debounce for workflow activation display commands (#30965) (9f0a695)
• core: Count agent background generation tokens (#31082) (def3a7b)
• core: Exclude error workflow executions from time saved insights (#30952) (4b0e23b)
• core: Guide agent to not pass bogus workflow-id to submit-workflow tool (#30911) (a3210d5)
• core: Handle null pinData column at executions, save empty object as pinData on instanceAI (#30698) (50dc050)
• core: Honor chunkSize when streaming S3-backed binary data (#30919) (e2c2a5a)
• core: Improve license diagnostics and CLI output (#30955) (affc3c1)
• core: Improve project routing for MCP-built workflows (#30674) (65b7919)
• core: Keep Instance AI HITL confirmations waiting (#30722) (cdfc905)
• core: Keep workflow active when external hook rejects publish (#30707) (2bc621e)
• core: Members can still create API keys with insights:read scope (#30778) (d5d619c)
• core: Populate manual user id on webhook execution data path (#30644) (2743f51)
• core: Preserve known credential supportedNodes under lazy loading (#30529) (58483a1)
• core: Preserve workflow node settings in workflow-sdk (#30869) (69c9e65)
• core: Reject invalid ai_tool source nodes in MCP workflow creation (#30593) (af73013)
• core: Remove aggressive temp directory cleanup in binary data rename (#31068) (10a04cb)
• core: Report scheduled-poll isolate acquisition failures via __emitError (#30743) (5f97ef3)
• core: Scope source control data tables by project (#30751) (4cf44e3)
• core: Set HITL confirmation timeout default (#30783) (b601880)
• core: Show clear error when running a tool node without an Agent (#30626) (ca38167)
• core: Stop classifying AI sub-tool nodes as triggers in generated types (#30865) (4db0046)
• core: Stop idle-killing Instance AI active runs awaiting HITL (#31154) (a8d29f2)

Bug Fixes

• Add Switch fallback output guidance for workflow builder (#30449) (17b64da)
• ai-builder: Ground workflow setup guidance (#30638) (0d262fe)
• ai-builder: Guide builder to prefer httpBearerAuth for Bearer flows (#30309) (c3e39f8)
• Allow service-specific MCP OAuth credentials to be used with MCP endpoint domains (#30343) (3dda7b7)
• core: Add correct telemetry for resumed Instance AI runs (#30335) (8489afd)
• core: Add input validation for workflow and data table names (#30594) (d14c71e)
• core: Add Instance AI first-turn guidance and trace metadata (#30315) (5d872d1)
• core: Add origin-only fallback to MCP OAuth discovery for path-bearing server URLs (#30231) (fb78047)
• core: Align MCP OAuth issued aud with advertised resource URL (#30055) (9d4fc35)
• core: Avoid unnecessary planner credential prompts (#30451) (f1fd79f)
• core: Bypass archived workflows in activation (#30517) (3bab056)
• core: Clean up failed AI workflow shells (#30432) (d26a402)
• core: Extract workflow-sdk examples to a writable cache dir (#30433) (6beed60)
• core: Limit Insights compaction runs (#30503) (d67cef8)
• core: Member role getting read permissions for insights (#30291) (111d403)
• core: Preserve AxiosHeaders instance when applying OpenAI vendor defaults (#29860) (3dd134a)
• core: Preserve nested arrays in VM expression engine output (#30246) (c2ecb4d)
• core: Prioritize HTTP status codes for retry logic in httpRequest nodes (#27547) (87ba302)
• core: Resolve empty expressions to empty string in VM evaluator (#30310) (e52bbbd)
• core: Return plan-tool validator errors as tool results instead of throwing (#30592) (db69aa6)
• core: Stop workflow builder after terminal remediation (#30289) (22f2e34)
• core: Update instance-ai evaluator to include pinned subnodes and allow all mcp tools (#30292) (54d62bb)
• core: Update workflow version only on indexable content change (#30521) (dc66f1e)
• core: Warn MCP clients that removeNode disconnects sub-nodes (#30491) (83a0b41)
• Correct misleading credential notice in Bearer Auth (#30465) (5279454)
• CRON Node: Tooltip typo in trigger polling setting (#17949) (94a3220)
• editor: Auto-derive data table name from CSV filename (#30066) (108fb02)
• editor: Automatically close credential modal after claiming free OpenAI credits (#30610) (05c25da)
• editor: Do not save workflow on execute when autosave is disabled (#30347) (ad6c470)
• editor: Fit workflow zoom into workflow artifact after animation correctly (#30625) (f88334d)
• editor: Fix wf context for ai assistant setup node validations (#30664) (f2a86e9)
• editor: Hide help callout for view-only credential users (#30336) (b40d533)
• editor: Limit run live demo ready-to-run button to users created within 14 days (#25896) (d8f22e5)
• editor: Load credentials when opening node credential picker (#30463) (cec8238)
• editor: Open update CTA docs in a new tab on self-hosted instances (#30571) (3fca302)
• editor: Persist Resource Mapper field deletions (#30244) (b6ad572)
• editor: Preserve custom Form Trigger path on workflow re-import (#30053) (c3cf5c7)
• editor: Prevent expression editor result panel from overflowing in HTML and Markdown render modes (#30470) (709ebbd)
• editor: Prevent Safari text selection on canvas drag (#27055) (4a50e92)
• editor: Render fallback icon for projects without one in sidebar (#30572) (cd1bae8)
• editor: Restore NDV panel proportions after zoom changes (#30573) (3d67664)
• editor: Restore workflow name in window tab title (#29826) (21a3090)
• editor: Sanitize workflow created during sub-workflow conversion (#30208) (d5d5173)
• editor: Snap tidy-up node positions to grid (#30455) (e105063)
• editor: Stabilize workflow setup credentials state (#30513) (c638e91)
• editor: Use vuedraggable source module in builds (#30516) (4575c85)
• Fix 13 critical issues in vm2, protobufjs, @daytonaio/sdk and 4 more (#30578) (ac02d32)
• Fix security issue in langsmith via minor version upgrade from 0.5.19 to 0.6.0 (#30685) (1dd0415)
• Google Cloud Storage Node: Fix large file upload and add Project RLC (#29847) (99a66eb)
• Honor continueOnFail in Send and Wait operations (#30287) (f155ace)
• HTTP Request Node: Trim url whitespace (#27381) (47ffd1c)
• Improve AI builder reliability for Sheets and workflow lookups (#30546) (458709f)
• Include .gitignore in node-cli generated projects (#30068) (0626ed2)
• LinkedIn Node: Improve refresh token expiry error messaging (#29613) (e80ccd8)
• Redact issuer-shaped secrets from MCP browser tool outputs (#30026) (2c31768)
• Restore /usr/local/bin/n8n compat symlink in production image (#30622) (f4deb49)
• S3 Node: Implement Delete Bucket operation (#30056) (aabc6f1)
• Slack Node: Honor Continue using error output functionality (#29116) (cdc12d2)
• Supabase Node: Fix getAll returning duplicate or missing records during pagination (#30020) (6362afe)
• Zendesk Trigger Node: Prevent webhook from being deleted after execution (#29511) (c27fcde)

Bug Fixes

• ai-builder: Add boundaries on the workflow builder remediation loops (#29430) (2259f32)
• ai-builder: Allow skipping final ask-user question (#29563) (661f990)
• ai-builder: Filter LangSmith eval dataset by local file slugs (#29507) (54d9286)
• ai-builder: Handle properties with contradicting displayOptions as OR alternatives instead of AND (#29500) (84ac811)
• ai-builder: Stop builder from adding auth to inbound trigger nodes by default (#29648) (c28d501)
• Allow 5-field cron expressions with step values in polling nodes (#29447) (d18f183)
• Anthropic Chat Model Node: Add adaptive thinking mode for Claude Opus 4.7+ (#29467) (90d875c)
• Compare Datasets Node: Preserve falsy values in mix mode except fields (#29666) (62ddc5c)
• core: Accept placeholder() inside node credentials slot (#29691) (dc6bd68)
• core: Acquire expression isolate for dynamic node parameter requests (#29671) (418f1f2)
• core: Add file path validation to localFile source (#29464) (7277566)
• core: Add GET handler to MCP endpoint for Streamable HTTP spec compliance (#28787) (4ae0322)
• core: Add timeout to external secrets provider refresh (#29679) (e350429)
• core: Apply credential allowed domains in declarative node requests (#29082) (8551b1b)
• core: Correct LDAP search filter construction (#29388) (32dd743)
• core: Fix code node executions hanging when idle timer overlaps with task acceptance (#29239) (7bd3532)
• core: Fix MCP OAuth discovery URL construction and grant type selection (#27283) (d92ec16)
• core: Force saving executions when instance AI executes WFs (#29515) (ef56501)
• core: Gate Instance AI edits to pre-existing workflows (#29501) (6175fd6)
• core: Generate array types for properties with multipleValues (#29410) (fb65c61)
• core: Handle missing runData during execution recovery (#29513) (8b7b4f5)
• core: Harden Set node workflow SDK contract (#29568) (625ed5e)
• core: Include stack trace in error logs for non-ApplicationError errors (#29496) (16d1461)
• core: Increase default task runner grant token TTL to 30s (#29443) (328f4b8)
• core: Isolate expressions on chat resumption and test webhook deactivation (#29703) (568e5a2)
• core: Make MCP client registration cap tunable and surface a proper limit error (#29429) (dad4231)
• core: Make task runner grant token TTL configurable (#29357) (3f350a8)
• core: Pass nodeTypesProvider to validate workflows fully at instance AI (#29333) (388cd79)
• core: Persist execution context before writing to db (#28973) (c4bb5ae)
• core: Recreate data table backing tables on entity import (#29454) (6bca1fa)
• core: Reject empty webhookMethods in community lint rule (#29474) (34d7a02)
• core: Reset Redis retry counter on successful reconnect (#29377) (7722023)
• core: Respect global admin scope when listing favorites (#29472) (d9d1e7c)
• core: Restore peer project discovery in share dropdowns (#29537) (2a0e2fb)
• core: Round fractional time saved values before inserting into insights BIGINT column (#29553) (74d55b9)
• core: Show AI Builder draft workflows in workflow list (#29670) (dc52bbd)
• core: Use editor base URL for workflow and execution links (#23630) (896461b)
• core: Validate workflow import URL requests (#29178) (ecd0ba8)
• core: Wire EncryptionKeyProxy provider on bootstrap (#29581) (ee7260c)
• DeepL Node: Update credentials to use header-based authentication (#24614) (b72bd19)
• Drop template search tools from builder (#29573) (9b00ccb)
• editor: Add proper bg color for hover state with color-mix() (#29590) (6698c42)
• editor: Align message box button radius with N8nButton (#29397) (bc315d0)
• editor: Rename canvas header dropdown action to Description (#29719) (49e7b05)
• editor: Rename encryption keys "Type" column to "Status" (#29966) (e71afed)
• editor: Render tooltips above popovers (#29997) (ba5b3d1)
• editor: Resolve expressions in 'Go to Sub-workflow' navigation (#29843) (d6bae35)
• Fix 15 security issues in fast-xml-builder, basic-ftp, fast-uri and 5 more (#30169) (267fe49)
• Git Node: Restore Clone and other operations on simple-git 3.36+ (#30223) (a8aa955)
• Google Chat Node: Clarify message resource name field (#29964) (55df7cb)
• Google Sheets Node: Reduce duplicate API calls in append operation to avoid quota limits (#29444) (d63e1ae)
• Handle IMAP fetch errors to prevent instance crash and stuck workflows (#29469) (46d52ff)
• HTTP Request Node: Validate URL type in older node versions (#29886) (29a864c)
• MongoDB Node: Resolve collection parameter per item in write operations (#29956) (582b6ae)
• Notion Node: Paginate Get Many operations beyond 100-item API cap (#29690) (d318bc1)
• Notion Node: Serialize staticData as ISO string in NotionTrigger (#29688) (d2e1eb3)
• Notion Node: Update UI URLs from notion.so to notion.com ahead of domain migration (#29861) (3593131)
• Oracle DB Node: Handle the test failures (#28341) (0697562)
• Restore broken stdlib calls in Python Code node (#29776) (a786476)
• RSS Feed Read Node: Respect proxy settings (#30059) (2e046d5)
• Salesforce Node: Fix trigger not firing on repeated record updates (#29107) (f871d44)
• Schedule Node: Fix hourly intervals that don't divide evenly into 24h (#29778) (1a22c76)
• Snowflake Node: Fix issue with Insert and Update operations not working (#29339) (4c369e8)
• Supabase Node: Don't display RPCs in an RLC for the table (#28146) (78aa0e7)
• Wait Node: Resolve expressions inside Custom HTML form fields (#30060) (7c1a771)
• YouTube Node: Fix misspelled "unlisted" privacy status value in Video Update operation (#30203) (96b018d)

Bug Fixes

• ai-builder: Add boundaries on the workflow builder remediation loops (#29430) (2259f32)
• ai-builder: Allow skipping final ask-user question (#29563) (661f990)
• ai-builder: Filter LangSmith eval dataset by local file slugs (#29507) (54d9286)
• ai-builder: Handle properties with contradicting displayOptions as OR alternatives instead of AND (#29500) (84ac811)
• ai-builder: Stop builder from adding auth to inbound trigger nodes by default (#29648) (c28d501)
• Allow 5-field cron expressions with step values in polling nodes (#29447) (d18f183)
• Anthropic Chat Model Node: Add adaptive thinking mode for Claude Opus 4.7+ (#29467) (90d875c)
• Compare Datasets Node: Preserve falsy values in mix mode except fields (#29666) (62ddc5c)
• core: Accept placeholder() inside node credentials slot (#29691) (dc6bd68)
• core: Acquire expression isolate for dynamic node parameter requests (#29671) (418f1f2)
• core: Add file path validation to localFile source (#29464) (7277566)
• core: Add GET handler to MCP endpoint for Streamable HTTP spec compliance (#28787) (4ae0322)
• core: Add timeout to external secrets provider refresh (#29679) (e350429)
• core: Apply credential allowed domains in declarative node requests (#29082) (8551b1b)
• core: Correct LDAP search filter construction (#29388) (32dd743)
• core: Fix code node executions hanging when idle timer overlaps with task acceptance (#29239) (7bd3532)
• core: Fix MCP OAuth discovery URL construction and grant type selection (#27283) (d92ec16)
• core: Force saving executions when instance AI executes WFs (#29515) (ef56501)
• core: Gate Instance AI edits to pre-existing workflows (#29501) (6175fd6)
• core: Generate array types for properties with multipleValues (#29410) (fb65c61)
• core: Handle missing runData during execution recovery (#29513) (8b7b4f5)
• core: Harden Set node workflow SDK contract (#29568) (625ed5e)
• core: Include stack trace in error logs for non-ApplicationError errors (#29496) (16d1461)
• core: Increase default task runner grant token TTL to 30s (#29443) (328f4b8)
• core: Isolate expressions on chat resumption and test webhook deactivation (#29703) (568e5a2)
• core: Make MCP client registration cap tunable and surface a proper limit error (#29429) (dad4231)
• core: Make task runner grant token TTL configurable (#29357) (3f350a8)
• core: Pass nodeTypesProvider to validate workflows fully at instance AI (#29333) (388cd79)
• core: Persist execution context before writing to db (#28973) (c4bb5ae)
• core: Recreate data table backing tables on entity import (#29454) (6bca1fa)
• core: Reject empty webhookMethods in community lint rule (#29474) (34d7a02)
• core: Reset Redis retry counter on successful reconnect (#29377) (7722023)
• core: Respect global admin scope when listing favorites (#29472) (d9d1e7c)
• core: Restore peer project discovery in share dropdowns (#29537) (2a0e2fb)
• core: Round fractional time saved values before inserting into insights BIGINT column (#29553) (74d55b9)
• core: Show AI Builder draft workflows in workflow list (#29670) (dc52bbd)
• core: Use editor base URL for workflow and execution links (#23630) (896461b)
• core: Validate workflow import URL requests (#29178) (ecd0ba8)
• core: Wire EncryptionKeyProxy provider on bootstrap (#29581) (ee7260c)
• DeepL Node: Update credentials to use header-based authentication (#24614) (b72bd19)
• Drop template search tools from builder (#29573) (9b00ccb)
• editor: Add proper bg color for hover state with color-mix() (#29590) (6698c42)
• editor: Align message box button radius with N8nButton (#29397) (bc315d0)
• editor: Fix OAuth2 credential showing "Needs first setup" after connecting (#29617) (243f665)
• editor: Fix sub-workflow folder placement and connection loss (#28770) (44579d6)
• editor: Ignore paste events on read-only canvas (#29673) (34c49b9)
• editor: Keep publish actions menu enabled for published workflows (#29396) (c65fa28)
• editor: Load more executions on tall screens (#29407) (a273a9d)
• editor: Make instance ai resource link chips open resources (#29577) (b97ca36)
• editor: Make textarea resize handle accessible in NDV (#29676) (9fda733)
• editor: Mark workflow dirty after debug pinData changes (#28886) (2beb006)
• editor: Never block publishing on node execution issues (#29479) (5a56459)
• editor: Polish encryption keys date range filter (#29569) (56412bc)
• editor: Remove clipping for focus panel textarea (#28677) (5361257)
• editor: Restore read-only mode for archived workflows on canvas (#29559) (a7ef741)
• editor: Show permission-aware message on redacted input/output panels (#29521) (83c400e)
• editor: Surface unofficial verified community node tools in AI Tools picker (#28985) (f77dfd1)
• Fix ollama node url path and thinking tokens (#23963) (4ea1153)
• Google Drive Node: Resolve original file name when copying with empty name (#28896) (c274976)
• Merge Node: Improve SQL Query mode memory efficiency and error reporting (#28993) (12275c8)
• Microsoft Outlook Trigger Node: Use per-folder endpoints for folder-scoped message polling (#29663) (f401f91)
• No Credits state for n8n Connect badge (#29375) (47ad397)
• Notion Node: Support app.notion.com URL format for page and block ID extraction (#29554) (221c7f7)
• Postgres Node: Output Large-Format Numbers As option ignored after pool is cached (#29477) (a65e181)
• Salesforce Node: Allow overriding JWT audience with My Domain URL (#29016) (9decb1e)
• Schedule Node: Cap day-of-month jitter at 28 (#29614) (86f47ee)
• Skip AI tool generation for community trigger nodes (#29453) (c724dac)
• Snowflake Node: Avoid call stack overflow on large result sets (#29200) (b2ac67f)
• Telegram Trigger Node: Drop pending updates when creating a new webhook (#29103) (4358f1d)
• Todoist Node: Migrate to Todoist unified API v1 endpoints (#29532) (5799481)
• Use explicit node references for AI memory session keys (#29473) (139b803)
• Validate sql (#24706) (47a6658)
• Zammad Node: Add To and CC fields for email articles (#28860) (e04f027)

Bug Fixes

• Add credential auth and test for Twilio, Pipedrive, Asana, Freshdesk, Workable (#28265) (a2aa69d)
• Additional keys in routing nodes (#28758) (8e49800)
• ai-builder: Adjust chat trigger memory builderHints (#29156) (b6fcabc)
• ai-builder: Hide and reap intermediate AI-created workflows (#29066) (632ae67)
• ai-builder: Improve button, icon, callout and workflowSelector schemas (#28828) (afe4298)
• ai-builder: Keep workflow identity across rebuild/patch (#28926) (13029e6)
• ai-builder: Prevent duplicate workflow creation on parallel submits in instance AI (#28793) (782b2d1)
• ai-builder: Stop treating empty defaults as satisfying required for the Split node (#28978) (8b33424)
• ai-builder: Support 'disabledOptions' in node schemas (#28894) (bc5e490)
• ai-builder: Validate merge node connections matches 'numberInputs' parameter (#28831) (0e838de)
• ai-builder: Validate required inputs on AI nodes (#29159) (97bdbd0)
• Allow task runner to invoke skills via slash command prefix (#29302) (65e55a8)
• Brevo Node: Send valid email attachments with correct filenames (#28816) (7d6f777)
• core: Fixes user search functionality in ProjectSettings for pr… (#28914) (1eea626)
• core: Add missing break statements in filter condition evaluation (#27708) (1e77f71)
• core: Allow .trim() in workflow-sdk parsing and coerce stringified patches (#29111) (b44e9d1)
• core: Allow SAML connection test without saving config first (#28702) (828d0ee)
• core: Broadcast MCP availability change via push connection (#29019) (e183ae4)
• core: Can't install community nodes on Windows (#28481) (7e3a2f6)
• core: Clean up project mapping rules on provisioning strategy switch (#28726) (c662862)
• core: Declare credentialType on MCP workflow-builder autoAssignedCredentials schema (#28353) (41424b3)
• core: Fix fixedCollection validation issues and empty setup cards on instance AI (#28794) (8630845)
• core: Fix health endpoint cross-origin requests (#28878) (b6eabb4)
• core: Fix publishing dynamic credential chathub flow (#28827) (852d082)
• core: Generate title once there's enough user context (#28721) (2d624a5)
• core: Guard event log parsing against unbounded memory growth (#28594) (a817cbc)
• core: Harden event log parse against malformed input (#29004) (b2b1370)
• core: Hide pre-resolved setup requests from Instance AI wizard (#28731) (9ea2ef1)
• core: Improve error messages for invalid node and trigger input (#28053) (0f4c5b3)
• core: Link existing email users on LDAP sync instead of failing (#28695) (767b3ab)
• core: Pass userId through webhook test execution path for redaction (#28775) (19b2388)
• core: Persist execution metadata for failed executions in scaling mode (#28774) (1256da9)
• core: Pin Alpine version in Docker builder stages for reproducible builds (#29097) (147bd8c)
• core: Pin sandbox workflow-sdk to host version (#29048) (9ea8533)
• core: Preserve manual scopes for inherited generic OAuth2 credentials (#27858) (5ee534c)
• core: Preserve user-selected credentials when AI recreates a node (#28943) (5fa1f8f)
• core: Prevent Redis connection recovery from being missed (#28256) (494a855)
• core: Prevent S3 socket pool exhaustion on partial stream reads (#28313) (481fbdf)
• core: Request helper function support setting agentOptions (#28756) (4ce186a)
• core: Scope live and test webhook handlers to their route family (#28804) (bb25d4c)
• core: Shift existing rules on create to avoid order conflict (#28722) (c55b95f)
• core: Support mixed bracket/dot notation in external secrets expressions (#28711) (a757ddd)
• core: Surface credential and resource choice when more than one match exists (#29087) (0d16dd5)
• core: Surface pagination state in instance AI credentials list (#29098) (9345d13)
• core: Upgrade task-runner-launcher to v1.4.5 (#29155) (b37044e)
• core: Use upsert for MCP OAuth consent to allow re-authorization (#28703) (26ecadc)
• core: Workflow import cli doesn't deregister crons for deactivated workflows (#29129) (553976d)
• Correct typo in proxy error message: not value -> not valid (#28318) (b143830)
• Correctly rename all temporal binary files after execution (#28960) (71b2b88)
• Disable "Get 100 free OpenAI API credits" if aiGateway enabled in the license (#29050) (67bd8de)
• Disable until we encrypt (#28875) (1b02a0d)
• Discord Node: Correctly handle API rate limits (#29051) (089d6bd)
• Discord Node: Fix file name and mimetype for file upload (#28807) (d3ef7e3)
• E2E test for token exchange (#28895) (d49049d)
• EditImage Node: Fix orientation when modifying images (#28970) (b649eea)
• editor: Align Model and Sandbox visibility with edit permissions (#29076) (e10509f)
• editor: Allow name parameters to be defined by AI (#28763) (76358a6)
• editor: Allow users to logout of dynamic creds in chathub (#29117) (b1ddbf2)
• editor: Checklist not showing workflow settings configuration (#28034) (3c54cda)
• editor: Constrain InstanceAiView stacking context below sidebar (#29324) (b71a31d)
• editor: Copy to editor not using pinned data from the execution (#28905) (20d9215)
• editor: Disable WF version menu only when all actions are unavailable (#29266) (23170e4)
• editor: Fix column collapse button not visible in table view (#28899) (0eb30c6)
• editor: HTTP request node showing warning about credentials not set when they are set (#28270) (4869e0a)
• editor: Move tooltip for required RMC fields to the right (#28803) (713c498)
• editor: Populate chat history in executions view (#29229) (cf5cdbf)
• editor: Prevent executions table flicker on empty auto-refresh (#28805) (2bd8b47)
• editor: Refresh wallet balance when usage refresh is clicked (#29067) (7fd0b37)
• editor: Restore missing node icons for HTTP-auth credentials (#28814) (345ce7f)
• editor: Save button never shows saved state after saving credentials (#28486) (4352749)
• editor: Show error toasts in Instance AI executable canvas (#29328) (dc33223)
• editor: Show Manage community-node link to admins, not just owners (#29060) (ef944b4)
• editor: Show saved credentials when node has mismatched credentials object (#28693) (d8f742b)
• editor: Surface configured minimum password length in UI (#28194) (330211c)
• Embeddings Google Gemini Node: Update wrong default embeddings model (#26977) (a1d733b)
• Fix 11 security issues in @xmldom/xmldom, defu, @langchain/community and 5 more (#29126) (35449aa)
• Fix 15 critical issues in protobufjs, defu, @langchain/community and 6 more (#28661) (6650068)
• Fixes AI Assistant opt-in modal terms link (#28779) (10f619f)
• GitHub Node: Return pagination token as string in resource locators (#29099) (5dda3b2)
• Gmail Trigger Node: Add maxResults limit to prevent OOM on large inboxes (#28470) (b9c4618)
• Gmail Trigger Node: Exclude scheduled emails from trigger query (#29244) (58d7983)
• Google Gemini Node: Filter out undefined parts when processing API responses (#28567) (0aabee0)
• Google Gemini Node: Show Number of Images option only for models that supports it (#29153) (b0ec5cd)
• Jenkins Node: Properly load job parameters (#28631) (f2aa016)
• MCP Server Trigger Node: Only return error name and message in tool error responses (#28791) (6db02fe)
• Microsoft Outlook Trigger Node: Show nested subfolders in folder dropdowns (#28759) (3409a67)
• MongoDB Chat Memory Node: Add connection pool limit (#28042) (a88ee76)
• Moonshot Kimi Node: Update default model to kimi-k2.6 (#28859) (1c52b0a)
• MySql Node: Fix table name filtering (#28911) (ccbd914)
• Preserve structuredContent in MCP nodes to prevent AI Agent reasoning loops (#27297) (048e01e)
• RabbitMQ Trigger Node: Redeliver messages on failed executions (#28712) (7be9f65)
• Schedule Node: Avoid using 0 day of month (#28432) (a9e5f0e)
• Update hono, protobufjs, yaml, and other dependencies (#28877) (c4ff018)
• Use different runtime for each agent call, refactor state management (#27915) (68c289f)
• WooCommerce Trigger Node: Guard HMAC verification against missing secret (#28964) (5cef662)
• Xero Node: Update OAuth Scopes to meet new Xero API requirements (#27563) (7f54ff4)

Bug Fixes

• ai-builder: Increase orchestrator max steps from default 5 to 60 (#28429) (3c850f2)
• ai-builder: Scope artifacts panel to resources produced in-thread (#28678) (7b3696f)
• ai-builder: Use placeholders for user-provided values instead of hardcoding fake addresses (#28407) (39c6217)
• Alibaba Cloud Chat Model Node: Add credential-level url field for AI gateway compatibility (#28697) (dd6c28c)
• ClickUp Node: Unclear error message when using OAuth credentials (#28584) (19aadf1)
• core: Add required field validation to MCP OAuth client registration (#28490) (8716316)
• core: Cascade-cancel dependent planned tasks when a parent task fails (#28656) (35f9bed)
• core: Enforce credential access checks in dynamic node parameter requests (#28446) (ac41112)
• core: Ensure single zod instance across workspace packages (#28604) (107c48f)
• core: Filter stale credentials from setup wizard requests (#28478) (657bdf1)
• core: Fix public API package update process (#28475) (34430ae)
• core: Fix workflow-sdk validation for plain workflow objects (#28416) (62dc073)
• core: Guard against undefined config properties in credential overwrites (#28573) (77d27bc)
• core: Handle git fetch failure during source control startup (#28422) (fa3299d)
• core: Handle invalid percent sequences and equals signs in HTTP response headers (#27691) (ca71d89)
• core: Implement data tables name collision detection on pull (#26416) (e5aaeb5)
• core: Prevent nodes tool crash on flattened required fields (#28670) (3e72430)
• core: Resolve additional keys lazily in VM expression engine (#28430) (98b833a)
• core: Skip disabled Azure Key Vault secrets and handle partial fetch failures (#28325) (6217d08)
• core: Skip npm outdated check for verified-only community packages (#28335) (2959b4d)
• Disable axios built-in proxy for OAuth2 token requests (#28513) (56f36a6)
• editor: Advance wizard step on Continue instead of applying setup (#28698) (3b15e47)
• editor: Center sub-node icons and refresh triggers panel icons (#28515) (6739856)
• editor: Display placeholder sentinels as hint text in setup wizard (#28482) (bb7d137)
• editor: Gate Instance AI input while setup wizard is open (#28685) (db83a95)
• editor: Hide setup parameter issue icons until user interacts with input (#28010) (00b0558)
• editor: Improve disabled Google sign-in button styling and tooltip alignment (#28536) (e848230)
• editor: Improve setup wizard placeholder detection and card completion scoping (#28474) (d172113)
• editor: Only show role assignment warning modal when value actually changed (#28387) (9c97931)
• editor: Prevent setup wizard disappearing on requestId-driven remount (#28473) (04d57c5)
• editor: Re-initialize SSO store after login to populate OIDC redirect URL (#28386) (21317b8)
• editor: Refine resource dependency badge (#28087) (f216fda)
• editor: Reset OIDC form dirty state after saving IdP settings (#28388) (1042350)
• editor: Reset remote values on credentials change (#26282) (5e11197)
• editor: Resolve nodes stuck on loading after execution in instance-ai preview (#28450) (c97c3b4)
• editor: Restore WASM file paths for cURL import in HTTP Request node (#28610) (51bc71e)
• editor: Show auth type selector in Instance AI workflow setup (#28707) (1b13d32)
• editor: Show relevant node in workflow activation errors (#26691) (c9cab11)
• Google Cloud Firestore Node: Fix empty array serialization in jsonToDocument (#28213) (7094395)
• Google Drive Node: Continue on error support for download file operation (#28276) (30128c9)
• Google Gemini Node: Determine the file extention from MIME type for image and video operations (#28616) (73659cb)
• GraphQL Node: Improve error response handling (#28209) (357fb72)
• HubSpot Node: Rename HubSpot "App Token" auth to "Service Key" (#28479) (8c3e692)
• HubSpot Trigger Node: Add missing property selectors (#28595) (d179f66)
• IMAP Node: Fix out-of-memory crash after ECONNRESET on reconnect (#28290) (2d0b231)
• Link to n8n website broken in n8n forms (#28627) (ff950e5)
• LinkedIn Node: Update LinkedIn API version in request headers (#28564) (25e07ca)
• OpenAI Node: Replace hardcoded models with RLC (#28226) (4070930)
• Schedule Node: Use elapsed-time check to self-heal after missed triggers (#28423) (5f8ab01)
• Update working memory using tools (#28467) (39189c3)

Features

• Add deployment_key table, entity, repository, and migration (#28329) (59edd6a)
• Add Prometheus counters for token exchange (#28453) (c6534fa)
• AI Gateway credentials endpoint instance url (#28520) (d012346)
• API: Add missing credential endpoints (GET by ID and test) (#28519) (9a65549)
• core: Add require-node-description-fields ESLint rule for icon and subtitle (#28400) (5504099)
• core: Add KeyManagerService for encryption key lifecycle management (#28533) (9dd3e59)
• core: Configure OIDC settings via env vars (#28185) (36261fb)
• core: Persist deployment_key entries for stability across restarts and key rotation (#28518) (bb96d2e)
• core: Support npm dist-tags in community node installation (#28067) (ca871cc)
• core: Support npm registry token authentication to install private community node packages (#28228) (8b105cc)
• core: Track workflow action source for external API and MCP requests (#28483) (575c34e)
• core: Workflow tracing - add workflow version id (#28424) (9a22fe5)
• editor: Add favoriting for projects, folders, workflows and data tables (#26228) (b1a075f)
• editor: Enable workflow execution from instance AI preview canvas (#28412) (5b376cb)
• Enable security policy settings via env vars (#28321) (1108467)
• Linear Trigger Node: Add signing secret validation (#28522) (3b248ee)
• MiniMax Chat Model Node: Add MiniMax Chat Model sub-node (#28305) (bd927d9)
• Slack Node: Add app_home_opened as a dedicated trigger event (#28626) (f1dab3e)

Bug Fixes

• Add credential auth and test for PostHog, NASA, Peekalink, Clearbit, Uptime Robot (#27957) (c1b5c96)
• ai-builder: Expose credential account context to prevent prompt/credential mismatch (#28100) (c2fbf9d)
• ai-builder: Improve post-build flow: setup, test, then publish (#28125) (4b3b40e)
• ai-builder: Paginate list-credentials tool and drop unused fields (#28108) (4a3fc7d)
• ai-builder: Unify post-build credential setup into single setup-workflow flow (#28273) (8f8b70a)
• AWS DynamoDB Node: Add option to disable auto-parsing of numeric strings (#28093) (4b06720)
• AWS ELB Node: Fix spelling typo 'sucess' 12 'success' in RemoveListenerCertificates (#27703) (be45c08)
• Box Node: Fix issue where Box trigger node was not paginating correctly (#27415) (4b05191)
• core: Add projectId and projectName to log streaming events (#28310) (ebd279f)
• core: Add streaming keepalive to prevent proxy timeout during long agent executions (#27853) (b0484a1)
• core: Align VM expression engine error handler with legacy engine (#28166) (569ad49)
• core: Avoid permanent deactivation on transient isolate errors (#28117) (94b463e)
• core: Decrease workflow history compaction retention periods (#27763) (ccd4fd0)
• core: Drain webhook close functions to prevent MCP connection leaks (#28384) (882dd9c)
• core: Fix retry activation in multi-main bypassing exponential backoff (#28110) (2ed3f9c)
• core: Improve audit queries to avoid PostgreSQL bind parameter limits (#27985) (9ab974b)
• core: Improve audit queries to avoid PostgreSQL bind parameter limits (#27985) (dbe3f02)
• core: Improve performance of the push/pull modal getStatus (#27188) (309a739)
• core: Increase timing delays in workflow publish history tests (#28301) (b353143)
• core: MCP tools called after workflow execution failure (#28021) (2e56ba1)
• core: Omit empty scope from OAuth2 client credentials token request and improve error messaging (#28159) (3db52dc)
• core: Propagate formidable parse errors in Form Trigger (#28217) (2d22c65)
• core: Scope deferred tool processors per run (#28068) (a9bc92f)
• core: Use closure-scoped evaluation contexts in VM expression bridge (#28337) (3d8da49)
• editor: AI builder setup wizard positioning and popover collision (#27821) (aca249e)
• editor: Improve popover positioning defaults and animations (#27919) (5a01bb3)
• editor: Keep Back before Continue in MFA login footer (#27911) (72ebb43)
• editor: Move save button to credential modal header (#28287) (9a8631d)
• editor: Remove default for api params (#27914) (5e60272)
• editor: Removing redundant stop of key propogation (#23464) (33282db)
• editor: Skip only current step when clicking Later in workflow setup (#27929) (91a1282)
• editor: UI tweaks for instance AI components (#27917) (91ce8ea)
• editor: UI tweaks for instance AI components (#28155) (aa6c322)
• Facebook Lead Ads Node: Add missing pages_read_engagement scope (#27379) (290005e)
• Gitlab Node: Handle binary data in all storage modes (#28363) (72d0f9b)
• Google Drive Node: Fix infinite pagination loop in v1 API request (#28244) (b964ec9)
• Handle normalization of JSON for SQLite / postgres (#28242) (8f2da63)
• HTTP Request Node: Fix multipart/form-data file upload with binary streams (#28233) (5fb777e)
• Http Request Node: Handle empty JSON responses (#27793) (1899a4e)
• HubSpot Trigger Node: Add missing tickets scope to OAuth credentials (#27599) (d7d18a0)
• ICalendar Node: Fix Convert to ICS failing when File Name option is set (#27712) (294868d)
• If Node: Patches IF node when fields are missing (#28014) (1e22e0a)
• Improve browser use Chrome extension connection stability (#27846) (94f0a4d)
• MCP Client Node: Ensure MCP connections close when MCP Client node execution ends (#25742) (752a4e4)
• Microsoft Outlook Node: Prevent poll from skipping messages after API errors (#28157) (853a740)
• Microsoft Teams Node: Block requests from Microsoft Preview Service to prevent accidental approvals for "Send and Wait" (#28085) (4fab655)
• Oracle Node: Resolve 'Maximum call stack size exceeded' on large datasets (#27037) (bd5a702)
• Prohibit tool access to gateway settings directory (#28320) (dab714f)
• Pushover Node: Replace duplicate Pushover Timestamp field with the missing TTL field (#11287) (c0c0f83)
• Truncate long custom role names and add hover tooltip (#28191) (0d078c7)
• Update lodash, lodash-es, and xmldom to latest stable versions (#28121) (09c9b11)

Bug Fixes

• Anthropic Node: Use models endpoint for credential test (#27951) (5519600)
• Auto-authorize task-family tools after plan approval (#27896) (9dd8578)
• Bump dependencies (#27880) (a5a9f6d)
• Chat Trigger Node: Fix webhook not registered error when using pinned data (#27697) (70be3f5)
• core: Add @n8n/ai-node-sdk as CLI dependency for community nodes (#27749) (9851478)
• core: Debounce per event type in pubsub (#27877) (0fd9fd7)
• core: Fix daytona proxy bug (#27974) (c754724)
• core: Fix missing isolate acquisition and VM globals in expression engine (#27895) (e520848)
• core: Increase Concurrency for watch mode from 32 to 64 (#27907) (6185464)
• core: Make MCP executions asynchronous (#27762) (054a2d7)
• core: Set trigger start node for executions without input data (#27968) (663f2c5)
• core: Support descriptions when updating workflows via public API (#27679) (573bcde)
• Data Table Node: Change copy for Limit to indicate it applies per input row (#27813) (a061bc6)
• editor: Skip unsaved-changes confirmation when closing new credential modal (#27975) (9120283)
• editor: Update JsonEditor content when modelValue changes to same-length string (#27933) (cdad6db)
• Microsoft Agent 365 Trigger Node: Welcome message fix (#28000) (e016b55)
• NodeCredentials use correct credential type rather than first (#27671) (9ed9b96)
• Pipedrive Node: Add v2 node with API v2 migration (#27905) (de60c85)
• Read/Write Files from Disk Node: Add search aliases for binary file nodes (#27760) (763dd7e)
• Schedule Node: Skip recurrence check during manual execution (#27830) (6ef553c)
• X (Twitter) Node: Surface API error message for insufficient access level (#27603) (5fdb18b)

Features

• Add --init-workflow flag to scaffold publish.yml (#27292) (34894af)
• Add expression-based role mapping strategy (#27745) (5ad1c54)
• Alibaba Cloud Chat Model Node: Add new node (#27882) (5a11c58)
• Chat Trigger Node: Auto-add highlighted execution data (#18778) (4fb1f7d)
• Computer use HITL confirmations in Instance AI (#27910) (74e6df3)
• core: Add data table MCP tool (#27811) (eaacd75)
• core: Add input/output token tracking to node graph telemetry (#27992) (864f869)
• core: Add insights:read scope to API key roles (#27868) (e2410f0)
• core: Add instance version history table (#27740) (ada24f1)
• core: Add isolate pooling for VM expression engine (#27573) (5ee0e84)
• core: Add JTI store with atomic consume and cleanup job for token exchange (#27944) (9a8ea27)
• core: Add lint rule to flag string literals in node inputs/outputs (#27890) (1140c83)
• core: Add OIDC test login endpoint with frontend Test button (#27824) (285f39b)
• core: Add options-sorted-alphabetically lint rule for community nodes (#27886) (2c56dbf)
• core: Add POST /auth/oauth/token controller and audit event types for token exchange (#27844) (b81870e)
• core: Add redactExecutionData query param to public API executions (#27743) (29fa848)
• core: Add Zod validation schemas for token-exchange external input (#27825) (4471ee8)
• core: Enable community package management via Public API (#27637) (1fa2805)
• core: Implement JWT issuance in token exchange service (#27887) (94dae15)
• core: Improve custom auth JSON masking, preserve shape, redact leaf values (#27675) (d36cfa1)
• core: Improve public API middleware to handle different error types (#27562) (ccd04b0)
• core: Make data redaction available without feature flag (#27981) (a1f68f0)
• core: OTEL - workflow node tracing (#27789) (cbe109a)
• editor: Add missing agent permissions for workflow and data table actions (#27927) (6dd2980)
• editor: Put data redaction settings behind enterprise license (#28001) (1e55b08)
• Notion Node: Add support for OAuth (#27419) (59cec2c)

Performance Improvements

• core: Make webhook cache writes non-blocking (#27360) (682aa4a)

Bug Fixes

• API: Skip sharing license check when isGlobal value is unchanged (#27567) (5b4d5ce)
• Basic LLM Chain Node: Fix abort signal handling (#27520) (c683b65)
• core: Add format validation to source control branch name (#27518) (fb7788d)
• core: Add ownership check to MCP OAuth client deletion (#27446) (e638b3a)
• core: Correct process.version in expression sandbox (#26550) (fc0f071)
• core: Fix /healthz endpoint when using N8N_PATH (#27665) (4436e4b)
• core: Fix execution history when flow includes wait node (#27357) (ad0a551)
• core: Fix hard-coded path style in external storage configuration (#27553) (ca3a957)
• core: Fix race condition when stopping jobs in queue mode (#27211) (d3f40cd)
• core: Include custom headers when loading OpenAI models (#27534) (f165f6c)
• core: Refresh OAuth2 tokens on 401 during MCP tool calls (#26463) (88f170b)
• core: Remaining VM test fixes — error propagation, proxy traps, and cross-realm assertions (#27541) (769e28c)
• core: Rename data table columns during source control pull (#27746) (d9f8f04)
• core: Resolve $().item expressions in partial executions (#27338) (d3e45bc)
• core: Treat sub-node connections as non-blocking for partial execution root detection (#27759) (de02036)
• core: Use toString() instead of type cast for password field check (#27662) (a77aa6a)
• editor: Avoid resource locator cache pollution (#27493) (706fc43)
• editor: Clean up quick connect feature flag and fix first load (#27286) (cfe1409)
• editor: Correct navigation to evaluation tab (#27509) (87a9973)
• editor: Fix /diff route loading in demo mode (#27610) (197a431)
• editor: Fix callout dismiss action in NDV (#27496) (ac65eb9)
• editor: Fix empty project ID when creating resources using RLC (#27544) (0fd427d)
• editor: Handle chat trigger waiting state in setup cards (#27682) (21faa2e)
• editor: Improve workflow diff design feedback (#27494) (c12ced7)
• editor: Populate workflowDocumentStore in execution preview iframe (#27540) (bf7379d)
• editor: Remove unused options from NDV settings for agent model nodes (#27364) (b4f0965)
• editor: Restore templates sidebar click tracking (#27623) (6d6a10c)
• editor: Show tooltip on dependency pill (#27545) (91d56d2)
• editor: Truncate long workflow names in insights table (#27631) (4f98ce4)
• editor: Use direct store reference for connections in initializeWorkspace (#27552) (9736ce7)
• editor: Use execution data instead of stale NDV state for chat trigger check (#27752) (dbe8cd1)
• Fix issue preventing community nodes re-installing when using a custom registry (#26599) (451d772)
• Fix issue with multi line string handling (#27176) (ef506be)
• Implement raw query parameters field for Microsoft SQL node (#26355) (5229fa0)
• Microsoft Outlook Trigger Node: Wrap folder filter in parentheses to ensure correct OData operator precedence (#27605) (57179e3)
• Salesforce Node: Fix private key field stripping newlines in JWT credential (#27517) (53f65ab)
• Structured Output Parser Node: Show descriptive error when structured output parser receives empty response (#27443) (158e3bb)
• Track workflow archive/unarchive endpoints in API coverage manifest (#27738) (bd0bc0c)

Features

• Add @n8n/agents package (#27560) (58fbaf4)
• Add normalization after create, update, delete (#27669) (54deffc)
• Add role mapping rule scopes (#27476) (6cf30f3)
• core: Add configurable minimum password length via N8N_PASSWORD_MIN_LENGTH (#26953) (a259295)
• core: Add OTEL unhappy path handling and safe trace exporter (#27568) (d8fc058)
• core: Add POST /role-mapping-rule/:id/move endpoint for reordering rules (#27677) (af2af60)
• core: Add public API endpoints for workflow archive and unarchive (#27513) (d33334c)
• core: Add RoleMappingRule entity and database tables (#27440) (e0749a8)
• core: Implement Test workflow MCP tool (#27348) (8b9de31)
• core: Replace unbounded expression code cache with LRU (#27477) (b557292)
• core: Workflow level otel (#27528) (42843d6)
• DELETE /role-mapping-rule endpoint (#27608) (3d04c50)
• editor: Add canvas-only mode (#27184) (f3b4069)
• editor: Group agent subnodes into multi-node setup cards (#27570) (98d6851)
• editor: Replace restore/changes UI with inline version cards (#27522) (948f458)
• editor: Support error workflows in workflow dependency (#27542) (5b98903)
• Environment var to disable forms pages sandboxing (#27409) (4d356c3)
• GET /role-mapping-rule endpoint (#27609) (1064f04)
• POST / PATCH /role-mapping-rule endpoints (#27569) (150067f)
• PostHog feature flags resolution caching & group support (#27525) (e79d8af)
• Type and order uniqueness (#27600) (4cc9019)
• Wordpress Node: Add support for OAuth2 (#27113) (23f7ed8)
• Zammad Node: Add support for updating tickets (#16800) (1113cee)

Performance Improvements

• core: Optimize execution deletions for throughput (#27336) (65a5495)