n8n Release Notes

Bug Fixes

• AI Agent Node: Let an AI Agent Tool use its own tools under a pre-v3 parent agent (#39160) (60d0598)
• Align MCP workflow headings and remove outdated notice (#39463) (b096147)
• API: Accept workflow descriptions on creation (#39705) (6c1edac)
• API: Allow extendsCredential in workflow create/update (#39243) (9e7bc66)
• API: Validate OpenAPI path parameter names (#39067) (a2a2638)
• Azure OpenAI Chat Model Node: Make the Azure Entra credential sign in as the app (#39377) (2f98090)
• core: Close Chat integration runtime on shutdown and let followers send (#38958) (3628dc1)
• core: Count a database ping as successful when its reply arrives during event-loop lag (#39645) (bda9453)
• core: Enforce one instance report per day with a unique index (#39536) (20807d2)
• core: Gate the AI Assistant project list on the team-projects license (#39235) (dec7c71)
• core: Keep one failed binary-data dir from aborting the delete batch (#39194) (34f77c0)
• core: Keep OpenTelemetry export working after a restart when Sentry is enabled (#38480) (dbefd92)
• core: Link MCP workflow access errors to workflow settings (#39738) (9f5c752)
• core: Record live n8n Assistant test runs as verification evidence (#39361) (fb35797)
• core: Release the expression isolate when the webhook response ends (#39138) (82cd04c)
• core: Remove checkpoints when deleting agent sessions (#39175) (6a678f0)
• core: Remove feature flag for MCP Registry in AI Assistant (#39018) (ecfec19)
• core: Restore pubsub subscriptions after Redis reconnect and detect half-open subscriber connections (#39174) (3f76dcc)
• core: Resume only private sessions in Preview (#39151) (dda9a56)
• core: Retry each file removal in the byte store's delete (#39193) (7bebbe4)
• core: Retry instance reports that cross the UTC midnight boundary (#39290) (f914770)
• core: Retry the recursive removal of an execution's binary-data directory (#39185) (3a31c38)
• core: Return test webhook response when the call lands on another main (#39382) (73bdae5)
• core: Stop retrying instance reports the receiver rejects with 400 or 413 (#39502) (d9c9d6e)
• core: Store queue job results only for executions this process enqueued (#39712) (5d508ec)
• core: Use Sessions tab terminology in n8n Assistant (#39265) (43d7cc7)
• core: Validate token payload before resolving the user (#39078) (7d1bae5)
• editor: Fetch publication status when a new workflow becomes saved (#38382) (d658d18)
• editor: Improve Agent layout and sub-agent guidance (#39791) (3daa34d)
• editor: Keep agent builder chat messages within the panel (#39233) (9142b47)
• editor: Keep agent capability chips within card width (#39532) (9329d1f)
• editor: Keep quick-connect OAuth credentials out of lists until the user authorizes (#39297) (4c2f220)
• editor: Keep typed text in the AI Assistant chat rename input (#39570) (42dc399)
• editor: Make agent configuration header more compact (#39172) (1c82574)
• editor: Move agent AI entry point below header (#39318) (afa5fc3)
• editor: Prefill the server URL in the Mistral Vibe connector link (#39518) (d4999a2)
• editor: Remove half-checked permissions from system instance roles and restore the Member preset (#38652) (c114a18)
• editor: Shorten the Assistant name in navigation and settings (#39288) (5cc6640)
• editor: Show a cached role at once and align the personal space block in the instance role editor (#39394) (e648610)
• editor: Show Agent Builder activity on prompt submission (#39501) (8a0d833)
• editor: Show project icons in Agent breadcrumbs (#39649) (1fe19db)
• editor: Show when update available for community packages if only verified packages are enabled (#39424) (070d9fe)
• editor: Sorting data table rows by unknown column returns raw database error (#39733) (b8cda55)
• Google Cloud Storage Node: Preserve request headers on object create (#35218) (bc9faf2)
• googleFirebaseCloudFirestore Node: Preserve field types for numeric strings and falsy values (#27399) (b3d4cfe)
• LinkedIn Node: Validate post text (#39201) (d1cd34b)
• Make n8n-node release work with release-it 21 (#39378) (d23f949)
• MCP Client Node: Terminate session before closing the client (#39526) (11acaa3)
• Microsoft Teams Node: Correct the v2 resource-locator copy (#39443) (a924724)
• Mistral Cloud Node: Support citation reference chunks (#38952) (a9bc9c5)
• Notion Node: Clarify simplified output for AI workflow generation (#39051) (67b70ea)
• Preserve tables in AI workflow builder web fetch (#38879) (07a741b)
• Preserve tool arguments in reconstructed history (#39153) (fe0fad5)
• Recover running preview chat after reload (#39311) (98f012e)
• Validate node codex categories during linting (#39543) (a3aa6c0)
• Wise Node: Use current sandbox API (#39255) (3c48cef)
• Xero Node: Send tenant header on every page when returning all items (#39431) (58e55b5)
• Zoho CRM Node: Update logo to current Zoho branding (#39305) (be12181)

Bug Fixes

• ai-builder: Pass parent ask-user answers into Agent Builder (#38693) (e149dfa)
• ai-builder: Reactive subject name on chip (#39097) (233afff)
• cli: allow importing workflows and credentials with --userId for existing owner (#36278) (0b9c174)
• core: Always cast resource mapper string fields when type conversion is enabled (#37851) (768e74a)
• core: Apply the same mandatory roles when creating role from API and frontend (#38860) (ec54145)
• core: Bound concurrent HashiCorp Vault external secrets reads (#38866) (43fa826)
• core: Bump Strapi listing version for streamable-http-templated (#38595) (4514a35)
• core: Eliminate false-negative 500s in workflow builder tools (#34975) (4f26727)
• core: Expose Telegram photo context to agents (#38979) (3f06dd8)
• core: Finalize the active execution when a stalled job turns out to have succeeded (#38220) (a5995d7)
• core: Fix workflow publishing silently failing in multi-main mode (#38431) (fb0917c)
• core: Follow user language changes in Assistant and Builder (#39119) (a378ba3)
• core: Guard worker execution save against overwriting a canceled status (#38957) (f4f3011)
• core: Hide the Custom Scopes toggle when an MCP registry row pins the credential scope (#38635) (d05cf2b)
• core: Include sub-workflow tool calls in the workflow dependency index (#38062) (d3c8eee)
• core: Keep Assistant and Agent Builder replies in the user's language (#39101) (0781378)
• core: Keep breaking change detection running when a rule throws (#38738) (c2a2733)
• core: Keep collecting insights after one un-attributable event (#38518) (0b2ff22)
• core: Keep workflow version ids out of the package content file and the promotion diff (#39091) (f3c5a57)
• core: Observe agent execution tail when observation cursor moved in the middle of the run (#38907) (d1c805a)
• core: Offer Computer Use only where the client shows its entry points (#38108) (2f352bd)
• core: Preserve unchanged nodes during n8n Assistant edits (#38967) (3f7c984)
• core: Recheck the execution status before failing a stalled queue job (#38138) (a4c977d)
• core: Repair data-encryption keys stored as the raw instance key (#38707) (d7e2dcd)
• core: Report publication state after n8n assistant workflow restores (#39037) (c2534c5)
• core: Report saved and executed workflow revisions to n8n Assistant accurately (#38902) (0f3c8f0)
• core: Reserve canvas space for collapsed node groups during workflow layout (#38149) (7d8d58f)
• core: Resolve hidden OAuth endpoint fields from the credential type for all credentials (#38697) (e82a373)
• core: Return available build errors in one tool result (#38231) (e36572e)
• core: RFC 9068 compliance for MCP OAuth access tokens (#38310) (45a3833)
• core: Show an explicit error for unsupported end-user credential triggers (#37332) (c5935b9)
• core: Simulate Agent write tools during workflow verification (#38553) (cd623fd)
• core: Stop an unreachable external secrets provider from blocking startup (#38257) (f960330)
• core: Stop pages hanging while the Browser Use extension is attached (#39159) (048f0a7)
• core: Sweep parents parked on a finished sub-execution (#37553) (48445f5)
• core: Tear down workflow triggers when publication meets a node type the instance cannot load (#38754) (378e926)
• core: Test the posted OAuth2 credential values instead of the stored credential (#38877) (247e441)
• core: Update undici to 7.29.1 (#38844) (41e1780)
• core: Update vm2 to 3.12.2 (#38823) (74ab9c2)
• Databricks Node: Enforce the credential domain allowlist on chat model requests (#38694) (2f31b65)
• Databricks Node: Name Databricks in the Chat Model rate limit error and keep its message (#38642) (bf5d488)
• editor: Add tooltips to assistant header actions (#38946) (3ea0397)
• editor: Add top padding to the n8n Assistant permission dropdowns (#38718) (92a3a28)
• editor: Agent preview thread wiring update and error markers (#38826) (8fcb236)
• editor: Align agent knowledge sections with panels (#38696) (506b768)
• editor: Align AI Assistant permission dropdowns with the group control (#38196) (dba75ff)
• editor: Align AI chat history menus (#38983) (3544561)
• editor: Apply Gateway credits eligibility to Agent tool resource and operation selectors (#38828) (67c304b)
• editor: Clarify n8n Assistant approval details (#38422) (8dd2b78)
• editor: Convert a pasted expression into expression mode in the resource locator input (#38872) (b26bb7f)
• editor: Correct Agent Builder chat layout and update notices (#38987) (9f57c91)
• editor: Disable 'pinning' redacted data if user does not have permission to un-redact it (#38334) (c247cff)
• editor: Fix blank workflow previews in AI Assistant (#38608) (062e99e)
• editor: Improve Assistant chat controls and history menu layout (#39212) (263eda0)
• editor: Keep agent icon background visible (#39112) (30b3226)
• editor: Keep NDV input and output panel content visible at narrow widths (#38615) (6a9bbd9)
• editor: Keep the Instance AI chat input live during plan review (#38086) (c4c7365)
• editor: Match n8n Assistant header background (#38944) (0f0fca1)
• editor: Prevent agent builder shift during assistant transition (#38948) (536ae3e)
• editor: Prevent agent credential warnings during tab switches (#38816) (1ad183a)
• editor: Prevent dropdown menu overlap (#38835) (b681645)
• editor: Refine agent instructions and trace view (#39104) (e94dff4)
• editor: Remove empty agent button hover background (#38788) (da55339)
• editor: Render bare URLs in Instance AI chat as clickable links (#39060) (d5393f2)
• editor: Restore MCP connection popup retries (#37956) (4d9cd43)
• editor: Send number values in credential inputs (#38715) (efc9c85)
• editor: Show step indicators in dark mode (#38937) (76fd3a0)
• editor: Split global variable scopes to be added to custom roles separately (#38724) (7b059d6)
• Email Trigger (IMAP) Node: Recover from silently dead connections by moving to imapflow (#36716) (5f6627a)
• Form Node: Validate content type (#38720) (1d0c658)
• Keep the logs panel header height fixed (#38675) (386fedf)
• Limit declarative routing during base URL ownership checks (#39058) (3d00ed9)
• Monday.com Node: Migrate to API version 2026-07 (#26262) (75a2fe5)
• Open the EULA modal when a license is activated from a link (#38712) (5c1dfef)
• OpenAI Node: Accept object values for JSON-typed parameters (#33886) (92b1aad)
• S3 Node: Handle files with + in names (#38688) (7ff87c4)
• Show a reveal prompt for expressions over redacted data (#38577) (34f7327)
• Show only chat models in the Gemini and Qwen model dropdowns (#38800) (94c12a6)
• Slack Node: Point OAuth2 scopes notice to an existing docs anchor (#38992) (1525f3a)
• Snowflake Node: Update the Snowflake SDK to 3.3.0 (#38798) (5334420)
• Unify startup deadlines and cancellation (#37927) (9e18c4a)

Features

• Add admin permission for node execution in n8n assistant (#39102) (2f65a6b)
• Add standalone node execution as a Workflow Builder and AI Assistant tool (#37512) (2d56eee)
• API: Allow credential creation with source IDs (#38791) (85b3be3)
• API: Pause promotion Apply until bindings are resolved (#38741) (74334d2)
• core: Add an AI Assistant tool that runs one node of a workflow (#38601) (ac752e7)
• core: Add promotion binding preflight with creation context (#38657) (62ff356)
• core: Add push-based reload endpoint for custom node development (#36837) (8bafdfa)
• core: Add view and delete permissions for executions to project roles (#38698) (f032577)
• core: Filter out MCP servers from the registry based on instance capabilities (#38867) (873948b)
• core: Return credential descriptions in assistant and MCP tools (#38984) (6f74038)
• core: Send maxN8nNodesApiVersion in community-nodes catalog requests (#38968) (c16bf24)
• core: Track AI Assistant response start latency (#37003) (288e5e3)
• Databricks Node: Add hidden Databricks Embeddings sub-node (#38989) (48b1274)
• Databricks Node: Show the Chat Model node in the node picker (#38918) (d42a753)
• editor: Add instance promote action to Environments settings (#38985) (d8882f7)
• editor: Distinguish skills from tools in session timelines (#38481) (77e10b0)
• editor: Explain agent task schedules (#39117) (add77db)
• editor: Improve agent builder interactions (#38728) (b7b4722)
• editor: Improve AI Assistant sidebar and history dropdown (#38419) (25dc45d)
• editor: Make view related tag permissions available by default (#38640) (f9fcf37)
• editor: Move agent skills to a separate card (#38993) (7683e1c)
• editor: Move web search to agent capabilities (#38646) (a6ca37c)
• editor: Open Edit with AI without a greeting turn (#38745) (0a4976e)
• editor: Open new agents in the builder with the n8n Assistant panel (#38727) (d3b8445)
• editor: Refactor ResizeWrapper and add to Agents Preview Dock (#38250) (d7d8c03)
• editor: Render a restricted node type on the canvas with a replace path (#38859) (f03ffd7)
• editor: Show recent agent changes (#38796) (ee9177d)
• editor: Show the personal space permissions in the instance role editor (#39108) (51a0512)
• editor: Show timestamp dividers in the agent preview chat (#38962) (a70938f)
• Microsoft Teams Node: Add @mention support to message Create (#37624) (9c83613)
• Microsoft Teams Node: Add @mentions on Reply and team tag mentions (#38023) (2627912)
• Microsoft Teams Node: Add a Chat resource with create, get and get many (#38035) (0b559b5)
• MiniMax Node: Fetch available models from the API instead of a hardcoded list (#37646) (0392123)
• Pin the sandbox service version in get-n8n.sh and update it on --upgrade (#38799) (914eabb)
• Wire up the email change confirmation flow (#38730) (ccaeeb7)

Bug Fixes

• AI Agent Node: Preserve Anthropic thinking blocks with empty text across tool calls (#38302) (7ac975c)
• ai-builder: Enhance guidance UX for agents with no sessions on builder session tab (#38243) (1ed3a24)
• ai-builder: Guard against 429 errors on channel integrations (#38106) (93ca2d1)
• ai-builder: Show reusable credentials in the Instance AI agent credential card (#38276) (999b541)
• Allow one icon file for the light and dark icon slots (#37711) (9095e9a)
• API: Let global members grant folder scopes to API keys (#37654) (aa91e71)
• API: Return null variable values as empty string & fix newly imported source control variable values (#38488) (b9a7f03)
• Azure OpenAI Chat Model Node: Resolve the proxy against the Azure endpoint so NO_PROXY applies (#38026) (7383fd7)
• Bump task-runner-launcher to 1.5.0 (#38309) (9135888)
• Center the registration badge in the Usage and Plan heading (#38275) (cf6cb77)
• Close the variable modal on a backdrop click (#38286) (45a7f74)
• Confluence Node: Match hyphenated and multi-word titles in the page picker search (#38175) (fdb31d2)
• Confluence Node: Return the page sub-tree in tree order and skip drafts (#38403) (b0f47eb)
• core: Accept null headers from mcp registry api (#38614) (02ee221)
• core: Accept numeric pagination tokens from resource locator list methods (#38147) (7ab1582)
• core: Add model boundaries to external tool results (#37316) (d328bbf)
• core: Allow a fallback model alongside the primary on AI nodes (#38007) (2550501)
• core: Apply the SSO expression mapping env var in the provisioning loader (#37170) (b4fee56)
• core: Ask which MCP connector to set up before the AI Assistant gives a URL (#37992) (899d52d)
• core: Batch LangSmith agent session exports (#38030) (79d936f)
• core: Bound the wait for the workflow publication lock (#38019) (5212777)
• core: Check Gateway credits eligibility against the correct sub-node (#38193) (9823c2e)
• core: Consolidate secret redaction in @n8n/utils and redact more credential shapes (#38054) (c5653f6)
• core: Correct the expression prefix warnings on fields that cannot hold an expression (#37791) (c7c179b)
• core: Count executions that crash recovery marks as crashed (#37733) (3521e54)
• core: Do not persist an execution when preExecute throws (#37701) (53ecf6b)
• core: Enforce execution timeout for stuck jobs in queue mode (#36258) (92f702d)
• core: Execute MCP toolkit members on workers (#38069) (c0f6471)
• core: Forward the receiver in the lazy-proxy set trap (#37321) (b3306b2)
• core: Ground provider OAuth scope guidance in n8n docs (#38066) (2afb5b6)
• core: Keep a resumed execution in the trace of the parked execution (#38033) (5414403)
• core: Keep node settings, positions and error routes through an assistant workflow edit (#38254) (c95756d)
• core: Keep nodes clear of the agent card in SDK-generated workflow layouts (#38093) (4b4d670)
• core: Memoize pairedItem ancestry traversal (#38085) (f3db19d)
• core: Merge system messages for strict providers (#37908) (19651de)
• core: Prefer native nodes over Code nodes in n8n Assistant workflow builds (#38598) (4e1fcf6)
• core: Preserve link URLs in inbound agent chat messages (#38294) (2beccad)
• core: Prevent false agent model stream stalls and show run errors in chat history (#37558) (26afe95)
• core: Re-register the n8n Trigger on every publish through the publication service (#38153) (cbda01a)
• core: Read the Instance AI folder-exploration flag as a variant, not a boolean (#38479) (4579e78)
• core: Recognize always-loaded tools in agent tool discovery (#38204) (4a6e625)
• core: Reconnect the Email Trigger (IMAP) on every publish through the publication service (#38190) (db60f99)
• core: Reconnect the Postgres Trigger on every publish through the publication service (#38211) (0c3c9d7)
• core: Redact execution data on partial private-credential runs (#38364) (840aef6)
• core: Redact opaque field values in confirmed secret containers (#38067) (3bd0e69)
• core: Register redaction context hook on all instance types (#37298) (56383fc)
• core: Repair legacy-format data-encryption keys during bootstrap (#38100) (4b36c51)
• core: Require verification coverage for every workflow trigger (#37961) (429116f)
• core: Retry Instance AI model turns when the provider stream closes without output (#38080) (b6b5ecd)
• core: Return Instance AI node output grouped per output branch (#38414) (e44fbd3)
• core: Return luxon values from expressions as instances (#38034) (0c6c9e3)
• core: Reuse an existing consent grant after the visitor authenticates mid-flow (#38084) (3b6faa2)
• core: Route "trigger my workflow" to the existing workflow, not the builder (#38073) (219402c)
• core: Run tool nodes of an AI Agent upstream of the destination node (#38348) (40b6d84)
• core: Scope data table Overview access by project role, not a global gate (#37676) (a47f19b)
• core: Scope end-user credential checks to reachable nodes (#36970) (37e50b5)
• core: Select sandbox npm install flags by provider (#38358) (ab101d5)
• core: Send a JSON Accept header in the Brave Search credential test (#38594) (2f55165)
• core: Settle answered confirmation cards in the AI Assistant run-sync frame (#38328) (4890d04)
• core: Stop MCP workflow updates from dropping unknown operation fields (#38148) (a1f8405)
• core: Stop the workflow SDK collapsing inline branch chains to their branching node (#37717) (37efe11)
• core: Treat empty strings as empty in Data Table filters (#32887) (0c82743)
• core: Treat Instance AI model stream stalls as dropped provider connections (#38079) (b7a58c2)
• core: Trust the CA from GIT_SSL_CAINFO for source control HTTPS remotes (#38258) (e803d4b)
• core: Unpublish workflows before a source control pull deletes them (#37967) (ecc4ba3)
• editor: Align Instance AI input controls (#37162) (a234034)
• editor: Allow creating web search credentials from the agent builder settings (#38574) (5213246)
• editor: Allow switching a toggle parameter from expression to fixed (#32762) (a053578)
• editor: Center modal dialogs vertically in the viewport (#38081) (f3196f1)
• editor: Clear tag loading state after failed requests (#37901) (b4fbcc5)
• editor: Fixes issue that prevented some users from revoking their end-user credentials (#38311) (fc8a021)
• editor: Hide Custom API Call option in node tool configuration (#38365) (79f0e04)
• editor: Hide the AI Assistant settings page when it has nothing to show (#38063) (4f05c24)
• editor: Rename the first agent builder tab to Build (#38184) (06fc433)
• editor: Reserve space for list and table scrollbars (#38603) (f81cbcd)
• editor: Restore legacy sticky note markdown spacing (#38333) (064e909)
• editor: Restore tag text hidden by zero line-height (#38107) (7e152a4)
• editor: Show friendly labels for the activity and conversation-history tools in the n8n Assistant chat (#38447) (fe5de38)
• editor: Show loading skeletons in the AI Assistant artifacts sidebar (#38180) (b3e1b7f)
• editor: Show renamed credentials in the AI Assistant setup picker (#38295) (39dfe59)
• editor: Stop rendering task and sub-agent labels with no text (#38059) (8cb5159)
• editor: Stop the Publish modal from hanging after a workflow is published (#38151) (d0f94da)
• editor: Strip Evaluation Trigger metadata fields from test case inputs (#37572) (c410581)
• editor: Truncate long AIA context chips (#37878) (af2bd80)
• editor: Use the push scope for the source control owner filter (#38682) (8671d83)
• Email Trigger (IMAP) Node: Restore the connection after the server drops it (#36801) (1776a51)
• Enforce protected instance execution restrictions (#37947) (793136b)
• Guard the getWebhookInfo response shape (#38680) (d057d86)
• Guardrails Node: Align threshold hint with behavior (#29018) (0396ef8)
• Hide the deprecated node and show a deprecation notice (#38571) (c220447)
• Hint the Microsoft OAuth2 scope format and link the Service Principal credential docs (#38451) (404ab49)
• Keep GitHub Actions expressions intact in scaffolded workflow files (#37973) (8c8bd23)
• Microsoft Excel Node: Accept personal OneDrive workbook IDs in the By ID field (#38471) (d04d3a4)
• Microsoft Excel Node: Show only workbook files in the Workbook picker (#38244) (763e0cf)
• Microsoft Outlook Trigger Node: Fetch the latest message when executing manually (#34486) (ef16421)
• Microsoft SharePoint Node: Keep the resource dropdowns working when the API omits a label (#38411) (d6fe24d)
• Postgres Node: Stop reporting parameter-loading errors to Sentry (#28865) (663bb3e)
• Refresh the Confluence/Jira OAuth2 token automatically when it has expired (#37776) (3d293b5)
• Resolve node source path before the translation lookup (#38281) (092e53b)
• Scope deployment key lookups by type (#38410) (11cc120)
• Scope workflow sharing candidates to personal projects (#38222) (dcb1d17)
• Serve binary data stored in the temp execution dir (#38270) (7bac547)
• Show credentials shared with all users and projects in the (#38287) (30d44a5)
• Show custom role scope tooltips next to the hovered scope (#38284) (78ea57e)
• Stop requiring Organization.Read.All for the Microsoft Entra Service Principal credential test (#38568) (59715e8)

Bug Fixes

• ai-builder: UI tweak to prevent overflowing text on err callout when on Agent Preview (#37615) (c2e8d02)
• AMQP Trigger Node: Reattach the receiver link when the broker detaches it (#37431) (ddf6534)
• Anthropic Chat Model Node, AI Agent Node: Send disabled thinking to the provider and parse content-block output (#37954) (309fa8d)
• API: Check publish permission when a workflow save republishes (#37264) (485e370)
• Chat Trigger Node: Fix singular copy on the connect bar (#37945) (369c9e2)
• Chat Trigger Node: Re-authenticate hosted chat on session change (#37868) (64ba49d)
• Check constructor-assigned and type-asserted node descriptions (#37523) (e23ee05)
• Code Node: Keep identity and reporting fields when wrapping task runner errors (#37490) (b0550cb)
• core: Allow HashiCorp Vault external secrets to read a KV v2 sub-path (#37748) (fed5d70)
• core: Allow webhook nodes to set Set-Cookie response headers (#37883) (6828320)
• core: Always redact OTel header values in settings responses (#37283) (4b0de25)
• core: Cap task runner task timeouts to the graceful shutdown window (#37651) (9a64820)
• core: Complete a scheduled occurrence as not dispatched when its workflow is unpublished (#37721) (29c7d9f)
• core: Ensure running job cleanup when a workflow run rejects (#37621) (51ac147)
• core: Execute multi-input nodes re-fired through a loop-back edge in legacy order (#37561) (903fe57)
• core: Fix Azure OpenAI classic and Foundry credential setup and execution for agents (#37251) (731ea42)
• core: Forward all output branches when a waiting webhook node resumes (#31714) (7c21f4b)
• core: Give every simulated node at least one plausible item (#37557) (918067a)
• core: Harden agent workflow tools against unpublished, missing, or incompatible workflows (#37772) (1994332)
• core: Hide instance MCP OAuth discovery when MCP access is disabled (#36726) (9768c1b)
• core: Keep a serving external secrets provider active when its replacement fails (#37781) (217c7b3)
• core: Keep Instance AI data-table queries targeted while diagnosing (#37489) (df4d30b)
• core: Keep reporting the original job error when the job key is gone (#37993) (7ce17be)
• core: List the valid techniques when get_workflow_best_practices rejects input (#37580) (53b1ad7)
• core: Make pending agent creation and thread binding idempotent (#37074) (085a7a9)
• core: Make scoped workspace path errors actionable for agents (#37887) (03e1793)
• core: Mark retired node types as deprecated in their workflow-sdk type definitions (#37628) (cf0ef47)
• core: Prefer service-specific credentials for HTTP requests (#37844) (500ea39)
• core: Prevent Anthropic agent threads from breaking permanently and keep run errors visible (#37640) (dc5f420)
• core: Redirect failed OIDC logins to the sign-in page (#37428) (3e09299)
• core: Report the provider response when a chat model returns no choices (#37959) (49e7821)
• core: Return 503 when the AI assistant service is unreachable (#37957) (36426a8)
• core: Stop npm audit from stalling Instance AI sandbox setup (#37864) (7ac335d)
• core: Stop task broker before task runner processes on shutdown (#37833) (2ad8d01)
• core: Stop the AI Assistant from pulling the whole workflow through the model for small edits (#37644) (8ef5ba6)
• core: Take archived workflows into account during package import (#37668) (98dfb30)
• core: Update Qdrant client and remove undici v6 dependencies so AI requests work on Node 26 (#37758) (325feb3)
• core: Wait for detached sub-workflows before the worker stops its task runner (#37737) (afc4a54)
• core: Workflow tools should wait and not throw if parent WF is suspended (#37087) (10ea0c8)
• editor: Align credit balance copy to "left" across views (#37423) (9c131d6)
• editor: Expand AI question text input automatically (#37627) (5e3774a)
• editor: Hide Gateway credits for HTTP Request and GraphQL nodes (#37810) (c292476)
• editor: Preserve n8n credits when copying workflows (#37253) (8946168)
• editor: Refresh workflow checksum after publishing from an embedded editor (#37949) (8119ea3)
• editor: Restore Instance AI draft when thread creation fails (#37874) (0820083)
• editor: Scope end-user credential trigger warning to reachable nodes (#37081) (8399317)
• editor: Show restart notice after license activation (#37841) (f56d87d)
• editor: Show skill size limits as a character count (#37847) (a9d5fb7)
• editor: Update Agent builder assistant placeholder (#37529) (20cf19f)
• Fix attribution footer link on the Form Ending page (#37288) (e08a4fd)
• Freshservice Node: Send change filters as dedicated query params (#34380) (5ae1861)
• Google Gemini Node: Validate domain before downloading (#37459) (a1c1f6f)
• Guarantee package.json restore after the FE trim step (#37446) (fd6db75)
• Jira Node: Strip trailing slashes from domain URL (#32163) (a69155a)
• Jira Software Node: Send expand as comma-separated string for Jira Cloud searches (#37527) (9f2ebe5)
• Ldap Node: Escape expression output in the Custom Filter field (#37301) (91f8794)
• Microsoft SQL Node: Fix TLS error when the IP is used to connect to the server (#37870) (5ddfb60)
• Microsoft Teams Node: Send Online Meeting times in UTC and share the Graph helpers (#37723) (d5e05b2)
• Mistral Cloud Chat Model Node: Handle Request objects in undici-backed proxyFetch (#37946) (7533aaa)
• Read/Write Files from Disk Node: Allow glob character classes in File(s) Selector (#36901) (3c48b53)
• Sign Microsoft Dynamics OAuth2 requests with the access token (#37855) (6fa5b3d)
• Update MCP server status in AI Assistant when tool call failed or credentials updated (#37197) (b639fe5)
• Use consistent personal space icon in the Instance AI artifacts (#38011) (cbaa0be)
• Wordpress Node: Send OAuth2 client credentials in request body (#36082) (5aeb96c)

Bug Fixes

• Agent Node: Show disabled reason on prompt-source option (#36612) (85869e8)
• ai-builder: Fix for autosave and publish events issues (#36241) (87e8b9c)
• ai-builder: Task to channel agent session bind consolidation (#36730) (07559f6)
• ai-builder: Wrap message for openAI completions (#36760) (5f83045)
• Anthropic Chat Model Node: Update default model to Claude Sonnet 5 and improve model guidance (#36834) (51b5579)
• API: Require a JSON content type on decorator routes that take a body (#36748) (3bc56a4)
• API: Return a request schema for decorator routes in /discover (#36211) (39be106)
• AWS Bedrock Chat Model Node: List application inference profiles in model dropdown (#36728) (2b3f683)
• core: Abandon trigger teardown that can never succeed instead of retrying it forever (#36843) (62d7e4c)
• core: Accept multipart form submissions with an empty file input (#36832) (7f3589c)
• core: Add project:manageUsers scope to gate project membership changes (#36243) (8c6d469)
• core: Apply credential defaults and expressions in Agent Builder model discovery (#36721) (955c472)
• core: Avoid restarting task runners that are only slow (#36530) (222eec5)
• core: Capture browser secrets independently of match boundaries (#36447) (d5133e5)
• core: Coerce the deleteBefore param when deleting executions (#36477) (aa126ab)
• core: Handle managed credentials in workflow codegen (#36210) (59efcb9)
• core: Handle projects better on AIA workflow listing (#36413) (e1a6ede)
• core: Harden Daytona sandbox acquisition against transient failures and stuck sandboxes (#36528) (be44726)
• core: Hide get-json from Instance AI (#36146) (dfe7c02)
• core: Honor an explicit request for a new credential during setup (#36348) (4c8ae8f)
• core: Include workflow description in source control push and pull (#33695) (fca3170)
• core: Keep duplicate connections distinct in the workflow diff (#35652) (12a2e38)
• core: Keep Instance AI confirmation fields intact on resume (#36468) (befb947)
• core: Limit domain restriction errors to the target host (#36836) (0472294)
• core: Normalize env values before schema-based parsing (#36644) (226aafc)
• core: Offer to clean up test data left by live test runs in AI Assistant (#36448) (616dd65)
• core: Only init the expression engine for commands that evaluate expressions (#36538) (f808447)
• core: Pass MCP connector tools to Agent Builder (#36753) (2c12be2)
• core: Raise AI Assistant model verification token limit (#36787) (655270b)
• core: Reconcile license auto-renewal on startup leader takeover (#36897) (f79eccf)
• core: Redact secrets rendered beside their label in browser snapshots (#36817) (077d778)
• core: Reduce cold-boot community package install storm (#36814) (f2bce4e)
• core: Release test-webhook isolate only after teardown completes (#36573) (05de343)
• core: Report activation mode 'activate' for a first publication via the outbox (#36512) (2435ed5)
• core: Resolve end-user credentials when loading node parameters (#36452) (83db64a)
• core: Restore AWS Secrets Manager connection reuse (#36426) (56bb5f5)
• core: Route leader-only channel operations through the leader (#36686) (28145a5)
• core: Run agent scheduled tasks in the timezone they were authored in (#36226) (3d70ae7)
• core: Serialize community package installs and make downloads non-destructive (#36505) (e95d407)
• core: Show a clear no-access message when SSO role mapping denies a login (#36407) (85f7dde)
• core: Stop showing working community packages as failed to load (#36727) (5439265)
• core: Support array indices in setNodeParameter JSON Pointer paths (#36520) (7a69e3f)
• core: Surface agent failures with a useful message and original cause (#36603) (53bd5f7)
• core: Surface failures in agent sessions (#36492) (d551999)
• core: Validate access token audience in OAuth2 credential resolver (#35119) (a65e0e3)
• core: Validate chat and MCP trigger auth modes for end-user credentials (#36534) (bf700d1)
• core: Validate chat models and recover from execution failures (#36550) (9376c57)
• core: Validate credential types in AI Assistant credential setup (#36792) (497cf53)
• core: Wrap a trigger's closeFunction in an expression isolate at creation time (#36638) (365b703)
• editor: Add padding to evaluation single run view (#36929) (e75bf3e)
• editor: Fix non-project credentials sometimes appearing as options (#36715) (ffd2b35)
• editor: Group output panel warnings to keep it usable (#36619) (37aee61)
• editor: Keep agent preview user messages right-aligned (#36521) (09613dc)
• editor: Keep AI Assistant step narration inside thinking blocks (#36808) (af27b0d)
• editor: Keep form element attributes when reordering or deleting (#36395) (c31d0e5)
• editor: Load agent data table columns on selection (#36634) (52c29a8)
• editor: Move the trust checkbox out of the MCP consent redirect callout (#36543) (dfae315)
• editor: Open new agents without Instance AI (#36462) (38ec2ec)
• editor: Open node details links in a new tab in canvas-only mode (#36446) (43220e1)
• editor: Prevent AI Assistant verification fixtures from being pinned as real data (#36653) (fe79e4a)
• editor: Remove doubled code block box in markdown renderer (#36844) (36c5dc3)
• editor: Remove stale credentials from node config when switching credentials (#34937) (f34e4c6)
• editor: Restore AI Assistant preview width after viewport resize (#36433) (48b245c)
• editor: Restore Edit Fields type selector styles (#36400) (b0cfa93)
• editor: Show agent validation details in tooltips (#36772) (b7c3fe7)
• editor: Show personalization survey and community registration modal on Instance AI landing page (#36809) (7d0a445)
• editor: Show proper MCP server status in AI Assistant UI (#36180) (76c6721)
• editor: Show the pinned version name in the review banner (#36759) (f86bd3a)
• editor: Treat agent persistence and channel setup as one in-flight action (#36577) (53f2750)
• Extract From File Node: Parse date-only RRULE UNTIL values (#29522) (fa460a4)
• Fix setup credential tool description (#36766) (40af9a0)
• Google Calendar Node: Allow switching an event between all-day and timed (#35802) (34de8b3)
• MCP Server Trigger Node: Emit tool schemas as JSON Schema 2020-12 (#36490) (25d0be0)
• Message an Agent Node: Default the session to the connected Chat Trigger (#36482) (63ffacf)
• MongoDB Chat Memory Node: Sanitize messages (#36294) (2f2e2d9)
• OpenAI Node: Filter non-chat models out of the chat model dropdown (#35785) (207c29f)
• PagerDuty Node: Advance pagination offset by the page size (#35778) (485a9c0)
• Preserve explicit credential selection (#36500) (7b94975)
• Recognise versioned nodes in node-registration-complete lint rule (#36642) (d1286e3)
• Return list-search pagination token as a string in github-issues template (#36657) (ad22ee8)
• Use MS Excel as default Sheets export format (#36406) (b9bdaff)
• Use sub-agent names and publish before assignment (#36846) (131f664)

Bug Fixes

• ai-builder: Align HITL approval resume schemas with confirm envelope (#36047) (be1fde1)
• ai-builder: Enable Save in agent tool modal when credential auth is selected (#36012) (4fe94d8)
• ai-builder: Prevent agent from claiming integration tool call success early (#36196) (547cfb9)
• ai-builder: Recover stuck tool-call UI and MCP timeout progressive update (#36162) (e1cd757)
• ai-builder: Surface existing LLM-provider credentials when a filtered lookup finds none (#35833) (d73d625)
• ai-builder: Surface skill save validation errors and stop reverting skill renames (#36055) (b08cde6)
• Avoid false port-in-use error in get-n8n script on Windows/WSL (#36026) (6f2033f)
• core: Accept Always allow scope on data-tables resume (#36070) (560455f)
• core: Allow details field in continueErrorOutput mode (#35939) (55927c4)
• core: Apply TLS options per hop when requests go through a proxy (#35518) (68bcdfe)
• core: Bound database pool teardown so connection recovery always completes (#36013) (da314d3)
• core: Bound workflow publication outbox record processing with an abort deadline (#36197) (c0278b0)
• core: Crash enqueued executions with unreadable data (#36010) (fd67bf8)
• core: Detect node settings changes when comparing workflow versions (#36066) (e4f0c33)
• core: Execute tools in the order the root requested them (#36009) (acd4fda)
• core: Explain Browser Use failures caused by other browser extensions (#36011) (f66a0e8)
• core: Expose incoming request headers to MCP trigger tools (#35236) (64ed864)
• core: Fix non existent workflow id pathway for AIA (#35984) (6ab2569)
• core: Fix z-indexing of expression modal over agent NDV (#36233) (1fa6ef0)
• core: Gate AI Assistant workflow publish offers on live verification (#36394) (602e6a0)
• core: Handle dropped AI provider connections as transient (#35587) (72235d3)
• core: Handle oversized chat attachments gracefully (#36061) (de8b358)
• core: Harden agent HTTP Request tool configuration (#36463) (0791359)
• core: Improve agent builder skill and channel handling (#35980) (a723e79)
• core: Keep node IDs stable when the AI Assistant edits a workflow (#36236) (a71e45a)
• core: Keep resolving end-user credentials after a trigger stops listening (#35973) (a447ac4)
• core: Keep the account panel on hosted forms once every account is connected (#36429) (a8754b4)
• core: Let Instance AI run a specific trigger's flow (#36410) (1a7425d)
• core: Make published agent channel add, replace, and remove failure-safe (#36100) (79c1393)
• core: Prefer managed OAuth auth types when the AI builder resolves credentials (#35929) (1b4c0ba)
• core: Preserve Anthropic thinking history across agent turns (#36185) (5f6d734)
• core: Rebuild the node registry without emptying it first (#36387) (86facbd)
• core: Recover model turns that end without usable output (#36423) (bae82bd)
• core: Remember skipped Instance AI credential setup for the rest of a thread (#36308) (6ace2a5)
• core: Report the real activation mode for triggers activated via the publication outbox (#36123) (1a12af6)
• core: Report the workflow's parent folder in get_workflow_details (#36234) (9b97fb5)
• core: Require trigger node name for MCP workflow executions (#36341) (7ea9d54)
• core: Resolve agent credentials through the node decryption path so external secrets work (#36275) (9cbbd59)
• core: Resolve AI Assistant sticky note placement after layout (#36320) (b671cf4)
• core: Resolve Custom API Call support through inherited credential types (#35820) (88efdb9)
• core: Resolve operation defaults per resource in generated node schemas (#35952) (79a7bd2)
• core: Respect the editor write lock when Instance AI writes workflows (#36335) (f19c452)
• core: Return final responses from workflow agents (#36127) (5e2779e)
• core: Scope AI Assistant credential setup cards to the thread's project (#36425) (b50ea9c)
• core: Stop auto-selecting the only generic auth credential (#35963) (237c503)
• core: Stop duplicated workflows from inheriting the original's static data (#35921) (25c1521)
• core: Stop routing unrelated pre-existing nodes into workflow setup after AI Assistant edit (#36280) (c89dba8)
• core: Surface model discovery authentication failures to users (#35979) (c44c7de)
• Default all navigations to domcontentloaded (#36238) (5a1e186)
• Don't detach child process on Windows so external programs write (#36327) (de6f3d9)
• editor: Clarify external secret expression previews (#36064) (7792fdb)
• editor: Display tool execution data in Agent sessions (#36085) (a94ffe9)
• editor: Improve agent error handoff to AI Assistant (#36076) (598c1f3)
• editor: Keep agent nodes inside canvas group borders (#35972) (174d0d8)
• editor: Name the AI Assistant browser tab after the conversation (#35958) (e4a414d)
• editor: Never autosave a read-only preview canvas (#36023) (56a2d20)
• editor: Only show Markdown placeholder when empty (#36336) (95515d7)
• editor: Open OAuth sign-in popup before network calls and report blocked pop-ups clearly (#35948) (0f9bff0)
• editor: Polish workflow header actions menu and production checklist placement (#36209) (f3f075a)
• editor: Preserve saved credential data after connect-save to prevent false disconnect prompt (#35598) (59ea1f4)
• editor: Redirect to sign-in when the user's session expires (#35507) (a78ff67)
• editor: Refresh chat history when switching executions (#35312) (36f2b68)
• editor: Remove misleading reset zoom control (#35843) (cce5401)
• editor: Restore the connection test for Kafka and Odoo credentials (#36195) (40a5901)
• editor: Settle navigation instead of hanging when auth-init guard errors (#36190) (ddd5494)
• editor: Show agent context after assistant handoff (#36310) (d810315)
• editor: Show placeholder while MCP settings counts load (#35894) (870099f)
• editor: Show the connected provider account, not the n8n account email (#35553) (ee03e02)
• editor: Stop the workflow actions menu shifting when a new workflow is saved (#36077) (a914319)
• editor: Stop write-lock polling from re-arming after session expiry (#34750) (26be86d)
• editor: Update ready-to-run demo templates to a current OpenAI model (#36189) (a27c90c)
• Fix decompress size calculation for zip64 archives (#35856) (d094b6a)
• Google Ads Node: Migrate from sunset v21 API to v25 (#36255) (bab2649)
• Google Ads Node: Select the renamed video views metric on API v25 (#36347) (7b64b94)
• Handle exponential-notation numbers in smartDecimal (#35967) (08052c1)
• Kafka Trigger Node: Fail v2 activation when the consumer group cannot be joined (#36046) (67a458e)
• Kafka Trigger Node: Refuse activation when the topic does not exist (#36044) (b025ff0)
• MCP Server Trigger Node: Keep sessions working when the caller's end-user credentials are unconnected (#36221) (5044810)
• Microsoft SharePoint Node: Require subdomain in OAuth2 credential (#35680) (620c40c)
• Microsoft Teams Node: Restore Group.ReadWrite.All OAuth2 scope (#36005) (653dfc6)
• Microsoft Teams Node: Surface Graph errors instead of returning an empty chat list (#36200) (1cc20d5)
• Remove default model from one-script docker compose setup (#36034) (a91e012)
• Rethrow unreachable-element errors in getElementValue (#36199) (1ad64b8)
• Surface Zoho API error message on duplicate record (#35840) (0a30c03)
• Wait for task runner registration before executing in e2e test (#36212) (2bca080)
• Wordpress Node: Send no-cache header on write requests (#20473) (077370f)

Features

• Adapt the OAuth consent screen for first-party clients (#36261) (2e97fa5)
• Add LangSmith agent session debug export (#36309) (6cd9a2b)
• Add snapshot option to every browser use interaction tool (#36111) (7f37137)
• ai-builder: Add MCP server as allowed tools in skills (#35969) (d0424b4)
• ai-builder: Auto-select a sensible default model for new agents (#36058) (30aff5d)
• ai-builder: Offer agent building in assistant greetings (#36073) (e2e719c)
• API: Add endpoint to create role-mapping rules (#36032) (40a0f2a)
• API: Add endpoint to get a single role (#36279) (7bd7dac)
• API: Add endpoint to list all roles (#35609) (48893ee)
• API: Add endpoint to update a custom role (#36213) (28bf536)
• API: Migrate workflow tags endpoints to decorator pattern (#35829) (6ab3f5e)
• Confluence Node: Add Confluence Cloud OAuth2 credential (#35732) (f9fd8a8)
• Confluence Node: Add page get operation with full sub-tree support (#36217) (d9fa966)
• core: Add AI Assistant setup funnel telemetry (#36391) (490b368)
• core: Add an inline Available tools card to connect MCP servers from the assistant chat (#35332) (fb430aa)
• core: Add env var to skip workflow history compaction on startup (#36099) (5c61888)
• core: Add get_workflow_versions_diff MCP tool (#35492) (ff7955f)
• core: Add MCP support for folder creation and workflow moves (#35964) (d4dcc1c)
• core: Add MCP tool to read data table rows (#35956) (de944d2)
• core: Add n8n Sandbox support to Agent Knowledge (#35811) (6a30736)
• core: Add new agent slack integration (#35591) (ca82fd9)
• core: Add one-off operation flow and insertion-semantics rules to AI Assistant (#36184) (51aa6fb)
• core: Add writable workspaces to agents (#36033) (01ce449)
• core: Advertise the MCP 2026-07-28 routing headers in CORS (#35471) (a14ab0b)
• core: Auto-expose new workflows to MCP from settings via toggle (#35828) (a74fbab)
• core: Coalesce a Schedule Trigger node's catch-up runs after downtime (#35524) (026cee3)
• core: Deprecate Array.merge from expressions, and add Array.mergeIntoObject (#36161) (04e76a3)
• core: Enable Agent sandboxes through Instance AI setup (#36056) (5f9602b)
• core: Isolate Agent sandboxes by principal (#36203) (ce1b521)
• core: Let agent builder inspect and update schedules (#36449) (f7459c8)
• core: Make n8n User Auth (OAuth2) generally available (#35900) (5bfcde5)
• core: Redesign the account connect panel on hosted forms (#36344) (bf28af6)
• core: Refuse durable pollers when an active workflow has duplicate trigger node ids (#36340) (faf4dc3)
• core: Restrict end-user credential creation to team projects (#36025) (e243656)
• core: Restrict workflow review decisions to assigned reviewers (#36040) (64dcebb)
• core: Send projectId to the AI Gateway for usage attribution (#35885) (3300833)
• core: Skip update approval for workflows created in the same Instance AI session (#36054) (dfa841a)
• core: Support workflow version policies in package exports (#35962) (aecd164)
• core: Tell the assistant which services are connected and what tools they expose (#35931) (3571c09)
• Create workflow tools from the agent builder (#36460) (35434b0)
• Discord Node: Add member moderation actions (#33486) (6bd31e5)
• editor: Add docked agent preview chat (#35773) (42130c5)
• editor: Add preview chat to SessionTimeline view (#36128) (dbb28af)
• editor: Display authors on the review details view (#35897) (d35bb3e)
• editor: Improve agent session tool call feedback (#36346) (b27a53e)
• editor: Integrate n8n credits into the node credential picker (#35758) (b2df4c8)
• editor: Let users update review descriptions (#36069) (cbb5577)
• editor: Link review success toasts (#35888) (3a4f356)
• editor: Show character counters on review title and description inputs (#36177) (998fc85)
• editor: Split workflow review inbox sections (#36216) (dd82601)
• editor: Switch credits pill after a top-up or depleted allowance (#36239) (516c19e)
• editor: Update NumberInput styling (#35937) (a319c76)
• editor: Update SegmentControl component (#34447) (60736dc)
• Gate Browser Use setup steps on extension detection (#36235) (7025284)
• Hide n8n-connect usage when aiGatewayCloudUbb is enabled (#35978) (e7fa252)
• Improve Browser Use connect conditions (#36215) (fee8450)
• lmChatOpenRouter Node: Add provider routing options (#24822) (d7dcba5)
• MCP Server Trigger Node: Add server instructions option (#35945) (bfd2746)
• MiniMax Node: Add M3 and H3 model support (#35935) (aee23f7)

Bug Fixes

• AI Agent Node: Stop pre-tool-call text leaking into agent responses (#35212) (d5845df)
• core: Apply redaction policy to Code node console output (#35121) (242da02)
• core: Bound oversized agent tool results (#35759) (8fbcd7e)
• core: Close review requests when a source control pull archives or cascade-deletes a workflow (#35798) (fd366ce)
• core: Compile MCP tool schemas on their declared JSON Schema dialect (#35610) (eeaa425)
• core: Deduplicate OAuth2 authorization URL query parameters (#35949) (0b4b044)
• core: Detect node parameter values the connected credential cannot use (#35633) (5925f5b)
• core: Fail stalled Instance AI model streams fast instead of hanging (#35943) (c04825d)
• core: Fix task runner health check failing (#35808) (9c4a613)
• core: Gate error workflows behind primary readiness (#35634) (c79bd88)
• core: Handle errors from triggered and polled workflow executions (#35689) (1deee72)
• core: Handle out-of-scope display option dependencies (#35845) (9241a72)
• core: Honor dry run on data table row delete (#35713) (76fb3bc)
• core: Ignore undeclared fields in agent resume payloads (#35607) (42754a8)
• core: Keep agent workflow tools linked after renames (#35690) (b4736b7)
• core: Keep database ping loop alive across connection recovery (#35752) (3f2d479)
• core: Keep n8n-docs always loaded so n8n questions do not route to web search (#35537) (e73f0a4)
• core: Keep valid resume payloads intact when ignoring undeclared fields (#35751) (a2c9578)
• core: Nest agent traces under the calling workflow node (#35457) (5d0a424)
• core: Normalize the $fromAI type argument before coercing defaults (#35641) (c0a7674)
• core: Probe azure blob with list instead of exists() (#35719) (8bbc988)
• core: Reattach n8n-sandbox thread sandboxes after restart, idle eviction, and across mains (#35953) (0e7e49b)
• core: Recover unresponsive task runners (#35456) (7a79486)
• core: Reject stale Instance AI confirmations instead of hijacking the live run (#35733) (4555145)
• core: Report failed publishing when imported workflows share a webhook path (#35525) (32f38a3)
• core: Require row read scope when data table writes return rows (#35651) (ae6b256)
• core: Resolve expressions in ephemeral agent tools (#35876) (65083ab)
• core: Return a clear error for a node type with an unknown version (#35196) (a9cde3f)
• core: Run published agent workflow tools as production (#35784) (6cc9b28)
• core: Show Agent references in credential usage (#35409) (a74c6fd)
• core: Show Instance AI model overload errors clearly (#35498) (40ba0dd)
• core: Strip leading BOM before parsing webhook request bodies (#35933) (aa03666)
• editor: Derive workflow home project from shared relation when absent (#35810) (62e6862)
• editor: Disable no-op workflow review updates (#35890) (bf860f3)
• editor: Fix janky spacing between agent capability chips with long labels (#35493) (007400d)
• editor: Focus Markdown editor input before toolbar (#35529) (698d137)
• editor: Keep NDV panels spanning the full container width (#35818) (561af4c)
• editor: Keep Publish button visible in narrow workflow headers (#35502) (1de80ac)
• editor: Lock the AI Assistant canvas while the agent is working (#35339) (1206780)
• editor: Make DropdownMenus more obviously scrollable (#35726) (d3e49b2)
• editor: Preserve new agent artifact lifecycle (#35703) (caeb40e)
• editor: Remove unsupported button type attributes (#35578) (980c9bd)
• editor: Require an explicit answer or Skip on Instance AI questions (#35700) (6f765e9)
• editor: Show agent tool credentials above configuration (#35590) (1ca0708)
• editor: Show dependency pills on views listing more than 100 resources (#35825) (926aa1a)
• Execute Workflow Node: Prevent invalid input mappings (#35767) (34ca40b)
• Fix token data updates and refresh for DCR oauth credentials (#35535) (abe2959)
• Kafka Trigger Node: Stop consumers reliably when a workflow is deactivated or updated (#35069) (03213e7)
• Preserve Agent build intent and refresh artifact names (#35823) (daba594)
• Schedule Node: Apply declared interval defaults to stored rules (#35271) (28d929d)
• Send n8n version on backend posthog flag retrieval (#35621) (1ade7a2)
• SharePoint Node: Point delegated Sites.Selected users at URL or ID mode (#35369) (305ed29)
• Skip setup cards for credentials the workflow already settled (#35701) (4493e5a)
• Use caller's timezone for Insights date range boundaries (#33989) (279bde3)
• X (Formerly Twitter) Node: Update OAuth2 and API endpoints to x.com (#32699) (8ac5a60)

Features

• Add self-hosted AI Assistant onboarding (#35579) (4ae4cc3)
• Add Simplified Custom Auth credential with recipe-guided setup in the AI Assistant (#35056) (53841f1)
• Add task-runners sidecar to the get.n8n.io stack (#35426) (9493631)
• API: Add @Deprecated decorator to the decorated controller platform (#35725) (897ce6a)
• API: Add endpoint to create custom roles (#35522) (d225d03)
• API: Add publishIfActive option to workflow update endpoint (#35813) (0e22fdf)
• core: Add Agent Builder test runs (#35716) (b660ebe)
• core: Add backend form-trigger submission gate for end-user credentials (no changelog) (#35539) (ddcc94f)
• core: Add detailLevel option to MCP get_workflow_details (#35497) (3773c31)
• core: Add Discord as an agent chat channel (#35331) (4e6fc65)
• core: Add HITL to agent builder test runs (#35731) (0df0041)
• core: Add local agent token counting (#35836) (ae1252a)
• core: Add projectConflictPolicy to package import (#35488) (881a14f)
• core: Add telemetry for Simplified Custom Auth templated credentials (#35832) (c485cea)
• core: Auto-close workflow review requests when a workflow is archived or moved (#35772) (a044c0d)
• core: Enable 'instance-ai' module by default and remove startup warning (#35670) (fcc4ef5)
• core: Expose agent test execution through MCP (#35744) (6f761ad)
• core: Expose MCP registry search to the assistant as a tool (#35318) (59278a7)
• core: Extend n8n Connect to Agent Builder node tools (#35402) (104bc5c)
• core: Gate n8n Connect with instance config (#35007) (935cfb9)
• core: Include SDK language rules in the MCP workflow SDK reference (#35183) (1c6e992)
• core: Make Azure Key Vault provider endpoints configurable (#35214) (82e22c9)
• core: Make the vm expression engine the default (#35738) (98e0952)
• core: Migrate the instance MCP server to the MCP TypeScript SDK v2 (#35467) (74631f7)
• core: Persist agent session timelines during execution (#35490) (1546c95)
• core: Reconcile tag ids on name collision when importing packages (#35224) (c9eeb2e)
• core: Support the MCP 2026-07-28 discovery handshake on the instance server (#35470) (145863c)
• core: Surface decision eligibility on the review detail (#35391) (5e4a20d)
• core: Teach the AI assistant to organise workflows into node groups (#35646) (5bf5f38)
• core: Warn on startup when Postgres is below the supported range (#35495) (c72b14f)
• editor: Add Changes diff tab to workflow review detail pane (#35431) (6c8197e)
• editor: Add ChatMessage to @n8n/design-system (#35461) (38f0691)
• editor: Add more Markdown editor toolbar options (#35630) (32db83c)
• editor: Add review detail metadata (#35638) (cf13bc0)
• editor: Allow adding a workflow version description when submitting for review (#35640) (5f0e464)
• editor: Disable command bar in canvas-only mode (#35542) (fda3301)
• editor: Enable enhanced HITL Slack/Telegram (#35411) (5d501e3)
• editor: Improve agent file upload visibility (#35513) (75a0cdf)
• editor: Name the pinned workflow version when submitting for review (#35566) (fe37fe3)
• editor: Restore one-click connector for ChatGPT MCP client (#35396) (2058a16)
• Extract the get-n8n stack definition into a versioned standalone file (#35620) (8a1645a)
• Form Trigger Node: Add credential connect UI for end-user credentials (#35347) (a89dc5d)
• GitHub Node: Add timeout option to Dispatch and Wait for Completion (#35837) (a6f07db)
• Kafka Node: Add compression options to version 2 (#35727) (21b52fb)
• Kafka Node: Add version 2 to send messages via the new Kafka library (#35450) (d2901bd)
• Load Instance AI models dynamically (#35927) (269a45d)
• Merge Node: Add "Append" and "Combine" search aliases (#35709) (cc98292)
• Salesforce Trigger Node: Add OAuth2 JWT authentication support (#32257) (eda2496)
• Slack Node: Use Real-time Search API for message search (#35291) (204f346)

Performance Improvements

• core: Resolve webhook description fields via declared native resolvers (#35404) (18c2d71)

Bug Fixes

• ai-builder: Treat bound stored credentials as settled in setup analysis (#35340) (5decab2)
• AWS Bedrock Chat Model Node: Enable TCP keepalive on Bedrock runtime connections (#35323) (78e27ff)
• core: Add incremental SSE response headers (#35342) (7b8818d)
• core: Add reactions:write to Slack agent app manifest scopes (#35238) (43831eb)
• core: Annotate pre-existing validation warnings in MCP update_workflow (#34944) (cca4d8d)
• core: Apply AI request timeout even without a proxy (#34992) (ab3ed79)
• core: Block deletion of the SSO role mapping default condition role (#35086) (587b23d)
• core: Clarify MCP trigger info for unsupported production triggers (#35209) (21dc3ad)
• core: Classify agent execution pulse with run_type (#35346) (8f4816e)
• core: Classify Instance AI error reports by severity and quota cause (#35353) (a97e305)
• core: Classify no-op pseudo triggers as persisted (#35287) (2bc0f30)
• core: Default AI-created workflows to v1 execution order (#35277) (d0d0b7a)
• core: Disable Slack app Home tab (#35412) (c0d09a5)
• core: Emit OTel spans for queue mode executions (#35357) (e976bd0)
• core: Exclude AI assistant verification runs from prod execution counts (#35405) (4accb5b)
• core: Fix broken documentation links in AWS (Assume Role) credential (#34763) (1e39ea5)
• core: Fix SSE push backend connections in production (#35327) (c0a8f02)
• core: Harden axios error handling against non-string error stack (#35073) (b329d57)
• core: Import security audit risk reporters with a file extension (#35263) (8e62ca2)
• core: Improve task broker resilience when a runner dies (#35298) (c15bbca)
• core: Keep agent channel setup separate from publishing (#35468) (9f2f315)
• core: Keep external secrets available while provider connections reload (#35237) (f3b052a)
• core: Keep waitTill when storing worker job results on main (#34958) (7f50297)
• core: Limit the size of webhook responses relayed through the queue (#35032) (bdf33c1)
• core: Prefer n8n credits covered nodes in Instance AI workflow builds (#35019) (b2af755)
• core: Preserve cause on execution errors (#35216) (0d4c3a7)
• core: Preserve credential field expressions when caching preAuthentication tokens (#35064) (03894ee)
• core: Preserve saved node positions when the assistant edits a workflow (#35268) (7034666)
• core: Propagate sub-agent tool approvals (#35368) (edc377c)
• core: Recover enqueued executions after a restart (#35059) (3872950)
• core: Refresh end-user credential connection status after save (#35131) (a66fabb)
• core: Return 405 for GET requests to the instance MCP endpoint (#34835) (982a906)
• core: Route crash-loop auto-deactivation through the workflow unpublish flow (#35097) (eb0d966)
• core: Skip error workflow dispatch for AI builder verification runs (#35247) (1cedd9f)
• core: Sort node version directories by numeric version (#35206) (1f3d48d)
• core: Tolerate JSON Schema patterns incompatible with the regex u flag (#35320) (3fe8d6e)
• core: Unify workflow trigger teardown and make it best-effort (#35273) (9e452bb)
• Deep-merge task metadata to preserve nested tracing attributes (#35166) (b682696)
• editor: Add configurable origin allowlist for editor postMessage handling (#34674) (f9b4bd5)
• editor: Add executions quota tooltip to trial banner icon (#34872) (50b56ac)
• editor: Clarify Slack HITL "Capture Who Responded" helper text (#35432) (fff29ec)
• editor: Create agent-builder credentials in the agent's project (#35286) (33caa35)
• editor: Default credential modal to requested auth type and disambiguate managed OAuth2 options (#35079) (6676373)
• editor: Dismiss archive toast immediately after permanent delete (#35207) (12f1fcc)
• editor: Do not fail OAuth flows when the provider's COOP policy makes the popup read as closed (#34404) (b81d79a)
• editor: Fix icon overlap in end-user credential connection banner (#35130) (2837a68)
• editor: Gate agent reasoning by model support (#35253) (5046f24)
• editor: Guard optional fields when reading public settings (#35281) (ba21bea)
• editor: Keep Enter selection working when node search ends with a space (#35046) (6b9b890)
• editor: Keep read-only execution background in sync (#35245) (cc5f334)
• editor: Mention n8n User Auth webhook mode in end-user credential warning (#35222) (3b69d54)
• editor: Preserve line breaks in multiline secret credential fields (#35157) (ad02a26)
• editor: Remove brackets from docs link in credential setup assistant help (#35028) (9cdcc6d)
• editor: Rename preview AI Agent node to V2 (#35285) (703c600)
• editor: Show node descriptions for installed community nodes (#34914) (0839326)
• editor: Size settings save bar off its column so its content aligns with settings rows (#34967) (982fa19)
• editor: Update AI Agent preview label (#35102) (c9cf9bb)
• editor: Wait for animated zoom-in transition to settle (#35244) (d512f5c)
• Enable Save and clear stale OAuth state on auth method switch (#35367) (7eabd74)
• Execute gated tool after approving Human Review in manual chat (#34881) (b29f38b)
• Fixes see all button tracking on aia template examples (#35451) ([ad54d0cd63affd87dc134532825affd85f6a4233))
• Form Node: Skip parent nodes without run data when returning binary from form ending (#35336) (d3e761e)
• Google Vertex Chat Model Node: Preserve Gemini thought signature on single tool calls (#34797) (c6e5ecd)
• Grist Node: Restore the stored base URL of legacy credentials (#35229) (3a2af96)
• HTTP Request Tool Node: Pass error response bodies to the model (#34509) (f443349)
• MCP Server Trigger Node: Save execution data only after tool call completes (#35239) (c1f5577)
• Notion Node: Mark title as required for database page create in v3 (#35334) (736f570)
• Preserve AI Assistant sandbox provider selection (#35122) (923a964)
• Release Snowflake connection when a statement fails (NODE-5163) (#32932) (dc776f6)
• Schedule Node: Run non-dividing minute intervals by elapsed time (#35062) (3a5a4a6)
• Skip redundant workflow edit approval in AI Assistant (#35423) (852fed1)
• Slack Node: Add groups:write OAuth scope for private channel actions (#35288) (e4e33e3)
• Support n8n credits on nodes with multiple credential types (#35190) (47569fc)
• Validate Send and Wait custom forms before sending (#35262) (ca54f32)
• Webhook Node: Don't flag Respond to Webhook nodes owned by a Wait node as unused (#33911) (b7e8850)

Bug Fixes

• ai-builder: Halt workflow verification at send-and-wait gates on loops (#34809) (e904939)
• ai-builder: Keep assistant replies in the user's language during tool-heavy turns (#34761) (5a64744)
• ai-builder: Make channel config dropdown enabled - Linear and Telegram - in AIA agent builder (#34706) (6b40211)
• ai-builder: Make labels be more specific about access token for Slack setup (#34893) (490b722)
• ai-builder: MCP Connections failures are non-blocking for agents (#34722) (3301e12)
• ai-builder: Preview chat link fix (#34659) (54db083)
• ai-builder: Provision agent prerequisites before build-agent delegation (#34802) (fec6cee)
• Airtable Node: Support matching array field values in update operation (#31517) (e07eab8)
• AMQP Trigger Node: Cap concurrent executions at the configured messages per cycle (#34787) (d2672a6)
• Baserow Node: Format Get Many date filter values for Baserow API (#32723) (b5da074)
• Cohere Chat Model Node: Route chat requests through the v2 endpoint (#34878) (4006c22)
• core: Accept 5-field cron expressions in schedule trigger (#35006) (27edc54)
• core: Advertise OAuth protected-resource metadata URL on MCP server 401 responses (#34571) (37bb354)
• core: Avoid loading execution data during credentials security audit (#34876) (4212fc2)
• core: Classify masked Instance AI stream failures as quota exhaustion via credit re-check (#34553) (bd89cfc)
• core: Ensure license device fingerprint meets minimum length (#33852) (9140a06)
• core: Expose workflowPublishingPolicy in the package import CLI command (#34632) (3117e45)
• core: Fail fast with a node error when a Data Table node references a missing table (#34610) (68c7b55)
• core: Fall back to the run's resolved model for AI Assistant verification LLM calls (#34627) (a8c90f8)
• core: Fix MCP workflow update failing for active workflows on SQLite (#34964) (bc88dc4)
• core: Handle MCP OAuth2 token expiry and PKCE negotiation (#34494) (c7b90d0)
• core: Include RFC 9207 iss parameter on OAuth authorization error redirects (#34751) (eca731c)
• core: Keep MCP server display names free-form in agent config (#34931) (5339b5e)
• core: Normalize workflow rollup timestamps (#34670) (0316336)
• core: Preserve the underlying error as cause on Instance AI workspace file reads (#34759) (206a258)
• core: Prevent concurrent instance startups from racing database migrations (#34685) (4d861d1)
• core: Prevent unsupported waiting operations in agent tools (#34587) (3c278f0)
• core: Publish workspace packages required by n8n at runtime (#34886) (0c613b4)
• core: Redact a sub-workflow's own execution record per its own policy (#34621) (d8d89cc)
• core: Redirect form-resume waiting requests to the form endpoint (#34725) (5dfa49b)
• core: Reject workflow deletion while unpublish is still in progress (#34836) (9e09ff4)
• core: Require row read scope for data table CSV export (#34127) (8171aa8)
• core: Resolve synthetic tool nodes to the requested version (#34850) (6e12426)
• core: Return correct webhook URL in MCP get_workflow_details trigger info (#34927) (5542c1b)
• core: Sanitize secret values before persisting to agent memory (#34622) (edbed4f)
• core: Serve RFC 9728 metadata at bare /.well-known/oauth-protected-resource (#33776) (3e0188c)
• core: Sign S3 object paths with strict RFC 3986 encoding (#34694) (8e5fdb4)
• core: Skip Sentry reports for Instance AI errors that self-declare a warning level (#34617) (3bb3835)
• core: Stop Instance AI follow-up runs from looping when they keep failing before the agent starts (#34767) (5aac66d)
• core: Strip null optional node fields from AI-generated workflows (#34668) (94e505a)
• core: Support fractional community node versions with PostgreSQL (#34717) (48c0e70)
• core: Surface HITL suspend/resume content in Instance AI trace turns (#34599) (d8c3fad)
• Databricks Node: Change default tokenExpiredStatusCode from 401 to 403 (#34325) (6f3d2b9)
• DeepSeek Node: Preserve reasoning_content on tool-calling turns (#34924) (4d247a1)
• editor: Add document title and adopt new settings layout on migration report pages (#34609) (0164216)
• editor: Allow LDAP users to configure n8n 2FA in personal settings (#34655) (2b1e4b8)
• editor: Center empty state content vertically on short viewports (#34820) (359d82f)
• editor: Clamp persisted sidebar width when expanding the main sidebar (#34923) (4f7c725)
• editor: Debounce node creator search filtering (#34828) (25c5a73)
• editor: Don't show quick connect for non-main auth fields (#34449) (6195471)
• editor: Fix an issue in some Safari versions that prevented copying invite links (#34620) (e75e412)
• editor: Fix focus parameter button breaking selection in credential dialog (#34453) (ee029b8)
• editor: Html strings for table names are escaped (#24522) (f4365b1)
• editor: Inject instance UTM parameters in all links to the templates website (#34790) (d5b5d8e)
• editor: Keep chat typing indicator visible until response arrives (#34768) (4fdf3ed)
• editor: Keep NDV node hints visible after execution and render them in a single pane (#34920) (082b5d9)
• editor: Keep Switch fallback outputs available with unresolved expressions (#34698) (a0f6861)
• editor: Manage and other permissions checkboxs stuck in half-selected state during member selection (#34726) (0e186ad)
• editor: Preserve agent tool name translations (#35039) (fd5bc7d)
• editor: Preserve canvas groups when converting a selection to a sub-workflow (#34664) (1666f1e)
• editor: Prevent reactive feedback loop when opening workflow diff (#34897) (962ff56)
• editor: Reassign users when deleting a custom instance role (#34642) (fa0abd8)
• editor: Refresh subworkflow input schema from draft on parent open (#34522) (734f957)
• editor: Remove episodic memory callout and knowledge base publish requirement (#34888) (771d038)
• editor: Rename preview AI Agent node to V1 (#34714) (359e1fb)
• editor: Replace invalid link (#34652) (87115d6)
• editor: Restore agent channel credential setup (#34737) (ac839bb)
• editor: Restore horizontal scrolling of NDV panel header controls (#34824) (0745526)
• editor: Stabilize icon picker scrolling (#34596) (e67c119)
• editor: Update copy for executions tab empty state (#34731) (1138f11)
• Form Node: Properly handle quotes in Form Trigger Node name (#34650) (95c36b8)
• HTTP Request Node: Include error body in continueOnFail mode (#34729) (d0b254c)
• Keep agent preview streams responsive (#35035) (8d46c6e)
• MCP Client Tool Node: Close cached MCP client sessions when their execution finishes (#34397) (ec5f503)
• Microsoft Teams Node: Respect limit server-side in getAll operations (#34851) (ded1697)
• N8n Node: Update credential test to use an endpoint with no extra scopes (#34605) (4622b35)
• Parse structured output from content-block model responses in chain nodes (#34928) (1713d9a)
• Report real exported entity counts in package export (#34995) (f3fd559)
• Return reversed array when calling .reverse() (#34625) (cc4dbf9)
• Serialize dates and route binary columns to output in database nodes (#34124) (26ae903)
• Slack Node: Handle user-list rate limits and surface real load errors (#34743) (2268149)
• Treat blank optional enum form fields as unset in package import (#35010) (4abbc89)
• Validate loadOption parameter in GSheet and Notion nodes (#34695) (1f82bee)
• Wikipedia Tool Node: Surface tool errors as actionable node errors (#34643) (3f1b35d)
• Wordpress Node: WordPress Get Many adds before filter for posts and pages (#19790) (90f1430)

Features

• Add admin-managed instance credentials (#34364) (7d8426f)
• Add require-files-array ESLint rule for community node packages (#34792) (d0adaf7)
• ai-builder: Add Fix with Assistant for failed agent preview tools - pass single execution context (#34616) (9626891)
• ai-builder: Add support for verified community nodes as agent tools (#34922) (3d281ec)
• ai-builder: Agent session records direct to session chat, not trace (#34997) (f62cc63)
• ai-builder: Format zod erros on agent config - better toast msg (#34867) (bac8deb)
• ai-builder: Single preview chat + trace modal (#35033) (687a00e)
• ai-builder: Support execution scenarios for first-class agents in evals (#34384) (5fd800e)
• ai-builder: Tidy up tool names and agent builder tool UX (#34646) (decb322)
• Allow custom OAuth scopes for Microsoft Azure Monitor, Dynamics, Graph Security and Azure Storage (#34612) (69c8633)
• Allow custom OAuth scopes for the remaining Google credentials (#34631) (4a8dd5b)
• API: Add credentialResolverId, timeSavedMode & binaryMode properties to workflow settings schema (#34330) (9ac95b6)
• API: Add endpoint to list workflow version history (GET /workflows/{id}/history) (#34656) (91751c3)
• API: Add public API endpoints for OpenTelemetry configuration (#34429) (cd1e48e)
• API: Add workflow publish/unpublish public API endpoints (#34745) (e9933bd)
• API: Deprecate workflow activate/deactivate public API endpoints (#34771) (05c691b)
• AWS Bedrock Chat Model Node: Surface inference-profile models in the default model picker (#34983) (cb28555)
• Configure the AI Assistant through a redesigned instance settings page (#34493) (4078318)
• core: Add active_workflow_info and make workflow_info leader-only (#34987) (78e55b5)
• core: Add availableInMCP column to agents (#34665) (fdd4e33)
• core: Add credential-unnecessary-password community node lint rule (#34791) (95da849)
• core: Add eligible-reviewer API types and reviewer ids to revie… (#34703) (60112eb)
• core: Add instance credential database schema (#34709) (13becf3)
• core: Add N8N_SCHEDULER_MAX_ATTEMPTS to configure scheduler dead-letter threshold (#34633) (29f2fac)
• core: Add storedAt column to agent_execution (#34858) (0b4bbd0)
• core: Add telemetry events for agent publishing, builder capabilities, and interactive flows (#34887) (8017b3d)
• core: Add workflow review request entities and migration scripts (#34062) (156ac00)
• core: Add workflow.deactivate external hook (#34746) (697174f)
• core: Allow Storybook components to be viewed in light and dark mode (#34361) (e592b21)
• core: Auto-include sub-workflows in package exports (#34218) (09c90f9)
• core: Create reviews page and render inbox (#34357) (b2cbcc1)
• core: Detect and heal published-version skew in trigger reconciliation (#34877) (3f2bc68)
• core: Emit agent run spans through the OTel module's tracer (#34460) (e01e996)
• core: Include acting user identity in workflow lifecycle external hooks (#34769) (efa86c6)
• core: Infer structured output from example JSON in AI Agent Node (#34779) (0ec49b3)
• core: Nest delegated sub-agent spans under the parent agent trace (#34720) (bd6f617)
• core: Return open and closed counts for the review inbox tabs (#34789) (f4edeeb)
• core: Review submission flow endpoints and toggle (#34649) (6d38f2e)
• core: Store agent execution logs in blob storage (#34796) (a647aef)
• core: Support legacy sub-workflow dependencies in package exports (#34398) (41660d0)
• core: Validate missing node types on package import (#34598) (4044d58)
• Default package import workflowIdPolicy to source (#34989) (1f4e654)
• editor: Add N8nStatusDot component (#34963) (f758a4b)
• editor: Add workflow review submission flow (#34520) (5939eb5)
• editor: Adds modal to see all projects a user can access in a list (#34619) (2748e1a)
• editor: Keep review-required toggle synchronized with open reviews (#34606) (ca0c5f4)
• editor: Migrate OpenTelemetry settings page to new instance settings UI (#34965) (91e1276)
• editor: Polish end-user credential setup modal and NDV states (#34766) (01e0639)
• editor: Revamp MCP settings view with instance settings components (#34041) (e2840a7)
• editor: Show confirmation modal when updating a custom instance role with assigned users (#34544) (6dc2079)
• editor: Show reviewer and requester avatars and a status indicator on review inbox items (#34885) (2ea7da2)
• editor: Sync a new workflow version into an existing open review (#34842) (5a97bd1)
• editor: Track Instance AI entry point as action_source on builder messages (#34671) (c0fe8ba)
• Gmail Node: Add warning notice when Simplify is disabled (#34611) (72a311a)
• Microsoft Excel (SharePoint) Node: Add node for Excel workbooks in SharePoint document libraries (#34847) (d67b9cd)

Performance Improvements

• core: Skip allowed-methods lookup on successful production webhook requests (#34833) (bf8f5d8)

Bug Fixes

• ai-builder: Honor eq @version conditions in generated node type definitions (#34232) (9a48bc5)
• ai-builder: Open agent chat preview on the same tab on instance AI (#34441) (6d56cee)
• ai-builder: Resurface channel edit modal on AIA agent builder's artifact mode (#34257) (0984a1d)
• ai-builder: Scope ToolIoView synth execution under a synthetic document store (#34588) (ab12ee5)
• ai-builder: Wire thread conversation history - with caps - for agents with slack channel (#34354) (8c1d17f)
• Allow devDependency imports in linter (#34335) (26caaa8)
• API: Fix broken public API playground server selection (#34077) (f24570f)
• AWS Bedrock Chat Model Node: Default guardrail version to working draft when not set (#33555) (013c34c)
• core, editor: Clarify credential setup outcomes and add requireUserSelection (#34268) (65e267b)
• core: Acquire expression isolate for MCP Trigger tool calls in queue mode (#34491) (eed8f3f)
• core: Add a per-attempt timeout to AI assistant service calls (#34341) (f191548)
• core: Add project ID and project name to log stream events (#33854) (a89817d)
• core: Alert on unusable Instance AI sandbox snapshots and gate the release on snapshot health (#34344) (080c3cc)
• core: Allow publishing end-user credentials with Send-and-Wait nodes (#34462) (c59f5d8)
• core: Bind dynamic credential tokens to a user ID (#34073) (fd261be)
• core: Cancel Instance AI tool runs promptly when generation is stopped (#34433) (4f8fef1)
• core: Cancel Instance AI workspace tools promptly on stop (#34551) (267fd85)
• core: Close the durable scheduler's record-then-dispatch effect boundary (#34014) (e22680b)
• core: Coerce AWS request header values to strings before signing (#34534) (d6f26cf)
• core: Count AI assistant workflow test runs as manual executions in statistics (#34145) (9842c2c)
• core: Create proxied Instance AI sandboxes from snapshots only (#34328) (29c5d72)
• core: Delete executions in batches when removing workflows, projects and folders (#34265) (0b809c9)
• core: Exclude in-flight Instance AI groups from history reads on non-driving mains (#34345) (50c3d88)
• core: Fix AI Agent not seeing tools connected through HITL tools (#34271) (bdff8f4)
• core: Fix change in width of all dropdowns in UI (#34249) (87cdf3d)
• core: Lint community packages against their provenance-attested source (#34214) (5f3d139)
• core: Persist MCP servers when credential setup is skipped (#34399) (7c7506d)
• core: Prefer direct tools for agent capabilities (#34466) (969a68e)
• core: Preserve agent builder question answers (#34414) (9882c5c)
• core: Preserve local credential fields absent from source contro… (#34173) (0a4ddde)
• core: Preserve node aliases when generating AI tool variants (#34162) (8284460)
• core: Prevent getIncomingData from throwing on a missing connection type (#34285) (9d05fbd)
• core: Prevent sub-workflow failures after transferring a deleted user's workflows (#33772) (7a56ade)
• core: Replace https agent for 'Ignore SSL issues' OAuth2 requests with one that respects proxies (#34234) (338f186)
• core: Require execution mode for MCP workflow executions (#34155) (79012f6)
• core: Resolve @n8n/expression-runtime to its CJS build under Node (#34463) (09f5ade)
• core: Retry transient AI assistant service errors during Instance AI environment setup (#34324) (5b7df71)
• core: Retry transient sandbox file writes (#34319) (80ea25b)
• core: Show a single error toast when a manual execution fails pre-flight validation (#34541) (8d1fc02)
• core: Sign SES requests with the ses service name (#34270) (2e31230)
• core: Skip reporting axios errors thrown as unhandled node errors (#34570) (33f1c36)
• core: Stop reporting quota-exhausted Instance AI runs to Sentry and isolate report request context (#34549) (6f0804e)
• core: Update error message on file write (#33833) (afe603fc)
• Correct build-command quoting in standalone package release (#34258) (1301bba)
• Correct end-user credential validation, re-evaluation, and identity-hook recognition (#34094) (65da749)
• Default new agent MCP tool transport to httpStreamable (#34092) (9c3f7fa)
• Do not lose scenario results on a budget/timeout abort (#34419) (40c5b76)
• editor: Allow self-hosted OpenAI credentials for episodic memory (#34558) (e162724)
• editor: Auto-ungroup invalid groups on workflow save (#34456) (d5d3da6)
• editor: Avoid next prev buttons from being disabled (#33774) (a2fd7f7)
• editor: Decouple MCP redirect URI controls from env-lock flag (#34184) (64318a8)
• editor: Dissolve single-node canvas group when converting its nodes to a sub-workflow (#34334) (93e1b7f)
• editor: Improve Message an Agent panels (#34461) (e8b005e)
• editor: Include Chat, AI Assistant, and MCP settings under 'Instance settings: Manage' custom role permission (#34455) (fa5476c)
• editor: Keep dropdown tooltips above menus (#34547) (051eee1)
• editor: Link end-user credentials docs from credential modal (#34406) (09d1e96)
• editor: Make AI assistant quota-exhausted error states explicit (#33847) (4ef0d05)
• editor: Make selector dropdowns usable in Instance AI workflow setup (#33971) (487594c)
• editor: Polish pass on the custom instance roles (#34122) (297e252)
• editor: Prevent AI Agent from auto adding a chat connector on creation (#34259) (865035d)
• editor: Prevent users from clicking workflows within insights that they do not have access to (#34362) (e68fb3a)
• editor: Prevent workflow actions menu from being cut off (#34278) (8ba28dc)
• editor: Reconcile stale Instance AI run state on reload and stop (#34432) (8879b87)
• editor: Refresh editor checksum on workflow activation while editing (#34095) (7ebeb1e)
• editor: Refresh editor checksum on workflow deactivation while editing (#34315) (c83eab0)
• editor: Remove extra top spacing in sticky note markdown (#34116) (114c74d)
• editor: Rename agent tasks to schedules (#34326) (1ab30cb)
• editor: Restore hosted chat Markdown styles (#34176) (d6b9234)
• editor: Restore previous route when closing session trace (#34423) (e8922cb)
• editor: Restrict setup credential dropdown to pinned type (#34252) (454e0d3)
• editor: Show only the latest node as executing during manual executions (#34182) (6faca89)
• editor: Trigger options menu from node details header add button (#34212) (3b6af51)
• editor: Wrap long keyboard shortcut tooltip labels within max-width (#34135) (eb6a4a1)
• Even out workflow metadata divider spacing (#34132) (90f25e2)
• Extend orphan message cleanup to handle trailing orphans from memory trimming (#34385) (96264a0)
• Gate agent knowledge base table on AI Assistant proxy availability (#34366) (77880a3)
• Gmail Node: Handle multi-address Reply-To in the reply operation (#34312) (0b8ad18)
• Google Workspace Admin Node: Not able to reactivate the user (#33937) (f43d723)
• HTTP Request Node: Sign non-standard AWS endpoint hosts with the correct region and service (#34081) (0e8420b)
• Microsoft Excel Node: Resolve service principal target per input item (#34112) (afc8a87)
• Microsoft OneDrive Node: Resolve service principal target per input item (#34111) (578545c)
• Microsoft Outlook Node: Resolve service principal mailbox per input item (#34110) (831e054)
• Microsoft Teams Node: Validate Graph path IDs under all credential types (#34065) (e43a162)
• Microsoft To Do Node: Resolve service principal target per input item (#34109) (9b2479c)
• Postgres Node: Return DATE and date/time array columns as strings (v2.7) (#34050) (17eb819)
• Provide provider-accurate response shapes for evals (#34418) (1b173c7)
• QuickBooks Node: Initialize headers object in quickBooksApiRequest (#34291) (83dd194)
• Report an unverifiable unit as notVerified, not a silent pass (#34421) (7d6fd4c)
• Resolve modules on windows (#34167) (9f0a6fa)
• Salesforce Node: Pass ParentId when creating or updating a Case (#33775) (fffee46)
• Serialize date output in FTP, Set, IMAP and Unleashed nodes (#34205) (391deb9)
• Split Out Node: Properly handle if "Fields to split out" is not a string (#34148) (7998940)

Bug Fixes

• Add tooltips to node hover actions (#33777) (715cdcb)
• Agent Node: Fall back to guardrails input and hide auto prompt source without a chat trigger (#33762) (2fbd6c5)
• AI Agent Node: Remove assistant tool call redundant message and simplify chat tool response (#33640) (704d956)
• Build API playground URL with a slash-safe join on settings/api (#33272) (3e12a5b)
• Cancel leaked assistant unread timer on stream stop and disposal (#33359) (161392a)
• Cap auto-detected editor rows within NDV boundary (#33727) (5c20436)
• Chat works when running on separate webhook server (#33724) (33e490d)
• core: Acquire expression isolate when resolving node inputs (#33759) (5fa42f4)
• core: Acquire expression isolate when resolving node parameters (#33757) (3865048)
• core: Add N8N_MCP_BASE_URL for split-hostname MCP OAuth deployments (#34028) (17905b5)
• core: Allow extra properties in MCP search_workflows output schema (#33057) (1bb253e)
• core: Bound Postgres pool teardown during DB connection recovery (#33140) (509ab6b)
• core: Construct execution errors correctly when Error.prototype is frozen (#33897) (fffa423)
• core: Decouple executions visibility from the sharing license feature (#33694) (4623bb4)
• core: Exclude published versions from workflow history prune (#32239) (bde5f08)
• core: Guard against null run-data slots in execution redaction (#33718) (c9590f3)
• core: Handle manual execution without a destination node (#33156) (ec68851)
• core: Persist MCP Server Trigger tool calls in queue mode (#33383) (0a067ee)
• core: Propagate sub-workflow credential usage to the parent execution (#33674) (993e1c8)
• core: Reconcile data table name collisions on source control pull (#33867) (328e07c)
• core: Reconcile per-user connections when a private credential is moved (#33630) (136e774)
• core: Reconcile stale AI Assistant mocked-credential simulation plan before workflow verification (#33808) (2d42b3f)
• core: Report auto-bound credentials from AI Assistant workflow builds (#33802) (a1df115)
• core: Report node errors in workflow verification (#33576) (3aa3ffd)
• core: Run database connection recovery only for Postgres (#33731) (a3e6a56)
• core: Serialize circuit breaker options (#33909) (b6bf7b0)
• core: Settle webhook execution promise on early errors (#33872) (7cf79d1)
• core: Skip webhook auth for editor test executions and scope basic auth realm per webhook (#33823) (6660c45)
• core: Support bare models for custom AI Assistant endpoints (#34016) (0fee78b)
• core: Support custom OpenAI-compatible model endpoints in AI Assistant (#33836) (b544b14)
• core: Surface vector store provider errors as actionable node errors (#33508) (8526bc0)
• Cron Node: Remove HTML line breaks from notice text (#33991) (7496201)
• Decompress small ZIP64 archives without false size-limit error (#33039) (d472e14)
• editor: Add labels to buttons in logs view overview row (#33203) (4a741f3)
• editor: Clarify why AI workflow setup cannot continue (#33917) (421bd6f)
• editor: Correct documentation link (#33692) (52a48f0)
• editor: Disable private credential connect and actions in execution view (#33766) (80f99eb)
• editor: Disable view publish timeline action for new workflows (#33901) (ba57f6f)
• editor: Fix concurrent executions label when manual run is active (#33660) (2a0ea0c)
• editor: Fix What's New dialog layout and restore close button (#33972) (383f18c)
• editor: Highlight Instance AI cards that are waiting for user input (#33959) (de0389d)
• editor: Improve private credentials UI copy and layout (#33930) (55addc8)
• editor: Keep AI Assistant thread state intact on editor hand-off (#33895) (61a395c)
• editor: Keep credential connect banner below the type selector (#33806) (c6264b2)
• editor: Lift 5k character limit in agent builder prompts (#33921) (499f75a)
• editor: Make Slack setup snapshots row horizontally scrollable (#33977) (008852c)
• editor: Preserve valid model selection when switching credentials (#33820) (126b3da)
• editor: Prevent duplicate $fromAI keys when editing tool node fields (#33892) (b9c360a)
• editor: Render node:* icons in credentials (#33887) (a7ca661)
• editor: Restore correct height of credential modal sidebar tabs (#33926) (f190c32)
• editor: Restore small tag size in personalization survey multi-selects (#33856) (1bea412)
• editor: Restrict assignment fields in AI Assistant workflow setup (#33968) (678b9e0)
• editor: Simplify n8n Connect messaging in publish and top-up modals (#33662) (82814dc)
• editor: Stop executions list from firing endless load-more requests (#33574) (0e8de74)
• editor: Unify onboarding empty states across overview and project tabs (#33670) (eeaa26e)
• editor: Use the show-suffix property to display chevron (#33803) (e7e44fe)
• editor: Using the correct variant for secondary buttons (#28959) (3c2208a)
• Form Trigger Node: Trim whitespace from email fields (#33507) (bfc0406)
• Gmail Node: Stringify expressions for parameters that expect strings (#33800) (3bfcbe4)
• Google Docs add default drive id when searching folders (#33765) (0010cf6)
• HTTP Request Node: Include UI query parameters when signing AWS requests (#33679) (36a834d)
• HTTP Request Node: Sign AWS PrivateLink (vpce) endpoints correctly (#33769) (36411ea)
• LinkedIn Node: Add scopes to get users even with organization support (#33934) (3681a8d)
• MCP Client Tool Node: Stop wrapping tool arguments in a value object (#33685) (ba62417)
• MCP Server Trigger Node: Prevent memory leak under active MCP client polling (#33752) (0ca27b7)
• Microsoft Agent 365 Node: Support stable Agent 365 MCP tooling (#30866) (87088c1)
• Microsoft Teams Node: List all joined teams in the Task resource Team picker (#34043) (bae0021)
• Notion Node: Restore ASCII simplified property keys on earlier node versions (#33965) (e82116f)
• Odoo Node: Add domain filters to custom resources (#33581) (53e3ab4)
• RabbitMQ Node: Resolve routingKey by index (#33377) (f58fb18)
• Raise community stale workflow operations-per-run so it reaches recent PRs (#34070) (6cb9a2f)
• Reconcile pagination qs against params in next-page URL (#33804) (0f9b33f)
• Rundeck node supports configurable SSL validation (#33960) (1950037)
• Slack Node: Clarify unfurl field descriptions (#33900) (2ef112b)
• Update Supabase credential description to use new secret keys (#33818) (cedab5d)
• Use a valid operation default in five built-in nodes (#32410) (66ad8b9)

Bug Fixes

• AI Agent Node: Preserve parallel tool call structure in chat memory (#32481) (387bb73)
• AI Agent Node: Return intermediate steps when no tools are used (#33450) (3ac2495)
• ai-builder: Prevent snapshot staging races during concurrent sandbox creation (#33342) (7d946c3)
• API: Only exclude running executions from the public executions list (#32657) (ae50852)
• Avoid stack overflow on large search result sets (#33050) (3915aba)
• AWS Bedrock Chat Model Node: Validate regions from ARNs and IAM credentials (#33638) (3ed8be9)
• Basic LLM Chain Node: Prevent "Failed to parse agent steps" error (#33338) (a62f0e3)
• Block manual project member changes when project roles are managed (#33270) (36aa28b)
• Broaden secret detection in browser tool snapshots (#33528) (48024f2)
• Calendly Trigger Node: Request required OAuth2 scopes for Calendly API (#33286) (9b9c3dd)
• core: Add environment variable to configure redis tls serverName (#31220) (161d595)
• core: Allow-list models that support sampling parameters (#33667) (5ebce06)
• core: Await in-flight insights compaction when stopping the timer (#33258) (8c7167f)
• core: Ensure the system credential resolver exists on all main instances (#33393) (c3898fb)
• core: Guard against undefined node parameters in webhook path indexing (#33366) (f1582f5)
• core: Guard connection pool idle checks during cleanup (#31059) (84ee38e)
• core: Honor target version in migration report (#33671) (ca589e9)
• core: Improve error message for registry network failures (#31276) (5af86c5)
• core: Improve external secrets provider failure logs (#33104) (e01bb9e)
• core: Improve Instance AI workflow-building reliability (#33530) (2be4092)
• core: Improve OTEL error type handling (#33519) (7e738ca)
• core: Include workflow tags in get_workflow_details MCP tool (#33219) (b3efecc)
• core: Keep the user message when a run is stopped before it starts (#33318) (78ca212)
• core: Load tools for MCP registry connections from the server (#33542) (f18443d)
• core: Make agent execution project-scoped so published workflows in team projects can message agents (#33459) (e9e2dd6)
• core: Persist AI Assistant domain-access approvals across restarts and mains (#33454) (d448379)
• core: Pin langgraph and langgraph-checkpoint to prevent broken npm installs (#33536) (4cca307)
• core: Preserve Date values passed to the expression isolate (#33322) (9410e96)
• core: Preserve Instance AI agent activity when its run snapshot is empty (#33557) (e46e321)
• core: Preserve Instance AI output for runs stopped before completion (#33335) (2472df8)
• core: Prevent Code node failure when a workflow contains an AI tool (#33336) (fea03a9)
• core: Prevent duplicate zod instances that break npm installs (#33463) (39a2093)
• core: Reject reserved system column names when creating data tables (#27064) (dbb7fa4)
• core: Resolve private credentials in offloaded manual executions (#33214) (e9a9088)
• core: Restore node-cli eslint peer to a range (#33196) (963c7f8)
• core: Retry initial database connection on startup (#33647) (e4711b9)
• core: Return a client error when the request body stream is unreadable (#33243) (4f4e252)
• core: Return Data Table rows in a deterministic order when paginating (#33358) (e130a22)
• core: Roll back failed community package updates (#33256) (63d28b3)
• core: Send Digest auth credentials only after the server challenge (#32673) (969e36e)
• core: Skip AI Gateway managed credentials in pre-execution permission check (#33269) (38b99af)
• core: Surface the underlying cause on OAuth callback errors (#33390) (546ee30)
• core: Validate data-table CSV uploads by file extension (#33275) (8aa4c71)
• editor: Align parameter input sizes (#33309) (da1a58e)
• editor: Gate tag write actions in UI behind RBAC scopes (#33378) (99cf776)
• editor: Generate actions for nodes using a flat Action field across versions (#33568) (b94b2cf)
• editor: Hide "Needs first setup" badge for private credentials (#33392) (62aa7b1)
• editor: Hide custom scopes for managed OAuth credentials edited from the list (#33432) (29aa414)
• editor: Include base path in View sub-execution links (#33069) (a6e7880)
• editor: Keep Instance AI preview manual execution across tab switches (#33179) (e5e018e)
• editor: Limit assistant resource auto-linking (#33389) (e18501f)
• editor: Prevent duplicate AI Gateway unsupported-action notice (#33428) (cb039e0)
• editor: Reconcile Data Table column schema on node open (#29935) (269895f)
• editor: Reliably auto-open template credential setup modal (#33281) (608a222)
• editor: Render parameter popout editors above the credential modal (#33202) (cfce542)
• editor: Restore Instance AI credential card without a loaded workflow (#33289) (c4e0bf3)
• editor: Restore Instance AI live run UI after HITL reconnect (#33401) (01a3c7e)
• editor: Should not allow Sub wf when all ai child nodes (#23472) (b5f4035)
• editor: Show AI Gateway hints for supported nodes used as tools (#33464) (cdc473e)
• editor: Show Free credits badge for Tool-variant nodes in node creator panel (#33285) (5cf8645)
• editor: Show implied scope options as disabled with tooltip (#33237) (899abf6)
• editor: Warn on incompatible trigger for private creds not connected by user (#33641) (6d499a2)
• Email Trigger (IMAP) Node: Surface connection error details in activation errors (#32913) (8fa4e8c)
• Github Node: Set searchFilterRequired:true for owner property, fix behavior on frontend (#33290) (49e5982)
• Guard SSH clients manager shutdown against undefined logger (#33274) (f75802d)
• Handle AI Gateway-managed credentials in Instance AI (#33365) (704d246)
• HubSpot Node: Load full property list in selection dropdowns (#33280) (613b2c5)
• Improve AI Assistant post-build follow-ups (#33419) (6f0d30f)
• Improve error on missing execution data (#33567) (507131e)
• Make Miro OAuth2 scope field visible (#25105) (3c8689f)
• MCP Client Node: Don't send undefined token to mcp and include resource in token request (#33527) (5b39761)
• MCP Server Trigger Node: Evict idle sessions to prevent memory leak (#33201) (c3ce961)
• Minor updates to custom instance roles (#33520) (112b405)
• Oracle DB Node: Fix the Continue(Using error output) issue mentioned in GH issue 26199 (#28343) (5df5a2c)
• Pipedrive Node: Send activity person as primary participant for v2 API (#31789) (4cf766d)
• Salesforce node correctly handles "continue on error" (#33239) (cb0743e)
• Salesforce Node: Fix document uploads and surface errors on JWT auth (#33490) (ac1905e)
• Salesforce Node: Normalize empty 204 responses on JWT auth path (#33262) (37a75d2)
• Salesforce Node: Use server-side search for Contact Account selector (#31277) (165f1bd)
• Strip '=' expression marker from json fields switched back to (#33120) (88f8586)
• Telegram Trigger Node: Apply chat/user ID filters to all update types (#32417) (224a85b)
• TheHive Node: Normalize analyzers when expression returns a string (#32472) (efa9c4e)
• UX improvements in the custom roles experience (#33399) (062d679)
• Webhook Node: Return 401 instead of 403 when basic auth credentials are wrong (#31119) (40c2dc5)

Features

• Add certificate authentication to the Microsoft Entra Service Principal credential (#33420) (4d1862b)
• Add unified N8N_WEBHOOK_URL for production and test webhook URLs (#33312) (9dc43d0)
• API: Add public API endpoints to read evaluation test runs (#33455) (27b2844)
• API: Support exporting projects via the public API (#33084) (0f46be0)
• core: Add 'n8n-package-exported' logstreaming event (#33460) (456c6dc)
• core: Add certificate authentication option to Microsoft OAuth2 credentials (#33227) (f82a932)
• core: Add N8N_RUNNERS_ALLOW_TRANSITIVE_IMPORTS for the Python task runner (#33130) (95a81ed)
• core: Add role:manageProject scope for project-role-only management (#33628) (de34bec)
• core: Add telemetry events for import / export (#33319) (a6b307c)
• core: Clear end-user connections when shared credential fields change (#33624) (25acaad)
• core: Enable filtering crashed executions via public API (#33485) (62f3c7c)
• core: Prefer predefined credentials over generic auth on HTTP Request nodes (#33298) (4192c95)
• core: Re-enable sharing private credentials (#33071) (e51f611)
• core: Route Instance AI billing to a dedicated credit pool (#33263) (25d0d12)
• core: Support community node type definitions in AI Assistant (#33340) (3298e21)
• editor: Add new Tree component to @n8n/design-system (#33291) (cbbe113)
• editor: Deprecate $getPairedItem in the expression editor (#33549) (c706cd4)
• editor: Display canvas groups in logs panel (#33235) (d561a92)
• editor: Hide gateway-incompatible node parameters under managed credentials (#32961) (61dbb92)
• editor: Improve data table node (#28199) (0a6cb66)
• editor: Make data table artifacts editable when AI is not running (#33210) (7204648)
• editor: NDV one-line credential row with connect/connected/disconnect states (#33371) (0fa6454)
• editor: Read-only credential view and connect banner for private credentials (#33055) (627818e)
• editor: Render AI Assistant reasoning as separate blocks in the run timeline (#33676) (dc1e3ce)
• editor: Sets AIA v3 as default empty state & fixes display issues (#33273) (723749c)
• editor: Show private credential icon on execution list runs (#32957) (4290e84)
• editor: Update reasoning block to mook more reasonable (#33293) (1614720)
• Include response timestamp in Send and Wait responses (#33283) (13d0655)
• Kafka Node: Add mTLS (client certificate) authentication (#33236) (25e0321)
• Microsoft Excel Node: Add Service Principal (app-only) authentication (#33014) (b3287f7)
• Microsoft Teams Node: Add Service Principal (app-only) authentication (#33105) (df9257b)
• Microsoft To Do Node: Add Service Principal (app-only) authentication (#33081) (689d873)
• Setup credentials card includes a button to setup automatically in AI Assistant (#33453) (22e37bd)

Bug Fixes

• Cap changed-files list to avoid oversized CI process environment (#32949) (1632ad1)
• core: Align markdown task list items (#33020) (a2735a6)
• core: Align pdfjs-dist versions for PDF document loading (#31732) (c2f2edb)
• core: Block deleting a custom role referenced by an SSO mapping rule (#33004) (a013b0f)
• core: Bump file-type to 21.3.2 and migrate to its ESM API (#33096) (8a413bc)
• core: Correct Extract from File output key in document processing best-practices (#32992) (fb5b358)
• core: Ensure project variables override same-key global variables (#33137) (2a32dc7)
• core: Guard runData access in execution retry against missing node run data (#31765) (a91ba62)
• core: Improve backend route handling (#31350) (22167a9)
• core: Improve external secrets provider replacement (#33072) (1e68729)
• core: Include IPv6 loopback [::1] in MCP redirect URI DTO validation (#32801) (26d925f)
• core: Keep task runner serving during graceful shutdown so in-flight executions finish (#32385) (b9cfa25)
• core: Make AI Assistant workflow verification and setup repeatable (#33085) (a00ac27)
• core: OpenAI and Anthropic custom header credentials causing inconsistent behaviours (#33131) (9977e77)
• core: Parse OAuth2 token responses with non-standard content types (#33018) (a3a0a50)
• core: Persist Instance AI assistant output when a turn suspends (#32958) (ffb32b7)
• core: Persist Instance AI user input on receipt (#32917) (4a97d05)
• core: Preserve binary data metadata on S3 copy and rename (#33089) (4cff812)
• core: Prevent partial execution crash when the start node is disabled (#32654) (f1b1ee6)
• core: Prevent startup failure from partially-installed community packages (#32909) (a99862d)
• core: Propagate graceful-shutdown timeout to internal task runner (#32944) (4364046)
• core: Release database ping connection when the health check times out (#32838) (22b67a3)
• core: Remove duplicated sub-agent list (#33015) (8acefa2)
• core: Report IAI agent background failures to Sentry (#32972) (abed4a3)
• core: Resolve expression-mode $self values in credential templates (#32970) (2f35448)
• core: Route clarifying questions through ask-user (#32871) (5f4d196)
• core: Route split in batches chains through loop output (#32968) (7830cec)
• core: Run node-type-gated validators in MCP workflow build tools (#31247) (fb6e1b1)
• core: Serialize OAuth2 credential refresh to prevent rotating refresh-token invalidation (#33092) (b14a98d)
• core: Serialize source control work folder operations (#32857) (65660a4)
• core: Track builder workflow telemetry when execution fails to launch (#33003) (85fc9a4)
• core: Trim whitespace from webhook path on registration (#33022) (00e8224)
• core: Use regional AWS STS endpoints in China and GovCloud (#32825) (3dee0ff)
• core: Verify Instance AI workflows before setup (#32872) (274339f)
• Databricks Node: Allow configuring the token-expired status code on OAuth2 credential (#32824) (3987803)
• Disabling community module does not crash the instance (#33087) (638d828)
• editor: Align Referenced resources chip tooltip placement (#30692) (8e193e4)
• editor: Disable data table creation on read-only instances (#32863) (30eaf30)
• editor: Fix abbreviateNumber rollover and large-number handling (#32689) (2c0e2c9)
• editor: Fix InputTriple responsive behaviour in NDV parameters (#31633) (7772769)
• editor: Instance AI thread, navigation, and UX fixes (#32870) (0c92df7)
• editor: Redirect to project home after archiving or deleting a workflow (#32971) (2a613a0)
• editor: Replace radio buttons with checkmark in instance role dropdown (#33242) (1a00b07)
• editor: Show execution link on failed evaluation test cases (#32873) (30fd834)
• editor: Show filters as required conditions (#26541) (29e8163)
• editor: Show logs panel actions menu (#33034) (9fda7b3)
• editor: Sort move workflow project dropdown alphabetically (#33150) (3ee1b22)
• editor: Surface Human review node in add-node search (#32327) (247efd4)
• editor: Transfer ownership or delete data tables when user deleted (#33037) (0a97fe8)
• Email Read Imap Node: Default to 7BIT when a message part has no encoding (#32914) (6a3ad57)
• ExecuteCommand Node respects abort signal (#32865) (21d979a)
• Facebook Graph API Node: Route error responses to error output branch (#23832) (c5233d2)
• Facebook Graph API Node: Route failed items to the error output (#32027) (7b4a10f)
• Google Vertex Chat Model Node: Support newer Gemini models and EU/US data residency (#33135) (3955bca)
• Include cwd in shell_execute affected resources (#32165) (1a7b48d)
• MCP Client Tool Node: Reuse the MCP session across tool calls in an execution (#32477) (8565107)
• MCP Server Trigger Node: Propagate tool errors with isError flag in MCP responses (#28510) (486173a)
• Microsoft Teams Node: Downgrade OAuth2 scope from Group.ReadWrite.All to Group.Read.All (#28141) (d307cae)
• MySQL Node: Route query parameter validation errors to error output (#31888) (1fa6566)
• Notion Trigger Node: Handle empty results when polling for updates (#31739) (7e3d181)
• OpenAI Node: Convert binary stream to buffer before FormData append (#26530) (cd480af)
• OpenAI Node: Use output_text for assistant messages in Message a Model (#32822) (7f0d22b)
• Populate mutation-health ledger churn/fix_density from setup (#32903) (0ef6044)
• Postgres Node: Prevent execution context retention (#32730) (06ceccb)
• Prefer placeholders over pre-build setup questions (#32969) (02df832)
• Preserve AI Assistant Anthropic reasoning through proxy (#33193) (8854452)
• Reload symlinked community node changes without restart (#32774) (f727ff2)
• Restore sticky note paragraph spacing without breaking code (#32704) (750f336)
• Salesforce Node: Use server-side search for owner selectors (#32815) (8027463)
• Schedule Node: Fix schedules that permanently stop firing (#32877) (ec82d3a)
• WooCommerce Node: Validate resource ID and isolate query params per item (#32987) (957e7b5)

Bug Fixes

• API: Return 409 when deleting a published workflow (#32600) (1f774c8)
• Bitbucket Trigger Node: Use account_id to validate credentials instead of username (#30172) (5dc9c45)
• Bump form-data, tmp, protobufjs to patched versions (#32436) (a1cfd14)
• Bump protobufjs, js-yaml, @opentelemetry/core for nightly Trivy (#32542) (2dac96d)
• Cap ci-filter deepen value and fall back to --unshallow (#32581) (af563c6)
• Compression Node: Decompress only the archive members (#32486) (cafc64c)
• core: Account for pending CSV uploads in data-table size budget (#31394) (e4757d2)
• core: Change default value of the COOP header (#32377) (b94ff9b)
• core: Clean up workflow publication outbox records (#32795) (900c0ea)
• core: Coalesce outbox drains and wait for in-flight processing on shutdown (#32548) (7230fa3)
• core: Drive workflow folder placement through validated parentFolderId (#31364) (0f1c1a8)
• core: Evaluate expressions in AI tool description for node-as-to… (#31495) (beba723)
• core: Exclude error workflow executions from billable execution count (#32315) (f6c2bcc)
• core: Fix error path schema mismatch in mcp tools (#32560) (c91250f)
• core: Handle malformed agent tool calls (#32276) (285e4a9)
• core: Implement workflow-folder-conflict handling in import process (#32391) (97f45cc)
• core: Keep $fromAI placeholders intact on fields with expressions disabled (#31681) (43eec00)
• core: Keep thread history when observation cursor lacks observations (#32773) (0197817)
• core: Let allowlisted Python packages import their own submodules via relative imports (#32772) (46aa8e4)
• core: Limit execution data size for display reads (#32508) (524d4e8)
• core: Make workflow evaluations work alongside config evals (#32384) (19eeb5e)
• core: Negotiate token_endpoint_auth_method during MCP OAuth2 DCR (#32289) (734af04)
• core: Persist run data for Instance AI trigger executions in queue mode (#32498) (db1e21f)
• core: Prevent assigning unusable credentials in mcp (#32353) (7ddde95)
• core: Propagate execution context to sub-workflow tools (#32577) (09f5888)
• core: Propagate stop signal to sub-workflow executions on workers in queue mode (#32206) (ae7f699)
• core: Request protected-resource scopes during MCP OAuth2 DCR (#32300) (e8ee370)
• core: Resolve duplicate generated schema fields (#32275) (94594e3)
• core: Save Instance AI workflow edits through workspace files (#32545) (1e80d41)
• core: Shorten private-credential OAuth authorization links (#32584) (c1582a6)
• core: Stop re-asking answered or skipped clarifying questions (#32755) (9ce241b)
• core: Support v4 and v5 schemas for strapi consumers (#32559) (d6758db)
• core: Surface form submission errors instead of failing silently (#32305) (60ac614)
• core: Suspend query acquisition during database connection recovery (#32394) (7440fca)
• core: Time out stalled HTTP response body reads (#32411) (50887bf)
• core: Upgrade @n8n_io/license-sdk to v3 and resolve node-rsa to v2 (#32552) (ebbd629)
• editor: Clamp and truncate long workflow descriptions in MCP settings (#32104) (b953709)
• editor: Hide function info-box tooltip while typing arguments (#32371) (59971c8)
• editor: Hide template setup button when only disabled nodes lack credentials (#32625) (801bd5f)
• editor: Polish API key scope picker radio alignment, contrast and form spacing (#32420) (229560e)
• editor: Preserve existing node IDs when AI edits a workflow (#32593) (cbb9ae5)
• editor: Prevent autosave failure loop after AI builder modifies a workflow (#32558) (4821bed)
• editor: Prevent drag and drop of a folder onto itself (#31510) (4f8af4d)
• editor: Show a rejection screen when the OAuth consent target is unavailable (#32594) (2c3c67f)
• editor: Show rotated API keys in the create modal and outline the read-only Close button (#32480) (31e8ddc)
• editor: Widen callable subworkflow list using callerPolicy in workflow picker (#32522) (f105b34)
• editor: Wrap long unbroken strings in tooltip (#32345) (a0b35d5)
• Extract inline run-report attachments before aggregating sizing (#32799) (c8a3a3c)
• Fix 26 security issues in electron, axios, undici and 5 more (#32688) (c7fcbb7)
• Form Node: Evaluate expressions in form fields on subsequent pages (#32352) (35adffa)
• Form Trigger Node: Add default value for authentication parameter to prevent crash on old workflows (#32627) (940f389)
• Handle HTTP raw body validation loops (#32277) (d5dd492)
• Hides preview suggestions on smaller screens due to lack of space (#32444) (ad298e7)
• HTTP Request Node: Preserve all repeated query parameters in cURL import (#32253) (8b01aac)
• Kafka Node: Route Schema Registry client through configurable egress protection (#32370) (f19d744)
• Kafka Trigger Node: Surface consumer errors instead of waiting indefinitely (#32642) (30b2127)
• Make QA metrics telemetry truly fire-and-forget (#32597) (6e8a7fc)
• Microsoft OneDrive Node: Validate upload file name to replace misleading Graph error (#32470) (f998a1f)
• Nextcloud Node: Fix broken user actions and folder sharing, add internal link share type (#32002) (3767449)
• Prompt to save before manual run with autosave disabled (#32513) (2124c08)
• RedactValues throws TypeError on null-valued credential fields (#32804) (7ebd0cf)
• Removes phantom telemetry profile caused by missing user id fallback (#32344) (ef148c6)
• Salesforce Node: Reuse JWT session token across requests (#32325) (0e4d2c3)
• Slack Node: Handle missing response property in pagination (#32328) (d673064)
• Stop a timed-out background AI builder from respawning itself (#32630) (8c96484)
• Suggest the configured AI provider's chat model when building workflows (#32634) (b294e3d)

Bug Fixes

• API: Make conditional credential fields optional instead of forbidden (#32010) (0ab043c)
• Bump task-runner-launcher to 1.4.7 to clear stdlib CVEs (#32095) (4d974e3)
• Computer use disconnect status on client stop (#32059) (5c61d0e)
• core: Add RFC 8707 resource parameter to client-side OAuth flow (#30924) (04b4a79)
• core: Allow publishing workflows that use private credentials (#32306) (27d8426)
• core: Enforce API key scope/endpoint parity in public API (#32231) (58999f0)
• core: Ensure workflows that fail to activate are removed from active, preventing unintended executions (#31767) (79d1695)
• core: Fix workers processing queued jobs before module initialization completes (#32145) (506461f)
• core: Hide resource URL for synthetic OAuth2 credentials for MCP registry tools (#32351) (51fe9ff)
• core: Include indexes and TOAST in Postgres data table size (#31606) (c9f4aa8)
• core: Preserve trailing letter-less text in toSentenceCase() exp… (#32242) (7a77898)
• core: Prevent nodes from throwing context.getNodeParameter is not a function when n8n is installed via npm (#32123) (a254a89)
• core: Prevent pollers from starting executions for old workflow versions when registered while in-flight (#32006) (21c786c)
• core: Prevent post-execution writes against closed pool on worker shutdown (#31915) (3059088)
• core: Prevent queue recovery from marking waiting executions as crashed (#32316) (c4c0e91)
• core: Propagate sub-workflow errors to parent after wait resume (#31927) (6afba57)
• core: Remove user:enforceMfa from public API key scopes (#32223) (3c39a0e)
• core: Retry role mapping create order conflicts (#30687) (448c114)
• core: Surface a final response when a builder follow-up completes silently (#31986) (29abe78)
• core: Throw a clear error for $evaluateExpression in the Code node under secure mode (#31721) (fbad049)
• core: Upgrade nodemailer to 8.0.10 (DEVP-401) (#31998) (c339095)
• core: Use npm's bundled node-gyp for isolated-vm Docker rebuild (#32158) (67cdf44)
• Correct Form URL Encoded label in HTTP Request node (#31852) (ff7f35e)
• editor: Agent builder progress log lines visual glitches (#32077) (f9496c2)
• editor: Auto-reload editor on stale Vite chunk preload error (#31747) (2f3ebb6)
• editor: Close credential modal after successful setup (#31925) (7b2c722)
• editor: Harden credential modal against async hangs (#31292) (037bdb2)
• editor: Hide template setup button once setup is complete (#31912) (af9caff)
• editor: Insert instance ai prompt suggestions instead of submit (#32008) (3386aa8)
• editor: Make workflow settings and actions menu work in the AI artifact view (#32082) (5a28683)
• editor: Mute Never expiration in API keys table (#32224) (115d9c7)
• editor: Open sticky note color picker from context menu (#31917) (0685db8)
• editor: Preserve loaded options value when navigating between nodes (#31946) (f6e5705)
• editor: Refresh Instance AI workflow preview on update and restore-version (#31904) (f2c764a)
• editor: Remove 'Building your agent' loading state and go straight to full-page builder (#32120) (d553602)
• editor: Restore cross-origin notification after OAuth popup completes (#32087) (090fa9e)
• editor: Scope publish history scrollbar to timeline sidebar (#31661) (497226e)
• editor: Send only credential id when authorizing OAuth credentials (#31926) (4f10853)
• editor: Show AI assistant error when stream ends with unparseable content (#32068) (a7b910f)
• editor: Show an error when imported JSON is not a valid workflow (#31782) (0731871)
• editor: Show correct project in workflow breadcrumb for projectId links (#32103) (fd23d4d)
• editor: Show run data of stopped executions in scaling mode (#32142) (889769a)
• editor: Skip external-secrets fetch on Community Edition (#31906) (f6518a5)
• editor: Stop showing deleted resources in dependency pill (#32106) (4e10568)
• editor: Truncate long API key labels in settings table (#32232) (607634a)
• editor: Use workflow-scoped credential fetch in node credential picker (#31938) (8cd67d3)
• Fix 4 security issues in @grpc/grpc-js, hono (#32281) (e292779)
• Fix security issue in shell-quote via minor version upgrade from 1.8.3 to 1.8.4 (SEC-809) (#32107) (131e4ea)
• Http Request Node: Preserve multipart filenames for binary uploads (#29022) (f412820)
• Kafka Node: Distinguish the Schema Registry credential from the Kafka credential (#32335) (41ee940)
• Move unstable PURL-pinned overrides to version-agnostic byName (#31985) (e77dd74)
• Oracle Database Node: Support OUT bind parameters (#30083) (d3406dd)
• Require justified mutants in mutation-health gate (#32340) (b3a34fc)
• Set task status to 'cancelled' in BackgroundTaskManager.cancelAll() (#31764) (5733fb7)
• Store messages even if stream is undrained (#32119) (f2da1d1)