chore(deps): update docker.n8n.io/n8nio/n8n docker tag to v2.38.7

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
docker.n8n.io/n8nio/n8n	minor	2.35.7 → 2.38.7

---

Release Notes

n8n-io/n8n (docker.n8n.io/n8nio/n8n)

v2.38.7

Compare Source

Bug Fixes

• core: Execute MCP toolkit members on workers (#​38277) (1025dc7)
• core: Reuse an existing consent grant after the visitor authenticates mid-flow (#​38249) (52c8a72)
• core: Trust the CA from GIT_SSL_CAINFO for source control HTTPS remotes (#​38297) (3234078)

v2.38.6

Compare Source

Performance Improvements

• core: Bound peak memory during source control push (#​37975) (b3c32da)

v2.38.5

Compare Source

Bug Fixes

• core: Keep reporting the original job error when the job key is gone (#​38028) (cfc385f)

v2.38.4

Compare Source

Bug Fixes

• core: Cap task runner task timeouts to the graceful shutdown window (#​37765) (6e12447)
• core: Keep a serving external secrets provider active when its replacement fails (#​37882) (1abbd4b)
• core: Prevent Anthropic agent threads from breaking permanently and keep run errors visible (#​37722) (1007dff)
• core: Stop npm audit from stalling Instance AI sandbox setup (#​37877) (6120419)
• core: Stop task broker before task runner processes on shutdown (#​37886) (a8fc772)

v2.38.3

Compare Source

Bug Fixes

• core: Ensure running job cleanup when a workflow run rejects (#​37629) (cebb7bd)

v2.38.2

Compare Source

v2.38.1

Compare Source

Bug Fixes

• Add parameter binding for mongodb sort and projection (#​37335) (292f442)
• ai-builder: Add case for agent artifacts in AIA preview tab bar (#​37141) (ede265d)
• ai-builder: Add several tools of the same provider via UI (#​37212) (fd3a51c)
• ai-builder: Emit tool call events for Workflow, HTTP Request and Code tools (#​37044) (7e81610)
• ai-builder: Fix session timeline/trace not showing on preview dock when full screen (#​36930) (80ff0f3)
• ai-builder: Preserve managed n8n credits when building workflows (#​37198) (0fbc526)
• Alibaba Cloud Node: Use async image-generation for Wan 2.6 (#​37060) (69991a5)
• API: Adapt binary data endpoint (#​36974) (c339069)
• API: Improve config handling on instance-settings endpoints (#​36680) (a53a75d)
• API: Resolve discover scopes from the request token grant (#​37225) (8342a46)
• API: Skip projectRelations eager-load in GET /credentials (#​37138) (b3a77b0)
• Chat Trigger Node: Apply authentication to test webhook requests (#​37296) (122ee6d)
• Chat Trigger Node: Respect private chat setting in tests (#​37406) (0e1901f)
• Copy glibc into distroless runners image as a matched pair (#​37149) (b54c9b6)
• core: Add a timeout to the S3 startup connection check (#​37245) (2586e21)
• core: Allow a domain-restricted credential to work in its own node (#​37200) (720f397)
• core: Apply proxy environment variables consistently across packages and processes (#​37124) (4b9dc5a)
• core: Bind OAuth token grants to their approved resource (#​37122) (380788f)
• core: Detect invalid Slack Block Kit payloads in AI Assistant builds (#​37217) (b9342a5)
• core: Fix evaluation runs failing when the Evaluation Trigger feeds the entry node (#​36975) (72283bd)
• core: Fix scripts/generate-types export path (#​32071) (106166a)
• core: Gate browser credential creation on its own permission (#​36931) (532911c)
• core: Grant connect access for globally shared end-user credentials (#​36992) (aaf0a7e)
• core: Keep abandoned tool-call suspensions visible in AI Assistant thread history (#​36737) (052c30e)
• core: Keep AI Assistant workflow builds honest about their project (#​37177) (7fe438e)
• core: Keep an existing community package directory when a fresh install fails (#​36964) (ad15ba4)
• core: Keep the API version in the Gemini base URL for agent models (#​37239) (c2f636b)
• core: Only record sub-node error metadata for nodes that get a run (#​37256) (8fcabd6)
• core: Preserve binary content in agent tool results (#​37206) (b54500d)
• core: Prevent OpenTelemetry disable from failing when OTLP collector is unreachable (#​37203) (5dd2454)
• core: Prevent Supabase vector store node auth client timer leaks (#​37054) (ad24a48)
• core: Re-check user tool access on agent runtime cache hits (#​37401) (6e9c3e2)
• core: Report and reconcile agent channel startup failures (#​36578) (6b0de0d)
• core: Report what credential setup actually selected (#​37019) (ef13ad0)
• core: Respond with an error when a webhook execution ends before the Respond to Webhook node runs (#​37006) (f9814b7)
• core: Restore mutating array methods on $json data in expressions (#​37172) (dcb5736)
• core: Return a single not-found message when disconnecting a credential (#​37292) (bde05e0)
• core: Reuse native Agent channel capabilities (#​36849) (e4edf89)
• core: Route OAuth2 token requests through environment proxies in every process (#​36996) (5266ce3)
• core: Route secrets pasted in AI chat to real credential forms (#​37277) (6cc8c59)
• core: Scope active workflow IDs to the requesting user's projects (#​37326) (b557e90)
• core: Share one time budget across nested expression evaluations (#​37330) (99c9e79)
• core: Split Instance Settings permissions into granular custom-role options (#​36802) (1f390cd)
• core: Stage libatomic into the distroless runners image (#​37106) (ca600ad)
• core: Stop the workflow builder writing Python Code nodes that cannot run (#​37083) (16a1a78)
• core: Stop webhook routing locally before best-effort external teardown (#​37241) (cae0c8b)
• core: Support writes on VM expression lazy proxies via evaluation-scoped copy-on-write (#​37262) (f77e270)
• core: Surface AI node failure with useful message and original cause (#​37113) (6826730)
• core: Surface the original error instead of replaying single-use bodies on OAuth2 401 retry (#​37000) (86c2a2b)
• core: Teach the AI Assistant to mark polled items handled after create actions (#​37436) (78151b2)
• core: Thread execution id through dynamic-credential storage (#​37233) (42a782d)
• core: Unload a community package when a fresh install fails after loading it (#​37034) (78130a1)
• core: Validate the expression engine timeout and memory limit settings (#​37333) (90a84ab)
• core: Verify a resolved agent model against the credential's live list (#​37240) (19582fb)
• editor: Attribute credential telemetry to workflow and thread (#​37027) (5fc0b75)
• editor: Close add-channel modal on outside click (#​37171) (c7f3ceb)
• editor: Correct community node docs link interpolation key (#​37236) (7e6cfed)
• editor: Distinguish session timeline errors (#​36816) (b8bc67a)
• editor: Gate autosave on document hydration (#​36966) (c0bc17d)
• editor: Improve screen reader support for scope selector tool pills (#​37159) (e644562)
• editor: Keep workflows moved out of a folder visible in the source control push modal (#​37128) (49e28b5)
• editor: Render the credit banner as its own card above detached chat inputs (#​37082) (2ac3655)
• editor: Restore parameter expression toggle layout (#​37295) (b335236)
• editor: Set max resize height for decision input (#​37061) (2d227dd)
• editor: Show an activity indicator while the AI Assistant is still working (#​37046) (5b4c65b)
• editor: Show error when eligible reviewers fail to load (#​37089) (45a104a)
• editor: Start AI Assistant conversations in the current project (#​37051) (e5f2efc)
• editor: Stop a new node from showing a deleted node's execution data (#​36915) (8bf95ac)
• editor: Stop autosave retries on permanent errors (#​36967) (588317e)
• editor: Stop the instance AI model dropdown opening when the wizard opens (#​37215) (293e63e)
• editor: Update AI credential and model selection (#​36738) (0871ad7)
• Evaluation Trigger Node: Respect the row limit when reading from a data table (#​36948) (ced302a)
• Flag resolutions field in community node package.json vetting (#​36768) (d85c0b2)
• Form Node: Improve error messages for invalid form definition JSON (#​37291) (d8ce73c)
• Gmail Trigger Node: Do not lose queued messages when a fetch fails mid-poll (#​37263) (fe61e57)
• Gmail Trigger Node: Do not miss emails when more than 100 arrive between polls (#​37261) (addc7f9)
• HTTP Request Node: Keep SSL passphrases with whitespace intact (#​37020) (bcd240f)
• HTTP Request Node: Show the API response when a file upload fails (#​36924) (8430516)
• Nextcloud Node: Validate webDavUrl to prevent cryptic "Invalid URL" error (#​34031) (209cbfb)
• Preserve AWS request parameter values (#​37303) (267d98b)
• Quote and validate Postgres table and column identifiers in AI nodes (#​31370) (1fd2918)
• Require a configured model before the AI Assistant accepts a prompt (#​37226) (38e33a4)
• Restore legacy PEM headers when reformatting single-line keys (#​37088) (044a90d)
• Stop replacing error messages with "Unknown error" (#​36820) (5df7a17)
• Use sentence case for settings menu labels (#​36651) (7bfdc99)

Features

• Add in-widget credential status strip to @​n8n/chat (#​37399) (f7f1ba3)
• ai-builder: Add an n8n credits section to the agent tools modal (#​36183) (54ac6cc)
• ai-builder: Consolidate node credential resolution in agent builder to use same service as AIA (#​36903) (f41f864)
• Confluence Node: Add page add and remove label operations (#​37002) (ea24aa9)
• Confluence Node: Add Page Get Comments operation (#​37073) (843a4a8)
• Confluence Node: Add Page Get Many by Label operation (#​36785) (9fbd9fb)
• Confluence Node: Add Space resource with Get and Get Many operations (#​36898) (58d9d39)
• Confluence Node: Page — get labels (#​36900) (9b910a1)
• core: Add background execution mode for sub-agent delegation (#​37209) (4285d20)
• core: Add chat-specific branding to the shared OAuth consent screen (#​37430) (e774ed2)
• core: Add Moonshot, MiniMax and Qwen Cloud as model providers in Agent Builder (#​36751) (ebbdc1a)
• core: Chat trigger publish validation & workflow:execute access control (#​37231) (1f062f9)
• core: Establish chat session identity for credential resolution (#​37041) (c96f329)
• core: Let workflow verification target a specific trigger (#​37091) (6420048)
• core: Limit Git connections to one instance connection (#​37302) (1e4edb2)
• core: Resolve sub-agents and workflow tools by run type (#​37117) (fa43bc8)
• core: Serve a nonce-based Content-Security-Policy on n8n's HTML pages (#​36749) (54b2b94)
• core: Skip live tests when n8n credits are depleted (#​36641) (a328674)
• core: Split the hosted chat page into a trusted shell and a sandboxed frame (#​36947) (662a401)
• core: Support workflows with Wait nodes as agent tools (#​36692) (23a5f46)
• Databricks Node: Add user-delegated OAuth2 credential (authorization code + PKCE) (#​37007) (e60c431)
• editor: Add adaptive layout to ChatInput (#​36939) (435ed5f)
• editor: Add Contact Support link to Help menu for Cloud instances (#​37414) (e3008bd)
• editor: Add floating Markdown editor toolbar (#​37293) (5c7e006)
• editor: Align workflow and agent header menus (#​37315) (848265e)
• editor: Complete N8nInputNumber2 adoption and remove the legacy InputNumber (#​36598) (73ac8e4)
• editor: Rename n8n credits and n8n Connect copy to Gateway credits in the UI (#​37267) (6718392)
• editor: Update the order of providers in the agent builder model picker (#​37143) (da6da00)
• Gotify Node: Add Gotify extra notification settings (#​23915) (0aa9aa8)
• MongoDB Node: Batch update and find-and-update writes with bulkWrite (#​37035) (5b9b332)
• Offer to send an anonymous failure report in the install script (#​37016) (269de76)
• Trigger observational memory mid-run on a token budget (#​37234) (39f49b9)

Performance Improvements

• core: Acquire agent workspace sandboxes lazily, make them persistent, and share them with delegated sub-agents (#​37242) (a1b1f2e)
• core: Chunk package ID lookups (#​36923) (98e5104)
• core: Read the poller state row once per durable poll tick (#​36973) (be01422)
• core: Reduce workflow import queries (#​36949) (bcf693e)
• editor: Reduce AI gateway wallet requests by caching the credits balance (#​36725) (d62dc26)

v2.38.0

Compare Source

Bug Fixes

• Add parameter binding for mongodb sort and projection (#​37335) (292f442)
• ai-builder: Add case for agent artifacts in AIA preview tab bar (#​37141) (ede265d)
• ai-builder: Add several tools of the same provider via UI (#​37212) (fd3a51c)
• ai-builder: Emit tool call events for Workflow, HTTP Request and Code tools (#​37044) (7e81610)
• ai-builder: Fix session timeline/trace not showing on preview dock when full screen (#​36930) (80ff0f3)
• ai-builder: Preserve managed n8n credits when building workflows (#​37198) (0fbc526)
• ai-builder: UI tweak to prevent overflowing text on err callout when on Agent Preview (#​37615) (c2e8d02)
• Alibaba Cloud Node: Use async image-generation for Wan 2.6 (#​37060) (69991a5)
• AMQP Trigger Node: Reattach the receiver link when the broker detaches it (#​37431) (ddf6534)
• Anthropic Chat Model Node, AI Agent Node: Send disabled thinking to the provider and parse content-block output (#​37954) (309fa8d)
• API: Adapt binary data endpoint (#​36974) (c339069)
• API: Check publish permission when a workflow save republishes (#​37264) (485e370)
• API: Improve config handling on instance-settings endpoints (#​36680) (a53a75d)
• API: Resolve discover scopes from the request token grant (#​37225) (8342a46)
• API: Skip projectRelations eager-load in GET /credentials (#​37138) (b3a77b0)
• Chat Trigger Node: Apply authentication to test webhook requests (#​37296) (122ee6d)
• Chat Trigger Node: Fix singular copy on the connect bar (#​37945) (369c9e2)
• Chat Trigger Node: Re-authenticate hosted chat on session change (#​37868) (64ba49d)
• Chat Trigger Node: Respect private chat setting in tests (#​37406) (0e1901f)
• Check constructor-assigned and type-asserted node descriptions (#​37523) (e23ee05)
• Code Node: Keep identity and reporting fields when wrapping task runner errors (#​37490) (b0550cb)
• Copy glibc into distroless runners image as a matched pair (#​37149) (b54c9b6)
• core: Add a timeout to the S3 startup connection check (#​37245) (2586e21)
• core: Allow a domain-restricted credential to work in its own node (#​37200) (720f397)
• core: Allow HashiCorp Vault external secrets to read a KV v2 sub-path (#​37748) (fed5d70)
• core: Allow webhook nodes to set Set-Cookie response headers (#​37883) (6828320)
• core: Always redact OTel header values in settings responses (#​37283) (4b0de25)
• core: Apply proxy environment variables consistently across packages and processes (#​37124) (4b9dc5a)
• core: Bind OAuth token grants to their approved resource (#​37122) (380788f)
• core: Cap task runner task timeouts to the graceful shutdown window (#​37651) (9a64820)
• core: Complete a scheduled occurrence as not dispatched when its workflow is unpublished (#​37721) (29c7d9f)
• core: Detect invalid Slack Block Kit payloads in AI Assistant builds (#​37217) (b9342a5)
• core: Ensure running job cleanup when a workflow run rejects (#​37621) (51ac147)
• core: Execute multi-input nodes re-fired through a loop-back edge in legacy order (#​37561) (903fe57)
• core: Fix Azure OpenAI classic and Foundry credential setup and execution for agents (#​37251) (731ea42)
• core: Fix evaluation runs failing when the Evaluation Trigger feeds the entry node (#​36975) (72283bd)
• core: Fix scripts/generate-types export path (#​32071) (106166a)
• core: Forward all output branches when a waiting webhook node resumes (#​31714) (7c21f4b)
• core: Gate browser credential creation on its own permission (#​36931) (532911c)
• core: Give every simulated node at least one plausible item (#​37557) (918067a)
• core: Grant connect access for globally shared end-user credentials (#​36992) (aaf0a7e)
• core: Harden agent workflow tools against unpublished, missing, or incompatible workflows (#​37772) (1994332)
• core: Hide instance MCP OAuth discovery when MCP access is disabled (#​36726) (9768c1b)
• core: Keep a serving external secrets provider active when its replacement fails (#​37781) (217c7b3)
• core: Keep abandoned tool-call suspensions visible in AI Assistant thread history (#​36737) (052c30e)
• core: Keep AI Assistant workflow builds honest about their project (#​37177) (7fe438e)
• core: Keep an existing community package directory when a fresh install fails (#​36964) (ad15ba4)
• core: Keep Instance AI data-table queries targeted while diagnosing (#​37489) (df4d30b)
• core: Keep the API version in the Gemini base URL for agent models (#​37239) (c2f636b)
• core: List the valid techniques when get_workflow_best_practices rejects input (#​37580) (53b1ad7)
• core: Make pending agent creation and thread binding idempotent (#​37074) (085a7a9)
• core: Make scoped workspace path errors actionable for agents (#​37887) (03e1793)
• core: Mark retired node types as deprecated in their workflow-sdk type definitions (#​37628) (cf0ef47)
• core: Only record sub-node error metadata for nodes that get a run (#​37256) (8fcabd6)
• core: Prefer service-specific credentials for HTTP requests (#​37844) (500ea39)
• core: Preserve binary content in agent tool results (#​37206) (b54500d)
• core: Prevent Anthropic agent threads from breaking permanently and keep run errors visible (#​37640) (dc5f420)
• core: Prevent OpenTelemetry disable from failing when OTLP collector is unreachable (#​37203) (5dd2454)
• core: Prevent Supabase vector store node auth client timer leaks (#​37054) (ad24a48)
• core: Re-check user tool access on agent runtime cache hits (#​37401) (6e9c3e2)
• core: Redirect failed OIDC logins to the sign-in page (#​37428) (3e09299)
• core: Report and reconcile agent channel startup failures (#​36578) (6b0de0d)
• core: Report the provider response when a chat model returns no choices (#​37959) (49e7821)
• core: Report what credential setup actually selected (#​37019) (ef13ad0)
• core: Respond with an error when a webhook execution ends before the Respond to Webhook node runs (#​37006) (f9814b7)
• core: Restore mutating array methods on $json data in expressions (#​37172) (dcb5736)
• core: Return 503 when the AI assistant service is unreachable (#​37957) (36426a8)
• core: Return a single not-found message when disconnecting a credential (#​37292) (bde05e0)
• core: Reuse native Agent channel capabilities (#​36849) (e4edf89)
• core: Route OAuth2 token requests through environment proxies in every process (#​36996) (5266ce3)
• core: Route secrets pasted in AI chat to real credential forms (#​37277) (6cc8c59)
• core: Scope active workflow IDs to the requesting user's projects (#​37326) (b557e90)
• core: Share one time budget across nested expression evaluations (#​37330) (99c9e79)
• core: Split Instance Settings permissions into granular custom-role options (#​36802) (1f390cd)
• core: Stage libatomic into the distroless runners image (#​37106) (ca600ad)
• core: Stop npm audit from stalling Instance AI sandbox setup (#​37864) (7ac335d)
• core: Stop task broker before task runner processes on shutdown (#​37833) (2ad8d01)
• core: Stop the AI Assistant from pulling the whole workflow through the model for small edits (#​37644) (8ef5ba6)
• core: Stop the workflow builder writing Python Code nodes that cannot run (#​37083) (16a1a78)
• core: Stop webhook routing locally before best-effort external teardown (#​37241) (cae0c8b)
• core: Support writes on VM expression lazy proxies via evaluation-scoped copy-on-write (#​37262) (f77e270)
• core: Surface AI node failure with useful message and original cause (#​37113) (6826730)
• core: Surface the orig

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Helm Template Diff — n8n

8 changed lines

--- /tmp/old.yaml	2026-09-11 12:53:15.800190354 +0000
+++ /tmp/new.yaml	2026-09-11 12:53:15.503192600 +0000
@@ -24,7 +24,7 @@
     
     app.kubernetes.io/name: n8n
     app.kubernetes.io/instance: n8n
-    app.kubernetes.io/version: "2.35.7"
+    app.kubernetes.io/version: "2.38.7"
     app.kubernetes.io/managed-by: Helm
 spec:
   type: ClusterIP
@@ -47,7 +47,7 @@
     
     app.kubernetes.io/name: n8n
     app.kubernetes.io/instance: n8n
-    app.kubernetes.io/version: "2.35.7"
+    app.kubernetes.io/version: "2.38.7"
     app.kubernetes.io/managed-by: Helm
   name: n8n
 spec:
@@ -78,7 +78,7 @@
           type: RuntimeDefault
       containers:
         - name: n8n
-          image: docker.n8n.io/n8nio/n8n:2.35.7
+          image: docker.n8n.io/n8nio/n8n:2.38.7
           imagePullPolicy: IfNotPresent
           resources:
             limits:

[lunarys]

Renovate Review: docker.n8n.io/n8nio/n8n 2.35.7 → 2.36.7 (minor, n8n app)

Risk: 🟢 LOW

Check	Result
Inputs	Complete — full ### Release Notes section (covers 2.36.0 through 2.36.7) and a matching rendered-diff comment (03-apps-apps-n8n) both present.
Description vs. diff	Consistent — 03_apps/apps/n8n/values.yaml image.tag changed 2.35.7 → 2.36.7, exactly matching the summary table; single file, no scope creep.
Rendered diff	Full, no truncation — 8 changed lines total: two app.kubernetes.io/version labels (Service + Deployment) and the container image: tag. No resource added/removed, no error text.
Changelog vs. config	No overlap — release notes are exclusively Bug Fixes/Features across 2.36.0–2.36.7 with zero "breaking"/removed/renamed-key items; nothing in this app's values.yaml (env vars, storage, network policy, probes) touches any of the changed surfaces (Array.merge deprecation, MCP endpoints, task-runner internals, Google Ads/Kafka/SharePoint node fixes).

Details:

• Diff comment shows exactly the 3 label/tag line-pairs expected from a pure version bump — no new/removed Kubernetes resources.
• image.name (docker.n8n.io/n8nio/n8n) is unchanged, only tag moved, matching the PR's single-file diff (+1/-1).

Why LOW: cosmetic-only rendered diff, no breaking changelog items, no intersection with this app's live config.

---

Generated by Claude Code

[lunarys]

Renovate Review: docker.n8n.io/n8nio/n8n 2.35.7 → 2.36.8 (minor, n8n app)

Supersedes: prior review, which assessed the PR when it targeted 2.36.7. Renovate pushed a new commit bumping the target to 2.36.8 — re-ran the procedure against the new head. Verdict unchanged.

Risk: 🟢 LOW

Check	Result
Inputs	Complete — full Release Notes present covering 2.36.0→2.36.8; diff comment present for the only affected app (n8n)
Description vs. diff	Consistent — 03_apps/apps/n8n/values.yaml image.tag bump 2.35.7→2.36.8 matches the summary table; still the only changed file
Rendered diff	Full, no truncation — cosmetic-only: app.kubernetes.io/version label and image tag bump, no other lines changed
Changelog vs. config	No breaking changes, renamed/removed keys, or new required fields anywhere in the 2.36.0–2.36.8 range

Details:

• The only new content since the prior review's target (2.36.7) is 2.36.8's single bugfix: "core: Allow a domain-restricted credential to work in its own node." Checked 03_apps/apps/n8n/values.yaml — no domain-restricted credential config is set here, so this doesn't intersect the live setup.
• Everything else (env vars, external-secrets, networkpolicy, storage) is untouched by this PR.

Why LOW: only the target version moved further ahead within the same minor line; diff is still pure label/image-tag movement with nothing breaking in the changelog.

---

Generated by Claude Code