Skip to content

chore(deps): update docker.n8n.io/n8nio/n8n docker tag to v2.36.8 - #170

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/docker.n8n.io-n8nio-n8n-2.x
Open

chore(deps): update docker.n8n.io/n8nio/n8n docker tag to v2.36.8#170
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/docker.n8n.io-n8nio-n8n-2.x

Conversation

@renovate

@renovate renovate Bot commented Aug 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
docker.n8n.io/n8nio/n8n minor 2.35.7 → 2.36.8

Release Notes

n8n-io/n8n (docker.n8n.io/n8nio/n8n)

v2.36.8

Compare Source

Bug Fixes
  • core: Allow a domain-restricted credential to work in its own node (#​37248) (1166741)

Review in cubic

v2.36.7

Compare Source

Bug Fixes
  • API: Adapt binary data endpoint (#​36994) (f6f237c)
  • API: Require a JSON content type on decorator routes that take a body (#​36958) (bf90b05)
  • core: Reconcile license auto-renewal on startup leader takeover (#​36937) (d98d300)
  • core: Route OAuth2 token requests through environment proxies in every process (#​37009) (97f9252)
Features
  • API: Remove offset query param from list workflow history endpoint (#​36952) (08331e1)

Review in cubic

v2.36.6

Compare Source

Bug Fixes
  • editor: Show personalization survey and community registration modal on Instance AI landing page (#​36826) (8a38897)

Review in cubic

v2.36.5

Compare Source

Bug Fixes

Review in cubic

v2.36.4

Compare Source

Bug Fixes
  • core: Normalize env values before schema-based parsing (#​36731) (cac2d34)
  • core: Validate chat and MCP trigger auth modes for end-user credentials (#​36717) (9c1c59b)
  • core: Wrap a trigger's closeFunction in an expression isolate at creation time (#​36697) (c72f2c1)

Review in cubic

v2.36.3

Compare Source

Bug Fixes
  • core: Avoid restarting task runners that are only slow (#​36609) (4aa1fa6)
  • core: Only init the expression engine for commands that evaluate expressions (#​36647) (f212a8e)
  • core: Release test-webhook isolate only after teardown completes (#​36631) (3c52e79)
  • editor: Restore Edit Fields type selector styles (#​36627) (be46cc8)

Review in cubic

v2.36.2

Compare Source

Bug Fixes
  • API: Return a request schema for decorator routes in /discover (#​36496) (2c09a81)
  • core: Resolve end-user credentials when loading node parameters (#​36518) (19eb966)
  • editor: Keep agent preview user messages right-aligned (#​36533) (705014a)

Review in cubic

v2.36.0

Compare Source

Bug Fixes
  • ai-builder: Align HITL approval resume schemas with confirm envelope (#​36047) (be1fde1)
  • ai-builder: Enable Save in agent tool modal when credential auth is selected (#​36012) (4fe94d8)
  • ai-builder: Prevent agent from claiming integration tool call success early (#​36196) (547cfb9)
  • ai-builder: Recover stuck tool-call UI and MCP timeout progressive update (#​36162) (e1cd757)
  • ai-builder: Surface existing LLM-provider credentials when a filtered lookup finds none (#​35833) (d73d625)
  • ai-builder: Surface skill save validation errors and stop reverting skill renames (#​36055) (b08cde6)
  • Avoid false port-in-use error in get-n8n script on Windows/WSL (#​36026) (6f2033f)
  • core: Accept Always allow scope on data-tables resume (#​36070) (560455f)
  • core: Allow details field in continueErrorOutput mode (#​35939) (55927c4)
  • core: Apply TLS options per hop when requests go through a proxy (#​35518) (68bcdfe)
  • core: Bound database pool teardown so connection recovery always completes (#​36013) (da314d3)
  • core: Bound workflow publication outbox record processing with an abort deadline (#​36197) (c0278b0)
  • core: Crash enqueued executions with unreadable data (#​36010) (fd67bf8)
  • core: Detect node settings changes when comparing workflow versions (#​36066) (e4f0c33)
  • core: Execute tools in the order the root requested them (#​36009) (acd4fda)
  • core: Explain Browser Use failures caused by other browser extensions (#​36011) (f66a0e8)
  • core: Expose incoming request headers to MCP trigger tools (#​35236) (64ed864)
  • core: Fix non existent workflow id pathway for AIA (#​35984) (6ab2569)
  • core: Fix z-indexing of expression modal over agent NDV (#​36233) (1fa6ef0)
  • core: Gate AI Assistant workflow publish offers on live verification (#​36394) (602e6a0)
  • core: Handle dropped AI provider connections as transient (#​35587) (72235d3)
  • core: Handle oversized chat attachments gracefully (#​36061) (de8b358)
  • core: Harden agent HTTP Request tool configuration (#​36463) (0791359)
  • core: Improve agent builder skill and channel handling (#​35980) (a723e79)
  • core: Keep node IDs stable when the AI Assistant edits a workflow (#​36236) (a71e45a)
  • core: Keep resolving end-user credentials after a trigger stops listening (#​35973) (a447ac4)
  • core: Keep the account panel on hosted forms once every account is connected (#​36429) (a8754b4)
  • core: Let Instance AI run a specific trigger's flow (#​36410) (1a7425d)
  • core: Make published agent channel add, replace, and remove failure-safe (#​36100) (79c1393)
  • core: Prefer managed OAuth auth types when the AI builder resolves credentials (#​35929) (1b4c0ba)
  • core: Preserve Anthropic thinking history across agent turns (#​36185) (5f6d734)
  • core: Rebuild the node registry without emptying it first (#​36387) (86facbd)
  • core: Recover model turns that end without usable output (#​36423) (bae82bd)
  • core: Remember skipped Instance AI credential setup for the rest of a thread (#​36308) (6ace2a5)
  • core: Report the real activation mode for triggers activated via the publication outbox (#​36123) (1a12af6)
  • core: Report the workflow's parent folder in get_workflow_details (#​36234) (9b97fb5)
  • core: Require trigger node name for MCP workflow executions (#​36341) (7ea9d54)
  • core: Resolve agent credentials through the node decryption path so external secrets work (#​36275) (9cbbd59)
  • core: Resolve AI Assistant sticky note placement after layout (#​36320) (b671cf4)
  • core: Resolve Custom API Call support through inherited credential types (#​35820) (88efdb9)
  • core: Resolve operation defaults per resource in generated node schemas (#​35952) (79a7bd2)
  • core: Respect the editor write lock when Instance AI writes workflows (#​36335) (f19c452)
  • core: Return final responses from workflow agents (#​36127) (5e2779e)
  • core: Scope AI Assistant credential setup cards to the thread's project (#​36425) (b50ea9c)
  • core: Stop auto-selecting the only generic auth credential (#​35963) (237c503)
  • core: Stop duplicated workflows from inheriting the original's static data (#​35921) (25c1521)
  • core: Stop routing unrelated pre-existing nodes into workflow setup after AI Assistant edit (#​36280) (c89dba8)
  • core: Surface model discovery authentication failures to users (#​35979) (c44c7de)
  • Default all navigations to domcontentloaded (#​36238) (5a1e186)
  • Don't detach child process on Windows so external programs write (#​36327) (de6f3d9)
  • editor: Clarify external secret expression previews (#​36064) (7792fdb)
  • editor: Display tool execution data in Agent sessions (#​36085) (a94ffe9)
  • editor: Improve agent error handoff to AI Assistant (#​36076) (598c1f3)
  • editor: Keep agent nodes inside canvas group borders (#​35972) (174d0d8)
  • editor: Keep agent tool schemas aligned with saved configuration (#​36329) (8d3e266)
  • editor: Keep cursor position when clicking into an expression editor (#​36411) (5fa9aaa)
  • editor: Name the AI Assistant browser tab after the conversation (#​35958) (e4a414d)
  • editor: Never autosave a read-only preview canvas (#​36023) (56a2d20)
  • editor: Only show Markdown placeholder when empty (#​36336) (95515d7)
  • editor: Open OAuth sign-in popup before network calls and report blocked pop-ups clearly (#​35948) (0f9bff0)
  • editor: Polish workflow header actions menu and production checklist placement (#​36209) (f3f075a)
  • editor: Preserve saved credential data after connect-save to prevent false disconnect prompt (#​35598) (59ea1f4)
  • editor: Redirect to sign-in when the user's session expires (#​35507) (a78ff67)
  • editor: Refresh chat history when switching executions (#​35312) (36f2b68)
  • editor: Remove misleading reset zoom control (#​35843) (cce5401)
  • editor: Restore the connection test for Kafka and Odoo credentials (#​36195) (40a5901)
  • editor: Settle navigation instead of hanging when auth-init guard errors (#​36190) (ddd5494)
  • editor: Show agent context after assistant handoff (#​36310) (d810315)
  • editor: Show placeholder while MCP settings counts load (#​35894) (870099f)
  • editor: Show the connected provider account, not the n8n account email (#​35553) (ee03e02)
  • editor: Stop the workflow actions menu shifting when a new workflow is saved (#​36077) (a914319)
  • editor: Stop write-lock polling from re-arming after session expiry (#​34750) (26be86d)
  • editor: Update ready-to-run demo templates to a current OpenAI model (#​36189) (a27c90c)
  • Fix decompress size calculation for zip64 archives (#​35856) (d094b6a)
  • Google Ads Node: Migrate from sunset v21 API to v25 (#​36255) (bab2649)
  • Google Ads Node: Select the renamed video views metric on API v25 (#​36347) (7b64b94)
  • Handle exponential-notation numbers in smartDecimal (#​35967) (08052c1)
  • Kafka Trigger Node: Fail v2 activation when the consumer group cannot be joined (#​36046) (67a458e)
  • Kafka Trigger Node: Refuse activation when the topic does not exist (#​36044) (b025ff0)
  • MCP Server Trigger Node: Keep sessions working when the caller's end-user credentials are unconnected (#​36221) (5044810)
  • Microsoft SharePoint Node: Require subdomain in OAuth2 credential (#​35680) (620c40c)
  • Microsoft Teams Node: Restore Group.ReadWrite.All OAuth2 scope (#​36005) (653dfc6)
  • Microsoft Teams Node: Surface Graph errors instead of returning an empty chat list (#​36200) (1cc20d5)
  • Remove default model from one-script docker compose setup (#​36034) (a91e012)
  • Rethrow unreachable-element errors in getElementValue (#​36199) (1ad64b8)
  • Surface Zoho API error message on duplicate record (#​35840) (0a30c03)
  • Wait for task runner registration before executing in e2e test (#​36212) (2bca080)
  • Wordpress Node: Send no-cache header on write requests (#​20473) (077370f)
Features

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

github-actions Bot commented Aug 28, 2026 •
edited
Loading

Copy link
Copy Markdown

Helm Template Diff — n8n

8 changed lines 
--- /tmp/old.yaml	2026-08-28 09:00:30.737739605 +0000
+++ /tmp/new.yaml	2026-08-28 09:00:24.993691322 +0000
@@ -26,7 +26,7 @@
     
     app.kubernetes.io/name: n8n
     app.kubernetes.io/instance: n8n
-    app.kubernetes.io/version: "2.35.7"
+    app.kubernetes.io/version: "2.36.8"
     app.kubernetes.io/managed-by: Helm
 spec:
   type: ClusterIP
@@ -49,7 +49,7 @@
     
     app.kubernetes.io/name: n8n
     app.kubernetes.io/instance: n8n
-    app.kubernetes.io/version: "2.35.7"
+    app.kubernetes.io/version: "2.36.8"
     app.kubernetes.io/managed-by: Helm
   name: n8n
 spec:
@@ -80,7 +80,7 @@
           type: RuntimeDefault
       containers:
         - name: n8n
-          image: docker.n8n.io/n8nio/n8n:2.35.7
+          image: docker.n8n.io/n8nio/n8n:2.36.8
           imagePullPolicy: IfNotPresent
           resources:
             limits:

@lunarys Claude

lunarys commented Aug 28, 2026

Copy link
Copy Markdown
Owner

Renovate Review: docker.n8n.io/n8nio/n8n 2.35.7 → 2.36.7 (minor, n8n app)

Risk: 🟢 LOW

Check Result
Inputs Complete — full ### Release Notes section (covers 2.36.0 through 2.36.7) and a matching rendered-diff comment (03-apps-apps-n8n) both present.
Description vs. diff Consistent — 03_apps/apps/n8n/values.yaml image.tag changed 2.35.7 → 2.36.7, exactly matching the summary table; single file, no scope creep.
Rendered diff Full, no truncation — 8 changed lines total: two app.kubernetes.io/version labels (Service + Deployment) and the container image: tag. No resource added/removed, no error text.
Changelog vs. config No overlap — release notes are exclusively Bug Fixes/Features across 2.36.0–2.36.7 with zero "breaking"/removed/renamed-key items; nothing in this app's values.yaml (env vars, storage, network policy, probes) touches any of the changed surfaces (Array.merge deprecation, MCP endpoints, task-runner internals, Google Ads/Kafka/SharePoint node fixes).

Details:

  • Diff comment shows exactly the 3 label/tag line-pairs expected from a pure version bump — no new/removed Kubernetes resources.
  • image.name (docker.n8n.io/n8nio/n8n) is unchanged, only tag moved, matching the PR's single-file diff (+1/-1).

Why LOW: cosmetic-only rendered diff, no breaking changelog items, no intersection with this app's live config.

Generated by Claude Code

@renovate
renovate Bot force-pushed the renovate/docker.n8n.io-n8nio-n8n-2.x branch from 9c6e881 to 2282afb Compare August 28, 2026 09:00
@renovate renovate Bot changed the title chore(deps): update docker.n8n.io/n8nio/n8n docker tag to v2.36.7 chore(deps): update docker.n8n.io/n8nio/n8n docker tag to v2.36.8 Aug 28, 2026
@lunarys Claude

lunarys commented Aug 28, 2026

Copy link
Copy Markdown
Owner

Renovate Review: docker.n8n.io/n8nio/n8n 2.35.7 → 2.36.8 (minor, n8n app)

Supersedes: prior review, which assessed the PR when it targeted 2.36.7. Renovate pushed a new commit bumping the target to 2.36.8 — re-ran the procedure against the new head. Verdict unchanged.

Risk: 🟢 LOW

Check Result
Inputs Complete — full Release Notes present covering 2.36.0→2.36.8; diff comment present for the only affected app (n8n)
Description vs. diff Consistent — 03_apps/apps/n8n/values.yaml image.tag bump 2.35.7→2.36.8 matches the summary table; still the only changed file
Rendered diff Full, no truncation — cosmetic-only: app.kubernetes.io/version label and image tag bump, no other lines changed
Changelog vs. config No breaking changes, renamed/removed keys, or new required fields anywhere in the 2.36.0–2.36.8 range

Details:

  • The only new content since the prior review's target (2.36.7) is 2.36.8's single bugfix: "core: Allow a domain-restricted credential to work in its own node." Checked 03_apps/apps/n8n/values.yaml — no domain-restricted credential config is set here, so this doesn't intersect the live setup.
  • Everything else (env vars, external-secrets, networkpolicy, storage) is untouched by this PR.

Why LOW: only the target version moved further ahead within the same minor line; diff is still pure label/image-tag movement with nothing breaking in the changelog.

Generated by Claude Code

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@lunarys