Skip to content

feat(container)!: Update image ghcr.io/n8n-io/n8n ( 2.34.6 ➔ 3.0.1 ) - #2100

Open
mortyops[bot] wants to merge 1 commit into
mainfrom
renovate/ghcr.io-n8n-io-n8n-3.x
Open

mortyops[bot] wants to merge 1 commit into
mainfrom
renovate/ghcr.io-n8n-io-n8n-3.x

Conversation

@mortyops

@mortyops mortyops Bot commented Oct 27, 2026 •

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Update Change
ghcr.io/n8n-io/n8n (source) major 2.34.6 → 3.0.1

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

n8n-io/n8n (ghcr.io/n8n-io/n8n)

v2.46.0

Bug Fixes
  • Add file-type tooltip to artifact download button (#​41490) (4a74f02)
  • ai-builder: Check execution:read in Assistant execution reads (#​41863) (a967486)
  • ai-builder: Send Assistant model calls through the configured AI transport (#​41948) (9b63561)
  • Allow custom OAuth2 scopes (#​41249) (2b450cf)
  • API: Accept expressions in number, boolean, and options credential fields (#​41832) (281ce2c)
  • API: Advertise the OAuth resource challenge on every public API 401 (#​41829) (182a428)
  • API: Remove node timestamps from the workflow OpenAPI schema (#​41792) (a722510)
  • core: Allow agent node tools to use global credentials (#​40814) (f2bfe17)
  • core: Apply execution redaction to Assistant execution reads (#​41565) (f7cd678)
  • core: Apply execution redaction to Assistant one-off node runs (#​41582) (9184012)
  • core: Bound agent context queries and improve Slack searches (#​41806) (9d6f901)
  • core: Check agent read access and credential access for draft Agent runs (#​42152) (01fbd95)
  • core: Claim an idle worker's next queue job and its lock in one step (#​41525) (32a9a7a)
  • core: Close binary data streams when the client disconnects (#​41077) (e167fd5)
  • core: Close chat attachment streams when the client disconnects (#​41108) (79b7497)
  • core: Close upload body streams when an outbound request fails (#​41078) (2dd1d15)
  • core: Compare insights date ranges in UTC on Postgres with a non-UTC time zone (#​41495) (1e66e5d)
  • core: Delete binary files before removing a pruned execution (#​40995) (003c47d)
  • core: Delete SDK memory threads when an agent is deleted (#​41857) (67ec0c6)
  • core: Detect the removed LangChain Code node in the v3 migration (#​41774) (e48fdfa)
  • core: Disable Node Web Storage in JS task runners (#​41852) (3b4bfc9)
  • core: Do not report activation errors for credentials that need reconnecting (#​41840) (51cfef8)
  • core: Don't close shared SSH tunnel clients that are still in use (#​40114) (7ffa1b1)
  • core: Fail publication of stored versions with trigger node ids over 64 characters (#​41519) (26c580e)
  • core: Fall back to Chat Completions when /responses fails on a missing field (#​40927) (f11619c)
  • core: Handle client disconnects in Respond to Webhook binary responses (#​41110) (da70de8)
  • core: Ignore counts of tokens when provider omits input / output tokens (#​41395) (618fd7e)
  • core: Improve agent credential handling (#​41873) (0347055)
  • core: Keep admin-blocked Assistant permissions after plan approval (#​41497) (7229765)
  • core: Keep Agent skills in sync with field changes (#​41996) (f2921bd)
  • core: Keep AI Assistant image attachments visible in history (#​41528) (ba9835a)
  • core: Keep parentheses around && and || operands of ?? in expressions (#​40962) (dbcfecf)
  • core: Leave execution data out of retry responses without execution:read (#​41871) (cc72143)
  • core: Let the folder table migration complete when its column already exists (#​41006) (26dac9a)
  • core: Make Array min() and max() work on arrays of 125k+ numbers (#​42109) (f36ede8)
  • core: Omit the credential name from exported workflow JSON (#​41691) (aa28191)
  • core: Pair declarative node output items with their input items (#​41645) (a56adb3)
  • core: Pair output items before the error output split (#​41639) (8dd5182)
  • core: Persist static data written by a webhook trigger (#​42081) (a15382a)
  • core: Pin Bedrock auth and validate AWS region in agents (#​42148) (a78b064)
  • core: Re-arm waiting executions after leader takeover (#​39896) (a32b06f)
  • core: Read the last successful execution of an engine v2 workflow from the data plane (#​40560) (1c234b0)
  • core: Read type availability policies from memory at enforcement points (#​41552) (7e405aa)
  • core: Record a failing sub-node run at the sub-node's own run index (#​40970) (917d035)
  • core: Recreate removed n8n-sandbox sandboxes and rerun workspace setup (#​41805) (26ce225)
  • core: Register Assistant eval routes only on eval instances (#​41771) (5624ec3)
  • core: Reject scheduled job names longer than their column (#​41521) (fe587dd)
  • core: Release the SQLite write lock when the write connection fails to open (#​41843) (d10f2ef)
  • core: Release workflow data when a vm engine expression ends (#​41804) (ae7eeef)
  • core: Replace the QuickJS runtime and WASM module after a native stack overflow (#​40968) (b2e7e9f)
  • core: Replay reasoning to custom OpenAI-compatible models in the agents runtime (#​41959) (e145ac4)
  • core: Report an unpublished sub-workflow as an operational error (#​41769) (5df6733)
  • core: Report SAML logins whose asserted email differs from the linked user (#​41506) (b768f6c)
  • core: Run the own Error Trigger when no error workflow is selected (#​40969) (6225e62)
  • core: Send Code node buffers to task runners as base64 (#​40670) (f7e36ed)
  • core: Send standalone Agent Responses calls to custom OpenAI endpoints with store disabled (#​42158) (4636a33)
  • core: Send the W3C trace context on MCP server requests (#​41908) (481fa2a)
  • core: Set CORS methods for waiting webhooks (#​39210) (8ba05b1)
  • core: Set the class name as the name of UserError, OperationalError and UnexpectedError (#​41685) (42721d0)
  • core: Show the root cause of model errors in AI Agent and Basic LLM Chain (#​41388) (9ceb394)
  • core: Skip empty cache hash writes (#​40937) (466f787)
  • core: Split long agent replies and repost failed streams (#​42156) (0562aa2)
  • core: Start sub-workflow error workflow when a pre-run check fails (#​40957) (e456b35)
  • core: Stop dependency index rebuild looping after import (#​40356) (58f11bf)
  • core: Stop retrying a node after the execution is cancelled (#​41786) (95d1b0f)
  • core: Stop the shutdown drain waiting on executions that park mid-drain (#​42129) (7c76c53)
  • core: Stream Slack agent replies in one message (#​41470) (42f783a)
  • core: Unify Agent creation and correct creation telemetry (#​41378) (34d4b73)
  • core: Update regex for scoped node name validation to allow dots in organization names (#​34950) (9502630)
  • core: Use mocked execution for agent check previews (#​41144) (aa4a358)
  • core: Use the root execution mode to pick draft or published nested sub-workflows (#​41779) (ea57730)
  • core: Widen node id columns to 64 characters (#​41007) (2a9b176)
  • core: Write the final status when deleting unsaved executions (#​41937) (8addd39), closes mayanksin#27
  • Databricks AI Agent Node: Scrub MLflow trace request and response previews (#​41247) (bed2ab9)
  • Databricks Node: Send a JSON body for a Lakebase function call that has no arguments (#​41632) (6da54e1)
  • editor: Adapt Agent Builder panel widths to available space (#​41562) (d8809f6)
  • editor: Align agent dialog header actions to the right edge (#​41969) (0fee1e7)
  • editor: Align carets within split buttons (#​42168) (1634a42)
  • editor: Align ellipsis action buttons across the editor (#​41912) (e6b2c83)
  • editor: Allow dismissing the n8n Assistant limited mode banner (#​41885) (50cdf14)
  • editor: Center badge text when icons are absent (#​41414) (9149663)
  • editor: Center the empty Time saved tooltip icon (#​42030) (85199fe)
  • editor: Clear the hover highlight when navigating menus with the keyboard (#​42099) (e03fcd9)
  • editor: Correct Agent tool validation and home empty state (#​41474) (744604c)
  • editor: Delay agent setup checklist until building finishes (#​41559) (964ae51)
  • editor: Fill the reserved scrollbar space in server tables (#​41290) (7d2e358)
  • editor: Fix Agent placeholders and memory credential menus (#​42002) (db99da9)
  • editor: Hide Test agent setup task until preview is enabled (#​41882) (e595e5e)
  • editor: Improve first load speed (#​41942) (40a05c5)
  • editor: Increase light-mode text contrast (#​41785) (5b75624)
  • editor: Keep the creation menu above the sidebar while opening (#​42033) (6c926d4)
  • editor: Load and keep resource mapper fields inside a fixedCollection (#​41209) (967112a)
  • editor: Localize the binary data preview messages (#​41323) (6813be8)
  • editor: Localize the create menu submenu heading (#​41773) (9e097d4)
  • editor: Localize the execution mode tooltips in the executions list (#​41324) (c0ef4e4)
  • editor: Localize the select placeholders in workflow settings (#​41325) (a5eada9)
  • editor: Localize the source control push modal messages (#​41776) (4e516d2)
  • editor: Localize the use workflow button on template cards (#​41778) (238376d)
  • editor: Match Evals Run Test button colors (#​42154) (b8ed6dc)
  • editor: Match navigation plus button hover styling (#​41826) (0af68db)
  • editor: Point migration report docs link to the v3 breaking changes page (#​41900) (1430a3b)
  • editor: Preselect Agent Memory credential (#​42140) (6849da6)
  • editor: Reduce Agent modal header spacing (#​41585) (25010a2)
  • editor: Remove underlines from breadcrumb links (#​42191) (109248f)
  • editor: Remove underlines from Data Table links (#​41613) (18084bc)
  • editor: Save replacements for unresolved credentials (#​41704) (bd21faa)
  • editor: Say 'Can view' on projects a credential is used in but not shared with (#​41690) (25c86e0)
  • editor: Scroll data table previews in the AI Assistant panel (#​41522) (db90867)
  • editor: Show manual execution results after the push connection reconnects (#​41610) (ccd79cd)
  • editor: Skip empty results in the expression preview highlighter (#​41655) (981f0e8)
  • editor: Stop Safari from opening its own context menu on the canvas (#​42126) (0b014ee)
  • editor: Support agent test chat on HTTP origins (#​41713) (8dd4319)
  • editor: Use consistent channel connect labels (#​42029) (dedc37d)
  • editor: Use consistent confirmation modals in Agents (#​41922) (ff95b93)
  • editor: Use n8n Assistant in history and sandboxing copy (#​41566) (dba1c53)
  • Email Trigger (IMAP) Node: Back off reconnects when the server drops each new connection (#​41827) (39d9c1b)
  • Execution Data Node: Store boolean and falsy expression values (#​41915) (4c284b3)
  • Fall back to OpenID discovery after HTML metadata responses (#​41063) (ac02213)
  • Fill empty output slots before pairing items (#​42138) (a12bf1d)
  • Handle empty and invalid revision responses (#​41114) (2b2eb0f)
  • Handle IMAP transport errors during connection setup (#​41248) (fb08a75)
  • Handle null and undefined in manual console output (#​41570) (e228ee9)
  • HTTP Request Node: Stop batching when the execution is cancelled (#​41529) (d7c0244)
  • Include manual execution details in log streaming start events (#​41790) (8dfdbc8)
  • Isolate LDAP clients and apply operation timeouts (#​41611) (4f3896a)
  • Kafka Trigger Node: Release each execution's run data when it completes (#​41531) (12e000b)
  • Keep source control tag mappings consistent (#​41513) (47328a0)
  • Keep the Assistant Connect menu visible above the modal (#​41124) (fc7f4c0)
  • Load all campaign dropdown options (#​41065) (bbab617)
  • Make Preferences settings consistent with Skills (#​41627) (ef6d31f)
  • Microsoft SharePoint Node: Fix the column mapper 403 and empty items in Map Automatically (#​41671) (fbeaab9)
  • Microsoft SharePoint Node: Keep the filter and field options when Return All is on (#​41205) (f930f2c), closes mayanksin#27
  • Microsoft Teams Trigger Node: Name the missing permission when Graph refuses the subscription (#​41443) (5f3ab01)
  • Microsoft Teams Trigger Node: Renew the Graph subscription via lifecycle notifications (#​41299) (9f074c2)
  • Open Chat Hub OAuth popups before authorization requests (#​41409) (ef03659)
  • Postgres Node: Prevent global pgtypes overwrite (#​41641) (a67dba1)
  • Preserve Salesforce instance URL on OAuth2 token refresh (#​41415) (4d93b38)
  • Qwen Cloud Node: Route text-only DeepSeek models and add DeepSeek search alias (#​41212) (8a35cf2)
  • Recognize default workflow inputs in Agent tools (#​41727) (102ffae)
  • Reject task broker listen errors and use assigned test ports (#​40925) (1526d6a)
  • Remove underlines from data table cards (#​41719) (8c5c821)
  • Show detailed errors and correct limit maximum (#​41066) (4d1fcfb)
  • Strava Trigger Node: Validate subscription challenge and events (#​41617) (9126cad)
  • Summarize Node: Return null instead of NaN for an average with no numeric values (#​41430) (be2da29)
  • Treat access keys as secret credential fields during linting (CE-3601) (#​41931) (b46aba4)
  • Update certifi to 2026.10.19 in task runner (#​41693) (282fa32)
  • Update certifi to 2026.10.23 in task runner (#​41971) (8814383)
  • Update logos in credential oauth confirmation screen and instance emails (#​41629) (65a2e21)
  • Use the form font for textarea text (#​41068) (274ed38)
  • Warn before leaving project settings with unsaved changes (#​41720) (bdb0bd9)
  • Widen the logs panel node list (#​41787) (11f68c3)
Features
  • Add an "Executions might fail" impact to the migration report (#​41673) (df0c78c)
  • Add mention-only Slack replies for agents (#​41815) (0406b59)
  • Add n8n Connect servers to MCP registry servers (#​41313) (a46931d)
  • Add V3 migration for Edit Image node (#​41389) (6dddea4)
  • API: Add dependency endpoints for workflows, credentials and data tables (#​42040) (c8864e5)
  • Chat Node: Allow Respond to Chat in embedded chat mode (#​41955) (6b19e62)
  • core: Add gen_ai.provider.name and gen_ai.agent.id to Agents SDK spans (#​41875) (1b14cfd)
  • core: Add OTel GenAI attributes to AI Agent and chat model spans (#​41874) (7e3c941)
  • core: Add v3 migration rules for the Slack signature secret (#​41781) (a4b8c5e)
  • core: Authenticate Webhook and MCP Trigger nodes through trusted sources (#​41455) (8708319)
  • core: Export the migration report as CSV (#​41534) (db8094f)
  • core: Let the Agent Builder set up Microsoft Foundry models (#​41913) (69dcaad)
  • core: Let workflow editors triage the migration findings of their workflows (#​41093) (2b65576)
  • core: Limit Assistant changes to the thread's project (#​41700) (b7815c9)
  • core: List Microsoft Foundry deployments in the Agents model selector (#​41892) (da98e7c)
  • core: Make custom OTel attribute key prefixes configurable (#​41695) (c10f805)
  • core: Make granular credential sharing always on (#​41376) (36ea544)
  • core: Make the Microsoft Teams agent channel available (#​41867) (d2bf458)
  • core: Make the promotion commit message optional and generate a default (#​41888) (7c9a800)
  • core: Price Foundry deployments by the model they serve in Agents (#​41909) (5fda71f)
  • core: Report the managed database and Redis service in telemetry (#​40427) (1265d2f)
  • core: Report the whole deployment's footprint in telemetry (#​40685) (d3f7a23)
  • core: Share focused credential tools between workflow and Agent builders (#​41748) (5302240)
  • core: Show budget guardrail stops in the agent session timeline (#​41692) (fecfbe5)
  • core: Show version mismatch warnings on all mains (#​40097) (1adcf7a)
  • core: Stop Agent Builder from testing the agent after every build (#​42186) (b37130f)
  • core: Support Claude deployments on Microsoft Foundry in Agents (#​41905) (48332fe)
  • core: Unpublish instead of refusing a move into a restricted project (#​41865) (8aa35f6)
  • Databricks Node: Enable the Lakebase resource and show the Lakebase Chat Memory sub-node (#​41795) (5d6d06c)
  • Edit Image Node: Add v2 using napi-rs/canvas (#​41182) (cd8e744)
  • editor: Add an All option to pagination and remove the custom datatable page-size controls (#​39850) (d7fa8ad)
  • editor: Add dialog props, update the layout, and migrate existing dialogs (#​40690) (c69581a)
  • editor: Add Environments group for source control API key scopes (#​41537) (800821d)
  • editor: Align agent plan and message queue layouts (#​40635) (68afdd3)
  • editor: Filter migration report workflows by project (#​41869) (a9aab42)
  • editor: Group instance settings links under section headings (#​41213) (04b3d5d)
  • editor: Improve Agent testing and documentation access (#​41968) (f029f52)
  • editor: Mark required credential fields (#​42028) (51a10f1)
  • editor: Prevent usage of deprecated nodes (#​31392) (1a18bff)
  • editor: Refactor N8nBreadcrumbs and callers (#​41196) (a59e0f1)
  • editor: Send users to the admin who can lift a type restriction (#​41297) (0bfa563)
  • editor: Show the model that answered in the log details header (#​41390) (6532d29)
  • editor: Update Preview and enterprise readiness tags for n8n Assistant and Chat (#​41422) (443e119)
  • Implements new taxonomy experiment for sales-and-marketing responders (#​41712) (14e79fa)
  • Microsoft Foundry Chat Model Node: Use the Microsoft Foundry logo (#​41426) (82362c6)
  • n8n Node: Add action to add a user to a project (#​41253) (794ede8)
  • Redis Vector Store Node: Consume the FluentRedisVectorStore in the RedisVectorStore Node (#​27978) (9bcd57e)
  • Replace brand assets (#​41510) (1587770)
  • Workable Trigger Node: Add webhook signature verification (#​41683) (ea3bebc)
Performance Improvements
  • core: Always load the model catalog search tool in Instance AI (#​41545) (d5d6596)
  • core: Deduplicate episodic candidates before embedding (#​41618) (fb8ae3d)

v2.45.0

Bug Fixes
  • AI Agent Node: Replay Anthropic thinking turns with their tool arguments (#​41241) (ea98bd0)
  • Align data table and variable editing on protected instances (#​41258) (d4bde14)
  • Allow skipping table initialization (#​40437) (d245b17)
  • API: Apply projectId filter to executions for member API keys (#​40887) (3075b60)
  • API: Log errors before returning generic 500 in Public API (#​41186) (fe36279)
  • Check provisioning license on Users settings page (#​41048) (066480d)
  • Convert to File Node: Decode data URIs and validate Base64 input (#​38554) (315e0a5)
  • core: Allow gateway model IDs and forward credential headers in agents (#​40470) (791c7bc)
  • core: Allow project promotion without an instance export (#​40939) (e0fe040)
  • core: Allow switching a node back to a credential the user cannot use after a save (#​41198) (e7f0607)
  • core: Clear agent runtime cache when credential is updated (#​40961) (4cb7a6e)
  • core: Close agent after run when invoked from workflow (#​41128) (f596162)
  • core: Confirm project deletions before instance apply (#​40941) (f631112)
  • core: Create an XML parser for each webhook request body (#​41098) (1950434)
  • core: Describe MCP servers only from user or registry text in Agent Builder (#​40974) (248c863)
  • core: Display an error message when failing to connect to oauth credentials (#​41058) (952b1e7)
  • core: Evict idle mcp-browser sessions to prevent connection leak (#​36850) (efd4e21)
  • core: Handle every escaped closing bracket in an expression (#​40487) (b09efb7)
  • core: Improve base URL check for declarative nodes (#​40778) (e45a65a)
  • core: Keep cancelled Assistant activity settled (#​40786) (d74f3f2)
  • core: Keep Observer detail lines instead of discarding the response (#​41134) (48edbef)
  • core: Keep offline_access when a protected resource omits it (#​41384) (9675910)
  • core: Keep pending setup for nodes that n8n Assistant added in an earlier build (#​41070) (50c4ced)
  • core: Keep the workflow source file when n8n Assistant sends blank source (#​41201) (b78913f)
  • core: Key each OAuth authorization request to its own session (#​39930) (3c447b4)
  • core: Key queue job outcomes by job on shutdown resume (#​40569) (6e04287)
  • core: Let LLM failed-attempt handling retry and honour Retry-After (#​41002) (67c1981)
  • core: Let preview chat agents make changes through their tools (#​41403) (8323dfd)
  • core: Log custom data truncation only above the 512-character limit (#​40899) (e74f1c1)
  • core: Pass reasoning effort on open router model node (#​41179) (683fd11)
  • core: Redact a parent execution if any sub-workflows have redaction enabled (#​41129) (c70b5d4)
  • core: Redact the parent execution when a sub-workflow uses a credential the viewer cannot use (#​41085) (a57c8f3)
  • core: Reflect failed publications in the active workflows endpoints (#​40641) (96eff1e)
  • core: Remove unused N8N_SCHEDULER_MIN_INTERVAL setting (#​41194) (c839d6c)
  • core: Reuse connections in the log streaming webhook desti

✂ Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@github-actions

github-actions Bot commented Oct 27, 2026 •

Copy link
Copy Markdown

✅ Automated recommendation: APPROVE

Analysis engine: pr-review-local (openai) · pr-reviewer-action v3.7.0

Recommendation

Request changes. This PR bumps ghcr.io/n8n-io/n8n from 2.34.6 to 3.0.1 — a major version jump (2.x → 3.x). The diff is a single-line tag change, but a major version upgrade carries breaking-change risk that requires author confirmation before merge.

Change-by-Change Findings

kubernetes/apps/base/selfhosted/n8n/app/helmrelease.yaml — image tag bump 2.34.6 → 3.0.1

The diff changes only the tag field on the n8n container image. No other manifest fields are touched.

Major version upgrade risk (unconfirmed): The PR title states 2.34.6 → 3.0.0 but the actual diff shows 3.0.1. The release notes in the PR body only cover v2.46.0 (a minor release within the 2.x series) and do not include any 3.x release notes. A major version upgrade (2 → 3) is a breaking-change boundary; the author must confirm that the 3.x release notes (not yet provided) do not introduce API, config, or data-format changes that would break this deployment. The dependsOn: rook-ceph-cluster dependency is unchanged and does not mitigate this risk.

No resource quota / limit changes: The resources block (cpu: 100m, memory: 200Mi/1000Mi) is untouched. No new limits or quotas are introduced.

No secrets in diff: The n8n-secret is referenced via secretRef and is not materialized in this manifest. No plaintext secrets are present.

No Flux substitution risk: The manifest uses ${SECRET_DOMAIN} and ${KOPIUR_CLAIM:-n8n} which are Flux substitute variables — these are expected and not literal ${...} tokens that would freeze the Kustomization.

Probe configuration is sound: The liveness probe targets /healthz and the readiness probe targets /healthz/readiness. The comment correctly notes that /healthz is an unconditional 200 and would stay green through a database outage, so readiness is the correct signal for Flux healthChecks. The startup probe is disabled, which is appropriate.

Route annotations are consistent: external-dns.alpha.kubernetes.io/target correctly points to internal.${SECRET_DOMAIN} for the main route and external.${SECRET_DOMAIN} for the webhook route. The parentRefs correctly reference envoy-internal and envoy-external respectively.

Required Checks Disposition

Check Status Rationale
validate manifest against target cluster version not_applicable The diff contains only a single image tag change (2.34.6 → 3.0.1). No API version, kind, or field-type changes are present that would be incompatible with the target cluster version. The manifest schema (helmrelease-helm-v2.schema.json) is unchanged.
check for resource quota / limit changes satisfied The resources block (cpu: 100m, memory: 200Mi/1000Mi) is identical before and after the change. No new limits, quotas, or resource requests are introduced.

Standards Compliance

  • No plaintext secrets: ✓ (only secretRef reference, no materialized secrets)
  • No postRenderer with bash: ✓ (not present)
  • Naming convention: ✓ (kebab-case n8n, helmrelease.yaml)
  • Flux schema comment: ✓ ($schema=https://raw.githubusercontent.com/bjw-s-labs/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json)
  • No allowGitHubActions workflow: ✓ (not applicable to this manifest)
  • No talos/ or talconfig.yaml in diff: ✓

Unknowns / Needs Verification

  1. 3.x release notes not provided. The PR body only includes v2.46.0 release notes. The author must confirm that the 3.0.0/3.0.1 release notes do not contain breaking changes (e.g., new required env vars, changed config format, database migration requirements) that would affect this deployment. This is the primary blocker for approval.
  2. Image digest not pinned. The tag 3.0.1 is a mutable tag. Per the GitHub Actions standards, actions should be pinned to full commit SHAs, but this is a container image tag, not a GitHub Action. The ghcr.io tag is mutable and could be retagged. Consider pinning to a digest if this is a production-critical service.

Verdict

Request changes pending confirmation from the author that the 3.x release notes have been reviewed and no breaking changes affect this deployment. The single-line diff is technically correct, but a major version upgrade without documented release notes is a production risk in a live 3-node cluster with no staging environment.

Verdict relaxed from structured findings (PR 977): every open finding is a verification request the review tools cannot check, so the author has nothing to change. The findings remain listed above.

@mortyops

mortyops Bot commented Oct 27, 2026 •

Copy link
Copy Markdown
Contributor Author
--- HelmRelease selfhosted/n8n
+++ HelmRelease selfhosted/n8n
@@ -69,7 +69,7 @@
                 name: n8n-secret
             image:
               repository: ghcr.io/n8n-io/n8n
-              tag: 2.34.6
+              tag: 3.0.1
             probes:
               liveness:
                 custom: true

@mortyops

mortyops Bot commented Oct 27, 2026 •

Copy link
Copy Markdown
Contributor Author
--- Deployment selfhosted/n8n
+++ Deployment selfhosted/n8n
@@ -85,7 +85,7 @@
         envFrom:
         - secretRef:
             name: n8n-secret
-        image: ghcr.io/n8n-io/n8n:2.34.6
+        image: ghcr.io/n8n-io/n8n:3.0.1
         livenessProbe:
           failureThreshold: 3
           httpGet:

| datasource | package            | from   | to    |
| ---------- | ------------------ | ------ | ----- |
| docker     | ghcr.io/n8n-io/n8n | 2.34.6 | 3.0.1 |
@mortyops
mortyops Bot force-pushed the renovate/ghcr.io-n8n-io-n8n-3.x branch from 9bda950 to dc89091 Compare October 28, 2026 12:06
@mortyops mortyops Bot changed the title feat(container)!: Update image ghcr.io/n8n-io/n8n ( 2.34.6 ➔ 3.0.0 ) feat(container)!: Update image ghcr.io/n8n-io/n8n ( 2.34.6 ➔ 3.0.1 ) Oct 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants