Skip to content

🚀 Release 2.18.0#28768

Merged
n8n-release-helper[bot] merged 1 commit intorelease/2.18.0from
release-pr/2.18.0
Apr 21, 2026
Merged

🚀 Release 2.18.0#28768
n8n-release-helper[bot] merged 1 commit intorelease/2.18.0from
release-pr/2.18.0

Conversation

@n8n-assistant
Copy link
Copy Markdown
Contributor

@n8n-assistant n8n-assistant Bot commented Apr 21, 2026

2.18.0 (2026-04-21)

Bug Fixes

  • ai-builder: Increase orchestrator max steps from default 5 to 60 (#28429) (3c850f2)
  • ai-builder: Scope artifacts panel to resources produced in-thread (#28678) (7b3696f)
  • ai-builder: Use placeholders for user-provided values instead of hardcoding fake addresses (#28407) (39c6217)
  • Alibaba Cloud Chat Model Node: Add credential-level url field for AI gateway compatibility (#28697) (dd6c28c)
  • ClickUp Node: Unclear error message when using OAuth credentials (#28584) (19aadf1)
  • core: Add required field validation to MCP OAuth client registration (#28490) (8716316)
  • core: Cascade-cancel dependent planned tasks when a parent task fails (#28656) (35f9bed)
  • core: Enforce credential access checks in dynamic node parameter requests (#28446) (ac41112)
  • core: Ensure single zod instance across workspace packages (#28604) (107c48f)
  • core: Filter stale credentials from setup wizard requests (#28478) (657bdf1)
  • core: Fix public API package update process (#28475) (34430ae)
  • core: Fix workflow-sdk validation for plain workflow objects (#28416) (62dc073)
  • core: Guard against undefined config properties in credential overwrites (#28573) (77d27bc)
  • core: Handle git fetch failure during source control startup (#28422) (fa3299d)
  • core: Handle invalid percent sequences and equals signs in HTTP response headers (#27691) (ca71d89)
  • core: Implement data tables name collision detection on pull (#26416) (e5aaeb5)
  • core: Prevent nodes tool crash on flattened required fields (#28670) (3e72430)
  • core: Resolve additional keys lazily in VM expression engine (#28430) (98b833a)
  • core: Skip disabled Azure Key Vault secrets and handle partial fetch failures (#28325) (6217d08)
  • core: Skip npm outdated check for verified-only community packages (#28335) (2959b4d)
  • Disable axios built-in proxy for OAuth2 token requests (#28513) (56f36a6)
  • editor: Advance wizard step on Continue instead of applying setup (#28698) (3b15e47)
  • editor: Center sub-node icons and refresh triggers panel icons (#28515) (6739856)
  • editor: Display placeholder sentinels as hint text in setup wizard (#28482) (bb7d137)
  • editor: Gate Instance AI input while setup wizard is open (#28685) (db83a95)
  • editor: Hide setup parameter issue icons until user interacts with input (#28010) (00b0558)
  • editor: Improve disabled Google sign-in button styling and tooltip alignment (#28536) (e848230)
  • editor: Improve setup wizard placeholder detection and card completion scoping (#28474) (d172113)
  • editor: Only show role assignment warning modal when value actually changed (#28387) (9c97931)
  • editor: Prevent setup wizard disappearing on requestId-driven remount (#28473) (04d57c5)
  • editor: Re-initialize SSO store after login to populate OIDC redirect URL (#28386) (21317b8)
  • editor: Refine resource dependency badge (#28087) (f216fda)
  • editor: Reset OIDC form dirty state after saving IdP settings (#28388) (1042350)
  • editor: Reset remote values on credentials change (#26282) (5e11197)
  • editor: Resolve nodes stuck on loading after execution in instance-ai preview (#28450) (c97c3b4)
  • editor: Restore WASM file paths for cURL import in HTTP Request node (#28610) (51bc71e)
  • editor: Show auth type selector in Instance AI workflow setup (#28707) (1b13d32)
  • editor: Show relevant node in workflow activation errors (#26691) (c9cab11)
  • Google Cloud Firestore Node: Fix empty array serialization in jsonToDocument (#28213) (7094395)
  • Google Drive Node: Continue on error support for download file operation (#28276) (30128c9)
  • Google Gemini Node: Determine the file extention from MIME type for image and video operations (#28616) (73659cb)
  • GraphQL Node: Improve error response handling (#28209) (357fb72)
  • HubSpot Node: Rename HubSpot "App Token" auth to "Service Key" (#28479) (8c3e692)
  • HubSpot Trigger Node: Add missing property selectors (#28595) (d179f66)
  • IMAP Node: Fix out-of-memory crash after ECONNRESET on reconnect (#28290) (2d0b231)
  • Link to n8n website broken in n8n forms (#28627) (ff950e5)
  • LinkedIn Node: Update LinkedIn API version in request headers (#28564) (25e07ca)
  • OpenAI Node: Replace hardcoded models with RLC (#28226) (4070930)
  • Schedule Node: Use elapsed-time check to self-heal after missed triggers (#28423) (5f8ab01)
  • Update working memory using tools (#28467) (39189c3)

Features

  • Add deployment_key table, entity, repository, and migration (#28329) (59edd6a)
  • Add Prometheus counters for token exchange (#28453) (c6534fa)
  • AI Gateway credentials endpoint instance url (#28520) (d012346)
  • API: Add missing credential endpoints (GET by ID and test) (#28519) (9a65549)
  • core: Add require-node-description-fields ESLint rule for icon and subtitle (#28400) (5504099)
  • core: Add KeyManagerService for encryption key lifecycle management (#28533) (9dd3e59)
  • core: Configure OIDC settings via env vars (#28185) (36261fb)
  • core: Persist deployment_key entries for stability across restarts and key rotation (#28518) (bb96d2e)
  • core: Support npm dist-tags in community node installation (#28067) (ca871cc)
  • core: Support npm registry token authentication to install private community node packages (#28228) (8b105cc)
  • core: Track workflow action source for external API and MCP requests (#28483) (575c34e)
  • core: Workflow tracing - add workflow version id (#28424) (9a22fe5)
  • editor: Add favoriting for projects, folders, workflows and data tables (#26228) (b1a075f)
  • editor: Enable workflow execution from instance AI preview canvas (#28412) (5b376cb)
  • Enable security policy settings via env vars (#28321) (1108467)
  • Linear Trigger Node: Add signing secret validation (#28522) (3b248ee)
  • MiniMax Chat Model Node: Add MiniMax Chat Model sub-node (#28305) (bd927d9)
  • Slack Node: Add app_home_opened as a dedicated trigger event (#28626) (f1dab3e)

Reverts

  • Make Wait node fully durable by removing in-memory execution path (#28538) (bb9bec3)

@n8n-release-helper n8n-release-helper Bot enabled auto-merge (squash) April 21, 2026 08:40
Copy link
Copy Markdown
Contributor

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 40 files

Architecture diagram
sequenceDiagram
    participant UI as Editor UI
    participant API as Backend API
    participant KMS as KeyManagerService
    participant DB as Database / Repository
    participant Env as Env Vars / OIDC

    Note over API,DB: NEW: System Startup / Key Lifecycle
    API->>KMS: NEW: Initialize Key Management
    KMS->>DB: NEW: Fetch/Persist deployment_key
    Note right of DB: Ensures encryption stability<br/>across restarts/rotation
    DB-->>KMS: deployment_key confirmed

    Note over UI,API: CHANGED: Dynamic Parameter Request
    UI->>API: GET /node/params (dynamic lookup)
    API->>API: CHANGED: Enforce Credential Access Check
    alt User has credential access
        API->>DB: Query node metadata
        DB-->>API: Metadata
        API-->>UI: 200 Return parameters
    else User lacks permission
        API-->>UI: NEW: 403 Forbidden (Strict Security)
    end

    Note over UI,Env: NEW: OIDC / SSO Configuration
    Env->>API: Load OIDC Settings from ENV
    UI->>API: Request Login Flow
    API->>Env: Redirect to OIDC Provider
    Env-->>API: Auth Code
    API->>API: NEW: Re-initialize SSO Store
    API-->>UI: Login Success + Redirect URL

    Note over UI,API: AI Orchestration (Execution)
    UI->>API: Execute AI Agent/Workflow
    loop Max 60 Steps (CHANGED from 5)
        API->>API: Orchestrator Step
        API->>DB: NEW: Scope Artifacts to Current Thread
    end
    API-->>UI: Return Thread-Specific Resources

    Note over API,DB: Task Failure Handling
    alt Parent Task Fails
        API->>API: CHANGED: Cascade-cancel dependent tasks
        API->>DB: Update planned task statuses
    end
Loading

@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 21, 2026

Bundle Report

Bundle size has no change ✅

@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 21, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@n8n-release-helper n8n-release-helper Bot merged commit 6336f0a into release/2.18.0 Apr 21, 2026
58 of 61 checks passed
@n8n-release-helper n8n-release-helper Bot deleted the release-pr/2.18.0 branch April 21, 2026 08:58
@github-actions
Copy link
Copy Markdown
Contributor

Performance Comparison

Comparing currentlatest master14-day baseline

docker-stats

Metric Current Latest Master Baseline (avg) vs Master vs Baseline Status
docker-image-size-runners 386.00 MB 386.00 MB 392.50 MB (σ 11.06) +0.0% -1.7%
docker-image-size-n8n 1269.76 MB 1269.76 MB 1273.60 MB (σ 10.49) +0.0% -0.3%

Idle baseline with Instance AI module loaded

Metric Current Latest Master Baseline (avg) vs Master vs Baseline Status
instance-ai-rss-baseline 344.64 MB 389.20 MB 366.52 MB (σ 22.66) -11.4% -6.0%
instance-ai-heap-used-baseline 187.38 MB 186.52 MB 186.43 MB (σ 0.26) +0.5% +0.5% 🔴

Memory consumption baseline with starter plan resources

Metric Current Latest Master Baseline (avg) vs Master vs Baseline Status
memory-rss-baseline 361.44 MB 278.98 MB 289.99 MB (σ 41.20) +29.6% +24.6% ⚠️
memory-heap-used-baseline 114.44 MB 114.41 MB 114.45 MB (σ 0.27) +0.0% -0.0%
How to read this table
  • Current: This PR's value (or latest master if PR perf tests haven't run)
  • Latest Master: Most recent nightly master measurement
  • Baseline: Rolling 14-day average from master
  • vs Master: PR impact (current vs latest master)
  • vs Baseline: Drift from baseline (current vs rolling avg)
  • Status: ✅ within 1σ | ⚠️ 1-2σ | 🔴 >2σ regression

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant