n8n@2.45.2, 2.45.1, 2.45.0 are currently marked Pre-release on GitHub; Docker Hub's stable
floating tag points at 2.44.6 and beta at 2.45.2 (verified live 2026-10-23). This PR targets 2.45.2 (highest tag abra lists / current run target) — the operator may prefer to publish only after
2.45.x stabilises, or hold at 2.44.6.
Operator Action Required
Runtime deprecation warnings observed on 2.45.2 (all warn-only, still functional; no config change made
in this PR): WEBHOOK_URL → N8N_WEBHOOK_URL; N8N_RUNNERS_MODE=internal → external; future default
flips for N8N_UNVERIFIED_PACKAGES_ENABLED, N8N_RUNNERS_TASK_TIMEOUT, N8N_COMPRESSION_NODE_MAX_*.
The recipe only sets WEBHOOK_URL today.
2.45.0 enables node/credential type policies and the durable scheduler by default, and adds automated migrations for removed nodes — users may see migration findings in the UI.
DB: TypeORM migrations auto-run on boot; default mode is sqlite. Optional Postgres path is unchanged
(pgautoupgrade/pgautoupgrade:18-alpine).
No N8N_* env renames, no required compose/volume/label changes across 2.40.5→2.45.2.
Verification
Live dev-n8n chaos deploy on cc-ci at 2.45.2: TypeORM migrations completed cleanly through CreatePromotionRunAndReviewTables1792139680417, task broker/JS runner/scheduler started, editor
accessible, GET /healthz → 200, GET /rest/login → 401 (auth-gated). Deploy torn down; no stack or
volume left behind.
Advisory scan 2.40.5→2.45.2: 0 CVEs identified, but the GitHub advisory sources failed
(unauthenticated rate limit) — the scan is incomplete, not a clean result.
## Recipe upgrade: n8n 2.40.5 → 2.45.2
| service | image | current | new |
|---------|-------|---------|-----|
| app | `n8nio/n8n` | `2.40.5` | **`2.45.2`** |
| db | `pgautoupgrade/pgautoupgrade` | `18-alpine` | `18-alpine` (unchanged — optional Postgres compose only) |
### Upstream release notes
**Upstream release notes:** app n8n 2.40.5→2.45.2: https://github.com/n8n-io/n8n/releases/tag/n8n%402.45.2 (full window: https://github.com/n8n-io/n8n/compare/n8n@2.40.5...n8n@2.45.2)
**Upstream release notes:** db pgautoupgrade 18-alpine: unchanged — https://hub.docker.com/r/pgautoupgrade/pgautoupgrade/tags
### Stability note
`n8n@2.45.2`, `2.45.1`, `2.45.0` are currently marked **Pre-release** on GitHub; Docker Hub's `stable`
floating tag points at **2.44.6** and `beta` at **2.45.2** (verified live 2026-10-23). This PR targets
**2.45.2** (highest tag abra lists / current run target) — the operator may prefer to publish only after
2.45.x stabilises, or hold at 2.44.6.
### Operator Action Required
- Runtime deprecation warnings observed on 2.45.2 (all warn-only, still functional; no config change made
in this PR): `WEBHOOK_URL` → `N8N_WEBHOOK_URL`; `N8N_RUNNERS_MODE=internal` → external; future default
flips for `N8N_UNVERIFIED_PACKAGES_ENABLED`, `N8N_RUNNERS_TASK_TIMEOUT`, `N8N_COMPRESSION_NODE_MAX_*`.
The recipe only sets `WEBHOOK_URL` today.
- 2.45.0 enables **node/credential type policies** and the **durable scheduler** by default, and adds
**automated migrations for removed nodes** — users may see migration findings in the UI.
- Historical API-level deprecations remain in effect (workflow activate/deactivate endpoints,
`Array.merge`→`mergeIntoObject`, decorator-route JSON content-type, workflow-version endpoint,
`/rest/login` `emailOrLdapLoginId`) — HTTP API callers only.
- DB: TypeORM migrations auto-run on boot; default mode is sqlite. Optional Postgres path is unchanged
(`pgautoupgrade/pgautoupgrade:18-alpine`).
- No `N8N_*` env renames, no required compose/volume/label changes across 2.40.5→2.45.2.
### Verification
- Live `dev-n8n` chaos deploy on cc-ci at 2.45.2: TypeORM migrations completed cleanly through
`CreatePromotionRunAndReviewTables1792139680417`, task broker/JS runner/scheduler started, editor
accessible, `GET /healthz` → 200, `GET /rest/login` → 401 (auth-gated). Deploy torn down; no stack or
volume left behind.
- Advisory scan 2.40.5→2.45.2: 0 CVEs identified, **but the GitHub advisory sources failed**
(unauthenticated rate limit) — the scan is incomplete, not a clean result.
- Recipe lint: no errors (only pre-existing R002 healthcheck / R015 long-secret-name warnings).
**Recommended release command (operator, after merge):**
`abra recipe release n8n -y`
Nothing is merged — this PR awaits operator review.
### CI result
`!testme` on this PR head (`41699414`) — **GREEN** (Drone run 84): https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/84
Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). Nothing merged — for operator review.
cc @trav @notplants
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Recipe upgrade: n8n 2.40.5 → 2.45.2
n8nio/n8n2.40.52.45.2pgautoupgrade/pgautoupgrade18-alpine18-alpine(unchanged — optional Postgres compose only)Upstream release notes
Upstream release notes: app n8n 2.40.5→2.45.2: https://github.com/n8n-io/n8n/releases/tag/n8n%402.45.2 (full window: https://github.com/n8n-io/n8n/compare/n8n@2.40.5...n8n@2.45.2)
Upstream release notes: db pgautoupgrade 18-alpine: unchanged — https://hub.docker.com/r/pgautoupgrade/pgautoupgrade/tags
Stability note
n8n@2.45.2,2.45.1,2.45.0are currently marked Pre-release on GitHub; Docker Hub'sstablefloating tag points at 2.44.6 and
betaat 2.45.2 (verified live 2026-10-23). This PR targets2.45.2 (highest tag abra lists / current run target) — the operator may prefer to publish only after
2.45.x stabilises, or hold at 2.44.6.
Operator Action Required
in this PR):
WEBHOOK_URL→N8N_WEBHOOK_URL;N8N_RUNNERS_MODE=internal→ external; future defaultflips for
N8N_UNVERIFIED_PACKAGES_ENABLED,N8N_RUNNERS_TASK_TIMEOUT,N8N_COMPRESSION_NODE_MAX_*.The recipe only sets
WEBHOOK_URLtoday.automated migrations for removed nodes — users may see migration findings in the UI.
Array.merge→mergeIntoObject, decorator-route JSON content-type, workflow-version endpoint,/rest/loginemailOrLdapLoginId) — HTTP API callers only.(
pgautoupgrade/pgautoupgrade:18-alpine).N8N_*env renames, no required compose/volume/label changes across 2.40.5→2.45.2.Verification
dev-n8nchaos deploy on cc-ci at 2.45.2: TypeORM migrations completed cleanly throughCreatePromotionRunAndReviewTables1792139680417, task broker/JS runner/scheduler started, editoraccessible,
GET /healthz→ 200,GET /rest/login→ 401 (auth-gated). Deploy torn down; no stack orvolume left behind.
(unauthenticated rate limit) — the scan is incomplete, not a clean result.
Recommended release command (operator, after merge):
abra recipe release n8n -yNothing is merged — this PR awaits operator review.
CI result
!testmeon this PR head (41699414) — GREEN (Drone run 84): https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/84Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). Nothing merged — for operator review.
cc @trav @notplants
!testme
🌻 cc-ci —
n8n@a144baf1✅ passedfull logs · dashboard
chore: upgrade n8nio/n8n to 2.41.3to chore: upgrade n8nio/n8n to 2.42.2!testme
🌻 cc-ci —
n8n@2f3af95a✅ passedfull logs · dashboard
chore: upgrade n8nio/n8n to 2.42.2to chore: upgrade n8nio/n8n to 2.43.2!testme
🌻 cc-ci —
n8n@b3e67659✅ passedfull logs · dashboard
chore: upgrade n8nio/n8n to 2.43.2to chore: upgrade n8nio/n8n to 2.43.6!testme
🌻 cc-ci —
n8n@1a4e82e1✅ passedfull logs · dashboard
chore: upgrade n8nio/n8n to 2.43.6to chore: upgrade n8nio/n8n to 2.45.2!testme
🌻 cc-ci —
n8n@41699414✅ passedfull logs · dashboard