Bumps the app image to the newest available tag: 2.38.4 → 2.39.2 (fresh PR — the previous upgrade PR #7 landed upstream and was released as 3.5.0+2.38.4; mirror main re-synced before this work). Image-tag-only change to the main compose.yml (sqlite mode). No config/env/volume changes; no N8N_* env renames anywhere in 2.35→2.39 (full window re-checked today).
service
image
current
new
app
n8nio/n8n
2.38.4
2.39.2
db
pgautoupgrade/pgautoupgrade
18-alpine
unchanged (already latest)
Upstream release notes:
app 2.38.4→2.39.2: https://github.com/n8n-io/n8n/releases — 2.38.5 (job-error reporting fix), 2.38.6 (source-control push memory bound; holds the Stable/Latest badge), 2.39.0 (feature minor: source-control push/pull + status in the public API; workflow version endpoint, old two-variable path deprecated; Instance reporting module; opt-in Instance AI concurrency limits; OTLP gRPC for OpenTelemetry; Atlassian Service Account 2LO for Confluence/Jira; MS Teams channel messages + Online Meetings; encryption-key module rework), 2.39.1 (repairs legacy-format data-encryption keys during bootstrap), 2.39.2 (pairedItem memoization, consent-grant reuse, Instance AI sandbox-copy perf). No breaking compose/config/migration changes.
None for the recipe deploy. Rolling upgrade; sqlite mode, TypeORM migrations run automatically on boot — verified live on cc-ci: all 6 new 2.39.x migrations Finished cleanly over existing 2.38.4 data.
Informational: 2.39.0 reworked the encryption-key module (always loaded + seeded safely on startup, cached, pluggable write path); 2.39.1 repairs legacy-format data-encryption keys at bootstrap — old-format N8N_ENCRYPTION_KEYs are repaired, not rejected. Verified live with the recipe's injected secret: no key-related errors.
HTTP API callers only (no recipe impact): deprecations/behavior changes across the window — 2.33.0 workflow activate/deactivate endpoints (use publish/unpublish); 2.36.0 Array.merge→Array.mergeIntoObject + workflow-tags API migration; 2.37.0 "Any workflow" caller-policy + Content-Type: application/json required on decorator body routes + binary-data endpoint adapt; 2.39.0: old workflow-version path deprecated (new version endpoint).
2.39.x is Pre-release on GitHub (2.38.6 holds the Stable/Latest badge) — consistent with the tracking-the-newest-tag precedent (2.34.2/2.35.2/2.36.3/2.37.3/2.37.6/2.38.4 were all taken pre-release and landed upstream fine).
Recommended release (operator, after merge):
abra recipe release n8n -y
Verified live on cc-ci (2026-09-11): dev deploy of this PR head (--chaos) converged — Recorded version change: 2.38.4 -> 2.39.2, all migrations clean, editor HTTPS 200, healthz ok; dev deploy torn down after. Advisory scan for the 2.38.4→2.39.2 window: 0 CVEs fixed, 0 unjudged, no failed sources. Tested via !testme on this PR.
Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.
## chore: upgrade n8nio/n8n to 2.39.2
Bumps the app image to the newest available tag: **2.38.4 → 2.39.2** (fresh PR — the previous upgrade PR #7 landed upstream and was released as `3.5.0+2.38.4`; mirror main re-synced before this work). Image-tag-only change to the main compose.yml (sqlite mode). No config/env/volume changes; **no `N8N_*` env renames anywhere in 2.35→2.39** (full window re-checked today).
| service | image | current | new |
|---------|-------|---------|-----|
| app | n8nio/n8n | 2.38.4 | **2.39.2** |
| db | pgautoupgrade/pgautoupgrade | 18-alpine | unchanged (already latest) |
**Upstream release notes:**
- app 2.38.4→2.39.2: https://github.com/n8n-io/n8n/releases — 2.38.5 (job-error reporting fix), 2.38.6 (source-control push memory bound; holds the Stable/Latest badge), **2.39.0** (feature minor: source-control push/pull + status in the public API; workflow version endpoint, old two-variable path deprecated; Instance reporting module; opt-in Instance AI concurrency limits; OTLP gRPC for OpenTelemetry; Atlassian Service Account 2LO for Confluence/Jira; MS Teams channel messages + Online Meetings; encryption-key module rework), 2.39.1 (repairs legacy-format data-encryption keys during bootstrap), 2.39.2 (pairedItem memoization, consent-grant reuse, Instance AI sandbox-copy perf). No breaking compose/config/migration changes.
- Per-version: https://github.com/n8n-io/n8n/releases/tag/n8n@2.39.0 · https://github.com/n8n-io/n8n/releases/tag/n8n@2.39.1 · https://github.com/n8n-io/n8n/releases/tag/n8n@2.39.2
**Operator Action Required:**
- None for the recipe deploy. Rolling upgrade; sqlite mode, TypeORM migrations run automatically on boot — verified live on cc-ci: all 6 new 2.39.x migrations `Finished` cleanly over existing 2.38.4 data.
- Informational: 2.39.0 reworked the encryption-key module (always loaded + seeded safely on startup, cached, pluggable write path); 2.39.1 repairs legacy-format data-encryption keys at bootstrap — old-format `N8N_ENCRYPTION_KEY`s are repaired, not rejected. Verified live with the recipe's injected secret: no key-related errors.
- HTTP API callers only (no recipe impact): deprecations/behavior changes across the window — 2.33.0 workflow activate/deactivate endpoints (use publish/unpublish); 2.36.0 `Array.merge`→`Array.mergeIntoObject` + workflow-tags API migration; 2.37.0 "Any workflow" caller-policy + `Content-Type: application/json` required on decorator body routes + binary-data endpoint adapt; **2.39.0: old workflow-version path deprecated (new version endpoint)**.
- 2.39.x is Pre-release on GitHub (2.38.6 holds the Stable/Latest badge) — consistent with the tracking-the-newest-tag precedent (2.34.2/2.35.2/2.36.3/2.37.3/2.37.6/2.38.4 were all taken pre-release and landed upstream fine).
**Recommended release (operator, after merge):**
abra recipe release n8n -y
Verified live on cc-ci (2026-09-11): dev deploy of this PR head (`--chaos`) converged — `Recorded version change: 2.38.4 -> 2.39.2`, all migrations clean, editor HTTPS 200, `healthz` ok; dev deploy torn down after. Advisory scan for the 2.38.4→2.39.2 window: 0 CVEs fixed, 0 unjudged, no failed sources. Tested via `!testme` on this PR.
Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.
cc @trav @notplants
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
chore: upgrade n8nio/n8n to 2.39.2
Bumps the app image to the newest available tag: 2.38.4 → 2.39.2 (fresh PR — the previous upgrade PR #7 landed upstream and was released as
3.5.0+2.38.4; mirror main re-synced before this work). Image-tag-only change to the main compose.yml (sqlite mode). No config/env/volume changes; noN8N_*env renames anywhere in 2.35→2.39 (full window re-checked today).Upstream release notes:
Operator Action Required:
Finishedcleanly over existing 2.38.4 data.N8N_ENCRYPTION_KEYs are repaired, not rejected. Verified live with the recipe's injected secret: no key-related errors.Array.merge→Array.mergeIntoObject+ workflow-tags API migration; 2.37.0 "Any workflow" caller-policy +Content-Type: application/jsonrequired on decorator body routes + binary-data endpoint adapt; 2.39.0: old workflow-version path deprecated (new version endpoint).Recommended release (operator, after merge):
abra recipe release n8n -y
Verified live on cc-ci (2026-09-11): dev deploy of this PR head (
--chaos) converged —Recorded version change: 2.38.4 -> 2.39.2, all migrations clean, editor HTTPS 200,healthzok; dev deploy torn down after. Advisory scan for the 2.38.4→2.39.2 window: 0 CVEs fixed, 0 unjudged, no failed sources. Tested via!testmeon this PR.Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.
cc @trav @notplants
!testme
🌻 cc-ci —
n8n@ef0dd56a✅ passedfull logs · dashboard
View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.