chore: upgrade n8nio/n8n to 2.39.2 #8

Open
autonomic-bot wants to merge 1 commits from upgrade-ef0dd56 into main
Owner

chore: upgrade n8nio/n8n to 2.39.2

Bumps the app image to the newest available tag: 2.38.4 → 2.39.2 (fresh PR — the previous upgrade PR #7 landed upstream and was released as 3.5.0+2.38.4; mirror main re-synced before this work). Image-tag-only change to the main compose.yml (sqlite mode). No config/env/volume changes; no N8N_* env renames anywhere in 2.35→2.39 (full window re-checked today).

service image current new
app n8nio/n8n 2.38.4 2.39.2
db pgautoupgrade/pgautoupgrade 18-alpine unchanged (already latest)

Upstream release notes:

Operator Action Required:

  • None for the recipe deploy. Rolling upgrade; sqlite mode, TypeORM migrations run automatically on boot — verified live on cc-ci: all 6 new 2.39.x migrations Finished cleanly over existing 2.38.4 data.
  • Informational: 2.39.0 reworked the encryption-key module (always loaded + seeded safely on startup, cached, pluggable write path); 2.39.1 repairs legacy-format data-encryption keys at bootstrap — old-format N8N_ENCRYPTION_KEYs are repaired, not rejected. Verified live with the recipe's injected secret: no key-related errors.
  • HTTP API callers only (no recipe impact): deprecations/behavior changes across the window — 2.33.0 workflow activate/deactivate endpoints (use publish/unpublish); 2.36.0 Array.mergeArray.mergeIntoObject + workflow-tags API migration; 2.37.0 "Any workflow" caller-policy + Content-Type: application/json required on decorator body routes + binary-data endpoint adapt; 2.39.0: old workflow-version path deprecated (new version endpoint).
  • 2.39.x is Pre-release on GitHub (2.38.6 holds the Stable/Latest badge) — consistent with the tracking-the-newest-tag precedent (2.34.2/2.35.2/2.36.3/2.37.3/2.37.6/2.38.4 were all taken pre-release and landed upstream fine).

Recommended release (operator, after merge):

abra recipe release n8n -y

Verified live on cc-ci (2026-09-11): dev deploy of this PR head (--chaos) converged — Recorded version change: 2.38.4 -> 2.39.2, all migrations clean, editor HTTPS 200, healthz ok; dev deploy torn down after. Advisory scan for the 2.38.4→2.39.2 window: 0 CVEs fixed, 0 unjudged, no failed sources. Tested via !testme on this PR.

Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.

cc @trav @notplants

## chore: upgrade n8nio/n8n to 2.39.2 Bumps the app image to the newest available tag: **2.38.4 → 2.39.2** (fresh PR — the previous upgrade PR #7 landed upstream and was released as `3.5.0+2.38.4`; mirror main re-synced before this work). Image-tag-only change to the main compose.yml (sqlite mode). No config/env/volume changes; **no `N8N_*` env renames anywhere in 2.35→2.39** (full window re-checked today). | service | image | current | new | |---------|-------|---------|-----| | app | n8nio/n8n | 2.38.4 | **2.39.2** | | db | pgautoupgrade/pgautoupgrade | 18-alpine | unchanged (already latest) | **Upstream release notes:** - app 2.38.4→2.39.2: https://github.com/n8n-io/n8n/releases — 2.38.5 (job-error reporting fix), 2.38.6 (source-control push memory bound; holds the Stable/Latest badge), **2.39.0** (feature minor: source-control push/pull + status in the public API; workflow version endpoint, old two-variable path deprecated; Instance reporting module; opt-in Instance AI concurrency limits; OTLP gRPC for OpenTelemetry; Atlassian Service Account 2LO for Confluence/Jira; MS Teams channel messages + Online Meetings; encryption-key module rework), 2.39.1 (repairs legacy-format data-encryption keys during bootstrap), 2.39.2 (pairedItem memoization, consent-grant reuse, Instance AI sandbox-copy perf). No breaking compose/config/migration changes. - Per-version: https://github.com/n8n-io/n8n/releases/tag/n8n@2.39.0 · https://github.com/n8n-io/n8n/releases/tag/n8n@2.39.1 · https://github.com/n8n-io/n8n/releases/tag/n8n@2.39.2 **Operator Action Required:** - None for the recipe deploy. Rolling upgrade; sqlite mode, TypeORM migrations run automatically on boot — verified live on cc-ci: all 6 new 2.39.x migrations `Finished` cleanly over existing 2.38.4 data. - Informational: 2.39.0 reworked the encryption-key module (always loaded + seeded safely on startup, cached, pluggable write path); 2.39.1 repairs legacy-format data-encryption keys at bootstrap — old-format `N8N_ENCRYPTION_KEY`s are repaired, not rejected. Verified live with the recipe's injected secret: no key-related errors. - HTTP API callers only (no recipe impact): deprecations/behavior changes across the window — 2.33.0 workflow activate/deactivate endpoints (use publish/unpublish); 2.36.0 `Array.merge`→`Array.mergeIntoObject` + workflow-tags API migration; 2.37.0 "Any workflow" caller-policy + `Content-Type: application/json` required on decorator body routes + binary-data endpoint adapt; **2.39.0: old workflow-version path deprecated (new version endpoint)**. - 2.39.x is Pre-release on GitHub (2.38.6 holds the Stable/Latest badge) — consistent with the tracking-the-newest-tag precedent (2.34.2/2.35.2/2.36.3/2.37.3/2.37.6/2.38.4 were all taken pre-release and landed upstream fine). **Recommended release (operator, after merge):** abra recipe release n8n -y Verified live on cc-ci (2026-09-11): dev deploy of this PR head (`--chaos`) converged — `Recorded version change: 2.38.4 -> 2.39.2`, all migrations clean, editor HTTPS 200, `healthz` ok; dev deploy torn down after. Advisory scan for the 2.38.4→2.39.2 window: 0 CVEs fixed, 0 unjudged, no failed sources. Tested via `!testme` on this PR. Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review. cc @trav @notplants
autonomic-bot added 1 commit 2026-09-11 07:32:11 +00:00
autonomic-bot requested review from trav 2026-09-11 07:32:11 +00:00
autonomic-bot requested review from notplants 2026-09-11 07:32:11 +00:00
Author
Owner

!testme

!testme
Author
Owner

🌻 cc-cin8n @ ef0dd56a passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `n8n` @ `ef0dd56a` ✅ **passed** [![cc-ci result card](https://ci.commoninternet.net/runs/1357/summary.png)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1357) [![level](https://ci.commoninternet.net/runs/1357/badge.svg)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1357) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1357) · [dashboard](https://ci.commoninternet.net/)
All checks were successful
cc-ci/testme cc-ci: success
You are not authorized to merge this pull request.
This pull request can be merged automatically.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin upgrade-ef0dd56:upgrade-ef0dd56
git checkout upgrade-ef0dd56
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: recipe-maintainers/n8n#8