shortstacked

fix: Align release Docker image build with lockfile (no-changelog)

2

## Summary The previous method for building standard release Docker images used `npm install -g n8n@VERSION`. This did not respect the versions pinned in `pnpm-lock.yaml`, leading to installations of potentially...

Mitigates command injection vulnerability by adding a pre-job to validate the 'version' input before use in downstream jobs. Downstream jobs now consume the validated output safely. Remove unit-tests-dispatch.yml. ## Summary...

feat: Migrate Test Workflows to Main Repo

1

## Summary * **Migrated Test Workflows:** Migrated all test workflows into the `n8n` repository (`test-workflows/` directory). * **Added Setup Action:** Created a new composite GitHub Action for Node.js/pnpm environment setup...

ci: Enforce codecov checks for node components (no-changelog)

1

This will stop any nodes components from being committed if they decrease the overall code coverage for the nodes components. ## Summary https://linear.app/n8n/issue/CAT-856/nodes-enforce-code-coverage-checks ## Related Linear tickets, Github issues, and...

fix: Close NDV using correct button (no-changelog)

1

The test was failing due to how Cypress runs in headless vs non headless mode. Esc not always being registered etc. ## Summary Fixes the failing project test. ## Related...

## Summary This adds a nightly Trivy scan for our docker images. It builds from master, and publishes the results to the mission-security Slack channel. ## Related Linear tickets, Github...

ci: Implement reusable workflow for PR job eligibility checks (no-changelog)

3

Introduces a reusable workflow (`check-run-eligibility.yml`) to standardize the logic for determining if PR-triggered jobs should run. Integrated this new eligibility check into: - `PR E2E` workflow (replacing the `get-metadata` job)...

## Summary Skips the subworkflow input tests temporarily. ## Related Linear tickets, Github issues, and Community forum posts ## Review / Merge checklist - [ ] PR title and summary...

ci: Reuse common build actions and fix turbo outputs (no-changelog)

1

Reuse build action for setup/install/build/cache across multiple jobs. Fix outputs for Turbo cache code coverage reports. ## Summary Turbo wasn't restoring the test results or code coverage files when it...

fix: Update task runners to latest

2

## Summary Addresses - CVE-2025-61729 - CVE-2025-61727 ## Related Linear tickets, Github issues, and Community forum posts ## Review / Merge checklist - [ ] PR title and summary are...