chore(deps): update dependency n8n to v1.51.1

[uniget-bot]

This PR contains the following updates:

Package	Update	Change
n8n (source)	minor	1.50.2 -> 1.51.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

n8n-io/n8n (n8n)

v1.51.1

Compare Source

Bug Fixes

• core: Fix SSH Tunnels when using private key (#​10148) (6209d18)
• core: Metadata inserts using existing IDs and failing with postgres (#​10108) (0b78789)
• editor: Fix updating/uninstalling community nodes (#​10138) (637dde1)

v1.51.0

Compare Source

Bug Fixes

• AMQP Sender Node: Node hangs forever on disconnect (#​10026) (27410ab)
• AMQP Trigger Node: Manual execution updated error reduced wait time (#​10035) (f78f4ea)
• AWS Comprehend Node: Add paired item support (#​10015) (470d496)
• core: Ensure executions cannot resume if already running (#​10014) (d651be4)
• core: Redact csrfSecret when returning oauth credentials to the frontend (#​10075) (48f047e)
• core: Stopping an execution should reject any response promises (#​9992) (36b314d)
• editor: Ensure all static assets are accessible from the server (#​10062) (3bde845)
• editor: Handle disabled nodes in schema view (#​10052) (ab5688c)
• editor: Make schema view use the correct output (#​10016) (c29664d)
• editor: Provide autocomplete for nodes, even when intermediate node has not run (#​10036) (46d6edc)
• editor: Remove push event listeners when migrating away from the canvas (#​10063) (0d12f0a)
• editor: Use selected input item for autocomplete (#​10019) (1d2b403)
• Email Trigger (IMAP) Node: Reconnect not working correctly (#​10064) (68d5d7e)
• Filter component - array contains comparison not correct when ignore case option set to true (#​10012) (4a3b97c)
• GitHub Node: File Create operation prevent duplicated base64 encoding (#​10040) (9bcc926)
• HTTP Request Node: Respect the original encoding of the incoming response (#​9869) (2d19aef)
• HTTP Request tool - allow hyphens in placeholders (#​10037) (8cd9370)
• HTTP Request tool - do not error on missing headers (#​10044) (04b62e0)
• HubSpot Node: Migrate from v2 owners api (#​10013) (56dd491)
• Number input defaults to 0 not allowing to have arbitrary precision (#​10021) (e4e66ab)
• OpenAI Chat Model Node: Respect baseURL override for /models (#​10076) (e5dda57)
• Telegram Trigger Node: Fix issue with videos not being downloaded (#​10007) (e84ab35)
• Webhook Node: Binary property option name and description update (#​10043) (9302e33)

Features

• Asana Node: Add support for project privacy settings (#​10027) (429481c)
• Better error when calling expression function on input that is undefined or null (#​10009) (519e57b)
• editor: Make expression autocomplete search case-insensitive (#​10017) (cde6fe9)
• editor: Tweak node creator search logic for AI sub-nodes (#​10025) (7db1656)
• Google Vertex Chat Model Node: Add support for Google Vertex AI Chat models (#​9970) (071130a)
• Postgres Chat Memory Node: Implement Postgres Chat Memory node (#​10071) (9cbbb63)
• Text Classifier Node: Add Text Classifier Node (#​9997) (28ca7d6)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[nicholasdille-bot]

Auto-approved because label type/renovate is present.

[github-actions]

🔍 Vulnerabilities of ghcr.io/uniget-org/tools/n8n:1.51.1

📦 Image Reference ghcr.io/uniget-org/tools/n8n:1.51.1

digest	sha256:34295beaa21133b410ca5acef06a8729e3ed12c9d2ef09f8cd22a5292e8cd8eb
vulnerabilities
platform	linux/amd64
size	156 MB
packages	1386

protobufjs 7.2.4 (npm) pkg:npm/[email protected] Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Affected range >=7.0.0 <7.2.5 Fixed version 7.2.5 CVSS Score 9.8 CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Description protobuf.js (aka protobufjs) 6.10.0 until 6.11.4 and 7.0.0 until 7.2.4 allows Prototype Pollution, a different vulnerability than CVE-2022-25878. A user-controlled protobuf message can be used by an attacker to pollute the prototype of Object.prototype by adding and overwriting its data and functions. Exploitation can involve: (1) using the function parse to parse protobuf messages on the fly, (2) loading .proto files by using load/loadSync functions, or (3) providing untrusted input to the functions ReflectionObject.setParsedOption and util.setProperty. NOTE: this CVE Record is about Object.constructor.prototype.<new-property> = ...; whereas CVE-2022-25878 was about Object.__proto__.<new-property> = ...; instead.

pdfjs-dist 2.16.105 (npm) pkg:npm/[email protected] Affected range <=4.1.392 Fixed version 4.2.67 Description Impact If pdf.js is used to load a malicious PDF, and PDF.js is configured with isEvalSupported set to true (which is the default value), unrestricted attacker-controlled JavaScript will be executed in the context of the hosting domain. Patches The patch removes the use of eval: mozilla/pdf.js#18015 Workarounds Set the option isEvalSupported to false. References https://bugzilla.mozilla.org/show_bug.cgi?id=1893645

semver 5.3.0 (npm) pkg:npm/[email protected] Inefficient Regular Expression Complexity Affected range <5.7.2 Fixed version 5.7.2 CVSS Score 5.3 CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Description Versions of the package semver before 7.5.2 on the 7.x branch, before 6.3.1 on the 6.x branch, and all other versions before 5.7.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.

identity 3.4.2 (npm) pkg:npm/%40azure/[email protected] Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Affected range <4.2.1 Fixed version 4.2.1 CVSS Score 5.5 CVSS Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Description Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability.

[github-actions]

Attempting automerge. See https://github.com/uniget-org/tools/actions/runs/10080578511.

[github-actions]

PR is clean and can be merged. See https://github.com/uniget-org/tools/actions/runs/10080578511.