chore(deps): update dependency n8n to v1.56.2

[uniget-bot]

This PR contains the following updates:

Package	Update	Change
n8n (source)	minor	1.55.3 -> 1.56.2

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

n8n-io/n8n (n8n)

v1.56.2

Compare Source

Bug Fixes

• core: Stop explicit redis client disconnect on shutdown (#​10551) (7b33c94)

v1.56.1

Compare Source

Bug Fixes

• core: Restore Redis cache key (#​10520) (4d7d15f)
• core: Scheduler tasks should not trigger on follower instances (#​10507) (819499c)

v1.56.0

Compare Source

Bug Fixes

• Better errors in Switch, If and Filter nodes (#​10457) (aea82cb)
• Calendly Trigger Node: Fix issue with webhook url matching (#​10378) (09c3a8b)
• core: Fix payload property in workflow-post-execute event (#​10413) (d98e29e)
• core: Fix XSS validation and separate URL validation (#​10424) (91467ab)
• core: Replace sanitize-html with xss in XSS validator constraint (#​10479) (5dea51a)
• core: Use class-validator with XSS check for survey answers (#​10490) (547a606)
• core: Use explicit types in configs to ensure valid decorator metadata (#​10433) (2043daa)
• editor: Add workflow scopes when initializing workflow (#​10455) (b857c2c)
• editor: Buffer json chunks in stream response (#​10439) (37797f3)
• editor: Fix flaky mapping tests (#​10453) (fc6d413)
• editor: Fix overflow in AI Assistant chat messages (#​10491) (4a6ca63)
• editor: Highlight matching type in filter component (#​10425) (6bca879)
• editor: Show item count in output panel schema view (#​10426) (4dee7cc)
• editor: Truncate long data pill labels in schema view (#​10427) (1bf2f4f)
• Filter component - improve errors (#​10456) (61ac0c7)
• Google Sheets Node: Better error when column to match on is empty (#​10442) (ce46bf5)
• Google Sheets Node: Update name and hint for useAppend option (#​10443) (c5a0c04)
• Google Sheets Node: Update to returnAllMatches option (#​10440) (f7fb02e)
• Invoice Ninja Node: Fix payment types (#​10462) (129245d)
• n8n Form Trigger Node: Show basic authentication modal on wrong credentials (#​10423) (0dc3e99)
• OpenAI Node: Throw node operations error in case of openAi client error (#​10448) (0d3ed46)
• Project Viewer always seeing a connection error when testing credentials (#​10417) (613cdd2)
• Remove unimplemented Postgres credentials options (#​10461) (17ac784)
• Rename Assistant back (#​10481) (c410aed)
• Require mfa code to change email (#​10354) (39c8e50)
• Respond to Webhook Node: Fix issue preventing the chat trigger from working (#​9886) (9d6ad88)
• Show input names when node has multiple inputs (#​10434) (973956c)
• Toggl Trigger Node: Update API version (#​10207) (9bdb1d6)

Features

• core: Support bidirectional communication between specific mains and specific workers (#​10377) (d0fc9de)
• Facebook Graph API Node: Update node to support API v18 - v20 (#​10419) (e7ee10f)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[nicholasdille-bot]

Auto-approved because label type/renovate is present.

[github-actions]

🔍 Vulnerabilities of ghcr.io/uniget-org/tools/n8n:1.56.2

📦 Image Reference ghcr.io/uniget-org/tools/n8n:1.56.2

digest	sha256:f4ef84b4c487ee6f983138c6b5ed11f4acbe97d4d375a85ed158195fcb6ba3d1
vulnerabilities
platform	linux/amd64
size	143 MB
packages	1346

pdfjs-dist 2.16.105 (npm) pkg:npm/[email protected] Affected range <=4.1.392 Fixed version 4.2.67 Description Impact If pdf.js is used to load a malicious PDF, and PDF.js is configured with isEvalSupported set to true (which is the default value), unrestricted attacker-controlled JavaScript will be executed in the context of the hosting domain. Patches The patch removes the use of eval: mozilla/pdf.js#18015 Workarounds Set the option isEvalSupported to false. References https://bugzilla.mozilla.org/show_bug.cgi?id=1893645

fast-xml-parser 4.2.5 (npm) pkg:npm/[email protected] Uncontrolled Resource Consumption Affected range <4.4.1 Fixed version 4.4.1 CVSS Score 7.5 CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Description Summary A ReDOS exists on currency.js was discovered by Gauss Security Labs R&D team. Details https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/src/v5/valueParsers/currency.js#L10 contains a vulnerable regex PoC pass the following string '\t'.repeat(13337) + '.' Impact Denial of service during currency parsing in experimental version 5 of fast-xml-parser-library https://gauss-security.com

axios 1.6.7 (npm) pkg:npm/[email protected] Server-Side Request Forgery (SSRF) Affected range >=1.3.2 <=1.7.3 Fixed version 1.7.4 Description axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.

semver 5.3.0 (npm) pkg:npm/[email protected] Inefficient Regular Expression Complexity Affected range <5.7.2 Fixed version 5.7.2 CVSS Score 7.5 CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Description Versions of the package semver before 7.5.2 on the 7.x branch, before 6.3.1 on the 6.x branch, and all other versions before 5.7.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.

identity 3.4.2 (npm) pkg:npm/%40azure/[email protected] Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Affected range <4.2.1 Fixed version 4.2.1 CVSS Score 5.5 CVSS Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Description Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability.

[github-actions]

Attempting automerge. See https://github.com/uniget-org/tools/actions/runs/10600827516.

[github-actions]

PR is clean and can be merged. See https://github.com/uniget-org/tools/actions/runs/10600827516.