2.26.0 (2026-06-09)

Bug Fixes

• API: Enforce the redaction floor when creating workflows (#31898) (03eecb1)
• AWS Rekognition Node: Handle all binary data modes correctly (#31065) (e264e06)
• Bump hono and postcss to patch CVEs from Trivy nightly scan (#31790) (0c26304)
• core: Allow exporting workflows with AI Gateway-managed credentials (#31136) (8376a4f)
• core: Bump qs, tmp, uuid, @tootallnate/once (#31674) (868e988)
• core: Dedupe getConnectedNodes results and add fast-check property tests (#31793) (be85b10)
• core: Delete orphaned per-user entries on unshare and membership changes (#31741) (8832194)
• core: Disable iAI e2e tests temporarily (#31779) (91ae2a2)
• core: External agent channels correctly utilise the user ID for episodic memory (#31584) (2a9a23f)
• core: Fix dropdown menu safety triangle (#31583) (ff1a7ae)
• core: Fix hardcoded aud claim in MCP OAuth tokens (#30558) (6bcd02a)
• core: Ground AI workflow completion in saved graph (#31742) (491360f)
• core: Improve validator error messages for name and label fields (#31391) (24f27ed)
• core: Include node and field details in WorkflowHasIssuesError message (#30944) (68b2053)
• core: Invalidate cached redaction floor across mains on change (#31831) (ad59171)
• core: Keep Instance AI builder sandboxes thread-scoped and non-ephemeral (#31745) (2993afb)
• core: Lock execution row during data-only condition re-check (#31547) (f83efe5)
• core: Make AI assistant conversation pruning happen regularly (#31707) (13a1a99)
• core: Make Sentry event loop block detection configurable (#31823) (ddac0e0)
• core: Move instance AI builds to a skill (#31412) (332d2df)
• core: Normalize LangChain parser errors (#31499) (872171c)
• core: Polyfill DOMMatrix when parsing PDFs in Data Loader (#31669) (5e0e266)
• core: Prefer MCP registry nodes when wiring AI Agent tools (#30774) (f4e998f)
• core: Preserve verification failure in budget-exhausted blocked responses (#31907) (f7076a3)
• core: Prevent evaluation executions from stalling in status new (#31619) (ea800f7)
• core: Prevent isUniqueConstraintError false positives (#31284) (a3e37fc)
• core: Reclassify expected backend errors out of the Sentry error stream (#31423) (ecce350)
• core: Report only error class and stack for unhandled node errors (#31628) (364c250)
• core: Resolve custom node icon paths (#30946) (7ab8254)
• core: Restore OIDC login for IdPs returning expires_in: 0 (#31265) (41b2bda)
• core: Resume Instance AI sandboxes that were stopped or deleted while idle (#31761) (06cf1d9)
• core: Show actionable message when OAuth2 token refresh fails (#30460) (5e9a8a0)
• core: Stop parent workflows getting stuck waiting on sub-workflow completion (#31736) (61af45a)
• core: Store OAuth CSRF and PKCE state per-flow in the cache (#31254) (7d729ff)
• core: Strip legacy unsupported config before agent JSON validation (#31577) (255b7a1)
• core: Sub-workflows to respect own timeout settings and global timeout config (#31536) (0b2a632)
• core: Teach the builder the SDK language subset and stop repeated invalid repairs (#31911) (4271d42)
• core: Temporarily disable error card from iAi chat (#31740) (d58b7ea)
• core: The n8n import:workflow --activeState=fromJson cli can fail for subworkflow dependencies (#31377) (e785e4e)
• Declare @smithy/node-http-handler and @aws-sdk (#31562) (485c153)
• Discord Node: Preserve object author in embed JSON for icon_url support (#30046) (cb38338)
• editor: Add evaluation trigger from setup (#31102) (5504361)
• editor: Allow editing IdP mapping rules when SSO is configured v… (#31809) (b9af480)
• editor: Attribute experiment telemetry in PostHog (#31137) (4ea8068)
• editor: Constrain debug overwrite pinned data confirmation modal (#31665) (6e67ffd)
• editor: Copy only selected markdown editor text (#31851) (5036147)
• editor: Load all SSO role mapping rules instead of first page (#31523) (330d441)
• editor: Make project delete dialog backdrop cover the sidebar (#31735) (c02665a)
• editor: Move the AI Assistant status line into the conversation flow (#31811) (4c0628a)
• editor: Persist switching workflow credential resolver back to system resolver (#31703) (f723f54)
• editor: Polish Instance AI panel interactions (#31903) (054c85d)
• editor: Polish private credential pills, callout, and banners (#31604) (7e83c7b)
• editor: Preserve non-string JSON values when importing cURL commands (#31791) (ed09c08)
• editor: Preserve workflow redaction policy under instance floor (#31932) (72ab6d7)
• editor: Reference manage data redaction permission in enforcement dialogs (#31893) (c05a623)
• editor: Reset connection state when switching credential to private (#31713) (b2942b4)
• editor: Show data redaction upgrade prompt on unlicensed instances (#31816) (b755ee4)
• editor: Show error feedback when copying non-duplicatable triggers (#31104) (151fd83)
• editor: Show switch-to-static warning after connecting a private credential (#31712) (f1d87fd)
• Format single-line PEM keys when newlines are stripped on paste (#31129) (ec44980)
• Google Sheets Trigger Node: Custom OAuth option not availble when there are managed credentials (#29933) (a44197c)
• Harden mutation picker against low-value source files (#31914) (7e5c5c4)
• HTTP Request Node: Sign Amazon Bedrock requests as 'bedrock' service (#31250) (9963143)
• Improve Instance AI workflow-builder eval reliability and node diagnostics (#31506) (4e0e0ed)
• LangChain Code Node: Hide node from the node catalogue (#31464) (18d4fdd)
• MCP Client Tool Node: Tie transport lifecycle to execution cancel signal to prevent GET stream leak (#31087) (2a88b50)
• Microsoft Entra Node: Refresh expired OAuth2 tokens (#30943) (ab849d3)
• Postgres Node: Spread array queryReplacement across multiple bind values (#31704) (ee7aa0b)
• Read/Write Files from Disk Node: Escape square brackets in file path selector (#31706) (89ae45f)
• Remove PLAYWRIGHT_BROWSERS_PATH from install-browsers turbo (#31856) (a0df2a3)
• Salesforce Node: Preserve detailed API errors in continueOnFail mode (#30990) (8cfc9d2)
• Slack Node: Normalize multiOptions values when expression returns a string (#31269) (95e4ee7)
• Stabilise midnight-sensitive integration tests and harden CTE (#31901) (4ef9944)
• TheHiveProject Node: Normalize analyzers when expression returns a string (#31580) (43d32fd)
• Use logical-or fallback for GitHub env vars in send-metrics (#31783) (d39d944)

Features

• Add AWS Assume Role support for Bedrock nodes (#28663) (add5ab2)
• Add MCP registry instance AI connections endpoints (#31618) (7efcc31)
• Add support for NVIDIA Nemotron Embeddings Node (#31797) (3dd9c9d)
• API: Expose mfaEnabled field in Public API user endpoints (#25512) (717b860)
• core: Add "Additional scopes" field to OIDC SSO setup (#31708) (f459d73)
• core: Add id-only credential resolution to package import (#31223) (91166af)
• core: Add inline sub-agent delegation (#31553) (73d8bbe)
• core: Add KB tools to orchestrator and planner (#31608) (21d7daa)
• core: Add knowledge base to snapshot image (#31551) (8a245a5)
• core: Add Prometheus metrics for execution data (#31655) (b858fbe)
• core: Add smooth stream options to agents sdk (#31715) (790afbc)
• core: Add sub-agent executions (#31540) (bfff25f)
• core: Add sub-agent session linkage migration (#31534) (25f2d3c)
• core: Add support for per-user connections to MCP servers from the registry in instance AI (#31325) (ee3b277)
• core: Add workflowConflictPolicy to package import (#31798) (05985ba)
• core: Allow stricter-than-floor workflow redaction updates (#31304) (de95eb8)
• core: Apply instance redaction floor to new workflows (#31532) (21db4bc)
• core: Attach executionId and execution deep link to Sentry events (#31645) (7afc32a)
• core: Decouple Instance AI workflow verification from planning (#31340) (52a1a08)
• core: Grant execution owners access to their own redacted data (#31139) (8de9958)
• core: Implement preview-workflow app (#31647) (bef0eda)
• core: Invalidate instance-ai build-workflow cache on canvas edits (#31274) (e27c4fe)
• core: Monitor and recover Postgres connection pool (#31008) (957fdec)
• core: Replace get_suggested_nodes MCP tool with get_workflow_best_practices (#31048) (cc9fa17)
• core: Revamp infisical implementation (#30843) (a82384f)
• core: Signal team-projects availability via MCP search_projects (#31445) (dba4717)
• core: Split API key scopes and let admins see and revoke any key (#31237) (4120447)
• core: Support inline sub-agent difficulty models (#31749) (950e99f)
• core: Track OpenTelemetry usage telemetry (#31570) (c32a33c)
• core: Track redaction policy source on execution runtime data (#31079) (58b0965)
• core: Use maxChildren for sub-agent fanout (#31730) (34f85d9)
• editor: Add Mine and All tabs to the API keys settings (#31239) (1401190)
• editor: Add pagination to MCP workflows table (#31780) (4f3669c)
• editor: Add shared tools-connection modal (#31381) (11dfca2)
• Gate custom telemetry attributes by license (#31723) (b66d33c)
• Google Cloud Storage Node: Add service account authentication (#30928) (b430039)
• Implements AI Assistant empty state workflow previews experiment (#31519) (ef3a560)
• MCP registry servers support extending existing credentials (#31460) (0d7297c)
• NVIDIA Nemotron Chat Model Node: Restrict model selector to supported models (#31698) (ac4778b)
• Trello Node: Add OAuth1 credential support (#30369) (700b1cd)

Performance Improvements

• core: Skip execution data pre-read on full overwrite (#31634) (c8ef1be)
• Reduce Instance AI memory usage (#31656) (7e8c042)