chore(deps): update dependency n8n to v1.49.0

[uniget-bot]

This PR contains the following updates:

Package	Update	Change
n8n (source)	minor	1.48.3 -> 1.49.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

n8n-io/n8n (n8n)

v1.49.0

Compare Source

Bug Fixes

• core: Add a WebCrypto Polyfill for older versions of Node.js 18 (#​9894) (59c8bf1)
• core: Don't allow using credentials that are not part of the same project (#​9916) (ab2a548)
• core: Filter out certain executions from crash recovery (#​9904) (7044d1c)
• core: Fix AddActivatedAtUserSetting migration on MariaDB (#​9910) (db29e84)
• core: Fix execution cancellation in scaling mode (#​9841) (e613de2)
• core: Fix worker logs relay (#​9919) (7c53433)
• core: Throw on adding execution without execution data (#​9903) (abb7458)
• editor: Don't try to load credentials on the demo route (#​9926) (b80df2a)
• editor: Enable expression preview in SQL node when looking at executions (#​9733) (d9747d5)
• editor: Fix frontend project roles (#​9901) (f229577)
• editor: Fix new node credential creation via Resource Locator Component (#​9896) (55cbc90)
• editor: Fix performance issues related to expressions and pinned data (#​9882) (13d83f2)
• editor: Improve text wrapping in schema view (#​9888) (dc1c5fc)
• Execute Workflow Node: Continue on fail behaviour not correctly implemented (#​9890) (16b1a09)
• LinkedIn Node: Fix issue with legacy credential no longer working (#​9912) (873b7e5)

Features

• Add Zep Cloud Memory component (#​9657) (41c47a2)
• Copper Node: Update credential to support HTTP Request node (#​9837) (e6ad5a7)
• editor: Add docs sidebar to credential modal (#​9914) (b2f8ea7)
• editor: Remove Segment (#​9878) (10f7d4b)
• Embeddings Cohere Node: Add v3 Cohere models (#​9887) (403e19b)
• GitHub Node: Add support for state reasons when editing an issue (#​9848) (61c20d1)
• Introduce debug info button (#​9895) (be9a247)
• Merge Node: Overhaul, v3 (#​9528) (af69c80)
• Vector Store Tool Node: Add Vector Store Tool (#​9865) (df2bc84)
• Zammad Node: Add reply_to and sender fields to article on ticket creation (#​9911) (957b2d6)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[nicholasdille-bot]

Auto-approved because label type/renovate is present.

[github-actions]

🔍 Vulnerabilities of ghcr.io/uniget-org/tools/n8n:1.49.0

📦 Image Reference ghcr.io/uniget-org/tools/n8n:1.49.0

digest	sha256:9f519040763c7b15665fcbd78a1df641226da715cb31403a863dd43c02da980b
vulnerabilities
platform	linux/amd64
size	150 MB
packages	1345

pdfjs-dist 2.16.105 (npm) pkg:npm/pdfjs-dist@2.16.105 Affected range <=4.1.392 Fixed version 4.2.67 Description Impact If pdf.js is used to load a malicious PDF, and PDF.js is configured with isEvalSupported set to true (which is the default value), unrestricted attacker-controlled JavaScript will be executed in the context of the hosting domain. Patches The patch removes the use of eval: mozilla/pdf.js#18015 Workarounds Set the option isEvalSupported to false. References https://bugzilla.mozilla.org/show_bug.cgi?id=1893645

semver 5.3.0 (npm) pkg:npm/semver@5.3.0 Inefficient Regular Expression Complexity Affected range <5.7.2 Fixed version 5.7.2 CVSS Score 5.3 CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Description Versions of the package semver before 7.5.2 on the 7.x branch, before 6.3.1 on the 6.x branch, and all other versions before 5.7.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.

identity 3.4.2 (npm) pkg:npm/%40azure/identity@3.4.2 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Affected range <4.2.1 Fixed version 4.2.1 CVSS Score 5.5 CVSS Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Description Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability.

[github-actions]

Attempting automerge. See https://github.com/uniget-org/tools/actions/runs/9888191964.

[github-actions]

PR is clean and can be merged. See https://github.com/uniget-org/tools/actions/runs/9888191964.