chore(deps): update ghcr.io/n8n-io/n8n docker tag to v2.30.4

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/n8n-io/n8n (source)	minor	2.29.10 → 2.30.4

---

Release Notes

n8n-io/n8n (ghcr.io/n8n-io/n8n)

v2.30.0

Bug Fixes

• AI Agent Node: Preserve parallel tool call structure in chat memory (#​32481) (387bb73)
• AI Agent Node: Return intermediate steps when no tools are used (#​33450) (3ac2495)
• ai-builder: Prevent snapshot staging races during concurrent sandbox creation (#​33342) (7d946c3)
• API: Only exclude running executions from the public executions list (#​32657) (ae50852)
• Avoid stack overflow on large search result sets (#​33050) (3915aba)
• AWS Bedrock Chat Model Node: Validate regions from ARNs and IAM credentials (#​33638) (3ed8be9)
• Basic LLM Chain Node: Prevent "Failed to parse agent steps" error (#​33338) (a62f0e3)
• Block manual project member changes when project roles are managed (#​33270) (36aa28b)
• Broaden secret detection in browser tool snapshots (#​33528) (48024f2)
• Calendly Trigger Node: Request required OAuth2 scopes for Calendly API (#​33286) (9b9c3dd)
• core: Add environment variable to configure redis tls serverName (#​31220) (161d595)
• core: Allow-list models that support sampling parameters (#​33667) (5ebce06)
• core: Await in-flight insights compaction when stopping the timer (#​33258) (8c7167f)
• core: Ensure the system credential resolver exists on all main instances (#​33393) (c3898fb)
• core: Guard against undefined node parameters in webhook path indexing (#​33366) (f1582f5)
• core: Guard connection pool idle checks during cleanup (#​31059) (84ee38e)
• core: Honor target version in migration report (#​33671) (ca589e9)
• core: Improve error message for registry network failures (#​31276) (5af86c5)
• core: Improve external secrets provider failure logs (#​33104) (e01bb9e)
• core: Improve Instance AI workflow-building reliability (#​33530) (2be4092)
• core: Improve OTEL error type handling (#​33519) (7e738ca)
• core: Include workflow tags in get_workflow_details MCP tool (#​33219) (b3efecc)
• core: Keep the user message when a run is stopped before it starts (#​33318) (78ca212)
• core: Load tools for MCP registry connections from the server (#​33542) (f18443d)
• core: Make agent execution project-scoped so published workflows in team projects can message agents (#​33459) (e9e2dd6)
• core: Persist AI Assistant domain-access approvals across restarts and mains (#​33454) (d448379)
• core: Pin langgraph and langgraph-checkpoint to prevent broken npm installs (#​33536) (4cca307)
• core: Preserve Date values passed to the expression isolate (#​33322) (9410e96)
• core: Preserve Instance AI agent activity when its run snapshot is empty (#​33557) (e46e321)
• core: Preserve Instance AI output for runs stopped before completion (#​33335) (2472df8)
• core: Prevent Code node failure when a workflow contains an AI tool (#​33336) (fea03a9)
• core: Prevent duplicate zod instances that break npm installs (#​33463) (39a2093)
• core: Reject reserved system column names when creating data tables (#​27064) (dbb7fa4)
• core: Resolve private credentials in offloaded manual executions (#​33214) (e9a9088)
• core: Restore node-cli eslint peer to a range (#​33196) (963c7f8)
• core: Retry initial database connection on startup (#​33647) (e4711b9)
• core: Return a client error when the request body stream is unreadable (#​33243) (4f4e252)
• core: Return Data Table rows in a deterministic order when paginating (#​33358) (e130a22)
• core: Roll back failed community package updates (#​33256) (63d28b3)
• core: Send Digest auth credentials only after the server challenge (#​32673) (969e36e)
• core: Skip AI Gateway managed credentials in pre-execution permission check (#​33269) (38b99af)
• core: Surface the underlying cause on OAuth callback errors (#​33390) (546ee30)
• core: Validate data-table CSV uploads by file extension (#​33275) (8aa4c71)
• editor: Align parameter input sizes (#​33309) (da1a58e)
• editor: Gate tag write actions in UI behind RBAC scopes (#​33378) (99cf776)
• editor: Generate actions for nodes using a flat Action field across versions (#​33568) (b94b2cf)
• editor: Hide "Needs first setup" badge for private credentials (#​33392) (62aa7b1)
• editor: Hide custom scopes for managed OAuth credentials edited from the list (#​33432) (29aa414)
• editor: Include base path in View sub-execution links (#​33069) (a6e7880)
• editor: Keep Instance AI preview manual execution across tab switches (#​33179) (e5e018e)
• editor: Limit assistant resource auto-linking (#​33389) (e18501f)
• editor: Preserve chat input scroll position when editing text mid-content (#​33619) (2895236)
• editor: Prevent duplicate AI Gateway unsupported-action notice (#​33428) (cb039e0)
• editor: Reconcile Data Table column schema on node open (#​29935) (269895f)
• editor: Reliably auto-open template credential setup modal (#​33281) (608a222)
• editor: Render parameter popout editors above the credential modal (#​33202) (cfce542)
• editor: Restore Instance AI credential card without a loaded workflow (#​33289) (c4e0bf3)
• editor: Restore Instance AI live run UI after HITL reconnect (#​33401) (01a3c7e)
• editor: Should not allow Sub wf when all ai child nodes (#​23472) (b5f4035)
• editor: Show AI Gateway hints for supported nodes used as tools (#​33464) (cdc473e)
• editor: Show Free credits badge for Tool-variant nodes in node creator panel (#​33285) (5cf8645)
• editor: Show implied scope options as disabled with tooltip (#​33237) (899abf6)
• editor: Warn on incompatible trigger for private creds not connected by user (#​33641) (6d499a2)
• Email Trigger (IMAP) Node: Surface connection error details in activation errors (#​32913) (8fa4e8c)
• Github Node: Set searchFilterRequired:true for owner property, fix behavior on frontend (#​33290) (49e5982)
• Guard SSH clients manager shutdown against undefined logger (#​33274) (f75802d)
• Handle AI Gateway-managed credentials in Instance AI (#​33365) (704d246)
• HubSpot Node: Load full property list in selection dropdowns (#​33280) (613b2c5)
• Improve AI Assistant post-build follow-ups (#​33419) (6f0d30f)
• Improve error on missing execution data (#​33567) (507131e)
• Make Miro OAuth2 scope field visible (#​25105) (3c8689f)
• MCP Client Node: Don't send undefined token to mcp and include resource in token request (#​33527) (5b39761)
• MCP Server Trigger Node: Evict idle sessions to prevent memory leak (#​33201) (c3ce961)
• Minor updates to custom instance roles (#​33520) (112b405)
• Oracle DB Node: Fix the Continue(Using error output) issue mentioned in GH issue 26199 (#​28343) (5df5a2c)
• Pipedrive Node: Send activity person as primary participant for v2 API (#​31789) (4cf766d)
• Salesforce node correctly handles "continue on error" (#​33239) (cb0743e)
• Salesforce Node: Fix document uploads and surface errors on JWT auth (#​33490) (ac1905e)
• Salesforce Node: Normalize empty 204 responses on JWT auth path (#​33262) (37a75d2)
• Salesforce Node: Use server-side search for Contact Account selector (#​31277) (165f1bd)
• Strip '=' expression marker from json fields switched back to (#​33120) (88f8586)
• Telegram Trigger Node: Apply chat/user ID filters to all update types (#​32417) (224a85b)
• TheHive Node: Normalize analyzers when expression returns a string (#​32472) (efa9c4e)
• UX improvements in the custom roles experience (#​33399) (062d679)
• Webhook Node: Return 401 instead of 403 when basic auth credentials are wrong (#​31119) (40c2dc5)

Features

• Add certificate authentication to the Microsoft Entra Service Principal credential (#​33420) (4d1862b)
• Add unified N8N_WEBHOOK_URL for production and test webhook URLs (#​33312) (9dc43d0)
• API: Add public API endpoints to read evaluation test runs (#​33455) (27b2844)
• API: Support exporting projects via the public API (#​33084) (0f46be0)
• core: Add 'n8n-package-exported' logstreaming event (#​33460) (456c6dc)
• core: Add certificate authentication option to Microsoft OAuth2 credentials (#​33227) (f82a932)
• core: Add N8N_RUNNERS_ALLOW_TRANSITIVE_IMPORTS for the Python task runner (#​33130) (95a81ed)
• core: Add role:manageProject scope for project-role-only management (#​33628) (de34bec)
• core: Add telemetry events for import / export (#​33319) (a6b307c)
• core: Clear end-user connections when shared credential fields change (#​33624) (25acaad)
• core: Enable filtering crashed executions via public API (#​33485) (62f3c7c)
• core: Prefer predefined credentials over generic auth on HTTP Request nodes (#​33298) (4192c95)
• core: Re-enable sharing private credentials (#​33071) (e51f611)
• core: Route Instance AI billing to a dedicated credit pool (#​33263) (25d0d12)
• core: Support community node type definitions in AI Assistant (#​33340) (3298e21)
• editor: Add new Tree component to @​n8n/design-system (#​33291) (cbbe113)
• editor: Deprecate $getPairedItem in the expression editor (#​33549) (c706cd4)
• editor: Display canvas groups in logs panel (#​33235) (d561a92)
• editor: Hide gateway-incompatible node parameters under managed credentials (#​32961) (61dbb92)
• editor: Improve data table node (#​28199) (0a6cb66)
• editor: Make data table artifacts editable when AI is not running (#​33210) (7204648)
• editor: NDV one-line credential row with connect/connected/disconnect states (#​33371) (0fa6454)
• editor: Read-only credential view and connect banner for private credentials (#​33055) (627818e)
• editor: Render AI Assistant reasoning as separate blocks in the run timeline (#​33676) (dc1e3ce)
• editor: Sets AIA v3 as default empty state & fixes display issues (#​33273) (723749c)
• editor: Show private credential icon on execution list runs (#​32957) (4290e84)
• editor: Update reasoning block to mook more reasonable (#​33293) (1614720)
• Include response timestamp in Send and Wait responses (#​33283) (13d0655)
• Kafka Node: Add mTLS (client certificate) authentication (#​33236) (25e0321)
• Microsoft Excel Node: Add Service Principal (app-only) authentication (#​33014) (b3287f7)
• Microsoft Teams Node: Add Service Principal (app-only) authentication (#​33105) (df9257b)
• Microsoft To Do Node: Add Service Principal (app-only) authentication (#​33081) (689d873)
• Setup credentials card includes a button to setup automatically in AI Assistant (#​33453) (22e37bd)

Performance Improvements

• core: Aggregate workflow statistics to avoid hot-row contention (#​33045) (3787100)
• core: Return workflow structure summaries by default from Instance AI inspect actions (#​33541) (5934c33)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.