[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/cli/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	589/1000 Why? Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JS-FILETYPE-2958042	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: n8n-core

The new version differs by 177 commits.

• 3c436ed 🔖 Release [email protected]
• 9ec2eac ⬆️ Set [email protected] on n8n-core
• eb65041 🔖 Release [email protected]
• 76b0dd9 refactor(Merge Node): Change parameter names
• 5130529 fix: AWS credential testing issue (fix: AWS credential testing issue n8n-io/n8n#4107)
• 680d255 refactor(telemetry): Add personalization survey event to PostHog (refactor(telemetry): Add personalization survey event to PostHog n8n-io/n8n#4093)
• ec2c552 refactor(design-system): merge n8n square button into n8n button (refactor(design-system): merge n8n square button into n8n button n8n-io/n8n#4075)
• 98ed207 feat(core, editor-ui): Introduce node deprecation (feat(core, editor-ui): Introduce node deprecation n8n-io/n8n#4103)
• f40ae50 fix(public-api): Fix error updating workflow with property not defined in the schema (fix(public-api): Fix error updating workflow with property not defined in the schema n8n-io/n8n#4089)
• b2807ce ci: fail the build if `package-lock.json` is out of sync (ci: fail the build if package-lock.json is out of sync n8n-io/n8n#4101)
• 9a59d0a feat(Adalo Node): MVP Adalo node N8N-3263 (feat(Adalo Node): MVP Adalo node N8N-3263 n8n-io/n8n#3102)
• f70e6d2 fix(MongoDb Node): update mongo driver to 4.9.1 n8n-2622 (fix(MongoDb Node): update mongo driver to 4.9.1 n8n-2622 n8n-io/n8n#4095)
• fd9b5f6 ci: PR title/description change should not re-trigger the build-lint-test workflow (ci: PR title/description change should not re-trigger the build-lint-test workflow n8n-io/n8n#4100)
• 43c9f01 fix(cli): use absolute paths for loading custom nodes and credentials (fix(cli): use absolute paths for loading custom nodes and credentials n8n-io/n8n#4099)
• a8127df test(core): WorkflowCredentials Test Suite
• dd3ba96 fix(core): update oauth endpoints to use instance base url
• 461848f fix(cli,core): Address Dependabot warnings [N8N-4121] (fix(cli,core): Address Dependabot warnings [N8N-4121] n8n-io/n8n#3883)
• 9e1fa4c fix: Issue with versioned nodes not loading properly (fix: Issue with versioned nodes not loading properly n8n-io/n8n#4094)
• ea2d18b feat(editor): Implement HTML sanitization for Notification and Message components (feat(editor): Implement HTML sanitization for Notification and Message components n8n-io/n8n#4081)
• 381c09f fix(core): Fix node renaming in expressions
• 8c95d6e feat(editor): Show input number for multi-input nodes (feat(editor): Show input number for multi-input nodes n8n-io/n8n#4000)
• 36ec81f fix(node): Google Cloud Storage linting rules
• 1e963d8 feat(GoogleCloudStorage Node): add GCS Node with Bucket and Object operations
• 3a9c7ac refactor(nodes-base): Apply lint rule `node-param-operation-option-description-wrong-for-get-many` (refactor(nodes-base): Apply lint rule node-param-operation-option-description-wrong-for-get-many n8n-io/n8n#4064)

See the full diff

Package name: n8n-nodes-base

The new version differs by 177 commits.

• be54f0a 🔖 Release [email protected]
• d87a05a ⬆️ Set [email protected] and [email protected] on n8n-nodes-base
• 7451b8f 🔖 Release [email protected]
• e6be3d3 ⬆️ Set [email protected] and [email protected] on n8n-node-dev
• 3c436ed 🔖 Release [email protected]
• 9ec2eac ⬆️ Set [email protected] on n8n-core
• eb65041 🔖 Release [email protected]
• 76b0dd9 refactor(Merge Node): Change parameter names
• 5130529 fix: AWS credential testing issue (fix: AWS credential testing issue n8n-io/n8n#4107)
• 680d255 refactor(telemetry): Add personalization survey event to PostHog (refactor(telemetry): Add personalization survey event to PostHog n8n-io/n8n#4093)
• ec2c552 refactor(design-system): merge n8n square button into n8n button (refactor(design-system): merge n8n square button into n8n button n8n-io/n8n#4075)
• 98ed207 feat(core, editor-ui): Introduce node deprecation (feat(core, editor-ui): Introduce node deprecation n8n-io/n8n#4103)
• f40ae50 fix(public-api): Fix error updating workflow with property not defined in the schema (fix(public-api): Fix error updating workflow with property not defined in the schema n8n-io/n8n#4089)
• b2807ce ci: fail the build if `package-lock.json` is out of sync (ci: fail the build if package-lock.json is out of sync n8n-io/n8n#4101)
• 9a59d0a feat(Adalo Node): MVP Adalo node N8N-3263 (feat(Adalo Node): MVP Adalo node N8N-3263 n8n-io/n8n#3102)
• f70e6d2 fix(MongoDb Node): update mongo driver to 4.9.1 n8n-2622 (fix(MongoDb Node): update mongo driver to 4.9.1 n8n-2622 n8n-io/n8n#4095)
• fd9b5f6 ci: PR title/description change should not re-trigger the build-lint-test workflow (ci: PR title/description change should not re-trigger the build-lint-test workflow n8n-io/n8n#4100)
• 43c9f01 fix(cli): use absolute paths for loading custom nodes and credentials (fix(cli): use absolute paths for loading custom nodes and credentials n8n-io/n8n#4099)
• a8127df test(core): WorkflowCredentials Test Suite
• dd3ba96 fix(core): update oauth endpoints to use instance base url
• 461848f fix(cli,core): Address Dependabot warnings [N8N-4121] (fix(cli,core): Address Dependabot warnings [N8N-4121] n8n-io/n8n#3883)
• 9e1fa4c fix: Issue with versioned nodes not loading properly (fix: Issue with versioned nodes not loading properly n8n-io/n8n#4094)
• ea2d18b feat(editor): Implement HTML sanitization for Notification and Message components (feat(editor): Implement HTML sanitization for Notification and Message components n8n-io/n8n#4081)
• 381c09f fix(core): Fix node renaming in expressions

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)