n8n-io/n8n
Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.
How n8n is put together
n8n is a source-available workflow automation tool (fair-code, LicenseRef-n8n-sustainable-use) built as a large TypeScript pnpm monorepo managed with Turbo. The backend centers on an Express-based CLI/server (packages/cli) that orchestrates workflow execution via a core engine (packages/core), a shared workflow SDK (n8n-workflow), and a Vue-based editor UI (n8n-editor-ui); workflows are composed of nodes (packages/nodes-base) and executed against a TypeORM-backed datastore. It includes extensive AI/LangChain integration, distributed execution via Bull/Redis queues and task runners, and a public REST API validated with OpenAPI. Data flows from HTTP/webhook triggers through the execution engine, which runs node logic and persists executions/credentials to SQLite or Postgres.
Languages
Frameworks
Datastores
Infrastructure
Major components
packages/cli (n8n)
Express-based server, REST/public API, webhook and worker/webhook process entrypoints, and workflow orchestration.
packages/core (n8n-core
Core execution engine that runs workflow node logic, handles credentials, binary data, and node loading.
packages/nodes-base
Built-in integration nodes and credential definitions for third-party services.
packages/@n8n/n8n-nodes-langchain
AI/LangChain nodes providing LLM, agent, and vector-store capabilities.
packages/frontend (n8n-editor-ui / design-system)
Vue-based workflow editor UI and shared design system.
packages/@n8n/db
TypeORM entities, migrations, and database schema tooling for SQLite/Postgres.
packages/@n8n/task-runner & agents
Sandboxed/distributed task runners and the AI agent SDK for code-first execution.
packages/node-dev (n8n-node-dev)
oclif-based CLI to scaffold and build custom n8n nodes and credentials.
Shipped the 2.37.0 release while expanding the Confluence integration, hardening security policies, and refining AI Assistant features.
3 weeksWeek of 2026-08-24
Week of 2026-08-24latest
Shipped the 2.37.0 release while expanding the Confluence integration, hardening security policies, and refining AI Assistant features.
Week of 2026-08-17
A very busy week of AI Assistant polish, credential and OAuth security fixes, and reliability improvements to triggers and community package installs.
Week of 2026-08-10
A lighter week focused on dependency security bumps, AI workflow-editing fixes, and the review activity feed.
Over the past few weeks n8n has been steadily building out its AI features — a new Instance AI assistant, agent tooling, and AI credits management — while also expanding third-party integrations like the Confluence node. A major recurring theme is a new workflow review and approval system, alongside tighter security around credentials, OAuth, and community node vetting. The most recent weeks also brought infrastructure upgrades (pnpm 11, new Docker base images) and the 2.37.0 release.
Week by week
2026-08-24Shipped the 2.37.0 release while expanding the Confluence integration, hardening security policies, and refining AI Assistant features.latest6 changes
Feature
Released n8n version 2.37.0
Cut and published the 2.37.0 release of the product.
Feature
Expanded the Confluence integration
Added several new Confluence capabilities including attachment deletion, page labels, space management, and search.
Feature
Workflows with Wait steps can now be used as AI agent tools
Lets automations that pause and wait be plugged in as tools an AI agent can call.
Fix
Stronger vetting of community node packages
Community add-ons are now flagged if they try to silently force a hidden dependency to an arbitrary version, closing a supply-chain risk.
Feature
Sandboxed the hosted chat page for safety
Split the chat page into a trusted shell and an isolated frame to better contain untrusted content.
Refactor
Reduced AI credit-balance network requests
Caches the AI wallet balance so the editor stops repeatedly asking the server for it.
2026-08-17A very busy week of AI Assistant polish, credential and OAuth security fixes, and reliability improvements to triggers and community package installs.6 changes
Feature
Made form-trigger OAuth2 login generally available
Forms that start workflows can now use OAuth2 sign-in as a fully supported feature.
Fix
Calmed the cold-start community package install storm
Reduced the flood of add-on installation attempts that happened right after startup.
Feature
Reworked how the AI Assistant handles connections
Moved account connections into a cleaner '+' button inside the assistant's text input.
Fix
Verified trigger identity and bound it to each run
Checks who started a workflow once and ties that identity to the execution for tighter security.
Fix
Redacted secrets from browser snapshots and error messages
Prevents credentials from leaking into diagnostic snapshots and domain-restriction errors.
Feature
Added a new Combobox and cleaned up UI components
Introduced a reusable dropdown component and tidied radio-button components in the design system.
2026-08-10A lighter week focused on dependency security bumps, AI workflow-editing fixes, and the review activity feed.6 changes
Feature
Completed the review activity feed with decision notes
Finished the timeline that shows what happened during a workflow review, including a note explaining each decision.
Feature
Added AI support for organizing workflows
The assistant can now create folders and move workflows between them.
Chore
Bumped several dependencies to clear security findings
Updated multiple third-party libraries to resolve flagged security issues.
Fix
Fixed AI Assistant workflow editing to stay stable
Keeps internal node IDs and tool settings consistent when the assistant modifies a workflow.
Fix
Made agent credentials work with external secret stores
Agent credentials now resolve correctly through the standard decryption path so externally managed secrets work.
Fix
Fixed the renamed Google Ads metric
Updated the Google Ads node to use the renamed video-views metric on the newer API version.
Dependencies and code review
Dependency advisories
Security Watch
No known advisories across 18 scanned dependencies.
No known advisories in the scanned dependencies.
Code review
No concrete code-level issues confirmed.
Get this report every week for your repos.
GitZoid learns each repo, reports what changed, and flags what needs attention. One flat price for the whole team.
$19 a month, flat · First 10 outputs free · No card required