n8n 1.120.2 → 1.121.0

package/dist/modules/breaking-changes/rules/v2/index.js

@@ -1,9 +1,43 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.v2Rules = void 0;
+const binary_data_storage_rule_1 = require("./binary-data-storage.rule");
+const cli_activate_all_workflows_rule_1 = require("./cli-activate-all-workflows.rule");
+const disabled_nodes_rule_1 = require("./disabled-nodes.rule");
+const dotenv_upgrade_rule_1 = require("./dotenv-upgrade.rule");
 const file_access_rule_1 = require("./file-access.rule");
+const git_node_bare_repos_rule_1 = require("./git-node-bare-repos.rule");
+const oauth_callback_auth_rule_1 = require("./oauth-callback-auth.rule");
 const process_env_access_rule_1 = require("./process-env-access.rule");
+const pyodide_removed_rule_1 = require("./pyodide-removed.rule");
+const queue_worker_max_stalled_count_rule_1 = require("./queue-worker-max-stalled-count.rule");
+const removed_database_types_rule_1 = require("./removed-database-types.rule");
 const removed_nodes_rule_1 = require("./removed-nodes.rule");
-const v2Rules = [removed_nodes_rule_1.RemovedNodesRule, process_env_access_rule_1.ProcessEnvAccessRule, file_access_rule_1.FileAccessRule];
+const settings_file_permissions_rule_1 = require("./settings-file-permissions.rule");
+const sqlite_legacy_driver_rule_1 = require("./sqlite-legacy-driver.rule");
+const task_runner_docker_image_rule_1 = require("./task-runner-docker-image.rule");
+const task_runners_rule_1 = require("./task-runners.rule");
+const tunnel_option_rule_1 = require("./tunnel-option.rule");
+const wait_node_subworkflow_rule_1 = require("./wait-node-subworkflow.rule");
+const v2Rules = [
+    removed_nodes_rule_1.RemovedNodesRule,
+    process_env_access_rule_1.ProcessEnvAccessRule,
+    pyodide_removed_rule_1.PyodideRemovedRule,
+    file_access_rule_1.FileAccessRule,
+    disabled_nodes_rule_1.DisabledNodesRule,
+    wait_node_subworkflow_rule_1.WaitNodeSubworkflowRule,
+    git_node_bare_repos_rule_1.GitNodeBareReposRule,
+    dotenv_upgrade_rule_1.DotenvUpgradeRule,
+    oauth_callback_auth_rule_1.OAuthCallbackAuthRule,
+    cli_activate_all_workflows_rule_1.CliActivateAllWorkflowsRule,
+    queue_worker_max_stalled_count_rule_1.QueueWorkerMaxStalledCountRule,
+    tunnel_option_rule_1.TunnelOptionRule,
+    removed_database_types_rule_1.RemovedDatabaseTypesRule,
+    settings_file_permissions_rule_1.SettingsFilePermissionsRule,
+    task_runners_rule_1.TaskRunnersRule,
+    task_runner_docker_image_rule_1.TaskRunnerDockerImageRule,
+    sqlite_legacy_driver_rule_1.SqliteLegacyDriverRule,
+    binary_data_storage_rule_1.BinaryDataStorageRule,
+];
 exports.v2Rules = v2Rules;
 //# sourceMappingURL=index.js.map

package/dist/modules/breaking-changes/rules/v2/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/modules/breaking-changes/rules/v2/index.ts"],"names":[],"mappings":";;;AAAA,yDAAoD;AACpD,uEAAiE;AACjE,6DAAwD;AAExD,MAAM,OAAO,GAAG,CAAC,qCAAgB,EAAE,8CAAoB,EAAE,iCAAc,CAAC,CAAC;AAChE,0BAAO"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/modules/breaking-changes/rules/v2/index.ts"],"names":[],"mappings":";;;AAAA,yEAAmE;AACnE,uFAAgF;AAChF,+DAA0D;AAC1D,+DAA0D;AAC1D,yDAAoD;AACpD,yEAAkE;AAClE,yEAAmE;AACnE,uEAAiE;AACjE,iEAA4D;AAC5D,+FAAuF;AACvF,+EAAyE;AACzE,6DAAwD;AACxD,qFAA+E;AAC/E,2EAAqE;AACrE,mFAA4E;AAC5E,2DAAsD;AACtD,6DAAwD;AACxD,6EAAuE;AAEvE,MAAM,OAAO,GAAG;IAEf,qCAAgB;IAChB,8CAAoB;IACpB,yCAAkB;IAClB,iCAAc;IACd,uCAAiB;IACjB,oDAAuB;IACvB,+CAAoB;IAEpB,uCAAiB;IACjB,gDAAqB;IACrB,6DAA2B;IAC3B,oEAA8B;IAC9B,qCAAgB;IAChB,sDAAwB;IACxB,4DAA2B;IAC3B,mCAAe;IACf,yDAAyB;IACzB,kDAAsB;IACtB,gDAAqB;CACrB,CAAC;AACO,0BAAO"}

package/dist/modules/breaking-changes/rules/v2/oauth-callback-auth.rule.d.ts

@@ -0,0 +1,6 @@
+import type { BreakingChangeRuleMetadata, IBreakingChangeInstanceRule, InstanceDetectionReport } from '../../types';
+export declare class OAuthCallbackAuthRule implements IBreakingChangeInstanceRule {
+    id: string;
+    getMetadata(): BreakingChangeRuleMetadata;
+    detect(): Promise<InstanceDetectionReport>;
+}

package/dist/modules/breaking-changes/rules/v2/oauth-callback-auth.rule.js

@@ -0,0 +1,51 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthCallbackAuthRule = void 0;
+const di_1 = require("@n8n/di");
+let OAuthCallbackAuthRule = class OAuthCallbackAuthRule {
+    constructor() {
+        this.id = 'oauth-callback-auth-v2';
+    }
+    getMetadata() {
+        return {
+            version: 'v2',
+            title: 'Require auth on OAuth callback URLs by default',
+            description: 'OAuth callbacks now enforce n8n user authentication by default for improved security',
+            category: "instance",
+            severity: 'medium',
+            documentationUrl: 'https://docs.n8n.io/2-0-breaking-changes/#require-authentication-on-oauth-callback-urls-by-default',
+        };
+    }
+    async detect() {
+        if (process.env.N8N_SKIP_AUTH_ON_OAUTH_CALLBACK) {
+            return { isAffected: false, instanceIssues: [], recommendations: [] };
+        }
+        return {
+            isAffected: true,
+            instanceIssues: [
+                {
+                    title: 'OAuth callback authentication now required',
+                    description: 'OAuth callbacks will now enforce n8n user authentication by default unless N8N_SKIP_AUTH_ON_OAUTH_CALLBACK is explicitly set to true.',
+                    level: 'warning',
+                },
+            ],
+            recommendations: [
+                {
+                    action: 'Review OAuth workflows',
+                    description: 'If you need to skip authentication on OAuth callbacks (e.g., for embed mode), set N8N_SKIP_AUTH_ON_OAUTH_CALLBACK=true',
+                },
+            ],
+        };
+    }
+};
+exports.OAuthCallbackAuthRule = OAuthCallbackAuthRule;
+exports.OAuthCallbackAuthRule = OAuthCallbackAuthRule = __decorate([
+    (0, di_1.Service)()
+], OAuthCallbackAuthRule);
+//# sourceMappingURL=oauth-callback-auth.rule.js.map

package/dist/modules/breaking-changes/rules/v2/oauth-callback-auth.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-callback-auth.rule.js","sourceRoot":"","sources":["../../../../../src/modules/breaking-changes/rules/v2/oauth-callback-auth.rule.ts"],"names":[],"mappings":";;;;;;;;;AAAA,gCAAkC;AAU3B,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAA3B;QACN,OAAE,GAAW,wBAAwB,CAAC;IAyCvC,CAAC;IAvCA,WAAW;QACV,OAAO;YACN,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,gDAAgD;YACvD,WAAW,EACV,sFAAsF;YACvF,QAAQ,YAAiC;YACzC,QAAQ,EAAE,QAAQ;YAClB,gBAAgB,EACf,oGAAoG;SACrG,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM;QAGX,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,CAAC;YACjD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;QACvE,CAAC;QAED,OAAO;YACN,UAAU,EAAE,IAAI;YAChB,cAAc,EAAE;gBACf;oBACC,KAAK,EAAE,4CAA4C;oBACnD,WAAW,EACV,uIAAuI;oBACxI,KAAK,EAAE,SAAS;iBAChB;aACD;YACD,eAAe,EAAE;gBAChB;oBACC,MAAM,EAAE,wBAAwB;oBAChC,WAAW,EACV,wHAAwH;iBACzH;aACD;SACD,CAAC;IACH,CAAC;CACD,CAAA;AA1CY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,YAAO,GAAE;GACG,qBAAqB,CA0CjC"}

package/dist/modules/breaking-changes/rules/v2/process-env-access.rule.js

@@ -18,10 +18,17 @@ let ProcessEnvAccessRule = class ProcessEnvAccessRule {
             title: 'Block process.env Access in Expressions and Code nodes',
             description: 'Direct access to process.env is blocked by default for security',
             category: "workflow",
-            severity: 'high',
+            severity: 'low',
+            documentationUrl: 'https://docs.n8n.io/2-0-breaking-changes/#block-environment-variable-access-from-code-node-by-default',
         };
     }
     async detectWorkflow(workflow, _nodesGroupedByType) {
+        if (process.env.N8N_BLOCK_ENV_ACCESS_IN_NODE) {
+            return {
+                isAffected: false,
+                issues: [],
+            };
+        }
         const processEnvPattern = /process\s*(?:\/\*[\s\S]*?\*\/)?\s*\??\.?\s*env\b/;
         const affectedNodes = [];
         workflow.nodes.forEach((node) => {

package/dist/modules/breaking-changes/rules/v2/process-env-access.rule.js.map

@@ -1 +1 @@
-{"version":3,"file":"process-env-access.rule.js","sourceRoot":"","sources":["../../../../../src/modules/breaking-changes/rules/v2/process-env-access.rule.ts"],"names":[],"mappings":";;;;;;;;;AAEA,gCAAkC;AAW3B,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAA1B;QACN,OAAE,GAAW,uBAAuB,CAAC;IA+DtC,CAAC;IA9DA,WAAW;QACV,OAAO;YACN,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,wDAAwD;YAC/D,WAAW,EAAE,iEAAiE;YAC9E,QAAQ,YAAiC;YACzC,QAAQ,EAAE,MAAM;SAChB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CACnB,QAAwB,EACxB,mBAAyC;QAKzC,MAAM,iBAAiB,GAAG,kDAAkD,CAAC;QAE7E,MAAM,aAAa,GAAgD,EAAE,CAAC;QAEtE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAE/B,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBACzC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,UAAU,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC1F,IAAI,IAAI,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1C,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9D,CAAC;YACF,CAAC;iBAAM,CAAC;gBAEP,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACjD,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC1F,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9D,CAAC;YACF,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,OAAO;YACN,UAAU,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC;YACpC,MAAM,EACL,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzB,KAAK,EAAE,6BAA6B;gBACpC,WAAW,EAAE,mBAAmB,CAAC,CAAC,QAAQ,0EAA0E;gBACpH,KAAK,EAAE,OAAO;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACpB,CAAC,CAAC,IAAI,EAAE;SACV,CAAC;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB;QACvB,OAAO;YACN;gBACC,MAAM,EAAE,0BAA0B;gBAClC,WAAW,EAAE,kEAAkE;aAC/E;YACD;gBACC,MAAM,EAAE,2BAA2B;gBACnC,WAAW,EAAE,wDAAwD;aACrE;SACD,CAAC;IACH,CAAC;CACD,CAAA;AAhEY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,YAAO,GAAE;GACG,oBAAoB,CAgEhC"}
+{"version":3,"file":"process-env-access.rule.js","sourceRoot":"","sources":["../../../../../src/modules/breaking-changes/rules/v2/process-env-access.rule.ts"],"names":[],"mappings":";;;;;;;;;AAEA,gCAAkC;AAW3B,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAA1B;QACN,OAAE,GAAW,uBAAuB,CAAC;IA0EtC,CAAC;IAzEA,WAAW;QACV,OAAO;YACN,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,wDAAwD;YAC/D,WAAW,EAAE,iEAAiE;YAC9E,QAAQ,YAAiC;YACzC,QAAQ,EAAE,KAAK;YACf,gBAAgB,EACf,uGAAuG;SACxG,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CACnB,QAAwB,EACxB,mBAAyC;QAIzC,IAAI,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,CAAC;YAC9C,OAAO;gBACN,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,EAAE;aACV,CAAC;QACH,CAAC;QAKD,MAAM,iBAAiB,GAAG,kDAAkD,CAAC;QAE7E,MAAM,aAAa,GAAgD,EAAE,CAAC;QAEtE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAE/B,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBACzC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,UAAU,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC1F,IAAI,IAAI,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1C,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9D,CAAC;YACF,CAAC;iBAAM,CAAC;gBAEP,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACjD,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC1F,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9D,CAAC;YACF,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,OAAO;YACN,UAAU,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC;YACpC,MAAM,EACL,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzB,KAAK,EAAE,6BAA6B;gBACpC,WAAW,EAAE,mBAAmB,CAAC,CAAC,QAAQ,0EAA0E;gBACpH,KAAK,EAAE,OAAO;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACpB,CAAC,CAAC,IAAI,EAAE;SACV,CAAC;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB;QACvB,OAAO;YACN;gBACC,MAAM,EAAE,0BAA0B;gBAClC,WAAW,EAAE,kEAAkE;aAC/E;YACD;gBACC,MAAM,EAAE,2BAA2B;gBACnC,WAAW,EAAE,wDAAwD;aACrE;SACD,CAAC;IACH,CAAC;CACD,CAAA;AA3EY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,YAAO,GAAE;GACG,oBAAoB,CA2EhC"}

package/dist/modules/breaking-changes/rules/v2/pyodide-removed.rule.d.ts

@@ -0,0 +1,10 @@
+import type { BreakingChangeAffectedWorkflow, BreakingChangeRecommendation } from '@n8n/api-types';
+import type { WorkflowEntity } from '@n8n/db';
+import type { INode } from 'n8n-workflow';
+import type { BreakingChangeRuleMetadata, IBreakingChangeWorkflowRule, WorkflowDetectionReport } from '../../types';
+export declare class PyodideRemovedRule implements IBreakingChangeWorkflowRule {
+    id: string;
+    getMetadata(): BreakingChangeRuleMetadata;
+    getRecommendations(_workflowResults: BreakingChangeAffectedWorkflow[]): Promise<BreakingChangeRecommendation[]>;
+    detectWorkflow(_workflow: WorkflowEntity, nodesGroupedByType: Map<string, INode[]>): Promise<WorkflowDetectionReport>;
+}

package/dist/modules/breaking-changes/rules/v2/pyodide-removed.rule.js

@@ -0,0 +1,65 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PyodideRemovedRule = void 0;
+const di_1 = require("@n8n/di");
+let PyodideRemovedRule = class PyodideRemovedRule {
+    constructor() {
+        this.id = 'pyodide-removed-v2';
+    }
+    getMetadata() {
+        return {
+            version: 'v2',
+            title: 'Remove Pyodide-based Python in Code node',
+            description: 'The Pyodide-based Python implementation in the Code node has been removed and replaced with a native Python task runner implementation',
+            category: "workflow",
+            severity: 'medium',
+            documentationUrl: 'https://docs.n8n.io/2-0-breaking-changes/#remove-pyodide-based-python-code-node',
+        };
+    }
+    async getRecommendations(_workflowResults) {
+        return [
+            {
+                action: 'Update Code nodes to use native Python',
+                description: 'Manually update affected Code nodes from the legacy python parameter to the new pythonNative parameter',
+            },
+            {
+                action: 'Review and adjust Python scripts',
+                description: 'Review Code node scripts relying on Pyodide syntax and adjust for breaking changes. See: https://docs.n8n.io/integrations/builtin/core-nodes/n8n-nodes-base.code/#python-native-beta',
+            },
+            {
+                action: 'Set up Python task runner',
+                description: 'Ensure a Python task runner is available and configured. Native Python task runners are enabled by default in v2',
+            },
+        ];
+    }
+    async detectWorkflow(_workflow, nodesGroupedByType) {
+        const codeNodes = nodesGroupedByType.get('n8n-nodes-base.code') ?? [];
+        const affectedNodes = codeNodes.filter((node) => {
+            const language = node.parameters?.language;
+            return language === 'python';
+        });
+        if (affectedNodes.length === 0)
+            return { isAffected: false, issues: [] };
+        return {
+            isAffected: true,
+            issues: affectedNodes.map((node) => ({
+                title: `Code node '${node.name}' uses removed Pyodide Python implementation`,
+                description: 'The Pyodide-based Python implementation (language="python") is no longer supported. This node must be migrated to use the task runner-based implementation (language="pythonNative").',
+                level: 'error',
+                nodeId: node.id,
+                nodeName: node.name,
+            })),
+        };
+    }
+};
+exports.PyodideRemovedRule = PyodideRemovedRule;
+exports.PyodideRemovedRule = PyodideRemovedRule = __decorate([
+    (0, di_1.Service)()
+], PyodideRemovedRule);
+//# sourceMappingURL=pyodide-removed.rule.js.map

package/dist/modules/breaking-changes/rules/v2/pyodide-removed.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pyodide-removed.rule.js","sourceRoot":"","sources":["../../../../../src/modules/breaking-changes/rules/v2/pyodide-removed.rule.ts"],"names":[],"mappings":";;;;;;;;;AAEA,gCAAkC;AAW3B,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAAxB;QACN,OAAE,GAAW,oBAAoB,CAAC;IAqEnC,CAAC;IAnEA,WAAW;QACV,OAAO;YACN,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,0CAA0C;YACjD,WAAW,EACV,wIAAwI;YACzI,QAAQ,YAAiC;YACzC,QAAQ,EAAE,QAAQ;YAClB,gBAAgB,EACf,iFAAiF;SAClF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB,CACvB,gBAAkD;QAElD,OAAO;YACN;gBACC,MAAM,EAAE,wCAAwC;gBAChD,WAAW,EACV,wGAAwG;aACzG;YACD;gBACC,MAAM,EAAE,kCAAkC;gBAC1C,WAAW,EACV,sLAAsL;aACvL;YACD;gBACC,MAAM,EAAE,2BAA2B;gBACnC,WAAW,EACV,kHAAkH;aACnH;SACD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CACnB,SAAyB,EACzB,kBAAwC;QAGxC,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC;QAOtE,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC;YAE3C,OAAO,QAAQ,KAAK,QAAQ,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAEzE,OAAO;YACN,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACpC,KAAK,EAAE,cAAc,IAAI,CAAC,IAAI,8CAA8C;gBAC5E,WAAW,EACV,uLAAuL;gBACxL,KAAK,EAAE,OAAO;gBACd,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;aACnB,CAAC,CAAC;SACH,CAAC;IACH,CAAC;CACD,CAAA;AAtEY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,YAAO,GAAE;GACG,kBAAkB,CAsE9B"}

package/dist/modules/breaking-changes/rules/v2/queue-worker-max-stalled-count.rule.d.ts

@@ -0,0 +1,6 @@
+import type { BreakingChangeRuleMetadata, IBreakingChangeInstanceRule, InstanceDetectionReport } from '../../types';
+export declare class QueueWorkerMaxStalledCountRule implements IBreakingChangeInstanceRule {
+    id: string;
+    getMetadata(): BreakingChangeRuleMetadata;
+    detect(): Promise<InstanceDetectionReport>;
+}

package/dist/modules/breaking-changes/rules/v2/queue-worker-max-stalled-count.rule.js

@@ -0,0 +1,51 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.QueueWorkerMaxStalledCountRule = void 0;
+const di_1 = require("@n8n/di");
+let QueueWorkerMaxStalledCountRule = class QueueWorkerMaxStalledCountRule {
+    constructor() {
+        this.id = 'queue-worker-max-stalled-count-v2';
+    }
+    getMetadata() {
+        return {
+            version: 'v2',
+            title: 'Remove QUEUE_WORKER_MAX_STALLED_COUNT',
+            description: 'The QUEUE_WORKER_MAX_STALLED_COUNT environment variable has been removed and will be ignored',
+            category: "environment",
+            severity: 'low',
+            documentationUrl: 'https://docs.n8n.io/2-0-breaking-changes/#remove-queue_worker_max_stalled_count',
+        };
+    }
+    async detect() {
+        const result = {
+            isAffected: false,
+            instanceIssues: [],
+            recommendations: [],
+        };
+        if (!process.env.QUEUE_WORKER_MAX_STALLED_COUNT) {
+            return result;
+        }
+        result.isAffected = true;
+        result.instanceIssues.push({
+            title: 'QUEUE_WORKER_MAX_STALLED_COUNT is deprecated',
+            description: 'The QUEUE_WORKER_MAX_STALLED_COUNT environment variable has been removed. Any customization will be ignored in v2.',
+            level: 'warning',
+        });
+        result.recommendations.push({
+            action: 'Remove environment variable',
+            description: 'Remove QUEUE_WORKER_MAX_STALLED_COUNT from your environment configuration as it no longer has any effect',
+        });
+        return result;
+    }
+};
+exports.QueueWorkerMaxStalledCountRule = QueueWorkerMaxStalledCountRule;
+exports.QueueWorkerMaxStalledCountRule = QueueWorkerMaxStalledCountRule = __decorate([
+    (0, di_1.Service)()
+], QueueWorkerMaxStalledCountRule);
+//# sourceMappingURL=queue-worker-max-stalled-count.rule.js.map

package/dist/modules/breaking-changes/rules/v2/queue-worker-max-stalled-count.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue-worker-max-stalled-count.rule.js","sourceRoot":"","sources":["../../../../../src/modules/breaking-changes/rules/v2/queue-worker-max-stalled-count.rule.ts"],"names":[],"mappings":";;;;;;;;;AAAA,gCAAkC;AAU3B,IAAM,8BAA8B,GAApC,MAAM,8BAA8B;IAApC;QACN,OAAE,GAAW,mCAAmC,CAAC;IA4ClD,CAAC;IA1CA,WAAW;QACV,OAAO;YACN,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,uCAAuC;YAC9C,WAAW,EACV,8FAA8F;YAC/F,QAAQ,eAAoC;YAC5C,QAAQ,EAAE,KAAK;YACf,gBAAgB,EACf,iFAAiF;SAClF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM;QACX,MAAM,MAAM,GAA4B;YACvC,UAAU,EAAE,KAAK;YACjB,cAAc,EAAE,EAAE;YAClB,eAAe,EAAE,EAAE;SACnB,CAAC;QAIF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,CAAC;YACjD,OAAO,MAAM,CAAC;QACf,CAAC;QAED,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC;YAC1B,KAAK,EAAE,8CAA8C;YACrD,WAAW,EACV,oHAAoH;YACrH,KAAK,EAAE,SAAS;SAChB,CAAC,CAAC;QAEH,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC;YAC3B,MAAM,EAAE,6BAA6B;YACrC,WAAW,EACV,0GAA0G;SAC3G,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IACf,CAAC;CACD,CAAA;AA7CY,wEAA8B;yCAA9B,8BAA8B;IAD1C,IAAA,YAAO,GAAE;GACG,8BAA8B,CA6C1C"}

package/dist/modules/breaking-changes/rules/v2/removed-database-types.rule.d.ts

@@ -0,0 +1,9 @@
+import { GlobalConfig } from '@n8n/config';
+import type { BreakingChangeRuleMetadata, IBreakingChangeInstanceRule, InstanceDetectionReport } from '../../types';
+export declare class RemovedDatabaseTypesRule implements IBreakingChangeInstanceRule {
+    private readonly globalConfig;
+    constructor(globalConfig: GlobalConfig);
+    id: string;
+    getMetadata(): BreakingChangeRuleMetadata;
+    detect(): Promise<InstanceDetectionReport>;
+}

package/dist/modules/breaking-changes/rules/v2/removed-database-types.rule.js

@@ -0,0 +1,57 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RemovedDatabaseTypesRule = void 0;
+const config_1 = require("@n8n/config");
+const di_1 = require("@n8n/di");
+let RemovedDatabaseTypesRule = class RemovedDatabaseTypesRule {
+    constructor(globalConfig) {
+        this.globalConfig = globalConfig;
+        this.id = 'removed-database-types-v2';
+    }
+    getMetadata() {
+        return {
+            version: 'v2',
+            title: 'MySQL/MariaDB database types removed',
+            description: 'MySQL and MariaDB database types have been completely removed and will cause n8n to fail on startup',
+            category: "database",
+            severity: 'critical',
+            documentationUrl: 'https://docs.n8n.io/2-0-breaking-changes/#drop-mysqlmariadb-support',
+        };
+    }
+    async detect() {
+        const result = {
+            isAffected: false,
+            instanceIssues: [],
+            recommendations: [],
+        };
+        const dbType = this.globalConfig.database.type;
+        if (dbType === 'mysqldb' || dbType === 'mariadb') {
+            result.isAffected = true;
+            result.instanceIssues.push({
+                title: `${dbType === 'mysqldb' ? 'MySQL' : 'MariaDB'} database type removed`,
+                description: 'MySQL and MariaDB database types have been completely removed in v2. n8n will fail to start with this database configuration.',
+                level: 'error',
+            });
+            result.recommendations.push({
+                action: 'Migrate to PostgreSQL or SQLite before upgrading',
+                description: 'You must migrate your database to PostgreSQL or SQLite before upgrading to v2. Use the database migration tool if available, or export/import your workflows and credentials.',
+            });
+        }
+        return result;
+    }
+};
+exports.RemovedDatabaseTypesRule = RemovedDatabaseTypesRule;
+exports.RemovedDatabaseTypesRule = RemovedDatabaseTypesRule = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [config_1.GlobalConfig])
+], RemovedDatabaseTypesRule);
+//# sourceMappingURL=removed-database-types.rule.js.map

package/dist/modules/breaking-changes/rules/v2/removed-database-types.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"removed-database-types.rule.js","sourceRoot":"","sources":["../../../../../src/modules/breaking-changes/rules/v2/removed-database-types.rule.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA2C;AAC3C,gCAAkC;AAU3B,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACpC,YAA6B,YAA0B;QAA1B,iBAAY,GAAZ,YAAY,CAAc;QAEvD,OAAE,GAAW,2BAA2B,CAAC;IAFiB,CAAC;IAI3D,WAAW;QACV,OAAO;YACN,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,sCAAsC;YAC7C,WAAW,EACV,qGAAqG;YACtG,QAAQ,YAAiC;YACzC,QAAQ,EAAE,UAAU;YACpB,gBAAgB,EAAE,qEAAqE;SACvF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM;QACX,MAAM,MAAM,GAA4B;YACvC,UAAU,EAAE,KAAK;YACjB,cAAc,EAAE,EAAE;YAClB,eAAe,EAAE,EAAE;SACnB,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;QAE/C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAClD,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;YACzB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,wBAAwB;gBAC5E,WAAW,EACV,+HAA+H;gBAChI,KAAK,EAAE,OAAO;aACd,CAAC,CAAC;YAEH,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC;gBAC3B,MAAM,EAAE,kDAAkD;gBAC1D,WAAW,EACV,+KAA+K;aAChL,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;CACD,CAAA;AA5CY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,YAAO,GAAE;qCAEkC,qBAAY;GAD3C,wBAAwB,CA4CpC"}

package/dist/modules/breaking-changes/rules/v2/removed-nodes.rule.d.ts

@@ -1,11 +1,11 @@
-import { BreakingChangeRecommendation } from '@n8n/api-types';
+import type { BreakingChangeAffectedWorkflow, BreakingChangeRecommendation } from '@n8n/api-types';
 import type { WorkflowEntity } from '@n8n/db';
-import { INode } from 'n8n-workflow';
+import type { INode } from 'n8n-workflow';
 import type { BreakingChangeRuleMetadata, IBreakingChangeWorkflowRule, WorkflowDetectionReport } from '../../types';
 export declare class RemovedNodesRule implements IBreakingChangeWorkflowRule {
     private readonly REMOVED_NODES;
     id: string;
     getMetadata(): BreakingChangeRuleMetadata;
-    getRecommendations(): Promise<BreakingChangeRecommendation[]>;
+    getRecommendations(_workflowResults: BreakingChangeAffectedWorkflow[]): Promise<BreakingChangeRecommendation[]>;
     detectWorkflow(_workflow: WorkflowEntity, nodesGroupedByType: Map<string, INode[]>): Promise<WorkflowDetectionReport>;
 }

package/dist/modules/breaking-changes/rules/v2/removed-nodes.rule.js

@@ -23,10 +23,11 @@ let RemovedNodesRule = class RemovedNodesRule {
             title: 'Removed Deprecated Nodes',
             description: 'Several deprecated nodes have been removed and will no longer work',
             category: "workflow",
-            severity: 'critical',
+            severity: 'low',
+            documentationUrl: 'https://docs.n8n.io/2-0-breaking-changes/#removed-nodes-for-retired-services',
         };
     }
-    async getRecommendations() {
+    async getRecommendations(_workflowResults) {
         return [
             {
                 action: 'Update affected workflows',

package/dist/modules/breaking-changes/rules/v2/removed-nodes.rule.js.map

@@ -1 +1 @@
-{"version":3,"file":"removed-nodes.rule.js","sourceRoot":"","sources":["../../../../../src/modules/breaking-changes/rules/v2/removed-nodes.rule.ts"],"names":[],"mappings":";;;;;;;;;AAEA,gCAAkC;AAW3B,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAAtB;QACW,kBAAa,GAAG;YAChC,wBAAwB;YACxB,yBAAyB;YACzB,0BAA0B;SAC1B,CAAC;QAEF,OAAE,GAAW,kBAAkB,CAAC;IAuCjC,CAAC;IArCA,WAAW;QACV,OAAO;YACN,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,0BAA0B;YACjC,WAAW,EAAE,oEAAoE;YACjF,QAAQ,YAAiC;YACzC,QAAQ,EAAE,UAAU;SACpB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB;QACvB,OAAO;YACN;gBACC,MAAM,EAAE,2BAA2B;gBACnC,WAAW,EAAE,mEAAmE;aAChF;SACD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CACnB,SAAyB,EACzB,kBAAwC;QAExC,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9F,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAExE,OAAO;YACN,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACnC,KAAK,EAAE,SAAS,IAAI,CAAC,IAAI,gBAAgB,IAAI,CAAC,IAAI,oBAAoB;gBACtE,WAAW,EAAE,kBAAkB,IAAI,CAAC,IAAI,kEAAkE;gBAC1G,KAAK,EAAE,OAAO;gBACd,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;aACnB,CAAC,CAAC;SACH,CAAC;IACH,CAAC;CACD,CAAA;AA9CY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,YAAO,GAAE;GACG,gBAAgB,CA8C5B"}
+{"version":3,"file":"removed-nodes.rule.js","sourceRoot":"","sources":["../../../../../src/modules/breaking-changes/rules/v2/removed-nodes.rule.ts"],"names":[],"mappings":";;;;;;;;;AAEA,gCAAkC;AAW3B,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAAtB;QACW,kBAAa,GAAG;YAChC,wBAAwB;YACxB,yBAAyB;YACzB,0BAA0B;SAC1B,CAAC;QAEF,OAAE,GAAW,kBAAkB,CAAC;IA2CjC,CAAC;IAzCA,WAAW;QACV,OAAO;YACN,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,0BAA0B;YACjC,WAAW,EAAE,oEAAoE;YACjF,QAAQ,YAAiC;YACzC,QAAQ,EAAE,KAAK;YACf,gBAAgB,EACf,8EAA8E;SAC/E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB,CACvB,gBAAkD;QAElD,OAAO;YACN;gBACC,MAAM,EAAE,2BAA2B;gBACnC,WAAW,EAAE,mEAAmE;aAChF;SACD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CACnB,SAAyB,EACzB,kBAAwC;QAExC,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9F,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAExE,OAAO;YACN,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACnC,KAAK,EAAE,SAAS,IAAI,CAAC,IAAI,gBAAgB,IAAI,CAAC,IAAI,oBAAoB;gBACtE,WAAW,EAAE,kBAAkB,IAAI,CAAC,IAAI,kEAAkE;gBAC1G,KAAK,EAAE,OAAO;gBACd,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;aACnB,CAAC,CAAC;SACH,CAAC;IACH,CAAC;CACD,CAAA;AAlDY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,YAAO,GAAE;GACG,gBAAgB,CAkD5B"}

package/dist/modules/breaking-changes/rules/v2/settings-file-permissions.rule.d.ts

@@ -0,0 +1,9 @@
+import { InstanceSettingsConfig } from '@n8n/config';
+import type { BreakingChangeRuleMetadata, IBreakingChangeInstanceRule, InstanceDetectionReport } from '../../types';
+export declare class SettingsFilePermissionsRule implements IBreakingChangeInstanceRule {
+    private readonly instanceSettingsConfig;
+    constructor(instanceSettingsConfig: InstanceSettingsConfig);
+    id: string;
+    getMetadata(): BreakingChangeRuleMetadata;
+    detect(): Promise<InstanceDetectionReport>;
+}

package/dist/modules/breaking-changes/rules/v2/settings-file-permissions.rule.js

@@ -0,0 +1,70 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SettingsFilePermissionsRule = void 0;
+const config_1 = require("@n8n/config");
+const di_1 = require("@n8n/di");
+let SettingsFilePermissionsRule = class SettingsFilePermissionsRule {
+    constructor(instanceSettingsConfig) {
+        this.instanceSettingsConfig = instanceSettingsConfig;
+        this.id = 'settings-file-permissions-v2';
+    }
+    getMetadata() {
+        return {
+            version: 'v2',
+            title: 'Enforce settings file permissions',
+            description: 'n8n now enforces stricter permissions on configuration files for improved security',
+            category: "infrastructure",
+            severity: 'low',
+            documentationUrl: 'https://docs.n8n.io/2-0-breaking-changes/#enforce-settings-file-permissions',
+        };
+    }
+    async detect() {
+        if (!this.instanceSettingsConfig.enforceSettingsFilePermissions) {
+            return {
+                isAffected: false,
+                instanceIssues: [],
+                recommendations: [],
+            };
+        }
+        const result = {
+            isAffected: true,
+            instanceIssues: [
+                {
+                    title: 'Settings file permissions will be enforced',
+                    description: 'n8n will now enforce chmod 600 permissions on configuration files. This may affect Docker/Kubernetes setups with volume mounts.',
+                    level: 'warning',
+                },
+            ],
+            recommendations: [
+                {
+                    action: 'Configure volume permissions',
+                    description: 'If using Docker or Kubernetes with volume mounts for .n8n directory, ensure the mounted volume has proper ownership and chmod 600 can be enforced on the config file',
+                },
+                {
+                    action: 'Disable enforcement if needed',
+                    description: 'Set N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=false to disable permission enforcement',
+                },
+                {
+                    action: 'Separate configs for multi-instance setups',
+                    description: 'In multi-main or queue setups, give each instance its own .n8n directory or use N8N_ENCRYPTION_KEY environment variable instead of relying on the config file',
+                },
+            ],
+        };
+        return result;
+    }
+};
+exports.SettingsFilePermissionsRule = SettingsFilePermissionsRule;
+exports.SettingsFilePermissionsRule = SettingsFilePermissionsRule = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [config_1.InstanceSettingsConfig])
+], SettingsFilePermissionsRule);
+//# sourceMappingURL=settings-file-permissions.rule.js.map

package/dist/modules/breaking-changes/rules/v2/settings-file-permissions.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-file-permissions.rule.js","sourceRoot":"","sources":["../../../../../src/modules/breaking-changes/rules/v2/settings-file-permissions.rule.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAAqD;AACrD,gCAAkC;AAU3B,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IACvC,YAA6B,sBAA8C;QAA9C,2BAAsB,GAAtB,sBAAsB,CAAwB;QAE3E,OAAE,GAAW,8BAA8B,CAAC;IAFkC,CAAC;IAI/E,WAAW;QACV,OAAO;YACN,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,mCAAmC;YAC1C,WAAW,EACV,oFAAoF;YACrF,QAAQ,kBAAuC;YAC/C,QAAQ,EAAE,KAAK;YACf,gBAAgB,EACf,6EAA6E;SAC9E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM;QAGX,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,8BAA8B,EAAE,CAAC;YACjE,OAAO;gBACN,UAAU,EAAE,KAAK;gBACjB,cAAc,EAAE,EAAE;gBAClB,eAAe,EAAE,EAAE;aACnB,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAA4B;YACvC,UAAU,EAAE,IAAI;YAChB,cAAc,EAAE;gBACf;oBACC,KAAK,EAAE,4CAA4C;oBACnD,WAAW,EACV,iIAAiI;oBAClI,KAAK,EAAE,SAAS;iBAChB;aACD;YACD,eAAe,EAAE;gBAChB;oBACC,MAAM,EAAE,8BAA8B;oBACtC,WAAW,EACV,sKAAsK;iBACvK;gBACD;oBACC,MAAM,EAAE,+BAA+B;oBACvC,WAAW,EACV,mFAAmF;iBACpF;gBACD;oBACC,MAAM,EAAE,4CAA4C;oBACpD,WAAW,EACV,+JAA+J;iBAChK;aACD;SACD,CAAC;QAEF,OAAO,MAAM,CAAC;IACf,CAAC;CACD,CAAA;AA5DY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,YAAO,GAAE;qCAE4C,+BAAsB;GAD/D,2BAA2B,CA4DvC"}

package/dist/modules/breaking-changes/rules/v2/sqlite-legacy-driver.rule.d.ts

@@ -0,0 +1,9 @@
+import { GlobalConfig } from '@n8n/config';
+import type { BreakingChangeRuleMetadata, IBreakingChangeInstanceRule, InstanceDetectionReport } from '../../types';
+export declare class SqliteLegacyDriverRule implements IBreakingChangeInstanceRule {
+    private readonly globalConfig;
+    constructor(globalConfig: GlobalConfig);
+    id: string;
+    getMetadata(): BreakingChangeRuleMetadata;
+    detect(): Promise<InstanceDetectionReport>;
+}

package/dist/modules/breaking-changes/rules/v2/sqlite-legacy-driver.rule.js

@@ -0,0 +1,75 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SqliteLegacyDriverRule = void 0;
+const config_1 = require("@n8n/config");
+const di_1 = require("@n8n/di");
+let SqliteLegacyDriverRule = class SqliteLegacyDriverRule {
+    constructor(globalConfig) {
+        this.globalConfig = globalConfig;
+        this.id = 'sqlite-legacy-driver-v2';
+    }
+    getMetadata() {
+        return {
+            version: 'v2',
+            title: 'Remove SQLite legacy driver',
+            description: 'SQLite now uses WAL (Write-Ahead Logging) mode exclusively, with additional database files',
+            category: "database",
+            severity: 'low',
+            documentationUrl: 'https://docs.n8n.io/2-0-breaking-changes/#remove-sqlite-legacy-driver',
+        };
+    }
+    async detect() {
+        const result = {
+            isAffected: false,
+            instanceIssues: [],
+            recommendations: [],
+        };
+        const dbType = this.globalConfig.database.type;
+        const enableWAL = this.globalConfig.database.sqlite.enableWAL;
+        if (dbType === 'sqlite' && !enableWAL) {
+            result.isAffected = true;
+            result.instanceIssues.push({
+                title: 'SQLite legacy driver removed',
+                description: 'SQLite now uses WAL (Write-Ahead Logging) mode exclusively. The legacy driver (DB_SQLITE_POOL_SIZE=0) has been removed. Three database files will be created: database.sqlite (main), database.sqlite-wal (write-ahead log), and database.sqlite-shm (shared memory).',
+                level: 'warning',
+            });
+            result.instanceIssues.push({
+                title: 'File system compatibility requirements',
+                description: 'Incompatible file systems include: NFS versions < 4, CIFS/SMB network shares, read-only file systems, and some container overlay filesystems.',
+                level: 'warning',
+            });
+            result.recommendations.push({
+                action: 'Set DB_SQLITE_POOL_SIZE to enable WAL mode',
+                description: 'Set DB_SQLITE_POOL_SIZE to a value >= 1 (recommended: 3) to use the modern SQLite driver with WAL mode',
+            });
+            result.recommendations.push({
+                action: 'Update backup procedures',
+                description: 'Ensure backups include all three SQLite files (database.sqlite, database.sqlite-wal, database.sqlite-shm) or use the online backup API',
+            });
+            result.recommendations.push({
+                action: 'Verify file system compatibility',
+                description: 'Verify Docker volumes and file systems support shared memory operations required by WAL mode',
+            });
+            result.recommendations.push({
+                action: 'Rollback procedure if needed',
+                description: 'If rolling back to v1.x, convert back to rollback journal mode using: sqlite3 ~/.n8n/database.sqlite "PRAGMA journal_mode=DELETE;"',
+            });
+        }
+        return result;
+    }
+};
+exports.SqliteLegacyDriverRule = SqliteLegacyDriverRule;
+exports.SqliteLegacyDriverRule = SqliteLegacyDriverRule = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [config_1.GlobalConfig])
+], SqliteLegacyDriverRule);
+//# sourceMappingURL=sqlite-legacy-driver.rule.js.map

package/dist/modules/breaking-changes/rules/v2/sqlite-legacy-driver.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-legacy-driver.rule.js","sourceRoot":"","sources":["../../../../../src/modules/breaking-changes/rules/v2/sqlite-legacy-driver.rule.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA2C;AAC3C,gCAAkC;AAU3B,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAClC,YAA6B,YAA0B;QAA1B,iBAAY,GAAZ,YAAY,CAAc;QAEvD,OAAE,GAAW,yBAAyB,CAAC;IAFmB,CAAC;IAI3D,WAAW;QACV,OAAO;YACN,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,6BAA6B;YACpC,WAAW,EACV,4FAA4F;YAC7F,QAAQ,YAAiC;YACzC,QAAQ,EAAE,KAAK;YACf,gBAAgB,EAAE,uEAAuE;SACzF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM;QACX,MAAM,MAAM,GAA4B;YACvC,UAAU,EAAE,KAAK;YACjB,cAAc,EAAE,EAAE;YAClB,eAAe,EAAE,EAAE;SACnB,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;QAE/C,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;QAG9D,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;YACzB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,8BAA8B;gBACrC,WAAW,EACV,uQAAuQ;gBACxQ,KAAK,EAAE,SAAS;aAChB,CAAC,CAAC;YAEH,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,wCAAwC;gBAC/C,WAAW,EACV,+IAA+I;gBAChJ,KAAK,EAAE,SAAS;aAChB,CAAC,CAAC;YAEH,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC;gBAC3B,MAAM,EAAE,4CAA4C;gBACpD,WAAW,EACV,wGAAwG;aACzG,CAAC,CAAC;YAEH,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC;gBAC3B,MAAM,EAAE,0BAA0B;gBAClC,WAAW,EACV,wIAAwI;aACzI,CAAC,CAAC;YAEH,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC;gBAC3B,MAAM,EAAE,kCAAkC;gBAC1C,WAAW,EACV,8FAA8F;aAC/F,CAAC,CAAC;YAEH,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC;gBAC3B,MAAM,EAAE,8BAA8B;gBACtC,WAAW,EACV,oIAAoI;aACrI,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;CACD,CAAA;AAxEY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,YAAO,GAAE;qCAEkC,qBAAY;GAD3C,sBAAsB,CAwElC"}

package/dist/modules/breaking-changes/rules/v2/task-runner-docker-image.rule.d.ts

@@ -0,0 +1,6 @@
+import type { BreakingChangeRuleMetadata, IBreakingChangeInstanceRule, InstanceDetectionReport } from '../../types';
+export declare class TaskRunnerDockerImageRule implements IBreakingChangeInstanceRule {
+    id: string;
+    getMetadata(): BreakingChangeRuleMetadata;
+    detect(): Promise<InstanceDetectionReport>;
+}