chore: bump n8n to n8n@2.37.11

[tropibot]

Automated version bump triggered by release n8n@2.37.11.

Changes

• upstream version (n8n-io/n8n) → n8n@2.37.11
• UPSTREAM_VERSION → n8n@2.37.11

Supersedes: #221

[tropibot]

Dappnode bot has built and pinned the built packages to an IPFS node, for commit: 6d2c60b

This is a development version and should only be installed for testing purposes.

1. Package n8n.dnp.dappnode.eth

Install link

Hash: /ipfs/QmPqmFNU1ccmRk6kA1wNSfA5H5hD995boGVr8hxSd7GEJa

(by dappnodebot/build-action)

[tropibot]

⚠️ Package harness completed with warnings

Baseline and candidate containers became stably running; baseline signature validation was bypassed

Package	Verdict	Reason	Duration	Cleanup
n8n.dnp.dappnode.eth	⚠️ Warning	Baseline signature invalid (baseline_signature_invalid)	16m 28s	✅ Passed

Run overview

Context	Value
Pull request	dappnode/DAppNodePackage-n8n#222
Tested commit	6d2c60b9d7e5
Candidate artifact	Install on DAppNode · /ipfs/QmPqmFNU1ccmRk6kA1wNSfA5H5hD995boGVr8hxSd7GEJa
Baseline request	automatic
Worker	worker-01
Run ID	gh-pr-222-6d2c60b9d7e5-2bd4ae1e1b6f7fcc
Execution	2026-09-07T13:11:30.137381837+00:00 → 2026-09-07T13:27:58.498644694+00:00 (✅ Completed)

Baseline vs candidate

Check	Baseline	Candidate
Version	0.1.4	0.1.5
Install	✅ Passed · 3m 54s	✅ Passed · 10m 35s
Hard check	✅ Passed · 5 stable samples	✅ Passed · 5 stable samples
Containers	1 observed	1 observed
Stabilization	22s	22s
Log collection	✅ Passed · 1 container	✅ Passed · 1 container

Container comparison

• Added: none
• Removed: none
• Baseline inventory: DAppNodePackage-n8n.n8n.dnp.dappnode.eth
• Candidate inventory: DAppNodePackage-n8n.n8n.dnp.dappnode.eth
• Baseline non-running states: none
• Candidate non-running states: none
• Deterministic regressions: ✅ none

Container inventory

Baseline

Container	Service	State	Image	Created
DAppNodePackage-n8n.n8n.dnp.dappnode.eth	n8n	✅ Running	n8n.n8n.dnp.dappnode.eth:0.1.4	1788786929

Candidate

Container	Service	State	Image	Created
DAppNodePackage-n8n.n8n.dnp.dappnode.eth	n8n	✅ Running	n8n.n8n.dnp.dappnode.eth:0.1.5	1788787578

Runtime analysis _advisory

⚠️ Suspicious — Heuristic and Nexus analysis: Candidate upgraded from 2.29.8 to 2.37.11 and introduced new log patterns: n8n reports ready on port 5678 before migrations are complete, plus new deprecation and ExperimentalWarning messages. No fatal startup errors observed.

Analyzer	Status	Summary
Composite	⚠️ Suspicious	Heuristic and Nexus analysis: Candidate upgraded from 2.29.8 to 2.37.11 and introduced new log patterns: n8n reports ready on port 5678 before migrations are complete, plus new deprecation and ExperimentalWarning messages. No fatal startup errors observed.
Heuristic	✅ Clean	No configured candidate-only suspicious signature was found
Nexus	⚠️ Suspicious	Candidate upgraded from 2.29.8 to 2.37.11 and introduced new log patterns: n8n reports ready on port 5678 before migrations are complete, plus new deprecation and ExperimentalWarning messages. No fatal startup errors observed.
Baseline evidence	✅ Clean	No configured suspicious signature was found
Candidate evidence	✅ Clean	No configured suspicious signature was found

Severity	Container	Finding	Evidence
⚠️ Warning	DAppNodePackage-n8n.n8n.dnp.dappnode.eth	In baseline, migrations completed before the editor was reported accessible; candidate logs show the main n8n HTTP listener reporting ready on port 5678 before migrations have finished, which could expose traffic to an inconsistent database state.	Initializing n8n process n8n ready on ::, port 5678 Migrations in progress, please do NOT stop the process.
⚠️ Warning	DAppNodePackage-n8n.n8n.dnp.dappnode.eth	Candidate logs multiple new deprecation warnings for configuration variables not present in baseline. These indicate deprecated settings that may change default behavior or be removed in future versions, creating configuration drift.	There are deprecations related to your n8n setup. Please take the recommended actions to update your configuration: - WEBHOOK_URL -> Use N8N_WEBHOOK_URL instead ... - N8N_UNVERIFIED_PACKAGES_ENABLED ... - N8N_RUNNERS_TASK_TIMEOUT ... - [REDACTED] ... - N8N_COMPRESSION_NODE_MAX_ZIP_ENTRIES ...
⚠️ Warning	DAppNodePackage-n8n.n8n.dnp.dappnode.eth	New ExperimentalWarning in candidate indicates Node.js localStorage usage without the required --localstorage-file flag. This was not present in baseline and may point to a new runtime environment issue.	[runner:js] (node:19) ExperimentalWarning: localStorage is not available because --localstorage-file was not provided.

Cleanup and diagnostics

Check	Result
Cleanup	✅ Passed
Leftover packages	none
Cleanup error	none

Phase	Code	Message
Baseline install	baseline_signature_invalid	baseline signature validation failed and was bypassed: MCP tool 'dappnode_install_package' failed: Error: Package n8n.dnp.dappnode.eth is from untrusted origin and is not signed

---

_{Deterministic checks decide the verdict. Runtime log analysis is advisory. TropiBot publishes bounded summaries and never posts raw logs.}