chore: bump n8n to n8n@2.37.10

[tropibot]

Automated version bump triggered by release n8n@2.37.10.

Changes

• upstream version (n8n-io/n8n) → n8n@2.37.10
• UPSTREAM_VERSION → n8n@2.37.10

Supersedes: #220

[tropibot]

Dappnode bot has built and pinned the built packages to an IPFS node, for commit: bccbe91

This is a development version and should only be installed for testing purposes.

1. Package n8n.dnp.dappnode.eth

Install link

Hash: /ipfs/Qmf4yZAFbwJh4LzaNjNW7hxDUdB5iWUnBqQWa3UzhP6bsA

(by dappnodebot/build-action)

[tropibot]

⚠️ Package harness completed with warnings

Baseline and candidate containers became stably running; baseline signature validation was bypassed

Package	Verdict	Reason	Duration	Cleanup
n8n.dnp.dappnode.eth	⚠️ Warning	Baseline signature invalid (baseline_signature_invalid)	17m 54s	✅ Passed

Run overview

Context	Value
Pull request	dappnode/DAppNodePackage-n8n#221
Tested commit	bccbe9103939
Candidate artifact	Install on DAppNode · /ipfs/Qmf4yZAFbwJh4LzaNjNW7hxDUdB5iWUnBqQWa3UzhP6bsA
Baseline request	automatic
Worker	worker-01
Run ID	gh-pr-221-bccbe9103939-37168c36baae2db3
Execution	2026-09-04T10:14:25.781099046+00:00 → 2026-09-04T10:32:20.594528649+00:00 (✅ Completed)

Baseline vs candidate

Check	Baseline	Candidate
Version	0.1.4	0.1.5
Install	✅ Passed · 3m 11s	✅ Passed · 12m 40s
Hard check	✅ Passed · 5 stable samples	✅ Passed · 5 stable samples
Containers	1 observed	1 observed
Stabilization	22s	22s
Log collection	✅ Passed · 1 container	✅ Passed · 1 container

Container comparison

• Added: none
• Removed: none
• Baseline inventory: DAppNodePackage-n8n.n8n.dnp.dappnode.eth
• Candidate inventory: DAppNodePackage-n8n.n8n.dnp.dappnode.eth
• Baseline non-running states: none
• Candidate non-running states: none
• Deterministic regressions: ✅ none

Container inventory

Baseline

Container	Service	State	Image	Created
DAppNodePackage-n8n.n8n.dnp.dappnode.eth	n8n	✅ Running	n8n.n8n.dnp.dappnode.eth:0.1.4	1788517058

Candidate

Container	Service	State	Image	Created
DAppNodePackage-n8n.n8n.dnp.dappnode.eth	n8n	✅ Running	n8n.n8n.dnp.dappnode.eth:0.1.5	1788517831

Runtime analysis _advisory

⚠️ Suspicious — Heuristic and Nexus analysis: Candidate completes migrations and starts n8n 2.37.10 successfully, but adds non-fatal deprecation and Node experimental warnings not present in baseline.

Analyzer	Status	Summary
Composite	⚠️ Suspicious	Heuristic and Nexus analysis: Candidate completes migrations and starts n8n 2.37.10 successfully, but adds non-fatal deprecation and Node experimental warnings not present in baseline.
Heuristic	✅ Clean	No configured candidate-only suspicious signature was found
Nexus	⚠️ Suspicious	Candidate completes migrations and starts n8n 2.37.10 successfully, but adds non-fatal deprecation and Node experimental warnings not present in baseline.
Baseline evidence	✅ Clean	No configured suspicious signature was found
Candidate evidence	✅ Clean	No configured suspicious signature was found

Severity	Container	Finding	Evidence
⚠️ Warning	DAppNodePackage-n8n.n8n.dnp.dappnode.eth	New deprecation warnings in candidate indicate package environment variables or defaults need migration before future upgrades. They are non-fatal but are new compared with baseline.	There are deprecations related to your n8n setup. Please take the recommended actions to update your configuration: - WEBHOOK_URL -> Use N8N_WEBHOOK_URL instead, which sets the base URL for both test and production webhooks. - N8N_UNVERIFIED_PACKAGES_ENABLED -> The default for this variable will change to `false` in a future version. Set it to `true` explicitly to keep installing unverified community packages. - N8N_RUNNERS_TASK_TIMEOUT -> The default for this variable will be reduced from 30
⚠️ Warning	DAppNodePackage-n8n.n8n.dnp.dappnode.eth	New Node.js experimental warning from the JS Task Runner; not seen in baseline. It is likely benign but indicates localStorage is unavailable in the runner process.	(node:19) ExperimentalWarning: localStorage is not available because --localstorage-file was not provided.

Cleanup and diagnostics

Check	Result
Cleanup	✅ Passed
Leftover packages	none
Cleanup error	none

Phase	Code	Message
Baseline install	baseline_signature_invalid	baseline signature validation failed and was bypassed: MCP tool 'dappnode_install_package' failed: Error: Package n8n.dnp.dappnode.eth is from untrusted origin and is not signed

---

_{Deterministic checks decide the verdict. Runtime log analysis is advisory. TropiBot publishes bounded summaries and never posts raw logs.}