chore: bump n8n to n8n@2.31.5

[tropibot]

Automated version bump triggered by release n8n@2.31.5.

Changes

• upstream version (n8n-io/n8n) → n8n@2.31.5
• version 0.1.4 → 0.1.5
• UPSTREAM_VERSION → n8n@2.31.5

Supersedes: #195

[tropibot]

Dappnode bot has built and pinned the built packages to an IPFS node, for commit: a61b5e3

This is a development version and should only be installed for testing purposes.

1. Package n8n.dnp.dappnode.eth

Install link

Hash: /ipfs/QmQrSb8vFgEpBAesPRaFCfMr4KwLHG9HhjHtLJK34k3QiT

(by dappnodebot/build-action)

[tropibot]

Package harness result

Package	Verdict	Reason	Cleanup	Duration
n8n.dnp.dappnode.eth	infrastructure_error	baseline_install_failed	passed	4s

MCP tool 'dappnode_install_package' failed: Error: Package n8n.dnp.dappnode.eth is from untrusted origin and is not signed

[tropibot]

⚠️ Package harness completed with warnings

Baseline and candidate containers became stably running; baseline signature validation was bypassed

Package	Verdict	Reason	Duration	Cleanup
n8n.dnp.dappnode.eth	⚠️ Warning	Baseline signature invalid (baseline_signature_invalid)	10m 26s	✅ Passed

Run overview

Context	Value
Pull request	dappnode/DAppNodePackage-n8n#196
Tested commit	a61b5e3a8398
Candidate artifact	Install on DAppNode · /ipfs/QmQrSb8vFgEpBAesPRaFCfMr4KwLHG9HhjHtLJK34k3QiT
Baseline request	automatic
Worker	worker-02
Run ID	gh-pr-196-a61b5e3a8398-26c394bc9d16af1a
Execution	2026-07-23T12:44:50.912321666+00:00 → 2026-07-23T12:55:17.713763138+00:00 (✅ Completed)

Baseline vs candidate

Check	Baseline	Candidate
Version	0.1.4	0.1.5
Install	✅ Passed · 1m 24s	✅ Passed · 8m 3s
Hard check	✅ Passed · 3 stable samples	✅ Passed · 3 stable samples
Containers	1 observed	1 observed
Stabilization	11s	11s
Log collection	✅ Passed · 1 container	✅ Passed · 1 container

Container comparison

• Added: none
• Removed: none
• Baseline inventory: DAppNodePackage-n8n.n8n.dnp.dappnode.eth
• Candidate inventory: DAppNodePackage-n8n.n8n.dnp.dappnode.eth
• Baseline non-running states: none
• Candidate non-running states: none
• Deterministic regressions: ✅ none

Container inventory

Baseline

Container	Service	State	Image	Created
DAppNodePackage-n8n.n8n.dnp.dappnode.eth	n8n	✅ Running	n8n.n8n.dnp.dappnode.eth:0.1.4	1784810775

Candidate

Container	Service	State	Image	Created
DAppNodePackage-n8n.n8n.dnp.dappnode.eth	n8n	✅ Running	n8n.n8n.dnp.dappnode.eth:0.1.5	1784811261

Runtime analysis _advisory

✅ Clean — Heuristic and Nexus analysis: No critical regressions; minor deprecation warnings detected.

Analyzer	Status	Summary
Composite	✅ Clean	Heuristic and Nexus analysis: No critical regressions; minor deprecation warnings detected.
Heuristic	✅ Clean	No configured candidate-only suspicious signature was found
Nexus	✅ Clean	No critical regressions; minor deprecation warnings detected.
Baseline evidence	✅ Clean	No configured suspicious signature was found
Candidate evidence	✅ Clean	No configured suspicious signature was found

Severity	Container	Finding	Evidence
⚠️ Warning	DAppNodePackage-n8n.n8n.dnp.dappnode.eth	Deprecation warnings for environment variables indicate potential future behavioral changes but do not cause current runtime failures.	- WEBHOOK_URL -> Use N8N_WEBHOOK_URL instead, which sets the base URL for both test and production webhooks. - N8N_UNVERIFIED_PACKAGES_ENABLED -> The default for this variable will change to `false` in a future version. Set it to `true` explicitly to keep installing unverified community packages. - N8N_RUNNERS_TASK_TIMEOUT -> The default for this variable will be reduced from 300 (5 minutes) to 60 (1 minute) in a future version. Set it explicitly to keep your current task timeout. - [REDACTED

Cleanup and diagnostics

Check	Result
Cleanup	✅ Passed
Leftover packages	none
Cleanup error	none

Phase	Code	Message
Baseline install	baseline_signature_invalid	baseline signature validation failed and was bypassed: MCP tool 'dappnode_install_package' failed: Error: Package n8n.dnp.dappnode.eth is from untrusted origin and is not signed

---

_{Deterministic checks decide the verdict. Runtime log analysis is advisory. TropiBot publishes bounded summaries and never posts raw logs.}