n8n 2.39.0 stops advertising instance MCP OAuth discovery when MCP access is disabled

GitHub·medium signalXBlueskyLinkedInCopy link

Released 2026-09-08T08:25Z, n8n 2.39.0 hides instance MCP OAuth discovery when MCP access is off (#36726), so a disabled feature no longer leaks a discoverable auth surface. The release also hardens agent workflow tools against unpublished, missing or incompatible workflows (#37772), makes workflow tools wait instead of throwing when the parent workflow is suspended (#37087), always redacts OTel header values in settings responses (#37283), and updates the Qdrant client while dropping undici v6 so AI requests work on Node 26 (#37758).