myftija · Oct 30, 2026 · Oct 30, 2026
diff --git a/.changeset/chat-turn-start-cursor.md b/.changeset/chat-turn-start-cursor.md
diff --git a/.changeset/cli-login-approval-code.md b/.changeset/cli-login-approval-code.md
diff --git a/.changeset/cli-webhook-secret-commands.md b/.changeset/cli-webhook-secret-commands.md
diff --git a/.changeset/cloud-oidc-aws.md b/.changeset/cloud-oidc-aws.md
diff --git a/.changeset/convex-refresh.md b/.changeset/convex-refresh.md
diff --git a/.changeset/deprecate-legacy-bun.md b/.changeset/deprecate-legacy-bun.md
diff --git a/.changeset/metadata-root-only-paths.md b/.changeset/metadata-root-only-paths.md
diff --git a/.server-changes/cli-login-network-context.md b/.server-changes/cli-login-network-context.md
diff --git a/.server-changes/cli-login-single-use-codes.md b/.server-changes/cli-login-single-use-codes.md
diff --git a/.server-changes/faster-trace-view-search.md b/.server-changes/faster-trace-view-search.md
diff --git a/.server-changes/fix-traces-lost-on-empty-exception-events.md b/.server-changes/fix-traces-lost-on-empty-exception-events.md
diff --git a/.server-changes/individual-api-key-migration.md b/.server-changes/individual-api-key-migration.md
diff --git a/hosting/k8s/helm/Chart.yaml b/hosting/k8s/helm/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: trigger
 description: The official Trigger.dev Helm chart
 type: application
-version: 4.8.2
-appVersion: v4.8.2
+version: 4.8.3
+appVersion: v4.8.3
 home: https://trigger.dev
 sources:
   - https://github.com/triggerdotdev/trigger.dev

diff --git a/packages/build/CHANGELOG.md b/packages/build/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @trigger.dev/build
 
+## 4.8.3
+
+### Patch Changes
+
+- Updated dependencies:
+  - `@trigger.dev/core@4.8.3`
+
 ## 4.8.2
 
 ### Patch Changes

diff --git a/packages/build/package.json b/packages/build/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@trigger.dev/build",
-  "version": "4.8.2",
+  "version": "4.8.3",
   "description": "trigger.dev build extensions",
   "license": "MIT",
   "publishConfig": {
@@ -82,7 +82,7 @@
   },
   "dependencies": {
     "@prisma/config": "^6.10.0",
-    "@trigger.dev/core": "workspace:4.8.2",
+    "@trigger.dev/core": "workspace:4.8.3",
     "mlly": "^1.7.1",
     "pkg-types": "^1.1.3",
     "tinyglobby": "^0.2.2",

diff --git a/packages/cli-v3/CHANGELOG.md b/packages/cli-v3/CHANGELOG.md
@@ -1,5 +1,17 @@
 # trigger.dev
 
+## 4.8.3
+
+### Patch Changes
+
+- CLI and MCP logins are now bound to the machine that started them. Approving a login in your browser sends you back to the CLI automatically, or, when the browser is on another machine, shows a code to paste into the terminal (or pass with `trigger.dev login --code`). Older CLI versions will need to upgrade to log in. ([`1a36c23fb`](https://github.com/triggerdotdev/trigger.dev/commit/1a36c23fb1f4bee60eb7e3ed7a62836ba4a11bb9))
+- Add `trigger webhooks set-secret` and `trigger webhooks generate-secret`, which store a webhook endpoint's signing secret without printing it. `set-secret` reads the secret from a pipe, an environment variable or a `.env` file, and `generate-secret` saves the new secret to an env file. When the endpoint already has a secret, both ask how long the old one keeps working (or take `--previous-secret-ttl 24h` in scripts). The MCP server's `set_webhook_secret` and `generate_webhook_secret` descriptions now point AI agents at these commands, so the secret stays out of the agent's context. ([`daaaa41db`](https://github.com/triggerdotdev/trigger.dev/commit/daaaa41dbb0c4ed92887addbd27d17f55f516817))
+- Deprecates the legacy Bun runtime. `runtime: "bun"` (and its explicit spelling `"bun-legacy"`), which deploys Bun 1.3.3 with Node.js 20 alongside it, now prints a deprecation warning, and deploys that use it will be rejected from January 5, 2027. Switch to `runtime: "bun-1.4"` (Bun 1.4.4 on an image with no Node.js binary) and redeploy. ([`5f8171cab`](https://github.com/triggerdotdev/trigger.dev/commit/5f8171cab0e5d2b02e6446455b6569ba7c031a3b))
+- Updated dependencies:
+  - `@trigger.dev/core@4.8.3`
+  - `@trigger.dev/build@4.8.3`
+  - `@trigger.dev/schema-to-json@4.8.3`
+
 ## 4.8.2
 
 ### Patch Changes

diff --git a/packages/cli-v3/package.json b/packages/cli-v3/package.json
@@ -1,6 +1,6 @@
 {
   "name": "trigger.dev",
-  "version": "4.8.2",
+  "version": "4.8.3",
   "description": "A Command-Line Interface for Trigger.dev projects",
   "type": "module",
   "license": "MIT",
@@ -84,9 +84,9 @@
     "@opentelemetry/api-logs": "0.219.0",
     "@opentelemetry/instrumentation": "0.219.0",
     "@s2-dev/streamstore": "^0.25.0",
-    "@trigger.dev/build": "workspace:4.8.2",
-    "@trigger.dev/core": "workspace:4.8.2",
-    "@trigger.dev/schema-to-json": "workspace:4.8.2",
+    "@trigger.dev/build": "workspace:4.8.3",
+    "@trigger.dev/core": "workspace:4.8.3",
+    "@trigger.dev/schema-to-json": "workspace:4.8.3",
     "ansi-escapes": "^7.0.0",
     "braces": "^3.0.3",
     "c12": "^1.11.1",

diff --git a/packages/convex/CHANGELOG.md b/packages/convex/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @trigger.dev/convex
 
+## 4.8.3
+
+### Patch Changes
+
+- Add `trigger.refresh(ctx, id)` to request an earlier status check for a Convex-tracked run, so applications using Trigger Realtime can publish results without waiting for the next scheduled poll. Requests are coalesced and rate-limited, use the existing completion callback, and retain polling as a recovery fallback. ([`ee5e5da40`](https://github.com/triggerdotdev/trigger.dev/commit/ee5e5da4073f930b8ee20b9fe0da798de4612494))
+
 ## 4.8.2
 
 ### Patch Changes

diff --git a/packages/convex/package.json b/packages/convex/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@trigger.dev/convex",
-  "version": "4.8.2",
+  "version": "4.8.3",
   "description": "Run Trigger.dev tasks from Convex mutations and query their results reactively",
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md
@@ -1,5 +1,14 @@
 # internal-platform
 
+## 4.8.3
+
+### Patch Changes
+
+- CLI and MCP logins are now bound to the machine that started them. Approving a login in your browser sends you back to the CLI automatically, or, when the browser is on another machine, shows a code to paste into the terminal (or pass with `trigger.dev login --code`). Older CLI versions will need to upgrade to log in. ([`1a36c23fb`](https://github.com/triggerdotdev/trigger.dev/commit/1a36c23fb1f4bee60eb7e3ed7a62836ba4a11bb9))
+- Add private-beta OIDC authentication for deployed Cloud tasks, with an AWS credential provider and environment-specific setup instructions. Install `@aws-sdk/client-sts` to use `@trigger.dev/sdk/oidc/aws`, upgrade your deployment CLI, and redeploy. Contact us to enable access for your organization. ([`65352bc90`](https://github.com/triggerdotdev/trigger.dev/commit/65352bc90aff3788f466569997f2f6a24229ff5a))
+- Deprecates the legacy Bun runtime. `runtime: "bun"` (and its explicit spelling `"bun-legacy"`), which deploys Bun 1.3.3 with Node.js 20 alongside it, now prints a deprecation warning, and deploys that use it will be rejected from January 5, 2027. Switch to `runtime: "bun-1.4"` (Bun 1.4.4 on an image with no Node.js binary) and redeploy. ([`5f8171cab`](https://github.com/triggerdotdev/trigger.dev/commit/5f8171cab0e5d2b02e6446455b6569ba7c031a3b))
+- Fix parent and root metadata updates being lost after one update could not be applied. Only that update is now skipped, and the rest are written. Metadata keys that name only the root, such as `$.` or `$..`, are now ignored on a run's own metadata instead of throwing, and rejected for parent and root metadata, which fails the whole request. ([`53441fd20`](https://github.com/triggerdotdev/trigger.dev/commit/53441fd20292f8b01dbf67f72069873ec07c25da))
+
 ## 4.8.2
 
 ### Patch Changes

diff --git a/packages/core/package.json b/packages/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@trigger.dev/core",
-  "version": "4.8.2",
+  "version": "4.8.3",
   "description": "Core code used across the Trigger.dev SDK and platform",
   "license": "MIT",
   "publishConfig": {

diff --git a/packages/linear/CHANGELOG.md b/packages/linear/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @trigger.dev/linear
 
+## 4.8.3
+
+### Patch Changes
+
+- Updated dependencies:
+  - `@trigger.dev/sdk@4.8.3`
+  - `@trigger.dev/core@4.8.3`
+
 ## 4.8.2
 
 ### Patch Changes

diff --git a/packages/linear/package.json b/packages/linear/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@trigger.dev/linear",
-  "version": "4.8.2",
+  "version": "4.8.3",
   "description": "Linear agent sessions as a chat frontend (channel) for trigger.dev agents",
   "license": "MIT",
   "publishConfig": {
@@ -41,15 +41,15 @@
     "check-exports": "attw --pack ."
   },
   "dependencies": {
-    "@trigger.dev/core": "workspace:4.8.2"
+    "@trigger.dev/core": "workspace:4.8.3"
   },
   "peerDependencies": {
-    "@trigger.dev/sdk": "workspace:^4.8.2",
+    "@trigger.dev/sdk": "workspace:^4.8.3",
     "ai": "^5.0.0 || ^6.0.0 || >=7.0.0-canary <8"
   },
   "devDependencies": {
     "@arethetypeswrong/cli": "^0.18.5",
-    "@trigger.dev/sdk": "workspace:4.8.2",
+    "@trigger.dev/sdk": "workspace:4.8.3",
     "@types/node": "^24.13.3",
     "rimraf": "6.0.1",
     "tshy": "^3.0.2",

diff --git a/packages/python/CHANGELOG.md b/packages/python/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @trigger.dev/python
 
+## 4.8.3
+
+### Patch Changes
+
+- Updated dependencies:
+  - `@trigger.dev/sdk@4.8.3`
+  - `@trigger.dev/core@4.8.3`
+  - `@trigger.dev/build@4.8.3`
+
 ## 4.8.2
 
 ### Patch Changes

diff --git a/packages/python/package.json b/packages/python/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@trigger.dev/python",
-  "version": "4.8.2",
+  "version": "4.8.3",
   "description": "Python runtime and build extension for Trigger.dev",
   "license": "MIT",
   "publishConfig": {
@@ -45,7 +45,7 @@
     "check-exports": "attw --pack ."
   },
   "dependencies": {
-    "@trigger.dev/core": "workspace:4.8.2",
+    "@trigger.dev/core": "workspace:4.8.3",
     "tinyexec": "^0.3.2"
   },
   "devDependencies": {
@@ -55,12 +55,12 @@
     "typescript": "catalog:",
     "tsx": "4.17.0",
     "@arethetypeswrong/cli": "^0.18.5",
-    "@trigger.dev/build": "workspace:4.8.2",
-    "@trigger.dev/sdk": "workspace:4.8.2"
+    "@trigger.dev/build": "workspace:4.8.3",
+    "@trigger.dev/sdk": "workspace:4.8.3"
   },
   "peerDependencies": {
-    "@trigger.dev/sdk": "workspace:^4.8.2",
-    "@trigger.dev/build": "workspace:^4.8.2"
+    "@trigger.dev/sdk": "workspace:^4.8.3",
+    "@trigger.dev/build": "workspace:^4.8.3"
   },
   "engines": {
     "node": ">=18.20.0"

diff --git a/packages/react-hooks/CHANGELOG.md b/packages/react-hooks/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @trigger.dev/react-hooks
 
+## 4.8.3
+
+### Patch Changes
+
+- Updated dependencies:
+  - `@trigger.dev/core@4.8.3`
+
 ## 4.8.2
 
 ### Patch Changes

diff --git a/packages/react-hooks/package.json b/packages/react-hooks/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@trigger.dev/react-hooks",
-  "version": "4.8.2",
+  "version": "4.8.3",
   "description": "trigger.dev react hooks",
   "license": "MIT",
   "publishConfig": {
@@ -37,7 +37,7 @@
     "check-exports": "attw --pack ."
   },
   "dependencies": {
-    "@trigger.dev/core": "workspace:^4.8.2",
+    "@trigger.dev/core": "workspace:^4.8.3",
     "swr": "^2.2.5"
   },
   "devDependencies": {

diff --git a/packages/redis-worker/CHANGELOG.md b/packages/redis-worker/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @trigger.dev/redis-worker
 
+## 4.8.3
+
+### Patch Changes
+
+- Updated dependencies:
+  - `@trigger.dev/core@4.8.3`
+
 ## 4.8.2
 
 ### Patch Changes

diff --git a/packages/redis-worker/package.json b/packages/redis-worker/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@trigger.dev/redis-worker",
-  "version": "4.8.2",
+  "version": "4.8.3",
   "description": "Redis worker for trigger.dev",
   "license": "MIT",
   "publishConfig": {
@@ -23,7 +23,7 @@
     "test": "vitest --sequence.concurrent=false --no-file-parallelism"
   },
   "dependencies": {
-    "@trigger.dev/core": "workspace:4.8.2",
+    "@trigger.dev/core": "workspace:4.8.3",
     "nanoid": "^5.1.16",
     "p-limit": "^6.2.0",
     "seedrandom": "^3.0.5",

diff --git a/packages/rsc/CHANGELOG.md b/packages/rsc/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @trigger.dev/rsc
 
+## 4.8.3
+
+### Patch Changes
+
+- Updated dependencies:
+  - `@trigger.dev/core@4.8.3`
+
 ## 4.8.2
 
 ### Patch Changes

diff --git a/packages/rsc/package.json b/packages/rsc/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@trigger.dev/rsc",
-  "version": "4.8.2",
+  "version": "4.8.3",
   "description": "trigger.dev rsc",
   "license": "MIT",
   "publishConfig": {
@@ -37,7 +37,7 @@
     "check-exports": "attw --pack ."
   },
   "dependencies": {
-    "@trigger.dev/core": "workspace:^4.8.2",
+    "@trigger.dev/core": "workspace:^4.8.3",
     "mlly": "^1.7.1",
     "react": "19.0.0-rc.1",
     "react-dom": "19.0.0-rc.1"

diff --git a/packages/schema-to-json/CHANGELOG.md b/packages/schema-to-json/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @trigger.dev/schema-to-json
 
+## 4.8.3
+
+### Patch Changes
+
+- Updated dependencies:
+  - `@trigger.dev/core@4.8.3`
+
 ## 4.8.2
 
 ### Patch Changes