github-actions · Oct 27, 2026
diff --git a/.changeset/chat-inject-mid-turn-order.md b/.changeset/chat-inject-mid-turn-order.md
diff --git a/.changeset/cost-skill-webhook-filters.md b/.changeset/cost-skill-webhook-filters.md
diff --git a/.changeset/forward-sub-agent.md b/.changeset/forward-sub-agent.md
diff --git a/.changeset/head-start-parallel-tool-results.md b/.changeset/head-start-parallel-tool-results.md
diff --git a/.changeset/metadata-key-escaped-segments.md b/.changeset/metadata-key-escaped-segments.md
diff --git a/.changeset/socket-io-client-ws.md b/.changeset/socket-io-client-ws.md
diff --git a/.changeset/subscribe-to-run-ends.md b/.changeset/subscribe-to-run-ends.md
diff --git a/.changeset/versioned-bun-runtimes.md b/.changeset/versioned-bun-runtimes.md
diff --git a/.server-changes/batch-results-run-engine-members.md b/.server-changes/batch-results-run-engine-members.md
diff --git a/.server-changes/batch-results-sharded-batch-ids.md b/.server-changes/batch-results-sharded-batch-ids.md
diff --git a/.server-changes/cancelled-run-page-stops-live-updates.md b/.server-changes/cancelled-run-page-stops-live-updates.md
diff --git a/.server-changes/child-run-trace-api-faster.md b/.server-changes/child-run-trace-api-faster.md
diff --git a/.server-changes/completion-metadata-once.md b/.server-changes/completion-metadata-once.md
diff --git a/.server-changes/email-change-confirmation.md b/.server-changes/email-change-confirmation.md
diff --git a/.server-changes/fix-concurrent-stream-subscriptions.md b/.server-changes/fix-concurrent-stream-subscriptions.md
diff --git a/.server-changes/limit-metrics.md b/.server-changes/limit-metrics.md
diff --git a/.server-changes/org-delete-cancels-subscription.md b/.server-changes/org-delete-cancels-subscription.md
diff --git a/.server-changes/progressive-trace-loading.md b/.server-changes/progressive-trace-loading.md
diff --git a/.server-changes/query-alert-watch.md b/.server-changes/query-alert-watch.md
diff --git a/.server-changes/query-alias-table-conflict.md b/.server-changes/query-alias-table-conflict.md
diff --git a/.server-changes/query-with-expression-alias.md b/.server-changes/query-with-expression-alias.md
diff --git a/.server-changes/queue-archiving-everywhere.md b/.server-changes/queue-archiving-everywhere.md
diff --git a/.server-changes/route-v1-event-store-to-v2.md b/.server-changes/route-v1-event-store-to-v2.md
diff --git a/.server-changes/run-snapshot-ordering.md b/.server-changes/run-snapshot-ordering.md
diff --git a/.server-changes/run-start-commit-ack-recovery.md b/.server-changes/run-start-commit-ack-recovery.md
diff --git a/.server-changes/session-external-id-channels-segment.md b/.server-changes/session-external-id-channels-segment.md
diff --git a/.server-changes/session-runs-always-linked.md b/.server-changes/session-runs-always-linked.md
diff --git a/.server-changes/vercel-uninstall.md b/.server-changes/vercel-uninstall.md
diff --git a/.server-changes/webhook-endpoints-sync-on-promote.md b/.server-changes/webhook-endpoints-sync-on-promote.md
diff --git a/hosting/k8s/helm/Chart.yaml b/hosting/k8s/helm/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: trigger
 description: The official Trigger.dev Helm chart
 type: application
-version: 4.8.1
-appVersion: v4.8.1
+version: 4.8.2
+appVersion: v4.8.2
 home: https://trigger.dev
 sources:
   - https://github.com/triggerdotdev/trigger.dev

diff --git a/packages/build/CHANGELOG.md b/packages/build/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @trigger.dev/build
 
+## 4.8.2
+
+### Patch Changes
+
+- Updated dependencies:
+  - `@trigger.dev/[email protected]`
+
 ## 4.8.1
 
 ### Patch Changes

diff --git a/packages/build/package.json b/packages/build/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@trigger.dev/build",
-  "version": "4.8.1",
+  "version": "4.8.2",
   "description": "trigger.dev build extensions",
   "license": "MIT",
   "publishConfig": {
@@ -82,7 +82,7 @@
   },
   "dependencies": {
     "@prisma/config": "^6.10.0",
-    "@trigger.dev/core": "workspace:4.8.1",
+    "@trigger.dev/core": "workspace:4.8.2",
     "mlly": "^1.7.1",
     "pkg-types": "^1.1.3",
     "tinyglobby": "^0.2.2",

diff --git a/packages/cli-v3/CHANGELOG.md b/packages/cli-v3/CHANGELOG.md
@@ -1,5 +1,16 @@
 # trigger.dev
 
+## 4.8.2
+
+### Patch Changes
+
+- Upgrade `socket.io-client` to 4.8.4 so projects using the SDK and CLI install `ws` 8.21 instead of 8.17.1, which has published advisories (GHSA-96hv-2xvq-fx4p, GHSA-58qx-3vcg-4xpx). The old pin blocked upgrading `ws` without a package manager override. ([`2df9860b4`](https://github.com/triggerdotdev/trigger.dev/commit/2df9860b4c736da3ba3b8dd61b8f08a4d9b03521))
+- Adds the `bun-1.4` runtime. `runtime: "bun-1.4"` deploys on Bun 1.4.4 in a Bun-only image with no Node.js binary, and the run controller itself runs under Bun. `runtime: "bun"` is unchanged (Bun 1.3 with Node.js alongside it); `bun-legacy` is accepted as an explicit spelling of the same runtime. On Bun 1.4 the worker no longer crashes at startup on the `--no-warnings=ExperimentalWarning` flag. ([`a8a87850b`](https://github.com/triggerdotdev/trigger.dev/commit/a8a87850bdaa57b6e40c0dcdbdf8b5bf59a39113))
+- Updated dependencies:
+  - `@trigger.dev/[email protected]`
+  - `@trigger.dev/[email protected]`
+  - `@trigger.dev/[email protected]`
+
 ## 4.8.1
 
 ### Patch Changes

diff --git a/packages/cli-v3/package.json b/packages/cli-v3/package.json
@@ -1,6 +1,6 @@
 {
   "name": "trigger.dev",
-  "version": "4.8.1",
+  "version": "4.8.2",
   "description": "A Command-Line Interface for Trigger.dev projects",
   "type": "module",
   "license": "MIT",
@@ -84,9 +84,9 @@
     "@opentelemetry/api-logs": "0.219.0",
     "@opentelemetry/instrumentation": "0.219.0",
     "@s2-dev/streamstore": "^0.25.0",
-    "@trigger.dev/build": "workspace:4.8.1",
-    "@trigger.dev/core": "workspace:4.8.1",
-    "@trigger.dev/schema-to-json": "workspace:4.8.1",
+    "@trigger.dev/build": "workspace:4.8.2",
+    "@trigger.dev/core": "workspace:4.8.2",
+    "@trigger.dev/schema-to-json": "workspace:4.8.2",
     "ansi-escapes": "^7.0.0",
     "braces": "^3.0.3",
     "c12": "^1.11.1",

diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md
@@ -1,5 +1,14 @@
 # internal-platform
 
+## 4.8.2
+
+### Patch Changes
+
+- Run metadata operations now reject JSON-path keys that use escaped dots to reach `__proto__`, `constructor` or `prototype`. ([`dce5048a8`](https://github.com/triggerdotdev/trigger.dev/commit/dce5048a8e4ac35e72f85b4534239dec6a013211))
+- Upgrade `socket.io-client` to 4.8.4 so projects using the SDK and CLI install `ws` 8.21 instead of 8.17.1, which has published advisories (GHSA-96hv-2xvq-fx4p, GHSA-58qx-3vcg-4xpx). The old pin blocked upgrading `ws` without a package manager override. ([`2df9860b4`](https://github.com/triggerdotdev/trigger.dev/commit/2df9860b4c736da3ba3b8dd61b8f08a4d9b03521))
+- `runs.subscribeToRun` now ends after the run completes. The `for await` loop exits right after the update with the final status, and the subscription stops its connection, so a script that subscribes to a run exits on its own. Pass `stopOnCompletion: false` to keep the subscription open after completion. ([`485ab83aa`](https://github.com/triggerdotdev/trigger.dev/commit/485ab83aaf55057af9da8944570285f05880eaaf))
+- Adds the `bun-1.4` runtime. `runtime: "bun-1.4"` deploys on Bun 1.4.4 in a Bun-only image with no Node.js binary, and the run controller itself runs under Bun. `runtime: "bun"` is unchanged (Bun 1.3 with Node.js alongside it); `bun-legacy` is accepted as an explicit spelling of the same runtime. On Bun 1.4 the worker no longer crashes at startup on the `--no-warnings=ExperimentalWarning` flag. ([`a8a87850b`](https://github.com/triggerdotdev/trigger.dev/commit/a8a87850bdaa57b6e40c0dcdbdf8b5bf59a39113))
+
 ## 4.8.1
 
 ## 4.8.0

diff --git a/packages/core/package.json b/packages/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@trigger.dev/core",
-  "version": "4.8.1",
+  "version": "4.8.2",
   "description": "Core code used across the Trigger.dev SDK and platform",
   "license": "MIT",
   "publishConfig": {

diff --git a/packages/linear/CHANGELOG.md b/packages/linear/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @trigger.dev/linear
 
+## 4.8.2
+
+### Patch Changes
+
+- Updated dependencies:
+  - `@trigger.dev/[email protected]`
+  - `@trigger.dev/[email protected]`
+
 ## 4.8.1
 
 ### Patch Changes

diff --git a/packages/linear/package.json b/packages/linear/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@trigger.dev/linear",
-  "version": "4.8.1",
+  "version": "4.8.2",
   "description": "Linear agent sessions as a chat frontend (channel) for trigger.dev agents",
   "license": "MIT",
   "publishConfig": {
@@ -41,15 +41,15 @@
     "check-exports": "attw --pack ."
   },
   "dependencies": {
-    "@trigger.dev/core": "workspace:4.8.1"
+    "@trigger.dev/core": "workspace:4.8.2"
   },
   "peerDependencies": {
-    "@trigger.dev/sdk": "workspace:^4.8.1",
+    "@trigger.dev/sdk": "workspace:^4.8.2",
     "ai": "^5.0.0 || ^6.0.0 || >=7.0.0-canary <8"
   },
   "devDependencies": {
     "@arethetypeswrong/cli": "^0.18.5",
-    "@trigger.dev/sdk": "workspace:4.8.1",
+    "@trigger.dev/sdk": "workspace:4.8.2",
     "@types/node": "^24.13.3",
     "rimraf": "6.0.1",
     "tshy": "^3.0.2",

diff --git a/packages/python/CHANGELOG.md b/packages/python/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @trigger.dev/python
 
+## 4.8.2
+
+### Patch Changes
+
+- Updated dependencies:
+  - `@trigger.dev/[email protected]`
+  - `@trigger.dev/[email protected]`
+  - `@trigger.dev/[email protected]`
+
 ## 4.8.1
 
 ### Patch Changes

diff --git a/packages/python/package.json b/packages/python/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@trigger.dev/python",
-  "version": "4.8.1",
+  "version": "4.8.2",
   "description": "Python runtime and build extension for Trigger.dev",
   "license": "MIT",
   "publishConfig": {
@@ -45,7 +45,7 @@
     "check-exports": "attw --pack ."
   },
   "dependencies": {
-    "@trigger.dev/core": "workspace:4.8.1",
+    "@trigger.dev/core": "workspace:4.8.2",
     "tinyexec": "^0.3.2"
   },
   "devDependencies": {
@@ -55,12 +55,12 @@
     "typescript": "catalog:",
     "tsx": "4.17.0",
     "@arethetypeswrong/cli": "^0.18.5",
-    "@trigger.dev/build": "workspace:4.8.1",
-    "@trigger.dev/sdk": "workspace:4.8.1"
+    "@trigger.dev/build": "workspace:4.8.2",
+    "@trigger.dev/sdk": "workspace:4.8.2"
   },
   "peerDependencies": {
-    "@trigger.dev/sdk": "workspace:^4.8.1",
-    "@trigger.dev/build": "workspace:^4.8.1"
+    "@trigger.dev/sdk": "workspace:^4.8.2",
+    "@trigger.dev/build": "workspace:^4.8.2"
   },
   "engines": {
     "node": ">=18.20.0"