diff --git a/bunfig.toml b/bunfig.toml
index 3a21b48225b..89990bb7b01 100644
--- a/bunfig.toml
+++ b/bunfig.toml
@@ -4,17 +4,10 @@ exact = true
 # (blocks freshly published, potentially compromised releases).
 minimumReleaseAge = 604800
 # Explicit framework pins must install before their release reaches the age threshold: a
-# security release of Next.js is pinned exactly the day it ships. Trigger.dev 4.8.3 (published
-# 2026-10-30, the first release with workload identity) is exempted until it clears the threshold
-# on 2026-11-06; drop the four Trigger.dev entries then. They are bare names because Bun 1.4 ignores
-# version-pinned exclusions; `exact = true` and the lockfile still hold the packages at 4.8.3.
+# security release of Next.js is pinned exactly the day it ships.
 minimumReleaseAgeExcludes = [
   "next",
   "@next/env",
-  "@trigger.dev/sdk",
-  "@trigger.dev/core",
-  "@trigger.dev/build",
-  "trigger.dev",
 ]
 
 [run]