From 1d03a59b6ce04c7799c95b6391993f9aee07dd27 Mon Sep 17 00:00:00 2001
From: Waleed Latif <walif6@gmail.com>
Date: Mon, 9 Nov 2026 14:03:22 -0800
Subject: [PATCH] chore(deps): drop the expired Trigger.dev release-age
 exemption

---
 bunfig.toml | 9 +--------
 1 file changed, 1 insertion(+), 8 deletions(-)

diff --git a/bunfig.toml b/bunfig.toml
index 3a21b48225b..89990bb7b01 100644
--- a/bunfig.toml
+++ b/bunfig.toml
@@ -4,17 +4,10 @@ exact = true
 # (blocks freshly published, potentially compromised releases).
 minimumReleaseAge = 604800
 # Explicit framework pins must install before their release reaches the age threshold: a
-# security release of Next.js is pinned exactly the day it ships. Trigger.dev 4.8.3 (published
-# 2026-10-30, the first release with workload identity) is exempted until it clears the threshold
-# on 2026-11-06; drop the four Trigger.dev entries then. They are bare names because Bun 1.4 ignores
-# version-pinned exclusions; `exact = true` and the lockfile still hold the packages at 4.8.3.
+# security release of Next.js is pinned exactly the day it ships.
 minimumReleaseAgeExcludes = [
   "next",
   "@next/env",
-  "@trigger.dev/sdk",
-  "@trigger.dev/core",
-  "@trigger.dev/build",
-  "trigger.dev",
 ]
 
 [run]