github-featured/triggerdotdev--trigger.dev

Files

T

nicktrn 706a0b88c9 chore: upgrade pnpm to 10.33.2 with security hardening (#3489 )

## Summary

- Upgrade pnpm from 10.23.0 → 10.33.2 (latest minor)
- Enable `blockExoticSubdeps: true` for supply-chain defense
- Update all version references across the repo

## Security improvements in 10.28.2+

- Path traversal protection in `directories.bin`
- Symlink-escape protection for `file:/git:` dependencies (prevents
reading `/etc/passwd`, `~/.ssh/...`)
- https://pnpm.io/settings#blockexoticsubdeps

## Files updated

- `package.json` — `packageManager` field
- `docker/Dockerfile` — 5 `corepack prepare` calls
- `apps/supervisor/Containerfile` — 1 `corepack prepare` call
- `pnpm-workspace.yaml` — added `blockExoticSubdeps: true`
- `CLAUDE.md`, `AGENTS.md`, `CONTRIBUTING.md`, `ai/references/repo.md` —
version references

## Verification

- `pnpm install --frozen-lockfile` succeeds (no lockfile regen needed)
- `pnpm install` (plain) produces zero lockfile diff
- All CI checks pass

Slack thread:
https://triggerdotdev.slack.com/archives/C061L2MHW93/p1777625600974279?thread_ts=1777622248.762639&cid=C061L2MHW93

https://claude.ai/code/session_01G759MUqmjsPh9k1qDxbdjG

---------

Co-authored-by: Claude <noreply@anthropic.com>

2026-05-01 16:24:26 +01:00

src

feat(supervisor): optional ndots override for runner pods (#3441 )

2026-04-24 13:05:55 +02:00

.env.example

Fix: fixes and prerequisites for v4 self-hosting (#2150 )

2025-06-04 18:02:38 +01:00

.nvmrc

fix(repo): undo node.js supervisor upgrades and use the multiplatform node.js digest in Dockerfile (#2895 )

2026-01-15 11:49:37 +00:00

CLAUDE.md

chore(claude): Improve claude code instructions (#3161 )

2026-03-02 12:42:05 +00:00

Containerfile

chore: upgrade pnpm to 10.33.2 with security hardening (#3489 )

2026-05-01 16:24:26 +01:00

package.json

feat(supervisor): compute workload manager (#3114 )

2026-03-29 22:03:59 +01:00

README.md

Allow self-hosted deploys locally by pointing to docker.host.internal on macOS (#2064 )

2025-05-16 15:20:48 +01:00

tsconfig.json

re2: env based queue selection algo (#1775 )

2025-03-07 14:30:19 +00:00

README.md

Supervisor

Dev setup

Create a worker group

api_url=http://localhost:3030
wg_name=my-worker

# edit this
admin_pat=tr_pat_...

curl -sS \
    -X POST \
    "$api_url/admin/api/v1/workers" \
    -H "Authorization: Bearer $admin_pat" \
    -H "Content-Type: application/json" \
    -d "{\"name\": \"$wg_name\"}"

If the worker group is newly created, the response will include a token field. If the group already exists, no token is returned.

Create .env and set the worker token

cp .env.example .env

# Then edit your .env and set this to the token.plaintext value
TRIGGER_WORKER_TOKEN=tr_wgt_...

Start the supervisor

pnpm dev

Build CLI, then deploy a test project

pnpm exec trigger deploy --self-hosted

# The additional network flag is required on linux
pnpm exec trigger deploy --self-hosted --network host

Worker group management

Shared variables

api_url=http://localhost:3030
admin_pat=tr_pat_... # edit this

These are used by all commands

Create a worker group

wg_name=my-worker

curl -sS \
    -X POST \
    "$api_url/admin/api/v1/workers" \
    -H "Authorization: Bearer $admin_pat" \
    -H "Content-Type: application/json" \
    -d "{\"name\": \"$wg_name\"}"

If the worker group already exists, no token will be returned

Set a worker group as default for a project

wg_name=my-worker
project_id=clsw6q8wz...

curl -sS \
    -X POST \
    "$api_url/admin/api/v1/workers" \
    -H "Authorization: Bearer $admin_pat" \
    -H "Content-Type: application/json" \
    -d "{\"name\": \"$wg_name\", \"projectId\": \"$project_id\", \"makeDefaultForProject\": true}"

If the worker group doesn't exist, yet it will be created
If the worker group already exists, it will be attached to the project as default. No token will be returned.

Remove the default worker group from a project

project_id=clsw6q8wz...

curl -sS \
    -X POST \
    "$api_url/admin/api/v1/workers" \
    -H "Authorization: Bearer $admin_pat" \
    -H "Content-Type: application/json" \
    -d "{\"projectId\": \"$project_id\", \"removeDefaultFromProject\": true}"

The project will then use the global default again
When removeDefaultFromProject: true no other actions will be performed