fix: security release 2026-07-08 (#4316)

Author: carderne

.changeset/block-metadata-proto-pollution.md

@@ -0,0 +1,5 @@
+---
+"@trigger.dev/core": patch
+---
+
+Prevent prototype pollution when applying run metadata operations or reconstructing nested telemetry attributes, while preserving legitimate `constructor` and `prototype` fields.

.changeset/cli-login-poll-window.md

@@ -0,0 +1,6 @@
+---
+"@trigger.dev/core": patch
+"trigger.dev": patch
+---
+
+Require explicit browser approval for CLI and MCP login, with resilient polling while approval is pending.

.changeset/worker-id-deployment-friendly-id.md

@@ -0,0 +1,5 @@
+---
+"trigger.dev": patch
+---
+
+Deployed task telemetry now reports the deployment identifier (e.g. `deployment_abc123`) in the `worker.id` attribute, instead of an opaque internal value. Upgrade to get the readable identifier in your own OpenTelemetry exporters.

.changeset/workload-deployment-token.md

@@ -0,0 +1,5 @@
+---
+"@trigger.dev/core": patch
+---
+
+Add helpers to mint and verify the deployment-scoped token used to authenticate run controllers to the platform.

.env.example

@@ -2,6 +2,7 @@
 SESSION_SECRET=abcdef1234
 MAGIC_LINK_SECRET=abcdef1234
 ENCRYPTION_KEY=ae13021afef0819c3a307ad487071c06 # Must be a random 16 byte hex string. You can generate an encryption key by running `openssl rand -hex 16` in your terminal
+MANAGED_WORKER_SECRET=abcdef1234 # Must match the supervisor's MANAGED_WORKER_SECRET
 LOGIN_ORIGIN=http://localhost:3030
 DATABASE_URL=postgresql://postgres:postgres@localhost:5432/postgres?schema=public
 # This sets the URL used for direct connections to the database and should only be needed in limited circumstances

.github/workflows/helm-prerelease.yml

@@ -52,12 +52,14 @@ jobs:
 
       - name: Lint Helm Chart
         run: |
-          helm lint ./hosting/k8s/helm/
+          helm lint ./hosting/k8s/helm/ \
+            --values ./hosting/k8s/helm/ci/lint-values.yaml
 
       - name: Render templates
         run: |
           helm template test-release ./hosting/k8s/helm/ \
             --values ./hosting/k8s/helm/values.yaml \
+            --values ./hosting/k8s/helm/ci/lint-values.yaml \
             --output-dir ./helm-output
 
       - name: Validate manifests

.github/workflows/release-helm.yml

@@ -47,12 +47,14 @@ jobs:
 
       - name: Lint Helm Chart
         run: |
-          helm lint ./hosting/k8s/helm/
+          helm lint ./hosting/k8s/helm/ \
+            --values ./hosting/k8s/helm/ci/lint-values.yaml
 
       - name: Render templates
         run: |
           helm template test-release ./hosting/k8s/helm/ \
             --values ./hosting/k8s/helm/values.yaml \
+            --values ./hosting/k8s/helm/ci/lint-values.yaml \
             --output-dir ./helm-output
 
       - name: Validate manifests

.server-changes/otlp-ingestion-rate-limit.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: improvement
+---
+
+Added optional request rate limiting for telemetry ingestion endpoints.

.server-changes/require-webapp-auth-secrets.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: breaking
+---
+
+Self-hosted deployments no longer ship shared default credentials; fresh installs generate their own. If yours still uses a previously published default, set a unique value before upgrading, or set `ALLOW_INSECURE_DEFAULT_SECRETS=true` to keep booting while you migrate.

.server-changes/scope-deployment-background-worker-lookup.md

@@ -0,0 +1,6 @@
+---
+area: webapp
+type: fix
+---
+
+Background-worker deployment lookups are now scoped to the authenticated environment.