Blog

Workload identity (OIDC)
Your tasks can now prove who they are, so services like Anthropic don't need a stored API key.

Changelog
•

Security incident report: Sunday November 1st
On November 1, 2026, we became aware of a security incident which impacted some of our customers. This included unauthorized access to environment variables.

Security
•

Security Disclosure: Sunday November 1st
An attacker gained unauthorized access to environment variables for a subset of organizations. We've blocked the exploit and emailed all impacted account owners with steps to mitigate.

Security
•

The Bun runtime, now even bunnier
Bun 1.4.4, a 25% smaller deploy image, checkpoints that work end to end, and a retirement date for the old Bun runtime.

Changelog
•

How we built webhooks (the second time)
Provider verification as data instead of code, filter strings that TypeScript checks for you, and a delivery pipeline that stays durable from the provider's request to your run.

Article
•

Webhooks for your AI agents
Receive webhooks from popular services like Slack, Stripe and GitHub and kick off AI agents in Trigger.dev.

Changelog
•

7 things we wish we'd known before building an AI chat agent
We built a chat agent for our developer dashboard and wanted it to be really really good. Seven tips we learned along the way: fast first replies, compaction, retries, resumable streams, prompts, tools and evals.


Article
•

Vercel environment variables cleared during synchronization
On October 6, 2026, a change we enabled caused our Vercel integration to overwrite some environment variable values with empty strings. Tasks that needed those values started failing.

Incident report
•

Introducing Ask Trigger to your dashboard
Debug, investigate and generate reports on your runs by chatting with Ask Trigger from your dashboard.


Changelog
•

Zod 4 got rid of a bunch of CPUs for us
We upgraded to Zod 4 and worker CPU dropped by nearly a third. One hot path does about 98 million parses a day. We're now Zod's first Platinum Sponsor.

Article
•

Preview branches now archive themselves
Set a policy to archive preview branches once they go quiet. Choose how many days without a deployment, keep the branches you never want touched, and preview exactly what the next cleanup will retire.

Changelog
•

Concurrency metrics and queue health
The Concurrency page now charts scheduling delay, backlog, and throttling for every queue and concurrency key, with live overrides and archiving for queues you no longer use.


Changelog
•

Themes & Accessibility
Themes are here. Choose from Light, Dark, Black, and White, follow your system automatically, then tune contrast, colors, and links to make the dashboard work better for you.


Changelog
•

Upgrading a 56TB database that's growing at 250GB per day with (nearly) no downtime
We had to upgrade our 56TB Aurora Postgres cluster by 31 July without taking Trigger.dev down. Instead of moving the database, we made the problem smaller: new runs and the control plane went to PlanetScale, and the old runs stayed behind.

Article
•
New mechanism for atomic deployments
Your app and your tasks deploy separately, so a fresh release can trigger tasks built from older code. Version skew protection pins every run to the deployment built from the same commit, across production, staging, and preview.

Changelog
•

Multiple concurrency limits per task
Cap each tenant and the whole task at the same time, share one limit across many tasks with concurrencyLimit(), and change any limit at runtime without a deploy.

Changelog