[waleedlatif1]

Summary

• Drop distrustCompromisedRoots() from the app and realtime entrypoints. Both images run Bun 1.4.4, which ships the upstream blocklist (crypto: update root certificates oven-sh/bun#46159), so the step removes nothing there: under Bun 1.4.4 it returns removed: [], while under 1.4.2 it removes emSign ECC Root CA - G3
• Keep it in the Trigger.dev init. That runtime runs on Node, and the Trigger.dev platform picks the Node build, so we can't confirm it has tls: reject chains containing blocked public keys nodejs/node#66871; there the step is a no-op once Node has the fix and a safeguard until then
• Update the tls-trust module doc to say which runtime still calls it

Type of Change

• Chore

Testing

• Ran distrustCompromisedRoots() under Bun 1.4.2 (removes the root) and 1.4.4 (removes nothing)
• Realtime tsc --noEmit, Biome, comment hygiene, realtime prune-graph, and unused-exports checks pass; full lint, type-check, and audits run in CI

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing (new tests pass the test-audit authoring gate)
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs	Ready	Preview	Oct 28, 2026 4:54pm UTC

[greptile-apps]

Confidence Score: 5/5

[Low impact] The PR appears safe to merge; no actionable issues were found.

Summary

Removes distrustCompromisedRoots() and its result logging from the app and realtime container entrypoints. Updates the shared helper’s documentation to identify Trigger.dev as its remaining caller.

• The app and realtime services rely on Bun's built-in blocklist.

_{Reviews (1) · Last reviewed commit: "chore(tls): drop the CA distrust step fr..." · Reviewed by Greptile}

[cubic-dev-ai]

No issues found across 3 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}