chore: release v4.7.6 (#5042)

## Summary
1 new feature, 4 improvements, 2 bug fixes.

## Highlights

- Added MCP tools for monitoring alerts: `list_alert_capabilities`,
`list_alerts`, `create_alert`, and `resolve_alert`, so an MCP client can
discover what a project can watch and manage alerts directly. Health
capabilities expose customizable threshold params, discoverable via
`list_alert_capabilities` and settable via `create_alert`.
([`99ea13007`](99ea130))

## Improvements
- Deploy images no longer trust the emSign roots removed after the
October 2026 eMudhra CA key compromise, or the Sectigo AAA root that
cross-signs the compromised intermediates. Node and Bun tasks now refuse
TLS connections through the compromised eMudhra intermediates, including
their Sectigo AAA cross-signed copies.
([`dac3b033e`](dac3b03))
- `NODE_EXTRA_CA_CERTS` set as an environment variable now reaches the
task process at startup instead of being overwritten by the image's
empty default.
([`fee21c38c`](fee21c3))
- Python tasks and `pip` in deploy images now verify TLS against the
image's trust store instead of a pinned certifi bundle, so they also
refuse the compromised eMudhra intermediates.
([`fee21c38c`](fee21c3))

## Bug fixes
- Fix `timestamp` and other `Date` fields being logged as `{}` in
structured log lines.
([`7a5a1f144`](7a5a1f1))

## Server changes

These changes affect the self-hosted Docker image and Trigger.dev Cloud:

- Ask Trigger's message box is now a single panel holding your message,
its context, New chat and Send, with a note that Ask Trigger is an AI
assistant and can make mistakes. The chat header has a simpler layout
menu and history list, and the Fullscreen layout is now called Full
page.
- The webapp Docker image no longer trusts the root certificates that
chain to the compromised eMudhra intermediate CAs, so connections to
servers presenting certificates from those intermediates now fail.

<details>
<summary>Raw changeset output</summary>

# Releases
## @trigger.dev/build@4.7.6

### Patch Changes

- Updated dependencies:
  - `@trigger.dev/core@4.7.6`
## trigger.dev@4.7.6

### Patch Changes

- Deploy images no longer trust the emSign roots removed after the
October 2026 eMudhra CA key compromise, or the Sectigo AAA root that
cross-signs the compromised intermediates. Node and Bun tasks now refuse
TLS connections through the compromised eMudhra intermediates, including
their Sectigo AAA cross-signed copies.
([`dac3b033e`](dac3b03))
- Added MCP tools for monitoring alerts: `list_alert_capabilities`,
`list_alerts`, `create_alert`, and `resolve_alert`, so an MCP client can
discover what a project can watch and manage alerts directly. Health
capabilities expose customizable threshold params, discoverable via
`list_alert_capabilities` and settable via `create_alert`.
([`99ea13007`](99ea130))
- `NODE_EXTRA_CA_CERTS` set as an environment variable now reaches the
task process at startup instead of being overwritten by the image's
empty default.
([`fee21c38c`](fee21c3))
- Python tasks and `pip` in deploy images now verify TLS against the
image's trust store instead of a pinned certifi bundle, so they also
refuse the compromised eMudhra intermediates.
([`fee21c38c`](fee21c3))
- Updated dependencies:
  - `@trigger.dev/core@4.7.6`
  - `@trigger.dev/build@4.7.6`
  - `@trigger.dev/schema-to-json@4.7.6`
## @trigger.dev/core@4.7.6

### Patch Changes

- Fix `timestamp` and other `Date` fields being logged as `{}` in
structured log lines.
([`7a5a1f144`](7a5a1f1))
## @trigger.dev/python@4.7.6

### Patch Changes

- Updated dependencies:
  - `@trigger.dev/core@4.7.6`
  - `@trigger.dev/build@4.7.6`
  - `@trigger.dev/sdk@4.7.6`
## @trigger.dev/react-hooks@4.7.6

### Patch Changes

- Updated dependencies:
  - `@trigger.dev/core@4.7.6`
## @trigger.dev/redis-worker@4.7.6

### Patch Changes

- Updated dependencies:
  - `@trigger.dev/core@4.7.6`
## @trigger.dev/rsc@4.7.6

### Patch Changes

- Updated dependencies:
  - `@trigger.dev/core@4.7.6`
## @trigger.dev/schema-to-json@4.7.6

### Patch Changes

- Updated dependencies:
  - `@trigger.dev/core@4.7.6`
## @trigger.dev/sdk@4.7.6

### Patch Changes

- Updated dependencies:
  - `@trigger.dev/core@4.7.6`

</details>

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: github-actions[bot]

.changeset/distrust-emsign-roots.md

@@ -2,8 +2,8 @@ apiVersion: v2
 name: trigger
 description: The official Trigger.dev Helm chart
 type: application
-version: 4.7.5
-appVersion: v4.7.5
+version: 4.7.6
+appVersion: v4.7.6
 home: https://trigger.dev
 sources:
   - https://github.com/triggerdotdev/trigger.dev

.changeset/monitoring-alert-mcp-tools.md

@@ -1,5 +1,12 @@
 # @trigger.dev/build
 
+## 4.7.6
+
+### Patch Changes
+
+- Updated dependencies:
+  - `@trigger.dev/core@4.7.6`
+
 ## 4.7.5
 
 ### Patch Changes

.changeset/node-extra-ca-certs-run-env.md

@@ -1,6 +1,6 @@
 {
   "name": "@trigger.dev/build",
-  "version": "4.7.5",
+  "version": "4.7.6",
   "description": "trigger.dev build extensions",
   "license": "MIT",
   "publishConfig": {
@@ -82,7 +82,7 @@
   },
   "dependencies": {
     "@prisma/config": "^6.10.0",
-    "@trigger.dev/core": "workspace:4.7.5",
+    "@trigger.dev/core": "workspace:4.7.6",
     "mlly": "^1.7.1",
     "pkg-types": "^1.1.3",
     "tinyglobby": "^0.2.2",