Skip to content

chore(bun): move the pin from bun@1.4.4-canary.20261108.1+2596ac5 to bun@1.4.4-canary.20261109.1+2596ac5 - #1654

Merged
oddharsh merged 1 commit into
mainfrom
chore/bun-pin
Nov 11, 2026
Merged

oddharsh merged 1 commit into
mainfrom
chore/bun-pin

Conversation

@aadhar-sh-relock

Copy link
Copy Markdown
Contributor

config/bun-pin.json moves bun@1.4.4-canary.20261108.1+2596ac5 → bun@1.4.4-canary.20261109.1+2596ac5.

This is a build change wearing a version string: wrangler.config.ts builds with bun tools/build.ts, so the pinned bun is the compiler that mints every content-addressed /a/ and /i/ URL. Nothing else in the repository updates it, which is why this job exists.

  ok   npm carries the release — bun@1.4.4-canary.20261109.1 published 2026-11-09T14:15:49.551Z
  ok   older than the install policy's window — 51 h old against bunfig's 24 h
  ok   the tarball and the binary both name the pinned canary — asked for 1.4.4-canary.20261109.1+2596ac5, the tarball says 1.4.4-canary.20261109.1+2596ac5, binary revision 1.4.4-canary.1+2596ac5d3
  ok   zstd honours `dictionary` — 73 none / 24 good / 73 wrong
  ok   reads the committed bun.lock — frozen install resolves
  ok   writes the committed lockfile format — lockfileVersion 2 / configVersion 1
  ok   bun check agrees with tsc 7.0.2 — 8 programs, 787 diagnostics, every one identical
  ok   build output is byte-identical — 2776 files, pinned 7.6s vs candidate 8.6s
  ok   contract suite passes under the candidate — 1777 pass, 0 fail

The byte-identical line is the one that matters. One differing byte re-mints a URL, orphans every src/dict/a-dict snapshot naming the old hash, and moves the CSP hashes documents are served under.

What 2596ac5 carries that 2596ac5 did not (0 commits)

Reproduce locally with the pinned bun installed:

bun run bun:pin --from bun@1.4.4-canary.20261108.1+2596ac5 --to 1.4.4-canary.20261109.1+2596ac5

@types/bun is dependabot's and may lag by a day; that is a wait rather than a fork.

Merging is a human call, because main takes no bypass actors.

…bun@1.4.4-canary.20261109.1+2596ac5

Every gate green: the zstd dictionary capability, the committed lockfile
in both directions, a byte-identical build against bun@1.4.4-canary.20261108.1+2596ac5, and the
contract suite under the candidate.

Opened by .github/workflows/bun-pin.yml.
@aadhar-sh-relock aadhar-sh-relock Bot added type: chore Maintenance with no behaviour change area: infra Declared Cloudflare state, wrangler config, pins labels Nov 11, 2026
@cloudflare-workers-and-pages

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
aadhar-sh 909fe3b Commit Preview URL

Branch Preview URL
Nov 11 2026, 05:27 PM

@oddharsh
oddharsh merged commit ab34177 into main Nov 11, 2026
9 checks passed
@oddharsh
oddharsh deleted the chore/bun-pin branch November 11, 2026 19:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: infra Declared Cloudflare state, wrangler config, pins type: chore Maintenance with no behaviour change

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant