chore: bump pinned Bun version to 1.4.0

.github/workflows/core-ci.yml

@@ -50,7 +50,7 @@ jobs:
         if: steps.filter.outputs.code == 'true'
         uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
         with:
-          bun-version: 1.3.14
+          bun-version: 1.4.0
 
       - name: Cache bun install
         if: steps.filter.outputs.code == 'true'

.github/workflows/docs-linkcheck.yml

@@ -51,7 +51,7 @@ jobs:
         if: steps.filter.outputs.docs == 'true'
         uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
         with:
-          bun-version: 1.3.14
+          bun-version: 1.4.0
 
       - name: Cache bun install
         if: steps.filter.outputs.docs == 'true'

.github/workflows/release.yml

@@ -31,7 +31,7 @@ jobs:
       - name: Set up Bun
         uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
         with:
-          bun-version: 1.3.14
+          bun-version: 1.4.0
 
       - name: Cache bun install
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0

.github/workflows/security-deps.yml

@@ -100,7 +100,7 @@ jobs:
         if: steps.filter.outputs.code == 'true'
         uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
         with:
-          bun-version: 1.3.14
+          bun-version: 1.4.0
 
       - name: bun audit
         if: steps.filter.outputs.code == 'true'

package.json

@@ -36,7 +36,7 @@
   "packageManager": "bun@1.3.14",
   "engines": {
     "node": ">=24.0.0",
-    "bun": "1.3.14"
+    "bun": "1.4.0"
   },
   "devDependencies": {
     "@ast-grep/cli": "^0.45.0",

packages/core/package.json

@@ -23,7 +23,7 @@
     "strict.type-aware.eslint.config.mjs"
   ],
   "engines": {
-    "bun": ">=1.3.14"
+    "bun": ">=1.4.0"
   },
   "publishConfig": {
     "access": "public"

packages/core/tests/edit-autoformat.e2e.test.ts

@@ -39,4 +39,4 @@ test("a pre-format edit anchor survives the real write-guard auto-format", async
   } finally {
     await rm(dir, { recursive: true, force: true });
   }
-});
+}, 15_000);

packages/core/tests/script-tool.test.ts

@@ -394,8 +394,13 @@ test("the output drain is bounded when a backgrounded child holds the pipe open"
     // stdout pipe) then exits immediately, so `bun` exits fast while the orphan
     // keeps the pipe open. An unbounded drain (`Response(stdout).text()`) would
     // block the whole 5s waiting for EOF; the shared runner bounds it.
+    // Fire-and-forget async `Bun.spawn` here, NOT `Bun.spawnSync`: Bun 1.4 made
+    // `spawnSync` with inherited stdio wait for everything sharing that stdio
+    // (including this backgrounded job) before returning, which defeated the
+    // simulation — the script itself would block for the full 5s. `Bun.spawn`
+    // launches it and returns immediately, matching a real shell `&`.
     const code = [
-      `Bun.spawnSync(["sh", "-c", "sleep 5 &"], { stdout: "inherit" });`,
+      `Bun.spawn(["sh", "-c", "sleep 5 &"], { stdout: "inherit" });`,
       'console.log("SCRIPT_DONE");',
     ].join("\n");
     const events: ILoopEvent[] = [];